Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    16-07-2024 01:50

General

  • Target

    4c516c1408a8410affb81574d4023003_JaffaCakes118.html

  • Size

    37KB

  • MD5

    4c516c1408a8410affb81574d4023003

  • SHA1

    fb2f582ec7a6add3c0f379ecf421c1225858cc4f

  • SHA256

    424ef7a426b4d90a3092153b7183a11ef614ec280de4f8bd94d7ce3f417356b6

  • SHA512

    9354be333c10c23be79f8047541b6f740c7b9b48b1ce9602eb3d2cb3e95e6da3ba637d951f8f974c6b1ae1befa01acd764d46aab8495129cad2090f9cc8e6012

  • SSDEEP

    768:S4EFcQGhBvkofaPWpi5AN4FEKerpQUFuju+mkH0F9iy8fMdJExolQJ:S4Eu3+mkH0iy8fazI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4c516c1408a8410affb81574d4023003_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2676
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2676 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b79288db72724315999cb7f93db84fa2

    SHA1

    5f456576525961a2cb37232fe61919542973b052

    SHA256

    d86479c43162101c59493def89fbaff4f6adee4d3913abddd2354b9a92170366

    SHA512

    7e7c8dc97b4236b7a5936cd2276095aaa2daa55cd51a2520265e0455edee118c7ad3a5215e0774b378383d8248bff58f7855c674990aa4fba8db2376ccf8b58c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2211013e47a42db8bc91c968dd6de68e

    SHA1

    8da37bdce1b6d963531ea5657f997dc1929fbff0

    SHA256

    cf5dff0a60d83ef3db0a78cfb7b700afe1e2fe46ccc00e5243d8cbf1201b9a1b

    SHA512

    0a79a5ae4e251fac11b69e17c41b96f60c32a82eba5a77b8e25b38eb2762866c6d0d1349fddb96843226660d3affe405df6fb007c009f9f35da51fea54cfe893

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a0c753e527f98211c40e4a10ea1ff386

    SHA1

    9b03ec63d286ca78d78b95aeaccaf998d42dfcc1

    SHA256

    55f1f99e2e286f250047a9c2c4375ff608f3f96b84b70d7486f1e4ec5a0a7c0d

    SHA512

    d4ab5b0394d0409955f91f0d9a616d45d572e5c9ea3694fd3866d7f8e87f0b3697ee8937cbd4f32c69001c49a1e1f48bb2c8139830e0ceab103ca84089fa1ea3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a065f8de9b879b0f67836a5ead52ed57

    SHA1

    3eecc1fe81b3294ea5f4b3a6a2c733b432e4b2a0

    SHA256

    6600f9f687ee8522586893e96034ae6bb1a08a1736307917dfa9c1eec7deeb10

    SHA512

    c9c86392c0970515e8962e8347efbdc9cf47de62cea7a947d3e83e2795de41034be1cd0e938e7edcf4ecdda22493009cbb2fd98114c77c35ac844ea7fa3174f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e47b47aa02d6628de121cc272cd7f8ac

    SHA1

    52dfab8b850e759520e84a60a3ec15286263a7c2

    SHA256

    5399e6958a4c4bd8edc4d2daefe073d1f0e3a5ab360cb5a621118f42d99b6c9a

    SHA512

    f6ec1fdf30b9a633c0fde4d5e3c79a858622d34ba2256983e2e52b056ea47e87a1efaf9a69b950c4c16d822d99656fbca9823c9cc47d25722593cfcdba4006a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ec5c31c904ba8244b28a4f1b91546881

    SHA1

    d51998a5fcbb31bdb5dd80b2828087f53d302694

    SHA256

    09261236c9455533effbb6c886d01fbc8c9113aaad28e919f5c589e6eece1a10

    SHA512

    dfa7112ef3bebc3a065ae30db56887c6de0be2d2931d676d124bcdf8ddf028de35c87c1ba6d87009a256e257b7df757cb8f6890037c3b2c6cfc9934f05713cf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    90bb13a0437d24f36934fc37a3f51647

    SHA1

    cbe313f9d6f8c6559a0b326c5ee2321cc9ff65b2

    SHA256

    8d5b2bd5ca834fb91392f9ca152be64d3ae6527e218eb68f089491523c72a19b

    SHA512

    c22583d28fa1b7fdcb41ebb0ec27b283a3a3e41f052a06fe9c582185e2e3ee44c2ceca18e0ec9b6270713d426188142d62dff50e5658e9d9546d6c4a9ff9d67c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9bb905267cd9e0c4211cd367d66a3c8b

    SHA1

    1845a8e16926892aaf989224c87ff52bec820dab

    SHA256

    e0222ae34886f65894cabe1a7b685c4881524b93de8df2ab75eb0a5a9804d7dd

    SHA512

    99b63b8bcb44c886182731c58a323bfb55e65451f80041629c15cef1f1c96832b1e36194b47e70a0b1d2a9880387f1da0dfcba8e5ab0d4bb850d9205dd8920d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8d58ed03f268361b44d3bc93c843d718

    SHA1

    3319ddd997edde9f7241560d451cd5c61b2dfeac

    SHA256

    1bffabe1c0e2f4fcc9dd3b776a6484752248c9a1fa07aa1cb9b08f5e7958295a

    SHA512

    3428898fd1d4706f8cbfa6ba24824fc49759aa300a4c3c458799ce213f4a2fdc8e7d2aa3706cc99d30358f2168679e955800a44e77c0897dd478f049589d8652

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7a8b5acef5a1312fa6f609230155edef

    SHA1

    3ab7c22799e2ce8b6df10650e8a56811b8cf495d

    SHA256

    0e264ad30fc7faa8ed33bc16fe9d81d39966c942d150ecb7f2a45a89d3a3d4b8

    SHA512

    0c94f7c9f05ddaca047829da86b7c248b7f8864013a9968b1d683a34b901d3669b2f36a82f06a6a435faf5d0184e570b8094c2171fcc12a8c3b541da0687b7e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a8cbeddbfff423774e230b1153eaca3c

    SHA1

    22724d350c302f5aa9a84d3aa5e8466249dfbd54

    SHA256

    cafd68150d53698af191b3bda66f50fc16440ba46f96b9d49b9c70463076eb9d

    SHA512

    ee47b0cd4b98107cdd4ee6d762be9c7c15f4242ad0c1bbf4e07175390b81c390d49349f0b0bc8fc1ad406a595e8662284d1908c3262b34074f32fb1e69bec68e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    320f6139c5b378d95b650dbe67d8fa8d

    SHA1

    4b063db8e90452ec00fa702efed3d8386942a732

    SHA256

    855bf292059dceb1775378c5c181578ea3ebe577463852ebd67381267537cfc5

    SHA512

    f19349bcc939d5820d8f254492e7da139cc7d7bb7331b666816e27eedf7087a83443bf9eea515b87ca7de3873c897fa11d6647cc7b1c114b2b6e171fa11f936d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4dbd08dacc6c288adb5aa6f81154ea76

    SHA1

    6868e29bbfab1047d9836f614d1b2a2fceca1faf

    SHA256

    e8bf4b673c3e376f80292506b1dbb0cb88647d162f1d5f1bd19a6b7000db175d

    SHA512

    336c05dcaaa040e477e0fed2360c01cdbd7372a65f71fba40e30e6afbbc12442a8620cb28c3c690cb50eac204ce3bde4e70e64b9d07acdabca9de27df67fa4e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    43c65ad115853172f04ae7f3c7dabb9f

    SHA1

    5196a17ddeb0bd92ea229020d7244b158eda6e7a

    SHA256

    fde06e35a7c6bf798508ce7cf9c6b7423ad5fe4a2dcfc77504803fb6eda71f00

    SHA512

    be48db2dc41a80867f40c0230d6b85e46031ffd341b886a6570e7a063b06411161492bd8d67d02c4e6007bf9f679af8d941297a90578e54ff94b0eb1625419df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    135760a2f3fea9348277abbb9be56367

    SHA1

    b3237a523d9c49691b79c406623e1eafb4655fe8

    SHA256

    5e739d8868eb0adf09d768ec295fc4b0a2412f013cbbe124bb32d0bc393284c4

    SHA512

    8733b49ee272a6afce83aa33f8ee9409c5f3a0b18403ffa9f61cac87fa090bbd53c5fd9e09ba5b922aa701cff3d9458dad73333f29354bbd8c7be758969e0f93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b5c337504bcc4f03e352709f0d624f3b

    SHA1

    b140ba10d9c8a79bb821b630a41209c3a1e3ae56

    SHA256

    c1c0a96f1eab44980cbf809cfc2b3f2682840c4ec355b11aeb235d7ec6e07e29

    SHA512

    91343f07647fcc9abdd871ad0dd9ed7bc172dd958e777963a53d0db0ca05784a1d2a921f2cacf3105e2daabaa1002fa17c9ff358816cf299fab8b825eefd0228

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    93c9911431f1090e3ad969748ce6a6a8

    SHA1

    038eacb40d44c986fc485831fb8217b430023c25

    SHA256

    d457f4f75a2df809bd96c15a8d1ceb67f5c8af81e7d68b931875beeda5b2d112

    SHA512

    e74366151aae9625b17dd5c1cef755bf1173816acedf9a06274bc65111779c039fb5312509a342aae625602f0695897b9d9a9a33493474adabb503242c8979d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    dc56c3d18ab14ece24ed0ca6e52b805a

    SHA1

    6f60c8f0361fd6a967f0e33aae1202872c3cef14

    SHA256

    d273defb3f392986db9df7e2d1533217b15f8c4e8ac74adde3e5750722f4a64c

    SHA512

    82cf27902cabd452beb464aa89ee83090728ab4fe315feaa67276224e2523811c12c4d225a08221869431c71c919529994a9161ed9862d9e6719ea68286ad232

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fcc246af4efa90dab469dd8f796ec5b4

    SHA1

    aefc3fa75726f6dfb0b5a9bb55abc1beaf5d9864

    SHA256

    4a4411424106be8c7e45fa9d9d67f5eeda3cf2a4e699999482fe6eeb3864a1da

    SHA512

    3e67b6e741d80e7ba2d2937ced13460732445e22c8e436fb39778eb46e00f2ffc34d94f2371b20c14a38d31d71f0e177d1761b67334ef4d61bdda77bfb28cbf1

  • C:\Users\Admin\AppData\Local\Temp\Cab76A9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7758.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b