Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 11:42

General

  • Target

    032c7dbe67b122146e614027ceb7216c_JaffaCakes118.html

  • Size

    461KB

  • MD5

    032c7dbe67b122146e614027ceb7216c

  • SHA1

    0b52c4e9d2ec01c12432e6b22b8ba512eb1838ae

  • SHA256

    450ba33c892bb6aeb1cd24ec1dca5e228197d2727100600a54e7ad0e4693af72

  • SHA512

    77153d323d431cfdbb3e67d81005b9094e2928adf4c027b94c38fcdc3ee5fad100330c34e4f45ae33a2e427c18a654fa2eeb9eaf43a9578d6ef97aae15982108

  • SSDEEP

    6144:SWsMYod+X3oI+YDsMYod+X3oI+YTsMYod+X3oI+YLsMYod+X3oI+YQ:v5d+X3d5d+X395d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\032c7dbe67b122146e614027ceb7216c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2508
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2508 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2992

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7b88718abe916a34bf778dea55d13817

          SHA1

          fe24813e6bbba995481efa30596c362d6e083333

          SHA256

          a9360815caa40dae2cd8cfda180babb126229dd15b9219897ffa75e83f9d4ca7

          SHA512

          9a1822b788e61a2bd7ed42c0ef09a3d1845b63f373f61f91bb7936b74ad0dd773a5dcec154cdd11bc94d5bf3f0bb45a032c0b8dd1b56340874f310a8ada26535

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          06803edd6483375e76ec18848bc114cf

          SHA1

          93f23e5df9374775672eaaf3768fabb9662b1feb

          SHA256

          7e85f92741e7f57b43336e81eb4bd2342583161e568e5f355b5762c8a1adfea6

          SHA512

          09b9e4c5824033ffac779ac01d6aa2dd7537c286eb28e0039ab4d090ab18be4f47be033ffa5565b263dd14ec11b4876722a1525f7b0039a33e5bc3df39d0a893

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          75a49bd01e87bac3abe25aeefeac52af

          SHA1

          c84e6d436544a737c1ac4b9b35bebdbbc44d41d5

          SHA256

          286aa43bf4753904a07e7e52970ec970e500545c5784a9ba293819d95e3ee74f

          SHA512

          516ef26f5a8f498148c78d43e922a0b156ae344c73cb738024c647f5dde944799dfcbd4f9bcacda3a1dbcb19afae692f6fd9f97aa4908d40d62ceec7cea50a0c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          66b6e3288fa8ea8f2bed1d66042eab2f

          SHA1

          8d9485d049f92a181781fb205560edd7ecd087b2

          SHA256

          5e96acaca764a51779f978cb6a00f36e2f85d8d01a2e2d523392e9d8e5fc6ac4

          SHA512

          daa93c2392aa7e3571b8ab51b8eb4d557c074c54b394576fd7a3166eb2bda2403a2fb12e615717e914b0e8640806feb9a548747ceffaf36cfd3ad4e1612c7f24

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          07ebae7db2a446869850f92bd238206b

          SHA1

          b57fee5adda40b455504aba1c70a9670050f4229

          SHA256

          f93da8653ab86c30992bc9bb8cbcf8e1c9af6876fc924caebac34d5ba7bf20e6

          SHA512

          4860b401bf0296a554ba0910cc64642a7dcad94349128e1285b5a62e25aa8291fe871916f72cc9825b5116bb7aaa2fbfcb6b4111799e7abf28964284e75db0b5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8c652a039eb6f605ef1224494dcdf9a9

          SHA1

          b4d8b17e9ff38b3df9d4de9d432dd4a9ff8de31b

          SHA256

          3175e5b239cb8e3de4dd10517968671d60003fc123195d5e73a66113b3178525

          SHA512

          83316d9f178865a3246adc6661a0f28aa3aa70af7c459ade612c5ffabbbd71e3333c498d9940c8c17e19f09490af8014254efebe7d0b62e58328c8cb0f6b4491

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4499e3714c34f775275630c5c5a4b992

          SHA1

          12ffecf8236115e0725147331e4c9cfef91a89ae

          SHA256

          43e3761ba87d585ba73ba48c287dc55e26ae5f7f693af50a87d58752649c61f0

          SHA512

          0a77ecce5e1d2a6dd3e20026cf33c9aa5bd9265f56883d93e3dec77e25174fc7003bd71600a816fa658fa0efbd387a746d263c23e3e2e302f04414cfd2f9e97d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6428104b5370759928d09bfe3b786f8c

          SHA1

          c68ca46c3275f585552106bf208e7138b51276e5

          SHA256

          74c49e51cf79c258974427f5012d94ce398aeca98803efa528947415776340a3

          SHA512

          e6e011752bd9754aa2e54b486a9c511b10b2a90ad85fd9033658a512c1f09e50c55578c7d5f91d26a1a5cebf0ea446982a9b97f0b2cdbd0d1aec79562c1e505b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          31d2a2a4744532dd7aebf9e02b4f6a74

          SHA1

          fc6111e9f775524822fe0a4cff7d45edde778316

          SHA256

          2dc9701c73059d3461a582c2dbe5312316c950e885b0c1f46435b87078efdb2e

          SHA512

          151c9d49ba85de9d96ee73fb81dac32dbc9f9e5713e9b4c856d64bb41a1f697eb324cf0ad4cf10b6d71b01db779ad04b88f1a3fbee159a65abfa903396ae8cb2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          28fc2637cc54c023a12e4069a67efdeb

          SHA1

          1ca5f5fe9bb5edc9e1689dd5640549743758ce0b

          SHA256

          07b07c05d9deb52cb1ed7c7cf91b95ef8218f7e400cc78fef1f12d6ae67a463b

          SHA512

          2ba5d39b76faaa54f912fb293cb9a2a652b982463e74fd37c9272265130abe31ca9d841f587c49e9534ab117f1c55927da5a72ae25b3ab1e6e75dc235c46ff2a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d05326a339fe986ff8ed29a1facefeff

          SHA1

          6eac859e476b88a2810565789fb16677bb250e03

          SHA256

          2a67ed682a7a845449dcd117c23f8bc7c2846a3d8a44a18ec2013f62416fc72f

          SHA512

          2b919278ada6bfb1877f318307aad836e3dc1b5fabf36dc7c60e00feafe89c28d69988d66cd9f82e2248ef279de13ee91a37599e7d409665874c635affec1bf0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          aa29695645484e20eda703c41ee0b9a4

          SHA1

          9431272d15e703101d1557163524db6205010b61

          SHA256

          090ae8c8e6809ff6048be6fcc23d24383ea3b0815f01156aec291b6eae9dadcb

          SHA512

          f28f76adee1ca6045dd0635ae3fc46dc02578ea6488a4f4cf1d96cc334efabc2b9adf4ee833f0a5fbdcc2829de6aaac7ef89380cb87284a7026faa81bec3fc41

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          21e6cbd36eefb16a4936b96fb81755ef

          SHA1

          3314e9be6d59008d082defe10f7c9751d7492cb9

          SHA256

          4e2b1ca1b85c36e271ac82a811d439d512186cad61ab2f9b777d1a3cb9c1da5a

          SHA512

          1ca2f7f96f4996e6cbbdfde4cc5710d828eeb0b77d1f1d0be203dd678ae957146e6fd15af356890f996f87d0cbecd1330f5894b6b71f396c40de05a9417423ab

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0e7975af33e4467ffc84d107ba7588db

          SHA1

          920098fceeb4ba415ac6ed6be99802e6c4871daa

          SHA256

          8f153d48a48f5059353bc9098ca2babb6f3673f4d2aab33bb5b2d411071b6407

          SHA512

          89e5421d66e94f1778507251ece838eb7cd8c9d3b1e2a266adec14ed93febdecd0067bad5a8841a79f02b5b2b9e6091cfb934dfe2a4dde18ad191755297e6fde

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b6d9af6d8fe3c37ed295089d714a81b5

          SHA1

          dfea9461209b1049eed341224dfb406625984e81

          SHA256

          52cf8db4a152495730ceef63593b4426e6136384cd7422b9d3510ed90349e954

          SHA512

          e075e2e07a138c46fd5aed7e3eb680274b5ff6d3ebc22b33312e43096a7553a40b74863435bef449a3b84e257944e556ccab9fc30c0b7813d50d4bfc44fe70d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ecfd0f8cb9f4b7bb59cd57ed3adf6918

          SHA1

          7c6a51e4f11f3e6f032a5d8cb8beb834c31cf535

          SHA256

          6f31108abbc9d2f42a2240d2f099a7cb2b1e79bb839cfd819e8c877302d709e1

          SHA512

          eaaac86bdeffddce60cffc749a1035d093d165c6ea25f0e1449a63878e9312da9d1c5ca4e55f434a90216f88c20b1dce0ef5010cbbf5651f6a65916bd46c2c01

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7064345d79dc4b90e5079966737edc22

          SHA1

          3d3b81183a3ed984cbb1abfc285c1ea39dfa6fc5

          SHA256

          1e980e139939f6c549d8e796c93bcaca3687803992051a504e1b7dd87440ca8f

          SHA512

          1e85f2dc784968a6649d3a012955e99c001a92cdc85251c676f697540659eaea7074d99f02f049c4075779c613b9074e5bd0783a7eda897cdba8b81b2468dbee

        • C:\Users\Admin\AppData\Local\Temp\CabB877.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\CabB936.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\TarB95B.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a