Analysis

  • max time kernel
    137s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 13:27

General

  • Target

    2f56782140e9dcc0077ba173b4dacb28_JaffaCakes118.html

  • Size

    214KB

  • MD5

    2f56782140e9dcc0077ba173b4dacb28

  • SHA1

    48be566aa4a3aeacf0bd6b5df34878cdceb97149

  • SHA256

    da221e096c9a8bf6d12ec79423a8367cd94bfa5fbab4ca30fe67df8ad4062f42

  • SHA512

    a4fad1ad9c6dcdcf0e76c74a00df5772e649aa408d8c4463138ad53892721a46538d14d2485e77521a36e718f3ef8fe16076073a236dc90298847f36171514b4

  • SSDEEP

    3072:KrhB9CyHxX7Be7iAvtLPbAwuBNKifXTJecn:Cz9VxLY7iAVLTBQJle4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2f56782140e9dcc0077ba173b4dacb28_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1524
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1524 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16ca508b1c4b0a84203e0edfb683a6f1

    SHA1

    3c3a1d7bc89e616aac42d9d56fdf10d0e32269e0

    SHA256

    e9c176d2a63e6e250577465a0a60edf6f17f9a34e642de270a1f2f9807aa5df9

    SHA512

    83e7583534d07c31ba9e848dffb48aba29c83a5bf47e792b9f67a7a2a74aa625af06763697e950d5ecf88cab27049eafcce3c84bf2e332a9c9df744a978370fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ea8c914fb85084f0cff58d3e9afcf9f

    SHA1

    a1052bed7560114e7ee8158c638266854d4beefa

    SHA256

    edd66d8a4869b3eaf734d3a3113992878e13813d4bedf77323af7c3cfac8f8f9

    SHA512

    f08b92ce10eb4f87550bb060b69f9f0ccf20e1cefe59c2b9febb001f80017b824da47cc3a24e9e04673e6c3a069e263165b6d3b7f104df0518136e76f02632c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eabd17f73b6380f0db5462656597aac3

    SHA1

    05719dc4e2981595432798ffb3402671b64cb283

    SHA256

    b53571906ee31a4fb63bc20c0bf2dbfac0e1a4eb2bc9c8dc7d27479c428688b7

    SHA512

    fffc2a0631805ea454d7a5c6d3519b5aecfa351feb1043a42454d88f35c28cc44ca419a33e1550f1937438a03340e1ad1ff650c05fb19a5ebd271742c990ecb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5051c633dc4c88f80bbb16f4c8ea5114

    SHA1

    a25eb5d9ce47a39c67d043cc4a155d6e65cc29a3

    SHA256

    bafd4204c9eb0d390cf159afc21173e9bac0fc61decc9dca6fa1645733f197b9

    SHA512

    f148d2d5afec596a49125578e71a98832735b22c8f6f1d38b0479c47dcf2dc537727df3e1e053a144a3dc9111207e8a290dd76b822946329820cd6f22992cbab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5aca6edcd6321e20d2091dbae0a62915

    SHA1

    9cc345b0d23e7a70722643a5a6c8100ffd00b042

    SHA256

    46fbab65a02d2d8222d808650aea567c1e91cc1195d34d994f2b939c9690bc15

    SHA512

    a383aff18e8903f3c70ded9808f223c50fb379543175d45ffe1aedbc06aadd7a2c2e8e300631e322b6f6ccd52ce1d4baaaba0da8a7903c2c9daf4921fb62ab60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9757817f3ecc83380f271095958bf38f

    SHA1

    7d2b1e0559b5aa569f383b012c8232efd1eb2eb8

    SHA256

    99bf4c3b43c923c14a1cd69cf813c318bc02bca062bb17188da1540a6e0c01e9

    SHA512

    be72bd6a27ec966f2b14b8081032b196807d02edd4a0c27bc7c19973135e4298457a2361012a56a6e681b491c7e19cdfa8b97cf8dd38fa4007c9ee3bc0f52444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    323da945d832394b963985f83ff23a0b

    SHA1

    31f5a2061c8441e313430ca9c373c0c0f6b57512

    SHA256

    75a7bd24e15fc38655343038f67ac6132a8e11f8f874bc2957f41985e0739904

    SHA512

    3ec8594b938d22e79e5ff7902f172e39730962e873198fed6551696b0a35789d5d228c2028071f5a56df634bb4e571713126542791db911eb1b9052ca80fff6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9294d11e8ee62176cedf3eab7e511b12

    SHA1

    8bd66a19f92fd42136bd0745291bf40939d2bcc3

    SHA256

    e8185386afab98979b9346607fa2df3bb437113d754038bacadebc8b8175cd68

    SHA512

    6f8e306df93bef5ddadb441f974f53de9e1d5a2c5849939c9966663606e3a5e341276e7bf4988098b551a92eec8ffebc329fb07499e3bb7b6e0292f7c432a8aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b9d82371284a02c761816bb56e00823

    SHA1

    b5c38a34827c0587b99a7cb12070dfd29bc79ae4

    SHA256

    7d91dd65c4548e3335b2623b34ed2fca0df4089588159129347805a373a91dbf

    SHA512

    b57a82aa0d2053851b754295e086a929715e39f7a27d0093f076e2f3d56803e216631422584712ea0f1ba6b263eab24a7a080d34a1a3d7e15963ce7b4b6d0635

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cde16bcf603d831f425e72e05c367ea

    SHA1

    2e1a96ecdedf77f35244ec164683102dbe233c2c

    SHA256

    93212d4ebb4f5e173cd25e38237c439f4709454dbdb25358891849f25526247e

    SHA512

    7720018e8f82496a6cad195bc0cae1ef4ab916ce990aba3f101a65a663db26a99545361fc2fa94953863746b38000c372ba8f22df09c8167bcdd3dbd53d7c3ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e830a7a47309462366a190ee7c29111

    SHA1

    30dffc513b76276ebf49ad384c0e1a6f30963bb2

    SHA256

    93357544b8ad04a458c47914b6add4308259af3e294eca184bca24170fa58ee2

    SHA512

    8fa5b7d6c49b4ce189f79deb9172b50874bbac7a40ab16e3de9d01b2c91621a5e53e1b14da314cd61278b8c9a687ffd359e87ec0d0b438903475644a7be6b83c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7e26674ae59c372edb61e59b1e20653

    SHA1

    adb677a90ef45f84678e4fee96368043c436fd2e

    SHA256

    94bc6999cb2402dee5577c1eea7477845b8a3cbd994074b83120e419692b9218

    SHA512

    d5cf726fa037636452cf65f7795b9a07d85b6b62010331527477686fb79caa3e84713fcfdce1784575628d1bcf14a7215fd58065340e636e67b5ffa8295bc737

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf452dab7ed8ef8e7d29e7f1034b6773

    SHA1

    8c943d49263e4491f3677e93c7671633f0030bda

    SHA256

    826ef4af286c92236fe9015c18cd373237cc73a07f4ec212f02d1a6edd53961d

    SHA512

    e619b7d43036ce88fb35527e6d6099fb31effbf31fef6c8f133af2417365936d52e368cea8c171499d83ffc34c17d01745fc500b9b4356c760b82dec4bb706e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e71c8c3541d4de8d1ad95734b1b4e798

    SHA1

    40e442b5aee5bc0fdf2c5d3d5e1e4de811b753ec

    SHA256

    e777115e6c1f001d04b116867b2284e5999f6deaeeac36efab110ce120d0c363

    SHA512

    06212d55a598a33c39fd87a752c1f28626a4f68284ad5ad52ffda230d7971de87ce2c07384aebec90798465421457306c9ef8381679b558775f2d4a95d323dd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8206c76f928a3f3f19cca5ef9c3ff496

    SHA1

    1fbccd7e15ab3e9700a09b4060424f638279cff7

    SHA256

    265a6f27d5bd6bf5a6a2a2eb66a953cae3b9cc2cb7a166cab301099d6dcf99aa

    SHA512

    2b9d9d852fbbe8032146a2f27b598888e0b6eca5e11adb2c26c75b3ac06765a5531260d27966b23f830d11c556caaaa8b7b221d899b91b9d95ffef6b2bc68c55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30e1901db64dc4aa217be480eb68e3e8

    SHA1

    b36e18f2cbd52daecf6ff71db214fcd96227bc49

    SHA256

    a0ac48f8c66179322009c26456e151fd824a48bb1582aebf43041fbb6ea80b77

    SHA512

    682c5c74bae18b5e6f4393ee1e79d7fca62afbb13d949d7ad7f36951f3862c35e3154746f5cae80bab5ff05085b18dc918c1c7b36eae0e9ae4b412caae8ea0b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f6b07124a8f01b090612450a08cb2c8

    SHA1

    99963ab04e59540ac84b86d04ab7346f25471be1

    SHA256

    5c1b0e449b49fbe42e77a4705997579cc57e0f6f7ad9af2def0f6908708249da

    SHA512

    8abebb9eac71d8a9f41da654b85710ba1bd895c0745e14187e09ebde6af3c0ecacd61f0f2a71ff1f032ccdd2c9304efc03ed318387016b3dc801b8aceabf7b35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10026b4254d267949998b96d69396c4b

    SHA1

    3a847216741ee0d091d220c18dfeb64b32d4773f

    SHA256

    dd6913d3dd549388535546eb41e5ec68182a58f16c8fcd423ae37b1a0c40d2fe

    SHA512

    3a259bb790489500521a7ad3ee75531f33be9b73f963828f25b87bbfc58ee15c828ee0e014e4f59e9f8fb3443ec139996ac8b282088cce150c445b92124cb365

  • C:\Users\Admin\AppData\Local\Temp\Cab69AD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar6AAE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a