Analysis

  • max time kernel
    120s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 16:48

General

  • Target

    42388df25aee80d366e723f0b5c6249b_JaffaCakes118.html

  • Size

    251KB

  • MD5

    42388df25aee80d366e723f0b5c6249b

  • SHA1

    c45e467dd60c9ada918b5b257bded760602e72ce

  • SHA256

    92842068c772dbeaab90564ef0c7ae2852940271ea9b7517b41ee49a69c2e59a

  • SHA512

    ad4d87f5d2382bdecbb99c453c1d9a31936ea9a173f96d629cd8214bd018ee01aa0a7911bada4454cb3053da1418125f2469d39efc9f9e8d7b25cfe347871657

  • SSDEEP

    6144:JZtiu69pxkZJwO1CA5kiDb3CyQ5xrQe/0STMb8f32Ct:JZtiu6eZJwO1CA5kiDb3CyQ5xrQe/0Sz

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\42388df25aee80d366e723f0b5c6249b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2108
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2108 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2140

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ec63ae7946712c8d5b5c29b957b92adf

          SHA1

          2b9a73abc16f947cf4a713e460f2f550abf7fde9

          SHA256

          74df826ecb5ff233ce98aa6cb307b6307ef63114e9be5ceae8aceca17be2753b

          SHA512

          5f3fe2e05a44937b697218c5e50023be6662e00b464a212d3194f4a2e2d8b08a7bdd65277044651da2c32371537a1cdc6c77cfeeb54d0bb268dc8e1ca89bca59

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cbdfd02d70587d2b203fd61b184734f5

          SHA1

          7e2d7578a533de3e51df5c19949ed6975b8e60b7

          SHA256

          d84b287054fe6ed0bb0e58a9a147f4fdf737b22c86e0acb52c4ae547f832b2c4

          SHA512

          d3b1baa722f6681a0dde2e991c491fcdaecbf7ba8374e2d4776328b38ef41c5c4968838c39b321be6ab86e871481f288195812cc4e68478280f8c1fdd294d1fa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9c971a3ba9e90e0f5ab18cab7936638d

          SHA1

          ea84794d10ec925c8fed4003fb0de1ef2442d2e3

          SHA256

          b0634e25feb101c88aae476a8d0508863a14b879667d63224071e5256a7e5b7a

          SHA512

          14c131f16cc185cdc787c57266abcda93884bab2bd93e52cc0e8512d10b8cfb5c2bdd85f56cd0784b6fe9d6b1f8fc7e742df62218c465671692da51dcec84104

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b8b8e2ca2f30951a40943b1344fe61aa

          SHA1

          cdc315c465e21a1e001a7414affa39f9465ffc66

          SHA256

          ecc4e64a25bb641c0a5d242338153e25bc9a5ce788d9ad23f2f2bd6f3f12c8f5

          SHA512

          9ff4864078e94056c03fce6a40075c472aeb30ec970c1c8fa7e18d968631fe044cd6305675236cf8485233f092db6d602eb9fafb8de3b5f8df0eef9931aef5e8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e2845829a9104de8e8c5fc6a362ce96f

          SHA1

          750576415e0dc72c5f450036040fa94fc1146cf1

          SHA256

          575119418631583a2a9ec34a0cf350cc805781a542434396d61814d1e6e17ed3

          SHA512

          1e790f79d5e642e445ef21dc7ab01aaeab6e06083d67bef44f9495ae14c84d92818b65288775c9acceee51685ffe7b2368e22c79faec0b245ccbdfccf7088c7f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d9ada75480d0ac8c448de4c58f973718

          SHA1

          a3752a3908226ffe9cd4182014c368d556457c8b

          SHA256

          4180e15746fbdf3d948edec94e0a8909accefaeb1090747570bd67e8aef89235

          SHA512

          30b9c3641c3269954e25e8ec2faf576fc18c5643fe9fa70a48ce44661bc770857f603545b990d04ef648cb96ccde015c0d81407272e377a9de6e42fb4521aa8e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          53d8af7f13e5d81e1cd99ba1424f060f

          SHA1

          965ad7e92d57968757a925a7566c531291abde8c

          SHA256

          7b32ea4532435889a2f1ea0af549d81056170ae4823d415f6b6056469d4e3cf4

          SHA512

          314bb4c60248796265d4aabad73cb47508604a275d7ac3f16168930489ce2ed5f0c6bdecb792422eaf94b67c9d7def7e6be75704fbdd3d5e3b4c1ab8f15a0c00

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          74196db25dcc8fd4cb6d79d942e13f7a

          SHA1

          78c097ed44580182d6b4c8cd6e2adc72e134e0d0

          SHA256

          454a71d6218bd9f4ee20763dd02f17c8c49ccb963ccc4935a7798a9dcdb92795

          SHA512

          a1d3f12f2b449f2604cecfd4e26588d3db16cb9a8c7c157ca0acfc5904b5bea00d5276042a45633d5aff64be7038cc6504de4383967f914a4abd7a838a4194c3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ee8c2973df59eb3ec52f7ae371792f8d

          SHA1

          30840d04d3f0634cc0cc474fafe8d531eebe5430

          SHA256

          7c2c0304f0d9a053a203598118fa332adcea1c8653b4b533adaffb5b637f50bb

          SHA512

          b62fa8ced495bb83635eb375e36d7281cf15da2858b3a06100939d3a17cc59ad620b215e405616d9ac2e9874385d5b94e8a4bd9e3c8f00731086097334667159

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          82e602f46f3fe07ca306e03b08d87158

          SHA1

          8b97a031c7af9e89029865807ead18f14f7bc8a2

          SHA256

          165e4a8ad1957e77f11dd1c9a4342eef5a3c8879030b12d57292087753487388

          SHA512

          7f5c03447145ea3e34ae81aa2e2ae039823ddbea42c32d48e050d341ed9fe126fcb91aeb90fbae340c03dcea7bf968b90ae2be990d2de6cd23cf85cd72c65aba

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e343c523cb27b57370e3e6a260b8f6af

          SHA1

          e9b750532744358cf7924379f0beb8eb56750639

          SHA256

          8def1a8766476bfcb192feea059ccff8cc02c2df798adc8881c26a2c3ce1c02b

          SHA512

          679d029f966d4aeb888cb886d4798a1bda74ac99cd87f3504e5c35bfd3255fc5f35d8d6dd12bff800794a80f222ae8c46c5551820e16abf544d16d96756fe533

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          daea87306d589408ecd8544c4216cb50

          SHA1

          92db12bda767fa6cc0feef6bbc067f394ce68971

          SHA256

          7307ce2b312fbecce1289aef4f91ebb74d4084d3942e6893272aa55362090f96

          SHA512

          78fa35051ab666876bd2e2b62ff5b5d5e530bfb424aa8d41ba33ae37dd50fae3b1fce27ee7c4bc27998b7a83fddf71d06aeb886fdbabf83630e3cf7cfd19a4da

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a887f963fc53ef464283571db2be553a

          SHA1

          bde910f01f2a461b09d7ee61b18c2c0ba33592bc

          SHA256

          f8baeb69e1adeac7ccd22a88887617f6b4b232df1ec4fe1e6ba3fd40b68a07ed

          SHA512

          89626803afac5feca881667e34853b2356bd756c41c0e568cde834cd8d250692589f630c22d9282fd44a6021b1c65d8b26ad3fab6c47e1e8e7da36e087d4be39

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          feb03f995335bc09568bd56dc0eb71c1

          SHA1

          05b388c0a327cb189328ec3b56aa56b9920e4436

          SHA256

          c116c3e60d7b9d1758edcf99dbec531c452a50024c760c2fabed964f5b12300e

          SHA512

          5166adcf85daccf428cc1e60660c4de802ac9294fc2cf81fac805f4a2aba25d8f77f879f32224b36e28758271ee3e337166244610e571e8a33822acf3fd65aa6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          72d6bb2bba1f22cc54117d5870f3c198

          SHA1

          ce9160dc65643613343d56e1adabd3dbd1b82197

          SHA256

          f86f12683d4d795877c15114e34655040c3b5c48e5ee9b2668b8aa97c0132b17

          SHA512

          ebaab2d738b4001d1b04918fe0b7fa1199c74c7d7a1244bb0664ac98ab4865950c71f96c4b97c6c7ce97cff2063ced29e2ed388051c072613edc733c1f81d3c3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          caa715f7d23615c3c5e8e35858fa3b88

          SHA1

          9579a85892c169f03ee516bb5cd8088343fdb509

          SHA256

          e1fbb763f29306408b6c55de093b7611b554545b4f24212f122091266011b877

          SHA512

          f19b54b2fb70096b6cc89254511eca2919d198b6d54510912347a812c315921158ebc5bfeebcd7838f489e4081f4438b38189bc2ed2c9efd0eda7fe61735e92d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          749ebd9c2a35f099f345c0aa672a8a01

          SHA1

          e294bcc7cc4f4ff9c1162ec18fb50274050e2fc9

          SHA256

          5c3c93a2805e191273c37d0fabb33af4bc2652453db33977eebf67da5245fab4

          SHA512

          e0a965f323b6331b2d230b3eae0d3517b0e07d5d7b5e3ce7efc8b655c8f94ea5f789f21540da17c18296a5d320b4f21598bcea45e9415be197a082d6d1e9d141

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7353f8065ec3ad3a5db5c030881a4592

          SHA1

          6dce748770584ed29ee65c5fe336ef595417cda4

          SHA256

          73c1fbf33b408fbb316c8e7c32439aa8bea433e55733122027e31746cf3c88c1

          SHA512

          87b451a07cceea14fb61c71df3abe5d830777b78a2ba34de6b6364653c58c007a3aee01bd91d5b7b333325623420dc1e41c06ff9396af6bd1d2133853f245d12

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ca95d444dab19605dae16ea79eefb115

          SHA1

          3f4db5a5780bfeebffa3b10aeaf158d6b1a6547e

          SHA256

          ce0e2f88fadc9bf55efda8a282993e22fc23e51a469e504378e7082f5158fcf8

          SHA512

          51b6e616a4f42c73a7ea9eb7582ef82e0e766dfc2da03cc77c99a257a396e0f3bae944fb8d1aefe8ac8672ba3dc4f6f43592c04fdd3d17b32bb45208378bcd66

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0ad2fdb182e507307bf4627f3b14dd65

          SHA1

          5cac76de39d726a3d05275b469a925edee80b505

          SHA256

          73bc649c9dc50a1238b44afa06cec16154e2b690c65f4417a49ebda1cee20932

          SHA512

          e2935c3b055887a8bcb7e5b5610c30e556da6144abacaa5d11842812b39d37c6fa38b4638cbf1bd89426a5bb545a668c7c0faf44a6c8689dbee2c3692a418b13

        • C:\Users\Admin\AppData\Local\Temp\Cab2D3A.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar2D3B.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a