Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 20:34

General

  • Target

    30ef69dd16bb2777e6b85f34943492e5_JaffaCakes118.html

  • Size

    131KB

  • MD5

    30ef69dd16bb2777e6b85f34943492e5

  • SHA1

    168c2c6f299d4f209e36a185bd9d8d4b6c508c6e

  • SHA256

    494023cfd4851517cd6e45033fc0f06de2a627a1aaac955c8cf4f002e45505b1

  • SHA512

    07a3558df914f76f57bea69b6285f929e8fe968b5e50bb448eb6548b15d23b2cb88cf55c86969346e4e37a9d747ef63a9a670933829fee991e530ae7e64cb699

  • SSDEEP

    1536:SLo8tQKPyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOyJ:SLouQKPyfkMY+BES09JXAnyrZalI+Y8C

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\30ef69dd16bb2777e6b85f34943492e5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2276
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2276 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2060

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f29093e32a46c5d01b5d20f483fa42b9

    SHA1

    07bdb941cb603a5ff36a3462e33024f223528039

    SHA256

    19aa0ef4484fb53e80e44b1b69800111dfb2824aeb0ea03aaa6d3bcf3c7d2993

    SHA512

    350ce77994e7c77df15f21a77ae563e50d76f36d0a6394eafc383ce9a9f1c764f4cf6f0fb2139bddbf3e460dda38b5177657befc0d2ce2e434ecaae9b2a31c01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4e4ad6da9d1ebeb16c0459fdf15ed9a

    SHA1

    90cfd09db44b783c9e540bd4d6d550068cb56446

    SHA256

    5d213f04af379205abbb12cb1998718f7b275ddf8965cea3ffca9bf02a63ee5c

    SHA512

    940e6a7195c049eacacb7d05d7493a7e9ab146890ef8d5c6044acb9f44db331c719b845e362739f6cdb78ae5549a73303a19f3848b3560fb26af9a8e8d0a75c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cf45dbadac554a04734b195a22da638

    SHA1

    5684e763ecbffe092cba447a4844b2bdb4803ec1

    SHA256

    f1c9bbcbf40ee662d5b1ad3f2686b920214f596fd4e94ceaac90bdb0024bce89

    SHA512

    7aec8fed159c41f5d211352d0e94c0530a68d45d80fb7b6d8bcdd74fb906649d18c6040c9ac930a019f67f817127901efca12a5b6b29d51a17dab38e83233d8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17ec5d835f3371e619d736508e74705d

    SHA1

    a900f29fe64da08e9384387706bb0607bc718bb2

    SHA256

    b0ef21703630014964843d52f1afccb2fe9301ea97d0107934b6827dca3258fc

    SHA512

    71166d751744ba9ace2b79a1277b81452a9b8b7ed5fcc4aff432d4b26f9aefff1eb208ddacf2166aadf185d9ffc106729c9f586602c1ed7421fb3c057c55a460

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb1f45736ce18b4f67b500649cd0fc35

    SHA1

    f866f87a9a028eebb27f9fb3a64708785f753aa2

    SHA256

    cc6d9a37e93f23a445601b06ef3ed6359833f035d65a5df087be4adc45f5c16e

    SHA512

    f7e975bf60c5ee842e97a98ccc3099b72d398b3c40b086d7f1bb90817ce97a614ebba66ab2f08a12945dbeff33ced5da215c521edadc9640fce6611524cb1048

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88a2c6fc7a052dcf4757447b52b77811

    SHA1

    9aa1dedf8fee512e885ef7fbd31277359c115c98

    SHA256

    a1781c4b50556ca254af74c77c0902162ce352fd6e55ae6b14022abeba56494b

    SHA512

    7c193f378bc7c9862e71d3a47a8b790670b1abb2946b447267aaab6e1565342bf53c045e76fd0051750bfa66129478f929b5e5d8e553cb30cdc6c3ca3e0318e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e16c7f0df99a6c35e64872fa553a6ac

    SHA1

    8fe16d04b50fa331b06caef0982da2fdd89df436

    SHA256

    957eea05bcb0e1e76ece7aa4079591d07df41210fe27436ad69ecc4196a0b3a2

    SHA512

    2c6a0156d4cbd3ce004b43f42612de1cdc54c996b7a83ce20df55d8a414d6866b76ab0bbf4c51c3a089e902ce1b5954fdcc0dd004d448bb317693b2a958430e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71cb9992f840413f3c9cd43725bacc39

    SHA1

    1facadac194b8040088a5853c22f2edefa978d82

    SHA256

    c8c8f22a4f4581badd7b0c65fdbb9198124c6ed632c15c467e849ec7531ee9cf

    SHA512

    bbd899cd159206489e3700487102ea6ee941da453f3e49b0a1ad42b98f9cba5be468d4458e8c22b37eef7b8d8922ef5e5cd281282ad97272d490a2d66d394391

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    372d7291b3496b200eae4d58424549c2

    SHA1

    26bd31685548e208868350ca69d36c483a4c9763

    SHA256

    80977a7f2b0155fe8255a2022a9d80e8c0335871c748451c40e691e53b73b443

    SHA512

    d0e96fa5194c9a62df136ce526477f222fd8170c89d34272340b2b375375c8037b8ce9de0d8a30692c4c333eefad854790d7b9832ca2c80a41090c3d751a5a47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f3de9420b6a71e9f8b70dccb65a2f45

    SHA1

    8f5efc6359576593eb85e753fa33e7a3107c7e45

    SHA256

    9375936b03627fcc844f85590240c9e9c06c7e186fa685e11481bef0822ec761

    SHA512

    6fe3f2acfa0efec8cb8e6bafe90bf31ab1cac0d6ca8e3f4acc3d67ad2767603460f0ab0674482a0d9e79442577321559b45eb3d41e8580cb8072f4d586493aa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c9363719582643c0fa2c5bbb1073233

    SHA1

    d7c99d04de1c296d523f237276ecf0e1bf6328aa

    SHA256

    1a95f35c35571b664ff9e96f12ab46839ad258f78b931817ed7c59a19b378099

    SHA512

    1975dfe357036e1b82494126919c101f3d07e7bcb0f29499d56d763e072e3a63ef474a52074b10fbfdf2fe0e2188360d6cb483f2c51727c8012c98b1d7d098df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3b30ab9eb99151fc787ff12effafbbd

    SHA1

    27acf4c9ceec99e635cfa33d815a7f8bc15288b3

    SHA256

    a404d2267e7d2009d66b4c3ce452b1cac1f79a5cbd0cccb10ee575ca45e22b6a

    SHA512

    3292b0041ac4b0e97679896821f8551e4ad8eb5258b0b241822986c0ca631033ce3d2535ef8d2e8fc47a3a29647533c7cb3265007c919e062f0b5026c8c5e2e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30419cf5dc48a1a1775fb64046912e2c

    SHA1

    b901089405075dfa2ea071881d9f3fb3733ac9a8

    SHA256

    a8169addcf88826fd365c67f20a01ed9f66cc4109c57e2454a7d37079fc30f21

    SHA512

    d44c0d387032aa94aaf3a2de8b9e32468d34c986d589f9da3f2544c944e4cae5f8c001726d9c89fb0475d05a37ab11082e084d60b72e880c174dec93f2ed74a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce0397ba1a99d02ed721c9e74e1182d2

    SHA1

    b8a962c167b5dbfc143ad067363cf9f203ec9d1b

    SHA256

    54d5355ea637b5d34cc2fee863bf966e8b0e93847d809889be639e60ae190f7e

    SHA512

    77f14edb49d5d7a32ed03d818f93c2ab17e9db7ff9dc595281d60eb5a1c06e355736b72fdd08cfe84e6ff3c419067176e055a3390956fc3623b84219975190c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b234ee55b4e6215b2a792381223d0eff

    SHA1

    c5e19b35a01234aefb8e463c41d59408d6b48b37

    SHA256

    7ef6a0c8c085af070f127f4afdab1b86b20ca4e9ae7120e2f7d7a5582f460f3c

    SHA512

    0674103ce885cd540492a240a4d05e08fa454bfe7d9cdb19ae89100d2059fa0422834d56313c0c6685e8082c82a8275c449722031da97610a784a505ade074af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25008cc50e3697c78b6aeeb94197539f

    SHA1

    6de25361176fb8cc70157664d9032b9dfcc9c139

    SHA256

    b7fd46d651e7906d61823a59cd091be242f54bb1a215059bf0cf18a746a48dac

    SHA512

    faa873e7d2abc4a395c24bde134cf77ea1b461e75ef3581751632422b079d106e8c3426a34a83803dd7da154136dc6c395f70867ad0abd4b09e04e8ad7a136d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf119115c48cff3d6a267895efee03ab

    SHA1

    3bffeddb852a08c3e955b7975877618428feb768

    SHA256

    64ab622ff82ea1b3bf97a808a6a51afed8a3af92bc718a54c95a37f3a23f70b2

    SHA512

    460979f5acd6c3ab22163dcb767fd665c59da37aa0b3eaf156ed950fe8ab39125b27df05e3dd631f43a57790572b5e62bac7d8e1d830ab67f06212c4c3ffacf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6372e8567031b2de1e0c40eaefc65237

    SHA1

    cc3fbb7aba697ead5acafb0ebe7ce7922356cc3a

    SHA256

    3ce4c7937a362dde5799cd1343e41f40b70b8bb2cbb40e3f9380f77e26f224ba

    SHA512

    9b971d315db850f4a8017df133794f36a0de646365352046084a98c646666e6cd1e7bac8c72730e3863626ff13b53386091bcc91d45114e1a4ea92609cf86821

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9d22e20db0cf3fc1d6676d75836fe04

    SHA1

    308dac21a1915a1b5341281bb949820615d56102

    SHA256

    fa038b809c7794d0b9493dd9e8bf74afdf894d450b1240e5112cbcabcf7b6267

    SHA512

    3cf11f209bd7a1658ea022d4bb10c54941f7cbdf569fddd14790edffeeb00da5159a43f36a310c8f83f163b6273436767924d64c7a18002e4e6892e290afa871

  • C:\Users\Admin\AppData\Local\Temp\Cab4434.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar44F6.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a