Analysis

  • max time kernel
    139s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 09:59

General

  • Target

    24530b5c3e0b384e43016f190328422c_JaffaCakes118.html

  • Size

    67KB

  • MD5

    24530b5c3e0b384e43016f190328422c

  • SHA1

    5470acaa89ac10c0c0dc2ecdf5a956e1461571a3

  • SHA256

    fb84a25c918420575686b8eb21ca739cff6f24595deb3f516772fcc1abd5fb38

  • SHA512

    92aa4c5fff454b8bb291d182eee416de3fada2bda72d51597fd0062cbfb7e54cf6612de6459e0dd3ea41e4352f9e1e4184f94d21b7f3affae75ee731110a174e

  • SSDEEP

    768:Ji/gcMiR3sI2PDDnX0g6sK667NzoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQFVGo:JdQNMTzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\24530b5c3e0b384e43016f190328422c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2740
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2740 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04eca521bb0d50f25272ecdc110766e7

    SHA1

    7a8b3bcf54aba6ebf2c3533699c4fe4729b80a18

    SHA256

    c8565cc7bf0e539134bff5f1d7f0dea06b2fb0bd0e0540dac146c6038b38f3bf

    SHA512

    912dfff1811018cd5e569358970947bc27d10eda84db33c9fd459b2f1f30f7b667b8df60cf1a5839fcff1b342dd7f45365003ba9c96c9a3dad696199e7a50b1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fb2ef082933d6ec50af5ece1bea43f0

    SHA1

    f6ba1d2e33829495a405505800154893e1c359b2

    SHA256

    8ece5237ac3f6c5802c27a9ad0d6c0ad3166c1572e2772ce7123db42d1b903fb

    SHA512

    d01ea3232d8944f4d80a7aba133f35fa7bef281db45da861bf10058219fd766687dfbdd5ce153f1b323e60b0cdb566bb725f3c0d36fae1f2955cf4d08dc0c8f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d54905f404eee30fdad0b840fd666a09

    SHA1

    9e1d6296431c95e465abdebbb52905e8cb9f3897

    SHA256

    d004234790e21f3767276477ce7cdc19a6aaa630a55ee401638a0f7ea3d0dc27

    SHA512

    ebdc0737e5a0b354fb596bb1cc959f699c4ac43c603769bfe485a95e27e42bbd11051766a13d6568d64ba967f9928d101a843e893be7e21e1548923cfcf0e2ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    086a71a1393d77ff32ecf8788cdb6593

    SHA1

    8401f41bafb7d487af35f22a923ff6b8de6d29e0

    SHA256

    6712beedeecc3005f745ea702cbe60e0aae3a479e9404090dd23280843545122

    SHA512

    84111768a70a9d3c82996d0e8f64092f78a20e0f17141b8c373c1a20dd73337b7042976aa1fe2f79aa73216c708d97078137e9d3c99be6f309684784a1621301

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcaa12c65380521e3bf452f9d6770745

    SHA1

    fb509f9cd1e8c68c2fc845c707c9440ffa2fae78

    SHA256

    0d55fbb9d9e49eda20d8261297ae8639dd3b067062f78a58b506e0fdf16698dd

    SHA512

    f840dd34903a01f5cd9348e7e7c3f2d08dcc25e641b1d41882d3986a43d9213f575fd803a7aa1d2d32a4663a4c111768c3113288eb028a94d67b9884fdd91eae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c53ef9bd5ed64b4c96f89580c4afc30

    SHA1

    2afb52c512d882c0e52c11125889c95d6199742a

    SHA256

    1f34cca086d46ab4b454c5b49345eef91c77a95fcb3f2bd8012ba00e133487a5

    SHA512

    2208065854026f4f8c70b5559e8508ffb02160c6b812c4565ab1c954849d5a7f7b4adc4b5fc89b4e4137843740a91f67327fdb86dff2fdf912a9b3834767bf9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ace12422c5838446219f59585dcce54

    SHA1

    ee5d05eb51ac0ecae76431968be2ca47aea0c75b

    SHA256

    abf3d8343ac8b6ac37dbcd285099a0747b71cb3b473b059d5229874428695e0b

    SHA512

    631d831221c11c539a6899688d041a44e3bd1323822c0f5dc4d8ef6e053d43381c833afb1d712a508a8cb3a03578257c2187c2f93ad5e566a999e6214894754f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86d2ddb8ba6157f6efb346dfb3d296f1

    SHA1

    755dfd5c28d8d5a33e5be9ff8634e6237f764807

    SHA256

    357452ee8315c09bdd84c63801d612a13fbb0055932cd7734973be7f057d9373

    SHA512

    ae87734e9c5e742a9aaf848c7b47d059e0a295a5cf24870b31307a7e4eeb5093cd8c7e409232b27bfe3d9a4cd425b511a0dd30b39c0f617ba2ccc651249e65b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7194980d216f1203eb579e02a21e1f9a

    SHA1

    0c18bf9752fee52488f91405f2fd84f76132c2bb

    SHA256

    42c6b8d43c86490b52268e54ccdb64bb344f1febae719ea94af6514c66c5d685

    SHA512

    78720088f4daf7d9a5027c6885122a242934bbe8baf59d7917ddcd216204c6d57b1324ab78ecd4f4288ac51b5fa4c9cb4a9eac5188e8d328ca7653d485d212b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3116136eee972a5c166e647b1f70554

    SHA1

    0a89b7e4d43bc6e6f812e61d016959ea256984f8

    SHA256

    e9cde344d567cc496846eacc847e11079675b3e3737b373dd156c1a2236f4b3a

    SHA512

    83c47bf77a4c5389129da80a00778d9e625e9e3e0db634d3c8a8b4443d966c1dc5d4168275d7b507a2292a7242df4e8dbf8a9a12f4026b9b8ac96f8876f3fa8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c86323bae471a381e6fdec0491074281

    SHA1

    f2a0fae0ca6f1fe9a542e564768a1772aa1fd743

    SHA256

    2172b98069b12f6acc4022b6a9da5b674eb0622f7b581b7b3819f909a35dd374

    SHA512

    0238e9b0c32d016d733fe615de451e5a85f671d931af924526696166838758abbfc29fbdbcf91431275ccb4ad8a1ed3717fad2ce5cdefd08d4e3b6c0c63bc93d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03bf39bd9d62e5c54676c1a9ffaf40a4

    SHA1

    d695af8af6c26d135a51d8627f7f4d00e1cfb408

    SHA256

    2924d89dd1a71231800de0c122b8f6a963c308d5db2632c2d7a15848e34c8c6c

    SHA512

    46f59231687030c816a8df44999d60adbc592012f084007ad8e284265f6ef9664cbd3c3a203f048244abc00ef06a828dad0f2083809c93a5caf7e77c2539d6e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ace313a9596a7c574e791b6ab504aa4

    SHA1

    87068334525d6821c012a48342b6c5d7e64d591c

    SHA256

    3a52483a4f7d71ad6d662ffdeb1fe72ff7703a77fc9773cb437ea5a24afc460b

    SHA512

    0aa6e4e051f9098b2b4e1be32b0fce456c7c4393d48ee7195da28025e0feded9a23035c22bd1d0f69e68727335c4638654f64158131234970cd14ef4984f2748

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fee6044b649bd8f53692e88805f98ac

    SHA1

    99e8082c46801015d8f1de7901822b95b51c37a8

    SHA256

    2ff733831da299dbaa048e40329ebe6be1ec2ac05afdd267576cbeb71e574a09

    SHA512

    75542a679d676c4d9425d8d1a521921a10c57bda41f72c2e770a0b7a687c3459586b087c6296bd326b3c8239a308184083481652ced91d2011409213c2e10ca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0b41fe54789c654064f02ff2ce436cd

    SHA1

    ab5c2c6e4d4be9ee30966d809a1d22bc9e691451

    SHA256

    7ef428762cfa10cbb952504e9fa02f1a13f873b23b19d6e5e9b797f8bc4791b8

    SHA512

    94987bcb885ef1b5bf5a32224b3c07f8cd07e08ead7670905eefde2246f3035ed373ebc1d83cdf8127628615f28e4b5bec4de5efc6b4e0facf8fc2184ec24426

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f97d6c6b69d13b74d644bfa41f7ee7de

    SHA1

    b1f15cf490b3bb5ad7953772f4982e9da770ed1e

    SHA256

    583cc928d267fe2bc3f10fbd73330c97934237c1a8020eb5fac9d341813b5c48

    SHA512

    0509dc03f1287a2844992ade455a38922b19f19ef15bb2f0eaa120c25fae249f929f960fb6ce919667083972d78041eabe51ec2e733d428d29d079820679840e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8294750c7ce4ca1df7f08b908ff3bc67

    SHA1

    91f4ac60afb20f450dbec61919ea04018f679948

    SHA256

    19ac13cdc796c2dc453d1717cdcf678962dcec573e4b0d44f8fbea77904478ad

    SHA512

    d80bc8daa995d70221352a5589992459ee0bbf1d3b62ab11d1fde600c653153472d58ca6887617c3920d6aff9e8af1504db4c54d948f0c1b133479e2004702d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8445f8ca7a1d7f3918706261fb8e3143

    SHA1

    41d9deea65b4f5447b03b7eaec785790aa248e28

    SHA256

    0a0fccfbafde676622f60f86463f86e47e441662143763ce60958910416bce79

    SHA512

    c7e295c2edec70888f3ce9b307d05235936409170005867c17b80adbc8c2265f33e44e55add41eab7cdf2382366b9f84978466dafe13011f69ee39326b5fb8b7

  • C:\Users\Admin\AppData\Local\Temp\Cab2CCD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2DAF.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a