Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 20:33

General

  • Target

    47ea25a8a4d70cc4653f3387f9c8a51c_JaffaCakes118.html

  • Size

    460KB

  • MD5

    47ea25a8a4d70cc4653f3387f9c8a51c

  • SHA1

    3cd06490fd8b505c10ab59086f77895fdc63211d

  • SHA256

    6c1e8a612e63024c7961f906ee7d9e83054c91a8a2d7dcf523ca2213ee0b6c38

  • SHA512

    8608c9f08f095139927538dbcbb907cf149ad0d1b88873fd5c70a146793a9a34a214c2c5536aa4410bb1063dac183ebf0f4b8cf431a49c9932d9144062689ccc

  • SSDEEP

    6144:SYsMYod+X3oI+YgsMYod+X3oI+YqsMYod+X3oI+YLsMYod+X3oI+YQ:55d+X3I5d+X3q5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\47ea25a8a4d70cc4653f3387f9c8a51c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2832

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1b96b0cac49a4e9ad80ef6177a3f5086

          SHA1

          3f0f434bb0e8cd7a7cd4ae57d94d89f8b02b4926

          SHA256

          1ef135f1c737a6cc89a3028d1d056f051f884f343531af58c8f3e83b396fa39f

          SHA512

          d85157c932d25bad804065a9c9e5dfb457463f89e8c1cfeebfb9ba1d50a3365ab7c1bc25cecd35614f59bfc86385fb4337335950bb6d41aeafac317573ecb1ba

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9860948d2c1d7bd08b890ab41ef4a3eb

          SHA1

          ddd92b56f7a1aa23b97cbfa8626ccad501268a1e

          SHA256

          3ba87603d6c817185144a5ec0eab38f775f64d80bbd72b88b58b8fc245e053d8

          SHA512

          dbf31715e79f53573d0e93a5563f77c05a600d9e8d534dcde15063d181b1d02e88ce0177a34b07b27a18d4005ac95423af7340974e9be9b0cc8b16009851ddd4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          71cc11bc7a1c04f8a80d566960937726

          SHA1

          4c75c0f43e9e5c75f0c56c6a4a958899f3d4f9c2

          SHA256

          53f8ad9724b2bc4aee97f1455df15c1dee83b1decb629ce7b4f9c44837ba3048

          SHA512

          1e02886900eecdfa9bfe9fb31c694a9c9b9bdca377f32f7b8de310cb815f7b17b4ca1abd6118cf708ea6ef56062f9f96113cb1b949ef922d10aeb82a50ee8f40

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ef2b04242a6bf72e824e7979da586102

          SHA1

          214d7521e2d39475d4933c536b7a98ff9878f009

          SHA256

          2fb3024557f3aaa58bca499d09a6fcc48616d48f85ada2404484fe6b203254bb

          SHA512

          3b06c54b763ef2418c03ca6b0466ef5c41be813b2068663015c7044fdbf38a1dca902c1433f4c698b405323a0c7fb0971f1d1e80f47a3fdb4a4a2315bacc1965

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f517cc2d8bf8cf0596bd51f237c95720

          SHA1

          f54cbd29f29a8e87fe4979779a24d35cbae9ae91

          SHA256

          177e9d22c41bede53aa963a1d0f7df289d8c6fb3b07aca0bbde30bc95268c29d

          SHA512

          5ce6da8bf8978416261d222b2d13863dbc0294cb82d76dff6e982efa10eee55c273f276075c9195e32169c1a774027966ea3ab2f05ded5c9d1bc50bbf31c92e0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          54ee3d5a405a88b55b319f499146a273

          SHA1

          a15497a19df277f34c68dec1273ec0bb56823227

          SHA256

          cfa8e6e27fd0b8ca6fbc297002eb86d2fdf491ea7d9eee65fc586e29b827137a

          SHA512

          a7aea862a5251b9401bcc6928d5efe08adebceb18373f6b0c15b1ace2cfbcafedcc6415ca418341b2dfcb180f03e190e70c631136b23747511e5f644152977bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          443ff51012775b705fbfb2332beb2e69

          SHA1

          69fd334883c3d5b8d5389f397f6d55bae81699a2

          SHA256

          106a7184f766f4d942dd61c60a68da43a99d9c23253449ff1b28369604e1391d

          SHA512

          7c95ac25a3dbff0fca9b3d6b9355649aa05b061f5d853b46f641b7cea80f406b80886568c8ba07295cb3192960771aed41b9d455b17f6a7733cf1c46bcd96ef0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3d8df9cc74abc9213f0490958e467037

          SHA1

          d286fedff8da52ec2317c3304ad356d35c6d59a6

          SHA256

          8eb904b3ec30c8145809f241cc73d829091e1f45275314cdc9d4b43ac0cae108

          SHA512

          397282a7db63f440592d0fdc171fe6a829b59349516f5334068db1ef110d2d15a78613cd618ad80738442331d7ed89f6d2b42b74f477724345765b07cf0e3538

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d164594b07cfc148ad4403b294eb9d6d

          SHA1

          e049a84cc7e88eaaa6fb34b6e722dc10bb7d605b

          SHA256

          d520bc0d843034749253a6ce706fc7f921caa02ff6dc52232a2ca96e4df4f828

          SHA512

          96896a6c62c5de4cb3f6f97f17136125ee87a29c95d366a773d5c561d2bf14caf2693688e9316547a58221a0059c81b8354f174e530b3a8af12766daadfa17ca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8a21ec7320b9af9e0de88b48e3815c03

          SHA1

          067f698e0f992527541a0d0e38749374cf4e5add

          SHA256

          d770ace2ffebbfad50619e3e2ee9bc82ac7659000f623a287b211217aee15990

          SHA512

          4426e1003b19e4bb23ccc9e394fba7b5dab4c1e64f40cccd6d35af5cfc1df239642ea0c4da37a6fc6806d64b541afd594a415c8610663041da232b8813d64081

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2f6eeeca8ab50b8e5fbb84d5f1a8e6fe

          SHA1

          1d4668c192835fcaadee634cf7f24e4859e7cdd4

          SHA256

          be9bab5ece5aa9a3654dba91d4f3199e384b42a7c4cb1a78ad334a595aad61b4

          SHA512

          e61cd12766cbfba41b7a7e457b6f7c9881ea5a0f6e00143bae747af60ad24d3ea12488d5dece5657b646514308e6cabbab4b88e75e03e2ac760890b95041894c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b12ce85c21365863ffa85dfcc7e7965b

          SHA1

          0d9b0ef17a67311684b30ead6ec3f91cced8eb6b

          SHA256

          19e09bcbbea55b907c6b9cb2e9b6fc52ea0ad66b2331ae7424d22358ca50c8ad

          SHA512

          0024b89e8e882df8c18d7b6ac8dcbe347a5b780e69ac69bacb972b202460be445e20495fe676f435a5c606d366749f912d48ebf94d9d5f541938a04b2b551f9a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          78dd86a832dcd2bb892a75608b7b2048

          SHA1

          2eeafdffacde8101ffd8322286f2d0bc2dc93beb

          SHA256

          ba42916d3e8c34cdf7285e163f31d15fa0e75e8163da33459942c09853ecaae3

          SHA512

          d473314a5e17a48cc27942f4162723938a2be44b1790e2d1b4e667c549811b332ff3c7b39e10c3ed129787f008eae96b0ea1385a4d18ec57c5935cf695c1acbf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d6268a45d17d7ac6b73ddb7e7d05e0ba

          SHA1

          9936f8913eb7b0f6a1505f3922d1aa2c4b2f2f6f

          SHA256

          16f585d84c337000ee9cb7fd01684a3fce88499153c86ca8132b64869f1fd4d5

          SHA512

          4c199b17fca95a4609d4dd74ad293bdf3b8875d5b28e4787ec47d7169a2ed6a795094d42fa83e4af3740f2627af98aac1e6406a0d5aefae50cbb436d1b729b1b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0f2bd8e1880e2bce4eb30d965dfbdc99

          SHA1

          715a7bcda78efb78ed5ad6f1e6f85e054432fb3b

          SHA256

          d8ef94f37e7a2298e0e1437e3d363a3f970e2087a3996c49306f9c6a6f407714

          SHA512

          59e9ead575715d97857aaaad55b5afed3139ddd6e0509efed7f0a8311936376d2a77c445b6dabe2e4f6a865cc6325b74e953f7f3dc3aee253cd5a6af810e981c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fe34c5bc336030c7da992a5b8be2f2aa

          SHA1

          e9ad83af485dbc82fa7a6ebe0facaf696dee9214

          SHA256

          311753d0046238bf81b72cbae65de0657c1c1334d32e734a94644f59556455eb

          SHA512

          216c5c63660cef7d6708a914c238a19e5999cc69d769d29092bdfe057883fe30a0fb66c53ccd111f19ff4ff852b70c5af3892a86b83009e613e2579e2b2a99ac

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          223485eb120bca48a37439fbf4148ea2

          SHA1

          c88fb735acc816e99f69a4417abc8b15235c5863

          SHA256

          39128bb50ae06f5389c3ce08303aa53e3ce2ef0504cd37e6977c9ef604ec9c05

          SHA512

          90597ced5cc7f2436b5e4a38b442f753929771de76f4196d4094ad4c2da3c6c7280954512e726c60e7e9cb68cec2e9fe1dc9c1d2cae8f7827d6eebce8324cb71

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          55f6ec9c7040539c23df670e238c499a

          SHA1

          3eacfdb92d40f1b72e2b84c388f02a266f6a2a86

          SHA256

          905cfc85d0f223889f02f2c545815a24dd17ed3559b4ac36864a4338dc746c6e

          SHA512

          e0ea548ad8f6ebe68d58f8f58d630c614ab8e71f5b054ce39947ee63943593e92a4daabd01b04a2514c307aa08fa749159e50318df6062613020a44b675463bf

        • C:\Users\Admin\AppData\Local\Temp\Cab4F99.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar500A.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a