Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    06-07-2024 08:21

General

  • Target

    27e142090132e7bf731cad061705247c_JaffaCakes118.html

  • Size

    18KB

  • MD5

    27e142090132e7bf731cad061705247c

  • SHA1

    2e03dce1356bfb2ce585eed72187475dbaa9cc25

  • SHA256

    1c73983071792905035c832a8f136812f3d9965b712f2818b70a14303f864ece

  • SHA512

    53fe6383e5dcb4ca1be662454fc48559970d60899d08d3244d40741aa755c0d960354595a03486be765caccb4f4aa6a7687a272f105df0542d465d1297da7a32

  • SSDEEP

    192:nhkVcsZd77uE5VJGxFCVkFvH0H4XBL7zv0NnfrWjoZGHcdZIEJhWCiwsb/5+q32k:hkVcsZdnubCmpRLirWjoZGHcdZIjAmL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\27e142090132e7bf731cad061705247c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2072
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2072 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2476

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2d33b1742365edfcb5e976b7b6af6ad

    SHA1

    c6f5a8c4d599b76abe18f887ff1d3c5be33f8344

    SHA256

    9aac8d67d1a81b568f4e4718d43820e1be21c8e6224b3f2f037f2b85092030f5

    SHA512

    96f854d8dedbfee53f62277a2bfd89e49b7c5ab751785503bcba4167071b7e85edd8495f15ef2741f81e3adfa56042f6e41f09b3c0cb00aaff197132af32d1f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5aa1cee575f4ba685d2cb059edb7cd5

    SHA1

    9af49e962df52db9b2a2e1c56e4205662670b44e

    SHA256

    64bc1aad16be934ee4231bb7e3cf417e96226a1c0e86e1afd7d4f60e9dbced0d

    SHA512

    19bbd8a5c81428dc7ce8993258d89bcf8177be908d018ba2f30313141a39bf3a00102c45915685392fc5bc6b64bf738194848c9954db9f2a11b7ba988586d984

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffd9187b6f8adfe9339d3933333c3857

    SHA1

    73753f65787b8892cf7dc231c6326f6d3f63abe3

    SHA256

    8619f8d132afcf67227983988ef8fcda719a3b124d89146a6f6cffc9bc70bc67

    SHA512

    a430184abb2fe076b927738bb9ef67e10290004cf8d6b1b826fdb4d9f5eebaf6de5c0122f8ba51fbb8c16abfa3c24e017f5598cc4add48e6dec7db6f02069729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce44db5180df4ba2527f02899ec25aa9

    SHA1

    cbca1c9769195276a3da67ef7cbafaa992d749a7

    SHA256

    0ddc08c72a91d9eb417bcfaf140abd65cdec3a399d65049d66c08132978447a1

    SHA512

    53b1146ab73537c465b7765af10cc023fae37927eaab0389809eff219a747b3aa5ff12ef236b8ad2ee7768c32ea2d20b1a1e472e917cafc1c853a1b68bd5f6e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07cf4e9dc408d1b7ef848e948f3fc906

    SHA1

    879af6b85b6827f795b69c5c677a016ec20705c9

    SHA256

    a9eb995b7bbfd26bdc9256c9f54c104ea50c031512f14d46e49d57711fb29a1a

    SHA512

    38d961afbc7677b20070d48c33baa79e7613a6e8f49e813f492c40599f482ae96c7f528589ad42d0814161f39a16dd673058132af94567da325e86b978fb2067

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aeb1df7fb65824511499265a897d105a

    SHA1

    3f6750ecdcdfd21669dc3527ec237a77532ddb8a

    SHA256

    d316f4125c9ccb5a2bd553a6045e8f60ae52148738b9b5eaa698b0f55851c552

    SHA512

    c07a1b00ec0a6a71ecf1755f1942e7c49b24e3d8d798025e5410b0cbf6b3cfcd845a263afadd43610ea3b8d0de0580cab7293d993f9199a5b12bd35bcfe7ba65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afb505b590d8e875a8ade13f62ddd0e8

    SHA1

    97e0e703ee32461c272ba2ecdbf811b28e1eb4e4

    SHA256

    3b65ffd7f02c0d9b472918d4e5eb1405775ff5db771cc6bf0efdd276d25e04b1

    SHA512

    e056d378b8e64ba7a0fcf95fe3770abc332d43d52147df66adc5fd7c09c523399c70b8843332279ade55879a57980a5a3fe0e14d9abc7e70531020cc11127955

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b6a96b395f63f84d4fb1562acac9b7f

    SHA1

    8d099f11e52d189fe9bf678db1089487fd2eac67

    SHA256

    00e1d7670282069075ee2f1605e2ec97cda9885030de0a1729fcecb8425e2c16

    SHA512

    6c0ce80f19d83072eea2cadf7262ef828da280843337b5ac0ebce613b0f82fcba15158f2fed23d9784de393429aaab4a3c3d5521c4a98a170fc7f8b9b25d17f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    200b0754ac872a87589e171e43842bcd

    SHA1

    450d2910cb4a4eea6a3fe266e1f86e00486a22db

    SHA256

    33ddd0ba9f61f5c416596b7090bf5c5f270344c834e4eb3be0eb53ad36547091

    SHA512

    c00cd274f3ad758bfde6181a4e05bee88860d6e4403df409a66bcd20808c0ae18d5f90d1721af2450f8182467d034f756a4c7edabf28e93182470ff79b27150a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43cbb2796ed3f64f315e30e015a8a5c8

    SHA1

    1f3561e11e942fe870352bebfa39a59b41b856b6

    SHA256

    902ae5257cb7cb586474eee4b905947554716efcf51b13181a28a358b2ce0e9d

    SHA512

    31c8df0d87d46e89260e3094ebca4e0fc31bc52153d5b4749f0e84bf413f82bbb194485631f27eb5cc1de5351a5f6ce89db6cc4ce3d5772c2cef135fdcc04952

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9667f6503fdc05e94defa2961f39c571

    SHA1

    2df7a5aff2564c3eb3b54db35a4916153d816074

    SHA256

    ca38701e1805349d18e944b5f24dc354ab49adf2e70fc1f7dbf82c8561fdcae2

    SHA512

    8b7ea323687d71e268ce048850047945adb8c5b5a21018d806c0d8935a25e7cd63eb90233b6a0c2dc690774456694173ad6823580a4695e1c4ba2599c7f9d4ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11ce6f66711c0126f510109c4bd8b44e

    SHA1

    de071d025f49ca3e67a19b6b6020a03c06f44c03

    SHA256

    f222e4f2d874aea7e6e10900ea8eb40310361ac521de1fd4d986a1965f858533

    SHA512

    eafd56b45c5140bdffd47859ad415478d140c6492e2e190bd1d36919531c6f9aff02833c9f044acd4552e0e05911326a75f9a61c10161d6e2092da5f7bda29af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7a32e27832c5a07ecada9f7265ae7e8

    SHA1

    6de5af838722e4f587046a030dd1717baa21b3ee

    SHA256

    73da697ad7845db5318ba6486040e1dbe6c476d64072d65c35c9a96b3b3b3431

    SHA512

    29ecbc87b35754f7995ea4c03fb9dfe8aad2207d6e0d9132cb3b4ddf43869faf53c5dde414d9948bed56cdf9a9949e535adedceb5cdb02e691a7c78c329d607a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a7c99fe4636e3d51b6caf5b6c000c29

    SHA1

    a84325240e15d80945a610bfa516d9105dacaacb

    SHA256

    7bf7ca8ca6da51b4079124dd829f63782e83b54dc0c6de63115a0a248f664165

    SHA512

    c24c972367d938e54759ca73c2fe7208aa5e95f94f88a2b7fee7a28cf70d9d6d5c158fb312f02d3c75c63f8fc931f7e2da7818ae09e5c9b5b26926740c7241c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d8219aabe5574e3f9222034668aad90

    SHA1

    7c9014ec5ee3db0722bfb3e7077049077cf34b9f

    SHA256

    5174446add77f3c3c0d965fe47e3dbd923c246c0ae07806c00b0a1acf8e613a3

    SHA512

    d9c61f378a1db5fdeb75739ca42014a5fac84af0e14a806b5b71055ad4a9954899851df0c8660015c2e7741f3ef51134211bc3f8af16cf0b904e1b0183fb8d87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab50c6be24e5a65ffd5fa938e991f7ad

    SHA1

    5043c889b92d40a880e2256e0b882700847b9ab6

    SHA256

    5885f002ab9d3874bfee79011f75b4d3a2b27ab2963b5647ae23fdcd2ec7827d

    SHA512

    ca0bf1d80b6c8d5dcc46abfe6efb317351d86b0d170db7cfef76c039d866eb74117198b3453c3ac530a3bd8983515962804a5febbec4e4c7114de5979147c07b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5328151aa7ae4076d9e3e4475d96097

    SHA1

    87f93efe9d3e932836f16bed4224ee76628c19d1

    SHA256

    20a0b49caa3f31737ff1b7c7175be4b3b274ce36704171746215f0e582790ac5

    SHA512

    bf66bd18660ec3beeca5f911a080965be100b57ac1a29276139a46f2694f605deea6e2ba8c6dd61705c558092456fadb0c22949eb71c5d33cb9306f43cd906c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc91283f531a6d20c40ddfb24496fef9

    SHA1

    b4ebd6aa307b5a7faeedcfcbe440161504d98d41

    SHA256

    3d0998f7c6f1c03da3bc4caa495d2c5ccb7ec2e669e4577b595d6e328c76bdbb

    SHA512

    141a9c4f20ccd844ca38954e1d0750c1643de75801bb412d34b7e13cae2a04a9b4d1f882b65851229ed3ab3adc2f818dea9ba59d05354f63dd15812feba79fc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1621966e934bf177beb2fdea4042e57c

    SHA1

    a0f78720219d37b1a1d32b5d5da85c78b1187f18

    SHA256

    375f5bae2ac3b555a390ee9012ea3c9e6516aff6e76289d82bce47d23f7235ad

    SHA512

    94422d878e42d9eff6ce21ba7e56cf0c26a8625c614d055b4188488ed20f7faf69da635538eca2c13c4fa12e79566f7d2662ecfac0ef46f9396444f3d34b3952

  • C:\Users\Admin\AppData\Local\Temp\Cab30E2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar31E4.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b