Analysis

  • max time kernel
    125s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 20:23

General

  • Target

    99281083fccfa2320d09a9e972560272_JaffaCakes118.html

  • Size

    38KB

  • MD5

    99281083fccfa2320d09a9e972560272

  • SHA1

    4edfe839c887c37f312be10ca3bcc39f783b0f55

  • SHA256

    107a889ef4cdbd8acf80f7fa35e91748d6adf24be1767a80cfc1ee35de3fcf8e

  • SHA512

    d23be9ca3f5af0c1c9464fe26fd3e164359db8d59ea8ef8cde5126c0ca1c7196fb0899fa35d99787526b115e56a01ec8b7a1e6610fb9d2997933ed7e5f458d97

  • SSDEEP

    768:q2riI6/pbozrjyatv1x/tHW4IdU2pS7JBTfTk2riIsUr2N:q2GHVozrjyatv1x/tHW4IdU2YXDo2Glf

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\99281083fccfa2320d09a9e972560272_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2412 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2644

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5cc231b07c2b8afc9e074a8c91bdab99

    SHA1

    626c0bd5efe834f72e99f774dd7f73d741a76f1a

    SHA256

    f1ab349339429459be18998b51ea56cb654e2cf9583cbeb3a331aa98042982bf

    SHA512

    7c0ab217bc43f0660a8edbbb618118ed955ed549b5b7a53b33fe28a25632f0427bf5bdd01a6a46e8d7cf17219773d7c57f6909210a92e8c1f39224ab45b4f409

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a361685548eaf67574fe4e7a346450f

    SHA1

    93e4a1f6e1cff4e0b498acf803aae9af9aa2a9cd

    SHA256

    2193dd21c233c5bc2264e76161362d012e6ae42b74e9bd12a71e1605a3522784

    SHA512

    007a9245b38bc15b072dc7dd1efdd69fc2b8adec1f2ca386be899641f8b027a6d27ab24a3cf13607a4e3258a10a420bd94338a15f66fe33f7f63128f3254c47c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f66bc52e020c496fb847162d6601ba5e

    SHA1

    c7424273f518d1e648782370f9d9e863fdc62689

    SHA256

    3d3cc76874c1c7c73f0f94e332f04230a4b34fe9d56c3d083d79e6d78b02e482

    SHA512

    129e2f24f05b6a0e20c0d97a95e44f3e8a289569c03b98e911fa73a43a6fef50e20c42c6a2757896631a21ab44554b2518e48e7fa6e9741cf896e5ea0a638e68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e97543d8137d4afbeb9f188693f90c54

    SHA1

    e987a4767d70ccad0e3d4dcbb7a573facf057713

    SHA256

    994b55e5ebef2b0fd7ceb12b1687c005c8a10f0c95a35020df147b765c5ef729

    SHA512

    8f53fec98d722110f45cb6aaa20648d8ee365fa13f048499c37b521668f5651bedaf9a8416c7e7e31c818af486d9091d093e093acfb79b87001c596edf7e6650

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2a5f8deac398d3148f2c3d160f2182b

    SHA1

    bc69ce91d21178a0e3b41411f0c59643be932ec8

    SHA256

    3a866a4f789e4d69f0dfe82ab132a5c6bbf535fa0539eb8d2cc77e0782b00128

    SHA512

    3fadd0d6aeb800c8fe7ff6abb4a0c8b348065ca962d07cdb300af1fe13717383c9052c20e9e10c5c0e101d928ce3d78b9b8efa3a3421511227159d2f051b19be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb843cfc070e7b6f2d9fbbc086e5ce97

    SHA1

    89d33ff38088bb07cc9fd8904b973a622361c3a6

    SHA256

    dae1d01a6a1c12c67d07de265506d245f61beb7169da967e3a9eacc3ff221817

    SHA512

    b0624fac25d15b385e23bf6adf26478ea58d734c32e63e4f358fcec04b8a34447ef71f16c00f46e4dfa3fb1a2a8e29d8463828fad0709936237fe0f74e9c669b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de303d5976cf657d9b0e7b4e749ae0c2

    SHA1

    14881a98008efb16a83ea56bf81fe9a060975f74

    SHA256

    31c66eedc10de08310b1428618701e1e9c1085a57ee4d2e73cdac2b5f46ca19d

    SHA512

    28840a65a9a265ecff7d514ea10338c9a1afb91e3f6666aced52a151c8ac7cf70cbb5cda2c19bc229b89ee2fcdda0396ce0425f235dc854a73066f3451bc1857

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c997cda125f38f6792f4ca277478d789

    SHA1

    ba3dcab29b3278821ef5b9e798539a221b61e852

    SHA256

    f681d323dedb934a382a87148ca8d7c026c68e0196b6469a2fe381fc497c0f97

    SHA512

    dfc76c574cfb4e5a0c34990c7ce82c20d0249fecc1c7017573b02a0b7301d9c86e0e3f549c294e50804bf4571ab0f7815735f60d7bd69605fb2b252108df01f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4550be7c8ecf0d33bf490a2f05f96f6

    SHA1

    3f337f4faeffe2a2233d7aed70bd701d129ab7dc

    SHA256

    c736dd7e32e50ec703c237bc44444f2e713fb980930db3d3da815fbb67083032

    SHA512

    332107ed6a3996d02d199727c072e088e6b38e76dd548cb85c0044724d03ab5e9d139bdc693e01d5cc567d7b38061b0d7954bef8ee82b035496807fce859ef62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff7f81c8bb7dda709c2f7452951d59b7

    SHA1

    bc9dafc5ba067ee8ffa1fbf8f0a76f3b2914d11f

    SHA256

    6643a2a1d86b5325ddb3572ede75976a26318395da0980549ff5177885ea2ebe

    SHA512

    86ad77fe38bdc3151a387ba73074212a836a7e7724c3db70179572b0bde847ca7ff1d5c01396561634e270fe36b10ac89a6bd5df585e56745cbc9396345ed837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6f0a88c660630b45a1c0792451f040b

    SHA1

    ec5a883696479ab540eae688818e08c07316e504

    SHA256

    c64d58d8e572aeb789126482762cd02b48350de02d5a0a9b2cdcfca8385aa70c

    SHA512

    012128299ce793869d953178cc2a16124f8f57615b20590895cbadab1829a7a839e776c038878880ae9cf5438e61f9ec4681f470ae0867c326eafe3ed035b770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f55a8f294c5c4f1a9d5782d6d59ad573

    SHA1

    8fce3b5d91cbad8311771ffa1034df56f1c1edb2

    SHA256

    7beb0aadb73860e33070538b109da5377a75de337ff85460683541691c3971b4

    SHA512

    0a14a4b549baf6a2e6587a97120dd6c8c5fbbaa5a8b9bbc59824321fa1850a6fa1cf03d9ad8be698bbb614ec83f9adf014173ffa554ab8e414076bedb625ab09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20741dc8d8c308a6513957c08f060b3f

    SHA1

    d2a8b59d81616fc87ca49917424ca6e48b98d4ef

    SHA256

    a494b46559eab3ffe7d86d253965aa61a08a8da1fb199dce1b1ee00867a0f243

    SHA512

    49f87b089c30f95fe157ce2a5a8961b59a05c70a76d2f844d0f6117667b4d8474d1446141edc286386bc096b8c8a48aeeda6afad897f16a7f23f52bc1baf4ebd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    430264ce91897f9c1d0a564325a8aca2

    SHA1

    04732a75ae7c1e237baaeb3d61b288b4ebf05c98

    SHA256

    0f29d101a82e7a86c0ce75737659d189ea2fe9267c4d6c787c8e13376caf6fd7

    SHA512

    55149b8e2840ef7e6db33f23f97726fbf7592cdc201c6cd70ad10d35c7b628b0a44ee51db3b58ed44c1919fa2b5829ba29abc094278540a6675c367e7f24fdd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b88cae5ad0e27aadc51c17754d86109a

    SHA1

    fadbfd5b72a47a717ab4f27322b6c9ea687b002b

    SHA256

    dc923f7dab36799284dbd509f897783f05ef9eec8e1ba3ed1ed34d3f386fb1a3

    SHA512

    815c60b18b2340e015e42479dee25533ed2472cd2094e9d28bef39d61060be46261828ad8c72c88448bfdaf3f47625151a0204ec7b327825ad280ea0fd1eaa93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5475007f085616fcb3552f83f97dab1

    SHA1

    e9e312fb4a38b31b6923f9578f8e2717c734641d

    SHA256

    864e6fc5f82daec1b77759d7eb7b03b6a4edfa7073276fc67f08040505644de8

    SHA512

    e0245fec663066a6670d12b5ac08f87e8b7c0f6ef705a65845ea1bd4e5190a2d0b274bab5aa56a53e4d54004dab002bd2f15e3d628b499aa5e323c5f480f3269

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a7dfa095aa813b868bbaafd3e8f987a

    SHA1

    a3c4576de41367b4cb585e8922d626f83d080888

    SHA256

    8854663862aee0c25c0dbdde8f95eb6799ff08e72a39969fe44f93b136d489b7

    SHA512

    6d1d3b1be7a04a03a24a1a0327b4b705a3b0685588176680c70dff7b22b5e916b5c617b441af678da1d4dabcb440cf7e6707474b7a8f3f71aea22c70a57bc5a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ab3d35b49844e5a4b027d1760af5370

    SHA1

    33b24a6c24ce084c998c792fca1ca381f8cfeff9

    SHA256

    10094a5c433fdd9e157f87d7444d0b20c6c06af09deb986ac29fa96ed3e00b8b

    SHA512

    38a213d94069999e2bbc1c910c15245a1ce0c4b447f1a7961c7918cd2c29924e609b538c2864450983bfa4cecb1ff5987ba02b52d4368c2c7734945603aaeaee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3323058a4ce938afa90df76fc01e696b

    SHA1

    e0093a069eb4934837728f014777476abeafdb27

    SHA256

    2f6a0a1fcaf601deae4afab1da59450852307f36c464ca450e9f209250384156

    SHA512

    d59a5d8caf305da9af270e50748ac3e5ab6ca68f48c513d11f23464a571c392ca8cb5a3065c98b200078652e41477b21815bd1633cd1ad808f21ae55f92d43f1

  • C:\Users\Admin\AppData\Local\Temp\CabE34.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarF07.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b