Analysis

  • max time kernel
    143s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    12/07/2024, 19:56

General

  • Target

    3eac6b44b6517af474bdbfe8ddcaf693_JaffaCakes118.html

  • Size

    41KB

  • MD5

    3eac6b44b6517af474bdbfe8ddcaf693

  • SHA1

    8268308892b30ad4a0c27daef68183bbb9bdf107

  • SHA256

    053ee36cd29a158e49079c986c30c7edd12facf6c38e1211682f9bbc0ca0d7b8

  • SHA512

    a1bb59c833ad7360abe70a3794e715e0fdc46d0080673bd698a7c10d6fe765efdb0ccd98257181d85ecdf17aaae3db3f56570528aa97abf48826b3db679f2986

  • SSDEEP

    384:S5rQbn5+VVQ21eLZQ5bSmhw4Ud1JyZP1IQvdAmE0Va6emdOEE36dgYmCcbis4rmN:S2b45J+JyZP1IQvdWSGY7SNRMn2YtJQ/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3eac6b44b6517af474bdbfe8ddcaf693_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:948 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1272

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5f947ab97540b724355d953a3f66f579

          SHA1

          eaeb0dbe714a98fe823560040426dad81514562a

          SHA256

          350dbd17401299776fc767434c190f5c96bd9bdb88a4bf48bff9095e7a330c69

          SHA512

          9568c32e40c1ae83730c7d14999b8de6c2344551b29e72bb29a7b64a216f6e1779ad8f4cfef55388e5332a992a165f8ace955a0631760361c95e7ec1f728d6ba

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          976b94639127a6d550619eeb7c7625d4

          SHA1

          60a15d9bafcb2c65b8d368a9ddcba6a415b48d42

          SHA256

          4ed12d2e2759c34ad25446ff131fa5eec72a2d6027fe8271aa35f5c1799e10cd

          SHA512

          8a265bb87598476593810aa164e45233845afcb009a5e304b0a1208abdf5359846ce31a019541e29d23d1b5ed177bc9c11bcedb40389b030e0ee073a1bd76d3f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          22f5685c71aa0f3c4868ef8faf305401

          SHA1

          fc6012819ef3e8b854bc484e8c5017ee8d27308b

          SHA256

          9fa9bd3f9e4d27c2742fa839a9db8c8b0701ee06690d6d959c45e9ada51c0302

          SHA512

          87253dcc03ae9b387fc1c93a888a1a39cee31053dbf24cb90c51acad4e32e48e13d6525d56837c65ec708f9123d18ad77517f0f34fcdaf02a7fcf5ae4a4f86ae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          37702ca3f8d12cca38caf1ce1930a6e7

          SHA1

          1f51979add03f61f8a8b5b4308ba11c1daf24b98

          SHA256

          4f7b79efe0bc5c92ac1993ad672f6b20527055d4cc06e0d9b699175c9a6726fc

          SHA512

          18afa4f7106642f9c6f2516c8d4b51299a88fb294714c1a4da8bf96d5c6c34106d3687941a83a5c6dc9a58d978255cf7c70fd388ee71b0d20395d8c7691ee6d7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f7b7da00a396978e4263bd577469285d

          SHA1

          d535ee3243e581c474239eebb77b9be57960300b

          SHA256

          30db7d0d9934977ed3d3c52621df173907bb8888c9acb433c7cecdf3ca182a14

          SHA512

          22e217da5fc85b7bf106f06c88e6cbb356e34e32021cb1b2656a0361f8d6cf35f6b73ba36d6f9d716a65eda2fd3d7acff6b4d77ada95e35828d87325d99d1cbb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ac1c8bbc2729a01c3ea88d53e7b27f5b

          SHA1

          1cf1a258d9cf5f9a7a19f7a75d907e1db127f11e

          SHA256

          3f16cfefc8407c08dee9a892f5536f7e502442af15f3f0dddea280a788fbf7d2

          SHA512

          bd2a04595dc9153faf6c6c969d6ea69553641fbf6088c97ced7aab2578d60cdd7b291723038881743b3069a2b94e4934a7af4f450afe337dbec52f612b751bb1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          687e3268e0ef81a37d6c1708bd51ea3d

          SHA1

          d72174f5f14cb6072e46c2991907812fa7b4c663

          SHA256

          4bea0a189f36113aba55e1552bb532f98a2da7a169cc390e64bb9fc681ca4a6c

          SHA512

          de4de1b5cbb3343b2b3734bf3ade2c3213f9f37e9f8b620260d4bd2a2b656637f8ec2fb75a9b767ade5f02fc897bf9a46e184c85837c3d3046aa96c0f7aef03d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6b349c707c1beef9d0bb700fedb5ab6c

          SHA1

          58a7d93e0d8cbf9efa77e8f9cf562e95b8fb5948

          SHA256

          7f62039f1fe93b68ba925580f61fdc963bf38ed518ce0db2c76916c518dc62a4

          SHA512

          aedcea8f9bea08f2511543e4119657dd9eb6abae2be4a314d27fac39baf8e9b5d449da74d236ef3a5dbc7a3881c3351268ebdbf618c94cbbce44f252e41df3ee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6af6a3996cc9d6b59a9d734d62a2d5e2

          SHA1

          c563e3867c87fd014156c7f00711d56e1c48f041

          SHA256

          0320e35f6057dfd70db4f77c279708a97cdfc224be373ef0a6b529479f3b468f

          SHA512

          b66253e0b1f4995b5046589b85c3c12945de325e6f706c3bd4bd207a9d3e95762641b416d84cd06474247a6a51b32e5fc0ff87a6caa84f415a9b1fba130d7910

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2b52ff4df9c1bdb846cd8dab4de3dc9e

          SHA1

          a34485196ec846d5dbe1e6f2f5f5aff85c7abfe3

          SHA256

          771ace09ec648fddefb9676adb163a4d22985bab42d31f3e0e6e8bf03634bd0e

          SHA512

          b063f26d01a4afa8e37f43e4f43f11a0596bad511d3b1a3f70fc197390a23c7fa2fa766806c00647e339c0ca0483a92b4154e81e526714604251b209e481f2c2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c26f2e37c5946e57d2d57062edbcaa16

          SHA1

          b73fe866bf2f70ce79fd40d76fd7546eb54d5c0c

          SHA256

          5cc4272f2002cc686ecfcc33e395271f2f0dfeb6633c6c8cb0161cbd53f234d2

          SHA512

          4da45881f386bc302df3e0f765d8e71aef33ac1704a45a3421de7cbc94d0604adfd931d42cc0bd28f28c5b5a0b3783146be3bd0eee8477d60b1cb2b7ae5d50f0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8238b648bbd31ead52d40a53160719e8

          SHA1

          4c9f0a0e0b7391eada2921495e6d4431b90aa532

          SHA256

          762b8ed922ea7829681f5354739a3ae2393dfad81d0588745c68e2991b5f2bea

          SHA512

          42617277a5eba96fd45d36c0ab466d0d2101db56ea4582f3ebb2b9e2fe49db5443d2f718d610928ce884279c8b8a080ac79ffd4df9cec53fef12e22344b6bdac

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          15325da6ed25791777f9083701069e31

          SHA1

          1c7ff7ae5de06295635bdec659662b086d0a4ae9

          SHA256

          c5ca9db7a22808a50a031e61f68111bd83528eac643be01bed7bb7b7ae25533d

          SHA512

          868bdd9f0afacd6890e552872412f8288e3512ba87298bf017b4655d8c36f61e5351410b85ea60d688404e320b1d349c24fffef5af837a2ca8498bb3b6a12ded

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fd9e7bf5f3b0d667142cd4a297b81166

          SHA1

          7d25520de3bd63d7aa2e7b2ae13c2ee1beff05b6

          SHA256

          e7321c6fefbb48ebe213d59e88df3b4f9c79501df84df9cac2e71aed3e679f3d

          SHA512

          4277fdab55c05577dadfba3849e6cd84abdc2f6785ce0898dd8e5fcdf7a5cc4f647814e186b2baa23a348a06c47debacb97fbf1cc8e8757598db4534d2558c67

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          61239c54dba087508f7ac5fd4683ac67

          SHA1

          296fb28cd7acbed67d1e39a0bb708057c445b0f3

          SHA256

          bc0765f3fd6d56d415d2a2f2ebe4dfc1524c146df6c06c7f3290c1ae7cac99ee

          SHA512

          cfd06f00ddbbde5eb7a5e1fa6ad7e85bad2f1cb4e547ae2f15e42b5fc60b91578703b5c3b923ecf382759484da3561f6ef8c250301f8f82dff6dc92deb0c09aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b1f3b80254792c5610c0f341c36e0aad

          SHA1

          f3b16ec03db74d9cd342f1c4800657ffd4b05631

          SHA256

          61cf6c7c1ff7d50330e7c0a01887bdccb13e8619ae3ae55884b8e0338bfa16de

          SHA512

          d35d1ea887be3208c0560cfaeb768c98a94701bc715015742d94825744b435cbb09494e8650ca1e180580d10a2cc508c5a88dcb41921313f1d0dbe106eb41da3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          58fddb53e890fb9b751637e4e94c3cbf

          SHA1

          4bd9763965c29b8ebd69aafa940568309329a59d

          SHA256

          54aaf988837825e18a489e2d2abf6979238270e9957c6b3ebfa04f6277762546

          SHA512

          d6c5bc7a397ac43c72d23d2468e28425d7b5538bf223c7495f63f5a7716fc6f104f05f113cbd91810f424bf1c1dae3608c3006431cab85e0d96da1def9a3b169

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5c5de566ccc035b83578b5088001c28f

          SHA1

          7fd68a78c02984ea3bd0c233be2dc3720f37380a

          SHA256

          95c44c52272415a07faf05b9169f0261c5ec71a732d4b9af7d4dc804140d864e

          SHA512

          691e4ca88fb219692a108b476ae53028e5d16be656073d9fe8b505c332b10bc25c1f53a950fea18cc71ded3779555351e8f1bd8cb866bfa78f389361c8c2612f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b317818d5e6341e928ef6b6cadcc899a

          SHA1

          5d7ff73bc8b8163c9a87978ce63902d4b37a0e4f

          SHA256

          c6413ef70c93dcb1e83408363106c7b5dcc0b66a9e6391afb18281c41fea08dc

          SHA512

          1586d0cf22a893b158bd391cc51667ccbe921ff7c8d8d3313879a1383028ade422d2871c1d5cd1c87139b7a28f976ea8272569e9d3c8c7323e547ace48a91b6a

        • C:\Users\Admin\AppData\Local\Temp\CabE090.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarE150.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b