Analysis

  • max time kernel
    117s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 11:23

General

  • Target

    12826630737bac4a4fda3a4b10be7117_JaffaCakes118.html

  • Size

    6KB

  • MD5

    12826630737bac4a4fda3a4b10be7117

  • SHA1

    c6d99f8c8dcf87d95fdfe2d02c201d5db39923f2

  • SHA256

    34dc924d3514512d52a4b58751ae9449732a2ffbceb9990ac81158716070d5a3

  • SHA512

    844f191abc5bd423af791fefc9ca0bca8675bc5884f6d0959edafe875fe83e09509a8aff4ffc2d727483b3c1788ca048f9dc29f704d5857c10dd2d6fec7ab29e

  • SSDEEP

    96:JzLmisNo0SklXEDjSUmqQdezddddddddddddddQ3ddddddddddddddddddddddO3:FLeNoKU3Q88GhLYKgk/h

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\12826630737bac4a4fda3a4b10be7117_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1656
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1656 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09269c65fd0b7a3113e1441dec47f20b

    SHA1

    f6b978ccc7605d0dfeb48eba3bb4ab0722fc1e05

    SHA256

    f67b1c7fe9fb083dd24d6fc900fec4434b8d717bf5cc4d72b13647649fb14fb8

    SHA512

    ce235e6b22c0176b0e31ba3e7593192570941a72ff43be27dd8c2e7253c14d0f5460b908b954ec1f15e6e7961bfcc9968953fe3bf5d8184f38c4795c9342e82f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcd8bebac4dfae4508d45bd20e6d52cd

    SHA1

    7d4ee44194fd51fdd55e7a0e97caf4af3ef4cbc2

    SHA256

    37159cc6f5c1f9172814453f3f65e10eba4ed03227eac1985ef75dc6f2a143c1

    SHA512

    99281eb2a8befe5eefe291e06551c45da4eaa1370f123e52dd44a450f438434c2656a674e4da3f79b78a70837bb659c63f7aaa90a2f297332ae3b75042edcdbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2b7144b00f978334f86c02644365830

    SHA1

    5003e68cbb1996d92150a676566a3e09bf604218

    SHA256

    3fa023e96139be1f4c9f09eacce2f205cb4ffb2683c43362863dba293fd901b9

    SHA512

    714efab60fb8b74e912a305742c4ee31d5b0640120468e1629e3feef4c466bcf862323122a06c0c3025cc1ecd82ea66e2d77ada71c16d8dc9ae030407460801d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea3f07e811b1f03c77b671b0c2c4e3d8

    SHA1

    92d249e433a01cbca400c412257804556898bcd1

    SHA256

    35338084f9d086a82fd3c9ca7e30dcae3dc7265947239eb2e893c76785390d63

    SHA512

    34662dafd85dede1ec8777e4461e0592d537e26b914a7651981698dd86472f266c73454dfab5463506f5c4a5fcd92c2b552cfc6c45346a694375fd3938a75ee2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2ff51ba9aec7d7959f7e9722d89843b

    SHA1

    945d72ada22049f788fb0b640475f0e339ae984c

    SHA256

    f1ceb9a4dd93a1efe1b76c1113099271b46ccab12ca36e438b5f59dcadda6301

    SHA512

    ca929058d43c3394cb7807666e22c2346571c7392be3d44c623accf96ebf24d3b2f148dae37da5c27e38b820fb0ea31ad93b63f3243c4b80a5ce05937781e1b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66d76edbf4764aac27cf42108b064fe5

    SHA1

    8d80c5e4a32a6c962e6ff508523fae01c1dc674d

    SHA256

    c3a6229f4bfdf72e4f6380223cb53a54472cfeddc554b73626669c0a4f209283

    SHA512

    a3a17ae75f41dc77ca04cebe25e73967e5633832f73b487141df3741b7e93e57d523ef8303c0f08f60dd3c0a1200060da03c9545591afbc6affdd670f6e34946

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dda053fbf2ab0f70fe85bc62824cf9b9

    SHA1

    234a8b88485d65ba144aca041cebfe539159530e

    SHA256

    eeeb6fe221ec3444dd52faaa5607a90028079e0c84f2faa4767ecfb2663b2e82

    SHA512

    290117e805ccb9474aacee4820bbef647e0c17d00673de95e1e015d159f119b6b7a9f4e720a34facda92fec9a24eeb00161ea715cdc29bcfedd5d3b14ab96bef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1ddcbc50987d7f9f4f257fcc0e2961c

    SHA1

    58f8e3dbc9894e7e04f2270b14086ceed435eb4c

    SHA256

    bdc9a9e8188121938881f37b4b17a892d5ba02be53b5228bd7becfb5b76d96c6

    SHA512

    3129280fa37e96cb380ce7101385256a42eda0ccbcc2a924540ebecb550069a4b63ff33351e92a6ca16ca6318fbef77d300efe47537f03db4966880a424d59e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9902152bfa6e4cbf10da6fb9929fbccb

    SHA1

    0acfdfc2ab8ad8d9983ce873042c6bfb9549e6bb

    SHA256

    1c14c8382b84e6282058e8513207392b200744c9c1493c9a1b59c1947e61bb83

    SHA512

    487eac53f4304ddb759d436d9b625f96823ff66743379a1861329cacf9bf429f8d1f79bfef08e1d0425c7d3609736acf8774249e87d520441092762e00394335

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    083db322719e984abefd7aa8503a1698

    SHA1

    846e06f9c11263b40a95b915a593ca526b79623b

    SHA256

    3a2605f61f6e092588cc0807b3f35446e2f1772e23ab1f5397a7f54b33419ef6

    SHA512

    864102094ffbd9f49b289e0da33f519ffb72fcc5a749ac9b0c7334dff4b4405ddaf0349b97d17430684d1897ca239d6c4c98046ae06388acd8dae49b077afc8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5571523fc826c1b6295dc5f08b6dc4b8

    SHA1

    825f9598cf137a1a4bc80d5230fcba765ca40881

    SHA256

    7e87a3085aeb3d7bd4fb67e7440e77aefff15972b7e2352adff772095f725d25

    SHA512

    5cf60e4a4a8e03b6df33e11d032bb919ee2ad9d398babf100d1863972175e7c76632715a95c85793016274abaca46c0b59f18ff42f6868c2b236678751991377

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    153aae4f269b72594ad5e1d78167bb0f

    SHA1

    ec411f43817174dab9878e41242f8a273361bd7f

    SHA256

    d9d5189fd99f8074645a876c04c03c28104cb490ad5dc763d11c371bc65cddbc

    SHA512

    a5082d56bc9e4a3734e5bdc2a6b13f8a19d72d53b7b7b0af7d0429609c9d691c8632ce236dd0aa16a2105aeda8be1e587656d4bc862cf60782789e9290a321d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74776d6a63005d319135c938ce257905

    SHA1

    c245f739331469a07d1e3d1f2de9dfd8c745106d

    SHA256

    e9838bcf2f150889244d7502c78725c04cde7d1ad66dbdaf3786d78e51604bb1

    SHA512

    13b6bfda75a4510d3b085a87e266ff8043642a783bc729d0e6c5f24f10536f2d0b4ab8f80455a2276db1e39b6191550d3b1462a58ae63ad6d7b62318ce49806e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    575a8d1ab9b6c564cd102610ef6739f1

    SHA1

    9600f2fa42b4cd097f78023906a5348d4eb31199

    SHA256

    43c6bc9c324484c8499727561c1a9584bf1230877e67572389427f23793b7bb6

    SHA512

    de959c14421296a63edf8c6a350aba63a404ec26f3a7817e1ada82dc968febcd311f6b1a2d9de6166a988f5b52b9346328a582dc663c51299524a9e7bdf03221

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f3c2cdebaa959be7391ccb88608fd76

    SHA1

    90d49c1e0877267e7b07b654605ae440b9296ec1

    SHA256

    6148a6df1be4dcd35ca5b66debe158354da3e196038e19d7a20cbdbc13bcc00f

    SHA512

    35202a45e3a7a9b67e9eedb10c159d3b05a7e48723f26998259d6a46227dd153d1dacdc05e4bbbaa9bec47277222214e0f99bc11bbe5b0a5fe3bf4564b0f4e3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e0812d5a2c1e733b4f59b18af59ebbc

    SHA1

    a5e87c2777256437045a8dd9c5bf51d50f7203fd

    SHA256

    b6a9df133350be0d5992573ff019170903cada414c0017f995c4a8a4383e2cae

    SHA512

    65955989663781bae5c1c784704acd1438df88f6039652e419a253363e5a4d85f8f467cc0939ec61d573ad71d80c23d89e728d1b0707ff713f243f51f3630622

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6927da3416158e38b4f9ddee360580f7

    SHA1

    bc836e5b707f1fc632d908aa6cfad614c9cdb21b

    SHA256

    051fc2985cf8150e9a390669dbe5e00c43c138bf75b4eba14095e124db353e59

    SHA512

    c018713cc3a213f2cf37afd51e3e87a3095c36c5536c43d9ce3fd1684e8366a87dd5b70de1fec604d938f2a6d7fac2edbfff22305baf8098d4fa1ee0d6215bb3

  • C:\Users\Admin\AppData\Local\Temp\Cab984A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab9938.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar997E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a