Analysis

  • max time kernel
    139s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15-05-2024 23:31

General

  • Target

    488f7975b40773b22bb3c09598cbfa06_JaffaCakes118.html

  • Size

    26KB

  • MD5

    488f7975b40773b22bb3c09598cbfa06

  • SHA1

    d169982b98a77ca562a59aafc3e12b5418fa76ae

  • SHA256

    c3d62983f130760d25f3b74a18443633b1ff7ddf49e68c8c558dbf01cc1fb251

  • SHA512

    28d23ae3376b05593244447cc1a21ced879fd8de2be8c4dd22c2373615c16c04c5c5e23c95eedaf964bb3444723a398ac5b3f2995d8bfd1dfd3766dc3f621146

  • SSDEEP

    384:BOydfwICUKoo+FNjWOqtmHePDQ+tT85DVAyOexiwGyRh6+pOYOXiYiOKM:AydfwICU5vhxx9rZOD

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\488f7975b40773b22bb3c09598cbfa06_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1728
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1728 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2284

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fc00993f82d07ab7779da9c8342da36

    SHA1

    155fa923fdd9648a28ee97448c6615f4f0a4415b

    SHA256

    914f64e29c7165261cd0509bb20575637410404cbdd11744ddfb7d9ff710d7a0

    SHA512

    2b6c31d3a09ffb722c6c3c8985ec151396996453b30a8060d5da89dffdeeb377899a6577f8a9dfabffe93089d5518924d695bd918552d3b3032dfc41f20bcdd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31279f75190bdd439312d4b678e8e893

    SHA1

    e7855ffd0079b0a6d2f8318eba44449b3ee59c6b

    SHA256

    63778d5bfdff48c298c60c8c768925d1786ea9d95dbcab79daa9e92f2664b0e6

    SHA512

    e914631d2514dfccd2ad1f05a254013a8555e25a0dfd5e930aeb3902d18f14f0fdd3b7a61ec21d40c1dc715e1dc425b0f815c990d2ae473b19893c5897d01726

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3469439a113237c9f82c8b93c376046c

    SHA1

    927488ad36cc2f0514fd619d5287870bb086bc12

    SHA256

    1c07e3bcffd2cfa2aef81f3cd30201287fe1ce4be8fa4a400f8573fc268e1a6c

    SHA512

    2fc7447502ef29d6713ddbf670c9ee560f9611b53b20a013f47a3ad2502b6fe6a7f6c6fe1d5de145119b1c2edafa6dddb74e17219312c7e698f1022d483fc1e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1aa37e554a27947691d54c008c4b10e

    SHA1

    ac01f8dfced07282a78443465928fa5c940e9456

    SHA256

    2cce347b39b047e9bd2223ceccf9fc013f982b9f19064a4e25c783ed85300609

    SHA512

    4efe50b08411217c049faef588972c3d35d258dc819d35692596217db9d9c1fd8f0f1fca48b0b6aa39a71eb73f376c08519ae2d31148472312b1c5ad6ccc1e33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7312261488b3223bfaf2a8041c88a57b

    SHA1

    1e347f4bb1441142a9cc6bed1e1a6863a4eb04d2

    SHA256

    08361f3eaace38810fa94208807dfe0627da7751a33644d3bda12ea00bc48c70

    SHA512

    8e95ebc7de84fc49bfd87965f9d4a5960ef7196424d316ba55a552292939aa30cf7e462391bfe0805d8a1234d4446d9464a2a79524377442c047231627e89780

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a005037b0ded8c94316aab8665fd6eb0

    SHA1

    7d62f2f30ff2599beacb45d5d1f75d5f5cd8bb19

    SHA256

    4787db3dcc8382848798ff425b73d89c5709dca0127ddab0336c207520609a51

    SHA512

    c065383d7ba73340e4851a5e34d842cd2e56bd2af52981dc7b726e4febe7712e080e9192289aef4f45197fdc896a415698104ea3f274d2b19334b6e287a0e9d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b6160199299cf8b41e88ed60a5bbe08

    SHA1

    8aff04be36f4ba4043c9caa15931cdd09dc2c5fd

    SHA256

    ca2918f0a8e8b6bb0e75be13fa987810a29f2171e09bb3fedeab1b1ec378cc9f

    SHA512

    b656c6f9c98a5b37e074b436e021f878441a71eba6abf6f9a3a7c299933db90aa42bb562ef275bda7f305091e80dff7e1eb277bcb5d82e11dc8a89116af237ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36edbae884a4d0a4f83fcd4d900b841f

    SHA1

    b1a270c4bf68251c1e044da23b563d86de41589e

    SHA256

    553c13c5e57c60105d1c5569ff42e414c649e9b07a8e9838f5d41e2752e71d06

    SHA512

    3f9ab544aee050a7794be1ed16db6cbd91ad971ed2990d8ce491606012f356c2643f6e57ac4a5e1e4244ed69e41b33872b3ff2069b41a3ee0d03c11dce552291

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a81450b6d299fb294868e6b452c32a7e

    SHA1

    2ba5065c3ed744bbbd829d2dffb735c81d41534c

    SHA256

    3e071266ea9c27601ab16d1a51d8b959f8ec74da8f478e742f75ffb086f86350

    SHA512

    c2ad41c4d5f3c752b1eec2c97eb4bc6c44db7bd1024b528f62b5d78f0246881174175be3612c0dd54d970586506069d20085c1d486077df3796fdc85f622d987

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ae9b6c0eed3eac7afaca351d005c97d

    SHA1

    0d2afd523be815e3dca9db0207b81a5e9cea9fd0

    SHA256

    0437c2db657331477c8a8430e05e2cf413ab8fd28c4e08b0cc6eb45aa6d2dfb7

    SHA512

    536233108d54d97a62b83b6c926593246387d9c6e21f25e5afa4c2c5deb4b091ff6dda5aaddbdeb03fbd194b3b8c690993991982de3995cb73d22d6b84baa0e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd1b39027a663c293ae70c83f10e2a2c

    SHA1

    38a6c00ca861c388a261a75bab7f498699983f84

    SHA256

    5a20800c917af814f250e76b094b3be1db5af97e7c797c6282ac2ae9d09db468

    SHA512

    93906203e82057fb6ffd9fa9fa5c832bf17f640bcd834f22a89a3866c3ed60536bea17988c2b45b35bcc7bdb3ce865b88f898322fa1cb8428e413bfe76aba784

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b657cd4a13052d263b8c850802244ea

    SHA1

    4cd757ab5734a720f171b02135d921964a39d242

    SHA256

    a7ddfe833f0e87d355bfd04ca502052fcf8a7535f375ce75161174eb770dcb6d

    SHA512

    33caf7f329720d2bea631cae94a442096836bbbeca70a96c74591e8019fcfd36f11a537e7ddd650054db4dc9f0afc93bac5700b600d16cffadba718aeb61c481

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec542b519beb61c06a346527cea65128

    SHA1

    c1ca5babf57d0a479d7be857c5bdf5860b049cda

    SHA256

    74a6f73839d4734a547d5e8c873dd5e9bc165c54b5ec079ee76758624bb15bb5

    SHA512

    08e07d46d9053be6747ebfb64d30af91c2fa33f16176051e056456584e8d08674c7f59e073764a9c13f7142a4e429dd27ef0c73c195473f1ba6d079f0e8ab37a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d81ea18c494af73aa368ba4942f7215

    SHA1

    f8e55c2c337184bd9c70aa160cf3635c63dbe2e1

    SHA256

    39e7c959327d211bff513db08fef1dc58ff0b2e12a3410e9996cda8007461461

    SHA512

    18808e13a7cec709321381b7a67ede06258c7552b087dc8c04181408c4294a28d85cf7c1136706765d2f41e82baafd122763d90dfab94390c587c41da5c89cf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff2a01898bb7b7d31d298a990b596469

    SHA1

    630428066842194736af91f423dec277f87c78ec

    SHA256

    b307a9aeb14eedd1f9b01c084632dba213c0c74b937d1173af3decb0104cb580

    SHA512

    123d97166969f32729ea976000aba223011fa88da7804a2015a4697fcaf0a168e43d5be39ad67eeb2ec5999f9fe6b4e6edf09a5cb7e0f2ebc4fdd8338a1d6234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c11ab14c13cc9ea00216d0c64ff3b77

    SHA1

    f57ee344a2b3cebcaf3a27557c8d48d75dfe31a9

    SHA256

    514249d75cbe41e615acb9d65c0c5bde9d5f8bba2e6b3e217f5229f5ade7f5d7

    SHA512

    c986f8f1f8178fc7f3dbe1ee536f4a8d749f5e42f45446ae5346690ae384c814a9a3473399ae8af5c30e83a41ab5ba12e8c7428825c079519856cc5596ce6e6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d0c7db0770a5bb73086c0e0d416999c

    SHA1

    283b902a76aa58a557ce2eb607cc37da9c5e7d30

    SHA256

    7471625f1e87fe5446b6512ade1b1da89f950cf5c1770e9ed1502c4273ffb85d

    SHA512

    d6c1e1c5e57a2f9b919ec64970630c6a6693ded301cfda6b8dc88c0de0bfe0b97e4d133f35250fd31bc17106093b2ee80ce494b53b6ebc69fcaf64c8f1a6c60b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4bd03989cf6ced773fc00fe86e76edd

    SHA1

    cbc790dfefc1200b91613a1c3430db2154856a55

    SHA256

    43b8a7e26907d5730f42378d7b293b7c440a13388311fb552e45baf5d37c9a32

    SHA512

    686795cf2d32c1d0ca065f0686e4f5daf2fe76b7f4313cbcd96f38f18ea52384c9d010ad96af08fdb0085d8630e1c20cd1f88e3ae25b40406cf3a9b0c76a01a0

  • C:\Users\Admin\AppData\Local\Temp\Cab22ED.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar38FE.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a