Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-05-2024 22:27

General

  • Target

    21fe80b10cc7392a3fb70f98e82fc756_JaffaCakes118.html

  • Size

    44KB

  • MD5

    21fe80b10cc7392a3fb70f98e82fc756

  • SHA1

    69395132e15c01bc69fb4224840351bdd7b9ebe1

  • SHA256

    a57a59a4d30090c61f3c4033b68612905ae0ed7b32a3050efa91682c81c0cd76

  • SHA512

    c2d609b2e2bf9f0a8ca68673ad51018bad1c7ad3b4b2fdb42c24e910efc31ad99849d9422be7efa5ec93a7d064a92ee1658e0c493d85cf21f60d95c3146d6ef2

  • SSDEEP

    768:X90qJqbTBxMTaz3NtOCsOWWM34I8q+21mn9zeXjw:XZqbTBxMTaz3NtO+v44I8q+21qzeXjw

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\21fe80b10cc7392a3fb70f98e82fc756_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1948 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2664

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a238e393de03936b9c959f981514c52

    SHA1

    e3a92c3bfff45eda82d361c891d6f58ba69d87ce

    SHA256

    2d2f121f41833a1afb8b2a49df36e4f450b35eb5e83add7e59222474fca3138b

    SHA512

    07f09d75d58f45aac0fda954a829cf427dbcecdcc39d2fab1dcb93a74213edfb9d1de6d4b02e2cfa015f9156469692b505f200a2cf813954c1c346050148b506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd73df2158658e232d253db56404a1c4

    SHA1

    fb1c2eec01e2539373c8da2608536f0810424c31

    SHA256

    0c5cbacf71a15b4f70d3af20e082375b9792eb2ba83766557995712606151a4e

    SHA512

    ef053f5035048703b12ff52a017c4cdc17d3ed479ced74c7777800af3d91d69ede5f0e848b159ee0a8f73336421305e47bd52db3a64f5b5f22c6c10964223bd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f95a6a74d88f6f3587452464fe6cae1

    SHA1

    7dae8bff60dc6e93c5b8e4006662d5eb075c62bf

    SHA256

    d02f522b3e0f69cf07e90acf498a1170786954b827afd5bd6320f0931631d74a

    SHA512

    dd258df9c3b7c11939839b91fc13ffe1f6f792858f173288392d92d635eda0c089386e2c94c567a0b6c566cc844d7d8d438c95128ab07ce411ea4caf65f135be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9546c1c22ad407293024298b735bc428

    SHA1

    fdf2d3b997d9da71d1c22c54972a569f2dd4aea9

    SHA256

    ccae4432b0253ff50ec00e1139eb7eb0cf7a7ad53bf641976d41f61fcd1bb6c7

    SHA512

    249faf4d0790efa5694788e4ac201bb016d2adf90b452c0556e4d32b7d7b0f0af50b19f0ed1258dfb8e5cf2915f4deff18823165a52ed5ef8000a6964bc1c51d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9497c21c3925f1a909c0d1fd060a2321

    SHA1

    4ce124b703464da6d0aa3175c1889b7c5b2b5158

    SHA256

    dd0586967e24cd349d066af929e0bb105386605e9e4e1abf536445556f141435

    SHA512

    4dd7edd8fdcd53821ec9a02bed4783073046035d474dd5c9a65cc2e1a34636d4a8f07b09fe15f2a59b28a60935b37a09886c8a1394cb5b8685f37838c450f54e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    563013b9f310ab1ac1ab0c8ef0efb741

    SHA1

    8821af69cde4a0ce69b98d35ad8e9714317689b5

    SHA256

    0e60368e50fdaf2805210932ea8fac927d1748b19069bbada0161626c5357ed6

    SHA512

    4dec56814c322d22aea321aa296253cb4fd4190ed582f998cfdee511678f3f680f2ad74b97bc9417a75e2add782b7199ddfda1a9c32ccf872d25e60a36da38c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7acca163731ca926a3aea251e148d47

    SHA1

    04f287ebdf2ec39604712508ad2affbf9e3b1405

    SHA256

    8f09078b55249a9040efc3ce88428d5dc02904db91a1648a04929ad73cdff2fe

    SHA512

    58af5d59673044d95f8c719c61a42c18c13afe6f94c23324268edf2977ada1ae1d6956fc5ea8d2ff14be5c5750e65da71cc83f2e7954a53f8ad25d5023d4d3e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a5681cde5ea4d60f127a22834082917

    SHA1

    b75500ff8f7e12e8af810f0fb5e6311b347d4500

    SHA256

    001858434ca39e373c48689c783c72701888799f93b1df20e6651ada293941c8

    SHA512

    577cb2fd277ab9c707b9574ed5c68bde811f111b46bfdcaa7462189e5e96bfab8a60e0839cd04d23ffa47f79388a9cc7444e7fac58e0c9c2a92de8d251a10cd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08351e4271cc0f36d3606ab911c0d736

    SHA1

    29cbf2dd8225d7b74aeb4d2392b359bde3b786bc

    SHA256

    6f40a6f0130cbebd77ea043231726fb4b64d8f404871375991e8db3ed53d1f4a

    SHA512

    c94c6bf282f85a1f2fd0f2ed12eb8d07b331aed47e93f847d5b2b38dfbe77eca44f9066b2b3820a887f691ef660ec3559729750d67bf8c967682853cdfa51e00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    378a80f5ac64b7fe9dfdb8d44e801769

    SHA1

    1ab7b3312cc26db5bb51710c3d9950d719987d40

    SHA256

    335c2ddbf2076372c5372b34b26baaa94f8f66b7437c9bf96fbe7c690512c9d8

    SHA512

    737484fdffec78ef8c33d87977ac9db6142072db35147a32ba32a6cdc90553a0abe069bf2fa5c6fa66e5ca1e2daeb73a6cbbdd854b183b22075427a929f823d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00d0b89efc9c94dd625565b722532780

    SHA1

    bbfbd91d26c0f73646967469e2ae9523514a7d0d

    SHA256

    5f1a897042576b5e7c893b6039519f258cee6e95f06d8ec4efa672cff0f07f67

    SHA512

    cd3fd5cb9c9bc9dcc2667356c4f83d69be4069d48eccb718048f8ee85323bcae30a2dffd6fc5f33818cc9b69e08242b7523fcf10c235ac88ef90b748663a9454

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe4b201f9781ac206725d953ce37cd67

    SHA1

    c8df4745c6100733920e1da48b1da30e20b09747

    SHA256

    5c513592e2a26617fc50606ef0e6a1b37f7e2dbf3958bba2dbabe36687e3d0e7

    SHA512

    a4e8e6d0592012bd54c37c222f580b7d4aecac81f0486f769a820e472202360b8af84dfcc678577c6ac62aec7ea58af7e287aec32bfb4a9b8969b7e35facd325

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    feb4b0814f93e8ac42458dbe33da021d

    SHA1

    dae07553e1ca8030db71cd06ebb54a3e6814653d

    SHA256

    5848cd647460196603d151e8521efc11f5ab696f25f5bb0c8b5b7206cf55ce09

    SHA512

    db50098130b24e796f719533d18bd5d52fc0339d35ab93d9ace032a297441dc112c95d455d90c7dd5271903520ca031e16b745576f2e43ede193f560d88ac7ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    263d143a03731c23446e6ff3874ddd86

    SHA1

    5d66239e3dafed80f7a2ebabac5e9f7eef5323a4

    SHA256

    273ed62e12813781b4d4b67487ba43349eab8af1713e0db4b34e3bd4d2c55815

    SHA512

    a908eb80b81d8a15e73b823f3971defeec00735b4e6c2944a0b037ff01708d3fedb89f2848c4a8f80c9c228018832161dcd4ff15330be90c6f8a9c4d84e6f52e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af5a488e0a970df21cf271a8cd68fa90

    SHA1

    2b6b93daf455f42d76acc41273d72a0e4b3d3fb5

    SHA256

    8cbd1b8e5153375c265d80c89b8a751a0aec3dcde76be6cc2cf27fe9cad7409f

    SHA512

    e23dd0e5b5263eb6d4c949d819000b84d44e8b5d6caab6d1d7e319d39beafc86b49fc9a1fe79db3a5f9ce67d256aa0f055401a1f7fb40b3a8d784ac92f6f3914

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e2f282f34c3010875c23df107236c00

    SHA1

    22520b279cd5a5eacc437d8a0c7a4813f8d9a3eb

    SHA256

    0c679fd0aa9cfc42edcd14c0c081b37095a75ff9359e502b47cabd55bc45b659

    SHA512

    5180930db7c4e0c7fbf563fad80659ee8ecd631676e79b8d3e23565559157d394ef8c49ade43d0d1f54f59fd8fd3f78e6406b1ec793add9c240054b3b9df837d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6fb54775ccc169a1235bd1e50b9d9b4

    SHA1

    bceaafd3cacd4ef1e324314475c6c3a5040a2a5c

    SHA256

    849c97fc8ef04b39e21750d001376910501e56e40b56adac091b3ec262c52886

    SHA512

    a364bba15eec7a672d3a6bbbb5c20ed84b4e1c00a59335ed8b8acfa5863a186128cf7fa95e218ae3065cd559537cc050b8f77e8b6ae6a6260db1fa3f3040c5c0

  • C:\Users\Admin\AppData\Local\Temp\Cab2A4E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2D23.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a