Analysis

  • max time kernel
    138s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 17:21

General

  • Target

    509b195e06be3916d6ac829dd91bd612_JaffaCakes118.html

  • Size

    67KB

  • MD5

    509b195e06be3916d6ac829dd91bd612

  • SHA1

    208a649cbda06113b615c7f4a0b0f65848f1f95b

  • SHA256

    456aeec7045cc735b97308e087d486e3df1acbd258a379b537017a6cc84a4fa5

  • SHA512

    37294b31f0610d9d53536195972182a44c3207b08e6a818d0c972a98fe12587e3cdf739675f0e610feab02f3d1d7a39f9a3228f78629bfd8f3a9bff5998306ca

  • SSDEEP

    768:JiIgcMiR3sI2PDDnX0g66YIBwDAJ2oTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQFf:JiuqwcJHTzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\509b195e06be3916d6ac829dd91bd612_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2156
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2156 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2472

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cefd9069290ad7eb6b2fd15fdd09b976

          SHA1

          1d5e1f92c8be016caa035b14a437eadd51d2ca22

          SHA256

          79ff4d2eff5567074b5e0c1f91d70dced24bac4c7ad87ceab3c6719b750d5584

          SHA512

          4938c24850aec920ef689cb312ce490753af5df8b1bfa3da0eac3f737ea2ae8906d758c2932f894d552e2eb8d50b9482ac7a43130cb6640da4fbe1b131ce3f3a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e17baacf4d3df79836e3ff29485587d3

          SHA1

          26e81248bf250f57e3f1f4172cce3ae528518f99

          SHA256

          4364aab603c157882b8476762395abe10fbde12d4f11d1e2756f45a6aee52a3b

          SHA512

          225f35b0a21155745f0e9d9a9aca3e3dcf12f9b726206df41be96ebffb2bd2a98706b8d026f7fe09d54922e3d745375b6ec304e12715cc4cae967336ee43f126

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2deb7999125a96f7157c009b9b943dd7

          SHA1

          09b66fa256d26961368751253b81d16df2411b72

          SHA256

          0e8f95ae1e10e26cd8af0c3d8683976902812caceb2d7afa28b978e17e6bfe80

          SHA512

          aed89a6d27d5767a5e204b2c7cff88282fe22e90fc97b7ddb87ae3de35a68aa0e7258fbc0a5c1a2b6da7254db95c1ff8f1c1f93e9fb479455bee76709976a359

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4a6242b9ffc371f2d033aa99657588cd

          SHA1

          731043aacf3c77fa40238d84543ee25390a3aca9

          SHA256

          f479c210c9164c6d3bd9a28018ed609a725f9b4e1d745e82691d6072e9defecd

          SHA512

          a9c843161f0df11487c1a1007a1a857490b8fa55c22df09c973430b8b563362642a01f544221ea90cc7ffb63c7d1bbddeeb2521d4cdea5a0bf05bcdff2b357b7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          185e579e25ae54923088637c193bcb6f

          SHA1

          9576155ee7e1335c6c22d8a260eb27bc0ecf15df

          SHA256

          6668691348e700a6f5c4c056e7eee7e2fba612e747159763ea9370a9332241ea

          SHA512

          77e73bff3f7cf8445754b60d4833f91f606ec0efb70986ec962f1e990d9dab21a92eb697e6e4285ff12b3d3936dd7508f71e8c79ad0ca2b9708a969101190571

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b4f5288580164252ab92157ee0456737

          SHA1

          20bc0f9b7db6a385b291a3f0729e9f282e087e0f

          SHA256

          df35d78b729de45dcc7c043b5b139325c107edde0a22a77b3f9ea05435a6f3cc

          SHA512

          c6cb8a1aebfa4462e55bc0af94ac10a574be217dcfc0faa5c73390ac55f9e300a19857ca8203fb4aee839cf4ad6a04fb27065941ac6d2378f0e1a8527de1b848

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          7878ce1d51937ab46290d7e5d97a9e62

          SHA1

          09ec184409d29cfcfcc8d749fa42fdb6ec04882c

          SHA256

          defb8c22207cb9f99a8c158d64813c5d5b9c2e29949567cc161d83b482db3862

          SHA512

          27d531f84aeccebd02cee46f976c0aef3e56765354edaa39587eee54f37676dc148f8cbd77af643fbd86d030a50bcd1985ce638b5ebe3953925cd86f1a6c32e6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          18cd32e129ce365e14f8b6439e62255a

          SHA1

          34827da74b8dcf48b40778272b20063b33592890

          SHA256

          6f9892a958c26fc019283a0467212c4680b067f1c4e269f8a16fe5ea473b83b5

          SHA512

          f78242c5f0dae68f5a1d2b6077f8577b2313b037f95bdba9527494c459b541953da950ed470e6427e021652a31453c8a36789099a397faf5b640a39cbd284479

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          24f8f1de9b12c10c51b38d2d93cd52e0

          SHA1

          cb1c1df9e75254841de9df0480cf092277e6abd9

          SHA256

          2f7bb955927321c4cb60c6885e74419dd34121b2c501ba91df2ec5a33f96532d

          SHA512

          e35ddb603612b1d8950859bc211534c76cc436e03080e48bfcf5aff1473aa0f9938016d4f4bef837b033693b28134a9cd781c79a5df24db1bd4234dea5b02ffb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8774a2c79f4864b8745d1fbcb3dcd483

          SHA1

          39a8051f618c57e572351901de934c61b2b1d341

          SHA256

          2a2338e0642633880b90943a0cf9690d1dfacc8312de5e07532196c4ad46553f

          SHA512

          ed6d357f838a75d62994e32411ceab0343a123037b6f02da306bd4a084549afc0bfafc506907f3bee61dba330f4f91a1347361e20956f3fe217416dce1afb2f6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          484046bfc3575f921083bf2cf12d7afb

          SHA1

          d7b687cba502396b4d1bad058547a160ab0a9b31

          SHA256

          6a1f5490d1ab2bfe9eb1aa53140d9591270f0ca6360143ba72accf0dd91e427e

          SHA512

          31656f6fea56f08bd15a04491c50fa50678c8f858f3f2d7bba223aa8d52cb10bfb1960689774fba92c8834372914f290eca776502b4534a2302cd6058bc9ff87

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          09e26d205b2b13585574a95bd5b8e484

          SHA1

          2ae585ac88f05a1e3936414762b53c1c032bb31e

          SHA256

          fd2b8fd50170468e1ec9db71de0b7acbd4d6bf685d2c982b5cfac381ea573f40

          SHA512

          0444834b2400bc3bd7bac63d45a7bbcfa567012ea8876d3c49ce549afeb3fea87eaf489a8ed183e3b8a77733cc03a600a4571615c45b4c7193eb348ae31f7984

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          17dfc6b1c60549d316ea848d8a51f468

          SHA1

          8e3e01618b80f2e82c0f2900a11157965438b01b

          SHA256

          db75a98f947019118992657b1581f0523f49bfa6292ba98e59bf3499f80a08fa

          SHA512

          155f9ea29525163d02e1d60dc2de79ad27e1062a089974d2f4b63603bb8d87db69be9a94bb2fbc967865d3f2e968adc0c7ac944d952c8f1ff845837447e34bdc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d840d3c0732970c59d7c78409d1e55e8

          SHA1

          172aaef6a129851fe18cd8c712a6986b84a0d0bf

          SHA256

          05883cec479a9ee036f31df5ad2741c885b4a6a194b26783d2ea8b53bbf7ab54

          SHA512

          ddadba1cf05c51286ad8098bb0daa164aa8381e9d427b75f1dfe6219b0e286fece156356b201e64594fcf679eb1173e4fd3f2ce07a341f6cf8630eeb2533e118

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          de08c327ea3f0fcfa77fc65c606af621

          SHA1

          f720ff5526654a47753a7964d7477e4d88e80935

          SHA256

          555f41647ad368c87ddfc834e43d1f4261531270a90ca649b22251824fcb02e7

          SHA512

          aa36540af48f5086c347fe62a0e2965175aa09ab9966e5ce44d42acf502d891b13982ecc0ef159bfa57b97786e13fa6c0eca09237154984093ceabdc99f5471d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          601483c0410c9c4869a88a25932c1d2f

          SHA1

          12da1d937a6394fb3a908d9a7f6a514646d46830

          SHA256

          59ffa8995140d12744ec8eccbb3d1e8196c4b46cfabb2ef323c883204b9209cc

          SHA512

          eb842f2b4fabbefcb31e2db7cb0ed2ab411bd18094d3b8653cb56cf3d9f6276309220cca0e2a0c22cc0d1420515bcf243e22faa3ab227ae91d555fba9c90c69d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ead1d5bfd276efc49a2f341d72f6ca2b

          SHA1

          0c2cda9617478acf03583829e8d627213ce3e881

          SHA256

          6b79a3356829ba3332fe722170e4335dd2144678d64dbb08776ed6fc8803bbc4

          SHA512

          6eed9a36c526a9f7382788648defcf2c4456c2fbd6011bf313ea9f34085306ac71ab2c2ba7210b1958f52afff34433f1af0c768c559f9ddd22c8977b0ad01001

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4ffb878f0e55c3879cf301803325884f

          SHA1

          f812bb7ffb6a29a7cb0ef6f1eaed7f9ec480a20f

          SHA256

          a9c424a8492227da3e38c63d6de58561e242c6f3d5647c95922545b706f6a8bf

          SHA512

          503fda2f7b1dc8e5a8d5be9b616d468219963a56138a368f5d4e5076dd18adc7e33ab8b34ac908c9a784b1911cbf2ef47476ec2800238d37e453e5d041e91703

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          27b8fb2619341f9dcb5d2c8cde246099

          SHA1

          1f1b58ef23193fdf98675ae783e8075d4b89cc27

          SHA256

          6e4eeda4f3f80031fdfa8f544bac0b77951052e5913b5ada239d4777dae007e9

          SHA512

          127ab60759dccc5443cc4a2dad709251062fe03b32e898f0d7075e75c8f6e0680c221c56b2d41f3ae6fbb79961f881bda04cf47b9a01a8db35a444fd0b950352

        • C:\Users\Admin\AppData\Local\Temp\Cab316D.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar3280.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a