Analysis

  • max time kernel
    119s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19-05-2024 22:07

General

  • Target

    5bba338777e8094b3e93b7c1a6585459_JaffaCakes118.html

  • Size

    31KB

  • MD5

    5bba338777e8094b3e93b7c1a6585459

  • SHA1

    79b3c23ca9f13d4e10bf8389f8f7a875483c884a

  • SHA256

    63c5b34703045e12b52b975021b9a69d44ecf9e79fa74499cca26f25828f0fbf

  • SHA512

    6720c32763e3d09bd2ac936e432a8a3f5fcb90c8e56e0151d5187a2c889854de5b27fb3a7f445bc522087456f11090b02af285a8016710cb6068dd1d5f55aa5c

  • SSDEEP

    192:uWXVOb5nYJnQjxn5Q/PnQieuNn+nQOkEnttFnQTbnBnQlMCOf4AdRyFLqDxcYLut:1GQ/Ecw8yFuVpLkZQiKJqCQBOGXt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5bba338777e8094b3e93b7c1a6585459_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1abb7563871a256fda95fec03dffaadc

    SHA1

    413cdfb26057c660823db465bcc362f887b1356c

    SHA256

    29c038d913e6485d1e61c95f1912af8b7f2a1c5c0cc9848c3f231758f7860b48

    SHA512

    67deaf5bd8b08163da9f40a674bfbe983946d4690317883d6b443db4100ad6198555a614e1b440bf77045d38a8b39fb3a760f0e7d56e4ca4463fa40956cbc80d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cfe9d4bdd868e873a543b6068319846

    SHA1

    4005f9a2a49745f5728aba7b02ca87b4e8a129f4

    SHA256

    43a076c17e2b9672e49b4fc787c1dd1d52f60be47a5adf4716fc25d44b170458

    SHA512

    ba95f0277265ff0b42c328b39855c46deaa6f910ddbf0a661bf9e7f70080ad534c824feef48dc68f8def21cd9398e370d05633b0daf7f2773c9401f03419d192

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44a2cc470140f7bfb6e8d4d20d25d776

    SHA1

    009edadc606e55054555f7bd0994ab0677dc0bb6

    SHA256

    dd30221d124ec5bd0c9c928c31a928d3edac262c749b7f164e81482c5a0b1a04

    SHA512

    7d8815b561ebfdd4d27fd97204dc81d744e7b17e4dd47f6623cf98140f5c89ea14f1a794e1726378c9cc0fce19fb7023ff5749912e21a63c017ce561cf75bd64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2999f7c2f8c6d2e6c8d8448f3f936193

    SHA1

    940c1a05ec13d73fb3738973b77e6ccf519601a2

    SHA256

    db35218f2135e9ae5b58012efb45576a8af6edabf940d14dc8f338ca744b9009

    SHA512

    f7f0b656417b8a24393aa20126bf0c8630dee4656d16eaf5b2b0a13f174d6839ceebdc063d65965f36b8db4efe135adeb3a11852c5fc499e6758a5c3e60ebf0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d775b3b64a4d4cb1cf57cdef59da4272

    SHA1

    ed9e06f5afd670998baec4bcc5ab4cd6fc3d4360

    SHA256

    e43032b1896436db1bc033c30f1a9e0a7439ab73a5e5fbc893371b12c2ab253b

    SHA512

    b797177e0a0365decb2866fee15dc4d0f022d3f931b32a4d5b823a6b3e4acc82d545d5a919975f209a2ccf2c06de2fe5acbd95b17ded9c7ff7ff1fb2c22a6e0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94bb11854cc62d468ad423b2f768f564

    SHA1

    f246da4e4dcf314011196ad50b56c36a3ee28b75

    SHA256

    a0c1190b34fe75d9db682c4c1ba8db3cb5e3d34bc0d41d34c42d1bddd69734a1

    SHA512

    ce51b0b47e16ccf1919669449a0bc4ec801426adc384cb08be08193b4281b1650dbc7aa745a98da6bca9b28119420d51944b8f8b0ba4e4eab6194ff010237159

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a986ef0b7c983bd61d677c51282e6cc0

    SHA1

    6ab0cd990d2dc9c4940b406472b6c93e291ef277

    SHA256

    d865103abc4ffe98b389d0d05e0a1bd98c1597e9d18eeab8ce00c733fb5566dd

    SHA512

    cfd485646de34216c4b16dfcc2ac089e14df63a0c26cf85ec47c66dd738deafdd3446c77f3b9a09353d912c982b2185e68e03c2247c0478940c14995c52b96d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4686e505b08fad4a7bc077af497d5a41

    SHA1

    fa36df5caed63c7945d9831531659188d78bc8ed

    SHA256

    ce058d1c678bf61cf9af98d8bcf1606853006185fc9fc1bc079bc5ded6b73bf6

    SHA512

    914db24f11b27641d40a98e545e548b5fb78987c5635adccb71baea6c0c5962c4436de43e109ae0398a50118fc4259c364a795cc13809017ad71a0269fd9160e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f52f8e08df3bc6f4d03025606841147a

    SHA1

    66caeb28bb6c11880d1de578613ce851f11c8969

    SHA256

    eb29324354b334b41759fab6a3c71b749ade0e36b83605d7374fa4e1b862eca5

    SHA512

    d19e00bb154302e9e9e4fc63c3ac9c567ef57e1665549ee79958292a8bb8fc36f0f7d4966ab6d8ced5f8de1804eaff2cf5bfe4b2646faff50fe0cc17838f9bd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d42b693fb3b50f07d4ab2043e25a62d

    SHA1

    80a778cf4be20759a585c1b99b370528862e09ed

    SHA256

    eede49d542907497145b254862689c1efa7c7894636e1c6dd49631ffecaff725

    SHA512

    f70df192fb4d7751ba8eb2ed2c02aad269438fb4befa052d01281f01b625397c651f8a12b00da4881d5c951088d5e593d3fa0de860845e368c59e6fb590fcb06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c2dbdffffb9b3f534f06c7040e279ae

    SHA1

    9537c757153c7e692c6013d088f562917c85da64

    SHA256

    a715c64565eae0ebb1125f272c2181045b5737ab18b268b23af0c8904f44a60c

    SHA512

    85a8b36729b06e9f84583976118876b17296cc4214e3b0339d093e07ace7c5ec61c4957678032adb2396f3383903d0acd44beef6a5904b15a0d72c9af39298f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0a36c3e8ab942b71749a9423cfe97cd

    SHA1

    463dc07b1d086e775a642bf43fe4dcee89287402

    SHA256

    6c4ee799193b4cdf4dc8295d971b1e08d66704e4429ae1717a80929abc21cd51

    SHA512

    c2f2a68a0b0018615c667cc6eeeeff4b2518a68209df29d3269cea13c1aeb89ed111c5e6b79efe57d25cbfd48751614ce942db3cde9f0b45d096e06d5d330748

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a136ea2c9feff52f4822882e972cdb91

    SHA1

    38a97b4c04db9ad69653803f07ccbc948c1c263e

    SHA256

    905f27e1be1b4514fe561aed4dc1509b23627fb6ea2b25288756a87680e4840d

    SHA512

    4a5eab629cc4a980b270a7cbb7636b34eefa63a6eff88928dc999503ec24d43e699e6d476c0032d6740b4ab4633a56e6583ecfaf15c0cb33043fddfb0c3189d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c2a3228d668faaddd470317506a3dee

    SHA1

    1e6429f95d6e6cfe09e37d47623d2768d384aa2b

    SHA256

    7edbd3196fecedf752391354aef63e8ff2096263471cd399ad752b00056d1c58

    SHA512

    95b3641bc7d486f615e3a6b5edb78fd88e3af35c1e266a1ed46d54cd773581929d48d948478641cb5e355cfaf4c7cd4e1a24a65ce312ff1f2a0210b7c8efb7d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a25a1489fc88bc1166c22f4a8d4d3fc8

    SHA1

    306f33040b106d0ffd8fac5463b66cbc94e9d115

    SHA256

    a3fb30e7a3cdfab44baf1a3add9a01a6e1e83d480c8637a14e47f29cd4451037

    SHA512

    aca887c32f562a7ad87955629eb3c1b1a8919e65234e53e311398925c321b9f0d561e60e657332d3d5a6a335c9339930b469ad704a9b5c3b737982499d13c8b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d996b0e2954e16587923db83b65087b6

    SHA1

    c185f8d34ab961696d0155a80a940318ee240b3c

    SHA256

    56514bb4b12541c6ebf4a79e1031c42efb6ce08d7eedd7f9abb39b2c3c889a4c

    SHA512

    2fd9ea673e9aef2f18359f8e90dfd9e29b44f540cc0367959a564b29cab8b22f849125bf13dfba23b9677cd779999666a72b924e2db96933d8ff2537ef3478ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0065532790de4ff1629c9ef30ab9cb6e

    SHA1

    6ff0e99f8bf41da5a3fa571503f2f46dfa934240

    SHA256

    044905268588d8df988b4503cc967d8acc22009d73bef05a690654642644644e

    SHA512

    1ba924bb861d52a52173dfa4fa696f407895a6a605718e29ae612b6c38e73cd371540acc095a1ca3820c328e034b34d2e948ec21e7b6a5a762f349d481e16fa3

  • C:\Users\Admin\AppData\Local\Temp\Cab2A3D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2B10.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a