Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 10:48

General

  • Target

    299819883952c4e86676a38b094e3e9f_JaffaCakes118.html

  • Size

    26KB

  • MD5

    299819883952c4e86676a38b094e3e9f

  • SHA1

    21f4c0c4c3b6b1c6929483a6d09b7ea3cb06f560

  • SHA256

    867e33093efc796dccfc8d3c7dd32b5daef25f7be719b203d127023b41c21657

  • SHA512

    91ba9aa16674b740699ca9fc420677a175aa1f132cca9318df6c0d990a7ea79955bdbabf1a9ed09738e2d8ae03c45ab031462e1a5a1a6565cfd336c622b15cd1

  • SSDEEP

    192:uqvz73b5nhKnQjxn5Q/gnQie7NnonQOkEntQCnQTbnFnQXCJVevo7NteFo+NzQ4Z:nzQ/wygcZh5i

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\299819883952c4e86676a38b094e3e9f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19215c15b3e827c8dbc39f59dad339ab

    SHA1

    1173887ec50f90c9751fa613c46cf03d4a1fc931

    SHA256

    cc2a17f7f8d621fd747eedc5b5013a70452a8a686237b6fce4b8f81cef73c686

    SHA512

    c2b1d37ce4d67f715fb5488b28437ae857067ad16078c9443e6920a6d85afe49fe809b769423082d62f68d7478708fe2345cb84a58c66d52ebc06043544620d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    845f825446580d1eb2f9fb9bfa67b22f

    SHA1

    6687fe19b55783b5df0cc0c13642d965456f3959

    SHA256

    8da5ea0e45d8aa59a7c72ce25786aba798fe84050958a97553b7f21d410465e9

    SHA512

    7db18be34e40dafea93437bb2f184b3fcb72771d66efe62f045dc4e0fc7a3c232c60ae96ebd738335c28fcb726733e1d3c0dd1d36f3898952fe699578620ee5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    abb4618eef1d91ab8fbcf79c97fb8a8a

    SHA1

    2da5c1fa4bbd048d07a332e82a8ac30c5ea8b12e

    SHA256

    5c01147db7d8988772f727e66ba6733ba2a75db8468940060dd87cf5a2565bdb

    SHA512

    d87e88330896e8b43951ec8941a5ec5b11dc276ba0aeef5fbb669b26b9156ba9df4ffca1e7b1a78ec44934fb604a6ee39825f36ff7761e542b9fe754a5d0c07d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    034a12b124122a3bd177fdb9a1c4b252

    SHA1

    d1cb274978996f45b4f825e971fe9aeddf0def40

    SHA256

    0ee2760769e79e5262829393d0db8e9a12455f9c3767296ce0b2afca32d8dcdf

    SHA512

    ec086e15a922af9ae3d6c6a56a389decf42ef58b5ea8b378efe6ac95adbe9f2b7606f097c7a4899d449da12c4d0e657482e95a8ad6936d907a065e5b95fba1ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71eb39c3b6a68f12e74091f82ba4242a

    SHA1

    1d43f2a8e474ce1229aa761a64b1a810ab1c8f40

    SHA256

    eae24e8aad15be024973cb83a5737d824c9a4676d403ca99eefa0c23ac21998f

    SHA512

    19956cf1b3fa84e4856c5af0c08417926f77e12cb67a49d3517772b88f62ea52edd0387f9180e81c4b9a5f1c59b04dd8e86b1bca7d0bc694b2f5b8ff53e899f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b262dc301b3c3a89edd66b229b075d0

    SHA1

    c061827f123598dce702c7bd623d9998950c9eff

    SHA256

    03796ed886da8c921263b21f18f57d23eef243a1bf4ddfb7ec5467feca9927c4

    SHA512

    0c532bd978e56762314d94eeb1a35cc34bf2df7c37edbc000bb5ad29aa5f89d83e144ee811837f04d897e91848cf60e1cd1cd1aa7b47e5a8c7f312e7300da1c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9913131b7fce1a3a990f03412c555af2

    SHA1

    b82a636ac1dce6c4bfbf52544929d52bd7e62109

    SHA256

    d9098c0bc578eb626107727de6ad517171656251d7b6cc15cb5a92683b38ad76

    SHA512

    eba85d3308c5daa13168007c3c5cb6453c9f41f536bc88d3c8459bb582e711b6ed2b2dbce403b75a4bd688aa37674bc205f77ebb7018a6bf69540e01cc8e3e85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    588a92792341bd44267975a72dc701ca

    SHA1

    bf2f3ca4ea2eb96dc41d12e49348286fde0c2267

    SHA256

    650ba5b206ca0459a379c8a372a7622e2a1a8261bb8c7a5b28f0ec917c19455a

    SHA512

    89fe41538c74fcc6e97f7782154cf10358040eb09540d1c4d9c47fc63489f1bdf82287964dfc50d3b3b62b60f9e2e5e78002b6a8158671993e088862ab67f92e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68f10f7e5c1308d2c11209832049ef91

    SHA1

    293a00dce47befa1b8c74ea500171a6853bb2fed

    SHA256

    503c9c6e78b24b773443a485f487d0d383c5c7772658547f67b25a8e9efdebd7

    SHA512

    2420886250cd3c59c1365f05e1a63639c1d860c1b6610f1ac576c8d8b030cb18f93a84bf7d45b8cf5787f3d260a74a3feca60f5e26f9d79ee477f004ddb9b2f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4f58648adfdb8aefb54e2c34092d09f

    SHA1

    37766193ae49d779ebbedd136e364084344913fd

    SHA256

    d7c3f2c06cb5321c1ee4ab777d461207fb41ba19c7d89ac7edfed9e0d5055413

    SHA512

    428728bdd6fd7bcab18b9a0e6a819ec7cd4165219fa9b202d8a01c07aa2e31f0e99a801fc6be7ce553bf0bb4e028abbf022f32ac84912a2988b57fbe01f43ee3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66a4698cbf6a4d196267bb135383d487

    SHA1

    356979414df8226d6ace8713c81d5cfbd8d9d098

    SHA256

    56d8881d5fc7aa562e6a9e31b870e338d21274325b38556ca155a7fc9b651b16

    SHA512

    d974a1c88d3c15866d529f1a5bda13901ea770a9cb4d7fd6c3d34e8cab2ee9d4aa945e68819f83783df2a451e44b6e1fb48802524f5116637d3893e52fcce640

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e44d836ca7a567ed12f7bd022c607096

    SHA1

    8a2cc05c9b454785ef5a7d53758972b1d8e4b802

    SHA256

    399bad2e876f167fb7add56fb48113d7da8fab3640587a9751ada274ab1f6afa

    SHA512

    c51c4b558d6957c22621a325ef50e90b61418fc1f3f6f8e04ea201d37ade02a839ae740ea99b30e695618a80e8aa45669a5ca98dd7d613c5c412357de0339562

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70e5ad270596393f24a99c794e11bc31

    SHA1

    44e6dd940ec1f81a3ac21ac55a2e93945cbb306e

    SHA256

    f4067d85db06e8b4ca71cbd3e826b9de885e9fed40748afa3c529316ad97c6b9

    SHA512

    884558b23d5a62f630b744b5627b9ceb92e0acfd144dc36cb4d60aa446d2ce7c349561b5ae5fda435417ff42230e22b80f22147df4350b6a9aef674242b5e528

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7f3a303b1fa30ceba42f2d8965ea58d

    SHA1

    2119d3f525bdab2e5c629ee136f4c467dc491010

    SHA256

    29edb1a802485b9f0f785c6d7feaa933f54689c44cdc732739e3d2dcd8349fc7

    SHA512

    fa2a335c1fba9e2e60ccd71668be1e39d5a4430257cf0c0f96e83cce84f8db1e22a50ac7f43b1eb4001dd02a5e820e4ad0d5fb1c44184a05cab5f3c3adfabc01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d868b43929c12aa6f1a727d7e40ca646

    SHA1

    9ff7766e3927cc10b921042efa25dd58da2cd2ae

    SHA256

    9a732545081ae9a0582b79eec2d442b3030867e8ad5c6d1c297334879e5fc074

    SHA512

    1fadd9affaf0c3b8c2a95d934935041752a34a2725b72d3b55811d2ee1654a5719b4a917c1320f1113dab04053efe86ae2b2e9c2a8b78920184a51d8de469e19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3349f8ba9d393293a87a51719d7ad42a

    SHA1

    bd80029029be740b784204d9d07bb6c5506cb43a

    SHA256

    d72421716e4946fd36d56c883114d6f223cb4a43d046374da8f9edcf3b60d3a8

    SHA512

    14148e3ab878c686e5bd1866e33fc6355911107a624e647c2d6a534052832c27bb1ef81219315023bca5928bea6bb75dfae55f6752d104129b516a9dfc3f94fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab432be98f3a1300cb8e790652b5174b

    SHA1

    78da221da477d656df9bec397ac4a71b25c4133d

    SHA256

    f2da52582aa0f3af6778e9693d8dccfafce579f98089e2f072b82a13111eb41a

    SHA512

    b86040c6fef6afe827fab2c405d842103b55adafd130e9f2a3ff9ca67683096be80befbcd4fe1a04ff31d5dd2f90b0b2c89349e455b24e673e913dd584715858

  • C:\Users\Admin\AppData\Local\Temp\Cab2CDB.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2DCC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a