Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 10:19

General

  • Target

    62f0d25d8c7e3b9ca25699d7197ba0f2_JaffaCakes118.html

  • Size

    118KB

  • MD5

    62f0d25d8c7e3b9ca25699d7197ba0f2

  • SHA1

    8a1f2fc8d4ff5d1536cd89ae714d2482d8c80554

  • SHA256

    1d16e3954ea43834d0552ee8342a9c160bf6b2de3010fbc4e3ef47abc196c3fc

  • SHA512

    c9df81d5ece7cb6550a398676f2f3342eb4d51286eb75a3c9e7ea9a61d35eda14d0ac75f14b21e30f4933dfc2893a781285005474ea5496dc35db83eddf1c1f5

  • SSDEEP

    1536:STmWqhfzEBQ3sH3uM4T2jeUuyYle/xzpde4:STmWMzEBsUalMzpR

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\62f0d25d8c7e3b9ca25699d7197ba0f2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2880
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2880 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2292

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56bca2ca2a95851a3f202020b17e54be

    SHA1

    a24c31815376d2932c16f42e1272a4a1c9196653

    SHA256

    7589b49f21329e4730f1cd4713db22bc023e1fa14fc74288c2484de89b5cda15

    SHA512

    dc0444b967ee6600409c5161cc4492042a0c5374dd5d1ea96283231a5b0975d8ae1b2a7f280a08b8f41a1cd1b659455188d0586e3e1445ac3e49549675ca0177

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cddf8dba4bbbd209256c7b504cd9ebb

    SHA1

    38e9309351e3a05cb35fd698089807f8d51b3345

    SHA256

    c8ce84b93f2e76f0da094ca040591a01bd0ad9cd8370a20e988dfc361178a68a

    SHA512

    2fa93204a596831e0d4c3ffabd683249569f2527fb0aae4329c37dc79653186a941e01635f8480c7d9532eb8305187aa3b43b72c9af93a7d6938559b1025e858

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2e199f230da9b1f0de2025648d10d11

    SHA1

    136090b8981606c6b0dd88d3daf4f947d755ac1e

    SHA256

    4730af55cc5be9698ddc546d539c33c40008d3cedd9284a6ed42ad0c7b8df352

    SHA512

    c234286a93c2609a55b788276abab72b67b990c2533062777eca3bbdd1390927ebc88f259aa651e557addaf8780611507a7ddc88403dbb88e97c79c4f58b2497

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96d405f04fe6ea31e57f84b39e8bf119

    SHA1

    760f482d0c6c769df0d249e9bbefe14f011ff715

    SHA256

    cda1623c072d3d310d797e630882b554ce8023e53c41b602a63fe01d11084043

    SHA512

    5b1230bdc992f371fdfc175dcc7dc998d4621594d7ea12b7a6ea08147f83d93b12d77764a00cd9d3f45b0881a9e448d6df1c6fc4e63dd034969fc6e1f34a1cd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64af17fef7f75ff4ed29b18f4b92ae5f

    SHA1

    7598345e2025cc97a996df77ab16ffb1c1e99501

    SHA256

    0aa4fe0fa8075b04afba7d0ca75149691167cd41b6944b00cd3ddd58460dc4da

    SHA512

    d2749632e66c5d0afed3190af050858c1267c3f5a33643e6218332328389f9409f34fc96dabf35e65e9298c28310fd60ea1ad83882c43e8599a7835b9078564c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be5ea914f8c03366ad1659980a99306d

    SHA1

    70c90caaa3dfb858ed252e2ffa0f7db6d5995717

    SHA256

    4a3a23513b8342837134f7f17a3106ba8cc07d009d7a1f7004d5cb7f6a02edc4

    SHA512

    120a6c795fbd05c8f5144e2ba42304a28dd4fde34e1ad5c885db54d7ce018489ff73b94141972100a90ece14a02161c75f82fb371e2e8583d236227934d49f13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0050aeb60c0f3c78198dada6dc50631

    SHA1

    c50465d104d9d3736a3fa0c0dd4bc88abdaf0eb9

    SHA256

    e9f2299164f1002438b542430deb3c12b038bc488a5c4081e001d8a236bbf293

    SHA512

    4389f5e4a62bb672e6ab3c252d5134a491ebc2099e91cd543b81421605990585bd18951eeecf1ff85b9469b5ca551f5dc78612c57ab91f2922cbf3ed55939078

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dfa9ada8f69e87a4dc0f0a77a844cd77

    SHA1

    27b001ea9a49d1a23c0cc83e1da2acefd83f7d13

    SHA256

    af84d5ae6896a6e05556bc6ac674b3561adc85b830a1486ff69b37ce6aabf314

    SHA512

    42b4ec18c616be3c7af2ba7845bbe881d638c0bacb18b30a16f8a93d068a34b9bb73b43ade9fb17484d6afc2f6b0d9e44f0325f904733e3fb50c4d376c883446

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c5f57a331d9a8a4a7454baebe950986

    SHA1

    6f5190710f6b039d35968514e401b2c4507f4d0b

    SHA256

    591c4c4785aea92a1af37eeec6646569afcaa5aa10bed472e5dd8ca3e274668e

    SHA512

    c8328fd9163191e19d5f1c54495f1c501d5533a684abbf20bbc33de3600f0a7355e4710d7c93041627c7af3cc70673abfb4625984905780b2f3e6f04571e1d73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    186fb66b96a09a81c8edd43357b8ca58

    SHA1

    c4b26ab4b71c5b06abbdaabb8c3ef406e59a87c1

    SHA256

    d0e952ba2dca569c3a665544e9e57e4f74412d4d992f2aa395388892f2898ced

    SHA512

    3d71a1a68f20529988e3de0e8bfcec376aaafd71ee7cc482f45e55f08f727b32ea46557c26b868a172bf68334efc39da2b13b2dc654ff8605a4ef4a68fe84466

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d4c893c0d7a0ae324b20a1719258821

    SHA1

    ea5b5a9d1d18e3137d6b7e964dcde9499b756602

    SHA256

    82dd2a06b142c933b5b7fa455a367730a3987295d9866b16b2b745495d3ac797

    SHA512

    01e77e2fa22b9bc30f6f8e62e5690c3cd602d89d3962f2c236749b6d484b8ede986c0cd6855a917800d8141477d310acf64de40d246ddd40c4947957d31a2df5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    649f997378424fcbc2ffb38374ea6e8d

    SHA1

    ff094c66f7df7e0ab13bc6d63a34a8f251acff71

    SHA256

    224f3de13a01a52952955d7b05f2f4081744d7d9bedf8bc12d8cfca146d23fee

    SHA512

    cfa38b8558d38f5de4b70136086cbb102b74255fe9be906a890e7ea7b022aef2595b6d6a8b48d3ddc08e0c98de0496172ee04e88ba42b70c599dee36571e4254

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62e9ecefb7c9bfac65f2f5a900a210ea

    SHA1

    9a1ab63c3c00a7600193ae5c4bff3d739f7893d4

    SHA256

    0480783efbc21b66a57bba6e464ff9133ebc4bd7e1b59071c31c5d4a7ffc6898

    SHA512

    b913901117442b4a4c023bd52cde648a6456d18b2a292dc923cd7911da7ea59409805ddf4f0e8a1db19ec5f26836f89c32b11254243831da57d304335eab2850

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2db48d3b34fda667af74b77d33be3a0

    SHA1

    657a26ecbee6faf2255b4765bca24339edbc8b3b

    SHA256

    10bab336095997db2f8f8fc4f8b6f72e1f92bdb29082bcf10394a677dd80a841

    SHA512

    3c3ab31a0e3db59b932f2a171e17869f2b3db0ab8e9020bd047c60b7bf2320aa3fe98e6605c245b991d811b72aff4de117e1c4032fc76922ba580b8d397c8336

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd01f18b972bb0674d898084d93181da

    SHA1

    3d2afe2c1e97f756f9cc63c405ed4406c4782eda

    SHA256

    b0771e1c42232e839bd90867b20021ad7747a4427775267f828a83eaf12fe06e

    SHA512

    65123ca0dbbd47e48bf2e8afde9650987ee29f07eb439c88fe0a67a9d16ddf30245ea0269604c0654551fd8aeb8cae89cb04ad8be599d20dc6e3e7b817760cbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    866263d82cc560d90300a71aa165e7fb

    SHA1

    f0dcde0cd245110c82a487c01d917a0c9e4894a7

    SHA256

    67bfc51c5fe38182faf0326fe385ae18def10b7f57fc85e80bb483a74ec50e72

    SHA512

    4b2d65b75cd4d27435e5e08e4400002587c45a50c1057c1c16cd588712cc1eace3aa71b9375bf57b01ef41b40d42738d7a736ac359db5bb28ce4158aebf3a5fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    383bc0b7715197b5ebc16b337ae71521

    SHA1

    485ecd730535c357c567c221d59eb94b76640d2b

    SHA256

    e3bc4844eb2678065fb0f422e8eb47e21fcbf23378830a2aef620126f3a50048

    SHA512

    3969267263572288689f6eec2e6d752934494509d3fcc8aaab0ced04ec20e232c31aa5f411f3477bc926b285a83913c05e0fd7508d6797c9e09ff79fcedbb96c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5662414f2fac691e2d2c52e4a04efc8

    SHA1

    47de5b30f69777d892369598fc746314a5c9a92c

    SHA256

    90f847641b0632dca4fb402d969419062c98d58e166b74ee2cd24ede819f8d0e

    SHA512

    21467717de9ad0e561b45a5590b59f365801b10dcdaee0f1aa78f7c28a8df4de30c5df7ceeb35c07dbbb04ceec45070e1718b1029ef1f4f9a1494ac33cda99f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    03c94a026f5e2d6ac8ce673f277c8904

    SHA1

    4249bced792f60d1ccef3b529fcf4c823796150f

    SHA256

    1a43fb60392eef2c5cf34800962bfdebcb484b31eee6d506f2acb7c616035e0e

    SHA512

    6f11c2839571f76195fb64a5c71b6a35ef23d78d29d52586782965a64ac7f57eae79ae8ba91760f17fd4c5d311e116fd7f1f706689ee1bc274e39cb9a4558a8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2083ea5fae20c4f5cdbe9523f6aad153

    SHA1

    deb408035d438ac0d3c76ae9b3d7f3334568e379

    SHA256

    ce41c8b7a1c459132f0fb29ca4a6ecc3f6fe2952e209e52cd0f087b382e90175

    SHA512

    d359fcde5c6451f6e8d9ef12ac42c4e2c81264085ad5b3d6a68b3de8dcbc28665f47ca6ac48a82f091e2c21e50246ca8e2b2f970c8e210ea2a91b04c47c80517

  • C:\Users\Admin\AppData\Local\Temp\Cab16B0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar16B1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a