Analysis

  • max time kernel
    121s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21-05-2024 19:48

General

  • Target

    648ab6165e0619da5cf0576f5e06d2ef_JaffaCakes118.html

  • Size

    461KB

  • MD5

    648ab6165e0619da5cf0576f5e06d2ef

  • SHA1

    0cd968fb9d67565c615f712de6535e010e3c4ac7

  • SHA256

    070259d9488805d1fc480da912c524e250f666d283475ca33bad0dc3fe1360e4

  • SHA512

    c54c63aff74759c65e91e09dff0236501d36815cb1d02e917653424092c81ef5c5324be15bd0b626f598a56a2e6916d00a69a63867a0afc3eddc5bd6c1d6fe3d

  • SSDEEP

    6144:SXsMYod+X3oI+YNwsMYod+X3oI+YNsMYod+X3oI+YLsMYod+X3oI+YQ:k5d+X3W5d+X3r5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\648ab6165e0619da5cf0576f5e06d2ef_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2216
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2216 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cc175a0b933ce044338ae1298987869

    SHA1

    b7d4938df0d262c71cd5336efd4ba8fca956e517

    SHA256

    5b73a83209cfdc752cab324500d1602004ed472d39e8fba1e24045b8d5232a45

    SHA512

    dbb496ad3ceacb3d0a36fa98d720ee452b9b6c241ed352729328d0ab9c97fee2c74846265bf768e7074d998dde7d5c9e0bf0a9e34793cc348588fa18c788bcfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    034fe1c9db2fa3e6a69c4155aed7c941

    SHA1

    86fc37613b1481350f1ae5db3e8a637fd9c427b5

    SHA256

    6bfdc1029b208104f231a84c963a9e5a3a92c979e8aedd2b39b8f0ef418194bf

    SHA512

    c2147d35082218ddaacfc69a650f50481b67ed86a84abeeec461f45b18e4942328adc98377a2cf25e948eca1d47de3e391f858d291c8f341d868f9ceceb047df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53ce3b40c9fdd3864f9c2950eaa02476

    SHA1

    cd195a70521bde5b1541a7276f8054af53677e11

    SHA256

    9c43d83c7b7d55656b1a73af1ad34939f8f23a4e06575d5934c0fb1e7dec440b

    SHA512

    b278e09052f018ca530222bf8df0c86d0c957c32fdb7fc26bd2896539420d8d0c4b7f7a2fef6b573ae0d18f86c2331bd63779af929b15a8e41dcda785ee32cf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0568c1fdc41ff7546478bdd799346e08

    SHA1

    995e9ad2a4dfd2425d7d10248d34a3ffecdc8f49

    SHA256

    61bd1f2349104364094a04e92980669c072307e61a493385eaca7e1c40194865

    SHA512

    9cb4bfab0bd91200b39aab612c8bbd74f3f0482fde8995f2d9d67e44a8b090d8782b2324017fedbeeae365f1e864c13556fce6639e7ddd569cbf25dfbe367cf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef4888de748f371091cf0ff19acc4428

    SHA1

    636a49c5b7ac1931cd1962a4bbd214be01e2cf58

    SHA256

    6d03f96f40bb7dc8b541947c03c323b9ff3183aebdd5814c04e845821a82ea9a

    SHA512

    50e9652ef74774694086dd11b66c000ab8d9032b2ec5e37f0352f08986e28875633bfa5de2aed976b4e2ee4dd23f353bff09108eb2ab90a99f5e35b2d7e7b461

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6974e7ecda89d21747affe6c18b4a63c

    SHA1

    79511349d1e2eb8d5217af69769dcc4c33e0377d

    SHA256

    8a3bcafcf0ee957a33adc378a4160be93e145f2c2d2e4bf24f99108d340e2155

    SHA512

    b5f0f9d1921c708f93761a1e9348baa9008f6f0397e86a207032ebf21123407ab3e7071c046f4446c818bea24646e19c305c82a76c2431d0410cf7c6a36eb7e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d677a07f1a1d658a29fdd9f9d81d61a4

    SHA1

    c9d425dab95b36c91a9b4e1658e02b88b4c32575

    SHA256

    de63c7adc735ee9f5e5e02d3c549da68141439be044330d23d0746e0f9b7f632

    SHA512

    c443f94ad8712267b97ef3b60f05dff67e5f40c38990c3e1d1ea0a555e854e26a164964e96d2d49184c9a272e9244c394768f2f2e2d26bf85c64e5c51cfd808e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0257d6e9180258b11800c32480f7deb3

    SHA1

    84ff78e8518f5269dfb0b2cb35b78f557b7b6ef5

    SHA256

    916159d031e579d19987d215ca0883e82ce16985067297478f4a09f970c4ad23

    SHA512

    8c30974fce547cc381e2e35d920ab8f9685e0997e4b052a6fcd73714c911b5bff767f2a7b9da979ee3d0986691726daca2ebd257cc9b0cac90b76765326c1151

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a72fa18899d0cbeded6bc97813b4c2df

    SHA1

    3283e10b8b4b93368f9a5f265205e7d85c3a0ca8

    SHA256

    e177767c526169aadd8b13345709eebbd717b541338818ee6f2d09b60339bba1

    SHA512

    0014c7ae9805f96d53ff7d78c9c286faf0480898a1734726f26d60bdbb6afbc127dc16622c416e98ca5ff7cfc9fb52ba785a763d5134549f6f3ec9f16fd8c500

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    985930abf85c0e63d071a7f05a65c094

    SHA1

    fb4d79c10c838446269630a3637dc5230eb9d25d

    SHA256

    683faa5d7f55564520ed8852fe5dd157c6144677afe410a7e464bc8e9b2b6e46

    SHA512

    8cd037643778863f38f01e204be0f995da775dcb14d6b9a5d3c1f8ee3b3b80295f0ff8172468e9647a461b7722528fa5afb9ca56251f432e5e5e484165b18529

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d83c0178a482b96445377d3e126c2ab

    SHA1

    31995342f21ad64aec3df03c876cfccc3cbfcb13

    SHA256

    fcf5424cca9f888eecb67ff7b0fe6d2aceaf8f5b04717f7d178bfd871ab5ae86

    SHA512

    456b05844a0b33302fd7dbf3ff58b1643ed2533c8f6eddbaf6417cd0a1095a7af7f3a366ebeffcb4d1053f955b312772da34f33381a42aea00ad37bcd0c7cff4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b20a07235116e573bf32088fc260770

    SHA1

    d0390833ccd73037f4eb3e7b82c7333ae45a0ddd

    SHA256

    0c91b9d033b60eb9bb7e9a540ea671d8aa5a1163bce2e509451f850a1146a31e

    SHA512

    c9239ae9f2b4bca7591a5e7cbb5b7b41d4f6af33bb310f2caa91232e0f6c586666ecd767aa331b758acfe473afd97f331f2821b63bedd9b6ba16e4752b1f6ac2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b3f268c9f384ec192bba014ebc92d90

    SHA1

    087b448452082ccbbe8e76b590507ed77c6c9e1e

    SHA256

    6124ef3c420bf9a51c59c4cdbf3a5e4e82c413ff566fabc9aadcb0595405fb76

    SHA512

    61218bc9276e41fa74c908e7e43faa342bbf99f00caadc64561938650e1d7e565f361df99dc5863d7b15e1152e25117c4ffdf90f833a5925dbe41aec884ec2ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e7331ec99c0ed74122b4c839d3a6af1

    SHA1

    0a921c0954523ad9d0f4440a2bfa240e6dac34b4

    SHA256

    520dc48bfae6decf5c8199528e4a720e225e0eeb2fa995bbebdc07aa39857df4

    SHA512

    e566697a1f38e19837413d49e8e2be4b4f5ec81b1ff06a3d2a41d28e637b15b6c61cf533f08f2b6b2194c3ea721f647af0ece4321423b37451071cc737712ada

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c2243d002e52024718a0e0d7dbe5b490

    SHA1

    fdb27176b7f2906c3c31640ea5dc2b0f7162fe74

    SHA256

    e56818ce93169dcc3491154929edaa24b1e587ba4fff57943aa2df49574c4d6c

    SHA512

    10400004c32f5c2144a9d0fca0b7add71f76136718f4ce354c0e2506c19783b4781d5f045ac1cb8b777d247c29020eb0757eac0df311ec445191495545dc7553

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b42cb13a6a277e0f564808d1ded5344

    SHA1

    45e175b1fb59ef454de8cc5ae5837f958793a9c4

    SHA256

    c380712b535bc69d61a99a81053668a5f7420f54fbeb1d3ff4808b1151ad0806

    SHA512

    9c25c6a329d3b4ba3b155a84ea84052e59ea3f398d1bd45a2dcc548c68c2636fdf271148d7d2291699eaf835531adc56ada34a183c93145863271a3526fd4552

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    922c1f6d80d9f1b5500d2f601ea331db

    SHA1

    ab62fc52dc7c13b2ae5a2412db4357801dd579d3

    SHA256

    4569349056bba0e849635edbf45aa3061116cd474be0e6479fc9572f310c00f9

    SHA512

    07f04f04c3e6402cd448fa2986ee17d28fd8f0a7f11689435839387eca82cab4b80850ebe3c680a55f00c09fc0b723848952072a3d0b728b2c262dfd889b97ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d782a193779ee8b2f688bfd2c65bfc2e

    SHA1

    1874a6cfbbcfc01929730a842db4dedb2d92653c

    SHA256

    c7cb695efb4b19b3d6c189df834fcbb4d048e754488ffe8f4b0bec20b076ce18

    SHA512

    5bbb2f05f77ba04748b34139547702007364a9e059bddc01ee768afe629cd6c0dd9bfd1ac36784e7f5098d43e413b38725c65c1a718952424947be63e2ed850b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80eb7ef55f1fb2f2b453ad6679e7e630

    SHA1

    24103b219ec66eb71f02810074f4164ec66ccc9c

    SHA256

    4ad65f270e2222e19e1c3bbc3f20d70ec69a65ca310d35da4648344023797a5e

    SHA512

    844263b1e1d3518f85275c376a32862e73429dfdc8e8683d4ee2c0a699e43f0fd936aac7cb2bee2e7d010da7cbee2cc03da9df6c27b33b2bee9240d4a732359c

  • C:\Users\Admin\AppData\Local\Temp\CabB618.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabB753.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarB796.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a