Analysis

  • max time kernel
    136s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 10:09

General

  • Target

    3990b919fb0de2a28fefbaf0cea02110_JaffaCakes118.html

  • Size

    66KB

  • MD5

    3990b919fb0de2a28fefbaf0cea02110

  • SHA1

    64b68478d7407fe733eefe7dda85f37422815dcd

  • SHA256

    7118fe3c21309e5a1995110e2152523435f2fbb5699000c59a979c78ea707b38

  • SHA512

    1abcbb5ce72a653c587979f61dd0cfd06769008e550f7e16a3a4faab571d9abb8e3415cb0953b62fad4d5e62f8c731bf54cf4ce6b23a030ac27ce18938473d32

  • SSDEEP

    768:JiGUgcM0St8tN99OIskXc3nsJqaoTyOqhCZkoTnMdtbBnfBgN8/oycc8QFVG8sPq:JVP+lgnoqDTIgec0tbrgaCcFNnzAC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3990b919fb0de2a28fefbaf0cea02110_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2472

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fb81e2a59c239343229ac28baa075364

          SHA1

          3cbe2142565fd76c6e3d52e5ca8876be6a0d56cb

          SHA256

          0bc94fe24499d4b32f28aa194cf8da32d5734b784a54bfbfe47b19b2d70cd54c

          SHA512

          fbbb249ac347627286f924bc5de60222b01ab0fff7d877c1beb5df817ae7febd8dce669d06035466e12116c60656f3b8803b94d9a3bdf0c68c4431f3119e0e9f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a328253640d4be4676b8b19bf6e86da1

          SHA1

          8fad08f23d50cdc670a6d97fcab19abae0d6df98

          SHA256

          d03a3f7b9c95b0ee916e92ad271dee000e365f4f60936730c828228f878b152c

          SHA512

          b22840fb6f964ccaa9a3b27c22221472ce4381bfcc72c537154e4bdbded5635d011dc3c13aa97fd08e2468191b8b4d4b3647c554008e96abfdb3fa7bde4654b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e1e265daf8a817f2a0b9811e4c15f089

          SHA1

          dae2b152d50e71422ebc73b1414beb7e4f51143b

          SHA256

          f1da7475cba14ef4466470bf6bf68bb337f7c576094be07fbfab06c24c8f4eb8

          SHA512

          683efe32c57310fb31ab361d6f01189a43713d39c3a1cb9a5b0e641b68d1bf911b7301b2d71b3cf315900bdff42002d5e014147e86a0314bf82c2fa6c9ce687c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8ae00bae65d32122ed99b4d97196eb15

          SHA1

          6a8dc2007544ac771abef4a849cdebdec128297e

          SHA256

          26b306ded30157ea87489aaa9e7dadb3ca3b75750454f823efa585e36004909c

          SHA512

          5333f23a581f00eb674dbe67c9c4b9d295ae78b5a26eca6bdf343938ec6bc3f6ae6f6d29e3348b49add039fd967cd27ebc92ef738a2e2be44b90a0e5963664e1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a31c9d6e6aec8d983233324802fa34a8

          SHA1

          242731da53dd250397cd897b5de1e174ffb01491

          SHA256

          28360d5624a94ff58df098669dbc4472db7b1fdbe15f8ed024bc815879883b5b

          SHA512

          aa4262a3c44d398ff577af8fe7ee71a9a28128f6e6de9827d5640dfde9d845c646bfd28dc3505c50ec7b39069e255eda6bc0ed9e381809f3154d3b98bf66e446

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9d9d9d487f228e74e6abea4260bd314a

          SHA1

          5682c8ab70c6ee3bed9f2b2afd218c048a76ff56

          SHA256

          5609cdf8df72f710e385a5db247064d7269af68af9301c6a09c7dbb7f97fe579

          SHA512

          ed091689bd6bec1c833444ec15f7dab1d2daede9db150cd5b9bc63cdda3cc7d41a38095c1d4852dc16497fc3fcba47130a4db2536713a381bf5ba882f8022374

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          64f45350cd2596f0226cb4ebf24e2f5f

          SHA1

          0439078dcc69f9ada4578b6fd4c438bc672fe898

          SHA256

          fc9721da8cec4edb06cf4cdd98a668da1f03d263088ece3073f15781978acc80

          SHA512

          dd81b4206fa789a14d4623d1c8412cc639ac56f9dce8712ca65a3122f019785779fc50ac667b34cdff454ecc8affd67a61e8486e32c1dcff1c776769fb9a6f39

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e4fa92e8a698949d084abb5bd16c3468

          SHA1

          15ff4f9697a6fc3f1487600e139259a9e34abc46

          SHA256

          b4b1308002106c3458d14eaa6754dc6506c4e85b272e71eac0efd0ee3b2f8a30

          SHA512

          ba3e9b9ce1ba0d4f695827fcc32f750a00b9ea0b32b15830b8c46188ba64e13de19dea5e3654baa510eb87cfc96a92b8d2681833cb2c355db79afb0adb56e15f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          169b601341aee23174ba5d59159063ff

          SHA1

          b8fd39d157875f2dfd8302a58c9b63766c20fe92

          SHA256

          f806c61b6efcde3d167d130085486101f54551ce2eb747aedb1cfad9857e1ef7

          SHA512

          77a3fb06c92fe100c0a4dbf980d7562d7255c38328d3da1a4f91222d795728e648bc3bbd2dd68a8d9496cb2f4afd180cf62dfbffde32f6a31ed55cff72631cec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9adb7a946fc3d1af76cf1a2293e19186

          SHA1

          099d1953e9bc614c9cd80ad996f27256a6218d31

          SHA256

          274bdffa5f99ebc364b6f0689ae8117d23ecb343b76d5970a759cb767c6858e4

          SHA512

          92540b27377fde91fd910c2e049f8ffd6772c75aad31e850db33e9fc3c050277971d5661d09e05ffdba124d5a281c105dde25b5c0411b5b879a7e2beb6e97916

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e969be509f8648ca973df34cf16761c2

          SHA1

          3ff587cb862fea37c834f3b1a2b2a0465af1ec9c

          SHA256

          133074ed932a7b930e715bf514cccdb396a595e64625c4880a0b4e8e2a825fe7

          SHA512

          63571c17e70cc23bb469ad730368febdd913a4aca830afaa51d836e5171e4d51f6ee5edd355dfc8f2ea12f9882294695ff134a6fd5909f518c94fd8a5dc7b45a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9c45b8bd72b36ce5a9ea2aab83640102

          SHA1

          c1363a33fe848a766a176e97327c388d3e4c96b0

          SHA256

          0c9d5fac06f19b917d5409f3da05cf6996c4373211e557fc0d894d3741b7c17f

          SHA512

          1b532a53b4ddf0e42c6bd65fd2e4c9f6a787ff86149a05bff5e1b663b6193d7209c60ac67b26e7dae488ee1d4140700db1b0cae247b4cd00438ba0500cbc4cf6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0cf8f417ec38f525ae6fc44c175a40e9

          SHA1

          88a65a48e1f356ee423416554801543adc4a398c

          SHA256

          9d9075bc37fe1b94251656aa800e6b1058444767a02063c5347e22adb5414810

          SHA512

          c72c967552bca6b9095528a4786399ae48d4d96826044280c3c596668027f7261da69b94a954a321221332df1bdd31b3afe11c1a2cde7259c1fd4334cfef7b25

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          57f99397e7b7206cf6c739edcd15ce23

          SHA1

          f7508838c54299110e2602b80c018d64845fc81a

          SHA256

          a696d27ccd5a8ff1c9ddb743ca0a5057fb70110d574a6e8f7987993b2216589f

          SHA512

          20ac44be7d2b439b7444e7fba0f0498336cc9d09c81ea76e18262fc850c852dc03f181dc74abf4f0ff25c8032dacbf714712344fa6a6b688b846d56556342f1a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          20bd8840c5c932cf9b23ed6dd704a9e4

          SHA1

          634331a55e211a0a02aeee9c391ab000cec73e5d

          SHA256

          3eea5d712710513b9ff91ab2ac44686eecf516a3781aad6a7bde5d1493b06831

          SHA512

          f66168166f808308ee01be16c9ded2e3016be3ad6d371139a2f656265ec752636f8a6db885c75241c995deb7fded10ce19ac04b29e1b3d98ae54f376ce2d2583

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d466904005394f837f37a5e40fd486b0

          SHA1

          0a50d9931f36f966e240f711b04583d9f6f29bd9

          SHA256

          21f2a43ac20d56118549abe8a878640a3ce34d5df4ee8ecbfdbe6a699a88dee4

          SHA512

          60f9f351f54e4eaaf1a0619efc9943234ce981cc794cb0d1b9f2fa374ef497aa2a67c23d95efb118f0cd1efe4ebe550e7e2db5e08804b5d224997eb97ea34add

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4b2eae8d37387ecd3f6ab4f925fc509e

          SHA1

          b51f2764ba3867791a330f24547d06454268b671

          SHA256

          cf59c9f1ea2ed9eda6111a62e58b153d226b916454b591d6b75bd7fafd01f089

          SHA512

          a1756f63b7ad724ada0fa06ed4f7b1e30543f128f3cb9b2c2b15bc25a67da0f04fb1f42bfcb8bb222c41bd6d62b750efc226f3dda8871f5496d3bc7b14c4098e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e056e531a4826f7a6edd4b30af297c91

          SHA1

          fc1096fad1eb08c0dc0193eb62748647ed56db46

          SHA256

          fb10a2dec33ce867f274ad50fee40cbcb78d5d3e5efe6ab0e808dbe9b1111c66

          SHA512

          6845f41118a68ffcb636d05ceff740b052b3d04b1d9ac8e6f9ef2cef5e35015ca60fc8aea2cd825a9e979b192609211ef105ffd6ecb52c7de332412f90fc5ec1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6821afe308c98218022edfcbc1582d33

          SHA1

          be0e52cc5dbecf799408378efc18185f210f66fe

          SHA256

          f062501acbda1bf04404a16157fbf33c1eab8d97e23149c0b8a144b360a5dc48

          SHA512

          4f7bd55919fcbd6b1791a212b56cf150dbd8f6774397143bc24e47bbcea3b54f33b2559f1c1bdf4c0d42129e807ecb1443b3409d1173aefbc4f0a58124e3d33a

        • C:\Users\Admin\AppData\Local\Temp\Cab9C70.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar9DA1.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a