Analysis

  • max time kernel
    121s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/07/2024, 19:01

General

  • Target

    236c7253728abca04540b219f071539c_JaffaCakes118.html

  • Size

    20KB

  • MD5

    236c7253728abca04540b219f071539c

  • SHA1

    5d6f122665f046d273318b9318593d26221d3b60

  • SHA256

    45aea9c6f01dda8c73898acc420e31c2da8a4681b7c83f3f11e31606851c550c

  • SHA512

    9e1fd30ee3b256171724764428b5183b0137f63e54b5447b7643f82dc0771559386a468065e920ad227aba964afbe7be041dda3c55c3bb1d104baeedb71ab802

  • SSDEEP

    384:OGJ0HlIc4tv4cuGTHjGJQBBUKiGJyrTHn6Z8i/gb5LOXguLZ:OGzDGvGok8AglExLZ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\236c7253728abca04540b219f071539c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2108

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          baae28025437f2df56fe47cbd88f8498

          SHA1

          784b2ae048b5131efdeff9bc00864e1be28e7c6b

          SHA256

          9ef42f921687920c13a27d734fbb1a0452f45446248fb2131f00164d381856e6

          SHA512

          e6b05a34497bfb9abe7cc2d49ca0f589f951b194e82d927a8cd21a91f3e2d5cf585294e41b4a3d167def4a3dbf8da85167b091dcb7f095df28cf1557847008d9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          390b3d514d7140f7b9a29ec15a1987e6

          SHA1

          89ce6d6cb42b2f8c9fbb93bd89ca3f237c35a529

          SHA256

          cbb0fb29ecc650099441d1867ea3552f352d7ededf64c3f83eff02e4102150e1

          SHA512

          57468103d8b5e10ed29f31fd4b7520d0efd462025e57941d85258accc4b4defbd0786f33e3526f4ae777dce83f6dafdb43cd10f95fb5de5639e4dc4c8b129e29

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a0bae85619d36805002dcfb11576cee9

          SHA1

          5cce1bf153ff15e7dcc05c1a45db352776840a77

          SHA256

          c5aaa2c6a6868be3b1ba479de2b0355f4990671a9ba272ac362ad04f8523fca1

          SHA512

          ee77dec16bf2b6f234d136b385c211d2ce9560a8123a6236f77ffce1a401668198f9c5d555290cb6e8fbf5bb938f7a19dc7a0d684bf2b6f1eb6d0904b89cc5fc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fc7c7aabd0daf396fb9d2ea38c36dcaa

          SHA1

          b1ddb0d82e14a2a48ad99cb31ccc894c55cd22b1

          SHA256

          5172658fa85c0692a33180a04f9a8a1ee1600e6a9f8fc262b5ef17fe6f81efb6

          SHA512

          a2d7bbf42859bdeccea35e39f9a68e1e84608aa3362e9b060b59bbe3dfb012e3d4c6e208436395d94ae85a2ebfed2648325ef0cf44236650f18a0fea82845963

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ea3db50cd67160ae200dab0a25225991

          SHA1

          a5909b7b2a224fd9637a9228c23de86355c81e83

          SHA256

          a9d765ff6f7b6da25b1cfb6b89e325fcc214e4e20ff226b97c3d3fc0284158dc

          SHA512

          da43f3210894bbc02a03fdc0970edef6e0d336299770b858322bd54fc6852fff2b6d9733db0687396706462e815e6433f05285e4102a8c666e8d42843aa285e9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8a4960c03acda14b41680a57efd20800

          SHA1

          a8e5ef323669d574d152aa72bccbc5e8a1637dbd

          SHA256

          c2fcd5fc55ba912b247d737eec1d6400198183c9eff9df78f730123e0418d6fe

          SHA512

          21c20a62eccd6a1d7b9772b914ced9da218667fe636892b8086ef12cad50773b652a30c953985de5574f107150933d7b5e47192862abbf3d252d15811c0fab59

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b09f7712a7c0f81881491fefa477a2e0

          SHA1

          4aa642a2befe8a84f44c98bf5887f3743b66e065

          SHA256

          a4404cec1f440763c6e87192eb9128daad6f39940a7a71f7fc0bf93f07c8d021

          SHA512

          801d9069a999a977252f20eba243ad5aa9314661c42e0831b82a264845cd1f2fdf63d74bf7c932e22e765813c70b86b4d6d789ee758ecf892fb7c2dcae2c09e9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          93a7db84326714793ba93fca6eb21cbd

          SHA1

          2ef043699f5ed4112958faf3c581c2ae0e888697

          SHA256

          d668ec49b12f3388f51b162cd59b694a5c53dfff7d042b9f18a877b00e10c45d

          SHA512

          89b1b2a23cafd2af2d5d2220ca3a66ca9f0168f5fb87283955c0bdabeacd5612fee6ecf16a78557aa1d48fe5c2fb384879aa440ae2e86218b2e6f8b8664eeca0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6133a7c22f013076f097f961f5705b38

          SHA1

          135f6f2b007d922c2406300fe84907d6600c2e1c

          SHA256

          3bb18094c706f8b5158bca687067d1a35a7cea701c458b058b29173bfddffd68

          SHA512

          3da3e6d5cefde7dead555a9b852c78d3419d251e1c8fbbd884b7bbfa9b519f34a7552c43c6a44ec19abfe3e4c8925a324a10aab51af24b86c2b983785591e9f2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          66e83bb4fce3330120a4e0d9ec360034

          SHA1

          b7f760a994c7e8badb1d020341d1e9019c38d746

          SHA256

          516206da011bfa28370fd6516c66dd015e603b228d782baa6bde5b94ea5dba57

          SHA512

          6c63a6232b5cb7affb8a6e5842aefa2b19d7f8f6b7c7c2dbb608a9673fbe62cded4f283c11e9430f28d90a13ca6894f728367be04b8afea07b5353b926f5af44

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8b0afcc6f08a31a96036bffea1f3b009

          SHA1

          99d8a9638dbccbc07dfabb6bfb42c387330eaaa3

          SHA256

          bd7baf8ebe6e6823162a1f5c73fd903e8ff2c58c67058b334a0e5888c1dddeb0

          SHA512

          da7a5ab40c523ce95207f5114b772e9e2d369b96065e30a927df55baf61ae9524b133692238ad5966e9889dd62673950dde5adb1b893e32e11afe6ab50aa0f56

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7695a2024a7ba498c2f23b5a2915b4e5

          SHA1

          2c8d11b61e1a3e96f9b0aafb7114b14840db3213

          SHA256

          4166561dcdd07d395fb77a240c455ac7b58df0e464debf16ef8bfd5c9f6528a1

          SHA512

          28c53e775251eb2b8adc208282cdda42b3dcf97d9972635e654c0a5103a622617912e0ab89b8a576cef22559d6ed0aa6e56148f3a2390d257b5c1cc490ff7f06

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          77dc62df34e0bf81f18e07728cbc45fa

          SHA1

          54070807426768ad3dcc7f9dc737cf0e3381e300

          SHA256

          cbe4976392aa3adb6f94ca1cab7d200daee9c0a6a70b77c0d9b6a2cffded21ef

          SHA512

          dd2d57f2eb5cdcdf8c21572c16831c3186d7a6e24f475c5df7a77c0344f664dccfd5a174c2f43202df59378db924b2842c579bc44b391ea1a085360e4d88e7ff

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6e8b8efc4ff2bc66cd00bf43c21a1161

          SHA1

          e897cad81337a30687b5b9bca110b3d3a0d93c68

          SHA256

          41c620e4bba3a58e76fe63ab72a3b40fd328f7549da754832eef9093e13e7e2e

          SHA512

          5a8ba2f88cbdfc2d4d7973abfcbb2df2c7cf38708ab9cd25b980be49f4253201cfcaa854844e1dc8995b78001b46f4526089981eee9aac38f1bea34ba014f7c1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0282a997e238bc608574696ac7395423

          SHA1

          e623f45109d9b07e20b46af57115a4c1cc2ed5c9

          SHA256

          bf7b9a682812175b297b1e699d2ae92c12deae535d815b4cf76eb769b1a7a705

          SHA512

          da8f7b515d8921fcc2a0e9705dd3a721f3df0d4c8601dbb800e2f1def45a01e4a17a67fd50cf80d4a18761447625e9df26b8e3dc7e8fe3e3be82bd197f2785aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d354b2405b82fa40e5abe4b7e4d54f1e

          SHA1

          fefde2d7f32aff0654fd4f5228bb98f6567c0787

          SHA256

          d0b5d6b262d66654bfbbc071fece9bb93ba92266af9046d79823d7573b0119b6

          SHA512

          7a97734f4164a5cc5e3d7d2b00621229ed16dcd280e7efefff485791157dace9acbb569903641d1f25bcdb1e2fb3288e2a0dfbe929e3b914569968abbfff41ad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          81223675439c427954e2e0ab48d729dd

          SHA1

          cfdce4d3b6a6b775c970be3afd3e9a6a6b27f899

          SHA256

          009d3e8657279256f66f690d812f7999a0195ceb627f7641564565a69c2de4b1

          SHA512

          9cd446e05fd45c22d32e86f22d3854906706cab38a08796e7913350462ed7bfc476a428386d928a0dbe295bbe8f932a13d1cc383e14e9c79c26c3b53da9833d7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fa4303638159eeb248cbdd18f7acc128

          SHA1

          2339abb38fd8ddfb0cb28cffcc2c12f5f28f0898

          SHA256

          04305bc13f67c57705b0443073e03ca9522bef27a0f85055947913a8cb5ecb30

          SHA512

          7fa2881a48809f269072091c0fde2dd328aeaa52e31d8dc8cff7096b6b50b4b3d7d882985e81e92bd3ac3012c2f4972c3f41f2cb7ffee3bd37f29e9f6e500ed1

        • C:\Users\Admin\AppData\Local\Temp\Cab16BE.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar1770.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b