Analysis

  • max time kernel
    119s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240319-en
  • resource tags

    arch:x64arch:x86image:win7-20240319-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 18:51

General

  • Target

    f670f903d551fe6022fcbaaece5987ec_JaffaCakes118.html

  • Size

    23KB

  • MD5

    f670f903d551fe6022fcbaaece5987ec

  • SHA1

    28c5e43be6904f2df8af4f53cf8aa1e302310997

  • SHA256

    da67d06d1c51bab7bd39ccc2d6b5ded52964acd0c472705ee4550613c1918c09

  • SHA512

    10d11d435520c50e71c598e4de599999e31cd14922943c86369049376d2bfbc448ccf4102c432f4f39f59d261445ed3b30281c83a7629037d431d62a3cad6cc0

  • SSDEEP

    384:Q2nA4yw9h6pzSmmztvukeKXXTuiw3JStj0vKL24UTpNyOcn8tvG5nTDuU5esT8a:Z1nhdtWkekpEsAKc7wV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f670f903d551fe6022fcbaaece5987ec_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2212

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7d93e79fd479c1927daffc8f7585e3f9

          SHA1

          089dcae3642b766ee655e846626f6e7f5a78576f

          SHA256

          7a957bea75830a832ae4b6d03053586c28403d3565e46929f97a8734c458a820

          SHA512

          fb1081468bb08c95279dc9bf8fc5461864699d2524ced49e5e884152f4450c30d208ddf8751c3f92c768037023f7543517d29ce6afaadc4cd4dbe8790222164a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          db7aa0610f54baf03fd69f8f1b3221bc

          SHA1

          d8fab5b22bf28632bb8511803fe9345585c7d743

          SHA256

          d78e4ec75aa6854d6baf5b1a96b9738634d552d3f41bf95613de870e64d8faa8

          SHA512

          be588ffcae7e6de6e88adc73afce5a98c290d689790df836dd2f3d359d1002937e2e6c35bddde9a4a430df316cd49d430f33acf5f521df8841ee4dc6d96627ab

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3e5777a65abb168965e9a9619dbdb5d7

          SHA1

          f530b1ad55f916edb28665bd690fa6aff45438e7

          SHA256

          98d68968c55eb796013fa741e1604b578f7756f4dc585e7acfb98f0317aef78c

          SHA512

          7cf18a58a02cfde65f2c92fe8aa28657704b35c639ae0e70d15757632d1291166e070613ad99bacc22ddac5b61c15cb82f96ff9a481f5f3035c213cbc644848c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ace60c28b8902eadf4b242418446995f

          SHA1

          c50067e5321268c378fcc641cead43e4b8383c8e

          SHA256

          bb27ceb2582ac2d8498a106e0f5e869cf9103c58b044ac3d0bebe4fc44219d31

          SHA512

          6a5ec4bec5a73dcac7d96473ced124f2ed2317fa9f2a272b32957704fa43b98c2504c6eebd46d034fe4975d6b809c94a177f168bad4b6ce1fbf7d76b89ca8cd4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3e5694d7e5b02b30059a134fa39f0b26

          SHA1

          8b51d9c6b92998c78126e6d536b0003e15ee7e55

          SHA256

          9ceb0ab318d42cd08d7aaff2eb88c75b3ef3e4770b8912bce0f8393783e8ad7b

          SHA512

          d6b771a774cfb39c1f50ddcf3d8f4bb3a96381922b56657338d3b33fed14349e10bb5eb270b9dc0cddcb3d9189be1a9601052aca25b9e6e49a79c998c9ff1050

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          67c174423ecc09b0b62eeaed4659b4ef

          SHA1

          d2f7a119ebdb960df8cd1c6d229b8433da372444

          SHA256

          5cbcce0ee5790a6c2d5a7fa6ee81d0221f973a7e6d8b33aa5f4ccb4be6670ba4

          SHA512

          d922256352a90cf2df1e93f17f373cb12459a07ff08e4746538f1346e80de3a1907a0239e8725deef82e358df1341b2c1ef8511aa9d70bbf5be9be2245f4d7b8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ffa7ab0fc9f6f246dcdef6a74a160308

          SHA1

          b6a26c90dbaebb21e4447385e7276e9c7e34ca65

          SHA256

          6cd6cf7a982808110001d01ea8266fa8789fd65a360f0a53b6ca1690a8a6d9be

          SHA512

          cc7478959842ac6954325799aa666aba399dac9e1b8afabc4402c1c4ad37fb1bfab899fdc4958ab765313d924e7a3212afab29ad54c15a0baf585e025210dd18

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          545d110fc0ad4f955963e830a2132ad0

          SHA1

          764cd610de79ca3c5421b59ef7ea116dc0610181

          SHA256

          112b755581536ba59703443189d488cf680ebd9c6a5a9b3d0c5567a99f2828a0

          SHA512

          1274233dd0ea1ea73164c2ca81dc15f0b83036a600a75e76fdf037aa5108e1e5319ad0e24c997d169b971bb6d9b25a6b1697abd6cd144464ae8ce190c8e651f1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3365db807e18439b459ae6bf3faa621c

          SHA1

          b1f5d20da34028d366bf9649ab198c142c5323fe

          SHA256

          6d16d410a9afdb5bad5ec395f4564e3180d2a4eae15c646af2cea323d06ac469

          SHA512

          ffe2764e8ab4ecb6ca3d3674b296bd34053abc8061d12ba7b198659330432458ece03e55102df3ac2bc27e87ad58a17efdb7a2d13f5eb737d9b59fdf5e704a20

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e53984ffa7d60f01f904239a06abb2f5

          SHA1

          0316511f84f1b6dae6adc4602d87577d5c124194

          SHA256

          b9b7ad50868299cf731fc0d7e7afbfc21193e2f1961d46f743517fe8aff3a71f

          SHA512

          bfe1f6a830f4f5069821ac8a824acce020a765f3898976a04c4ba9281745edfecd93eb2c0631a0088cd711595af72c0f4dcba9be0f5e4587b340699e7e5ce572

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4151b562443b5b92987ddc9b49e5b32a

          SHA1

          bebbd208ce1092fee9614db57c1e75db164a7e67

          SHA256

          758e63005aff7eb5c7a4b7bcabcec4e7216b79fcf99905b1a2c110fb8f85ac98

          SHA512

          9aeee464570688b79a15b02157c713158a05efeb437f270c343f5b9f9c6ec6d92a8c7f310aeb6871ca332bcae9070c92066525bbaf7cd59f958debd458421d93

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4c7903e362030231eb1dacd1a1400682

          SHA1

          1046d780736f5a0b2e8c0689462bb7ee71d57001

          SHA256

          b937b488afdf06c46edff9613170fba7716aabd53fee089bd54233471779c5e8

          SHA512

          b5c90b75be78d6f86192681907f32e40a194dc5b6d83fd2aea37fe40d1b0f3476fa47fe788bcf6fb0b8444f6e36996d8b7044de8d01faf48fd82aba16430c95e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          39a35309664b1f913f82accab4dfd41e

          SHA1

          56b0e0c87beb0c568e67719abfb02eb14eadf754

          SHA256

          46a72196266a8295af20787dba6955c46ef3eec59d6f2318e698cc3fd6213224

          SHA512

          82e64875df7dfea72b2737ab3442a1f1bd1ded90573101e68434b7795f76b49e93d202adc7a35d764b7ffd80c844f881d96df5d39960196f6d4412c83e5930d4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1080792a594d497fc7ab747facb2839b

          SHA1

          0a030a271ddd474526b8845e5e1354f7513b3692

          SHA256

          aadeb4a70854278534461472b1c4b4de0bb352ebc290fa0439037f0a37a6efb7

          SHA512

          0c5afe4796549265d4b9264adbfeb059e602bee450d2d8d3d01a74b16dd1e95bdac52ed703e760447449177393d35d50f363a58a9c721363273b45c0450a06fe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          577acd10c8f4d06d84f24c468f900a6a

          SHA1

          5e7194e92170eac23a2592f587b1d5cb830eae56

          SHA256

          4df6c93b6091d85b38796f869a97cbfc22a0d393ee3312b2e36196c9cb3ad3cd

          SHA512

          8a7502864d6f26bf13c27946270bff030098219aeb2089868c82fc03a7fe763368e832fbbcc499fca3f6eeee170355a121babac4cc9fe760dc548ed17c26d058

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          43acd74f940170cd768b8786722c42fe

          SHA1

          daf16cb11022af921c1d844351cdfcb1f0ce21a5

          SHA256

          b46a16fbc752a4f8943c679bcbaffdf04ec4c50e43be79505336fa9cba7c7b70

          SHA512

          ba962a69adeb343b4343ffd6e6db1ae0b4fd8e17d67da20862b31734cbd2f71b8c97e8e54dee374b06122b62b4babd31ff12c5a2273d0d2851f38a35ba49dac8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          33434aecbeaeb4b7ad87045eea3a1d55

          SHA1

          8809d670474f4a036f2e43c40b44b8151ea89b75

          SHA256

          5243b5fcd637b56d6916139d6c93e58e6fce168cf7c3ec0fb3bca941c477db8e

          SHA512

          4088adecc6b7c75b1562946c028b795f70f4e2cae0109459d27eaa1ad8e503a7ee7ea2f85b9e31fa82b0aacc0f46504b403232aa6309f36be3ed2ac560474109

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          66126c699e709faaf65dc26f7b340854

          SHA1

          1f7eb05e6168b9124acd8384440745a2c8af00ee

          SHA256

          c4742ed22b1b9a18c18bf658936d2422ba2bce92d0272da6345d475f1e3337ff

          SHA512

          170767cd513c258d28fe88b2a582ade62f7ab9c99c1df1cfc9fe017f168108d6bb349cc76380a20bb405a1902d2e288871bf209c8e37d0f97a7abb2bc733b55c

        • C:\Users\Admin\AppData\Local\Temp\Cab5E1A.tmp

          Filesize

          67KB

          MD5

          753df6889fd7410a2e9fe333da83a429

          SHA1

          3c425f16e8267186061dd48ac1c77c122962456e

          SHA256

          b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

          SHA512

          9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

        • C:\Users\Admin\AppData\Local\Temp\Tar60C0.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a