Analysis

  • max time kernel
    149s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    08-05-2024 22:54

General

  • Target

    2718b191f84a6a84b3fa18ea5d0a4e85_JaffaCakes118.html

  • Size

    32KB

  • MD5

    2718b191f84a6a84b3fa18ea5d0a4e85

  • SHA1

    187a891c0f7900f51e0476cd577df51841d69136

  • SHA256

    65841286c16bfb631b118b9ede13df1264ee847e32e68de8cd05e264d4e9de48

  • SHA512

    620d2cf293901d6d7b069a78cc8b9eb8c243653b78a93d726871b5a729e3f678d8f07b02ca8597e12170edaf8203e6109420ac58f25f953204ccf7ed80e741e1

  • SSDEEP

    768:OqjEjjkX7yuRyfaXYaKEvsuytqZM4g3YJ9SKt11QjiqfP1FW6uWf6jv5x:RojjkrPyfyKEvsuytqZM4g3YJ9SKt11j

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2718b191f84a6a84b3fa18ea5d0a4e85_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:840
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:840 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1713ddbed07fd17feec72eef4a89f468

    SHA1

    3f97ee8cfc757b562254c4db8db7bd24b1d13588

    SHA256

    c64ce9dd4afd27db113ce6ef206f0fe3807b7902ca925c22b1e35956dd4b62b5

    SHA512

    84d905a72df58844aa3897aef62e48ab6852c08d0ac59c93d945217a5ee55eb43da01a8039a293af416fa5e6e5f263baf5691a19b0056acf7fd53e5bb4e01228

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6c38ddacfd8b9a30675e35ba0488e39f

    SHA1

    d8656eef71e65ead49da0c7d1871d456c6be4969

    SHA256

    888dfa311f8cb23e97f474368c632f93289f8fe808dd26c76739ff4d84c59988

    SHA512

    4485666680d6304a313969b62bbf0c6c715b871e5e346330b30cc4fb0c1f9bb154b14ccabdbd9dafe4a7660041ddb68cdefded9fc464e32ccdf58df8d6cad968

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d77d3086706056765f1855e4e602d422

    SHA1

    afe5531f46334a31b0dbeba36396cf0bbaca7eca

    SHA256

    373b48d34f4902238b853785d266c71f7e2eb117c8d97a4651e338b59badcbfa

    SHA512

    c9c04cd010968f9bc36e9380d9a28f990032e82b563a9bd7703b41daa234d5f3d46c16b620485b1bc738798ae35612747bf7a40d89eb9540705eeb23baf87e50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    714b12581033d8db7e371885b1f86cfb

    SHA1

    a12153f911dce9ba1b6afa1ecd8e3562182b09f1

    SHA256

    9f99b4acd30f532bf908c091c5a457ebfe45c58b9475583c82b64d096871524a

    SHA512

    68938132727320c64a88c1caea5f9412b31c658d67ee9245655fb0dcca97d5e817dcc8782afbdd2d01ece099af6a583dce65f314999c7f0e0392d43304cdac68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    67c846b3466925efcbde1c0daeb8d5e8

    SHA1

    cd6083b7a3a35c1d8a660a756a38e138535601b6

    SHA256

    285e50d09af0271ebaee10f8e7dbdbfd435f7fc38a1893555c3e383710f3b103

    SHA512

    55fd25b8c6ebea126f08b4a242ffb0a17a738c9962082299380196b2ba36e784379d034111237ca930960bba593d6b00ce6fa0edcf411085cf13ba0e4b7a97b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e49e5b59ac2c19e37e9d2902763d1d20

    SHA1

    ac80d75c6d0563a18f19c27cd6bf17bc3cea7259

    SHA256

    075b630e21d0afb0ba16a7de717042b17b3d93ec09f64f643afe28ca20e236d8

    SHA512

    593727ed8dd648eef098eb9fe7e9bcd3387ce7caafe839bed2a2d8c8f9ce67d5370e5637fb64675314af35a247e74f85959d14f548d894ebbf7ee583b88e3346

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ac769190a1d5dccf0658d889b2b4c909

    SHA1

    f259179d2b2f83d355ed68d1f2da59bf4adc1b81

    SHA256

    787a7b433d30b2e07be790ad2602c387b024d5ebc3081a926c5510cc72a56710

    SHA512

    de10523148892a483cd3876fbefa9ea203501750f8be3fcd298918a5ebefd96afee12e050fe58fdc4d0efc832afc3c99e9aa6e995fa76e93e4184e8bbeb23113

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bce52134e39500e28dff11929b6b76b7

    SHA1

    8c7cb27bc3943a5c04d07b1093190bf6b46283ae

    SHA256

    d7cd49f0b2e7a9c6691dc5cacf8e7b099480f3fd7352ba04f564d4c2173f9f65

    SHA512

    075b7e83633a603d865649f637a2a053035ff01f2819f83a0074124c6c86e87c585dda4bcff5e2e7807fc8bcbd22cb0010a744753a9d0b31a3e5330d210af665

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    275c5ebbab32d02d2fff03410e850766

    SHA1

    9f70b3db8167ed7e4dde899ca655f9ed11aec775

    SHA256

    108283a80f52b2c1b8da8c25979e2e8d7e63203a52a5276564ca25d6041b1d31

    SHA512

    d3a30a6b290e7c312c364ad57e0eb568768a81feb06315957c52ab63fe4b4eeab32a16ae08c20b7b57515142eb3c6e349ce42d44512b67ce606534856efb7e04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bd0b9bb53c16cc93f12269666c8256c1

    SHA1

    65ab5946049e79b2a7e5dbefb5e5cf43b2358fe5

    SHA256

    a7aabf9f6060bf5d1376e8a5a3c7f4b5f85a5214e6239e0d9c70cc682d4f8f97

    SHA512

    de689dff19d669e857dbcfddbfd356674499f83db8e607303b324bfba1f284d6e36a589416fe2b9800f894faa8a451ad51940e1fc53da97a2670f84e94cef8e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    11d34f968037655220f5e24343180734

    SHA1

    65de3816c4c5d7d3ec5913eab7de5f22eb3a45ee

    SHA256

    2ffcfd36330a78b99bd368d2808b88a16973e42437a3d7084ba7b47463cfd9b5

    SHA512

    7dd331fdfd52d60bb9a746bcca50fcedcab4900f5bfbe757b8889815c7d898b37ff0e261e38babcd5311186a871f22a0ea36b5079b11d8c6112adb4b26bc6951

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0a94f64786b9895fcc108f342231522e

    SHA1

    eac230141693e2eff7522d7c9c69a4bc4f49c82a

    SHA256

    703b12a97e30fe0c95ee9058b47fb6ed4bb7117e2d690450f2f2324bbd5197a4

    SHA512

    9f5c4f3319fb406bbd857aa1cb336474634f1e9203170aca5da1980ef9a5be5eaaa2a0ee0d3f0eb4d5c2fd3b4f714f992060231e162e21e2d204cb4d2de029b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    075bd99258fcdc6da15c217b880195bf

    SHA1

    6e3edb975d405af1df0054ad9f1217bc1dfd7056

    SHA256

    f9eed4d077db26e511c956ad4319f847ecd23abb6d80a40712ccb4318d3ee208

    SHA512

    3dec101b7c1ad9b16225cb50387b55d573aff617bb8c5d69c23c391d68db8dedaeafcf692c8c2cc06aa473a90a97db51b9e9a2c8014171747aa2993c5cf74baa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e21a6a51752733ad017987eccc478b85

    SHA1

    6448c8423cda1e5b32d4b9eb12d989bc617460b0

    SHA256

    c7f475c897fb2692800e5e702d97d4d3611f6bf83eea07f914f84f41b5d52863

    SHA512

    4e2a3600ed288d0cef15595b47a2b7a894236f58b93ec5777aafa91f56268a30b4ba34b3c39ae002dfee54f203749cc0a22d298814d595dcc26e382cc7138909

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bb0c78a722df5afe1d913c7068e41e55

    SHA1

    01c51d6f153808fb219e84651d10e8d99249338f

    SHA256

    6a6113054862b6fe18717ae0392195cc9e1755142c69a86fb1417dccf57cc750

    SHA512

    dee835795c4d6e80eb2d28732a48083c03e21242145fee3a27f0ce0d42b0ca55fa90374e99f3af8d2d6067b4d5cc2452d722a14c279536b226b355b125e24801

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ae895d42aaea6157e4b48de60020c100

    SHA1

    f9c6a8ee86fba7a53f883c94f840b8af5203721a

    SHA256

    e1decbfacb339daf3cc9ca093c48a84b446809135b56b277ea83dd98ecb67fce

    SHA512

    6a4cf0770fda55f61bda72124b31927350c9d96cead68ce05e73817f91d7c9ad823a5e73a4f67524f32172ec3562b8b46cb22f01248a4b76e0f139800a22d268

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    614b10f1a16fe6aa4fcbb910f16655ff

    SHA1

    2fba46ae593e226e077b3aee0ab84313c1671841

    SHA256

    f21f9fcc7167203abcf3ddddc09a57173d83332f451bdec4c7fa258c07e78d6f

    SHA512

    b650c118290205092fedb0273840e93d69917bd05f07484bfa955609bfa87140f1baa4bc81e3553187ac02a696f0a2ca9c373796371ecf2acf4e25948b228fd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6fd8a0522501569dabe9bdfb7e9e88cd

    SHA1

    c347f660567e3062cd85b9b34158bd8be29da639

    SHA256

    2dfffc10b54184c7b835018504e3009b70e699acb19680789c489e24bba085ec

    SHA512

    533e521e813decede02ae9bb86b04e937fc7b374fedbf11639a1009f3d855b99b2a9be41d760534b9e46d67f7af90834d9b1b5b55a4ff5fcde813ea9149b84ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ff78e30dbdf4dabd24460a745c64fffe

    SHA1

    f05bd5e23b811bf7042fe0124e8dcd3d3e9b9439

    SHA256

    e290dcc7a2804d33ce17318c2d0fb93c6efeebf016ecc9b45e63199c87182fe6

    SHA512

    ffc8ba072937390005151c18d9e2815567c1a0adfc060afb9f9d015e48c124db80b570ae0402d0b6ee9e6ec7f4e7d6011b8f34a4ae77439591aef3885fd648b6

  • C:\Users\Admin\AppData\Local\Temp\Cab367E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3750.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a