Analysis

  • max time kernel
    135s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 16:10

General

  • Target

    63e8e20c7df69650199c5fedf1e76133_JaffaCakes118.html

  • Size

    24KB

  • MD5

    63e8e20c7df69650199c5fedf1e76133

  • SHA1

    e186fdb3c08345051e5306faecc25320f319cad3

  • SHA256

    572b125506ab74444d1f15db67c007670fea3aedb07a2a8c35e69be36e84e8d2

  • SHA512

    e72666581de0c9f25bac1a9e7ffc65e0c999279792e6778b0fa83bbf4bc4ebecc283b6dc75b3b5a6beda554d4adf2c7efd65ab932a9cc97ed2895eeb689db0e4

  • SSDEEP

    384:Uyi/TNieoIKGXvhZBMmpO2+/r1o5+nresaqovR6yoXI:UPk5IKGXvnCmpgD1XXI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\63e8e20c7df69650199c5fedf1e76133_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2656
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2656 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f670c8640de114e46d2cc03df1a68f3b

    SHA1

    2f74ccb880f0b1b4203c1e252ebd84b06b7bc57c

    SHA256

    3ebcbb59e90a88b9741c13dc8817d0daa46ab7c1e10cbf797dfc76a9e80d8453

    SHA512

    2d99443cbd41b8dd77008fa60074f843c1f373e3a2580d223ab0305ad66f45cb39fe0895872acd4de4586e5aa68376b5438a9a82d847bc63c3033932067e593a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9027d9477aa3465d3da23cee715df12

    SHA1

    3ec96ec65a332b973e466ed9d73101a7c6426811

    SHA256

    b19441378409bef89d32b1f5b7d808331ad9668ba5362dddde8c85ec152a08ad

    SHA512

    1a155554eef17927515eff2c68acebe95a356547ed62c5f8606bbcd6ab45b1364cdbe15b582d4acb0e1540fbd80d0b9a7360cb9a0b11b448226769e0f52cc964

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a379bb9dfc14bcde3ec79db9591c8658

    SHA1

    6b5fd5b6a32c63dc6297ecc1c8bf3c08ec87becc

    SHA256

    9fc9051dcac5a26ca7ee798c74299e68b6106ee18e7583e8580a3b08974d5fbe

    SHA512

    b1904db7d47a294961c6ecc5548867ae4a2eb296eccc23d8e3070272d1827ecca1fd5beb1a0f22deb27d7dff12316e4dc3eb97d6bfc5fea020d9af63370cfd74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c383b95093d5e82051e6de48892631f5

    SHA1

    4e24d205ddbdc196c18712633295c23fd552bd54

    SHA256

    a9a85afec2c905e6fa3d47ae486997816f2b5398d08069c383be536dd30437cb

    SHA512

    fa2c249c9a42a693aed0979257a4c4f5a7e5f36266035734b64d750dfadbe1bde1e0e11283ef21c4c4dd19fc7716425ff1d60dbac0c8165862ba748fcba2e7a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1e999ad3875fa3de2ea25692eca724a

    SHA1

    73dee1a66c0b02466ffd87e334e8d90b5b2a8ba9

    SHA256

    695b30295da2455632642816041d182b94e1c3ea5c9b89c202c5f2f485cbef64

    SHA512

    770615cd98e2387e70e2e13fa08be550a951ef5b0abad06d23261db69cd46d50fc4c1b55efa31960515489ac9aa039e3962d41d7fe941ae355d94437892fce9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    052ecac410a2f3c5e4cb9266ce994ca5

    SHA1

    e263e1e3919a2e63195c0fa97170899afacd9faf

    SHA256

    91448f96d74fe2ff891999e7716509bc5af7ec9215997d35232dda4907f453db

    SHA512

    ceb6b1f1e1df142ba86d7bdd2789b452c47dff690e8ff7eccb7b16e2c5797c36fb50e508e51aad66ecafdfec6f9360e753afb7ee4ebc59b31efadbc29dd954b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9b7316aa23efc1bcc21b9f64a520bf4

    SHA1

    0e72f43dc1798a06d0b8acb33472380c22923d50

    SHA256

    516d542042b8330c42b3be7abd78cc4a482e9142181b58d73d8f04a46994f005

    SHA512

    77996089b92bc1b2875c1ded44c8730eb9ba39c0954f7dbcb324db88762f2efa94fd3e92b9d7e2341e63d6c06c0f741f868a6a7d0108bc815e0296cbba692646

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72bfac51589f80daf0ff73d9ba829066

    SHA1

    5acc6cc683e32edae137973491b9a6b3e7fa076a

    SHA256

    bb9c566f3e960a64af0a33351c6bda0aca5ab5d29f42da0ef05132144ccfe2a4

    SHA512

    98b473be657992f5e54df4fde1d860b508f01573cf84536a778032d3ecb070b51a76ce5debc30ae49890efb50c06d24b5732b75606fef8ac7a5e2120830c1f72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f51601c4a05e5dee880eefdcbeb49c6d

    SHA1

    26db9d270a315fa2b8b39a7c6014cfd42a685e91

    SHA256

    d5e3736bd688dc1cda79d6b0929d7e78bcd77ca302b9839f780df3452cbb242b

    SHA512

    c887e112888dcf174c11224c2f9056c52fef1405d7b0f93755c67683b8aabbf1db729c46b13e1f84a40e51dbc07c2825109dd9886b36929851ce1d402d8884ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48045a764879a18ec6aaa9f69adbc384

    SHA1

    d1e6e76e6251e18eba11774aec44dfe5ff608a02

    SHA256

    cbc8069a36c7bb28065044efbb0ad7f222aab2de549003ac97ecc0b2033ea58a

    SHA512

    f237da8468b788bdb4c7eced8fb0c335709b7022c3c2b65be2b69ee3ebcdd28a65118a4cdb8e6d8876c6e2eb067983e21059c326d14efee02dba2550149a8f2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50bed56d44e2afb15ad55d6df53f67e0

    SHA1

    21816a723160b4e00560eb6db82999da7a276c41

    SHA256

    9f6c6a371d9f930ba93e836af6e48de0ca450a5ad69c1fa9ac233622e3d92f1b

    SHA512

    3fb406115467e9750b75aa4c06f3009a91ababfa173299c924c05d6ab703d4fd6e4dc0d64a6f8f1bd68e918c6d7a4c26c4516f1b70f2b296755ea1cd6434253a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d3a2244cce60dc0859f2b0b04100504

    SHA1

    50d87239e26ff414eaeeb2e8f6e8b675b4e06f1e

    SHA256

    6a431625fa00c6f2677e1d47b66e5f34084312892137b6571311c865fd0b0855

    SHA512

    9cd2be9b4d0b6ed454a2d4336439a0014d21c5753c1921c1751db968ee1a291639a17758c29e9439f0685de10949a9173a54ed4c07b7144b1a06281cef17dfd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c70025f246e06aee1ba663b2fbde1a3e

    SHA1

    f0e5ffb2fa9981f2b2ac9a1fefaaa45e432efcb8

    SHA256

    9a7878abbeeab45989769e74999dd506e68ea3a62c18c39255f43367f43ba783

    SHA512

    35ea1e4e6ab4c0751784e7ad10b85b4a8681c95c3ea2ef50299ee5de5986330df7aa33d3fea931b62a52140a079d03ae2d93f5ba7279c5fceb88ee04f563df11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a678a374fa9f2757228a58c991db6653

    SHA1

    d4ea0451002aa2ea0586ebefd6fa72d8ea16bb84

    SHA256

    aed2086399335736ca065ebf894e6ff3ecbf72e68b629f6632ca291da99f682f

    SHA512

    58b5c59cff557f1fb8d35b75798b997f016ce3eff2e5faa813e007a7250e563e8551982ae1260fc875e5de39d3661f214a91d2a53de58596a77a35fea8e9c789

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f63b71357f6fd7a9857b9f9b9014870b

    SHA1

    196122832b5d6f4c6cebf1709032aca65657ce87

    SHA256

    513a1f4788d05d07188f05a50ea17ebc1bb307bc4b3f0670885f28d389909e95

    SHA512

    7110955d92cb3fb51bb3c0d794cfd35a9361202eb0940c2b16b468ac6ecb033776e281e46a9d4a6ca66659c19ec4f88a319c0d6ba9ca1341f53f52158f19108c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78ae66dd707fb5fac0dd3b4de60a0ce9

    SHA1

    6a4f9fac14bd4002773b54c1ca20013894631ca4

    SHA256

    e390552b2034ef1f9e9aa005916ad909bc1362b133a21ad4d1707bda77fb6085

    SHA512

    e505a778f625b2788c8b3784c7f2711c849e558ec7f9cc79d03d4cb24578ea70e3ea8363b1d2b1c882cada693b19832dff26796bb4d678638ca22a0a2c2b0446

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    058093210fe75b2b16b82cf2d5170d8d

    SHA1

    c76a5540b3c25768a50ed2f71b104f529acba464

    SHA256

    aa0faf1be84362a21c6e9f9999b1c1c885c5b50abcd8f1711ab912a60b7b5c5a

    SHA512

    5679a07634d862155d02153cd75f9d2fbda2e3fe6d6f153216bf01759e5d56d3c8284817b379de75cadee52af03d77cf48131d67e581375c8d48f268f62c6622

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    744550fba9703ad25b02b59559f4fd93

    SHA1

    fde236e51fba7f0b2d5c7d1d79ccfdf3ce7b2b92

    SHA256

    09eb918352e8a4ff72478ae6717ceb69d2ac2fa0782ebc98d7ad1eaf41488877

    SHA512

    4ce8df865d0c616b172576b5426162f255aa8acadefe9caeb43216b72d42d46941c09e99707d7e98979a7023a8ea9766036fcfc64736f753bc3f055f5af6a0c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82499f646e4b2d2a4d5a3e1f00034b39

    SHA1

    63aa36440e618abf77af3c4fed002d2320c124b3

    SHA256

    8a966a8184402a08c0058dd7c2b5007ab1d3aa62f1b6b9ca6640e4bc3dc66279

    SHA512

    8e6d715e604dc9bc9a94aceaec95a71feec2b678fdce62187fca02a715693317845ee76cbd29b8b5bccf0e1d5ed282c97181c882d052f9e1aa0648f348d1820f

  • C:\Users\Admin\AppData\Local\Temp\Cab5E78.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5E77.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar5F67.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a