Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 09:40

General

  • Target

    a4e4dfd0db3a488a6af1a1a9d1442318_JaffaCakes118.html

  • Size

    77KB

  • MD5

    a4e4dfd0db3a488a6af1a1a9d1442318

  • SHA1

    543d2d2c36f584c385039b942fe999edba68b207

  • SHA256

    363eccc59554e844dc9506edf9f0053eab7cbf1e153c4508561f4dff71d2fa37

  • SHA512

    d2da7c0d1d8a2b738292cb6258ed913f06731e988a9dcd47f4ce48407d218bb03378b220f37fafaab0fbbb9f3abb810163d01595addcdeed0b144d10a89371fc

  • SSDEEP

    1536:o3turnNZNy5ZbdKfIWuPs3frlkGovXc+O/SvxJrz5t:YtONZNy5ZbaIRcfrlkGovXc+O/WxJvX

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a4e4dfd0db3a488a6af1a1a9d1442318_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2696

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bff1c099200bde6f5d49503a6117b072

          SHA1

          eab4f86727c347616e773a8433169f44ee1b8a13

          SHA256

          08110a1de610aa302a8f8f27b9fdccd6e1de48422be59468cf5cba8e57cc34d7

          SHA512

          63020df559677848b04d3946e0acb46b522af69947f33ab28976996361bf86f693cc1ae4e4e81130e46f9d7618ee7f4443ad7b1293cf549a5c208820f53f2eb7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ae764536e26c926fc92ed2b27850ca20

          SHA1

          2eae6b5303b265c438473e772368878051df5a67

          SHA256

          36d5326625873540472378e9b816bf6dd027e24e794bd96c9c22a37779b4489b

          SHA512

          c0d41cc11815b0afc0ed6804080742f238ba4a2577c13aa9cfcf1ed7d2145fac3a74824d75a5e57bfb68c5d54e4133c366498b261f2eaa0c7a70c3d211c11df5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          78556d2be910be31e78057146ddd5818

          SHA1

          fa582a955a046ee386c708bdcaa0a119bd87f59d

          SHA256

          87dd3bd43ffc41c5e9c288b964161866056bec5e35b189d8723bc3466e2b2c72

          SHA512

          d68b84a3cd031091d405b92831a92f599ed78a879fd60893b1d2f01c8597744a894583d489cf0a8219b0f5677d639b8322799f7a88e1e06f59e3037c8f540ce5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          42542e6c17074912c5ff09d9c9cc616d

          SHA1

          17165bd60ca4897b6cd66d3761ec66efd023a4e5

          SHA256

          ddc0654dd955cf95562bf66c69a3b0efea0a8e8e2743868aa5d7b1bc6334f59f

          SHA512

          6d1eb4b19d0c31a0bef9c094d69832ab1b887ad60d9ccb2283e829cc107e4ed4ca0006274bd9282454fc36870fb9ca9f894efe61f7090a8bf7f5fab2cdca383d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f4b34e6418011a359799dd96949764c0

          SHA1

          2aa68309d422ac11d189b54edba051aa458d97c6

          SHA256

          726d3f8eb89204b65448f029552b3cd27e790765639afd4ebee6744465b7a24f

          SHA512

          5a81b9c028eb49e6303f80fbabceea6a28c2c4fa6a93e1ba7bd6c17a77560eb9c0f6cbcbf6344f86b4d5a342bba741a79be9acd8498c00c8815e369fa3d56422

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          621c0624f6bdaa2051d6dafd35cc566e

          SHA1

          e29f9bec85141ef912c54d6afc0f116e9387bf8f

          SHA256

          8f888e8104441a8a51b41c70861f471c1924eccaed780773c8126feae8287e2e

          SHA512

          837a9646ca4fb66b43ee744426b15f7569fa22b013172d445488a6b4f7e4410125204d5631ff27c60bf943bc1dc7f9b030d59c64649d0b03ea6c3ff2989f7cbf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ac904b0e8d5b415c337e7664e974a4f9

          SHA1

          0879fdb9448a85c52cf87e3aba58f1e2e58c8070

          SHA256

          2994773534ccf47ef5ba57f9d1b8bf0ed6275047904345e455f2c518d00b2afc

          SHA512

          efdd63cf8bcdf2714ab276547c70571531d2087a0d3859c25f2db50eb3971cf9281aa78b5666b39e2c40b2efcc7cf4c0a271247d212e4af5aa46726ee682ea98

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          33cb1e0df90e37f9fb127d8f5466c402

          SHA1

          f1b52383da4b5baab7a89318aec296958399f599

          SHA256

          ca68e0323f85f9d382c0bfc753cac4292363d2275c4e9802b7e51a59704c394f

          SHA512

          74b994db74c8e7c41c9eae89fec80d0be7db0ad8b530a2716e5ee043abaf8ad248bf4da330554c18add9d44e0e66441efed9567444f14b23377ed12dc3697476

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d4691aa6472b0de799755321f0247a84

          SHA1

          c43daddb3dd1912c4630ba70e4a019904c043d1b

          SHA256

          56c3635f92c2d2533177dd7265cb69f82d0edaaf99bbf085d2fb798a99636229

          SHA512

          26854a4289339413a6468daa6f0710b8b604bb46d653aea5a3731406b2d8817fee86313bb641480daef484e79eb7a0d59ff61f0d93c3858b1dcc267b777a9304

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1433066f89edddcc7f495204a3664167

          SHA1

          4b0f8b6a1e5e0a2d497b4a3c1af662726526d6af

          SHA256

          7539813dbb72c8d14009425ce3c9f87615a99e3aecdfe80bed5f6db04e12dd1a

          SHA512

          527e09927b8e6d6f417aa79ad699b9e87a360c1bf3e9a522afe33a6fdc7460892a48ff3f3d6ae7f6553be95eeed2db655a528f771e6e1de88780052f56bcddbe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d6884ef7a94e70597099ee49a8b45db3

          SHA1

          26378f458ca5416f7d82f1e7c7c3c13e25c2d656

          SHA256

          022f39314044905dca1ddb157a7e9630f8247995fa3b08cac4d949b3561417fe

          SHA512

          79e8ad44e6a5beb63cf0532b77d5f9eb41c159cb65b3de28e826173573cf5fc62f0b3f6a15c54adfdff976edc2a053948f61753e1425a37d5e96d0bce0af11da

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6bfec44a373bdd0041e09596203ed00b

          SHA1

          9920cc05d4dc2c5b26a72c4c2947ed1d1bbc1549

          SHA256

          4e6b955617116afca5b12013f9942d0c84188ff88734a9b915528a5d78c6fbbd

          SHA512

          689a2af6a1975a591cb1782aaa50f632a94d5c0483d18afb0a820611d20adcca6997e9b64f8c62300b6173dccdadeb6f1282438cb578389ceeb00d69c88fefe2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5eafa9f76ef24c8e46b53e33e254e80d

          SHA1

          be2a2a22a084f853910b4b6e77172bf70d611ced

          SHA256

          464cd9333105ca334651eca316d798c28fc4ab5321406e6e5d32f443ba267fe0

          SHA512

          211761d233ab4dadfe54ade0c92fa5e9e52faf4f203ae9223219b73aeb46d5fee4eb534a13883c18d80095d0c9f02d3d033300b35bffaf5471a4d27d9c28994e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a759428d544c21cb460a44920ce1db81

          SHA1

          976a2de2c7765e1902fea96f6f287093cd006e89

          SHA256

          667205010720ad942c5547329d45c8bc1d734f6640d9d585ef41ffd00f0a4a24

          SHA512

          88d1af4b4c909087947bb69d9122d6adf9652bd877d221e75ae6c4210df80ccc93776be6989a4189c3be62441f4e1d3c203cc68d5cdab401d6efcd9752ee3e82

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7c3b644e1dff6e8b9f638df49c4a6802

          SHA1

          49b4b9acb3cd9e31a38cd2ad4aa5147938cbae7b

          SHA256

          a46bc1c79f4442c228a73437477720245545955c83dd89246152516ac010a9f0

          SHA512

          54beb42e691d7fc1d3cb23f2b243be8d4953011596c4a91e9d3fb6e5e8f56c2fe1125533f4a941263024b1ab3d9552834a5a5730b483a601081ddf9d83f6933e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b7dd27761b19e5cc3cd733ce6b3215c6

          SHA1

          19f826fba8a42a0baa9490dab25ee6099b400cea

          SHA256

          61e1bfc1957a5329ef87f803f4ba9860191b932bd07284be8dc86291b9a7d420

          SHA512

          35441d1c485155d8feaf31575683c6dea0b41f90e75e0314664538c316eea3f7641cb311d9bd2bbd1b67b1d9beeadb8cfddaa1a40ee158101d92aa2a7ce5a8f6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          df1b0a8eb060c3b3d33207348d274080

          SHA1

          bd5334c09dd1ed8269fcfcea233456c59b23fb24

          SHA256

          f021245433d1c162d2fb127443be18b854f60169957f71bfa9946b97633173bf

          SHA512

          24d2096731f99f173e6552d9b6b3e27626bab056a9481b9eb28c9b77c48666f491b9fc494cf910da36a530a1eaf19507eba1decd27a94dd57d11392d352fcf84

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          de89a3823e49a14abc7158c2f2faf475

          SHA1

          c5f3037f47f90528348aa7fee4cdd3c30b804a03

          SHA256

          0808b44512ebcf988eec9017c6dcc632c749cd30232fb805b08a28fac102f8e8

          SHA512

          19fcde9dd55d3fe4bc76d4195049a2fbe5f4091e265db69354eeb1dcd9e781304f7fd5081517cf8e75327833fdb82c4a5b2c138aa2cf5e5b0c0e05c495adfe9a

        • C:\Users\Admin\AppData\Local\Temp\Cab2DC6.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar2EE8.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b