Analysis

  • max time kernel
    145s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29-04-2024 13:04

General

  • Target

    07ba7bf9944a76e036b2b4427cb4d27b_JaffaCakes118.html

  • Size

    20KB

  • MD5

    07ba7bf9944a76e036b2b4427cb4d27b

  • SHA1

    cd2d7ebaf4dd3fd0d9cb775233d9d237c08881a7

  • SHA256

    242d875492f758d8c87e57566744321ce98a94207eb673ca7534e11dc422f3b3

  • SHA512

    2ce784c73c25e47dd224f40450f1ffed5811ac2f30f8aa14c280f62b11fea4f89a426cfd94a1bd213d05e39ca80a8e5e2b8df4af9ffb0975c6deb5e1a063b0da

  • SSDEEP

    384:PQ6INKrqLw/jIBJQfF6QOhOcAXwwPp+XWwPOq9+b1GEZ6JI85:5IQWLQjIPQfF5RcFAD85

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\07ba7bf9944a76e036b2b4427cb4d27b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2264
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2264 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2932

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    72819e9b7c9bb813d44095f2894701ba

    SHA1

    58b0c14666fba035c83d37673576361234529639

    SHA256

    11b1404dc4bcd66b27435047dff29bdb22587699de9cf45ff7dcbb80937a6d1c

    SHA512

    9aeaa29148b5eb13ae702f91bdf8cc370e5b4328211e4a1691c3a959d6154db51af1ca155e28b0dea56695dd8a86bb08759bd2013dbcaf5d335fc0fbe41cd8b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ddb295fdb43015d102dcfb621325608c

    SHA1

    f4d81238fdf3833b9c080910563b02105de620dd

    SHA256

    8b35f286f5978974106e34e702ed1811b29f68770c77abddcb2a5886772c4eca

    SHA512

    9e1139aab7b2da5fddd95f786f5b88150ee17820ca56ff47e35e2c2cb6d306e63099e8ffb67bc93ee8c0b5873b4fbab66fd7cb648d03f7e78ae267dd5935c2da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32cfd16129dcfb99bb9da2760da2472b

    SHA1

    2efe4466ee1d8e45d875c057eafc54bca6530be6

    SHA256

    4724dac77efbb7a2ec63bdd2f1a2c724f589c7af906d1348ae15772093f55bca

    SHA512

    fbe36d3c84ac8c37dd0d80977f11748a5226d3b347beeda159ca93a6fa0a57d53ae5564481899fdb16cea57c5abce8b21e54cdf140b10471321fd5dc0b26734c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d21862e4903098241f089b62f8133d8

    SHA1

    841849051fc7518fd70ce85b61e53123767c9a7f

    SHA256

    523f2d2835296cc959bedbcb00013bd1cf0df7d8006b86ae6bfba1898e8dbbf9

    SHA512

    eaca61bf29850a0e3778f08d69a88dc90c424aa9a098b8815716312cfde26b7fe07003b51e7d35725f9d3899dfc9246d12bc256d5817e432c24886f73f559762

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf39db413d53c7be5384206f5109b377

    SHA1

    b07007736e0a1bc659b651717969d4464a4a02f9

    SHA256

    dc755c6b02da2aaac8a4f70e0756226491fe4499d85e8c57c02a3c18bf39f7f8

    SHA512

    98f4cb03bab626605a740330fc80216db3b6d3264e8d7def3e78a6c186b39d29ec9ea3c2be9cd0c67754454c10d8cd964064d220125f7d769c612be8cd4bcded

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f57c6870a0c6654a791fc1b14a7753e

    SHA1

    0e298a13db680dbc18535fa69e74ece9abbde404

    SHA256

    b0c597b3279a418701868fc74ede10d8ee5b2a792da0e49f8d07d36f97014511

    SHA512

    f454cb815e2241dc3b95e0f6156b3957ce5fa74501e5422f142c4b449ee84804bb4cab7a9da935c2d3d65dcdcafb4123282c16cc4d55a0887593e9687a9e8823

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c27010aca050c7d05eb41beb127ef03

    SHA1

    b3f1d5713d5a958cdefdec8c9741bf42516684db

    SHA256

    810dd2cc7c10618b695ba1f8bbe6db397f46281e93c01b23c1fd9ae52b15ca98

    SHA512

    f666538aecbe134100e40e26b20d67857cd316c182add631312a21e37770db3775064a8dc07c9c156c0a5ac9afa5208e71a8b236096e81866484f03a302bcd7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29a59b2abc4e64596c27fe27fddb63ee

    SHA1

    ab33ed6d6d35742cc1eff2333fc892766e3333d9

    SHA256

    45d5c0313ae66d03be675c05678b9cc2cb64a180e2c0ad1cb39be08646b6be06

    SHA512

    24d5a58b9bcfe757e8ef44fc68e5c9ebbaddbe948c41bdf052374bc85dd549a5427e9f0a081eb04674eda15536feced2d8c8e1b69f628814948eb7ad54867061

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be294b0313b5a1db5530ae3c2cc2db73

    SHA1

    236f0f29b16f5ae81aa5bab196adb49191acf749

    SHA256

    fdf28c51f8d5bd90634f1487a452511de0848e58841bfd9d00a636fb1b292da7

    SHA512

    559640eb7266307f4a0c2fadede1d93e8af127a522b3358e34e31e137d1141ceb82084f41a4233fbaba0e3a33e7620e4df8c8f7991d028397096c3a5ae591bb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48c9d3024218052437ef3fabeba2c11a

    SHA1

    df8909b6410f946c9e945a63db123185e093a5ef

    SHA256

    9f7def1f080d68b77180f4d8d64e64524a46e005e18efca042c8d3a55da5b2e6

    SHA512

    250e8ffc1f4c78b898492f737b4a8d43dab878a4d79dfc693860b367c74bbee92a3f7d85f53528433e6e98f1ac2a0a33e48d45d698d4a318228005b45cbea3b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdf72d80a3dd2ff264df015092326e99

    SHA1

    6d1c29ba7287dce219a957447ba19e9013489ce9

    SHA256

    c848e37ccf424510767870a5952f356b567c4a8fe19b8ff6d9931c7854573913

    SHA512

    fe6dd2a7d11b1fcbbc373abef4c0fd7198037cf85a2148f869af3c019e8ba0eea55cc4590b719b12b1713021786bd6ed4597c6a97a0a6093bad2ad379e90137f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd18c1babdc0d526711543dd1df6a991

    SHA1

    cfd2d256fdcafcc3f1a41968f2c7232463108f28

    SHA256

    58e6a2943beedf01455b02582176fb7d3041ec559313dde01a36a490ab7ce697

    SHA512

    c954e5247b0bfcd744b38e4baabdfa37d4626dbd111ccbeb6e7e966714df3188c5dc1bc3fbec175770299f0680fc23ad765695dbfe9a58e314c584af411f2cf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8ebc27ffae8203c8fceafa951953a63

    SHA1

    928c9aeebb788a3c9b7e366af52c0a8674e74e06

    SHA256

    623b2ce5cdc6d3c77c9f4f72d12ee06fcb4073573a92255ea22f1560d4a938e6

    SHA512

    af318e0f4b195ad1f59a1234ae40e1cf0261303b68fdfe73f056bacd97a5653d68b1daded73c21a783e1bcc241b06576f9d3a7cc9f145f6ac6aa07e99fdeea5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8745f043734a3a7eb613ce9853bc85e3

    SHA1

    06f424000e5db51a20c98ac4f8ad2a7c08759834

    SHA256

    15e642eaba3df369d2aeb34b6e38d3b65f333b31193c65fc970ea5eb31bf7799

    SHA512

    407001a5eefa4e4f9d542c7065ec1543c5b392e3055bf17a07606c85d67868c6a3145250ec785ec13f3f1d0e1fecd77950bb9baa9c153aa21d3ce1c64c31f70c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    358ed996f14ab872563f4cd8da79f1c1

    SHA1

    3ad3f8b2f29dafb86f67d3a1ad80ef6200bb7417

    SHA256

    38cbd3adb23316999a85711004c3198132d8afbe7c1a96024a4774a202c9e858

    SHA512

    e9b9dade7678a456d3798ada460be14537155e8a3b2a10e2cd5c201b52b55c50d650409289e3e5e7483d75004df75e1c8e0ca2f96e3fb62e3f68bbddb613b068

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92b9ca18bc43fc66ab3681803d380676

    SHA1

    c9570c8f6cec30f38ba81b8a36490ed152592f7c

    SHA256

    efcb1f259ced6b0d5aab88400816f39c46b79b80d310d152c8310396bf903bf5

    SHA512

    d983c036d1464796edfd71dc925ef87adec2581901323ccc969d47ba3b3dcca5796b9d68461c6e30b3bd6e827769d141ae9a15e39e728494c48ca483ddda51ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f84333fcf99ec5651bb8dfad0616c0e8

    SHA1

    aa1bb56e8055c2ab57dff387ce6880f87040f4dc

    SHA256

    e0b9d8107d8d204bba9185899f47aabb9a61baa0bf090fe8a9d36e8b965a5a68

    SHA512

    f621a63d16880a20d3d2688547d49d4cfb24e8308ee6589914c9f4a0fe0cbffb49529c500cf490549d603888b238ba2391b2ca286ca6a82210a98cde985b2b25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c55d5e2ca3d663f8cf6cdae662b7f075

    SHA1

    4d4421d5e8ba1a4c5a972b283997fb92b889f6da

    SHA256

    03961d9c1335de312aaf252a6418760fd380f3849bbf2ac120031583d4c0221f

    SHA512

    acf20d1e084149725838f696808eae24d233d200f2825e870d21ca430f697f95ee3b359a4335750035659decba83db75272c5bfcf35f10ead7deba2f516223a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66e3c71f3b6fe7b05da379f49313e23e

    SHA1

    83b96374e5d6ea249b6eae68c3eb503d20a94ec0

    SHA256

    c0101b19c99f896d4599f766adda726c31b27512f12adaa71ecd17da5a9a2ff5

    SHA512

    ce7dbbdcc5e944c4e8b5f3b9def93de7880d6553ff557a9a91272f4adc27f98135abb8631dd2d856b1af59dc463b82ed45be10fb8c75b0b47360cc02095ca568

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    519004ca71729e8ba631e1caf7a6dc11

    SHA1

    772b2daf2f98fa20e2e2fba16ffb603cf33a1c4d

    SHA256

    6c9f22fc52db70a74720d94b1045c0b4cf03ae745d9cf6f19060647a829f301f

    SHA512

    655d205f15f331cb5c5bc53c856d84e5bee3f488901b7e522591006f0b46f197c9aff68d1687b1d56f43111381161e3aa002341cc9000f288075485caef91605

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e232713a7a2098fd1bc793c89fe1493d

    SHA1

    1d50ec0310f0ddd607af863156569b4fe812da63

    SHA256

    67e754cb6eb94fb89e77f77a6f12d146140be7ee1159195f20d067fcf486c6a7

    SHA512

    92459ba861405547a6ff4b8cbc0c0c793ab25a6356482a18ed46895902eaafa96915af8b2567913e4d2f126583b2c0bab3896daf3215819cdaf7cb5d3fb4a018

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    3c950f12c5969211a3b0f13a3377b578

    SHA1

    a4246e86bf012b8e205d4ba2c508f66b010dbda5

    SHA256

    a0a72fccf4e21006a78c0634b224c814a59973b8ee4a6e8feb40f330e59a5166

    SHA512

    e24ea28fecd5d914ac74c8da2bfea4d96e7a24e0a9f525eb423f5ee2ac194edd7a7c8c3f567966ffbd07c3821da9b98e0e298d25e0dceff3a62e28eccfcbf41a

  • C:\Users\Admin\AppData\Local\Temp\Tar81A5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a