Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 21:43

General

  • Target

    ab991becf2fa879177002a3f758f0887_JaffaCakes118.html

  • Size

    42KB

  • MD5

    ab991becf2fa879177002a3f758f0887

  • SHA1

    6a8d6dcd9bd02ad54320efa747218cd3fb3b3e02

  • SHA256

    6760c158af3a0f479c91829d3e4b2003371fb67fbac21dec120e2657aa3c0e5c

  • SHA512

    8f37a5f5de77a697663d66554faf76327576ec9890303e3ef0993e5bde8a6d115d646f29addeb2c43b1403201e2b9d28cba06e1b9b606f8a40cc385559fc349d

  • SSDEEP

    768:SNsTxbbgv0GO4N1Ctnz9qSUKGWsmhU0fScFd6I6vnB5k:SNiBbY0G7129p6I6vnBy

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ab991becf2fa879177002a3f758f0887_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1984
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1984 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2912

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          083389ed8683c77c7d8020c6d84882d6

          SHA1

          d361da9207e78248c2779430a3e967e029b38730

          SHA256

          79aa06e2816de5638542990ab238a9b43fe865e1c7c56da6355914d08e39aa6c

          SHA512

          d99fb384e5b3c5a49d326ed9202d855072accd3286c0eb487dbb62ae4251ea75808ed2bd239259c47516c7b1b46516c1750bb33389e1ccd2d3ed4bc28d0d6878

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a02d32f1e0a11face4265ab7928b3de9

          SHA1

          f0645cfaeb38617f32bb227d2e276a1552deb136

          SHA256

          99d01c6c5a2538cb4c0d727df8975c42e8c8bddc805b210c61b32efd289185dc

          SHA512

          90c5ad248cd770e2bb9ad58f75af0d0456205a8a308d704adc7aeff45367cb6e932c623f359e31d204d66f49188a00632041b7751a962d8cc8637150cf885690

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b0f10f12028bca03b79100322e8442d5

          SHA1

          41a8171a79dd7f8ced0a8dd5cf629f3e8aa43ad3

          SHA256

          f93a2f5321b655ac2a0056f011764904ce7fcea8538b0d079d97974d6b16d714

          SHA512

          dd59cd92e62e8a3bb2ab8f16386c916d6ac3688e7ab00f9aec965e09aac0ab2e305dd6ec479596501ca38029f0755f46caa2fe5d1a5cbf76a1cf78139c9cbae4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          31f44c819340f0aa1b289a9b8cf03025

          SHA1

          a292ecde29169267df2649f7a2e4ca684c32006c

          SHA256

          ea3957c71a380392938ed8a8a3276ddf1a6ccfa1f1c751cffeefae0ad405382b

          SHA512

          b16f596ded8f2fd61f7a74a84168fe4759c2d2c3ed4b1d7311a8b99661f283723bf17ccc8caf83942f7a7a2ba9abd69f35fa15132ccc7e6766f6d151b5d6298b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3fe1154a0bca79fb8c0df6800ba27e04

          SHA1

          ea6266c470bb10710cf66eeaaa5d579b6d60aaaa

          SHA256

          81c73551ac8fbabc054da55e2d85e77881dd975d81e96e8026ba989255fd2c18

          SHA512

          9069bbac5123c9d397af904f365bb34c45efec9589b6e4b5634070921841423a81e3072d70d13c750e09c66b366b147644067c3f12ec234ebedfdf810f37b0a2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          54d1729ddc3e09a9048e840923214137

          SHA1

          90958895a59c9cc1ce6d3b956f8a25cb7475845e

          SHA256

          eead1fe64d50089853783c5efe2181d5bf47f42ba4e7bef299b054cb359be28c

          SHA512

          3031efbcf33274d7be74efb619b8801eb8ed60432ff924a752fa1f9f1b4779c4db04d33e30e86f2fb2f3909431f9bf1463e4aa5911f6eab57b11c694bf62574f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ca13e3ac52f6d94107461845eb32a5b1

          SHA1

          7ec92a8eb822c40eda4d538abc5beaa5ca7cf886

          SHA256

          e8a2074b803bc12150eedf03d9aabe652eaca976f56f11cc134d6f082a8f786f

          SHA512

          e1354f114926ac7ba972606de8d4e13c2be418d9826e73a1d1975661c14a1340296a908121f138bfac5fad006d1ffaedbfc7c4e3ba4dc84107e56435e73ff1b3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6cb56555bc7824caef9a28d334848824

          SHA1

          9b6108c0b6c22c6d7e4bd654f620044410bcb49c

          SHA256

          ba8b7bea4805670de74105b0228fdaad145b5b183f0edb9c57715d8db02b9483

          SHA512

          ae2e46a52e8049ae6e35d0e1a993c68cf2fd7572d5923885850df480c7fb3206104f01814a974909700298a7e2c745e310817ed8bbef476a4ad50d1c89da03f2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4406df579f958230915029cd51b83468

          SHA1

          e24e3c06462b534bcf9427608704d8948d8c3cb4

          SHA256

          73670626fea1f01d6aefc5fba9812a52b652998823dbd2d8b7eccd2ad67ef664

          SHA512

          9a931a5ac049491f41a228d1ad4d0351c9f53a9b743093d44d8e6b6ee7382c1e29aa8f526ea567916a84d90a36d7b53a607014b5a23b085023678f1ffee3a926

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          28f4cf266d64504b235f466c2b4a865e

          SHA1

          dea271568de459f23ca0fbdd2097bc9627754596

          SHA256

          8902a27cfcc0ecfe121f8714244b8dafd6e9ae909eed8738ddebba23f5ce94f2

          SHA512

          9a357c248d0cefb8171c689d60ee2713c86f411e788b55577d31b2b5617971adb2097ef270e04e581100f669810d1a8a40b31df04c0caa92df26b310cd60a8f2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b8ff656603dbc080aa70c17c111d1204

          SHA1

          04ead3f7e78e9aca95f88b92cbbfa8f9d4b752e4

          SHA256

          f3a29c68454e1692989a03414183f4923f65047510b5e3b6e54adc3bb1dac8fc

          SHA512

          c327f1f23ae6ef125028987601577f6d733e29f575d4a6bc67ccc3c090d846a8f7ac448f5104e8497a341237c1c3ea2f6e2fb3681d06a018f707da8dab6d78b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bb5ca32e6ffdc063cd671bc42fe0d0d6

          SHA1

          400bf8ed2dfef78e5561650188f2ffb710104a7d

          SHA256

          10eb6a8de8be99d1224a25381739a8735863c12ec5a18b00665f59f20b116aad

          SHA512

          bc6203a0597f865548c51f41b83906763a3204dae76fe4ed1d6518b05a762bce10a97b4f33d22d41d41c3adaa51f46290c661e9a11d12b01db06377ce896e0fe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          20cff41df5bb60feb3f78627753d92d8

          SHA1

          6b7c10020ea0c8744b1803622ea1cd8cc22542df

          SHA256

          4314c3e20d45c553f2989346e9cd3e713ee175f8ae1da2a99d149cfc18ea3682

          SHA512

          6dd0722612c6d6da278689b86af0c90316d1ed12030c001be9d0038acddc3662bd288263e88811bb9b94096f6681912a770bf2efe1ff41970537622c5478b0d5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          53b3a44f303d4095fdbd6a3ff8d54649

          SHA1

          8dbdd3ff975c71c7261ab17ce97759822ab7e975

          SHA256

          9eb50f67e497c00dd73b57669fcdc5587e57f87466ef1f0dd7b94651f78c456e

          SHA512

          2bc6f19e117ca64faf8962901cab73b379ecca65520e3525143e122875e0970c9542bbd71660f4f4560af6fcdea6a70e7d322acea2acf0d8cc86fb03ae70d068

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          69a52b644e803eab7f99bcfd4fea0c78

          SHA1

          f6b56225f6a8bebc037a35c681960295eb8ede85

          SHA256

          cf2afba67fc689beabe105118cf9dea5e187deee548c167fafc0519600b62f06

          SHA512

          b23a611708cfb828d0bb57c46a04fee5d635a2e33b191b374a5d668384b2f66577256db377e627dfabb87a98a473a1e19a66ccb55138884bb795c43255de6098

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4b2b9d3e0b8e9774e9a9545e4e0b20f0

          SHA1

          46b6713af38982165b962bfc38cb0cdf66fa5f39

          SHA256

          65868eae8995e846a7579583c0c5f538e04f92073b2e9146667cd439409e577d

          SHA512

          1eb635ce8c80b15c40777e1962ca55d05e53c06b4d70a2dfba44e1fdcdee6ef7f0c1ad9e7fbd5427bed1f14e965afd5cf37a7ccdbb588d15eec2a14bda6a5a13

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0fa80a2c54d77abbf340188903dbb7de

          SHA1

          693857402d0df9d4f58b5150ce996eec9dc64209

          SHA256

          f27084fcdb98676bef9d268107b28516e3e7b48654fff24ad0ba66760359c19d

          SHA512

          98af3d8bc5114d9b11e1dc07830d25ee65ccb1d58cb6e30c1afbbb5f19620676b00841b5befb11c69b7a1505620dbfde5f96407e438b5654a612ee9179be3d5f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          af98673fc3579e45c6c7556e96a7c808

          SHA1

          ae78c387af37ca64c7c1e5a710e74573a5658265

          SHA256

          e50f259335cc967ca1bd43ee611ae5b2f2a8c587dec5b1d856157e7392b2e0e2

          SHA512

          2f055d1fb1deeff182a2ca6efda06ecd6fdb05f830f30b327e1f65768fc71de7fab4a6114afba5941fa2e1b5e9347e9adf447d13f6c81826459842b1acc61834

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ce97ec1a67c14bfc60851892b1788d82

          SHA1

          13d23e6f6ea188477ce0b46f7531f38b7eb1079e

          SHA256

          adbe8a61e6700ab4cf449ef2a4ebbf3f87a0c43e896111dae7b451826bec89c3

          SHA512

          7cdf2da5b3cc5b5d6b832174e5ff09d8238cab3c2d0b0189ebeef05b5043a287fb4909869e5a3bc080a9efca3e2e9daff1e943310eda3709b0d638c829e46801

        • C:\Users\Admin\AppData\Local\Temp\CabCF92.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarD083.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b