Analysis

  • max time kernel
    136s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 15:44

General

  • Target

    4bd5743c35a218ba8a8e0c380677db57_JaffaCakes118.html

  • Size

    157KB

  • MD5

    4bd5743c35a218ba8a8e0c380677db57

  • SHA1

    0f4a53b538ebfa5718dc55a6ed6b60928c288621

  • SHA256

    f69686d3605e4c0ee7e813c23da3abb38542e40859120502fd027613f8ce15e9

  • SHA512

    d95cf4e1df6a6603ae5dc83f537a1528eb83ddcdf509f54c63343d87b7c514d8dd48c45e62b076038471583080c5f7187368f0b4c001cda126c85135d763200f

  • SSDEEP

    3072:SEeNczFF08yfkMY+BES09JXAnyrZalI+YQ:SE2iFFisMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4bd5743c35a218ba8a8e0c380677db57_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2128
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd11f3071e66a36b6fb41e684999470c

    SHA1

    b979050b9f21779da88407e2965e5aa1b9f7080d

    SHA256

    d3e42144d8ee5400f7df3b0ac017e0eac8e48827b17b5c2142a5467810c99bc0

    SHA512

    25d572dbaae60be8f3dbfb261cf9bcfad901aaaee5fddc068092bba6433a40d46ec323b28711ccb8507839bbcbace6eab1ebb31027545fe988572302c5f0f779

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9372069aa1bc1f66fc82465bacd4836f

    SHA1

    99ba57711df487253eec78849bebca9de0add2fd

    SHA256

    5a9de18d850e873cc4f2d5535f19cbf1c4f498c092acb3982141bfa9e8936469

    SHA512

    a6d1c83776272e242100fe4a61d24e6759274069df27e60efdaf9f32cf929d8ac2f7076033610ab72c686bfa6a8325d74a6307cdb4292b023e33dd090c9f212e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52c57003052114ba79d1bda421da8817

    SHA1

    4518c44cc3f5692311cee7022076dbe293b36ab9

    SHA256

    ac60563bf2737b248c6306a62389f45ea34e49e9fef6a0884028ce5e60e976a0

    SHA512

    c5d313f77af7f0bb06b1d1d5e8273de1ecaed65f7112d352385133c3fdb1c6f20c9049f7789a6afdf6fa546c463723427afee482398ca362546e9884d9b2c925

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86d95d585055d33fbf7d17ef1d2aac1d

    SHA1

    7e5048c2c7b08b1c3ccc41f797d0f576e5833e91

    SHA256

    b0f6641dbff97caef97554ab226b1b60064d85b0fb46567a90cdd0dd24b14531

    SHA512

    a7be80e368e454242992b9e6cb6e5f4120f32263622efc81b370a31b5aac43fe4dd7a8eb8a6524dc67968212d082c6d0ba5cbf1afecae355e8a9da041ea221a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4945a401b3aca29e905338c18148479

    SHA1

    ac1ac4117e299270fed1ce030f8a35ea5fca306c

    SHA256

    e84236be90232264d1a16b27fafffe8ffceaedefa26a6e071c043ce0d15c2f28

    SHA512

    87693b945cd5f10ba21f9a6dbd7cde648077d9dd14238ff003667bc4ed81f4bff859bb543bd7df7dedf7df6836d96ccd70adda3411576fe729e88143cb3978da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12f3f88e07f9cce338a3a8f921bb7be2

    SHA1

    8ea201ad6b14ce5c39da7e92d261fe2e69f8e9ef

    SHA256

    e51ddfaf3f01e6de20d4da2e76b230ed419672902cbf81d48124bbbe953e224e

    SHA512

    f7703e7baf68971ed1070f1c4917621e514f6cbea5f215f3b80e65018f6a20bd04d567ebf55b7c76c58e0957f91b015e3d8cd04fabe3968a9e38699960294cd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c83a690621a3a92254ada34d60ff7933

    SHA1

    24e59274db45a601f476d4192e6f7cda6e6c218c

    SHA256

    46c04b72da9e4c83e651c0ff6d6fea9b8545cf62463115e63ce7a861fa626d5d

    SHA512

    75a623229226527444aca65703c5da61bab750ec998296bbaf2c215d6324e97678f168963cd2148279a885d36566a8d4701e6bad06e45bc8eb1b1d9b32c04cd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffb04e35d801525ee6fa5b7e6b0c23ab

    SHA1

    e966066fade8e4154ce89b8fba05d738118bdc0c

    SHA256

    bb57b9e9f154cbb66ef82fbdaac5b760534d4630f7300c665e592776018f7d40

    SHA512

    61bb26dbb9be5f13ed649d79d5c9243abddf333b3077cda1c3fbcfa22f2cacc98a9add3dd0ddd243de00e3c929b3bbe691de30eaa39f09b86ce015d989910301

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38668c11a9156fadbde7f259c303cd2c

    SHA1

    61777d3818f1922b391995d0c38f621f2ae15758

    SHA256

    6dc8ae545c1cac5d67dfadb99f1bee4b380f1046e0dc1d2fb9e3d91836d492b9

    SHA512

    76447b2197c5e48ac3df6f8e7bee53e2990b14f2306c9bca4d377e5754589298a71d8a9621413c532fe81bec7972eb23571ba2380b256065bd1cfaf571b81f41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    274a1a94e4b194b7e827e7d29960ee78

    SHA1

    631a36bc6e53c3f4a33133b4910be1dcf67387fc

    SHA256

    64d85aa5140637cbe855ef2f9d72ef9572fb93edbeac7b94ab4ffd31ceb34bf5

    SHA512

    cc85d8f9d8d3933fe5f380c77bea863d93e096feef22d1fc014c517e91a7a84329e8931c7ad0774b9a2901fc5b261f3d41c294b8c35523b7567209e3ca08bfae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a744c4278f94604f5fd75c2a29eab81

    SHA1

    4d9dd23ee00444e27a34f05cb2fcd0fcf1df0f22

    SHA256

    fee9dae200c07be64d24ce55b4c76bb1dabc041bd99da044b471eabb21248bb0

    SHA512

    57467be10f65bd50620f448b2b0ecf8fc20d5562d01599f1bc29ce60accdd2726b353fee35655aba7968cdc0fae625751964b66fc289db5f660c7000aeb508e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fcd9d9358589f93ffe6bd1716dfadfcb

    SHA1

    5cd9c877b721d48eb0ffb4923c1335dbea791c11

    SHA256

    bb665814424acb0fe01c50b824267562cb77f55611aff814e47650861dc6e17c

    SHA512

    ab083ecd6b253562e2f143b9a58a8512a5059adb27daa2e9caaee8cecb8bc098ba3ed3de75d939818595be20720dfcf4a67229986321bb04727b17ee9545e47b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ea79c33b723e502b338be766d21c86a

    SHA1

    709321824ac4b990ffc69ade780ab6b03182f552

    SHA256

    fe3feb62609ac2487ba79ab094c287b9e3415b2e334214551c80dd1bba46dfba

    SHA512

    b913c922bc6e2dfb1683705489dd9d8f7d2ef7712c21bf440de450557ad1efb43d5867f8f2ba6a9aa71fafb27512df5be62ff2a095ad25784e11cdcd902f97f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdb2389278f6482c72ecd3bb5c524b2b

    SHA1

    deeaf959f69743e95ed98adf36a761cd959d8d5e

    SHA256

    0b70e832e2576f3812e814d0ae061c325fbc952391f78b355b9dfddca4d43e7e

    SHA512

    faac472287430dff744d81e3f73ad9d901262717a1331005615abb4a55c7413b722a9fc9849c19fb0d0cd07f15f2604d68c7836504052ccf2a0f59c9b1d0483f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eae021c953f7b569b534145e9d542a7a

    SHA1

    c53ecc973a9b20fdd7b7ea6007663d637b182900

    SHA256

    2000e30cc9ba5acbc61891ef8865396bb304f2e2dcb519cfa99d0ada0f1d1cc3

    SHA512

    8c4a4f6b7c926c54e6b068603d7a2d316281bec61d2347ad8e8e524c7664a78123dc153c895b50cb9b147551a8caee375ae90902dbff777ea37b26b4a41bb45c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a9915593770932eb2bd7dbf6cbe0320

    SHA1

    1a2f3b2c207284d7472a3b9ed090d6c7d39ade21

    SHA256

    f80749c7fda009cb4b9ead0d0d98af58fb65f857a00922d655ce5fb330e232e0

    SHA512

    a29d0f58c58b81502a6a5dfdaa4434f8194ebc4c89525410bf1f25088b97c1f62279eac32190d32082430397cd6c638c59936db8efb9f45d6d300e52998773cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d35b3a05ecd80112d62d897788b5e395

    SHA1

    858260091235f48bac75490dc9021eae0c38f951

    SHA256

    24a1339acc763c455435b9941bfe4805afff86f924eccddb30f1b7e671d8b0f3

    SHA512

    f95d861b1acd8145540cab7b4430c77164ca51c3c31e2115a2e86a1036b363bcf88caa82d6ef40899a35eff9570ef92641a88a8ec083833abc413cf9173dfe4e

  • C:\Users\Admin\AppData\Local\Temp\Cab276F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2871.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a