Analysis

  • max time kernel
    142s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/04/2024, 16:23

General

  • Target

    0817e8f14972923b6acff90e4a2982a1_JaffaCakes118.html

  • Size

    33KB

  • MD5

    0817e8f14972923b6acff90e4a2982a1

  • SHA1

    728e8303a94bcdeb792ed8044ba89524568547d9

  • SHA256

    8edbd92647a07031eb2fb57463c369cac8180d0100ec1706b5ae6dd390576592

  • SHA512

    2a235d2fdef0d361fe08cd5ff9d652c44e35626875e5004595931d9ab5f31465aacf8d0388570c5ffc775f235ad31884aacc6823b44e0309eec9cc77d6411fa1

  • SSDEEP

    192:RsZozLlqb5n1nQjLntQ/mnQiecnZnQOkrntEDnQTbnUnQUhsywVIwVfwVQlHywVN:eZo1DQ/gf8lHN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0817e8f14972923b6acff90e4a2982a1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2164

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    600a6ce23806be308a844e6af2e7390a

    SHA1

    ad4816ff5f919893ab7af5fa751aff423a7bca55

    SHA256

    6ca8bc6d1b8c5e10ae4d51c753010a2db9b557c45140a7646bf857c0b66512f9

    SHA512

    da86010e580dabf56474763cb816b17b0839a5f11a2576f24e552512c16ddc650ce57f3c4eafbaaac0c8bb42fd07c6e685fe6e0f49b9799ca6e4d928c2f109dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ff7f6c18c1ad6ad505fe19e531e3771

    SHA1

    436828c9101edb22f945733561ad714817d54304

    SHA256

    26fdf64d36d31ccdf05bd9d1ff74a69e1e7f8c54b5407e348eab2a21fdbc019e

    SHA512

    e2cc5d96ad5ccb88aa5c066439f01ea15b053628b19728096e7c5fc384f3dd60ae3eb08cec4ca053f73b7dc5b68c4203487ad0238c260ce17c781b70a41260ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4e224bf3fa2cf0bccb496b321027f60

    SHA1

    b3b4b62b3157cb6344bcab88d906bb83ae0ddc32

    SHA256

    a3f1306d738e124f571d3544e98a8a4e76fca4e6420546ef990e1fe2433dd1ff

    SHA512

    5d61a1c8f1f95522b465928ad4e11d4155378f9905e4513ff43ef8ac2728fe72e926f7e6ea64ab43c18b1b1551b067e88687fd7412c624291a3cdc81cc1b5f16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e66739c71b489d5d13e5fce58ca68f1

    SHA1

    4946d45b578b01da4c3e6470695698578255e324

    SHA256

    3e7d993c55c23b932184a4c37aafab1c3c3d69318ae232a161b47bef0181f963

    SHA512

    3b7305d922a45ee3a10430a9206146fc875ce873de26cdb93873d02fb8dacc34279a12001a30714a7ec53e6980e79c47a6accd93f266783ae4f1bf9ff4d82e19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d6ac73a2895fdb50092913e06d4980a

    SHA1

    27415f8224a893d44a5323d8ba98fa59fbe3fddc

    SHA256

    79262e6259627a6b4972e0667e470c9659e2d6371dae4c966429c1a1c8bf8e67

    SHA512

    369520d653c7ca0ca7affb0e0d644502cc550cd0390d050f3308a6f21b20044a0f81f9d13a21999bfa9bc39125423cb6c4ff6208490c2b002118647c8e9cb080

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    402095709227be0c4060bb84445771ce

    SHA1

    c94bc4de87c0491851a3c058d066a80c9cf9dda6

    SHA256

    6b1f1b24932cfaa3905a48ddce214efcb620b5d7f669c6577c567c27761c0987

    SHA512

    62d21126bdb049abc1bd6204f7b7dca6870536f13d9d88363bbac57b30597968d77d05bebc9add2a0360c2ba67c99fb314dc3da40d5023e9494052a75d19c2e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a7bdb98007afd77ef6ea113186e296f

    SHA1

    cdacb72c3d6c2906c2dd7d74cbb3422fae648e7e

    SHA256

    a2a8ae2c9c90deccd494c7656fe7862875c70e17eff805e057eedf4f1998d086

    SHA512

    718a3b0efbd0e891eacf7f03c903685ed804548ff3a631530e0a90155f1da3e8693ad627c87e03f9e11d9c15d831e26b54bde774fb7d40b8dc6bb46a30ca0ddf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14122aeb0ffc8164b271ecc8c4936e53

    SHA1

    049a9eff770dfa8bc3222013156819c455fea893

    SHA256

    05d7a2c7e90f7064947e79518737e1d0fe79a86036518b5bca8f9832e9b3a9ee

    SHA512

    ae205ff6e4c915b1b49bfd448628cc3270971c05c14f3cacb5e5b42870b5325c95c6e9abac646c4f34dd7dc589ecc82913b5145f2e81c56c1ffcbc42119aa495

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    081b5557633ca16253e0739c1b27b002

    SHA1

    709f82ded5d6314d0b7f77e0ad3a547c9436b016

    SHA256

    355599b7275f20b23cf7a78b223798c9a386e5e03498e2564571b8349b5f14ce

    SHA512

    080998a325e91e33be77114f3908369a6263a6b716ec2653f1f92330662b89917c716d67c2ee26615fed77baa4cf91af124794dff63ff216612f0e688a7d2838

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f7b6850f3e3d6a5bf9f3a7887957841

    SHA1

    9a43a65ca9ceee6b8cc99ecdcb1a9918d37f11f7

    SHA256

    a4f4f00c5801b2500c172a0e4513627710073eefcb1970dbbf0b29501120da66

    SHA512

    9179e674305a3b16059d363c4cbcea69943dc7760ab22a9eef529c01fb504745b1cbfd2a1e0e5ff9139abd62d1ec4406824126db9072814927bc90cce51b51a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    516f3fda708522c5138c6fa84bc406fd

    SHA1

    1aac7d414848c1019e6bd27c05f67af7db4e0bf7

    SHA256

    453aeecb0c0c88e7ca44216717e2deccd6769375c20c41d5d3e2eed1a1c02f99

    SHA512

    64c5b1317deda5172d86f48905dca0181918d22ae0b01c8e529b070f385db6e4b4fbd58602ed576605c43eec98cc0b32ee0bdb25c4ed981ddf29ca70d06f8802

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c45557f34ff645e27817fab8a1b091f

    SHA1

    1ebb88535d440a55ca2129a608c0c6e66a008cac

    SHA256

    2e1a957eb9911ad456e3a8708d893bbe1712baff9ef28b5f56abcf6734df626c

    SHA512

    ba563d706892c34c207a2f64612f7558550a6b0ab3ed9d2c3268cc8ecf1f07283712e4be450aeae402f5e4482068a046053cbcbd2bebf01da9f607e84b05abbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    530fe6d4bf025b746c477da878765785

    SHA1

    f35001b263c300ae9ef5a47ff008a19b5b3d2521

    SHA256

    28dfc8d7bea031d8882678938075ac37359b7c74a07ce91da5ad4d5e9fdf933c

    SHA512

    6816b64e2dea31f221590a50ca8188791ec89593f0dbc1b96dee7e48c0cfc4d5da751e04028b71d04ec97cc7d21a8718f856726597a55f23c9806b2c332f3add

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51744ac1552dd8a458b255d156e5ff6c

    SHA1

    2c709303f0b124d2373f516a20f11b83d186de28

    SHA256

    46fb4e2a1468ea7e1bb94e9107bd49f04daf3b15f41ad2ca4b3f0dc5e3adf035

    SHA512

    f30f5df2ce42876e0d15c63f252d64b4f63353f2522f6408f5a7727aebb4d639ed9299fc485de2ee700c671572b1c3634e604a680d0d0b4649570d219b35edc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37f2c23db9a5071dc6f94d5fbb58b387

    SHA1

    741a9bbe8ee674eae97c3db43b15c833703d6b1e

    SHA256

    03eb9f8ef198cec676fa2aaaa82266f6eca4de1b60f6143ec1d5786e5214c1f2

    SHA512

    49e4fda20cbdf6eee8ea1a46b1f5654a6d5d727b35f1156265f2c481cd0073601fde7b65492a47fe71aa0898c5585ad85de25cdc4c4ab26657050ad1c098f0d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6cd054ef87a9182f9aeae69fc0b31dc

    SHA1

    4c9c4d9236b9df843af1624e6cfffa5cc5b98e0c

    SHA256

    11e3125c9e3e16545e17b73e0e12b5ff2f8d433abba2b21d32c3c4302212e7fd

    SHA512

    a69419932858c2eb4a1b4b562ea5187ab7adf2e4c47c62eb81ebd5b401d840a1090b9d4eb4d6aed0f417bf0fae2dc5a46a81e3f0ead52a533dae581fb485d558

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d07fce518750f0964fc2edfbf0429f39

    SHA1

    e336110c1c3ed137cb264e3874bd2112d896a784

    SHA256

    d4a81adc6edc456bf95d109aca56d0caa9fe6a0068c01c2dcc0d77a040d01046

    SHA512

    0268084cfe8712afba2769327d56ba753969f0e1ccc7a7df5a2d509363dcdec65a2c58e4b1957e3568936d1ab7e32d231872faa5ba6b22e21fcc8a18b1eb1e8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f617150f89551029a01e943e118d0f1a

    SHA1

    8f8a419e174e4a79b2fc60e12246ed7166233b35

    SHA256

    366616b22dcb1a1e6262322a28ceee1951bc843b14c86d5f449fc58378b001cb

    SHA512

    e8a894928a188cd52ca3b6823ac2da1e9541b0791e1ac6a79fc65e2256d7c8d9f5ba2429c562fc25f7f89f2ab410117823e3a8bed698b6e5faef1d714d1d5355

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97e08913e52f402b94cfccc205ca8f6c

    SHA1

    a607cd53f634b393f0b3cb2ddb8f53b050763115

    SHA256

    152f0703698b10fd88f6bd95cc7e1df505bd41835e82a112b8403a638cffba64

    SHA512

    b236d19a53798f2afac5087ad138eebd0a54e72712bca10d7e730a3116624e932279ef17117899ea59d9673d1d2ad0e91d5000dc4f4195687c1691c23e67aed8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28eb352013604b3f2f33d91b284eb440

    SHA1

    7be43d5d1e12bc93707a1b9c164a103f52edb844

    SHA256

    828245e19043c22e2494e240e6614c11257c1ce805ec22e25b2dff81ef02c3ec

    SHA512

    18a319fd7eeadc23c892e8a2cddb3c666dc6825dd664fd9513a093ab0ef083fb8daff648c7ad62a5e593770aa1f58cc1290cd07372edc76ad39a8f5f176fca9e

  • C:\Users\Admin\AppData\Local\Temp\CabA1BC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarA2A0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a