Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 04:30

General

  • Target

    0905d13b5f83e4b8ca773c50c79a7e0d_JaffaCakes118.html

  • Size

    6KB

  • MD5

    0905d13b5f83e4b8ca773c50c79a7e0d

  • SHA1

    b9c21ae2d4428c2f8f24dfafa19d9d8fe5499b61

  • SHA256

    b4f2a31a05819fcca2d5d71054c13cf85fcb9b32d10dee917cd864682a5af177

  • SHA512

    d38361e294df4c577b2dcec3b2cc7c45e3d0cb6b12800228621a7f27e1ac95549dab346d7f7ec98ad36b8747737dc58cd458e378bbace758c635fbbf3ad96c9c

  • SSDEEP

    96:LuYFOFkF/3cFOFkFGFYZuE4DG8Dc89baSdc7W/HnGjWhMOx:LTFOFkF/3cFOFkFGFqO9vi6/HGjWe2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0905d13b5f83e4b8ca773c50c79a7e0d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2620
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2620 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2248

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8768454cddda2087aa20adc8e655fa4

    SHA1

    60c19388c971849bf38b2dcb0ac8b94c60687e18

    SHA256

    fff82872e2962d7ff804fb749805923c5ef4bc92394e6e91854ec9b14ded711a

    SHA512

    5f5c35baa51c5c1e6a4099b83d2ecda774512742e4f65ad35d33c3eccee0c4d8c428cc565793be44d02cc7b9cda7c635e5332539992f9bba7ee51cd33737d8c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4baf2d371a69d18e061c77bc20abbc04

    SHA1

    72117f9552fe72280e130459f2a3b490f0b367c4

    SHA256

    cef8472aef36dc88274597ad8ba26ef7963f9e5ca08cc5a5bd3bc1f8471bd06e

    SHA512

    a2407d57385eb02a72111d22395caacb8d4ec240e9ace244ffe65396b8520f2ff28be088f7a33de4aac0264c164a2fa2928871ea0a76705d2f186d46c9a9af5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b11d221060c7d5a7c03b1f6d6929f5c

    SHA1

    4c1036ea4cf598dd3073e7c54cff57550480c98c

    SHA256

    7f30bed0d03fd31c27d76467d8e19393f4e4e045582f338f4376620421a46dff

    SHA512

    760dad491797e4975c605c3399c879bd17787b9ef1a3f6032f97fbab7c3db615cb006e9551087f08873d70d0f6426b9c380ba411094be943b3a57c14a4b68219

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11956cd74338651c897b0f760a6b6f55

    SHA1

    aee1bea7752e01f467d3531cc3dbab8078cd8c41

    SHA256

    bafcbc558423625dc7cc460535214c0c7aaf748be786cffb0de1fe34e81be8c1

    SHA512

    a02ccf631c66ffe13bd24b289c01525cfa725040305b4689321e737f40586989815753efd17cdfe7385c6914b54eb6ed16d341850d89c6319be41b2d81303acf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9e6785e93c1424b6a78c654920474ad

    SHA1

    544256bf42d8fcbc647a6b6f6c87333cf3afb49c

    SHA256

    5191827b0fac94f3c1c1b44eac0f64138053120309faf7e49287002e4455a0c8

    SHA512

    47ecf27b0cac18cda935533561ee2ada12415245e46775a802beafba6b311534615f8b85d332da7649deb3b4ae5dcdfb6bb889a1342f7b2fb746a812086eb990

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8da1384084876704cccce10969a83cb

    SHA1

    df832645537fa33a8e12f12cd2167a60f826a158

    SHA256

    ff164fe4b4cd0491f6f9a6180b2275f0360c264e1e9c681de0dce23002e93437

    SHA512

    3667d47cc2b269aaf8c02d47121fd6535d9198a31320b903660b103918ebdd22c2066ac5cd849e5d6697bd50fbeaab3d614dbeb8635dbd40bb50efbbf351bd42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    756fd118b8fa964a71fb4bd6fbe74f5a

    SHA1

    53f68c6a9f693d9c04d44244d8c564af971a843e

    SHA256

    c109ddb50da30bf9a4566c48c01696a07845fe004f41443c5a096e85ff76a290

    SHA512

    ba978caaadb8f4e1894d7b250ecd26689a722a3dac07ae604ec47810315931809abbb67b582c181a596f53a79538e78acf70be7c924091d47cda6425b3a0b263

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5eab6b8a42f9992afad1d2a48201b809

    SHA1

    21083471ff9c7965f94d162af33b830769af3df2

    SHA256

    ec5da0be16d741a5031801fd5f4c4fbe77ea4a8ec5388f419bde6a6388b32cf9

    SHA512

    e5535c65dc3a462de12b9282278d18d594fa7b66d9903bf135eed6ec6d59a1a78d453d098ac5408796ba454a57ac41219a012691ffb66ac7cb4f10b41c09e690

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0185fd818d319da440b144cb3de8e1bf

    SHA1

    af6db06551591aa0997e60bac0f9d80de59cb2fe

    SHA256

    dd25d3d641750e6da18442f86ad2ca83f622978f9af6bc8bcfdfcb2ea24156ad

    SHA512

    a56da045cc7f04176dfa7cc0f4177eedfbd9e07ea81ed93e27780b575771503990e94e9c8cc39fd13e0430c5d2e5709d30e7e1c6558a6110b57a724ac51afbb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60653f8a7edae73ebf4ab4198e3f58b8

    SHA1

    0c19a0bc76b05a2905d2a288b8b4025ed554b81f

    SHA256

    0bc74fea0ab4b5b6d40cad45a7070705a02dffc82fdd6961c40b69ccb1c56c38

    SHA512

    e9406ab3ee6429cdbce1cf4e89c3e8469c69dbde295e71117ad04837290930daffa77f9014e8d6091f303aa935abaa63845c4bfd9db3fb231a3265daf9095ea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83523b3541a050235b9f017d07a2f85a

    SHA1

    e360e85cbc752a0966416d08163c7f15c57381d5

    SHA256

    5a154aa4db534737d7cd493c9e5eb1fc1c5fdedccb5d65810fc3b07422cc8673

    SHA512

    f073e05ffd08fe1862033fbaa60bd6d2d9b5ed382f7e42835b082321493f307bf72ae44c1e3276ea99ccf06d2e59639e9a2e716ebeca9e6bc249e9ee8d082972

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6314214a756ba0fb50b2e29860356075

    SHA1

    e1586e03f8ac008ab02fcf06a919b7ca49b58f2a

    SHA256

    d829535df1301d91f62bc7e3ac5ec16497183347a14cc70d2dc940369951d477

    SHA512

    e34ad4e2c56b87ac1cceb2aa7d585b1cce55940d03728953a45eda1781800dbae6962ebda1e9c47df552c381d1238e80c67ebce5f66138174c97c4f98ca899ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9e5a8cd10b8d372bb4681bc8713fd55

    SHA1

    fd735b91e362cd6405f033367d20d693d2c24d57

    SHA256

    784612364c82fc72ece2b1c47be816a6bfcee9798f951eceb6af91619d8ba371

    SHA512

    9e15d6e4cf8d82ad0438f2c96334eb8ee9bc5c1a7586c259ff6df6c947e3719ed1173d77250d0adc82082b2ea432fb21246d6e43df8c37247390588d57aaf2f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34d8eabcb3fabf0930f474a28949c5e8

    SHA1

    28521f1718db521e54dc9d082f2a96b87aeb22e9

    SHA256

    dd5439bc1fd48d8625a1142d11a3871fbe97daa53f6edbd80e88fc1b848ac4f8

    SHA512

    a4429055420641e3b562255b86e835b3a76c45d9ebb940f4635c6f20579e6b4932df98ac5f45c83ed4b61bd8b6edf3cc7c3f79766448dce3903d8692baa5bc17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c785ac61b597c355a80d4cbe1aa16ce2

    SHA1

    a949b8a7a9dbfb8fb7b5a6a886a4bc67f8efbf92

    SHA256

    d7098f01d8e621f0d0b657697cee7ae8456eff049a20983dd79db7d8e755373f

    SHA512

    bb0d5436487bade8f191fcf2449f478ca5dbf80150663c3fe471effa94be785590da6441b5b1e82f29834c1d6267712f5db385b68ada891bf37d099a06729d6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5afa0dc664723ddd88be7ad3baf863e2

    SHA1

    297dbdbcac2bca944dfd47d873269a04ac2ab240

    SHA256

    48136d782dbe45943efe716a938724ce2ba8b6fefe3a7b85fb6bd67372a8742f

    SHA512

    9994c86b386a0ac328a8df4003bab69c8a73e1c75295f390bff51e22fa927d6a66908a0a65b25129d958c6ac41e7b373623bf0c0e905e269cf7623628c07b835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ebad2c1d7938763fc35c0a080948e53

    SHA1

    c840120cbc29b1918f714cf3f08f68b3463f4816

    SHA256

    2d738d1227dde0c79a5d3fd3cbf7f24d1fe02aebbebb98c2fa5cd1c8981b0ad8

    SHA512

    4a202c06d71518b4201cd3b42063735cb42207b0ff11476631e89ce1b3b918db8fb56b380aa2cee7fc2ed3b044b11d1661e72ad1eff655d9ca8b99d5eb342276

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf28811738305b06ae6ffea9c5898433

    SHA1

    32c52568e1fa5a174cea619b194ff8cf4c514b46

    SHA256

    2eb821684d5c6ebbb34e4b4f7cf946ada36e62d7e9423c4a2449457fc1950d5b

    SHA512

    7821cb1ec7b43a8d7e5207999ee8871baeb8e44e44a3eea3afb83a56179c0a341c2d384a0db21eedb74a3fa89fb5f0ed090dfe48148a60727b11ce29cb8030d4

  • C:\Users\Admin\AppData\Local\Temp\Cab22B0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2382.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a