Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 03:34

General

  • Target

    281dbeca347a975aa2604282846bb492_JaffaCakes118.html

  • Size

    460KB

  • MD5

    281dbeca347a975aa2604282846bb492

  • SHA1

    a921da40ee3d60351c5f42dfd9bf9ecc378c4365

  • SHA256

    18cdb01f88c994b521e9f7190aaa3c4ae9a3c837c58fe376f6190eeef5c8de80

  • SHA512

    2a1ce76220d0e51e98cf8728941895063508b9a045da334ef643f789dec9d08780e1fd5576c24a0ab73d5b5d69e676eb5b8fdac4bbe1a35b1066e80c07b505b5

  • SSDEEP

    6144:SCsMYod+X3oI+YFQdsMYod+X3oI+YbsMYod+X3oI+YLsMYod+X3oI+YQ:75d+X365d+X3x5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\281dbeca347a975aa2604282846bb492_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3056
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3056 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2168

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e52d8843da60c491f0d3f0a53520acf0

    SHA1

    04f76ae4f946f9b0af92a77dcf0a460a41e07839

    SHA256

    f580a564f3d43cab24c37272e4b02bac20976554f65a52b10eb1d6fcd223583a

    SHA512

    945f865a147958828e16724b5eb035d113a62bc3ad9c5f4406268e5964cd9146378fbb6c26d697f2703f0899187b5ad9d8c9368853e368f9f39bec5bc581f477

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c7efe2898e8c387e59a416c8c4f5446

    SHA1

    74de829c51b9b24bb4146a2277827d2ec728edea

    SHA256

    4b128bc5151a36bb0ea0afee9ef20c665959f41f09d57a132adb7e804e3d9152

    SHA512

    325b53b4aac2ede2995286679d887445424ae6bcaf280278feba52fff92d147939d0559d2befa8d4fefd3b3bf4ae382a78ab4caebd5f065a8908e554be7295ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc25d33b49ea27eeb84022c9cf104ed9

    SHA1

    04d35845cd92d6946ddc62df560af97acaa32141

    SHA256

    1011db3cf14efa50f16da5e12be62d425ddedcbbea64577bdd70f4c5fb75536a

    SHA512

    da1feb9cf9588048e15e8832b08da9aa45c0e6cc732ac6e3db526e00108910677de041cf57b62ef6e323b48d4968740fb8d14cd86a249f7b897c2551f2b2aef5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2ce021020375d74e3bc5e60822058d8

    SHA1

    47751c693ebb3e2e5b5c520eea524289e73fb297

    SHA256

    1e75ef2b773f2f23ac9bc89a69d426fd20d1669996e55a3698e833982ba5d6fb

    SHA512

    58038df2f6f81869f5340935139118a2e639b674782e58a05ed7f2f1c863f887faa4ca8798bc209c6adddb81174f27d7849917179fc6c1b8a47c62b26f5c71a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fff6070a99e736668605d04935490e43

    SHA1

    86ac153e27f6e8ac7717ac37c17bfeb6957ad935

    SHA256

    f89b3b76aed496dc92ca74bc797cb2f41d5291d3fb1cd4e4300b3ffc79ee1aa7

    SHA512

    4b0f38450f3a91d2283c6d1398c8a0d233bdad7f0d68e3426f103960ebc16aea06b0d443cc61c48e53a4a8d69d606b3225623159fe0ff99f7c146b808fb34ebb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8d533519764b100684949a6352ea25c

    SHA1

    7e0910e40b7fd24aab0ed66b561ed36124e1d4f8

    SHA256

    7c4a264166ebc9bea311bb8e7727bd228c5e59c1684b246d402eb433509d7981

    SHA512

    cfa559769e62b92a781578566c449fc8440e1891f3bff0bdf6738e572e5e0d3f5e12bb339c48923a09dbe87c945c3c14225765eb5f2469662d42b0f17096d618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53c97aaa103fb3999f8a94eaa0f75809

    SHA1

    258e5bbba49aca4cc97de5c5c0d47aba69977f4c

    SHA256

    df87db5a3340c17353356d8302ca1d29a00d0e982dc776217ac967676206d968

    SHA512

    3e26ce49f2de89940767876b3d0cdfb24cf39b001d095afc841bff0a29d4a9cebd382fe4f494e5d2ea33f7c04db594a02114bb1d1f29d7af959008f3e25ec6cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9fc1f5739679a4a02db77657c5209cc

    SHA1

    addb8d5c8b3084597c60a73121806db8198fc776

    SHA256

    cd876d8e5da4535f54ae345b9000770bcfc3c5e8e979c2eace028e0d9a40cfe1

    SHA512

    0514e441165eeebfb5e7aa1eb138c651a068f4cca3fd3ab616fc1a0f656deff3954b1337f32d7e24711ae51bb91bde483f1e9d45cec3d8baa86648595c214e7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b59065b89e4c67c0003cb8a6312e1cc

    SHA1

    3f3f1277b55b45edcf5913f44f0a0bad66e633ad

    SHA256

    7c54f09b7574de2787cccd9efc71b9040546b3350fcc7d4a725b1c876ccb5dde

    SHA512

    45e292102d8b213e1429b66e865ab09b776076c24a78a58cf7176f60c38bf791d93e9e75ca541d1d5bc119aa5a68399bde5402c3b90c5284071e04bdb18e6b3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59feb04f713cc90621b0e7860a47087a

    SHA1

    323768afa132d509b85c6aaa15cb3c961f4b808c

    SHA256

    1ccaf761d6f9d5d7c5c748acb025e734b5a2958e0b1e50b5790465181c15ae84

    SHA512

    2d159081521d72621f33a6ed3b31328b61409f766574e248beb40d3c92f606e47a38d1d94cdc5efa11bc4e874681e09fd3576fc6ec8708efe352fccde2fce961

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d87a44ac82c7e4f939791b6a1b73e83c

    SHA1

    1a0f29dc2e1108bf139e4941c1a21eedbf1d202d

    SHA256

    034101c62d1681da968f930044f9e424f88aa3ec713caca630deb591f37aaa34

    SHA512

    a06cea70f267953879943297a5e5fd7ee0aceae1f94caf6393182601c5d5b4639fa66b78941499b40fd4ffdc7230dc24dfb85218610b3af7b946f12e4388d4e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7441908cc4ee7427deba383b91bd447a

    SHA1

    7b0500887a46d8f4cc38dba4a0b6002f508d5a1c

    SHA256

    52c670cf9fa81fb87ca83f059323ee50bd16db13542bf7249423b530b507d4bc

    SHA512

    c997b168e1e3c60022a786a4eb8aaa0a18ccf65c31c29d950f1784f312bae702c7cc14c65862b8f8dcce0c078f7e9960551e05583d23bbfa6b3339ebc27157f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d381ce3bd851905287b836acf66df37a

    SHA1

    f4e205de113125d6b6d8640b6fd45c772b5d46d4

    SHA256

    17976f995b18305d0768bf0785916b0add81e6e3fb0baeafc76b60f3af7a3041

    SHA512

    33e0f7ed20c78576ff8d1684fab71259c0e29f06e8baa4c6c17b95cfbfcdcc300fe02f314b661aba9966059b05f9cbc2f2eb115eec51f7f8821fee3cb921565a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d3f73227a40f381bbe4c45a93171664

    SHA1

    aa38fbf9c6af7c92fc00b27e73c02036e7d26a1d

    SHA256

    249b22ea2695ced2dbf79c855220946a773256b9b563de0d57d4d18409279113

    SHA512

    9fb704c741fdeca951f42c03972f2457eb9f091c3f020b7f8294d8b502f0deba0eab5b711e63e014b966154eec42eb974595bf5dfdaec94b702eabbe252b0141

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1d4f497b0e34aa710718703a5a6c361

    SHA1

    55372c168bdc2e547d7de6351b7ad149ef9ee5e0

    SHA256

    c628277d326af16cafebc66a00d4a728c9c212ee41eb36d4b6149723de27e597

    SHA512

    f60e896c1466dbddb16c834e5aeaf37b0fc5f517a565a92644c82286b1ee3384b770432a64406150a82a8094a76c8a3af6e410355a0057073aacb37b14a93ebd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45a1ab248e541cd40e5773572d7f1b11

    SHA1

    98fcd3dfd5786a4a4419b74dcf1d390df1ac1cd1

    SHA256

    08b7372d37f1aff761f34e56e7c885aa200c7b62bf6a1f722568b858d30c84a2

    SHA512

    745811d13cf88af1a960fdb4adf4ddddc2b671253379ccf40823d29992d39ca1bbaab25c3aedda6703057a2436143aaa44ff420fc54c0f5a34d53e19fe9339ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    776a3680d61576ab06ec428e687eb27e

    SHA1

    114bd5990f579e5024122532ac83895a9744371e

    SHA256

    ad411c9d1aa24eccdfce23099a96d5b2162339a40101bd4c414941c56ae432ed

    SHA512

    8ce0a5a035f47fcac413538769749f06f55a68b704af453d1e3ff296c710d9fabd2cc8be57102b5f6d1ef2d4f69f2fc0fe99d258ef0272aa71ab3ca90fb63176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6b60a0eeec79ba04f9c70ee87b5b11e

    SHA1

    0f5da8619d9273b019c2291ee85770fa94903af7

    SHA256

    228d6b09b1633ea2aa07601351e996f917a91f066bd4713b69522bd2f1eb080b

    SHA512

    74a1afbcea91ce93a0dfb8ad476eadd0ba7aa166d18da129011f8d1bf1e2a48bfb313a72917ae8cd81c8260f66e2c6dc865d955b4c396b6ed25c0998619e0ce6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06a92173e81e2986ba336dd9e416f046

    SHA1

    c57e1d45e39a410d91a367835cd630fa6e54b59d

    SHA256

    72a204e81e516d203651da6c8927d38b600a056f18a50cee9f8cc81ff1feef1c

    SHA512

    c644815fd56e7aea1acddc6825411e6cb48cf6aa3c65450cd4d7d27ef7460c335c6a07d5fa299626bbcea84b898ba60d5dce434caabc3103521f9441b857a677

  • C:\Users\Admin\AppData\Local\Temp\Cab55E0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar5631.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a