Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 07:51

General

  • Target

    2e190e0cc89264f7fa0945bb48930143_JaffaCakes118.html

  • Size

    23KB

  • MD5

    2e190e0cc89264f7fa0945bb48930143

  • SHA1

    110924d5d7cdb1f6bcae1b38319a8aa2b19f1ed4

  • SHA256

    2bfe308431f3ee6d1525344197ad3cfb62547ab756479e780b19ca33c070b6bc

  • SHA512

    8ccbab3443482e111e5afb8b85cbb988d5a840c1afebd62b4bec9eb7b2352dc30c03de836cb6007f878f094d53d6b1c3b4f8621f8034591f2e6992ec53c04248

  • SSDEEP

    192:uwX5b5nAqnQjxn5Q/rnQieyNn9nQOkEntVFnQTbn1nQKdj4vMBSqnYnQ7tn2YQnI:wQ/Qn44

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2e190e0cc89264f7fa0945bb48930143_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2100

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8437145a52ea063700747aceca62287d

    SHA1

    61d7b621d9ab2c3e3d046c072192bcde3117fa62

    SHA256

    241213f07da2a32621b9091d693e97ba0dbf31b3b1b7cdd5ad799720f6b97eef

    SHA512

    3fa5972496ddedfdd04267d058eb73127071dbd79f15697367b22d05b53a876797bbb648c255847729499c59e57ca52955c655c18390841e3d0d9bc548143ecc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ec8c4eaacb43762f41e263c75b556918

    SHA1

    fa02dfb8640632f314a36e7198778ca7deb85b05

    SHA256

    c5b52eae6ed9e8661cb357c36ce1acd37a88dfc8f58d1b4cd418958710b7d762

    SHA512

    930a660b3bac7e551b372dd34a1b80bff6f41549a7b92bacd109833a236df56978be799e562d91323d3677a4872e4853d06699077a4a36f5f5fce822115ec875

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8a637185349a81fb1f84c3081b648294

    SHA1

    fecff96670806035707a9013d9f8ae76255205b8

    SHA256

    8d9f3dd92cd8d5c06e3d18f0a63ae5c60520f078c701e23cae7f259b79dde76c

    SHA512

    637e745a7da3cd1a92140cfa975268426f23f08e71e746cf17631be9a99a9a5fe68f674db6662144a177daaf4474a83a6db1eb7ca45433c5062f4eabe41cbf44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9930ba313fd0218520cecf61485b9999

    SHA1

    a75d5452ac7a908395e725959fe706eee94f0973

    SHA256

    7a6d77edc51a516cb4be2f368526c5b5dc1fe2f581760d3e42f1fd923284297d

    SHA512

    2f172132a998710f03e8acfd4ac5fff5118880c24470147de35697c97bc1ee84d0f2720446226cd9032427f39b58429d80a53b5337ab7024c50758336fef161c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2c9649a4387a4983ed48578ae784ab5f

    SHA1

    196ce83a68de04f99ef1bf86a57f61d688a0bc82

    SHA256

    1e8afbb7cffb2f54242b3bd72311843cf3bbfedcf9b6270c628a874cb7a5ef96

    SHA512

    cf902255c0924148776ebf087963b73548243521d7d9929c51309799cea154e47e665935386e9c39b745358864d51e1b617feacedc2cc7bd098d54b9de9959ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cfe526ec3959973896fcf3cf168ab465

    SHA1

    de2cc794b6df72979ed6ea65150206120bbb06e3

    SHA256

    ad044b1a001189cff4161d398b2d2a24104808b273ccb83cdcd9e8eba9c2e5ed

    SHA512

    3d873e3c2cfa4b6a3bfe223e176187fe1dd54006566aa44019fe797c7d813e5bb429bd49ad297d694fa8aaf464b870d15afa2e294894d72737dae33985246248

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    732b4f1ffd6f10fadd255b7404d8b393

    SHA1

    ff5d0846d7ba3aa645dfeac10f05b417b3a93675

    SHA256

    51150d08ddc4b115b400d82aa0b852c4fd092d610495604e6592c0a25b1dd742

    SHA512

    dc684bc97cc3db13a350832d46fcf023009aa4044d7354f372957401ce5f67c8c2e44b56e0acb12bfbc1b1d0128c14ae3e912046f5cafc83c3c18051d5d1e6b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2192df6bb4196331456cbdadf6f64232

    SHA1

    1a6e8f4acf4cfa58743d01751394f43cf06b48f6

    SHA256

    e18918fcaf6f10a12e3f91292586613be763808081812bca054e29cbd5f8dfbe

    SHA512

    75d891fbd9d90a76755944b85ad6737c61490e0889644d122dc1b7ef61141b65a2c23b63626232f2118920f6673d98705c836e40ee0670781fc4f4dde2140fc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ca031a18d24c096e7ee1c7a2f20ad670

    SHA1

    6a1e395588d3c6b6b5696d996bf24093f9c07662

    SHA256

    9dcd23ee8cf6d5e5ac844fbd7065dcb9a377965d89bda2b32d6a8477358d0f69

    SHA512

    5d48ce75b4594304997582cec2d150ea83947aa369d7ec71face4372ee1b266d4f9e513aa9db4943382441b644ee75b518356c07e4312a5d17fe88a44aa521a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b3f4b173b279cf594cd6fa634142bf3a

    SHA1

    6813733a6a35e083412b7a844ae7f2a75b4b561b

    SHA256

    d20a4513f031450c352a4758398f1de16934f874807879cd34c87a4288bf44bc

    SHA512

    5ec04c9f6a7b0e963f8e5ff6e48c09f831e647350fcba43c862cf8b76c2481ba70ef54ba4b41dd4aa5d3e4c1507c3de8c7f04f9d672ca7d34e36cbcb84f0b3ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    96320df2f9a8038051bac8355702543f

    SHA1

    1385e6544e600d8108436aca4a43aba59fdd49a9

    SHA256

    5197c73996586acab23fb898df487bea01b90f99fc0b242bd0e97713f2520a31

    SHA512

    026d6ec3cd5a06acf2d58852675968969e1472c0250eea2cec1da4cd30f354c3e6870f2f7845b43db6576cef56b91a56a106d95e2c73196f97b9f17adab2bd12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    942b5416d84d7eba49c2182ec1e3611c

    SHA1

    08aa99c45d283d48e5cbaf26e15b3a02a4485095

    SHA256

    c46b6b34d4dca642f69fd3c316f56a945daa8b62e35160d0a3e46e7dc5189cb2

    SHA512

    e0103a58e74d4ae00f688f8e71b2a23d5cb824ed981e5474f399932f43dda740774106313e24a6e2684aec03032ae86488b766818c2837f14b68bdcc3855be89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a96295a5f7a51a5d1dc43aa20d5f2a61

    SHA1

    253639d846dc4f746ca2b8498267ea74ea06149e

    SHA256

    18bbe3ab505a9b175c546d99f3fd60d375a74102a8cd17563c26b1228a6aa7d2

    SHA512

    c069f78a62f58057d9210e5cf38fa152192224c1c945a741780a425e5e0c59d127dbcb294b146d30ef019b397a3f03d8e7d106e0e4d4ce9b07a4ac13c7d45e45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2c64224f9bd08de87c3f3e7efb5d024b

    SHA1

    5ac326837a5f9993c127f4b83b9a4b084bdda61a

    SHA256

    51b61d155bffa5fb8aa55fde6a50efcc655618d09cfaa8b45aeba7f98ea8d55e

    SHA512

    53a88d6ae47f40ec91db693ea2ee38d441fc1b7118ccf9e5d755feda773073450059a91b777cdea7e1889d53f70cf0ee8c803d8de2ad446399e06b35a433c8f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5f04a804fce913fef93409f4f3a62203

    SHA1

    75fc9a28d8896883d41e85c49f912f19378fd2dd

    SHA256

    5f36365d64a72a262a3ef5057f4e1b82f1c7d9b3632228d3650ae1a5636a20f3

    SHA512

    9d7c2dbb9911eb4b170e23deb1487ef5cfc5b8134eb2b8c2379e5a9264a7575abd1a6d237d42c810fec337c2b2f8f4ddeb607c4bcfb76a2678796254a28f9a54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9b9e64c582f3d6bafd80c36b3d496b20

    SHA1

    9b741f1960cbac839836153a186541bf01a76b1e

    SHA256

    dfabedaf90a5a81b7a05a4bd395a271bb6f9955d7ba129333b452f98077477ec

    SHA512

    8ae0979ba1b1ea8aa0984ba45579706f4a0b403d9564d2c53f4a3f5b3eba6a1d30bf97cb87254c306c417e330e5d3625248f771b9cfa234eba33040af2147029

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5fbe3c6936f8e1945249074f3c1cafd4

    SHA1

    4d4ded8ac89fb14b4b4c9a362b7dff11ed526c63

    SHA256

    4d28971a8b6de1a86a91f6319a18a9d97ddfc387a9e96f405f96e86180870e67

    SHA512

    3fdcbc3641d29227e1cb0a8803bfa57dbfbc4d1e09a964cae974c79ad6adcb4fe644445e01ab77b7c184816ed962b488be5ae42a4e90280f34bf322edad21d33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6cf871f82f59454f285a918106388de0

    SHA1

    8fc1b15ed15e6955e02988958ccf64d5e4f8b5e6

    SHA256

    c321f6efb320367920d4ece5d1755df312eaf920bd73e72afdc8f1061c73e490

    SHA512

    f3ac10cdeb4f9f45feb899e2573799985e06e6aeb51c414bd7232e930410bfe966adc3d83d8b8143500f46108dc380d83bb7ffcc5493ef62ea266417a9447376

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    dbecbf2782bacdc38bff1a6183e3d60f

    SHA1

    6b279e768e5f9899268f76adcd8046f44dee1f76

    SHA256

    625efafe60b58e822e35c7c94ad1cdd5e7b24a5594b37cbb04153cc86403b958

    SHA512

    6315d19477bfefe22ae9017446d5ec41efa5972b49bbb3885643dd2307da9c8ac029d52b70598d0ff46b6a77efbcaa5aa44a176b6ac7c21d51c9fbab66a7277b

  • C:\Users\Admin\AppData\Local\Temp\Cab27DD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar28B0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a