Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 21:05

General

  • Target

    310ad8871cbde2dce9bbf272f1990435_JaffaCakes118.html

  • Size

    460KB

  • MD5

    310ad8871cbde2dce9bbf272f1990435

  • SHA1

    c538dc11fa8ed284343788decfc77341b05dbdd9

  • SHA256

    eaa827998069533eeac14704871042968a7f2f528196b57ee582639a3c845956

  • SHA512

    8a6f46ec5a27e5841a64fd265850e2e7bb68a732b5ab7969b3b55a878c2378336b8e3b0e19e6ad1bb73684f9f8d71893d329a046cbe9c89387d6ecaeb4967d95

  • SSDEEP

    6144:SzsMYod+X3oI+YDQhsMYod+X3oI+YUsMYod+X3oI+YLsMYod+X3oI+YQ:y5d+X3i5d+X3Y5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\310ad8871cbde2dce9bbf272f1990435_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1744
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1744 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2112

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ea08d3b8a0ec02a3a335d6e5126a898

    SHA1

    d3477f4e4f1771f41b007ed841d1ab9ad685a0cb

    SHA256

    4d2a70a0e834034e6fea0940d4f227108d423613d6db955e2e4bd2a1f4126315

    SHA512

    9ca2377d3a4ec3b5eb903790062f86dc04f6893e305b381d8ef422b89a5002984cb1e04534fe114d91c9047130760eca66d06e46fbc6ae576b9cf61889c98581

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2219168dab613a4156f99517e527e84

    SHA1

    e542da21f856fb315a65b667d59d7136f8532a0c

    SHA256

    dfcf90a410805aaf121ad460fb76c8e90e0c3c961346e95b57fffeb4c8ecd1df

    SHA512

    7fa7f8dbff6a1afc3307cc9327cc980029cfd453367e300ba5c6e39fcedf35b50f28711937e423b06b3d2614f7b650d124ed01d9abe4d973d26c560dab9f25f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f20b44b0c0276f9a0bf361e881e77a42

    SHA1

    2bede9ea7ab6cc87869f753dad4d87e981825f63

    SHA256

    849236f04934322f233d414beb5ac0406273c47069ac20ddb060253e784f7077

    SHA512

    5ff66aad339184adf4c74430eb0f89f52c87ed15fdab2c33e44d0f5bd12170c8a76693ad1abf4ef1c037a1f5a4622d9ac181372ca46ebe6f1618a70ad6d42b30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    002df6bdea0d7fb12de7e1c0edda2d60

    SHA1

    38ba95bbd605dfa882e6f7a73206f611819faa21

    SHA256

    6952fc59ef33edb1a8cb49e3270f7dc57e3196a06f846760ba6dc47f824792a9

    SHA512

    7339d423a937e9dfb0fc10fe66cd0e4ea39cce21cb7728e66566455fe684a89037b28bb542b5287c597a9c3516a714f52aec45a19296dd44aecf3f96adefcd5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdf9f84eb5ac4644a6abb91dfbad1943

    SHA1

    1be1e59619b99273840667c9626c9ff8372a96a0

    SHA256

    7a54a536f8e8e2527d4fe4e50e7abe2743da63c5de419fb79bb26b285de89858

    SHA512

    194b89fb9a4ea00a3110a948d4471b49d61dc1d3d00a46ced8838bce6ac6e31ff15025f7adda44e5961ce8d2a24d136d0b61f477e69f89918bdc9c87a2cec421

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac6b97fe732fbba9204f334cfd436b7f

    SHA1

    9cf1be32acdd9417dbe75c33670c53fc314cb7f5

    SHA256

    e2125e9e9bec3495a07fc2a6fdcaba03474d4e711f241e6c6eb04c63676a8a42

    SHA512

    5e91a23fadb1be6ca8dced83bc7ca41e729614c26b65f73f99e3bacbc2af68761506a715a72782cbc22d88a48567f25c7fa6e60697537f72e76b65ca871aae8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48249fa222fe69366e456537d44226b1

    SHA1

    95341b88519d94222e04aa32392cafb640912a71

    SHA256

    0c21e53d06a468cf380569133117370f1a26c3ef5fd5eaa7e67dee92807af1ca

    SHA512

    57a2a342f6402a86451dbb7c12e5da92c4ab1a921f9a497311b14fa5dcca187d1d8d6bc1c6925d7668765bee6716a33f9c361e8072185da510328b8e4e66ea50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc0bb58641012fbc3dc7cde7dad96cc3

    SHA1

    201f5b81b6fc502a32b4e7b1b41c6818296afe03

    SHA256

    0f2271b73dee03918da04717a1ec650252d6bc7286ea5e67c3ff1af2ca6cefcd

    SHA512

    179fae20d4284d43d130fa0c2834e237c47e480e5ad35e1a9485c892623faf3d80f0b7388280ef4810b222e63a8ecabbe860b1089b61766d5db9c846d8d20c51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2303bb137ec399328faaa75a2af96c7

    SHA1

    463d0ba1d899447167bbf422ddbb2637f5dcb66f

    SHA256

    000ae64403ea285908f7d13b8baff9fee724c46fdd2f092f80eeb5f8b378ecfa

    SHA512

    419a4b040e02fbb1f4a64e0e63e0d4a10841a734bad70331819758ace0808d293bc725b663d8402937b3b3f8db098934eda9498a52c79484eab5ed0083c7acbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c43dace371f1253db025bcd537d1a27d

    SHA1

    b9bc9972c7fbf1da5a64507f623ebdf34a2dda0a

    SHA256

    75891f52e5476b3fbd7352480f2c5d625f7bc13dbca6b1b4c8d1446c9d82658e

    SHA512

    72d25bef4401a37d8f8df2ce47e6d0d547e5b944b2495d112a1f347a10649117a2b268bbcf85aae68521ea7e6d23576c191d18211ca2813b7b2395f8cf865d12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c532b0e90b27db3ce492cc5dd438a556

    SHA1

    72ff4ff5dfc1fd40c9991299fe756a9d25c3d999

    SHA256

    59d8d96d36b9d617233d02e75524e5400fb9e36725858a87c9fa1abdd92c6bf8

    SHA512

    bd9ce0184ba533c586d2c08ff4c1c9b597c65fc4da11973750f1b3019c8025207ce17e4458705bd3fcce8eff6e502990f567296aed7b1a899e6d69a37ced2c48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bc92a6327576338db8948411086b9132

    SHA1

    9973075bb7dde3c22815320699a8ad05b8c3f797

    SHA256

    0dae08093079629b73a738e3868093a96d244d6a540cf4772a9606b290925de2

    SHA512

    b5a688c763100393b4fefab633e4e900a90f274950447e690158540c7e765aa5c31d55cbeb7e82975e85555e9482415fde0efbdfec62e6930c4d44ff8f511092

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4dcf2c15637c0dad3fd60e758a3ff8f

    SHA1

    4593167527781e8c8674482772bbd093fd610b36

    SHA256

    2289aae9ab81c148f9b283c3d859294410258cebcd406db27552f1aab3dcc115

    SHA512

    551f9ada17bf825b2fd90b84334c2858e289df875a079785ae6ddd7f9248ca11deff59227b46685c8d44c0aa07e64bed30b794e63bf7c3998e0a8394caa02233

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc783bd3f5b85edd848b9156ae204f97

    SHA1

    56cf838fee94aeb562dade1d968b0678de61edaf

    SHA256

    900ca52dc4b231fbd08ac47344a549aa05d446c25e36da75d3b0299bd9402335

    SHA512

    ab84e76dc39a46a22bb1cf1d73187a090dcf6df19ba383fe759b6ac2b8d2a6e4afa5d3a1dfb9d92847c40bab0f2777ff4e74ea620bdcfe92d5c3948544131e36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72f5e0a9e7ef8ece1079827fb7f5f498

    SHA1

    c3fcb90bbadbfd32e189c13173d0d95e57b548a6

    SHA256

    766489a5803953cced712b4be1e1c431ce2462c519b23a06079b4228a6dfabcd

    SHA512

    2e71079553090c581630e72772503914a931ad1126f08c9987364939ebbc21b140f1ffc3f00f09433b30004ae749a963a38b245ca31a6ef4335dd68894c9f059

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f59cb489aa393bde0be3d38a184d1bcb

    SHA1

    9f00e33ad2fddb2f2f8087fbef14e9aea1f25e6a

    SHA256

    d52906b52d4825159b7a8d1d887cb61dc52299eb8c06594b7ecb38a4ae13ee84

    SHA512

    ec0f4b6838ce0951b987741118b561511d9566fcc1997babdac86d661745c27fbac5a0f9e7c819cee2828eb45fa5d02b31e206b3a6f4ff85de476125a6544e27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2729b73ab4d12fec57578c065ceba36

    SHA1

    155f094bd8a1fcfb9f5154da76fc53580c784a55

    SHA256

    ff36f9dca782f6b1b0c68f17fc17a54a169b66f8d9f90c37a07ab03b0ba88709

    SHA512

    09d1db479f1584db442e1cc64780348a884604da0849567faee11cb221ae286086cd0e0a71bba69e6a5a846e20a13257646fbb9ecbb542785e4938c50d18d96b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3c37b2049b92ef03087d9c746a6e2ad

    SHA1

    35b78d567d31bf252c76f5ba0f6ea99a711514e7

    SHA256

    8789b6f7b182b98cfd36f61a45593e2a11b1c6a593f9210f2ce080bac224392e

    SHA512

    57a620c142bfa9247a72616402aaa5f59996ab17ca872ca38a38971bcc68aaaa6794891cf19a8a4cab7798b5d087ea90aa63691b2549d65d46a90716f40e1164

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5f5ddfee53582a68be8209e7e9e9f51

    SHA1

    b159fccd1a64791a7ac42af53af6cc4939f1d69d

    SHA256

    b5dc1163f7500b47b11397c8ee0e621f3af22b1e452de5fa86e0b56e48d23717

    SHA512

    a5288e4f84940ab7caf0236d780de8c662ddcb2bae1d6323327149eb2e7c048ac9e15f6c93fd8650c288ad707541ad63e957a3da448f3db227db2eb2b9723c9e

  • C:\Users\Admin\AppData\Local\Temp\Cab49AF.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4A01.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a