Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 05:34

General

  • Target

    b7008ec6fed8152e87d6962072e96952_JaffaCakes118.html

  • Size

    24KB

  • MD5

    b7008ec6fed8152e87d6962072e96952

  • SHA1

    0ce4508b4944f7676e4f6ce83f892e452b8f14b5

  • SHA256

    422b39b41def833f71b2081df9802f460cc7d2a5bdb28828aeb6a8d5813a9ac5

  • SHA512

    1d9e1ebd6dd4490cf8494b2a4623a01fe18bc16c15787d504b093813c1a4b4742524d7cfc7dbff3e52840f7187988b409987546215586e78a7ec56ca905736cd

  • SSDEEP

    384:q9euTQDmkaAPAvtdbsb22/1jR5Va9vr5dXcIHKK:q9eudi4vtdb82iedXcIHr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b7008ec6fed8152e87d6962072e96952_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1192 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1888

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          410B

          MD5

          c980314d29513e4f97accf042453fd04

          SHA1

          70a18e8b09150a100d1d79b52c37651d62a44a19

          SHA256

          dbe50a7f8739ca2840cbc32ce104bb7d287c2ac2c21be0d99f47d97fb8f444d0

          SHA512

          2754222d5d968a4782adca7497274f4cd8575b01827fb938d77f1760543e7451c364d264e84d2f547ffaa776bd336f07837660ae60ef9f597c28744c08049db5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fcadba42b82900ccc9804c96676eed14

          SHA1

          0a3167ca55cb938325da0cd848694b7730028f8d

          SHA256

          8f960b827828cd164a9936c12bb994e096f3808ea6abc9ba1e33a67839c8d69b

          SHA512

          49bc518a02e0cb3be1ca5618e3f56ab384bffcb44048e219869b67475d9edf5f54aa51ba543dbddc073a2760768e5fad7eab01169befc8a648c337fafc0f5175

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          646ab84b200294ca5c1a1dd65952fc21

          SHA1

          6bea5911409e2bf61af85c282aabc4b2a5bfcf20

          SHA256

          e37611ec92dbe6d9d5d55a2756cf574675ef4a76cf0de78794882dee944b5143

          SHA512

          2fa2303dd10ddcc1a786fc4f5072d54d9e7277d78811ffda4f587e76513a037b94e49f7caffc587a61716e5ff6b9f48be62bca877699344efe1612175e6f4fa4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8d3a4c2383ce1e7a018ac59185d9faae

          SHA1

          d2b7382313743fae5bc96a763f1e6342368ab3d4

          SHA256

          e83b4cc85e1af3a8220af326ecfe48cb028402b4eacd047c4ff91cdf2f1e57c2

          SHA512

          23c591111b6b0afc4f20ab79de519b1840a912e7e70cb5e0a5e40b4d412f9c4adb50223600e0a0640e861afa4a17113cdef8133f932f3db66ceb485dab6a9d1d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a4a944c7f6b64d61b91b3a118def2b37

          SHA1

          6b951de245f9229a967dff6bfd5e985890535aa2

          SHA256

          37dcbc9420763a1cadc06324e707fdc534409f5e8543c857bd2770fe5d11a54e

          SHA512

          1e1144ac31e6be45dd6387b7845a7444543f75acb938b051d09fde2f65ea91c1649617bf1dfd64f5bf3712923c8579c395cbb9d03e56c40571a1ed947f62cefe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7ac4f23bc4f4e9a089f2998a39feae33

          SHA1

          555a7dbde5ae2c6fb87c762b4144a56502aa66c5

          SHA256

          60fddca21a35c6012c13660ab796110f835a64fb5eade2644aec6e70c2cab741

          SHA512

          c0795bdb30970d53ef5b9f80609303013c860b109c5684892f137d110450366f643ec5e238080f6cb3b75aa52318f16aad5bb2a2db7a4d3bc73d7004d6cba03c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          537443855c0be04f713c478f6873f29e

          SHA1

          b4aab6d19667c713c37e315d964617ddcf943777

          SHA256

          4943963658cb69895e68848359042f971d04e6ded363dfc9fa5a6b410f406c6f

          SHA512

          fed4d19fc63935d4eebacfc3d83c04710e87b033a1857a004900e1a271361bad83e072c0f37650580d6db79431b82dee74bb179822f10e0564c9ea683e057f3f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1af18cc9d9ef5b5c1ad3e08747fbad0c

          SHA1

          8a7944c18ff2514bb6101f73a9105e08ca8f7301

          SHA256

          9ba284ace794375e46e4b6837ad8dd633160bddd7ab8e14ee8ac0e153aaafdfd

          SHA512

          677596c2698e1591f06b3013d7a4c135872e38631211bf88f969878907a0b15bf6d3cf9cd6050256ff4ec0ac91d83bf1aa3530991207d954e692bee260c3cca1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0d77447be368e7c4822a4a75809b4c37

          SHA1

          2596df7bc1f277cd50b153414997cca03b739034

          SHA256

          4c3d092ec4e0b7d63ad997a150de82bd81bbf766ac31370158b12541b9864cca

          SHA512

          6bd8e0bf54ea410b4bfbff43f540bbc2c80c33914c0c5425dc5f33e366fbce72f94eaa32ff3771b735151f7de4192e8fc8d518e8dd148ef77f095a26ce736d82

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dbc76b15a28fef6bb6e48c3fa4ac44c9

          SHA1

          f6274d4af355536246b7f31358bcaf7f0405e1bd

          SHA256

          2f75e2e0d434c19ec7655d817ea18704045f71dfb98121bd805494969830b31b

          SHA512

          89f3b1ac4fe5b9afc21f3ef681a2333f38a0b01f91b96389264ca34627b95ca211eccfa982aaf6ed3e94d429cdb1f77d9d5190fe6703ea600da165be41bce1e3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          06df4f2f91935b067d5aa1d4090371e9

          SHA1

          31a8acea37116c15a5fe20671818a77542c21a20

          SHA256

          d8fa99231cebfab210cf8038cc43ec29bc33e87661460497ccd041af2bc0d47f

          SHA512

          47735ff968f7fc2f71b9cab5074734ae8ffee28597081f264e90ee7e66a38bd4494a94cb0efd8c7fe59358d6c353bc3abd8e59968bf1af05559c0ce5f1cefac1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d0dd118c5d680e5504af7e4077da21f7

          SHA1

          d2e12ad1d0f7117f9236273acac5b20299b4b513

          SHA256

          c8fe549a1d873eaa4e4fc94f4d0219a566e46256aec4d4943f8793e1ff9c7e6b

          SHA512

          a0bfb2655080bf979a8237fcaadacc1f94fbdd25758fef5d1dda4cea45be50d536b5161a9493de70ed2a9c669da8901ade1ba1dc38784ce3fc05d85e45b95d9e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          94a1b13a684901720b4511e75bb25ef0

          SHA1

          1641fdb34a0c605fe5a678867be4f02ab450e37c

          SHA256

          b76ae6a575006dab05e8251ea156fefbd67394c43abb30199c04fb415a0a5dca

          SHA512

          87d738595d21c7913b260fb8091979de668faa24b45b967b9c849f69190cf4f35b87c03032af85bfc9da426ae5b804e9c391d044170c68826081c927acdb2cc3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          384287d28c065a90925334d9950ad66b

          SHA1

          f2fce6dcdc09e348f8a8c2bb2ddbbc50983a8008

          SHA256

          4f3846322b5b03a458185ae09d0584aa9678f0c6ff863b66892bfda9f607fb47

          SHA512

          0264fda16eeb0389fe42cec8a09cceb59d8354c9cfe9de96d0c194e89b99c37abcc83765fb7382826ebdea32e9b883eb94e21b4c7d9f699abcb89c54af490ea6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          50f94cd649ae1f552e9bfbf36068893f

          SHA1

          960efedd09206592bab63506856c0c00dcb9f3f9

          SHA256

          a82eb170d4175ceeda622fccfc4d46ef21b81a9c3848606777a3376ed51dd3b7

          SHA512

          687f8726a98d07081df8ab0fc861d5481cdadfd0371aaa3d2c7299680130942d5de253568b3ddf734aeee4f1a8b9cc701cc7ac751d6581f6769193e6b86e9f8c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fd1bf3b2068248a17449afb83048da98

          SHA1

          682d11f6dc281a4a7658570a6e5dd26a9930bad0

          SHA256

          a23de60e02c11b96fc0a77ed3639323b6eac1a2916b567ec8c21e7cd4fb0b03e

          SHA512

          8cacdc2741c0b2391c1d8de2232e4990a710474db4034088021ee7aaf1f6d30e21f248ce95c72ae5853bc6876172dc2290f3ebf8dffab853c61a3525cb75328e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          643c95291411d08a9b7a4b1441b1b557

          SHA1

          12e896f6ff606df7395759b5551a75350ffa5992

          SHA256

          3c97260c36cdc1a2a3d5cb0a28308bd46b9ea414699ec17cab015434298edca6

          SHA512

          ffb6a2f9dc7b626e5117063a7ee541c27660872fd5bbe44f00b6d65a939e3a32bc4c76c70351ef1a6c7f4a5ec9425a59b67c0e771bf4c8a7208cdd1fb3b6c27e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8f1dfe3e620fbe2f1d443daa42a126e7

          SHA1

          d11e7a413c9b4726a7bfa18dec16b1b93e7c5e27

          SHA256

          b191d3702e3b08ae320950c8307675f64c1565dbed45a08bd660483ed57331e0

          SHA512

          8096fed2c7a949eaeac1aaeeaf487057e34fd35f78cad927daed527f3f420caed9bf9f476cb8ed5f3a5b2d3ffc59f3d206be0e249686769445902fa310282707

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4fd591ab9b4be3cf1df95ae0215428a2

          SHA1

          5e74bc1c95729b5bde3bc80f99603280a6c5b4d3

          SHA256

          58b492f585f4b9aa94ecb30e2d87ab469099ad7655e695c611537cd26966a60b

          SHA512

          dc6deff2ef29d96ff6e6051c58815c3fd7402aee1e8767a480631a840699cf46a25687a806d079de0505e524acc54ba649fe02eb7d544a7e0f46beae1f1f802b

        • C:\Users\Admin\AppData\Local\Temp\Cab7CE0.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar7CDF.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b