Analysis

  • max time kernel
    120s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 08:08

General

  • Target

    b27fa87a5967ff2dcae1cfb9c8e909c6_JaffaCakes118.html

  • Size

    3KB

  • MD5

    b27fa87a5967ff2dcae1cfb9c8e909c6

  • SHA1

    d6ead09036fba89b2da0eb84345d353b2aae2254

  • SHA256

    2c50353ddf1e64d13405a0b9bba878150fd484bf6f8e91c0edf15eef93b49705

  • SHA512

    db876a5ed1e022ceaaa5c3d3edafad0352aec9c39239e4d1dd1baae029fed53817f2e6e2ed4d768330e7c72f3b7b344112c3a5e56417e35858277ad1ae724793

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b27fa87a5967ff2dcae1cfb9c8e909c6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2820
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2820 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1932

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4fa3a61a2caf20d5ca1a755879e26510

          SHA1

          65b64907049b7c218cd5b06b566a9ea5dd7628cb

          SHA256

          f6ff156ad5f25a91ac3dbfa5f3b54cff972a08651080c12cac905759f5f889ee

          SHA512

          0e58eb388aa70e3c43bf8b05402fd6267dd5ab85bb5565ea93874ce4dafb9a88f10403eb6dd74fe50e6385c9c560dfa898a637d6293d0811d037aa420adbb6af

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0fed984c7867b26115bdb23a5b94155b

          SHA1

          80c24d30d041549d7308577a2ad9fcb07b2a76be

          SHA256

          3c8d6c45ba753cf360cd9a6d0876860f40b14adde765993c7f934d0157535de8

          SHA512

          fecb154be2f8c21d4cbdcd7bcce99d2d94e6ab76aa210ead1a4c61f96082198aa4924d83faae6d312bec6e4cee03633e048a4e96b3da14090fd489f180ac44e9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          51aedd22a46e0c8f433f8ffb30e28466

          SHA1

          cd32ec1810bca8ba8c55b15ef54a27ebc2424ae2

          SHA256

          fa6a934fc9b614a13a7d53ce976035b93e15bd31338610bf792b62381900d98f

          SHA512

          e94cb24cb14fa6a6b5ba991007070d8e915b81f5accba8134125be694f47bcff39a177f49c1f281ecbcbc84799bf78deb94b992f5514f9bcd90924eaa20a0865

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6c68654b63b481f36e01b661e1f723ca

          SHA1

          8213241db2306cc9060752217b1ff985d0055860

          SHA256

          e79d69f4740306f1a29ea8db4525014acc8272c470550760c6142d39d0ec2673

          SHA512

          9b935c0effa14c10339dc4e00a70cc95295fdd4bac4719727d3848a3a2804976ba1c74482a0bd49bc7c69f39d90bf56e245972c49732d53d77a43d96011113f1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          aed2b21640c4b27ea82e1bc19b9f4e93

          SHA1

          33ae55b196346561502674a30841853dcd262fb6

          SHA256

          20d54afe811b3ff1cdcf7fdf4272f9d4273ed618dcd16f6c7a426047b7668358

          SHA512

          deb67fd2c7ca0bae8d48bdeebebd89259444a54338fa1c99687a0dd2f9582efeeafa4cecfa7b337ac35420ecf3d1140eaf7e700c20c2e55a9714e9b124daf712

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          448006dcf205845d316e0f014bd9bb22

          SHA1

          49e3acddda33f0248099dfa2ebdcd110b52615f5

          SHA256

          b1169eddfadc14060c76be2834d829bf07eee195c6326c84366d9677bbf686b5

          SHA512

          a2a8d7b7b98d255b53a762719045bb09970e8ae62eac5cd137b33392c918a4c747943790aeaa73188f34a55d789745ecc71932d9cd49336b7a5deec2b2baa5cc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dac0924f25cab801e3b7961ace2f0af8

          SHA1

          a624498b4c502aa99d9d6d8cb3a5355d497f0e3d

          SHA256

          10789b9436c6cedc477907b1413b648ee1cac8d2eae8a7dc6f62c946c1b084d4

          SHA512

          919f3e09bf05e90b74bad8e9c281b4029a54425cbca1e7dbf92fcd099037a2ce2f1e62546775b7d2bd6eeeb241f2df253f24126507d6904da4469e27b17813cd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          74a699a69c3fbea5876b9f8ffa0f9b0f

          SHA1

          d237e8aab54e4da20a1b34a17326486f51c5f87b

          SHA256

          637e63ad01359d0e6b360a52ea019dcdd107ff85d1543c5c6958ecc42c26baac

          SHA512

          bd0dbb2562a5e5b1a3313059510fc410366ce4758776af37bd3b238e2ec3947771f31d551721c87aa7c987946993b29ef6a4d3e20914febddc865583535d2ec1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cf85026bb4218790766112ddc8685a08

          SHA1

          3d0fa7fa329b543b49ac186ddd4ceec574a71591

          SHA256

          2ed48abcddd0ca6cfd93ced45b2035be58d13ac6aff5cff89d87166ace343fe0

          SHA512

          ee7438192c30cdb589286d41aae9b483d6fe8d846af4a50a53b99faf89692e96d74bfa51f77d7cd1884e206f5dc8b55c0b4c46d802c191623f338fab88c4fb02

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          85dbb53739dc256fd6b3a90ad8c775ac

          SHA1

          3b271489757ed87e0c1935255362c2abaeb2dc9f

          SHA256

          f7330936e8abd7fa44f67802a90552e9695a1d47a6adc336f838c778ddefe194

          SHA512

          847c0a855b098d66338eb578b5a9013dd4d424b1757fc72062f3b1a6196d3631098845b6127376a705159e4aa7938d0f246b9ab7e4ddcc53987edf8a2f4203cd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c7a658bd5f69a02f27b3004e76f20540

          SHA1

          2e76dae9c51678967cf7caecaaccab993567624d

          SHA256

          97f9290edcd954ea0a660e16dd7f2e883d77d4e71364d65df5aab427793f216c

          SHA512

          775b7d3bc3ee6927f4829b54fc4d18b84557cef64303b9e20c20456fe38184750c1248d09e54d59176672385e3ee4f3ccbbab8f25c3246622fb8ba0f1450d4c0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          545992cab1c5139525ec6fb99219e0cb

          SHA1

          00eb3a75bd1f95f839fd36fc90e224c205a496f8

          SHA256

          409aaf6a8ffa7f1ca2e1590b3c98f25355668eee30edb9a3f10c7fa4f903fd0b

          SHA512

          36400840878988d041e16112e17c94816826ed116857b44ab539bbb9ec3362a6cf0e0caf5d0ef7c4eed9311edace4b5230934f5019b6a46b53dc22bccf30a661

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9fae0f1b06781a294594a2d28552c0a7

          SHA1

          fb9e429150fc797157c063f26909adae0e9e08f2

          SHA256

          87165c177424b716a0c92a3a4715fa49f6edf9da1edaf5636c83ed022f2619da

          SHA512

          77da14bf3e3ec6c5697ea0da02c0c000874f68681f49b797a00b2d080c0531bfc076058cacca1a308ca40a9e4d84ba7f8f98684ce5e4819627427d8ea23e7a7e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4b8ffe32e9b750e0c640af563d748fdf

          SHA1

          4780eaa1c91fffcf2d943ba05def88ec3b24d309

          SHA256

          15aed66ab4a9ed0b75df2b558e3f98a7f220768eab34f49b14b502bc941159f6

          SHA512

          e18eb8245546ae5d68be06779adca73049c9b0e10abae1ca490a13e54bc1205500a6c2da2991a9ced278a79bc3e124392fdff74100d0db25bdcfc231053add40

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          12cf93e184fd20bcc64b76b5a3fb071b

          SHA1

          5bca980728bb7dc3994eb45235991f5b1d769451

          SHA256

          1c1edba3f8cabe97b8dc44dad69ee07570a6531e0b564d37274a15b2d0c7f399

          SHA512

          72adbad1aadb8411e5fac19fb1b33ef06d67530069c936a8a58006523f25487723e62518a177b462fde43c5a685d95be84b2792232e48cc858e7b114f51bb1aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          62769316810cfc693ba191d4cd0c7070

          SHA1

          cef6edefcd168388ae6b41be6f72f92ef80b4c96

          SHA256

          cddf04aab9f11a53e74a9cf05a64faf8e479f4e249515b5a74346780906912b4

          SHA512

          cf83c8db0477e078f7fd745d1d510dca2b9f3b1240aff4e4b48449320a8a92615a9983e6d2211c232433a9a1c7ba2ab1c7052c388553f3e7bf0ccb5c178ff12b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          857e4601a4a5681e57c500cbf5388739

          SHA1

          7acd620fe9aaeac1cf48e4de4cea36fa0b3664ed

          SHA256

          000f6589d9113d7e093867b12ab25edaacbcc4a84b28247d252b87f11718de39

          SHA512

          46c59f416612c96a6c627a98dc9106accd879f297153666080ac465b0133e604af5cb8c94d5b3507865fda6add39e5709f3542ae8ff58a9c15d95843dcf08559

        • C:\Users\Admin\AppData\Local\Temp\Cab83A2.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar84B2.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b