Analysis

  • max time kernel
    143s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 07:22

General

  • Target

    3369db286f7b18b5b20ffd19738a335c_JaffaCakes118.html

  • Size

    15KB

  • MD5

    3369db286f7b18b5b20ffd19738a335c

  • SHA1

    d46aba4788a673b66ac980f17b01e6dc27c67b0e

  • SHA256

    0d3c6cb28cbbbefe3ac75082170fa8154c55ad959eb1d1c7835d68300a4ed28f

  • SHA512

    0ca6debe98b296c236e60ac2dd6117fbaddd2544bbcc93151b3bc52b228c55c80d2a084ce1c6fe805f52ba73d689071ab33ee324e7577a708e5e17456c0d9445

  • SSDEEP

    192:2ZG9Sl7w0qgnBxqezXwbyI5EZWAsY1kOAvVmVbm8SuLNvZ51sEEpiFImZfXVmi8G:2pfBxZWmA85m85HwNRAlNwkYcXB/

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3369db286f7b18b5b20ffd19738a335c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2584

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bbb7b79a6b4a34153a1aa6f90f259e5

    SHA1

    c061dddd6ed3bd001c1039b3a748f8cd0eece10e

    SHA256

    7fbd08c961341f8edcb2f0ff21c412cff7c4768805e577c75b5f8b9e6c0b78c1

    SHA512

    6d6292164e5b70620eaac732480252c60eff1cb4882386cce74e2cffa76609ea80d7cfc1c73cf4b4c7bc83c7c7b0533c731bf0dc26311c11e3903aa54c639c46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a168c92c3c80f0f6803d756822893d5

    SHA1

    0cd79959907f651e39bc3b2662e4aadc3062761d

    SHA256

    59c56bba9707f4de5318c364d7839679c47a8ec812511ee846f8bbc9936886c4

    SHA512

    15d0eef30301beeb99976c3354d0bcf28bd4c2a1d4295f8d1f1c4177c1aa3be0ffadd41b84b8b387ac57d8d2950a0bb62d688b11df27607b682d5f25730ce442

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9db916ac80d140ab2fbcf4794ecffef3

    SHA1

    19d627025166fa02822be2419b653657e00223fb

    SHA256

    b8acc1140c1540447ab8338e29f160fe9d9d1a81c00ac08a5325928717a3eeff

    SHA512

    159ce65342f73187b06faa4de1c46d7447db2cb9c0c99cb659ec5bd83b413661ba41603b960be05c2c2277768c0b7554b57eade6b79cbbe5659b0beadbbb866f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7eef956a680ca20664f245ddd28a38c

    SHA1

    29bbd3716ddbd0bcc549617e72f4f12cb266bdee

    SHA256

    9be0d60d47bc8b9410208103f953a502d383467a41cfc24b8202de9f7a8b7e1e

    SHA512

    a7b5919103617403fe889233d5502b2c146e01f7a8f214e0490528f097de338b765487c44e8b1c50fa352ffd1459f5781462821e371008c367ce5ec675d4dca4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e10f32530c7c296b4292ed394fb7dd1

    SHA1

    5e7f12b76b7e7bdcd0fa5371244ff20d7617f76a

    SHA256

    5ca3e5a49582857f621938d8f46568b36a20486a2f5a3c4373c2dabee12ce33e

    SHA512

    04837818d4b443fbb55f5120eebc4513d0097f209a8e7204f9eab95df9cc6bc9cf1bf3dfe195058a3ffdcdb52ca31a4c020bbdba6a5e28e5a734fe88d1f36cd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    054150eacad4d194fa6c33c386e57e67

    SHA1

    5de92f9b12d29cf0ec313901bbe16b1258751282

    SHA256

    31190e9cbeb3a5ec77fd439753773c1fb63240e7816ecedbe9b2eda386d21942

    SHA512

    1c5c2b53c4adcf24ed463e9c368dfc060f2f7677ae88c6c6047c6148b935d5a4ac1e14ecbb0b1b8e768560997cc8cc9fe480536a7955ab8c63c3c13cff17166b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e913b2f6cd0ab98443fc86ccbcf5b959

    SHA1

    b8c82ee21ed3e0cad4ed255b938a3bca6e0a1f3c

    SHA256

    96270002fdd3bf617dcf27a6ed41317ba44854f47eedff2f0489cc9ba0263d6f

    SHA512

    56d6db0cb2d995c69cf97a5db50cbedfe92a592b05c1c897ae2cf45b53fe6b87cae92cf5d6b1856f20e2bf43952dac4292c80f3a66fc1cb3687edf6eddf4fee5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d34dbd8e2bf25e466d50760d745fe0b3

    SHA1

    4e8a023a1cc6bbd102f75e828f3297eb97cdaf0e

    SHA256

    2043557bf8f2529bddbb9a59a0af45047eac5d03a951b6ca836a736436b31433

    SHA512

    ab72c17102a17b58c58648e751f8865d9736d6605226067dafd79b302343173c4bae21a10306b6ecf2949ee3ec9dcca56f85346e2a9e2e25a62e09b0ccc1b939

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d4bfc9257acc98ee8b4a849fca20598

    SHA1

    b132a5b1fb57e9c818be6e000fe2adb627b0040f

    SHA256

    8f8427b20e520885130a5132b238eb1439f5caf0e183a0dd09a653f2bcb75127

    SHA512

    18c519e509ea1c63c3e505fade0c200e4edaf7f01803b7f802795a8cade7eb14be1260caba2ef891aa829ff13bf204ef9250062f6c6434795960b0318d08c65a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee2f17de8c01946f12f005f4fda6fde8

    SHA1

    b9b756cae66112f0887cb379f3675669a13fa16a

    SHA256

    ba15f1694e0b6bc5a76bd7550808e9dce86809cdf6ce20c6013f105b193f586c

    SHA512

    27237ee24910290b1cda8a9c2c7547b8200a3185cdd36852c2efd9a33893f3a7205aa4eae496b7f57ea08a971249bf473df41bbf71f1e88359eb3cda0c0746ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7b2dc68b2ec741b7c0cff19df822d8e

    SHA1

    0059aad86559f87f9919de381b0e4a765537cbad

    SHA256

    88392e1a1b7bee6a7de614f1bc10a7fec9daf4359a615e247a0160aee5a2f8cf

    SHA512

    5acb24d6b30afec1a99dfdb35dc55e7be02ece1534dbbf4aa7bb088dff4c22fbd4b2b24e5f1fed7191992189b05a633c491897e505e307e59eaf038369739d44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e443ab8b9ce49f1737cd13e40ea8ab6c

    SHA1

    8574604d23d63e480378d1d18b753470e479093c

    SHA256

    091287c786d2b53a3a021db1fb4a91ab772d8a3066f87d6e9df32c7cb6535de2

    SHA512

    bf9419a4f8de7a122abed1cb322b8fad32b53a468f91f87e29551bd1bf071f44ff038fa6f7512b1b68960939cf774125a8deb8a8ff83ab62a542ec1eec3ccd94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b70f4146c431129249aaf7d7d3e0745

    SHA1

    241cbdd89670b0921233df33eab2f33cd5eaaeae

    SHA256

    35ed6de634651737c4c4c99e7682cc6224f5bb72a10f28e47db971bf71fb40a6

    SHA512

    433043543ed91a4113e16a9de93d469f43e7231dac623d418a28403a83e75e322d3076cd9e037ad0c197b248d09ca9f40a29abf70e732b17b5a05f4bb521bde7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90d1296166ce31a54353d8ba74b8665f

    SHA1

    ed75c441f4eea0020b4f59a2d5feec0cfd6e222c

    SHA256

    e8bae06aa1b1cece2469c3cec14df4feaff54b45f6e9bdc196d7c2d88bcfa6d1

    SHA512

    9218ced7ad621c8f12492fae67ff95d3c0d4f37fe8960e304a75d3d212bfc25eaa14134eff0ca5670da2edbe0e02596c618ea1d308b2507fe2fc2e5a1e885f48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8644a15eb6cf8a626131c54fa57f8f6

    SHA1

    669fc4bcee96038f3ca92f45346e0d4017252cd4

    SHA256

    9bc7b480d7192bd31b94b16c871f507e4b607b1ff9202d3eda98610ec0a642fa

    SHA512

    a3a2651a89cf25710398958b2eb03a3f68a4bea7ed5743b967cb906a727ce916a64d815b6ae859af8f9ac720a24da3955f0a65632eb0edc5f9801e2c4631c526

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21306ab152ce69672ec10f0dd977f5cd

    SHA1

    0ff06abbcae2827576d4cc7df33b012879dfcb2a

    SHA256

    4e26deebfd40ad7134112eceb15bcbea0716474b9100c3d9bec9f0e1e3929f56

    SHA512

    e335e37461000d8c475ef3fefc35b68c73b2974e9699aea5597d6748f4ed71b231dd179143d4ad113981ad16e6f0b2e8f12c01e5f6d01f3f01475b623ef0ac2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4147a98f15f6b1c20142a5255abeeda9

    SHA1

    2aa79dcccb92cc034ef5bfbd39dac8394af4a358

    SHA256

    b4beebdecd5071dec66ae40e7226fbc7fd24450031c738b986c2c324eaba3812

    SHA512

    99d85f8b2938c1cde846d6bf26e4e9fee7aa3ecfe283481367365cdaf7aa1c7fff640e1c64ef8d62e1b25fd53e20b375d6ee8611339785d7e5d8c2ca04071262

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af65b540d83ed68960c5cfd5eb8ce0a7

    SHA1

    4dd997a25a2389fe88a8f38a12d8ddcb864269a4

    SHA256

    0c78f5c7c169d41f8032d76ab37efb774a051e0368f30758225a25c1ccfc7181

    SHA512

    57fafc24123f4302952ba32ef57c6a16b08abf162d125110b2bc2761835435a7e6fd060ee98ba8a8e5d3edee3c0cdb6a89eb316e0896f2ac1f5864c3c656f42e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3229b6b1822adee4918bdcebc3faf60

    SHA1

    efa4b5df8dc26544d63ef4f761533d9ceabf9210

    SHA256

    c827e61fcaf6504930701d1dd3c30b474363f84635df152f6a561d636fa144e1

    SHA512

    c7638d0839b3854f55622eb4976ddb6ffe25c86ba89c59e1f46743fadb52b7cf3fe716a5a183491340dc3d29777a812e59556a1ec97ac3f8d92fdd83e9da822a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90953a67a4f5ca7d824d4bd1e0a098fc

    SHA1

    169802450d45dcab95693c9ad8349207d93355f7

    SHA256

    42eca53d1901f21b8b7ce560f981855648ff1c1916e0ba5c07a1ab0c8aea9216

    SHA512

    ba974f6d8226fc9ef77c6f192d50a5dcef04ee608836fb23477aa8934079e8754f044fab6e9c0a1d7ee823a15c51e1c04521701de34cce06f7211e95ea025dee

  • C:\Users\Admin\AppData\Local\Temp\Cab3102.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3153.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a