Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 16:46

General

  • Target

    64042b232f46c294f4f8e2a22243300c_JaffaCakes118.html

  • Size

    23KB

  • MD5

    64042b232f46c294f4f8e2a22243300c

  • SHA1

    902598f7477a30a22004f83ac8f809f3e1aafd45

  • SHA256

    08767ff5f8ac2afb7ddebb042db86b1765fcc07da6e078ce3dcbbbb635a184a8

  • SHA512

    87e775d877a4e3709809d86433e84ecfbb4f1827eb4b339b6f260a05db2afd8794b718c262de3cb93c7d75a494d393e474c5486096d21d722c2927256ebaf2c7

  • SSDEEP

    192:uWrEb5nHMJYnQjxn5Q/LnQieyNnTnQOkEnthFnQTbniGnQQCnQtYwMBSqnYnQ7tk:7Q/nb7y

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\64042b232f46c294f4f8e2a22243300c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2424
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2424 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1824

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c5f22af9d1acdb68b58733394085ae2

    SHA1

    12c64882bffe551cddf8d24b6b427f4f1f1a0b84

    SHA256

    e341f80a19a878419a90b5779bb92897362ed60484221770f746727a16f3dd05

    SHA512

    30cf687e8f6fde661d31323c4cea55f416c301807ca00c607b4f5f649c4eb6a3b2cd2ca368c29d6fbf4d6b00d8d3327905c169f432d1b9d91f43a692ed3e4b6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9035410b0a0cd53219996471115bc7c

    SHA1

    bf659c0dfdff938cd002a992bf8a3a1410e2c925

    SHA256

    e97213438eca12363d424796875321ea4ac127e9ae4c309c53182d19cc3ba681

    SHA512

    3191156b1c4df21f5a86a7dab150df20ba1fc94b564b8357272d209081e9325b448f2d32c9db6c39bcdd8a6d356061388affbb531e172fb8f7e726bf9d83c96b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91bab44a833c22c6d2871772e6b14309

    SHA1

    c150de6bc4aa153af2dcb6f6ec6c128e9069f69e

    SHA256

    d825e9710b9906740719d4543fbf4870ca2d5b2e174bf38a8cf368f223abf688

    SHA512

    6489a5cd91aad7e03b22d5aa7c53d07fea30c486d123a6a7f618c5e5a11a50632164fd774c09a91a6386d3dbc66594066b1072319b8e38fd04431b92160c15d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9906459d37cf8212f11b7c26c98dd81

    SHA1

    347976571bdff1c22e489d3734bd79762b01b4c0

    SHA256

    e21857b778e5739fa1b2b8aa029adcfe88b88ee27188de7038c4c5436b5b6baa

    SHA512

    bd84f2a0a87adc67cec812c9f1a5befdca3fdf02494ff8df334cf1d6074333ea08b65c79e10a4443e770f9379727672a86598275b91f1b6bbcb1da860fb6c9d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b8dcad05afe8f5fd54906aa0a620351

    SHA1

    9163d2450f5158e1c9d32abd6984581860fb0cb0

    SHA256

    4e377bfdde4da82a1ec38c62af5792ed6bd960a4c4a56915086dffd381e60205

    SHA512

    21e60816f7ad76a5c6b5e260e1bec52355e869c6d14f24b3726d0a8c9f6fac50c509bb0bef38bb3f7009016382c23fcb58b74783f23747351791d56ea36e2a4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1a5c44ff33e1689e94cc54c460272e0

    SHA1

    dc95947bade4a42847635d653b714eeee1eb350d

    SHA256

    3a6357070ecdf08546a6ff207eae5c3ef93010e995fb6b923a48cb1b583c3c6a

    SHA512

    d37a4c5718fce170f4146d69df7e2c251566ad5ef6f2cdf3458e31e02c41150c622dfc414e91689c64a6c9fa796583d3204af2937cefd454073e9ff55c96c826

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f38014b63fbe540603ab3ab12b9af7f

    SHA1

    3d4ec899098c56916d57748c7c452aca258c480e

    SHA256

    ed405b102fa8d0a760ec130d742e45e3eb280848f58545ad2778691b76c2260a

    SHA512

    07622aa7427577404adc83b016417d2975783862d3d7f8e3d95c54c2da871b88ede6174e45c592397757ddf7f7dd82523f2067e5293943957db5bcb948371183

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f991b30d28aeb2ac574a7069a999535

    SHA1

    9ec75c479566bfe82fa43e096668724921a202e8

    SHA256

    bdf43036443e6556cbdb77ecf42d3073f437c5d732bcf36cac98b0082b368a82

    SHA512

    e04bd5d7b2fb12541752d7c15721b9d53c57260f3926b85cca8e1fc57792ee350c509252df38cb8b5e44f19724d5b1f218477e2b03f993b3d333756031fe1207

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37fa8d4213ff68dc4e115366d170047f

    SHA1

    ea3db35bf9c8b4a9c538f2507cdfafde19dbafa8

    SHA256

    289317e269a47ef91929e1edbacef52135233feb720e6053680e9b59706ee952

    SHA512

    c56f8bc4e398932c72a921405f4f20ed5add70c3fd4de6d3486e83b94207690d4629df9191e9eb2e804331b13298b31c2b167ce7ea2a80896e1a381d94e99575

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2c41dd70975be3abf671d65cb82875a

    SHA1

    67de22abc5e462832393dd5c32e133e8dbe3c400

    SHA256

    9462092c54bce4c9edf2283ca8d8379195c596ae7327b7830c2f386ee85609a9

    SHA512

    6d99185c61cd73dbecee32f63d6a56be28898d8eb2b7db68490926b0349a708f7646b97d7aa7a5c7449f17256c7c454f1c5a252112e874b0378aef28469c3630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2c07884e8d475a71b68503dc026bb0c

    SHA1

    d30ef774f2ab144592beddb2a16aa37dfae68324

    SHA256

    92f57935ea40488e7dc9b955e030a0032ea12fc1809e12f85972cca453018707

    SHA512

    8374a1c75478a5452092650293e4c6b55f32023d9be3259ae500b700c7929415725192ed975a2f562f634f5110a40a398d71a2eeb950b9743eed8da76647e46d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b79be19a86f89ce836f24f3b3fcdfada

    SHA1

    d2d39e34408f170102bda1fb6c1f4a3aa77e1400

    SHA256

    6e64f12510b6e75ab38141e3321ab8a3d00a6679df319ea49448ef8cfcae354e

    SHA512

    4e043f3a061947f09526d14ad6fe0627218455eeb572ce0bcbf35ae7bf096e96d74d038aecb33c2c7e363628fa9d7d964b4c6abc9d2be9d059f143d93a95d775

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c0a00c6c6dfee9e64c9089f49401d0f

    SHA1

    3e3aa012132ccea1567e704b32dfaf14893b94a0

    SHA256

    c24687037e0fe3fbda00e52bb3f6fbfe8819a7c521b5ee7893bb40b39860098e

    SHA512

    4d1bfc4e867e0ef3d3007805e69caee678770ac20989e11021c03c324c153ea7af876402bedf7339b33ec46236c4c5912d391a5170ab3213b9cfc29848a0e7bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2322774198bb2bd4831249951c1586b0

    SHA1

    7428d4cf55f10025b3815430ac617ad35f403ad9

    SHA256

    361898f9d1519d1f626327b1c9d71cd1a155eb133974c28787df95adb98def67

    SHA512

    ccac5e078805b0bdf9dfb2c94fd69c13566d5ecae569fc07d53a317b0709d8b29987be6b117fffc77482ba14cd0ced8d4e429a2daefd7165fd634434db0a95f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35a0b7c382fa58d58ab41944e0b47c56

    SHA1

    e079427f13f27900d86e0c24b76357f43f6be188

    SHA256

    c927bbfdd6d9e7a0114dd5a62df9329efc91490364a54309640a9cf27221eced

    SHA512

    d6d9438df032fe2be898682353a4922e8eec0ae6e152fb1be457f1dc19a707900c729e113bf18f9b90e4674baedc17bc47e36a6caf1958c47bdf6430ca2ee933

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d9937ecd91dbf790ce4e97487fbd928

    SHA1

    37c75ed7c49f23b8a6f98737e43724ebe2982f9d

    SHA256

    df4f6c9aac55033026901313b1ebe5fad9251e46013457c995402ea8df7cfe94

    SHA512

    52662cc601626a2f1b0cf0620bbc248e744b38371cce3bb6bb7b0f9b8f1ffc88135781e2e871c1300723b6f5bb706adc0370cf093c253f277e39bf533a18a11f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0311937bd1590cc6aadac12947201e83

    SHA1

    eda01769c9435c2e39e389ef457db717a3988ddf

    SHA256

    d73a4fa78490fb5f1e2a012020e32ac93073f60b1045ad2799a850a24409d460

    SHA512

    86d5154bf68038ce2bad862c022c0869710f2ea7be43864d362f56fbe1e445dd8c40270bd7fe94606dec9a46200cb67a01d67f9ffee64b887af40b0d8c10f4dc

  • C:\Users\Admin\AppData\Local\Temp\Cab37B6.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3807.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a