Analysis

  • max time kernel
    140s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 02:13

General

  • Target

    9038e5730cff0c33a06fa91cc936b993_JaffaCakes118.html

  • Size

    72KB

  • MD5

    9038e5730cff0c33a06fa91cc936b993

  • SHA1

    1f71f0ec7c40fe9e8be8b6c10e067e5137092663

  • SHA256

    f87767c516b9f5704b9b4279c745e9800e8a342b686541ef7b8ccc9211579f08

  • SHA512

    93ee708acc87b51059c558c76fcb5b2c28f4179eefd359be02f8f7cf68ab2c25c509576bf8d25f9646f576bb8693bf9ab4aa43d4763e6ad21778dead02de38cb

  • SSDEEP

    768:JiXgcMiR3sI2PDDnX0g6sM6FqJ3J3+2oTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpq:JLiJ3JgTzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9038e5730cff0c33a06fa91cc936b993_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1976
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1976 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2344

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ab2d8439cfb21751cdccd32e8529e106

          SHA1

          7ff8fb540ac4d372ea8215d0127e89eee3367bfb

          SHA256

          6797aad571cd3a404292be924ee168202ddf4470d94935a3ef3f930329389c1c

          SHA512

          2380c56bbb5ffd5f4d7af2d1b3d61e20ea27f277e579cc1f69de209ca7b4242f31ae517688be3297e72e07cb6b28667ce4aead8125fc831743ac8f7171071049

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1105a39e2fcc7bae8984419f2ce157ee

          SHA1

          909c55494aefe7613629bad32b6a83c14613082a

          SHA256

          5c316ad6c36282307fe163f5a05ab4902e75ce583f71cef4f76472ab411c18d0

          SHA512

          76f66021b88b31ad66a8fdee1cfc8daf7d4dddea540575738fb2a5fa2d1e0e50c3a1dc875d78f5cf11547bb13529b91dd91ba1dd1fbfc91b84a9c8a3c668af3c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          93e4334751ebe464d98e18486b334e5e

          SHA1

          93e8b4cf596e2a8fe543c24f5e6cdf9f94e7fd3f

          SHA256

          7611753503c9eee87b6f127c77448cf6185f38ed811f491140ebf00678fb3906

          SHA512

          2a1970ace1b11ee9a6fd18f063e1840a4aae342b00aeaed96984c2d7c1b7744eb5c18a82db89ff18e73c03c844338534f7b958b6646ade1570de2bf83b25bd20

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0ee770c868efff16dfd0221d363246bd

          SHA1

          6cf9698425e354fae5d2ae77b72eb05edabc4138

          SHA256

          434d9144b04f100574d3a9a8d5e6c7e8cb64e7192d4736aafb2d57ff1bdd6871

          SHA512

          1ee1bf59307a913def10d687960a7b3e3041479811eb42c587af32a983a0f2caae918670dadb45f4ad98e14be8ffa702f9ca3f21c9a5efbc81828a3b168413fb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          13ea427b109b4958db15849839c34d08

          SHA1

          7391b5bb85032a9d44c48b620a5f84260a9c7c8f

          SHA256

          66088794e0321fc411dfe09fd287fec0c40e316802e2e0beba451ef932c70e64

          SHA512

          823833af1b02569b00fb842a02fde278d676867abeb4d755c97256eee509708a98fe865d89cf43e0fbfa989f465cd44ec1d8fda95b870ac3fd89e2f2b335af01

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6b1145aa2da258c023784223bcc8dab9

          SHA1

          12aa3125ee81408fc3a7326809dc656d8add5180

          SHA256

          cefc32385f2e6f732ec523f747ef69a64ae4201dc89b69dc172e75bb7715b31a

          SHA512

          3f6668d813715f978272641be467bd26ac6f6bea8991d31252147c7ea7c39fa4c8878d70b1dfcb3182f60f88a0e18c332ecb9a4dda81bc010e404d1a3d74d1db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f6022bb65eb79982eb17374ad1964339

          SHA1

          6dd813adfc994a5169fcae26b0dee2e6613a4cb2

          SHA256

          71ecd3380a0f5ee782d94ee56ca235669d3cd66b4f9c25cade8768ff5271c674

          SHA512

          5b56544b9207ab74f64b93ea14d9de1afa20feba0855ca53ea2b914facdc610ca30e852b73c89a3dbaff47bbd5cea0e0033916996a1e4701abce21a0e3f90240

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          192d4b020853db9c24e880727d6e6ce3

          SHA1

          7bfee6a21b37c1e6a4518b0176f7318db4799bba

          SHA256

          2304c8b86d235c1bf53a888abfd13ded45a3dd79eacbdbef32f75ad452311904

          SHA512

          560871adee67208fb979ffadcab5ec53e9c0af2a29692f61922ac218788c738a1cf5481ffa835b307d4ba5366a4893be355131b6be4513d40440e3e6ae7db273

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          afa677e2852e933eea569a84f0381be8

          SHA1

          8816f9af619ab9bccc5f5423cb851b2afab06a59

          SHA256

          8e14e1569be7b072245bb7f65f024838f79bfbf140466447dd4ddf1c922b7582

          SHA512

          14fca2d1bc69a36ad0ffc95b66073a73e6a01dc30977a1b4895fa3e6adca8b21178bdde8385f5d4a171e22d929ab5194c320bd566c0cac94b02be5538ce356a1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d7acc5acb92f28d9f84b76bbef134425

          SHA1

          9b79062f1bebff409f0e3675c2cd1cb0950f2dc0

          SHA256

          748aaa0343c8d14771758291149e53526fda65e7a7f304b3724b36b7786dfc81

          SHA512

          c8842c1de944b5b5b8884096a2c331db465e464aea6893d0a3a31d2c7a8df3335a9342247dc82d3cc0f6725247a21ccca57ee4ba817ea443c14370caea1607d3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          367b2564f641144c3200b397284c1d32

          SHA1

          dd538c742cffe49a9472c090fa86ce2ba14a3bdb

          SHA256

          2a622afda70c4d7b9f7d0875880e1b1fc0dea54231a2dc1b6ec8b06d3e2db37d

          SHA512

          7a891dc72a5079e4ba968c8753a2a563d7a957c0a2f77bbf7cb934a698c9bd843f549a8804d076d4ece32dccf3fddccbe12014c9c76ac17cb6b0b66e06dbe928

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e27001697b2d3712e3b0805744a9ae47

          SHA1

          cbf24c77d18eaef40b42c212b2bf846c2e38b6e7

          SHA256

          b7a2ade01be5c3ef86e2fbb1fd19bd671e052dc50f20fd3bc3ab53a1868e5bdb

          SHA512

          a9aeee01e41a17c06f2589ef199a1c2dda70fea0ca998d42e57b0addab4e652e0d2b17cdd0c4ecd2ff86a0b19b2100301c3f9c94c1d1056c1a19dae101637344

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d85a174bed7fa87d92570a5f72de3749

          SHA1

          90731495b15dcf8dfd208a9e809f3d485d4f53b5

          SHA256

          6907397e2dc000221a98ca36920f0a76a05b18b7ce9c0d8d8b94fc2298715ed7

          SHA512

          0e11fee2f4e232d475e02f1cacb06d3345051a4d7bcce2dd35fe59e1df6589fbaf210170477662067c5d864aff1d31839e49b8c5472008a6ab0bf65a972886e6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          201f2f653ce14c55ff76ace448c252b5

          SHA1

          6d254309ade9bac0bb3c2de355534318fe0ec796

          SHA256

          a285ce89239b97f28b8d1730b888f3687749c7e3a7a632eb508220baaeb384a1

          SHA512

          c6ec5ef2812b137c8c3f5070f147619ed527e970a3bf809d5d57bb6a7ee0b4af6b101d0bda2d329b374ae584fc8ec2d2ef1531bf88a557b93511a1936b21d3f3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c2c0ae620f3287ebb69d8deec80e5014

          SHA1

          10cc3a2c2200ea0bfdbabd083c0e3bbb5c814ab6

          SHA256

          60363a3a96ee29e82a312db1e74ecdc805e408288c06886d390f846781483214

          SHA512

          8f4cb7276a36e7629d32a086f43cdfb912b01fd4aa57b585c3f3ad78634421681fb99776fc5d5ce66daa790059f56d8f621b78b8be3dde3ba8cde1f15da31d35

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d00bd6cfbe96689ac3685d5752308f5a

          SHA1

          6cd7898a8fbdba33c07793c159a74b7b523654d6

          SHA256

          707c7f512cd90835cafcf62cb970a9158d201bd939f0e048f1009e0d4962808b

          SHA512

          e0bcaf5011f1f212d56c6aaa785263b3fdb53d2e291705019b8ede16a4a0eb69c0e2051e5b05ba25cb89a36a3144cd1e414c48ec08e168ecbcf497b471ee3ae0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a69e3a3edf46cdfeebee718494026ce4

          SHA1

          416dd886607b9ae2010ea649274e19559cba9fd1

          SHA256

          750bcb619d86321cca5bec2ac78677b9922ba071e3b4b76b31385e3f6b370a27

          SHA512

          9e3d5df81187db77c06f6a26912f62c277a1f28cccf0867a103e4afdda7b2c02ca5d0697d40fa2c81b90747c4523510ec34392c70f6839ac55690ec1d9af96b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          448cf75edca0d25377fc32497db42542

          SHA1

          599c12b15ffbf6e671b6d3d26f8965fce2dd50b0

          SHA256

          7647b7ca3a3061469a51d16b31e883d5b01e6436ef8167cfde2dec463568aaa6

          SHA512

          ff76457e5fc4ac27416d81b2467463e1a3d2a9da211cff93d65dc8647d846bb14d6caf4a5d025a39d26eed68d7b902b67ecfcddae4a0f6dc4918749984f6afdb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f315e971e19efd605bd053923518aca8

          SHA1

          1df73ffdabab8960d252114f63721c7fef571641

          SHA256

          2534f8a42c25ac07a45ea21d7298eb029f243b18cfff6bb3ae942f9d828f6f0d

          SHA512

          b6a5cde6e30936161ea002195b64c11c695d6f9551a84b2d2581dc72f9d157d22c14dcffb13182cc8450929af0b2cc5b6347d753808f221aa00a28ed11cc01d3

        • C:\Users\Admin\AppData\Local\Temp\Cab28A8.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar299A.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b