Analysis

  • max time kernel
    119s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 05:45

General

  • Target

    1fa220a8abc9651c818a5931148741b4_JaffaCakes118.html

  • Size

    460KB

  • MD5

    1fa220a8abc9651c818a5931148741b4

  • SHA1

    03066fd3064876d3d7c5d0f944399b1362e2eba7

  • SHA256

    5abed085d93b0ee1cd03f6f80de1660fb30678d54fbc5113560150d6b1f8f8aa

  • SHA512

    9b17d76ced7ccf73a847b2d1b1766817858e3cbd003b0c2c9fd5fd2211879a8742323f4de0b0f41569ba7fe16484dcb5e2c12c356989d826983c75d251426083

  • SSDEEP

    6144:SosMYod+X3oI+Y9sMYod+X3oI+YHsMYod+X3oI+YLsMYod+X3oI+YQ:H5d+X3b5d+X395d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1fa220a8abc9651c818a5931148741b4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1736
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1736 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1312

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26a96c72865209dbca9f8b36ba74bc12

    SHA1

    3633a9265b825df0f703054b15d7de3318b208a0

    SHA256

    3594bc5d8dde92bb9792cfef10fe81d2bc142d358bde5816296dc71b38b602d7

    SHA512

    3b22e6e98f9eac76637e9408b890fb05fd6291ec360a528e64097c9426686a9882771bd0a35170fce52c26d7a468d7fa7c6fd2643193afd6a88dd3626a242ef8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    412f9789b0a483537001790f69730ed6

    SHA1

    cbac4bba06235f99826b0b871c70a0e4e6fb2139

    SHA256

    e4db4ad5c9bec57f00290f530b3a8a7973cb533fd784a4dc6edef862e17a7090

    SHA512

    91dc6f2ce04dff1e5664d1c054b805b696ebba1a1d12d656f0c7e58482641365518b0c3f53af03b78e1843dedb8323822dd079df8550fe49cb31b3b27015fefe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0411bc074d3dafab422680b6616b4686

    SHA1

    c7acfa5bf8878d8908bd39ad1b3471785383ea7d

    SHA256

    17dbe195b6eb8794561d84f630b0010e9ef9bd3ec4d02c99ca2c4ae944f1baf1

    SHA512

    972b379020d77e0cbdf4f4391182cd2b3e879347c3282bd441999ffa2fb19b752877ebe8e3797f2fa03fcd10fd839cd34aec3e9d3e33c82fb3902b25183c70f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5f1a53dd429ce0e4147260c6c66ab22

    SHA1

    64209906b064947d1718587260da41a01fe0ed7a

    SHA256

    9eac7c19fcfcd8fb480b7e7c5c39fed1bb4f341d6e4fbe64c6274f929698596a

    SHA512

    890ea4b60ab53865675b3015e88395e0869cb96adb8f32daa331cef0246fcc1b013f7de5ae8acffeebb947ae5d0702609831a9ec4da67eb94befa52d8d4dcbbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f3fb2da2d269e3eeae5ce88d2695154

    SHA1

    f92da50e43c2d1b5fefc7217d1d52512cc30f7f4

    SHA256

    3a505414c603f9d0e4148186b556110f42bc38e5818f87fc6eb6d4a2d225607b

    SHA512

    466e6552527e555930332d001f9733862ca3a1df9a97b3a3553c9612bbdb60ff6c19c7b40cd28a21730860e57b8689ff83f52882fad39c89dc114ae36de78ff3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8565d8967ddc29a8174590dcdb6c178

    SHA1

    dad9123bd064fbd543034fe9f6c3803b1407164b

    SHA256

    21d3338d00a871df4a9563d6ad6ae0a82194e375d09529cb6e57744021661dcc

    SHA512

    b0e7ed3d60dcc56e32cbc7aa268d5b8f4b0488c8506cf04600ae6e3859ea99c18e0a72fb7cc4b29e4b01ff9bfa390fcfedec8155accc4424a247ece6411286b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6eac8932708fb75e736d6447fbc1b6f2

    SHA1

    72caed76023299f4c2ff8384d986c81fa972a08b

    SHA256

    a8085d5bbc75ae8cd4c291ee69c75a3fd43bbc3cf10ce78771df958abb284a65

    SHA512

    0ea0c3c3341b56846e2d088f4cceb9d5e8c188b71e25872c5c2a3fda10856ecf202c86122ab3b37cb5fceede08222835f7ef16720104f8ecf1bd82e035eaa4a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fb3e913e50d73d62bb2db23ca152601

    SHA1

    83fc6b27d46797683c9de974c3df86786fdc43e7

    SHA256

    b8fbebaa9b10f34c7c64e3f1c8995e70e89e89900e0ac47279eef59c4b7438e2

    SHA512

    3e9435e704db305b49c4ce4fab4565013f476c5b2c0fcfdfa2c1d1e43e9f18b68ca4fe6f34ec9bb120fddb7711a9cf4115896257e9ade4cfd61ecec7209144a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2647d96b0c2cd89759703ea47a8893fa

    SHA1

    2da0c0e251b9341c19ddc5074f370c5ed448c3cc

    SHA256

    8084ee2026860234f1668a2f3ed3613b7704702dd8f4715105579212fcf9751c

    SHA512

    ff113290796ae6447da11dfa20d1e4cb7b83c8de8b42bb60a6a7fa7d0c1ae03708abfb47fca22ea054bf830721a0ec295d37d93fa872ba00251b9d16bd98aacd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e5a7dc0e529684831620b016816dcfd

    SHA1

    b4fd4906d8fc361ccdb744b4afc3d8b7dcf95567

    SHA256

    ef6cdb9d9b389d0154cb6d8831d849d62410bddbfaf7e9fc403b44aca599eb07

    SHA512

    d7878bdb8c7506ccc30356b0dd31c0e995a7c5b89f1005ec9887abb4bdca290fc8be8aa5418a58f77a65f35651ec4b290f201d0cb758bf63aa8ec5d30c46ac4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b1eb2fb23f06c45b610a99f9d7f8395

    SHA1

    7192105d899b7c729527b80879c1231fe37dc308

    SHA256

    730228d16d8c10a98b053ddb631b89d00aa02f98b05301a6190dd0e1f0ea2b42

    SHA512

    27fbcf0bfd76be7182042a2667237eb7c8a1d706ee9a1afdf5963970788bf4d336692d6f69bd3e3a5b2471e25f4f973e2270ebbb411da06d41e3fdaa6064312a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bec3529f2e7dff6449bfed2170a554ae

    SHA1

    049c74592fed70d644a63db04b8a95db5d0b5da1

    SHA256

    53261e323ddf56d128c83a69413b581fe0af31378d21dc40f3d0f6068ab691ff

    SHA512

    9caced3c86929e8612f2d39902d806ade03e207d65e14ef039eef2d2a446e7b21d642a02f0855f7b064023d9d00635ca2e7a6c75da006b9e2f7c8229412348e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1fdc1b55fd0bdc024687d8b6fea6eb5c

    SHA1

    b76c71c8cd280a1e39c50a4b0265920cef6244fe

    SHA256

    b2ec7c17909458c230a3ec0b8c4798a65eed073775bcc99c3d2d0fa0bf0b1f18

    SHA512

    38b559c86c21041f1212ba19fbbfbc68e0b687e905cd6047be75b818d5c90fb3333cce5f49280ed716e457e8d6c50308ad95cf2bc5083a960f8a9a375c7cbde6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8b6f40dcc35b9b0690f3559ede56e4c

    SHA1

    8b476b96932a9a52ce85526e0ae30fa97661710f

    SHA256

    eb4396ba4cf5f6cd16e37f9b3bab1f78688f2db9419b82072d2bf9283d28bac5

    SHA512

    216ebfd973cbcc6fb8e9a9b113c67fef94bea17ffd2eb37ad60d52b5ee487dd223716e6503c19924055f82d8411c77da4e9e17c5f2ab7223e2154d66bab8945e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6a322ea5bc8ece33ea4f342a62fb488

    SHA1

    9c94ab9b76d073e8145ac7ba4c65bd17557986bd

    SHA256

    0a299c25a27dbd26a31f11a1e395ea393543bfb024ddd934ce063b8f6a467ed6

    SHA512

    bf8241cac41eefd3007c5c564c62194225bbf514943e98ef1afd4cb926f0259b103e305eaa0fb185ae7d4c1124cd61fcf45c1fd95aa9e7d2a158ae28033343cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9c910356e708c5e5a7c93598242b557

    SHA1

    b9b90d203118b58ddc5d538a98013e32ad898eaf

    SHA256

    5712b1d3688347e83bd6cd008a7499e4e60ee69bf1c37d2399f3d35df0903a82

    SHA512

    4e7830942bb51d4e1a5655f55b8a7f01ec13facd9d687c5084b3155cc9f7b598bde90172b7c94b642c0527c211fe44f587ebf16106604f3464e94ecd2d874745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85f84da770c1363a0673c020e1e2ce1f

    SHA1

    d71e9e4bd108f05ee5e79be398875fa601cd40c9

    SHA256

    309363a5e36df0e95745e2ddb9089495240f9a26d7aa87da6ca5c687f2914f77

    SHA512

    154e6699c7cfd9066dcd1f5a098d5103286b04cd64bf57cffd74534f55b2177bcec101620c92b9a272491bad97a756a232e1768e31a180bf675d61eb233b03a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66c79a3d9a9adf125e89855306f1cf62

    SHA1

    52512223d10fd4ce9c1a5a7a9815dcf0ecc2036f

    SHA256

    6966a3fe894702a161f10d8adea8e6b0be6403f658ba3433329524241de76cb9

    SHA512

    84804899a5f2be9336b4edf3e07d2064bb40e8c949cee3b5db7a239e15239cd3714982056311ee774f74ab7ff31c4c7c16c0091048f797e1b4851b3fa73ca589

  • C:\Users\Admin\AppData\Local\Temp\CabC19C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarC2EC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a