Analysis

  • max time kernel
    136s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 05:30

General

  • Target

    44b8ed4c65dcb2e96c6358982fe1b9de_JaffaCakes118.html

  • Size

    160KB

  • MD5

    44b8ed4c65dcb2e96c6358982fe1b9de

  • SHA1

    3b92aedcbb2bdc39a8823db6c057d6be30e8f52b

  • SHA256

    25b5bf25021a26f873c35133b816b938e0e7c2a32bfe97455c79e4fa2bacadf9

  • SHA512

    a9985eccbe2951d4ee8580bd1dfd993fe7300b5968406e1ee6bb9b93f08a4030a3872c256892c93529bd01671d1774c328909098e936358a88687b1ec6981726

  • SSDEEP

    3072:SGXagICHEur0yfkMY+BES09JXAnyrZalI+YQ:SGXLICF5sMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\44b8ed4c65dcb2e96c6358982fe1b9de_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2916
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2916 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2444

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c7799cfc8c9b2dc7bc1c72227d27959

    SHA1

    897dfdb0e6f973171c77ce228d30642e8b44d86b

    SHA256

    403b3780b68b7d2278b4b1651c2f7326d802b018c4c97e9e0b5fb9b7f72264f2

    SHA512

    a1d938011e0f73a9368f1249d382370a8410a607ba21c9b93c6f13ac314e86f0cd8e58721ca0b2e83c5490a9a88ea7e82e18b5e7e5410b26b398fa9799ddc468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f5af7b3ab7155b85c98b6a38f5982cb

    SHA1

    e2e6869ea0ceb31426a817a203039c476d0bf312

    SHA256

    7661fca714a820e9cc01c9d50d0d9d7734cea53b26c86a9e8ffbae659198650f

    SHA512

    8f8355e96691c75c4c328ea7e6f6d3d5bcad0a10501bdead73677014ce3557519f3b5efc193b86643541abf1521b9a108a931e0b5354446f853e407d7b8df218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fe839efb0bcc7d927e5ba8dfa00d84f

    SHA1

    431563fde71edc4f03b048644c28e9cf5dcb7aa9

    SHA256

    5102822c419fb09da6525de7b212c1e7020e86cf79e8c33eeb1fec9ef7e40a08

    SHA512

    e63809f991de8d3889696e92a9600d2ee3171c9b0e1143d1c667c2ebaeba214320952e52078ed4c5260d1cf14d2d9365b397380f86429ac827111f651f4ec871

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    810ee3b29af8e3a043657647c06f675e

    SHA1

    50a77c80e1edeeef6e20eafa715017e310364d8e

    SHA256

    e5242f42fecbdf051dae2f8e689ea61f49a0a29caa04e368ddbb6368de208317

    SHA512

    97805b75b0fdcddc111573efd0c7b01b836495fe1415366a1563e6a4434b26579633b8f46e2b77873153d1426834116077546255ecc0adeb050a3190dbdef215

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3401af33b288e8b7865d8a823c20b611

    SHA1

    261623a677d5e83e3bfec88f87c8d7a0782c9f55

    SHA256

    f122c87994d42b9904b4ba6bdf1bdbff82cfbda8a65bfce6df67861f3903721c

    SHA512

    d68512abdc8aa7ebeb814e997ca23b82e7ea3e6ab12ed9489bb95da8bdf8426b44bb44e35953bede8a4896232a299371246330ae2e86908e9de17f5f05e03c19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    721e7bbdf96a89ed71c24940cc8b4dfc

    SHA1

    d95d432f3e69548fdabb5810d7cad7272e84b1df

    SHA256

    c9b6c2a309af6664844405cacca23d0f1628b40642ce80475ced935fe31c6974

    SHA512

    cef5a359c8eb1926aa61d418528bddf08437b6ff6ef4b85dd501457826129631e87960f0fabcbf701ec137f437813fbac5e82fe45b805a4dc04f506ed847adea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2308fece013f97c147af6a81ca6ff0f9

    SHA1

    fb53b09361f8892dfd6bc0e74a403268e45bb198

    SHA256

    1dde7ca796e90f2331cc60d9d4c3ce0bd4336e469a25de63b9d4b8098819fabc

    SHA512

    759a9115799968c46fd4baf85920e23ec13af0eeed7911f75f638d0905df2aac9f9668aa0804fbb398278b2f70ac120a6b8e7063cdf001f270195fdb78c9734f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d710bd0462c56f1d0880a15b5598f66

    SHA1

    3d0d682e9dd68d46d18e3aaa14cb0b0e48207d54

    SHA256

    4237082e2545c80f8dfb3342033392d59d7069166139a83a75a7a9479b40c53f

    SHA512

    83e6214ba64a88dab6c2939ae7001d5b56a6df9f7839b416042ae49f9c78681b7b7406c178e4913a4c78a7405c0b3b3593a631ca6f13e1085a2a897bd9b7810a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9858ccbced92c19c7f81fe3dd30d11aa

    SHA1

    3d4f28558fa0baff67187ec8cfdfc0e1e81c634f

    SHA256

    e66c3822e3c18da3092f103aa02e698130a8c328377b003cf0a794ca6779c125

    SHA512

    a9bbae4d4c5796006da41fe969b6f607bf6de7b915386e1d4e95fc087509dfd16673ae88cd16672dc6b25e3608597e88b10a0a246ffb1dd6e9c68c33b9ef00a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5dbc236c11638ac17c70affffd10492e

    SHA1

    d35c531e5b9301cda473ad5d8538be2c8ed1e0a4

    SHA256

    705c8a0661ddfb9a5a334ac50b294f0bc8f19d177c17c015365950f0d17b38b4

    SHA512

    abeaf6ed33ffdc65eac11816e0c1a4fde9848f76c2764a6c69eb2e9ce5f20c3c7210a975d4eccc42d79ba0751dd13b8e828cef1df9aec856e539351a36b213f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1ce58787ff93b767168a8b7dc7d9a9d

    SHA1

    f2f1142b3a757c19b53871d7326709c5bb467654

    SHA256

    bceb43aacaff6db47a380e029c9c6a3b24ffe0aa3b3c23f01009923ee2d58371

    SHA512

    f155e637cbe8aefd206500f4b64851f2baa35afa2d84b5450668eeaf759ad818d69092c9e4f5aab888365dd8a957f25a694c59d25e5f46b6d7990ed6dfdd647a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75f07ef03795cba0438da81b369f6f41

    SHA1

    48e0f9fc349d85b60703b68aa7288ebbb349c549

    SHA256

    12a32bcf6b22d2be460b98664cb927f3a64220830f79b1fc9263409e4ffe4dcb

    SHA512

    318e223a44e73758b9a6f89517dab94fcd89c0a4a0f289cd8fd61299bc27764757cf8c632d8230d3a8cd4c5b8bdbbccaacf7302e3d951ef2488ba21c03657bef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6df09ddc0ec27df915036fcb9b14b72

    SHA1

    810665c2a0fad44eb24fc1a0357c2cf9109b1b72

    SHA256

    aaa5d0d4721c9b1fa1215de560d09e4a1f2877b797a2486b27901e7fa9e1005b

    SHA512

    e677b5a9dd1afae51f4c12ff29be78db25a79f82c3f1ccaad5e2990f6cd87f9ccc1bd4aeee74c4721f6898167b5788a0699f73e3a00621264145b78c358811ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2421adc8eca9acd78d7b336faa4c5fe1

    SHA1

    1529b55f4bb6eb3b9f283c47f0a4d0ad92152423

    SHA256

    f2e20023c3c080f7ff137635734641fad0cd6900fcb2c92f76db7fbaf1db391d

    SHA512

    fd72f7a23557e1d4bbb868e154b4c560c8c5027e56d72fd11fb0479dd285f7294779849e8237cef7c110c8a4b031f8d163764bebcee0635023894e06cebe8146

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f02f0abe918b02c73f8fb7f24f8701df

    SHA1

    9df57540ad5c3231cff4e2df5c0c7977a9f67a6e

    SHA256

    6d310c3b7e04502c70820996e25a177076f4ca061f6ad4f469a420230da72232

    SHA512

    3097459ee7637352a9e5090bc1b4fa07f2f787c4dc407edaf04c1881857a1c32d5642017cd45974249c1ed0364070088501d65107e8598cb7fcee662fc2e0258

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b94648faadcf12b64ffd7910837aa6f9

    SHA1

    79db1bc6c4eb8ac7a14d8c3e83ddbe178c2dc7d6

    SHA256

    06516a55381d5cf48146bb4820ccf5865d59d5e973f29de2aa48f50d84a3f42a

    SHA512

    8f77bcde0145fc80dee1df0663974ff84fe07fee763235b8d6984632b0e4511253b3b2d1ab2a50eba37e05021d51a4afccc0286ad5624088ea674d0bb6f747e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a0ebc5696584423a3a3572d98f0fc5d

    SHA1

    36415d6c1d0c822297d58c1068d89513b913a2fb

    SHA256

    3b72d7d0c904cff58559d7687cc93755837612173328770dd13151beef526d14

    SHA512

    9260a1bbc9ea6bacefc6b2d75e1f2c4c65028cceb251b21cb50ec288e191adfe515700c1338fbf3f461d73e4f4718b5fd498cc50b26391e1c02b465ac9c38266

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c881c39b6bf0194d38000abe01c2da01

    SHA1

    2549391e3b6c919bbb083f77b4742001c9c462d9

    SHA256

    c1a931b4801d08693016509416995a2043d67c255112238d335e503cfd95d885

    SHA512

    b5102272fd93f666306fda2047abe5e1f272f6f3a3ee04f96d275815e9311efd8f21e6641167345078ad53c2834db8fbb49b7991652c3cf604cfab5a07889947

  • C:\Users\Admin\AppData\Local\Temp\CabFCD8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabFDB4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarFDC9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a