Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    13-05-2024 23:53

General

  • Target

    3d1903943faaf8eb10941cd632fc76ec_JaffaCakes118.html

  • Size

    23KB

  • MD5

    3d1903943faaf8eb10941cd632fc76ec

  • SHA1

    7ba234ba8f17ec10a1116e92e8534fd929003af3

  • SHA256

    519bb9671339f9339ea4a6f61c3ef06a22354c49c7eb3b57e0a11931fd7de03e

  • SHA512

    17238c3ca72f4322323465547f4ec8e6fe4495fe5629ffa741ddedc99779814344beac476b4c822403890dd8674cfba3711da26cec2b8cec00e937cfc76aa1e6

  • SSDEEP

    192:uw7Db5nBGDMnQjxn5Q/dnQieANnJnQOkEnt3znQTbnRnQ6v06J4RnQNjMBgqnYnn:eQ/Ev06kK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3d1903943faaf8eb10941cd632fc76ec_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1708
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1708 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4520e101f2dd49210b53b5a48817fc6f

    SHA1

    7c1709f88b43820023b61f6adbf17d90772a6d83

    SHA256

    9923ddf1158c706c206e39fd6ba044ba357fbcdd1b59d92f5249d3f24b094b4d

    SHA512

    da08cf8030ad335d6859747d12b0b5cfebcb7e43bc39ee268663de946df74804c39eddfbeeff3bcfe7020eb4602343150fe15f132eff231279d8a7a34d4e6386

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1aeaf632be0aa3e9f85027391633483

    SHA1

    60014cd46c0c9b19ee2ca895d50e99153c25dd1f

    SHA256

    f303c34e971835d88de094f8fb27cc52d543ab446c77b0ff0b343123b8a37f71

    SHA512

    750691ec7f4b7c3ea633830f0a33647e3460a701dddabf9b394693712a2d68a9948030c7bf0e22d9cdff7cfac97a897a2d6bd017c98f1d7db45dac657fb61e4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f84cd235f817e193094a4bfa0156f2c

    SHA1

    6924cb7f3c2854ae4ca511412804c22d01973d41

    SHA256

    75ca1bcd50932883e7a20b3b446df9b3573fd47a839e0017cfadcaaa26970bb8

    SHA512

    a92225f84d96918b3e81c564e8b3e3d3d35e5d645e3f53a2b0116f6d4b909ed19b5d3b8e0dd5137150b1f1fc105b0acc291ecf9351f3491fbf69499a44c71274

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffaefe3db37975c803fc01ab76b607c0

    SHA1

    ea32215e2d614fbf7804ff647e26aac42b2bf6d3

    SHA256

    f35762437c61c5ff77843ecf60a04b2dd2adf763681718cf0fa3f9707d2e159c

    SHA512

    e994bc13059f2dc76d58ffcbc2381f9787be586e9e1c9ca0ee340e8925f92fcfa1ae4add66517c88c86516db7ed08c198ed5a5d9bd04b812459e11e7c57a2207

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c97aa6725d1c45cfc46fa7efc1b45fe0

    SHA1

    82ed743dab6d7c828120e824d23ffa3e91de3d4a

    SHA256

    8293771b58c27708d3c7a33183a83decc9b198c2e76fe18e3ca3d03f11ac9b35

    SHA512

    882f35bcc4bdb0a46984ed3da528e7aae3b8ffce64c8efeb5b561491dc0dc616152e85884c9926b2b60ae82b67ff314357fec0ce48f180bb4c3c32f512151155

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    daf5584a270695e7eb797e8d40dd2784

    SHA1

    2d5e625bad123f8fdb1559400e678c280e189cb8

    SHA256

    01a45b87f2262d14645608df34bcb6cc23ab2ac3f20b9a822f7c7a31763322e7

    SHA512

    9414546326e7d74a5cfd621f9a9361dddc5af6d4d155ff7b0f4f7fd73853556013da7c2d4fbe20c29b88eb3ce473e8cf6b968e7c6375de8b7d4c07fb5ce39341

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0c0e7df448b61c916bd73d6527accb3

    SHA1

    a3d4f76ea7ed075c3c848b9127cddd53c808b462

    SHA256

    b7a0d225832b4666f3a8dafb99814593f348b0e389ec12e1c19d1c9d755bcffb

    SHA512

    283b959b15d7207b186a7121bf7a8a75ce3a093548703691cb58d56f183b028e1c55e5428e44d651c148ca715d22060bf311de6805601d602da71b1efe287c88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5b1c86730d73d4f72751d7206fb8cdf

    SHA1

    8de4f01c830138830fbf11e6b8c9a9d9f1e5346c

    SHA256

    b2044bc9f58ec309e4442345de2ce012ec1925a0775304575203251583bbb0e3

    SHA512

    e36c6b901d2ea856bb47f6da974ecd5dc83db922aa74be08a79fdb204b38c3bd39d0893bd227022abbd6bd636748029ecec1d2df38bfdcb555614647da8b9474

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f6bbf2627b6b5020460009a007ec1d5

    SHA1

    7dab7472dfd5a8afa4a7c44614c88350933b50af

    SHA256

    2ce75d579246e56dd4b2457c74b25d43e6acda4b7061d6c537e5628386a4cec9

    SHA512

    8e4fadadbda9933b64d1f4997435bb134f812a74e4774d235fd5c528adb6ef3ca62952445200a8baa7b0a983f6d5a99037d66e6d1331538668083bf7abfc7eab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d441a051d0cb7d98f2634d5ed89b1971

    SHA1

    b7e074bace419afb7174b7fc542c064a359d5b73

    SHA256

    d8bb47054962e1c8cd708bbfd503122e79d65eb89afce2f6d69d3ba014cdc24e

    SHA512

    f0a5b3b364f81dc73d9212be2f0349299fa4783c4c979bf02fab8be36b30695cb3b612080a18d9d6453777fe67e723c28403ec0ad50ef214a85ebb66cf3d6511

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49dd29721ce9870e943f0712f4cdb335

    SHA1

    cfae417dbf4822f35582b03ca3ea140cc4e2b4eb

    SHA256

    dbbb6d63010f4c087abe5abde8e44b91086796d8aef4694167ac9979ae9382ee

    SHA512

    51ef78f16040a37faae352665b0a071d4795ae2e1f708f3a9ba1f56b4c36a34338c7962a0722166c002d61e316ba559aad2d5e59226b74245c51b19ed68f2469

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df506b027d75547d88bbf9b032a3ab49

    SHA1

    9ce9a19dfe44da6fd87716a5a199e408a871bc04

    SHA256

    2705a8682112958e7144a40205d1e1d2efc5b95bb7c1a4136c17fbd9033558f0

    SHA512

    c0d0fa63b8d86d7378ad411b30febb91f117e2d39194502a6e476f8b8ceb01aac9b6d1325af1710438c7ccf2618ab12fca50efa83ba5fed3e1bf9f7484c246ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c61c958045cf3bc893b5b9ced62c002

    SHA1

    7f151e4c1b9d3892173de5c3cf21a78989884895

    SHA256

    72e62236d46c00f40f57717cdfb6569be70fd9633ff8a1dbb79c959879abbee5

    SHA512

    1b226b4826a101b3660b9d6170777a3975d14f2d8161aaa2c94aaf9b92eeee0cb63ab3ca0329a04803f2702607ea858a327a13588ad417976bd8fd96291ddf3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3729e2920f2f993d35ca635f853099ec

    SHA1

    ce5d216febcf87d3c696118cb670c77d737e89f4

    SHA256

    b49377edf193b5eca3b7801b3d58c399fa8da84bcfe567f8c7dc1f6e1ae29cd6

    SHA512

    b64e60747244523d254d481f949a5350ae305746486cdaf86d26b049a8ce64295ca52fcb22bad8eb26628e5fe94f2962bf3ec0b4ef360724a64ab64af8768f01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    958d0aaed2310ee4e3ae02b9df743d2a

    SHA1

    cc12ab585a2ca778029d6616198d4a08cd978c2a

    SHA256

    9fd703105898e0789e1dee31c4c6a33db6cc0c374da3c0733b2a34d4f3b5ba95

    SHA512

    dd2a36bead6ebc0c494064d7b3bc0de5bc026ce3ce3bd221b9b197f75d26b66c84e3838becfe00e0ed8fe6a5d635d265d3a4616d055dac178e8cbfc013be3fae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1f04e24b987a0c6ec1dcf54fbe9f27a

    SHA1

    c0a34da0e07f53fabcdadc5e9c192d903aae84e7

    SHA256

    5a6dd44f6970b5c6f2afdfb3b808806567d89f16297da878730446ff737def2a

    SHA512

    2d18f7bc608454bbf9c3b50213290f6d50fa1077d579d0274a4114f558e9f3fc7dfe2c47356f26de8ff3be87652a34cb779a0d5d6af4037a3ea71e56cf88dc0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0834e53e81bd695ae7ad8940626deba

    SHA1

    8425ebcdd4f9df59aaedb379b11953fd3212d230

    SHA256

    1e80baacd15aeefa583d5d804fe95285824d41e00adf5c197abda8b796f5407a

    SHA512

    2233c51f4f525c3f8082c92e33cdedd17621d65b3ddbd5c48934a6e32cfad03cc7dd0e57e4acbc42774916d859da5539f1e0060786609140bd029c76d7c9b222

  • C:\Users\Admin\AppData\Local\Temp\Cab2232.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2315.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a