Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 01:13

General

  • Target

    5c6d3eca72e91019d1f97572c6074314_JaffaCakes118.html

  • Size

    126KB

  • MD5

    5c6d3eca72e91019d1f97572c6074314

  • SHA1

    90fb7eb82bc973373a04458a567937c0d0651177

  • SHA256

    9b3a5ed9e165fb894bf2d0181b0db59d18ef51083b55335db4a892b0ec69fcb0

  • SHA512

    e1817350e975aa7e3ce02580b0281555b77e32ef6a71746c005e0c92a1ac5abd900f8dc186ad073175eb8dee8e24fc1581abd95eb2023a09184a2691fb36635d

  • SSDEEP

    1536:7U+6MZyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dK:JyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5c6d3eca72e91019d1f97572c6074314_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2804
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2804 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2512

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    879694f080c2cefcb7c5c29d18d91d72

    SHA1

    296777c26f50cf4b1b6770e96d134c931e9b2419

    SHA256

    59035b9500ef10bb304b5868b1fa27c96d81d9230743aba5419bbaa9cdc758a6

    SHA512

    506fcab1fac6b759760a50c2897435f74ae8b6b6bae08d9be31581ca724a922c0ca0461a7e06f8b22106b5d65a4e89e7598245b747560e3295627ef57af7ad9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54285fa65887baad3e924e2d2e8686b7

    SHA1

    a2e6afef2e128941ae5c74a281f03831f3052801

    SHA256

    495e75c50912e627cbd9906a70725a0a7314d3a1c0b09e0d6b4f602d329a894a

    SHA512

    c67c8495d93c5c175d4be08ae0ab978f64cfe8fa0612796910c6c1995b7533c3d8c162496cd9932fd4cd7b06c7e741b7a3e8fb13f5fb4172dc2eec050bbdbe5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80d479499ce80130cf62db562e2cc8b9

    SHA1

    9fd6cff4ff592b9bc306118ff193e02e4cce3d99

    SHA256

    2597cdc15e638d7aa84fff72a08ac6ef47fbfa2eccbaacf48d3bd45b161ddf3b

    SHA512

    182a77c49c5b0a4bff67ec19ece65693bf64046993341316276edc15fe967b5762dcd8580dc1a01a5141135d7a6cabd28cc30f51ed9f3cb230ae1fbe0f024366

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7004226436e473520434f3a953bc9e5f

    SHA1

    a175dcd8dcf171c3dce783ff0be09413bf9a1c04

    SHA256

    e7e6c998b2f3c211422d979765f68cac1c1723e8d607f6e23d2be0032976b9fe

    SHA512

    307e744dde5bffc6c725beff5ce480ed0beddd27b5dd8d6d49afa51ecb618e964a453e1bb842f75a745e3e6486604fa0173852de953bd06b7aea6a79a915a368

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4af272885cf5906f3ae3b6997e09102

    SHA1

    482769c67753a678be3b7578cd75a089019e93b4

    SHA256

    1899a2b7dc513a665c754bf66a05dad0e335953d967d57d951e55a5e78fdd587

    SHA512

    d1ca488c2c67fb95a5880514ed419df42f93c334e34a8a67c6d626b1a0e18de27c89d75e4d003d004d4ceb222d7e97201bd11e1bcc2dc91392062fabc3cc6871

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a185a4faa686e06d3fe8b44578f8e03c

    SHA1

    9a6d54fe3510a11bf16444311aa27d16fc3f3b27

    SHA256

    b1d2355955b36be85684dc08538fe8b2db784db70074d30c5e624f1b96a8bedc

    SHA512

    83ab1eefc203dd0259d039431a6f6604e174d5e5c39921a2bda69136a9a2a89585a15394cf698198ef66e7d6a003b1f79273f6cb8b5b1ef78a40bdbad30312a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa7a0edd861aeb672f0b34104685ffe4

    SHA1

    10e745cd4792044c1369813b0e53d9f99b03b1b0

    SHA256

    afeed17acdd8ab47f39bae87ca651cf30e129924dc1df6256cb68aa0b349b177

    SHA512

    18a644a7ac51986ec04459b53ad19958b6489a05817aa12bdbf4bfacb5fc09b02a3fb9912b1d5adce4455b04adc7537f807832f176ad8ef87cbfc7e3e1fd4cd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5655ef3862de9caf644d4de82abbaf8

    SHA1

    b60c2449bb0342e836708fa599130e2f67dbcb08

    SHA256

    7a6e679d062c92f28e6f04be64133a6aa0a1e34b4791852baf1d3ac13f1d9165

    SHA512

    051ac81c86485a1c51c32b9d932d0461043fe116a5a5d9d6257ef6e2f9f0b7f70d49544cde4a63a6a53571772670cc84768aafdd9264901e3355aa1b06b9cc00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5abd80167c55ac7ca01d5821cb2cadf0

    SHA1

    be382cd7c89caebd831aa637ab76784fe0a548fb

    SHA256

    04fc82c04886f07cd52faadba957fcf9151a426d2eb4850d50ba6e00b1ffb744

    SHA512

    5c2cb4449f1659a7713e5d4c184ef50709b2792d44d523d0c8a7115ef7f25281c5257a4a1e02c6f8ddf724e1161d9bd2e44b0172bbdb411b5fbb3c7f3786f5cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8fee0f494512b33492952c8b697e512

    SHA1

    095de50014e1a7e4394aca1d79c44a85d0fd5ca9

    SHA256

    2d5e727e345e0ae5bd78eabef180e03ac238f85f1c3dce9213570fec736ec7dd

    SHA512

    949656351f208c063cefa452c52b411b1c61e9a5ccef9be1ee2d611ef61c5d8a2fe53bdb03c495e1696a07bcb375fb6e66e4ad1f8833bd586c671a043beaea1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b870bb66b599db1a12a7c34ad7aebf75

    SHA1

    914a5985f4717387d0c38b61961d58813be92630

    SHA256

    e551760fe863ff967042233879e20c3155e8738681bd905f604ceca596465348

    SHA512

    3caf42ece7308fe77fd78bc94979df626ce48135526ece12c446be48db626540a765bede16a15f4ad4aaac8980883f33f9ca7ed0131f6523b8050f0619d6ed64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e6713e89dcfe57c374c460160035281c

    SHA1

    5899cbae3ee6df624623c35edfd630ddf863cfb9

    SHA256

    525b9d00b043eafcde278fc738e6e7307b47b1774401966dcdb440496ae042c6

    SHA512

    164c2083f7a45bc0401c9b2c6c952816ad7944727df3af3ba3c5f3f04827f6f7b6a36790858ea99ae797ac5a78d9701b58234629373bbbb05bd89bc1b2579283

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7609696dd6417ff5ba037278ff88102

    SHA1

    24300334c82c64570c7e2092e5ab53a096685e5c

    SHA256

    54af100f7313adb218f4bb7b3d04c49e11dfe6d514ac1faa54590430d2f6d9fb

    SHA512

    3a08c4b919e30408721ae013de5873df04e9dc8656a41a156fb897e960507178c6ed7af07545faf944d4fa4e699f6739bb8ecb91378ef5f613912b620a3890d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8445d4b1616d19f931f842b7fb308393

    SHA1

    10d4fc3ff3eb82269a4129199a42819d9d114bfa

    SHA256

    281283e321022393c823dc93b878232efdd50bc7b77dad08306e4266885f815b

    SHA512

    51e8e3a5eae1c6b777eff837bb0f55e37ae0b84234cfff760df1adc442637ab9665e4452a09d5915b9bd2a5a59573174a0d25f9b681c5d57adbd1e200be81899

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf8afa0b8f31d0fb24969764ffb31e39

    SHA1

    0d63c32e58f578f4ee5db669e7a8993fb774bc13

    SHA256

    af9717b9532dd009f86fc163a6d39fe582ddde3a836214b36c13bda3bde78beb

    SHA512

    ceebe150b86c429efc05e718ec5659a4552a90fafc42727f085582d0b5889760d889bc3c88fbce5ad5e518e168ffb9f71a6dc1d48cbd9f260d5bccb95fc13fa6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3011f9325a30dc3e81e006a75d3a747b

    SHA1

    defd48ab09b356aaafb23e79c80b8272e35f9f09

    SHA256

    b421405ac78140291ef5f9a4872289448014d7cb2efd478f3ac0ef1befd000ed

    SHA512

    2e7629191bce6de90eda5429e7218964b075623ace76bb58c7607cb5441b19072a6eab6d845bddbb6edd5562b98a8de474d1fa3ba5e8df53beb3ad66e77b8a1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    144f6f88c5b75a566a110a72893d7d6f

    SHA1

    963bad10927ee6b7aad51857b8cab01c7c29c4f4

    SHA256

    8b743b9db8264d8fbdfe9ac15ff9868f0e8695a7710e0cea2b8bf36d420f7cd4

    SHA512

    bf6a80313e0b9e8439516d30f6dd14492cfd596e49fd5c17fcf9bef168dac5d892ca561d674aee5816f96f8e92e57021b8a3311b1f8577b46ec92da895e8c1dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dff6f6ee9c266ece159a3e1e4aa206d

    SHA1

    da330c10f9ac9d484e33b281aed56ef1ed3c8639

    SHA256

    7bab03ba54babe7b624d1cb82f84d3f6da3a0d65bc9898e43ba3d3533fca361e

    SHA512

    8680e38ec0bf3138fbea15f22b0dd022f157403b4ed6676dde55f8ba46ebf656f384127f41a8dbed4e2d871e4125179361b0b8321ec283239c4acc40d332fd62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1aff22dd2681cec68fc1398d7af3ddeb

    SHA1

    7625e995a364750c71ff6a824abae35ea3ffef44

    SHA256

    b91413fa8e8a56c313476333d847b2cd4939d6217a0dfb7fd164f3f70326046e

    SHA512

    fa0f9b9472d3748031ef35d4d27e39f3d171859bc4830c445dbd9522991217fbab76fdfa49a7a6ca194597bcf07b83d4b7cf3a780c42c08139dd32f4a328c1c3

  • C:\Users\Admin\AppData\Local\Temp\Cab37D4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab38A2.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar38B7.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a