Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 08:18

General

  • Target

    a497948f12051894aa19a200232a9b53_JaffaCakes118.html

  • Size

    21KB

  • MD5

    a497948f12051894aa19a200232a9b53

  • SHA1

    4ecb9e2aa3246eaec5009f65558db69d23bb2929

  • SHA256

    232aa9d102993227c9a65368dd5c98e2a0891df5debf6b142e35d81fcf9ff4d0

  • SHA512

    a8bd9035b20e7141734ddfa4eb7b40da06102ff91f75371a858f30c6f95156375446f1cff3efa462467f8a7f53ae8a0ce633d5c04c539f3ed9bde510f408c906

  • SSDEEP

    384:zihKcRAa5r9DIiXbWVBD8c03RrhGK2cmEfP4ycbp5yzVcrEDJZTO4uk:zi2a5r9DFygc03WXcmGP4yv3JZTO4n

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a497948f12051894aa19a200232a9b53_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1724
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1724 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2916

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f96479c71c856523f80f2dffef0ed2b3

          SHA1

          4f952d95492f0fb19a8905bf40a0d6c785b989dc

          SHA256

          9918d1b922e28a60ba8362ff621ec3d6905de078e9135190e47d022ed121120d

          SHA512

          72e61044d55d6f0eb540484b3be97a1cf1c4cbbb6c6edd4fe3f622e2e51a7949d02cf02c7c4b8b355100dbf563add466bdc2c8167c10d2b724cae4eb9d7c0e6b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2b34100c04532e0a40d8afc0630affe8

          SHA1

          4b449508b9abf43a788a44325c16978691720272

          SHA256

          035a5ffbea897c3020e28d0f0b9ddf758929f87365b535386cde03ad366d01b2

          SHA512

          e1218ea7ce94bc14b396313f1ebca20bd52c848c572857a74a911a09059874ab6ebe5809a06bcad492270ce2c2bd50a7f1dc1e032de75425036986dfb7330655

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          63b80fa72fe54f34d81c9fd4104eddff

          SHA1

          fbd382b274cae13f3569806e84722f60c6105f41

          SHA256

          6a8784787e7557ab0bf0db632ff2c87bbc1ec0b829e08ff35679e30cd0f347df

          SHA512

          f74b33d603e29dc7f909553d77cf6a968f00b3a7140ee8ba4ee21f6532de738586de715445a18a3183b3d04f930a32ce914c479be17e7e089b91ff76e3103d5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          26bdd01d68edf32f25f37b291850cfc2

          SHA1

          8664e9f53033658886af5f4bac4f8dbe8dd14a17

          SHA256

          8e00ac818025a2e37cbc95f830f9762aad3701e160d6e46f82c24538982b9c52

          SHA512

          583251ac6e7404327fdbfe0e9a57a578c8b3a216ad21015d4352cfd18aa54ed18c527a0473348217d8451f49e304997f094f6d107063470a3c74cb7ce96a0192

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0a14eabcb6826ee822033cebad661643

          SHA1

          c178d2656e85e9b30bb20a1343380fc2ad671862

          SHA256

          ef32ff9435cbbf36b5040432ccce1fbc741e4480bcc50b2d6c9005f3de3227cd

          SHA512

          38fea33911859f3ba28bb7b4b178cff96ce48cc2bf580590feeb661b0d677ce7cdbbade67761e1d138b67e111f4b795157b11873958578582cbcfda6840facac

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d8d827ca9f0d37d3572455516bc26bca

          SHA1

          ed6baf409a5c96092a7af35227e7ff7935a0c1d3

          SHA256

          d2bf7b8480e6655eccd9dfed3c9fc12e44a661765627ab8b25b825e53c5879d3

          SHA512

          3049b75fa160b57c140c1cb9f6854eda92c7fe4249389d22d40f23af5a6cc0ff39fdb21317dc04452d92b341fb944225a3ef70d6047f19beef53b8b690d15e14

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7685ee3a77446a7fd6de73596d58abba

          SHA1

          96023f19e2a5000784c98dac0ae612dd5061fec3

          SHA256

          3821ef1146badf473d93b2c3895a139d0da6e0b6ae836b913b65aa69bbd648fa

          SHA512

          99b69a6a560af1c44c660a6c5abcd4252b44129178ca2846785096e61530b2d3c01e2aa2a9d17b4820d1dce9b9c5af99b516e042400ef5a678db7c1f3748b770

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e249f12c77b70a07e8f5bc92de3bebb6

          SHA1

          903b92479623a6b87a417b549139dffa05c06ca9

          SHA256

          aaeb841082c99183ce70b720a2655415620e8816d74d77e2f3909647f2bfc055

          SHA512

          3a1990142b980958dd3c5caeb4f55d74160fcd7a62a654efb4e20b9e156b78b5c9ea07b76e4e8565d372668f39ad5b27b9c05e05368448264d0be81e00d0f867

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          462cedd5102c5c96555ae822ccc225b8

          SHA1

          1c225d35cbeeb0429e33c6ba5bbf0b4c51401abe

          SHA256

          762ef30ed8d8325953e8fd16ac17d82d30253978a50719e61c9977548d99030f

          SHA512

          e82c53912907daf745e708a3208998615da7e073c5143e3d806691e6b824ac9815733eee9abc4274370f55661472b79c1eb192e2374a23cc5b22e4e54c17a13d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a50341a70bfb71e3f88dda8af6c887a5

          SHA1

          e279d9b51ac958e546b754e08163d8d6af8708e6

          SHA256

          29e45c6deded4af33970995e95206daabeaefc77fe4c608203d23201454314a5

          SHA512

          4e567b399cd477692f53b3b3ffd6a28e037a3ab3e3f4ecc1180adf1505d29a3ed498869bc65e1215b2bc2fd7bb91ce5ce7dbd501b6546ce0611f7f7cb3115a61

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3963c8439df50a99010c324d91f2ba4c

          SHA1

          9ad6ac234186395be1ee637151464355436ec107

          SHA256

          034d0dad3bcd959f431b3eaafc0aaa05b02ea65ec9b5b37697a9586e1c34a949

          SHA512

          16a368a6eaafb868f4e7fab3571537140021a8e16b47c8c673e9ddbbe9833c0afe815282193769ce06a513ba25925b48c82ceae7d7c47df9a2564ec71c8a8607

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a158356811e6d597691f1f81cfca2548

          SHA1

          6503f1a4ed33291f11725a7d1f4b1fbfaaf5fb58

          SHA256

          4eee140ef1bc6a756d0cd338e87c289b12e6338edd55b632d26770723a5762d5

          SHA512

          695f024be5757bc3a30e42d7f32e99965a555ba09a57722a2d2bda67a3628fbabc0246a8c805c65f5da7066b7001887813ace9683c64420bf43c7166d22f4371

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d3fff85bef2ce46dc15ba6f8a865b499

          SHA1

          aaa57b8a9b2bafbf952bba477373a4a1ab780ff1

          SHA256

          d7076d616464aa5b59ac9b6e37c5148cb6a68766de363a445ea4d90ec97f1c68

          SHA512

          f0b91aa53f4d0f57c9b74e1290833f5cd9e2650726bab728b1890b7439311fc3ca9659419ab880499175425b130be161000998513285286273ffb86daf296425

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5d8b589877cd91abe0dce85f3218e0e7

          SHA1

          b401149d04c9e795693d3c21a2f7df5d121d399c

          SHA256

          a837ab6578b96096352cb2470e63adb490abfcac2f502a5166b0b36e37fd81f9

          SHA512

          dbc1c8f8efb745308e3e8b14eb90ccad3548871d4c3e8d9390671ab2594bc55bcbc30d391bb16042ba599111061c4287be94c280ac618e8ffbf862ed239600a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ed2b01e69b6bb242903c1d60d0480e97

          SHA1

          7480db3ed4d5c4b354421617e0069b1551b43bf7

          SHA256

          49513058f58ca68baaf892db7e788ba6c73da23694b0f2dffdcec83c35f729b9

          SHA512

          3117c4364033080ab12b3eb422e813b29b16ccd6b3a908bdd6488fe7845a79c5d65733f942379e217a4445057dab304ed0e41da41952471d18224be5f78f4840

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2d54830075fd101968365c552de4ffa7

          SHA1

          c9b537ed296c650c2938005def6a29bee47a440b

          SHA256

          f438849fbde144a2575d4be910762b7e3bdbb0e0fc56613484147c3a8b0c303b

          SHA512

          6a0cb02fecd4fb66131ab9ac351b93ba7ab4749d8a90d6c3590bfe55d67e6728741f683bc9d8a2c6e53bf43f528c26d3ac3b4d671df6feb52cd13c126d9020eb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8e7f0d51697da1f50c666f9136e4ee0d

          SHA1

          10a2318835f3fb02db365bb1aa915763774e9b15

          SHA256

          25890bbbabe916f80cc585660922852f8d9baab6e4ae268d9bd9346c6aca9f64

          SHA512

          3e66d367474322fd6f0eee92a306eb9d9ed74f985a4bd62c32ac1f391a81de89f092b45265ef856a65267e0bc6c1ea7a487a62220a56bf6a6140002c49b2fc93

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5378b5416835b4cbb7bdb37594c2ef9c

          SHA1

          9a7776c27c21b94c44f8f7be23e98a03f777bb97

          SHA256

          27ff89e8b371f82aefeb7b91682d2eaf6a1c1a1480b4717a36c08f3b5442946b

          SHA512

          603177a990a328ce647bac6f6b711cc885d2e9bb7beddf7623dc812666fbccf409734b6466fd9ee4b4ba368ddf1430db7c9f76bd18bd17583efd602b178ece31

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ce736c406e4baa2bba073480d54a39d7

          SHA1

          c9bd35ea65eca1317c84ee912c09caed03bb3cb0

          SHA256

          f8ccc6b3691bc70b76272b170d3972190c54d801a1f5f4cdefa6a833005b0ce1

          SHA512

          4f35633b81b7836203f95b48b7648bc7ef1dbd0c03e6878b4f51188f142a1d1ca7c64721bb1089685ff590b93e94658a28620486ab430f2e8f5b71dc2223c4ff

        • C:\Users\Admin\AppData\Local\Temp\Cab2A10.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar2B01.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b