Analysis

  • max time kernel
    139s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 21:25

General

  • Target

    64d0d79befb777c211fa188a0039415f_JaffaCakes118.html

  • Size

    154KB

  • MD5

    64d0d79befb777c211fa188a0039415f

  • SHA1

    5d9c9a0c7b3c6d05ac82f211cd6b26bc525530ad

  • SHA256

    7eea6367689b958f3f95610c14af4ba690fd416b194d719eeaf970063bd5b277

  • SHA512

    d2555378a9704a3424d23c67a981e2b92eae24ecb043ba40d49ef9cb9875fdaf41eea8fd5f31f104dbf0ad84614fe4af936b1b4b80ca8e9b05b3d22198c02206

  • SSDEEP

    3072:XdiGe3/ToXqbIrqbI5BU13G4k5QhLpOatVuy8QOcVGRhLCRJPF:NW3VIIIq3G4k5QhL8atV0cVG4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\64d0d79befb777c211fa188a0039415f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1580
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1580 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2580

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    a1d955617a4d146e70544d0d9a0390ca

    SHA1

    5ffdc4453b23e24a7cb0e634b26864c169f5257b

    SHA256

    8dbff2c0018158256912d87dd495a68c351303a319f50f204a930317e867aeb3

    SHA512

    0bffbc27638b12cc04f335de8c4f3c74df01ae55b56f389f8d046d797b4c62d31bbff057ea75ce32f67cdd3b878fd0aad3eb62e983f814296e1b94de3c6ba810

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_146E1E094E96F2D77E1CDA597BE74F14

    Filesize

    471B

    MD5

    94a4cab7519a2a076236b2e85d9c3f65

    SHA1

    fd1e001221d93e6939555fa794aa0a4c48c8576f

    SHA256

    b0cc65b35a29e774b1ddd729c8d7f535307e354e07ce48aff7b4452be95a6b40

    SHA512

    23451e6b6571e8c1c3442211b496e4895a786d2658ac7dbe97790530b3c824056f6447ec395f76573ca38b54bd47a0a98bc73e30ecdced43c50a5e506b3abd43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    d49eeb189790a4418aa9f428ff4c8677

    SHA1

    4b1fd68cc462d5825d735041e7131ac8351ec140

    SHA256

    393761cc66582b951680e1b5bdd2066241890be74c3dc654e57a2205fc8931de

    SHA512

    b4b99ede1ac6083934416b5684c8a2dbda1b890ae6cf26bb53a9ab46be6753904813ae11fdd836483859e30fc434ee1e6cbb770f2336202943bcbf22d06dd4ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b2f1f727d168ed1722fdeeb6bbf13d1

    SHA1

    3db757124738a143b4854fbcfa97618c19c3be8d

    SHA256

    fa1e72fdac4cbfaa6b3360854bada0e9b1e73b700302748eb166d480162dd89d

    SHA512

    d86fefe6207fd0fc26963b9da162580e40bf006ae870e41353a2cf11db1229dc1895c0579aa885ee6d618cf5a3c34551cd3b294b1275137a3f24561cd482523c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e41a0078dc92187c323416c00ca2e0d9

    SHA1

    f523615c716f39a0e885536115569d24fef1a602

    SHA256

    4ddad792613d4173cf26e58ddc99e2c96eeba6f957394c994165534663a9938c

    SHA512

    0bf9cef2d0fcbde0706900cb4c5327e64091ed1baa0b46e2c806b0343151015d6cfc7495c2de33f3e609780dbcf853cda749b434f1ce8d599befac0b12181bc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8dc7328264f4e2bd86fab0c27cf1b85

    SHA1

    fccc8160f3b1e05435e40344db99e5f9e1da4003

    SHA256

    d024fe55ce95665197413b6888ed78806e5b6968ba2b8345423b7e8b3df63519

    SHA512

    7111bb99b619bfbc5a2762cf835338873b5881b778478ead1f9626cb4e212a6f68b71129a9479351392a6675820dc5f9d0810466c5ef88383f05b98afb8c5f6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eea5006f4be4c65ff3b510d0c0834380

    SHA1

    b364ddee2fb064d61d760705410f19360d14d550

    SHA256

    605961b5bee0aedb2f8d7883fe186a8b04e235c9e20b49301802bae3ae9fec0c

    SHA512

    0d261333375b292c7f06c21c59a58255be5d98b9b107d91a9098494327045484cf7b6d2e0719411e7814788ffc5f8cdf2012af22ba77057d49ebbc4e88406616

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa5f512006bf76e6995589e870b5a885

    SHA1

    b2cea34f92141c51ca170edc0e757dcee35196fc

    SHA256

    0ee4d593a20f186ff2c3ed13ba854ce8004c1c609e18c48c548075397a05e7e5

    SHA512

    8c1afe64776ce9850db0bba47ff84166e763b503b9d580b240c1aeb5ab72c44061de3ac7d197599779b39388350593877f2b58a0bc996d0d260d51aed21c974b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3946ccaea6f669a51349822db1f4a308

    SHA1

    8a451bc399b2d7a1e94a4197ee90cb2c4102a9d9

    SHA256

    238a59be87b905c5082617c601558822bbd3157948487003729c69db582c8f92

    SHA512

    1f19852ff6219e0a5a83b060b697ff7e72f40d9267ea69ebbc5dec479552f388299104b5dad294b98b2df30e18070200a241efa74ad1a6b64b54e16f0c0f521e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b96acfc4f62c6b19a0b0e52a51c6467

    SHA1

    11dcbf74980de4a1ec1434cd2c89f1934e4bf78b

    SHA256

    b0254b387860fcea5f22f2d9f749c75792a5a6d56d34578800dbdf2843146a3b

    SHA512

    0574d02515de098a9f59684f97c18c6ddff96f3fac56e83c1ec59bf5da3cfdea4a2d9bc4bab200c90a3e111be7c6181a3f021090e7ea2d819495714c08aca7b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7f110aa7da400a7fedb8b690ad89b04

    SHA1

    64c2493ef7da3a4c3894236f1da0facc381dc907

    SHA256

    02f3b942353f5aa884bacc1d72cf4f560d4de130b4abfc79973e0d19bfe16cc4

    SHA512

    fc2c4b1f6c3d0449b5e45401841e0d692fe24bc358c1c13e2b42fc4490cb5318bae0e1b4d8493ebfa0a7aaac9015fae2fdb9866af2d459486e557ba3b06d597b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    439373f208fca31db7a9faf497c8a5b6

    SHA1

    18238ae777859a9cfe69aeeedbbb2270260e90b7

    SHA256

    4e974550a5eded1bfd41b339a22e3efcef021c53b6ad42232ec7c962f3fc63e3

    SHA512

    5683d23e2c563963017e210dc3546341e1e8add3c1c2400cb560a512f3f9c734f5d6dd9f62f51e653e3544ca01f4d074aef639cd57118ecc2ad21faa0c30e77a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    daf7aab651d100ed94e09cf3874c029c

    SHA1

    107dc61ef127432558d89df7b403e99e43b0e644

    SHA256

    356342e4b9b13234d3029405d6f88f85d7debef2a6eea1207006e78f40b690e8

    SHA512

    f905bc24f083e134db46c228fcd22f3301b8c3677db7795d77e888c29096f86e7d4819d4220a3a46e37b3ae4d9c9fba79e3671bcda4b4b2f3df0387de3f6470b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa1fa479c039561dbb08fc758d4c6ca5

    SHA1

    722a8fda612beeb7c963939f8763210051fe4a93

    SHA256

    dd0da3c2602c14e52caecacebc054f5322aa368637f5568983cc9b7aebe29a18

    SHA512

    41a3006c149a30bc09ef44d5232447b12112a07a4a114a9068ebdc3c90bfb4e9426f119690c92308b71b60b8336ed74dfb026aeca574e47f2c8eab60628adcd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5098d35656f95a6f15a4d503574597cf

    SHA1

    66cf5a91e210ed48075cd85c49edf40f60771fe5

    SHA256

    8eb37d5ae1752774ba4c3dd8c91690dbaffae57d473813060fc4e19dd164368a

    SHA512

    ad2606d4f9517ec1fa2f96bc991e6939925e174481c87effdd0d9c9097c9b03695626b07e38d8944e22779d4a2530bf7537ebf618067ac62ed47f7b1fd4e85b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acbbb71f87c7ce009d4cadea83eee589

    SHA1

    245bb7633db33acffaef2c3e608f3b34d28a77f6

    SHA256

    7fb7fb754174087db2b49cf0f1cee546cb198d0a03af91afc0e8426a753551f2

    SHA512

    0082be9e208e18a0f6fb0dab603f80951e30191218ce9c4c951cac79b9562877c04801f92b9433e190d968b48504cb2b99ba68b2958a29b93143d2d90c1356bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac18a44832aa869b65fb96aadc660073

    SHA1

    3437ee0a83e4ad4bdb6ac8fd53a508d3fde33144

    SHA256

    ba97b912af38edb7bafcbf3cf40bf8d6905a0b6d54ccc5810d2dd9498b49191f

    SHA512

    41c2bda1d61ae8597a3f617a2d36f87a566b023d368629c8b0c58c0cb6983c9aad0d4d5daf644b6b24be410b596b3bff2d065b68f62e27e9c0402ca261fff7e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dad14365e539dd89d70c1aa3327b6376

    SHA1

    4352f5fffc5dcd6182b72692981f3e8e6d18b415

    SHA256

    540a9722458fda615307ed7ac5865092ab1e97630defa475c401bf5f7f62f743

    SHA512

    1ba43ff0b78772697f45d3a7435cfe17a94537c53869709e33707d1662e4dc672db5adb856fa61944a835776aeecc9d167ccf17b23750661ec349d364397fae6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61dd01fcf339ee46e3baecb668900e60

    SHA1

    24544a446dee58795825e03b2fc1082c41071e03

    SHA256

    e4ec6019ba27292a8e172b813102c1e045c192d98969a7256b6d309416817bc7

    SHA512

    a8526e4ae90eb57a6928d375067cb41c09b364b176783d00898072242dcd7ffdce05cbcda6f7834db658ac27afb5f5ea3a3866af7c6e103e0c3b9644faff5780

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed2f6c71e2310f17d1b7b56c6f5e75d1

    SHA1

    5bae59a5bcc5dffe723f181d8b117b0ce8fcc3a1

    SHA256

    a369178120811bf407d001989b937e3475e5673135db49f987f86e74e3ac78a3

    SHA512

    d28d34bb875a50d6e5ee464ad548db006959f55497867c9d67316a5cbff968d1a3459dfbe6616e4e45804f36da4d84ebae0d471e4914a0d24598463673d98006

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf86ba849fb10e36d018bc3e06c3d4f3

    SHA1

    fdb15c9ffc2313f386322ea476f7ebe082ebc919

    SHA256

    6ccd18e5a7b3b27ae5a4319d165d5ce9ef1bc1240e0e99be5aa2298ca9c4958e

    SHA512

    f78af136a222fe12b6cb613135581299fedac789553a3387e08dc0e47062e4b2b5becabe364296d0964da0743f12f21a8c6f07c458cf1097dcac8b77fd0a39d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30a9eaa67715846646a26b1df2f0a5f3

    SHA1

    6798d7cf7c0b196f41951cff519e4fc0a1d847ce

    SHA256

    c592987e517fd3d82f43137e654e6565710cde9728af54ce4b41c5bd34f3da3e

    SHA512

    6b66afed4615de7f01198215be3ba0e60203378feca156c0a99cad3132149a4e26a2eda569d1326f76ab451951c9d29511677f57042d37b028c3f8c4f977dc1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87fdac9fe32f9f433ade49e4a6637962

    SHA1

    f964d8d2c4e000a479d6a482aea60c6a6b3b066b

    SHA256

    082b359b7a8416c5e978cb136f3fe7a63adf0f3458d36617f22395240a66f2b7

    SHA512

    26ff332d649b1c89b29f30a272e89043303402c3b0b8153c55649f07e5c2fe81caf38c1ad6ed0b3e5cc50fc7a0b1d974c940d0d5d67a181963f116b7dd195640

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_146E1E094E96F2D77E1CDA597BE74F14

    Filesize

    410B

    MD5

    19d6527e00088462da038a6fbd9a5e55

    SHA1

    2dc99ad29322ec763d06047b477e2491b7fdb686

    SHA256

    698265035ff22a0f570dddbbb896a0859d6fdc67ce12d8c9ce5c2289df20610f

    SHA512

    5bbc1a0cfa083a792766d648ab6ee03d4cc01954b82494ffb051919c85ee3f7004bb38d5820a6ef1de9b46df7fb8041710b4d7befefcd79cd0c403d22fae08d5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\plusone[1].js

    Filesize

    54KB

    MD5

    fb86282646c76d835cd2e6c49b8625f7

    SHA1

    d1b33142b0ce10c3e883e4799dcb0a2f9ddaa3d0

    SHA256

    638374c6c6251af66fe3f5018eb3ff62b47df830a0137afb51e36ac3279d8109

    SHA512

    07dff3229f08df2d213f24f62a4610f2736b3d1092599b8fc27602330aafbb5bd1cd9039ffee7f76958f4b75796bb75dd7cd483eaa278c9902e712c256a9b7b9

  • C:\Users\Admin\AppData\Local\Temp\Cab3C95.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3C97.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a