Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 20:54

General

  • Target

    ab6a0cdb9a965604a449cc2027710145_JaffaCakes118.html

  • Size

    177KB

  • MD5

    ab6a0cdb9a965604a449cc2027710145

  • SHA1

    074b690563ac88bdd949a24ec3f0a32390295130

  • SHA256

    9fd82d49e785d13fb0419f268758172ba2d329102049c0d62f56b9dab28c7328

  • SHA512

    c7c1dfb98551fd17c6ab7cdff495b1d8204f6d2a49cd2556e1a3781d84d0c12b9c4246bb2430dd506f32fa9da89d0acd0f7af6f9da0f1631c7133dbf58ef3bbe

  • SSDEEP

    3072:SO7KyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SO7vsMYod+X3oI+Yn86/U9jFiM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ab6a0cdb9a965604a449cc2027710145_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2312

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          08a368a7e1bd68a066cd6a6c36359b83

          SHA1

          305baae949bc4058be0601082f491d26c7b66023

          SHA256

          7390ef017c8c94dea5828dfc8aa25407164ffecb12e95432173775ee77d7ed35

          SHA512

          fa4c8294f3da7e21efb5d987cd34b3793143fa8223939e80be0571cee19e5b7b465a1868fd00884b9913868e28195fdfe712e1a92eacfe131e2e3da8be9ec5d8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2c4e4bab41ee1378c38dc1f81fb72438

          SHA1

          bea4357bd071cef8fded26c3a2547bd1b7f6b5b9

          SHA256

          003c88154d0f784bb21f8c69b2a53b7bfc4a852521ef429561b53a6f5c1262a0

          SHA512

          2d093b2ad5414578522f2dba34ee278799ea5fde7d0d0b597260965cad227d65bbbdebae85b33cb6368ff334900888a2eda646da09ecfd53605ad65650cf998a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dc71e93c07c4dbd0a203519f2597dbe7

          SHA1

          176c66452f2cd86dded0bdec8540b1106cc331d8

          SHA256

          08ad28362583e02be071aebe8fa88ef318a64119ed8a1aacc32aa4216f0612e5

          SHA512

          aa61c8db65aa047445a924ebe31f5129e0d297eb424533aeb1439bf32216865ffdec6004078b4e9d039df31bc9de33f3d17f5b8bb85f5cd7810d61f3545c7cfc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e5cb569cc69d842892f7420f942be73b

          SHA1

          287333f77168cd3397e5cf36f5745029f97920bc

          SHA256

          438fc7edf6b068f95f904a6cc703963c856b44aff804b22a8e2f7a3c04b3d3a2

          SHA512

          6e7c091d9857d3d060db53b31ecb568c0bfc2e8b8a82fbdef81c97f33a468b9aa1975a86612d35dca2421363f8067b72c25f035425e8498190caa2759f622ecf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          198c7986e84aff9f8a01a00d9f0a450d

          SHA1

          9e2e70b3d6dfef17827f0b1fe31c479cb9572386

          SHA256

          a2bc5267591ce6db9bb08de30d4b596630e1bca23e8d6a9590b8dc2516b0c81a

          SHA512

          c4be99afc5c0da4ebfdd1545eaaf682b7b72d9a1297160e40af8d2a68d27bc8dbb8eb9ba6bf81ddd16099f8a7739f34005577a60fb0546aee219873aa6db4ee5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          becbef36042476a82cf6298b24b96030

          SHA1

          2dcd49edbbc9c216c4e9bc9b159f3b9664995b60

          SHA256

          e3692f7d9367c234ca27059f91ad0575e283db5d8a114213f9b1bcd59c36551c

          SHA512

          8956caeea9aa53564ef179445955d9bef3f408731d7a3ebf21718ff0329f6093af0bc5a8ba683a1aaa79785778c7ee0d2888f8d69b7276b4164021f81660b384

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3e71b012e9c806841c0b09e95844f434

          SHA1

          bc1572a022b681f24a536426f72d4089f65c8109

          SHA256

          508f9f3244a7bb72241387bcdbfaacdc2a0d769280b7517a52e641a9f2b7d25a

          SHA512

          d421b0c44bc45c630a81bc6efbe3ab029436f2c8ec814372c73cb11fbba389efa5316a1bc651f742fd59eddbb24bd081fa7420995b4ef46b419a57598325b4eb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          31dad8c817a7fe11b000f4e8a405654c

          SHA1

          08e375108e33b3c01d34b7dd2a7576ce89827e04

          SHA256

          fdfcab03fb3dcde019e15e246eb547ccb0caef3bf1be30c2c639ab3f7d10e504

          SHA512

          b6f8c4134eef4bc2911484ab1e516de4de14b2b6446d0ebccea51c12a8b866f6eafb961f4e2a619bca5456e0cb81306341f357e5d8fe1170e7063318c5b73956

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          930469c0652a914682dac47812b77034

          SHA1

          a83828764688f8ef992929a9e5a57b78894abc74

          SHA256

          5e5219b2c45895b380711b631cb2b37fd4e678fad52e0e97a3b4bd8c20777bf6

          SHA512

          d55ae173c734e992ec26ee78e8552d6b9ced3439ad3f0021c5a01e63b9fc84fa4693337eed04c96f2c015838677d8ea05bf1c63bf476a9501c475f06d6290186

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dd9d665a0cc6c9eca442b4da661ac5ec

          SHA1

          9fea2f117115a607f059d3731f3ec1ec2050a422

          SHA256

          048cc9b936e547d47ab52f89a59ff020009944022014cc82ca64654f9f22e3c8

          SHA512

          1953ae18b79f57acd9f1ed8eb856472659bc53474b245ded19b3fed59e797372a17ab9f865040831632c8c7353bf16123fdc949f1f2b2b803ddbaa183f46b030

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1cb887e25eb51378924961729c935b63

          SHA1

          574a620f9589ef72eb63fd50ef5415f1576f4ace

          SHA256

          a388e5798b3e6b3476ce5a79ccb8f7f9bb06343a83a9f32fb347985124187445

          SHA512

          cc01521073094f5e255f7104ce0418476c593941ccc0bf32ef2489ffd3da842f3047d219d71fcf2ff3a7d4d9748e3029a0f8ae2729bf2350a6b1995e41501a7e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          45201ecdbf3c909c2a4a4654cf9ef892

          SHA1

          ed0e90049c764885f6215c277115ca23ee54ab92

          SHA256

          9de2e1e069987645e1d03db19b2d23c60aa92b3a21a916b7441c0b5f5c610fb5

          SHA512

          f838fd597686efdc7ed162be3bd3fd8c4b0411b8c98938b5dbf919f7edbdd4ab6d521ece21ba71368f6a31f586334ded847fb8e346ef7a2069116a03c91a1eef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3352130af68b365173e168064263c2c6

          SHA1

          01d6640d14829e833655bf33763607b34efbfba3

          SHA256

          0ae7d0c3826bc60e4e8a08b3bb7e8e7fbbb2cbc4a1111a7fe3476e392ee703ee

          SHA512

          91ddc6f9da666e05c851a4e82a5f5476b80642b74df124febbdc74a6d629f6ba052cdca11a5303cd7211255f45984b3accfcd5bc226ec9117402c878ebf96e89

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          33fc63c45264fc952298a2f3a902d97c

          SHA1

          c5a8c98dd2c47ac48c24ffb512dc4662704a9f8c

          SHA256

          2d8a47d5dddcefd7952d1798fbc98f425b64ea4e7433303bae10e747598c4642

          SHA512

          c455ddc2982923416c290a393580ed30a34a6cad14a1035b2f6c198be30445a3df385135a941b4f42fbb36bc4ee9437c3c613d1218d8d015fe1a5d6bcfe975d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          12d555bbe68613bbe7ced633ff578912

          SHA1

          de4324ad4eb35fcb2bfad9cff269a4d9cb2bc472

          SHA256

          d2a9848cbdb2b76ba135dc90d2726165803608d9e10068ce73e9e212d80bc3fb

          SHA512

          2ba29a24b2d039e9656b49f9507461f6e2b13704c7ea2761538f7341588e24a7f2bf67a249f3a392bff6bd0df2cdff6b0b4ec4cd72a49098d46bce8c0d027b92

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          59beaebe6092b904ecc2f3d89c1c887e

          SHA1

          023aff26bb5dce779fb23652882df87170817b9e

          SHA256

          653193742ecc34ddaed557bda197c6c88325e69d1efd611524581f33b82f7cc3

          SHA512

          4236683a4879d1844554327904fa3ffb7f7d800560d8426020636a5ecad3a99b3c1a30111cc84d3fb087cc83564985f2fc6e8f2749f7baec846523e8af07df11

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          37d6ab3f122d5b00c450fde0a06ae41f

          SHA1

          e65db8cc0447c27a5df78ed505d0675350fae236

          SHA256

          99fcd5a845d61ada40482212d6cd27d540d06cbc10c45a5d23d31cb47ce6d57e

          SHA512

          cecaf7ddec4a4e039b282f063f34164737fb02698eb6ecada93ebaa87c0bdd636a3036054eb93b69fa6fd4f9bba9ba90238ff7739e57746bd94e1eb394933afb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e623be57bdf52710ca068aa571e543ec

          SHA1

          923e36a40426a526b756486f4ff6f2b8507ee16a

          SHA256

          158eb7315eb891bdd3cf9b53fca06a95b53d4bc966e5534fb4058a2b73860b39

          SHA512

          dbd679538776c7346e64d81dc5bda47c8366d262deb9cfc0b6c52ad629880e1ef4052422cb781819e7c6577f26796bb6a416dbdef0276e29819633ccf3074636

        • C:\Users\Admin\AppData\Local\Temp\Cab3748.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar37E8.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b