Analysis

  • max time kernel
    136s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06/04/2024, 13:21

General

  • Target

    e2a23641e9a953bc8cd233dccefe3691_JaffaCakes118.html

  • Size

    15KB

  • MD5

    e2a23641e9a953bc8cd233dccefe3691

  • SHA1

    3d49cbddadb5b4e082bf9c879896760c77ccd31d

  • SHA256

    58abda66001bff19da41d9596f6d9346ce21da29f7423d853d514926143f6d97

  • SHA512

    156bfcdab7b5cf31df6f85caf8bae193500dff027555ed1172ebed58421bf35e77e18cbbdba200b02261f9cc72313830c22bba3f80226f0850b806c32a040d5c

  • SSDEEP

    384:SoVP45sVqfmsfduyEZ6IWzZZw0UhqmpYGAY:Sd2YRdY6UrxpRAY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e2a23641e9a953bc8cd233dccefe3691_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2432
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2432 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2960

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2c3877c205e448eef72cf99e8a3364b

    SHA1

    8083ff161d0a5a88e8fe299d868191e346f592e1

    SHA256

    d0d0faf10c4bbcd78c54ecd83f366f7283b9be8381e3fe23c11be6d74a0c5255

    SHA512

    d4b0fc342b61aa7fffc734ed67eee2c4690f699edff56aaae54e1e2adb08222db271146cf95afedb0fa502569646629ee78e724174b43f04b743ec3f792bf877

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5de24b2c38129f0145cb6beb9261891c

    SHA1

    75e65b64f35bc697b04905f9de5daf4dee3558f5

    SHA256

    971872ffd050bbeb0beffc4314fd3bdb9603109ff1d6146a8857ddf744e1f5ea

    SHA512

    a1112b4bdf1dd78d7003d3bb00fad9899f062a6ed9144bc18ea5f2a535225c290982deb563426d623c6a65ac27bfab8a34fdf90753693fb44efdd1af96913ca5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efc747576bf68de3d8874776da737b7e

    SHA1

    05d2018f564ef1898f041a287477f15d3847a44d

    SHA256

    1a980ad52dee67077a8b14d787d4b7b53270e5f0ad9e8aad8309fb4cb7a9b1f7

    SHA512

    fe66cb80a59b9c17ce9546df56c5cab4d129bedfffd5c0017d78404f88e0107f34b8cb1994b226c4f646ec9d9a74e9b5f72136565d93f245224f0ecf788c9233

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20a680901b1c66f6b4128aa2f5b8956c

    SHA1

    c74ebae6bc0be58660399784c1c317484da2ec67

    SHA256

    52e61b6a45fcfc7c0ab568207ac033d10ba932e04465aee1546269e7c95b9f2f

    SHA512

    2c0ce5260904b5ae5bf8763b52fdd80ee5e22001ee09ca6ed5cade0f8da367e68d3e115e2795cec706ccb761d6db5c5159cd9118d42e4e48ed3b68989c30244a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df2b2eb4d6a3bcfcfa5465d57b5cfa6d

    SHA1

    1e03053f678ed1921ae498509075f32a80cae618

    SHA256

    d1a0a78d6edfefb42de1819cfa6251e6d1b8541799403a5f2e8d70450bd9f8d3

    SHA512

    e2b96f2ca64ee9fbae6b190abf97de9ea6417f07cdde16a8663e6b8364ee3a70c192d1abbc343cd7df368653aac51649c1e4e9f4599b97e6e9b4851a6ebf50b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfa1cbfc2951f85815959d0fddb5b983

    SHA1

    5a9fe73938a17dc07c978e4605f3e14953ab13da

    SHA256

    97a8bd283ca2ea55c571a58397667a4d45ef013641f0575296bac256f5c21fe4

    SHA512

    22d628fe785205242cb0adf661f5f8a8e2078ba63502796a9bd4dbd17e7d9a90a2f0646bc98055153e132122e162c3e4d573255b3e250c2d3b951fa4d22189c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc157faefe9c7dbe9503045f5494dfc8

    SHA1

    803a1188a5c849f3d870ce433eadc158a1ac81b8

    SHA256

    96fe15340919d0e438cd30d7ec78fba4f8f27769768430cb2e96a09f3eb5b485

    SHA512

    44aaa386c15ac6e79a8308f3067e22e495c286e2b72368aa7176f5997d3497e38f49a8dd463ea25ecf8966b368adaca8cf3422028b1aa734c0f54198ec322da8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe6c7a6c574d2eb434e5b27c10f5024a

    SHA1

    263ff0216750c755d05319cf34f5ea69d6093886

    SHA256

    b00385b33a13ec64544322e7a784a2822bd378794778767fb1d1942f5ac73d3c

    SHA512

    a042394dcc4c3c9c0352af0b7034630db0e2dd71153cc7ce4b106709cc4fd03b49d95d9222c23ec4409616f9b4bd21304ff75bc132843713ed658d92dad827ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a0551581e37d7cae71b84c13de61bc74

    SHA1

    6ac94812e7e709dafe5ab625de1aab3d9d1b2033

    SHA256

    7afcbf2b44ddc86108da50939d1fd6d70144355e8c35fd8c77784a7e2a3385f1

    SHA512

    e5338f8ccb30aaa9257b529edcbd21301c1703d1c38d325b38124e4d1648536d2f154bd26fb692b59158ef40812dbbd6ea8c07a32ee4a7e94f51754da2db4fd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    670d844b98844615cdbdde43f1d216b8

    SHA1

    a931d21e841d231cdec4df92091269c06143e893

    SHA256

    b428b4051f77264a5f3b2e2a617658401659c8f074c567fded250716f7d979c9

    SHA512

    975f7dc06214146e7841af38c53b43e78fbaa229e64c0ef79f438e867351b7362c5c75f4149406d728e44783085946ea519b9e0bab49c9aa665819649bc6e16d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    870e947fa07f70a4b8cc1ea69e905b4d

    SHA1

    1d9f578820ff2ea66997c06306ac964a2250446e

    SHA256

    a73b790e054b0669bb6ffa719e3aaaac24b246fb02e3b5682efe2ed2003c24eb

    SHA512

    6253b766da3b391d45772cebf210c9870e6bc1b8e7c9eecde2c8a8170d4bf38eab40fa20ebdae394432eaeec0d7ec78dd84ff1dc7b7b01d111c3c008c2ac5b58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c82c639fb6b25c73103bd37295062501

    SHA1

    0c005ebc9c1b00888c1882a9e85c64f5a9dc2369

    SHA256

    a6d8b732425ffd85d0b9dadb075c3bc5dc89d20d49a24b899cf66bc628925045

    SHA512

    250abcd806a4d74afa1af8a6db3e894eda5a8f2e17c7e07f39c46391ad56f72cbc886ddd9eb65f15abf61f6911bf18b161adece00059f2e11ad7ce63cf0b1a6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65039d26bab07104b307c4b04c818008

    SHA1

    51aaba50aaf3669b179d2f361a0828fce6e19f92

    SHA256

    c5699199ba1992e6d284a3bb0a45c38a121e84c82658c098b67874417a0c1602

    SHA512

    059bdd49e2086b5c363a82dd67f3e626bd0a6125b3b99c468b66d3c91d054c0d02dc606dbf140dc60dad5ebdf93513b2c814bdeaff8e70d87379f8d029716543

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5be4426a33244da32357f5ef73419707

    SHA1

    40224ee6cea7e679e6504222207f0c50e6c94c1a

    SHA256

    39b719920573f2f2cfecbcd258ee64eaf4d1128ffeb8604f0bd1aee94ab45bb0

    SHA512

    6a7fe68fbdf2a2d1ac519a4212ebb81c99798d999159b506124a3d4b387fe717942eaf987452feb7357af8d5fca10f712514994f4ee82d78176eefda4a6ab59f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29e11dc1fa4ad57bcde4711ceb3039ba

    SHA1

    7ecd984af8eb2a07d57faef673e959ee0b24c968

    SHA256

    baffb0f412996f70d9f6dc00693eed49ddd64807e7b9a51358ae9a8e9c128dce

    SHA512

    e97ad3e7aca12058fc19a53dc1da54397932716468a094fa1a4c65749c0d258bdc04f6da52bff33e12d9355765009e91b31938305d448f607a346d4aaa64fd7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69c576f159b6a438412a1a0ef7ae1b2b

    SHA1

    c9808b0baf730be74a0b33952eb3be379b5613ae

    SHA256

    96e446b75fe5a4fae22f4ee1c46bbd3ec015640bdb24dfe75d6304ba0b977337

    SHA512

    ed370a6c086a44124f1857c35622ca6b0bfa73debb0f46273c83dc3eb98772fb7548ac411933386937ed11fd9f5c39bca4ef9286f9f3a35512c26d9ddad98036

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e87654ecc8c4f6ed2f866352e4a08b4c

    SHA1

    8b0256224212e0da85d87dec563fcdf7c391577c

    SHA256

    45864b93e2b11139222916e88f115c68e309ecb7633ae13b7e1da87afbff26d3

    SHA512

    9bb5af856b9ff3e9295c06f3c683d89c3d5e787d20f907552b2d9c230d95a6d7bcad8b3a4df1e555149db7330ca7d30380375c08d502d8f88c969ec808c9a3fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d50695ee67e3d2e67e0eb91c92bed5bf

    SHA1

    3b37fd6166959a7a89a6b6e70d2701f2855f53df

    SHA256

    4e4db8de58449277b89b7ffbf9258a67a94ac5712acbcf584bcb2cd7ef294ca7

    SHA512

    00b7f4fd224fd51d1d66bd5056b1158a5853cf2f4ea0510b41ad04dfc6bb0cb3b093c887971449e6768e9b4073603f573576faeec715517f41bc3e4384b00742

  • C:\Users\Admin\AppData\Local\Temp\Cab9188.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9289.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a