Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 19:05

General

  • Target

    3ba240c0cc9357bde17c591759adf53d_JaffaCakes118.html

  • Size

    34KB

  • MD5

    3ba240c0cc9357bde17c591759adf53d

  • SHA1

    18bb7c85698eb8c89529edd2558bbe005c2bb147

  • SHA256

    63fa593bcb278c13c35ebff6e7d1b96e9599177c1ecfa2342b7f33c4d9fb7eed

  • SHA512

    3e0d4fb05884fc209f24a9b2ee9e2bf19f0292de87aa3c416671ad28b55db3634750df64fa1987854da7843b37472aeffb392c549c49826ee8b9a85cbea27132

  • SSDEEP

    192:uw7Tb5nNinQjxn5Q/knQie3NnTnQOkEntsunQTbnNnQOgecwqYbcwqYHcwqYQ3ZD:rQ/gqfR53ZJA1ngmiXlV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3ba240c0cc9357bde17c591759adf53d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3056
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3056 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef5a1649a53f0a2cf842d7888626654b

    SHA1

    0d1c2f48fc16babf5f15aa9b8d9e26612bc9834d

    SHA256

    d763f99e4db5ee395272e929c550c4c9d9bf59dc8b9d9389b97f8c1c56432bdb

    SHA512

    8a67b3dac7346cf262bfed437fa475a43a8b4054adc9228d5580a7c8bc5528bf863235a907e3bff0bc1c7b5110a61595c4e4824e147a7fbc71cf40e4543aa275

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6701a31a0ea23f540a4d511e1bdb3467

    SHA1

    d9ce9c7afdeba32341e4bfa513fd80839e7523fd

    SHA256

    6727c2b4051f1d6106223f9c7cd983b351d51f0d5287b89ff06110c96a2c5039

    SHA512

    b6fea9b64990a78e07d945650eb8ab694c0f34199f9198b2a8d2bada4a7c37247bf58a0a13158c6857dad1a6994f1b6b87d40063005a19407b5272ae26176ebf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a5f64281d0d7ebbed1e3beb3c8730ff

    SHA1

    0e28c9cce9b23c39eab0ac4446f51b759cdd3bae

    SHA256

    1447741ddc7b4f3d3215c4644404fb5a5a2435798fd3c321493a8b3d1d985c3f

    SHA512

    47205fd7f47fcd179e9fe8cc4094f361922304db9701b538b9eefd0e8168f92b8acafeb69812c01b94afd1576ea736f8b511b81138fcbe2b03ce6ab0670e2f95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00aa95406ca7e818a1f42488e5168e87

    SHA1

    54524a611dcfd7514c08e6e2797699f435026ae5

    SHA256

    59a77be70face3a02d523a776bf94f6c840b597ce57f5b6b73d78157ec3e5f36

    SHA512

    a23369ac240b83501af5a6ded95d341b41686222ae2cae874b93fee22a320ba561ddc8fea801b35d8e46f724148875d7063e6629082eabce7e7fdd06586b05d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d009f4c2bbc15c77ad65b22bf8aa3c0b

    SHA1

    e5ac5799d62712bd863ebf879036789c39464254

    SHA256

    40f465c493975b3b26e76844a37188e1c5e6bbe0edcd61415365703a8f2411b4

    SHA512

    9c82b6a30aebc33bde6f597d858cc4840b1f4d3cd9f9c53d0bec533fdc417511d7bf425a469e4540454bd8b4982e1a8a86ba61d0076dee57325ef4d01ad91a28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1025fb5fcf52fe0ca14f5f88835eca12

    SHA1

    cf2d15ce4c8e0d193d23dcbc02a8395ea265c38a

    SHA256

    f2a7993e7af1391b7191ef1b6909dfac95aa3b3ba25b27c10ee48efc97252907

    SHA512

    da843502694c18ef207590a2702799a5823fa45dfeb1e6fecd7f199b7aa182d67c7aa4fd62832d88651f12e315169b8d0ab580be208c9e8327539d948387f073

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    19f839a58129a20eec528258d3c3a1fd

    SHA1

    59de88a4771a57df91bcdfcd6a82e741588c5e89

    SHA256

    dba2d37f615dddbc81ca6c83104613972640cfcb2e3c9eb62c66da766b21e12c

    SHA512

    fd8c0b7c2e671fb6669a9baccbe41daf6399032ce9403aac8b5846b5eb144047f77b2dd618d9f015b67f28abb838198d2f1236572f84b33d81b08d455aae4d60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9adc7b83a205a64fda229fd7a8b37ce2

    SHA1

    a50d45507d9c4ac8f4b7b6de0c676280baca8846

    SHA256

    24c683a1fe6625ed2900798a1c7a006880034b125f5413286f31159cea15eb5b

    SHA512

    71f786a9a4fb0dacbe01605289e03178ea8ccb86c30a9d0616db6f1bac7cbd29beb1b85f8aa30dfccf7ecc07e2878065fe0d09c741b646b96d5ca36f7b853c9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    673ab433c001b1bf53cc010f4eb4eb5c

    SHA1

    ccebe6929b191bf9159dbb94005dd15cc39a3f75

    SHA256

    5ca77a80683e483fad8f9156f31a4a68a8e06547a3a5561d2c9833858eaa83b4

    SHA512

    731431bd02271d5d3e06f10eb5d5db56b1d92530adbd49cef2cab558a720dd861fbc2abb7d818b3b2463058113eed312b1d3e9de2a205b4354f7eed33c1e1091

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    747daf50a127de797d681faac8879a7b

    SHA1

    0e4eb4533530416c6c4c475a59164cd316695889

    SHA256

    2c51ad0f942648845218acb5d74074a848b66607899a440e3948a39b9a04ba53

    SHA512

    f20bedcc7d7e2c14e0381b2ef76de74422bad4b7cfb6f830d384590d354dfc84c5cc47849396dabea87f195539f728274348536ddaaf6a39128ebed4f1a45581

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d497b182b599aff13d296edaa3c45d83

    SHA1

    144dc80921257316a0c8ebf2b5586f53505c858f

    SHA256

    6157427954bd90ca11b1c708593c6548fc9cc4ce1e8939afca6ed329a3ed9614

    SHA512

    2232a9da99d5b7339be05a60d4c1adc8cca66a94e08a1e2a4ff1fa667c6238b6c651ee271077ce6d395da6bcf74f49c5d50e19f3303d2d80bd980dabb1cb258f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b14eb21bd4118d94e69cc1ad1190456

    SHA1

    bf7ae4e71d21466a725b696f19b86f0c39e4f7cb

    SHA256

    9e1ab83d973b277267552a0a9a9886c28db0bffb98d14c252bdf6b4f5c593702

    SHA512

    4865f4a8781139bc5dd5d7474e74166ab0c39f7da40beac36707ed577a3fa796369fb7fc5f9c5eace7a0706df89cdc9f91754c40fe5f95db913988157524d73e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed37df6133183e3dac1a58bcec8cccfe

    SHA1

    5ace358d543efa226207217247949e47cbef0e81

    SHA256

    b8d65cb2b3ba98b387ba0334d18134052f58f49d611cede0d1edb01d9985158f

    SHA512

    2d18988642284d8534f7e025e9d521d4bf1c384e30e3969efff4df40a8a28871b74d03032767e0b1c4728b209feeefaac100c06854e6e539e21151b87582e1c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcf3e264ba3fb86f10b91580642d7a80

    SHA1

    e1610e5da344c0a6ac41b7386c1b8c4491c92c43

    SHA256

    6f686ae5bb584a6502a33ac91d0b0af2db4fd1976ca93eea2be8ca2110a9ab00

    SHA512

    46624914bdc28fc7bae4a17c34c69953c98ffe8b91292479468a5a550e997e257ae5c8c4dd5f4ad51af6a11af79bb54b39086d5123c86fa81520dfd6f220ee8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0fd2830aa0ae4bda237434387631a7d8

    SHA1

    a260e0807a5ee1c2c302fe0be27d48ef66d9f72a

    SHA256

    8a39399edc3d45e5bfd1f0b40f11af687a2a14af6bf2e7ece75026efc803e04a

    SHA512

    5547307c8eb600c582eafc7abe2c2b033b1d7d0f7b5e00151161e25e5dd470607cdd25bd5443027d8c258b648109eb3e676466707195ec194fbc9f97d882db32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8eff463b272bf9ef24247c5d818b7d6

    SHA1

    2b554b638e2892978009276c8772c9bb884bd26f

    SHA256

    6fe6d9e94e83a495eec0cc661b91b42c829e61b2bf19ec35732ca5d0f6991519

    SHA512

    29d0a9c79629194ad4cc72e570cf002bb8199e1e3323d43886ac61cc1de3ad587b598086ca5704f5018bd1aebf36be460e01cea9ef1fb7428b2bce2e98d59c3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b3edeca9de81cb4395a331de381e787

    SHA1

    0dbfc9b2cc8c6a79e0566a5aa433d9598238b7c7

    SHA256

    af69583595918c52ac9ca69cfc75136f9936d65604262156ce8195834c55a57b

    SHA512

    cd6bd3c2cd3514011b393f6aa365937dcb7a898c2fcae208192c6478f5aabf64f4c3b191e11848ce741e3c850a0d22f8f7e39e4f861a97363cc391e75aa49643

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b87863f3d2e6622e68ebe6b57be25e2

    SHA1

    ac5f7409f485ab6f1d97571062d21018a2a45864

    SHA256

    5f0f7c2cc3e5220e257f729f737f936d503c918b8483c18e228707fce94ae4e1

    SHA512

    e8da46e801fcba88c25f9e62244e701bec5a06c6ed086a4391cd9a9acbeef5cbd25e72d64041457dd3017991d01b4b74e5a85e7b2f469ea05fba7e88d87b16b2

  • C:\Users\Admin\AppData\Local\Temp\Cab21D6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar22B7.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a