Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 15:54

General

  • Target

    504776bc560a274e387675f1bbd846b8_JaffaCakes118.html

  • Size

    23KB

  • MD5

    504776bc560a274e387675f1bbd846b8

  • SHA1

    12bd5a502ef0695a7a0edb7949afd2254e62a5c6

  • SHA256

    fc2c73db2970307680414adc0d909e184e620414e21a5e25acd9dcc5e1697acf

  • SHA512

    5d83f5b5d30c71ba660d4d3e500404f84471a0d4778e83773cff811f61028b9f13362318f04fc7d20bab7075d922c6ffe3c12c689f3cbb8fab4f4e70d206f0bd

  • SSDEEP

    192:uw/Zb5nUanQjxn5Q/HnQie2NnsnQOkEnthpnQTbnlnQ6v06J4RnQNjMBWqnYnQ7X:MQ/fv06kEg

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\504776bc560a274e387675f1bbd846b8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2944

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          90b046beeca969d63ba612331f25f20c

          SHA1

          e8fa4eadc5265dc30d051e250dff29d4ba02dc6f

          SHA256

          2d2d25e443dc4b77b855f45153986657c9a1639e0ef61996114b69fe8c611029

          SHA512

          db8bf71478d232ff42faf8e17f7fe2627769f5be212319872ab272a4e81fe4f8a7f97c010e34102666e2e10153293648c7e1d8ed9e081b14334bf6b4ecb8c81e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ac060c295df9c6121ea678a54699216a

          SHA1

          cf06f72da7c3ab733316afc7530c18bc381fb394

          SHA256

          2923be7e2c94150eb3db5f621fdd27c9c0665601e25ff4c04e4c6bcf7adebebd

          SHA512

          da634b321dc9309a7c71d84d9aa422c8365e5619b80030dc4d974c0f656480836e6cd63d126fa6282b02bc571655bc6240386abbe186993ddc78bec9418c7864

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a136df51a4c4f346f66a21a74b5a1cd3

          SHA1

          67dbeb63439d30152d832acfe7b21dd192df07a0

          SHA256

          d3c9cb3b2f2b16815f239400f08e88a4766aad5c73b15b4fd0aea93152dab9e7

          SHA512

          5aa337951f7e58ccea5a7512308abb7ed0e95cd7daeba23a1ad886af687d8d594066138b24b340f11efb212cef8478a5cd62520b9026a0bce7655381a42fe519

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a0b9c3cf31547e728b0cc3a58414e79b

          SHA1

          dfa9615e51a211929183640b7d48d7a03c7cab3b

          SHA256

          cb742c4c7f8f4a7dcdc5c8e20b7044c898b283d71ece6f9bd6d92926796a8f78

          SHA512

          57711b7a8ebe1d2fc68773c1b6444e48f293cb092377552ffcbd78f13616e5958cb520a750594da4fd270cdf7c3556c846fd8876c3485735321caf8b8030204a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          afb147dd9d6b7621c27e4e63037df13b

          SHA1

          a707e2a8ebb89ca69b2a823352bd435d8d3cfa26

          SHA256

          621ab5dbcec47d45e9a141c30193e56c4b77db72fdbc460d9b7171b72a4929f6

          SHA512

          e4ec0cb07e125bde36489f8867868a5c385b3cae185f214e7d6d95e167e0a4ee3da80989ff777ee235323e7718cb6335db3d6e4bb42a1bc8270eaa7177b9d04b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1e73f05c3dcfe4c39577ce718c2bd00a

          SHA1

          b6e3866e041b6ebef408c9155cd210ac4b7001e4

          SHA256

          5fa71ab42ed399fa070ce1da81390b8b7d983a94ba0f246fb796df20f7b32856

          SHA512

          2c8a9ca0bfa1f27cc3f344af2d6e7d6ccd2bbc1f9234647dc9a59abbca84b8cb5d4fa2e4f3dee6b99b7e772b68a36c46ced1eca126b2eeec3ebc72f47cb1f250

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3fc1f7cb9937681fa415d6349bce9bf1

          SHA1

          2c2107a6dfed0473f7773e3ada27f5f2caa3ea64

          SHA256

          d29c1ea3f0a1159b8bce9f1899754cedf96c22ab5deeb2fae896b55be7e23996

          SHA512

          eeaa7831ad808a7f73a7a3b06e27ee0cfa684e4cfe6929dcb19f01602c0ceb8efeec2d52ad8b25c38fb3a3902c27ef67340fffa3602dfcae9280cd8cb86935b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          42af88346865f4d03213fb1ccc7574e1

          SHA1

          fe3d614f5a0152abc9a742992fbf20818c7b5739

          SHA256

          56d14e9bfee0b076abaaa3df964d85e0ea43cb74c68ad2d5657685cab1d35192

          SHA512

          5efa39c1bfd19b2a6ce91dc198e33f35004255985b82fa68997de104116e181feb4512852c6bad05ef957fa909f8f37bc7f1b14877ad7860d508f0cc5b394d88

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          15e320aa785310a35562b4f210bc8ede

          SHA1

          ec9ef39ecfe8b92c93f93d605c751f985bd0cac6

          SHA256

          0180e14756a7ee70386e630783bef7851fb895deed4a6ec778445b8567dcdcda

          SHA512

          ca6d5ea338a4c88f421afaf656a56085ae18f61c33b2807fc0f1af3aeb0cc5ce584f83a83fdf382bdd6eafee4cd13922ce3f9a724a533dda63c16d6214dc95ca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7226fca5d00e8a07afc50ae1a1cc00a5

          SHA1

          49273bf54c29b1fb67132c8086c20130aa2b14a5

          SHA256

          9b7bb6e83be16b62d4f9c1f809ed3c48516355191d327c8871893058e510d6c2

          SHA512

          8808d7f3b70c866f7be13b51a12b1b9a8cb6ca9cdc4d7d6d30d03b5254b4e52913cae1ad7f641692827e250327aeeec1e3dbcd1ab2ebe08f6f3270e3f765636f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fbe4b341677eeafd97d4364506d4a057

          SHA1

          26ea9a1c585fd30a97b1e572ed9b6364bb45f3d5

          SHA256

          4b4c49a86996f5bbe8bfd7b7675a87b11d1ee6ca0ece4a19e2499e9c88643313

          SHA512

          83807f7e40a8231d0fe1f028e250d9ae89c43d6a2dc4a3dfacc5f09e0acc1281e437a7d6e86833d337658991ccbecc44861860b6c4431b19df55d2ee513fd620

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f0b138ad9012549defa84fd0e538538a

          SHA1

          f6cf1efc4368b72d824448d8b932052b62d891c9

          SHA256

          7a78e29df45e79779845d86649256a23b1b88ac083120ccd8c0448f77cef9b43

          SHA512

          a0bd3727f9c1841bb02b10240bbb3543e8837e9a30488fcbe11f86e2a00ef242e5d2bad83ed16fce190284527132e4ecd4c51e5a37ff4ce0d73f00ed0501476f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          802e4869ca0b62e16eacefcfd0a7ac57

          SHA1

          cc636a75e89e8ae54800ad65d93e37b3cc4c50ed

          SHA256

          cc1c457cca74a5860b47e58a1cbbd77476797e1f09e8058dfce426163947b6f0

          SHA512

          45df9f0106144b94372bdc92c516c64a91f5965abaff3b6235114c08267b4a58f09b51eadb240c7e48ab7cbd9ef47422e29f572a5de676cddb9686e24f44368f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1ddcf5f7291d030e6e085ecf66645bd9

          SHA1

          3264cd057c51279a2ae4912c83652acdb7697c5d

          SHA256

          5b0dc5a00a482008fcdda0ce036f0d03e1b7cf034274928a934fc15083752dde

          SHA512

          633672f9298641dda03e27bd3dd6a160931beea6bbf3d715d2ad6d8bb947c5da06d6d9f2012b3ed2e1764c1ae782188f20d040692dbc1549cc127ddabdbe0617

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f1c7ec681418ba48a91d65814ac43c70

          SHA1

          e1e4a4a87c46d8032971c937c5f5679be0f3cb48

          SHA256

          9bf014c6fba5b244a0ea5690fb2c38b73ca6c014110314b8fe838d311164f2b5

          SHA512

          8504fd19237385df7e32afdf93757bcce1a4a6fc517f09e52f60fc7f344e3a8934d635cb3ba331054f2e7d9c9e69ff466e38a6f59c09a027584be71267bb6806

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4d8dc4a639ef938b846ea3964b9386c2

          SHA1

          498275e476c0e633dd89b0fef090d15b73f4d391

          SHA256

          f31a83bb52308224bd4f484e32a9063b9451ed565db76774204e0d8700f3d73a

          SHA512

          f3abd900d53d55a1603594aff8eff5fe494f50bd18725230cbec82d562d01b8cbdb6b58d32d368c5792d3800406d66455c649d7d7d205662969cbdd2cec3333d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0467bf2cbb70d6bc9d4f7900b97a30c2

          SHA1

          11faeb5b9af4033738701b353d5a72160515230a

          SHA256

          80bbf0f4ae48c9d9df9dc4a40679620aeed3b79649cc568590e5bf4f581666e8

          SHA512

          7fb81ac6bc98ce57f2b64f0646fb11dc7b6da62f16f7cf43975ad03b44675a329a26c1ef7a8847dbd90a653457042878a396b7cb0a0e8639e80b1657d5bff6c1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a621360524c5ed0de273c57fcdd34df8

          SHA1

          b73b35f5a7972eab5a455b58bdf31f7050d2ccbb

          SHA256

          4aa91f21df190be75eb4daa2ad4dce3023cef3b73fe35c7c9b7bb373cf894e74

          SHA512

          a1574cce48aaad3667ed79189042bf97720b9e4314e0a05923cac93b80b16a4e8621428cd9f9e56b6080ab34d5247f6e1fa83d58afcfecaaeb7e81236c085a56

        • C:\Users\Admin\AppData\Local\Temp\Cab3729.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Cab3818.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar382A.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a