Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 01:27

General

  • Target

    0412a8991b70cd46cd6cb9a36cd2699f_JaffaCakes118.html

  • Size

    95KB

  • MD5

    0412a8991b70cd46cd6cb9a36cd2699f

  • SHA1

    2920df65a54bf89a7a68a7e690d3259f60c8c826

  • SHA256

    1d79146cc3c130721c3aa3e428cb7695eb4d985e2a7bfa13890e29f4135e0c0f

  • SHA512

    952b79ac7780db7ab25486f74323ea417313bea57284c0982394a7fe93c78c9400cccb5145355531c40ebdd7c39247ff36c15d7ce1df89a3475062ae1641b194

  • SSDEEP

    1536:JormA5OiUcWi0HzxSnHD97mDXa7nw1QDeuHmR8cuCurztOU1Q7lNrxzO9:mZOidWXSnHDBmDX+nw1QDeuHmR8cuCu9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0412a8991b70cd46cd6cb9a36cd2699f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1584
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1584 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2000

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b44f5b0bb7895c005db8cea01f9d533f

          SHA1

          a88e6c12f8b02cac0b5c6a10ffaa9235ce512c51

          SHA256

          44ddeeda76e3cef4f403dbe49898b48ff4e3bf730c89ef0938f309f04d8e803b

          SHA512

          39487f99a5090aa4a445969e31dfc382a74b88287e45cae6e05721196b0978222d44d18839f5640722addaccd1cc7eb433f4a425adc569eba58644df61a5fb63

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          75b6bc12173cc1fed8a74cbd22870fb1

          SHA1

          6154a737babbff00d637b72e7398968bd2397ecb

          SHA256

          a60829819806305fcebe86c6830e2df893925f154dd1ed5a696ff393f404b32d

          SHA512

          a50d5366764d9a1411c03cbb33c297f861543661d0491c188992842dccdeb16ed2f795b81367e14f04c4546fbac1524fe7ba34e1cb2ac6c6fd226222a2c7c2b4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d0ebf359ec54642506408c490a4e13e6

          SHA1

          094074d2b87049251745e0e5a1ab61b023880eb3

          SHA256

          a57b0791364e6a17f2f33fa37301f19928ebf40895a885ef09424cd312ad009b

          SHA512

          0bd1de5bf66321251eff25af943aa7946c281a2078732bd2f7ca402778ecf768884f4d6c850ec7ec3e65766417c48e37836a6856d5101d59ca9faafd384621c2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bd0b1b16989c5ef424e55b33859f98f2

          SHA1

          4385a0b5d848b2014bb42f1f327fe38a45a2737c

          SHA256

          585ce10e65e96948d817aea2e30b7c56c76d664569742cfa7e73ce52262ea670

          SHA512

          f271d377d9a3e217f5b015eaf2e28c8774a86114a7a5ea52a564bed3301ca3e1ce40e182d6f99e67a406e3b152ae479709285563ba5d0edd74ff759daf9ccf47

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          70a4b05b516f3d97cb9503a26e55b0cc

          SHA1

          8f823d9557ee93d441eb07bddf39a036e069f2c2

          SHA256

          740b3744b229dab502d35a7109a0ee7aed8d91eff634fe74a5beeadb0ba8cff6

          SHA512

          5ab7f49077b281b2c239cd95cc662df08af867a485436dacea39c5d26a832106b8d08cf60de5dfa43031e39cb74845405e2c7c512a004c865be0fce9dfd1c3ca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          bb8b63743152f73ce04fc9af131a21e4

          SHA1

          34eddfe1d058fc3118b8ae34b5ce91a42e25ccb9

          SHA256

          3b45e9c3ca35290cac0b6d7903a5575436c03d74bbf54b3dbba19898832ba5ae

          SHA512

          dd8b862687169fff0ecf9ed509e539b7978f66654d1fd65d4df15caf2048f3c21411c7a08c0ebe4d71920964b5882d8e4ae5cc17ee6b02ffa9c8070b782a1f9b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b9b7ef6b501a5628276811674771eda9

          SHA1

          7da255acae964735789c8a4579d1684299b2fd6b

          SHA256

          ea08511e9795b6f623256f855ad2f3eb846dbf81714770e84024869778101e89

          SHA512

          05b83f0c32101c9a2157fcf194a0959ebddcfc6c6143557606bb96bdfc36417dc9590fc54cb023d74d65ea8de470fde01a5cf65eb44c5fa61a74f7952abd9422

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          002d2827654ace2e65f320728e02e384

          SHA1

          b00e06bf3ea6c0f3b13830dcb1bf1d708bd1ad96

          SHA256

          e47f384ed4ebc45287e6f1056f2b6e2f62b4a2f7a1c2efc0ebe6ea4e21f84e7b

          SHA512

          fa30e58be6acf75578711ffdf6bab5ba1e22a7d0aeb856f9f40e718a9d0ee3742ddfb8ec42babef4bba8e8e4cccec443ebda52ba200c2d5c5750b5afdac8c131

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d4b42dbee116e3869f01ecba62ef62b7

          SHA1

          9a9088749a3681e92d53737f841730dbaf45728a

          SHA256

          0d7d708f839f60d032bd3472f65ad249956f8c354623dcd0e53e19c0d9fea00f

          SHA512

          dfdd88f3f992edc8fb3f5696ed639745bbd304b58a5c812885c2b63de6a5c9c09589c0a032533dd692d62e0d07b31de1bc47e3223759aea792fe5c48bc720a4e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cfb850059410e2382828bca07b8fc249

          SHA1

          2ba20a32a1a09b867f30307f19b3a51938256087

          SHA256

          81fe9fb88c180dc1ab8ea163f709ffe7211b4e66913c8ff90d92b374271816d1

          SHA512

          6be0a42d321df3dedca4249fe67c27557b76230391381621186421afbf63b28728792b32e931ae287237de5f4fb61b4a4f935b9f6c346a10250deca8b3f9ea21

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1a0843e34228eb5ff6e8e490318c8e50

          SHA1

          da218ec000c729968d86a321321393b9fd1b7589

          SHA256

          e92aa906cfc2895957cac468fa404536f7d25998fe79c5f26b2ee1ccec8cfbf6

          SHA512

          0a1446a3fb8e48b722f64a28f96c2539e03e79eb047928fa7a7ee0417e0723b51e25c07505883318acc8938240f7a55ac10774e02e589f5167fae39571f50ae1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          56aea9e260d9c6026e91573598c53ecb

          SHA1

          676cbe85065c16f480e7cd722ea1b763b148ff3b

          SHA256

          d5798632e61b2875ce32ebc9c0af06581005e739cf5e1aaaa31952886154742f

          SHA512

          c36f3c2b800dc7269ead680c8083ea972c78fb0e670986c345ef152469219a470855d5a4ac7ecfc21ecf93a18d3077d79d0d71b5a6f883cf8cf3e00cdd761ec3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f70abc08f037104e1bd1b1071662dc6c

          SHA1

          608cc3c333b5c4316b54f4fcda4d257c22da75f2

          SHA256

          7d03f96d068d31b80e5649120684757bc288b73fea443f45860b9a73b58781c6

          SHA512

          6b7c19d108820936f8251692e3c70642785ff0628752fa9c7254bed74b2f87639e672a67a468949b0c7180fc37ffcf006fe694ea296f1cff5a96bb86e440669b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2fbb73e684ec9aad53f800996a645767

          SHA1

          8a66e6bea2a33a640a46b9899fff4ea9299c87bc

          SHA256

          65780e0fced2d30ecf0b34689a12b836e3d4dbe813e8c50293429801094ddcd2

          SHA512

          b6038461f9555ce2bb7ccd142eaacb21c47997ff49201de5a95fe3ba965e1319018ce4b47c87796af8f0535ad8db07a1de6eea7b398fce9fb1787465873bc31d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b32b776d12ae2b94274438a7fa78233b

          SHA1

          57e86eb7a2b4a9d17acaa7b979a0f41c236e401b

          SHA256

          4fb2237409b2a219625f0d33be7a2f58e959d2b15240016a2317dd7af5a09cbd

          SHA512

          d696ead061b4bae9f60b19f24d61b5b1cea6105ba7fe3d07e2d40b342688aa10edadfe5fea12a84b8cf74246c1fdd993493bfaf598b064bd44a18c7b5aa4428a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1775fc565db7bac99c3151163398fa63

          SHA1

          917c1644ff5fcc099518453e99716812896038e4

          SHA256

          b11bf9299e13dc4fc1958dceed74eee057297c71f626fe03c1a00db8a8435814

          SHA512

          3759faf1234b75333b31640798af1c46837883c54e8916654f5e4cbee06215ce19f2e0e52e13c224dc6939d68e4083c37bc1a163f33541375990e2ff3829f831

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9bb22d22f689a1fa303f2fddc923f548

          SHA1

          3292c9ea8a698266d79b3417170e19f830a9bb87

          SHA256

          7368ccd90269e4a347feeccf26109404686e2f83f56d493e3d4f2cf1d10609f8

          SHA512

          f136faab22afb3f40b158e7a9ba7d1dbb6d2a566232285771ab67b605d969a03bdd4c31a2ebac67e851de39facad4e66c05188d0fa8e40e68e295bc6aaa024ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fdd58fa6a9da6978b848d00a13a6dd05

          SHA1

          d57a7b00b4a56ad0e6751ac7e61167bf967f2c28

          SHA256

          159a9c92e23af3c4af6f600c8aee6aeabc97724754d5feffebf9c8c13a9ae621

          SHA512

          b3d90679190a177401847a501324b51c25a57a6dfa185223532091ed87c6cd274484a80a8c985b764d55013383f62ccf78e1d8bfaf32e39b5bd179eca120763c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          62f7a0f8207793c7df5dc407230a54f8

          SHA1

          d061f1b4562ecdeb8db5307e18777b5e2fd7cdd2

          SHA256

          17fd83f420051b6547afc8ee2254b3243f9aeb6238406a2b50427fbe2d74b565

          SHA512

          f896710446ea6e100f061c00d73f560f40cf295e3f1f77054463fc2dade9adbe93de9015bcdaced76cf0157ba59560a65316d1867ae1cf29865fac4bf36b45fe

        • C:\Users\Admin\AppData\Local\Temp\Cab8182.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar8254.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a