Analysis

  • max time kernel
    122s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    04-05-2024 17:47

General

  • Target

    13cfcfc69d8003eb23d2225ddd57b0f5_JaffaCakes118.html

  • Size

    47KB

  • MD5

    13cfcfc69d8003eb23d2225ddd57b0f5

  • SHA1

    19f84cf642b87f7877e28a711003262019a9648c

  • SHA256

    c12cf8b8d7ccac95f3ac59d4949e96d943cf1ef9f635e4e8676f40a11f469de4

  • SHA512

    d55f4bb4ba062563824a449e8f10f87aadc7c1ddf75cc6f9c1c0c7b0b5c8365117fe2ccfa0934ee13e1add785f30de6cccf6393d551f6b9bca86d01dab16d521

  • SSDEEP

    768:SJ+xriDCMC+9OCQzQBbUo440EQZsnx/ZjL1Nurl33dZXBHwoHl1N:SJ+xWDCMC+AD2L44Vnx/ZjL1Nurl33dh

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\13cfcfc69d8003eb23d2225ddd57b0f5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2984

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23fd31d060bee90b17e42dd7b501da63

    SHA1

    1e3355f98826f7a4908f8fb121c5cc5fa3599637

    SHA256

    5e14125f77bad7df85d7ac3d5e1cbd7ab235b6d3a5329fbf115c6e1ecf83cdd5

    SHA512

    cf7e5dea679bf74e81b1e3daec10ed2adac4aa0246c2fe74ce2537f4832604bae35273e416da7f900f0c9c986eda1e053d907fd0d07d114af76b882858ae0528

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d65fd653c4f2580c8923ff24b844ec0d

    SHA1

    12af8b98427348058349ae2127bf7ac5abd23e34

    SHA256

    885976c22b6f9bd0156fa690d170746c5a6085e5284bbaa40ee70a73b17770ab

    SHA512

    bbc9c7c664f7df5ff1573af7d383f199dcb1f55e22bbd970153d15a6ae10d788ceba6989a430ebd633963b457b6603421dacbc2d3c3903afc70cc135bccff8aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f967fcbaa01646f8e6a42444ad05028a

    SHA1

    e06ef1261f94e98d2325d31d3470920a413252f9

    SHA256

    02b4de51f817918b3671fef915c0ff263c0636d2cd3d8b1728b5d9a84ab268c6

    SHA512

    06f7bfa7049c41d15019dd266ba3378d7893a5cf41df10e7a034267ed6cab48e5d7302346d9294eaacb76aec1d74889d0b7a6e2f3fec09249de2bff629c03ae2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    247b319da6ad4c5c8a009ddf63f0b942

    SHA1

    fc948e781f80d8b884c86ca566293fa08e6007d6

    SHA256

    24bf33384e80ecc7316d9f6cab6ad24ad8accdf8fbf7940520bf90ff0aa72894

    SHA512

    67b02b9fa59eec18f26b4ee0aeee5ece21d815a349383ce4a43dfac00f3a3485bc31da788c2cdec29e570e0ff1d6398a5daf90b81b16147b84959d6e951ae6fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8dd9391a1c81c711866fb6dc7764976

    SHA1

    1f9dfbbc0b31ca66fb82ddf30f9e6226db013560

    SHA256

    139d2f483f5d82679f6504270bff93b6939f9449396a0a87571f5e4896232740

    SHA512

    34f94b91c594f832a21e12fc627e093b843130295882908e389e702cfa898a5b2cb3ddfed79056d0566aadcb552e1b779dc86fda2fe2f23b7e52a9e4bc8d77e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1fa25f6f230e3ba8c819b63ee85a495

    SHA1

    2ae0d3506e7a35fca642853b92b42ea7a2e666c2

    SHA256

    05f64e5925c479134330f25a8dd331907733e7a75c354e308a7c47a881336290

    SHA512

    23e6b8550b1539a252f1bc1405cab185335a4b3ae4f2ff93b090ee358acc3fb99360a5c342842c8ff2139879f0e26b51af3783db893f57b78cc46bf01d1f184c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39a04bb77f0b901dad39872ef9913683

    SHA1

    078897296770eefaef177cff328f0b36052d40e4

    SHA256

    4dd6ae9a76ba9117c1c24c7ee408653cae10ae97c5302f47f1c5edf698eccc3e

    SHA512

    c2e0d76da79ca6f0fb11ff18ed2a9f3241ac1026cf9eb76597449d39d0a15c6aef955923e300a7e09abef28368999214285f4a77f5002356a556490a1e7736bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6df4fd622d42c005a34cee4748bec222

    SHA1

    ba0836f07eecf1bffdb6c9663fdd868c8207eab6

    SHA256

    8c919f33fb907eb4d9ec7437eddab3de6642511a5f1e22cebd6ff9c80a9beb08

    SHA512

    16e26ed9fe0700e460c39cc79cb78008fdad432b9d26768559381ea0601a950a6b1aad791b4cfb9963c6e36afebace90934350b3b45bb7febf2a4f6e5c1463cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bf54d1e6a9282aca39aa23cad95f3c1

    SHA1

    bf0a5814423f55a0b5e9bf3cdc4ac13d58a69768

    SHA256

    36285cf4ae928444a8109979f9d7914aee1b3e2e37203a5a3215e66c70f0684f

    SHA512

    222a2f03a9c3805fc07c8964f3157606233001db5aec45bb56533e470bd88fb6570a6d8a45c9fff2e3dfb0fe99c8f93724e188ad2a5c6f5aebac9f0ef0c4a618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe125f486a7b377041748d47537bd247

    SHA1

    e3b579e7bc86c18cf6fb3d750d552ca5d3233e31

    SHA256

    09d805fd7565738b48d2a95d3d9f57b3709fb7cdf91f6926b34b73feb4951709

    SHA512

    76a00990e37ed06db20bc04d357c7c463f80b57323d9a08eb52c4aaa3c78f01a4a06bda0bf2b1a03e9c1a7be9a1928d17b8501e29cdb7048dd12ef2de8bf86f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9056c4f9993f8dadb239518dbd9626f7

    SHA1

    8a99ac091abfbbe94abd5cab77cf34d8870da112

    SHA256

    ec98735b4f6767bfcff7aa946b815d64e5ff5d7d7647a741a4ffe69c7e042833

    SHA512

    ccc37e4ab12cb50649ea10b91c051e6dbc47cd263bfb81c8660fbec38a71fc02e656a290801e61c913b9e86b22b3360c63222b48716578ac1259c360b67de1eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36e025e817d3d9212fee36c6dec036db

    SHA1

    7c3065bfeaa92ecbae9992414cdb069a6c72bcfd

    SHA256

    70fe0768c8fae3428955f1e96c6703340082e2d7ffd4bcbdb835e70caaa48205

    SHA512

    f9bf0bbd4ed20347e11064f337bfcd8a041014c95edc0e5839fd14b4875243767efce5ac09db896412be3a680233da8fffaed7bf5cc68828999e5d31ee429b20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fa0482e870f2a13f3f1399d6c4ad978

    SHA1

    9f70c4993cbb55ae2d2d73b5afbd2044311ec552

    SHA256

    f86caa825147961aad97d946370024473f6f7651aab7d4bb6ace8a0ba4acf6b1

    SHA512

    a131ac034c53b7226b7819791ae3263217812c657bcd2af2a3017c9b7451eb40aa0ee9da40b017938afa287965da7d299800834b225d3bc87b98f05151f78e6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    017c692aafe672a9b2705a3c84796031

    SHA1

    8f077428502d399006d59d33b42d89881722e1bc

    SHA256

    767092262aa3b7f72a71c7335b3a2b60672b6d462b0db136522ae9b903b4a464

    SHA512

    7f1acabbf5b5b6856018447773dfd1f799da808cbae8764557e9261b24e981e1c0f4a9ebbe0c606e749c57de6e6384f10e964a39d5a7c375c0428d51c657156d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    250ba6213e221ba086a4e7f59fabf620

    SHA1

    1a1f2ad661528662f7a15d0ca61e63b32bd9516d

    SHA256

    bcbc33d20963a0a1a5dcd17bee6acdd921b0e5012dd773cfa837a6d68635201e

    SHA512

    b1f37c00401a5685eeda54ccad63c776cd5f69c69e508d8b096051f71fbff180050ef4f95311e4fa664a8fd6da65472b2086b5655fc578eec551ee75dbcad6f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    825432ab1c24172edb07bc8cc1384d88

    SHA1

    75fa91d8aa7a76eb47233564ff8cee682bb31738

    SHA256

    8af326d8bd91f71cd9957c1721549299c84125772168a98469a73a06347aa32f

    SHA512

    49d8d5aca90aa8ef43056fe7ca2cd96b984f98aa8d2eafb224819227f1e0c70b0cb534297d61220dbb5830732b100367fa41de438b69facb2203b76c27fda244

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    062e33e6755e2166fcb3dbd34180c9a8

    SHA1

    fda4ba4e190b96704c0c8fedd959e117451a0796

    SHA256

    7b4e6d427e8778c2b3ff3f5e29dc0084c1333048c88561f02ece12337097968e

    SHA512

    50b2d228d91105758d7a78b2e485537c89ba618791f0f91ce9a3bcd708d64ec4f6986913f2497e797d811612ed44f8745659d19b211267dedd3682adb6c2a73a

  • C:\Users\Admin\AppData\Local\Temp\CabE236.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabE2F5.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarE309.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a