Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 07:58

General

  • Target

    45379b1872869d1d05e3244b584b4f53_JaffaCakes118.html

  • Size

    128KB

  • MD5

    45379b1872869d1d05e3244b584b4f53

  • SHA1

    3ed2c03f2ce67d4d65d807c38a753cbb8ef77a5e

  • SHA256

    2c1f89244528b4e33e5f13cb186d50873bebbb45bc1f710249faea37b5fa935d

  • SHA512

    0b8abbc4acca9bdc48d105df804de9b6dfd3464b1f99b6697cb1dccc766497673fc26a0fc3d4c0a4bc2ec1703a443aae369d0f94278d955756cc9c34c5a60902

  • SSDEEP

    1536:GlryLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsn:ayfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45379b1872869d1d05e3244b584b4f53_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1396

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f1782fada58c55626e4dec8821db204e

          SHA1

          398dfa81b1e6caa4cc7e05635ae4a322a25c0adb

          SHA256

          3ebca341b4576a689b78240f4a8968f622ba45e851ee3c35026f4d767864831b

          SHA512

          e4e9851d53f2878e14add754020762f7204729a64e68575702e2817926d53fdfa05f9630cd7ea815dbcb8537f90ef003e6ca2b311cc0378122d83293c7b4657d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          65feae77bc2495ef1598f802e920724c

          SHA1

          08fc3c9af8a8947aab2d45d6ae21c8a6be7e52ca

          SHA256

          41903768550fa9ce3c59c0c9b10c99603e7bbe57bd4ea1b32541a0e07f34909c

          SHA512

          f4adfec768fa5c8c3732e24e1ce558ff4c8457151c5322cde94809e07f8ce98b6ae5729273b100adf2dd883eacaab5857103cab0d9f950805dce58780eecff92

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6fe008cd82142a5e115aa95e1a4205e7

          SHA1

          889079ed606b98dda48afd78ce7302148a369fe9

          SHA256

          26b19fa75a4af9edcdf304ec1e299430e6a4dc39280a4bfff6ad45bd70a006a9

          SHA512

          f92968a6db55220e5f12d2a9fbb44f5e641253e47abf8bb9bb1fc23e1d44e90d5048466c470889a599795cada072da65f4a610832bf7b7010a9c0da3c3176463

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2b5eb4c861f459f2f5ca199266f428a5

          SHA1

          281cea6c783e849e76bd70a63870dd4e3230dcd8

          SHA256

          537066cf2378c5e52cf15d443a378e36acb5cf8754d2783b6f7be76ef4ae1146

          SHA512

          2aeab56de85315328cffcb8cce1f2348ba2923f387be2b6b4f2501c388cd3743a2c781871200d09c7b79fb52541e04050a8e3953bcc2720de4da31205dcc6adf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          80304f61baf294ec4e5defcfd3513b5d

          SHA1

          1d1c7900768e95fc9fc58ba090cf8d00042f6dc3

          SHA256

          f59f7db530eafc8f56e94eb48d12bd52d0901acf5ef3a9c58ea6390ce7caa6d7

          SHA512

          c6ea505dfa40114ea0e60c5d27085c4744eda0902c346a79a3ae713b33f7dc9635c18e9972ac965434e2419b8d8cef20283b29105170a0bddfffe9661cb3b213

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          000e05da320a5631517c5448d8129533

          SHA1

          93af43e4e62abb5e77d85d2860e8ed57a9293012

          SHA256

          14ce95f71ce419755c99f11f44be1b16f677dda7b9090ca0adddc9a459b87dc9

          SHA512

          225c2f167af0c1b5a186dd199eb4e8b77a9304c0aad8a0ac16a2aef3ecd65fc9b669f23159caa66f3b2e4c2dab13364849c1c20b7d3fba0b4a8c978692c1978b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          93ba9c56adfbeb2cd1522c48ceb2f301

          SHA1

          b651268d088d23de1257007038e2fa995ae45f41

          SHA256

          8d3a384b740f61a7011d49c6257f04d03afd6a12f0cf35a3ae813919ceb1670e

          SHA512

          0c6b3db386c777e1bbdf5a1aef79d593d80a4cf7ab7a54acc47df5cd09bce72e76d7f9eb14df3fcd38f1667881f1b6f75c353cd2f8ff14dcb18ee9594460ee13

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ca052305b336d94a145bb0e997c91a7c

          SHA1

          0bfc32cf2bda0c2a1c03a3c56e84f0b5ed1b6b93

          SHA256

          2c373ac34ae651cb550a7d22c473525f9c227162f4b372981b3af474c0892445

          SHA512

          f4c52e83b35efc264c99b210dd127607814296c3aded231b36bee2bae55a949914e9168bd64c970c3d5ae8e1e20aefa0ab330de2143f396498a96d2a373878c4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          96d25e3888742279ffdf6b06ced08614

          SHA1

          dd6c2313015020b5eccf2ab1c403dafe5a5b6012

          SHA256

          ba4cb5718df4f8edf0ab2e2276058ce212d2dea843206b7b220fd06f715c4ac0

          SHA512

          334d9a27d6bfe42cb62d64dac7850fc9a80b83e81cccff915b542be0d97881fbb8f83fb55bf7eefcf6d70aaa28b86a4a3d9007a7c501eb39ec0d36f762028894

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6366426d4438475438f35246b12d9136

          SHA1

          2bf12d4965a616f0e3564969e7eaa04b0a7a9a1b

          SHA256

          c893c031dd723660f9fd2606459023383dcf709710fb73a23865a2cbc50b5fdf

          SHA512

          f8da8b4979ec955d96f03ec9ebed3c32256b55991efe95edec36c4a80d697c4cbd8a46c0603410dad4b3ec96d622ac2aadfbb2965e61514cbea3b8bcc1e67433

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0ece58cfac0c86bfad8ea547186c79e3

          SHA1

          0d3d3ce1629fca889ff2b094f06385e676a8e70f

          SHA256

          7a35896ce9bfdcea145e05003fd374150052ff5ea423746e80bd33ae27ffbc6e

          SHA512

          b0464aaf5edbe67325ec642552ac12232edf523ff44c5bcd4177e5da0ad5c42f8425a56fcfa831e801cff4f9e47aa053411bb4395fc745b5330aea9da41b4c96

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8617e47a538810cd280db9721d50d6e7

          SHA1

          860c157aca900d819261c1b2315429e78d1779e1

          SHA256

          48bf08142932d5e094baf9ee35e3ec5a8fc5bf4374eab48bd83ffbe5c0eb9e49

          SHA512

          7e94eebe03ab69a088bbc5aa8ec7806e66f1a41036d2d8b3faee683b758db99e3c1927ab07a7d3a5a8485ab093882c93dfde5ec5ab8d6081d46fb787c4f6d506

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b4c8dec1402eec9926da8d73f61ba376

          SHA1

          1c4590a544808dfee1048f8a0f992c33f39765de

          SHA256

          d8309b35240ca3138cead9e37cf730050e265dfac80344e5853287d523f9e9ef

          SHA512

          a3f6ba2bf8f33d2ddb4d8f18f583d1444c0a49ef95e8a1a52820b0da237c745fea69cb1d3d570e57331d145b84bc4e1ee1864d52a01d727374c867a16170d526

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9b3b81add00a66b20ea948fe86c5a89c

          SHA1

          e5c9f24cad5219324a8b8000429e6ed5b8f76459

          SHA256

          d6e2fb2f31f6d46d6f3b1d98754e023d04f982880f211fefeb2e4d55131f46bd

          SHA512

          e337b03e9c7ac49651cfba318c7f4d8aa9a9cf38479bf86a308a6194aad222859fdc2ebcda7f6728984a61214a01c295d12eb5926ae2e2999aa127cb008472ee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3f36cc75c7bddb52fab9fffc95be947a

          SHA1

          769d3cb92d69dc0ea12bedc4b181cd711670e500

          SHA256

          d39e663e65dac037bd63d1f96529dd494f0c0faeb585686bbfa7175c5b83e233

          SHA512

          807729bd8eb3f2e4dde5c184de7dfe98f56a64707a8e5fa7f6054383182af040c842ee9863861cb4a4d5037923904f724500f56d13332e62c363711a847ba030

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d55654e18dcefda317e3574733a0b192

          SHA1

          177ca6cb54f37938f23130e75140ddd6f9662ae6

          SHA256

          0ca8051d38684885a2676a30124f86a9d96103c5bf87191fbfbea43d4071ffd2

          SHA512

          72b1bf3afe9d5ff10eaadeb9d437b9ac9c94aacbd8250fb793672858b19f01c5be4160b13a166ebc9ffcd8c452a8d5c3acc940e3be056a39e49cdbbb02b15a73

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          41768b636e5b9bdbabe7c57e64728adf

          SHA1

          b1232b06fc62c2b230d45bf40e89c44291774195

          SHA256

          635b5cb2fb41f68b860bb02c8807ae9fc4d765a67158e33d71be9dece67853dd

          SHA512

          2b0f8c3a4f15e8b544441a338c282c43a0f64c37448b86233e435df23eabb5acd974eea0d9c23ca90242b2538994d317e32806b8fc3ddc95ae997b4c624ee703

        • C:\Users\Admin\AppData\Local\Temp\Cab9ED2.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar9FC3.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a