Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09-05-2024 23:42

General

  • Target

    2c480e9688c5fe71c0c86ff150b9f3e6_JaffaCakes118.html

  • Size

    25KB

  • MD5

    2c480e9688c5fe71c0c86ff150b9f3e6

  • SHA1

    108fe2e25e311c045a651f96642b31d4a8285de4

  • SHA256

    7752ed0c4fa19ff1fd13564e5da4b69d1151d780ca095a2ffb27e9cea63dbf6f

  • SHA512

    60876adfd6be0ca817e3bb3b97acc0ee522560a2809a7d96dd2235b7ac7a0d9ce8b629f0b9d17b5999913e1e61ca0b76b80b24dd9abb7c54fdcf1b7fb8150893

  • SSDEEP

    192:uWrSWb5nX6DnQjxn5Q/unQielNn2vwnQOkEnta8nQTbnlnQMYqCNAQpdE44cwqHz:cIQ/cvWZl9O+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c480e9688c5fe71c0c86ff150b9f3e6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2884
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2884 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    178c89d4e195174df69eb2826f8d8d92

    SHA1

    08dfa1f42b56cc1a074f3a5e173ca8aec48c6330

    SHA256

    401c78274b8ab499f34c88bd8baa40d1e37a467ee5bc90e911ea07fbf3f3e05b

    SHA512

    843fc28543f7960adcfd93736b13439fc08ee167f27dde55dd868e120d66c0132a805b5e1b0628c1cc628efd13f7f2979d1df3451db99b1367708a1d7581be3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a54de355c4f3dd7d4dc4f9cbebc0bdb

    SHA1

    bd5a1f2cbde6af555a07cc20276b78b41ca33ff6

    SHA256

    e0a2601bb8ad0bb243348068f87e02c4257900a9756cebc7eb62286cb9c9ba4e

    SHA512

    f52574c7e1b3df1a2c25f849643e31c1c8e3d32945c6075f0e830c51a5cd72a6882e92c301aaef5d15c2d1784257e7de5ac51b3f9113fd2c58b534f313f11185

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfc2697210fc49376696963bdb7e2dcc

    SHA1

    4f7f5a4e655504c4b3e7fd0bcabbee3ad09cc0c0

    SHA256

    c50dec9d41ef6b33feb342f07cea20087eddb86020febb4981e40cb74bbcbccf

    SHA512

    1255ec580f1c88ea537ff6748d594ec2455f50f4cb0f71ad75ecca98140816fe5c5c26a3c1b8e83da404766bc7f0c3e723f062831ef0d2f276f76afe9166df85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    465b3a67d309029a8d1c9cedf5537924

    SHA1

    157d1dba2dd8b43e5f4bcec9c3384946e566eea1

    SHA256

    efca68fb5aaa7d6a60ae789e1690485b54ab54b042146faba6429e8b0da90368

    SHA512

    e628d5037f6f4cbf1e90bc0d4f81af8bf2b1fb4f2e6a2cfcd777584931256d534c9b356db91f4b3d4fc7e2ce6d61e4e79aaf39011dcf2eafed007bef7b91142c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50b808976666d530425302fed0057279

    SHA1

    6731df6c6bdcaa0d5a088dda581b8cae01a24157

    SHA256

    4840874b38a04034a69eb8e6f04ffea651db6de38778cc580075868a10015a19

    SHA512

    bc99d3be21d960f7069e4999a83b7346fb0ff5930b1a2735b884a5107bbbdec68988722407751e2116b646563f0754b29c8f4ddcd7a213b624d8160d31ecc4b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4aa5702ef4cc73ebb2743387079e77c2

    SHA1

    56dee5111efbe7f3ebd66c8a423d86ac7cca1f45

    SHA256

    51c1c7d1f84152dc4a1fa22446f4d5467493c9634dede5c8f3e46c1fd09c69d7

    SHA512

    b6eb8655118c5af4fc37eb7c80ecbbdde99e5f1300bb30473d1aad5bd0b6f493848cf88ee37312702deffa8526bb7dba588cf94247587eee6d682b919be93a96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f84ccda1739b5b6fc71023f14d91d3c8

    SHA1

    dbd60001c0d70f71213c74df6c08fface92d5f58

    SHA256

    486d756806cceed4f7a70a6380fc22eac8c1606bee87f991e99ceb101a563669

    SHA512

    432cbddc2e05162cad235c6dcf2b0bb4d84c50668169314bc38d2c9bb047edca5ece9dfbdc9fad3f641f8d22d0a4ff189491db7e94fb6a1e85493b4c84dddcde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06f61237a2aeb9c401532a098c25a0b9

    SHA1

    5379ae4dcf6e6d729bb40a254fd7650577ec35d1

    SHA256

    02675f12f2b3bf12bc7d361fbd2829bb03bf4e1c0369dc4df94cdffb009538c8

    SHA512

    32881af33c2a857fe893689be6a06baa9dfecef2954964b6e8cd213efbb0994ad742ef580afc860529efdcf3eeb388b1c4d4f9f084cb8edd0e25b6408262263e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6289db1aeff22e38bf508ed49e8f666f

    SHA1

    5d3982ea247d4ab847909a4327964de97df585b6

    SHA256

    4b2b5486e8bf5d31d61886ba61e7e5412656849a7f883843dcb9c883a369944c

    SHA512

    1b4510faa4bcba5f1aa42f7cfe16f3eb6d718f5cfbedfd5547796308c0d232de012b4d6c5a5bb268535e9678ee9e6c4c340a48539cbba579728b51823bb62693

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c6778c2cb50efe32186a009ba9ae53b

    SHA1

    27ee7f5fe202d6dd88963625a5c7de54d73e59e2

    SHA256

    83d50a37cf2359fec12e038f07b7f98c3a661ed3f9c331cfd62a20c91e8a7b93

    SHA512

    8527ec4fee1c7ab0aa8d377443d0887ae32e35a7994b60fec2718b57a80a41540a312784fdfefcc1011a979189b997564064c5879e4d476d33f7acac83eb557e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f6ea44691c6bb9c065ad8a2a1d53b0d

    SHA1

    c947439a46532c95536c635c8155bd72219f7404

    SHA256

    08d2e876c5ccbbf6ce3a4a7cedbcaf8f497fd897de35896ef49cc82fa9d0ac9b

    SHA512

    3b8fcffffa59bf96cf10a7f68304dabece22027c69f3d03777c1f6e9f4caa23fd419eade8a70838388957fc02d3b97aa15909915af7059f7cb46b91abdd38566

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f4d4acf7afafe3ab85e4e2dbae08a48

    SHA1

    4b7c69ec4f6732e4a71916093d2b5e7636c1d8cc

    SHA256

    a7fd2f6b4cdcd0a87c43fd9ed076f59252c48878bd4380deb853e0d882221288

    SHA512

    c135f57581a5adcc57b6028f19a094049e0482145ed2aec46d4e8a2caa22bd26a22c8397aea68d178c606e26ff7541fdfbeeaa6cc05bff1bc93c8a63453729af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06a8ee92764f284b9b39c5feb597919f

    SHA1

    8c984335b48f1d2fb8902b7da1d4d636fdcffc67

    SHA256

    e095dd900a3d7922e69319a73b01402ec2a116a175aea284660e5f5aa4cf9849

    SHA512

    eb7ae3881bf577c7a7368abb762b8758506fee90f509171379498673c25216730ffd474d947a9a6cdb0de2da4da5a5251778c91801a49190cba75728ae8165ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2efb693631cd6857b8def2c5af514161

    SHA1

    bc866c704abf0f2438b4f6de8dab92988fd119ad

    SHA256

    55a065ed2b1e033998303567fc822dd3b949271a53017d0acdae82b73bdd2d68

    SHA512

    9a83ed85a09d66a6b8642052bc1b7f951f55115d7ad43991cac0a955d14cb6219d13d5dc268cbb150b4b943037a4d6786a82c5dbcb9c2749d8a0376dc42a70fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07ca6164518fec30229d0a5a0e45561b

    SHA1

    7fd40f5a04d1798a5c318bd3d78ce4a435362561

    SHA256

    f76b103e8026d2eb84f8359d6f6b7d89c1069c89f70a5a1f1bc52bc8c0c91c94

    SHA512

    f55751b2f0e6c6ca49ca4b5ca42366dd3d76ae7f52e08acb681a257fea1bf7391264158f0a4d5530d6502c66a761937b685a94dc2b65803a7ef7abb9d5b5f004

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6eaaaea97623981908fa29f703d991fc

    SHA1

    1173fae6bdc64541687064a855b4214a212e1ce3

    SHA256

    6b8bbea0d85161d8d5be3a84f71439607ee1391c66b19dca4551d6f6ad0d158b

    SHA512

    c0627d32887ceb11f54ad5ce861d9cc7317f44171f8d9a4264a68c69f4177cf69a235110351215af6203073b7b60bdf2bc5d01cd03b9b1ab9cfd6b71c9cc77bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    717c5ecb5fe3b857a36c20b35956866b

    SHA1

    1636dacf6eee3dccc3c48fe7aba3fcf4530347bc

    SHA256

    f22774f7de072edfbf82a8144d1e997a752ba900a40525bccdf775ed5c681132

    SHA512

    bdc55666c3a78332bcb4b04fa6acd754b2d515b1921dc37021af9d700e1be8afa2c114a5ab7a0c4707bc0117bdd7e270f610ff1d8dd5148d0444e1d9e6a24ec5

  • C:\Users\Admin\AppData\Local\Temp\Cab9667.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar975A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a