Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 11:31

General

  • Target

    09af1de5197cd2ad17751a6e815b352f_JaffaCakes118.html

  • Size

    44KB

  • MD5

    09af1de5197cd2ad17751a6e815b352f

  • SHA1

    96b40463817f67dcea8c82c2e83cd884699fec0c

  • SHA256

    2e121fe56e98ac0706e7a4ddb54e8eae8f9ab23813e6951ed2daf43e947a11b9

  • SHA512

    6248cd6eb6882b903f4b4b8657e9b944a19eb412c54ffc4ea1691d5f30ae6405865f4f61d891abab6f0df91ffa8c74738bb35c41b17c1bde4cb1040ea2aaaf1c

  • SSDEEP

    192:uw/zb5ndinQjxn5Q/4nQieDNnqnQOkEntEynQTbntnQOgccwqYJcwqYhcwqYQvrC:DQ/jGDB5vrxefTk8+fZi

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\09af1de5197cd2ad17751a6e815b352f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2592
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2592 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3004

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c7587aa9e9a8eae498bea2eeef7796e

    SHA1

    245176492cc89c2ef902fbb66cc495a738f97b25

    SHA256

    deaa28a6c2b4f590a2c59a8415675566ad9f8dfb6b3466518d14a2194bd7ab7d

    SHA512

    c45308bfc61676594f059840f0a4b116722c279b7f3928ebfeb7ecacd5ff7827b49469616f53a35817bd31ab94a4d1377ee067c8f5dce76e231148389c2a4132

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c793e39908b7ef53d1a2200fcfcaf04d

    SHA1

    03553f8a5461abba9821a74c582fb80056d8728e

    SHA256

    d75eb33f973cf2793c7a0274a291ad331c289f1f7d6052a041935f72e21f6727

    SHA512

    aab1c96f8f3e954ef805d315f4c1e30073f82648d1ca8cc8eeab590c56d594e28d58645903744dd0b2b21430889842987e6a9cc3addb2352826c075fc1c7981c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c650f799e0a87a6200671d35010202f

    SHA1

    dfaeb85db88f0f438176337fa25723524eea0a06

    SHA256

    915b989dc801ec94037a78b3bc5c32280e9bb3cd9be0307dbb7d76bb84e2dab0

    SHA512

    73e3df5200f14dcf7386feb090409110853d2c9a433083727faccddaaf5da1cede43d4f76e595c7c7cf3bab3280df33d2b16044b84ac7691bda337aa72565bd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f84ab833052aa5c1605b65650118d6f9

    SHA1

    0701a2dcdb58b0d103ce8759338ea0805ad47620

    SHA256

    577c840eab3428c3a977ed39af3bbd825a9b4b9454023caf4628a1d02d1b5026

    SHA512

    92e6cace4fc8d601292718da899f49b6717af7417f3f4d165f7965845f309c065dcc47a07e031add43e20291752e61b428db689ceba5c738313ba570d931cfef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2cd9aee7eb17f2fa0333a90ccaf8fa1

    SHA1

    d0de1ba3ddb934ff06a57fa9f4fd35ce7b45c23c

    SHA256

    aeedea685bb2fc7d99375ec0d513bf5410325843e97aab9b58e17d68817dbb08

    SHA512

    f503b79b4e9848fb1b703b822ced0c308283cc0ac04114bc98bf176e2efd4a1c6898e16c2eeddb4f252ff66b164c5bb68163342333a3501a1303f8b8b46d9d0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c9d7e3235aeb589be7bf25667174b90

    SHA1

    9a638250096a3c9cc0a8db0aa37a1e7fa97c91b0

    SHA256

    f6285d2a6ec64d5cff134cd3ab82bf01c81494d09ebf4ef390b692319736b92a

    SHA512

    eb672288cc3f517cb379c44a9fcd1b72baf01be43ca6949b4c1a4d5b24881a67cd78f87252a797677b0ab22d5651287beaf129f3145d4d0fb2afed81524611e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14e7173ae0f3a47209b767344471140f

    SHA1

    50625744d1528ae4ee8208836d1afb89e3776105

    SHA256

    7dc8d3a36270e3d0bee956c88f5bc25ec2a008b36d576d9b5d9eff701ceabe2a

    SHA512

    860de51d48c0bcd97ff2243859fb98d4c8798c9c9631f758563692155f74eff4c2fe8a4c549a14d663c38638ab079b0db8d12dd731eaf1bb32ebea06faa6a74d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0731a62de3e46e3ef3eae18e24a4e8f

    SHA1

    4ef823ec20aae606a25608d90880d39d3ca16fb1

    SHA256

    00f2fbfa40dc1e7cb0bba32c1a47cc4f32e23aeb815192a8899a280a554e59a3

    SHA512

    bf19e510fdcbff505f6328e9cb57736782f1abe0157c15e91f2b1aa3293e6978837b43026c2a85457a75807d07abd04965b7c527f0cd38729037a01531c1a999

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    afa4fe38329a9b4fef4dcfeeebd698e6

    SHA1

    2cee4d3ea13289337981ece62c8f66b339bb7c6c

    SHA256

    bc288aa5cc4742c6a089d6e1bd601e782725cfff1ce5d925c8dd8a19bac2dccd

    SHA512

    329ec14a32f565f3e933771664c4fc076f2f5e78a8ae761791d9418ccc7380860153a38e86dd52f2adecc366aa176734eba22c68bdb3ad8d5e84c099183b3200

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d279e50ccea61eee8c80129bc01ed75f

    SHA1

    10eaf28f6a818bb56b10d84a19c24540d5e0748d

    SHA256

    ddccde3337bc3341f431c5442c07375f456f36370152c7efe6469b5f681706b4

    SHA512

    956d9d801c1c48f8445c0a5948bf26ed2ff346d763248ae64f6efb24b86a5179a5c4fd800cc9106e715751794ccad9cdcaf1440374dd3665c467612b5fea2dab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dad4cea255c762cc8fbb307e05e2716

    SHA1

    a1bb7731fbdf59d2292e744efd3a27a6102b1df6

    SHA256

    f190cdc63e60d8f48c621b2457a04879b228e5448829e1e2347aea0185d7b736

    SHA512

    11b3bf0f0fb092e5dc476d663eb31ab40bf39191b1164b22f28579b9859a6472357f15f09a9c740218ff6e4d2d98f36870aa35e61bd5c068929606ed5fe47268

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c9c6b48e843690d4bfab74d66e71774

    SHA1

    1f07cc8c351509427dea7f92d43753db9aca5cd8

    SHA256

    a8cfdaef7d65bdda2d68160263a6f93fbe05f5ae50df4f4e96855a4932c252bf

    SHA512

    e70d754584360967ea26d7197fdf1490f222351eba383cf46a260b43ce0a01d8127b361b6f5b4554ae8243e7ac5a6d389276f12d787ae62a8feae7472018c9c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b42a802bd751c9056ee8f1be4c3bb1d5

    SHA1

    ece45cc45cc17d8a44a58f6f39d7e41a52359974

    SHA256

    fdc88793cbb098533ab99eb5c9469658e77701f7188daa6469a8edfdbc1064ef

    SHA512

    82f6b9461e04adad83e4ece3f2ef2063bba4531ba931dfe9a717aad64a3e7636dd8c1c1bc4cba63bb92c9a8d69feacdc60b7a74885edadcfc0ccb5bec201bc1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24c32cc88a776172c0310de1b859bb3c

    SHA1

    4a8ea9014e955a478ac14d6c49726fed5b0d2e05

    SHA256

    5f49dbd1700cac8f0d83b43a0d13094a6af5ee1a575399ad9a14eedc9025d496

    SHA512

    6433b526f9b236266557a96a78bd874ad8644503446a8ee76783aa72e64effd879df6e88684b027ece258cbdd2c07ff867b911830cdcaa3621a7ad975a2b8bbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63e4f25221b27d82e4d3e2f6c4ed097d

    SHA1

    f2c846b4941965c9400d7e0049a8a5a5f6cd453c

    SHA256

    a1fe3cf9e9176b86950e66ef57f34b4b2e05e531b8a46c94dd8e12c8d7313cc6

    SHA512

    0dc8cb4e302961b039c044ef0621bd8e5e8dddab28d4475c5f54fad415f69a3750bac7e34197723f6b11cb0c3c98b1757f15c4d52e4b610d3e34c7d7f6fe7a22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    786f8bbd703e258ba0839b19038649f7

    SHA1

    120a90ef5f1bee5d5a0d675c7dc38aff0441138f

    SHA256

    e6e0fca0ad52048acf2c42a7d3b481c40b19542e5bfed2bad74e65ec3dd06d42

    SHA512

    cd897c3d4452d0a9b11f2477375076e52252c7b4a4d6615f4d9b910782e3ea86eb0e4fd4b32ebb81d837c286d0f731cf901ee71d2c4f98853e4ec4025f9a6988

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab32dcce3f203171326db244f10dd35d

    SHA1

    42cc9b7e297b2937fbce2646b558855039f95184

    SHA256

    bbc72015648664426433d4e06cc7985de2b43f0800496bb278a98b4a17e733a9

    SHA512

    4eb70783d1788186a052081f1884753beb3a9ad1ef02fb0d047d54cbc8f2158725fc1327fb1cf7f7252f5f48c017217b5466e3f0fde0e88f2eecdbf83d461b0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca2104f360625300eb76ac35bc8ed8ac

    SHA1

    3e0563086424dfdcb118a6ba4b1df2792e0bf610

    SHA256

    1e3854c152b0a1ffcbcb19b5e9f421a5941bcf9201596ea5a02201a070ceeb4a

    SHA512

    eefd64e6a543dca8aa7e95dfe0ae7597541bfd0a37f2fa3ecccfbde085da7902fd359aca7562282e5b19f620c932cd1f0546ec1861226c91e86d9af82b51ac6c

  • C:\Users\Admin\AppData\Local\Temp\Cab2291.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2372.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a