Analysis

  • max time kernel
    144s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 10:11

General

  • Target

    66e7210cc52fed19d75c45f7c2ab56b0_JaffaCakes118.html

  • Size

    23KB

  • MD5

    66e7210cc52fed19d75c45f7c2ab56b0

  • SHA1

    7e48e508cd579a683f5d2de87682680e90976a2c

  • SHA256

    7edccbe7e8d37158974d9cbee253167770935bbbee92721a9f1624572f215965

  • SHA512

    c2b1b676e45f4d3330dc7f459e5537d8ac8d9d0214b2e56623d6adc6ec69ad5cbf981f4e5311e9be4231fc9b01909647251720c0d2a4198cee710a974f78681d

  • SSDEEP

    192:al7vFZ7vav69TsVi7NaNehGffhYyEWfe36iWfFgBCwsEg9AWfUvkiZLVdWf0cvWq:Mfm69lth6uj+968SLVPnHj/jyT+FM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66e7210cc52fed19d75c45f7c2ab56b0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1760
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1760 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1296

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d681e97551cff6344dab91a600ddb91

    SHA1

    dd7b1d1755f9fadb30c969723a855c616f686d9e

    SHA256

    b04cdde06bd77e9bc1f3ddcb7a73943ebc99c6284aae96d2338a2a94ab9c6073

    SHA512

    664fab8abcf7c92700a3a4b6579e1adaffad87c584d756045b8de4a3f285ce168985187e89873e7055ee033208abf85adae19f4430fe833a4d6633b7642e1668

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    afac62ef2e1b4f20e5e91733d169eb11

    SHA1

    983c147dd229c8ce16d0c49464c224b8bc75b543

    SHA256

    94b5f04e41877fd08e3a9c8868ba4a596a8e2c7b35d8fb4226a3c7d07adf8399

    SHA512

    39332ff13476cd206955855a9159d9702033eb9cf0f6335552dc789c373d5e322d1dbe7613d4e493bd5da9529a2a6a94493454ff92272f686ca4be82ede64167

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba16589f39d3f1b230b7a0d65fa2530f

    SHA1

    a57aa53c4c24568c0494105ef69951db11ed6204

    SHA256

    ee23491131dedc6ed478bc8622c952f7ec825fa2f11c2b845295018629549504

    SHA512

    f9f058da10f9180598c0f5fd841aefe9254dd78dd94ef375ebec98fc20e3c3025b561d3d7a8e3fce9ce7c936069e615b17b79d7f57e8fc5f72dc821da9de88b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    352c4777a40c4bcedc1137e95624c62b

    SHA1

    2ac5b11326ed567ae1dd0a234b1f32489b904b3d

    SHA256

    a7a884c8cb4836f00299ed350a5d92b27a9658a922612e091b3117e5ab53e38a

    SHA512

    c859b3802bfa83f7c895f084956939a1b7dc9a42a1a168378e33ecde483271f6fa97658f8f2aac7de8b87faad0cd49905378c20e9578256ba0f8f0df063b08bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ff82deba3cafae9d8ae277c733ad5fa

    SHA1

    15d09598cbd3676a85a23030453fc56f9cccb031

    SHA256

    8abacc55d274b8cd20b67401288ded392bdb01595e9d0d29c34749cc0880fa14

    SHA512

    3eec68e52c6cd7903b02f5540160663dad426bc39f1c38296928baf5dc0bcef76456b9f5bd245619a18a85380a75e062921f72b8803bfa9deade761fcdd64992

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7eebbd22c7a6ffe152ffa44647e7fb1

    SHA1

    136d73199b9d77596be345128be0c224f017bf25

    SHA256

    a03ddbf2c3fc4e729d770a3f5f31365edc90e8f5296829fa6f12e79d2913bb4d

    SHA512

    315f04ab2ff06af707ecf710fa9641fbcd1c8b187d81f4af32254460045c5b899dd90972cfc60974b0fb274fe0d722c9f056fd19131be20ecb69c7fe0b7bc4c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86d9b8b35bea0461ddc0bad6445b68b0

    SHA1

    7a3e65f3aa47a5c405e5a2718ef96fae86ddb0d2

    SHA256

    8fff9f4904ec24847c7a987012f51d739b0fa5a6919c4f432ad32bc39f4ee41e

    SHA512

    b9f1854263398e23aeac0c7ee9a2b3f794bcdcba89aee944aa83ca936d998ca9afc3031c102d50c47a4dba8496e0f7f06b4e214d419cbcd658f2d7da93fc315d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d228046206c5eb5cd44d1f80a932821

    SHA1

    971425b275e7030ca6dcea02ef86476279e6ed98

    SHA256

    52116fc8c78e1a9a011264616530d4ee8ca25ecf79f99c3fa93215d5cd15133f

    SHA512

    d3a404b2dc839360cb41be045283d720e1cb64112d40332cf88452eb00c7e7eb116557da9413b5f17b1377bc8cb00d913e19c4a1554898158852230f139de618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd8f91ea4c533ff19b802090f6e8837e

    SHA1

    2e15ea19e29a3141db1651c1bce6ac0fc05113f8

    SHA256

    c4e35d0eafb3010eb2c7c7f08aff3749483987a3b9d9c2bd98b5d29e256dc413

    SHA512

    6855e57253e838be9214a63e153f34678c5fd80efde8a98385d65fcceb88c3f06e391e1889203499acb0214a6bf634813a76c9698a765466e40bec1525408094

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7c0f3959d59a6b1794d7e50a9914013

    SHA1

    74eb45a5a2f673004b711ecfa8642c6e9a9fccea

    SHA256

    33b7548d616d37b0c0d0f027be0a04f995291b429cf50c9688a8a70f162439ae

    SHA512

    d51b0e74528a82bc6cacf3c752b589b9d72abf4d41a9fa8efad5edc06173cccb61e7acff3c0cd3268a97ebcf1566d6ae2b1b606538288d8c77eada6036efbdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    675df407e0accb4c804e3658aa9a2c90

    SHA1

    f50ca902e88e7edd43aea2be66c4523260ff7a83

    SHA256

    234174443380dac2282563dae52a6af4d1b9e9b57a97f4f82ba670b688f0f255

    SHA512

    48108def499a43487d80cc5969ead307f3a7f7e3e786aed2f90721252915038ac784ee85d82801d5da82d47f9f46b45dde7afa035f95d4942e13d2d927dc3517

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7593ed614805e09e652069c2a6e289b9

    SHA1

    f4412573057fc4666878d08bbcdb0994771dbd1c

    SHA256

    d9c1e7abc34cb940e33a344c3dfe5eb6bc24f9a9de98f4a676a55b896d361cef

    SHA512

    945be222ef016e553a2f9085c68e1273f0ed8c5efc1cb8217c0562d3b11a71f623187e73a83e0ad5b4ab682aebba3b0e42cef115f12d9ef0378d686e2244e486

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    790c8765bf0d21dbf7d3431393c9bc29

    SHA1

    6e7451ab638aa25de1e26ae2f44b071a740d2efc

    SHA256

    faa62c70268c43572af2368dbccab64ab8838210c3564e2e397f10c669ec166c

    SHA512

    e4d9ced1d91ba8d32d771a787689c94a15d9462017f5f7f3c0b81553542ab3e0e9a395d9ab6c4b6bd61aacf265f4f6bb478dfe5f3d424e2f2141a1bcda2e7b15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a7b24e1b2ab40fa1a5d0312c4fbc542

    SHA1

    b030dc3b0096b5bd31b334409218bba11a7a40db

    SHA256

    2aee58a9de9906ad93687850ad5927941290ca88017da1f7662dc75ad61aad8b

    SHA512

    11a0068f01f31e110d91072bc45dae046aa9992df879eccbdc70b48d0aab1ba63a0b2e5f614a2ef99a54cff9da49c43424f0d5858835caf5ef0c18b807d8e2ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b469adc2f0ce2b96283bbe258916481

    SHA1

    4b692f7a2cb1dd9f34543f8f574caa46d0b4389e

    SHA256

    f71f5edb64d4a77bd4111f5f99c0c569bbf37d280a51159c9a81c0e7f2113c15

    SHA512

    54c9a412a09074647df6a33acf0b4cf7122ae9a3e8f0f6419bcee38bc4d6dadffc352dbd647dad1d1700a0bd1bcf1e476cd55bafe5821ebfb0b0d694b904c646

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d4346bad05e971e14b7745b5e9d93d0

    SHA1

    d0980c32d2064405ce0f71488395261380ab82de

    SHA256

    7b8551978e0e23573a39fb14ad34fe5a2d7a46e79454dabee59ec01fff35c15e

    SHA512

    d181cc08f2d5dd7c2f01d8c392613ad1089e171bc2d7c0367cea41456025e1aecb27389076877004ddd2c1c52d9428c219a36ca8526ae831cee484604fd64746

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01b7d67b48bbb6d3261d0fcf20560644

    SHA1

    8dc8edd34571501e776c9d45734b0ceca196a08c

    SHA256

    4ab4859d062f5c2931fa6bb8a6f36c116deaaaf865192e99b6fddfed1db0f09d

    SHA512

    043b4e03c9f496a8b9fa89e42761de0d931e9fdb5ac22a193f218d6c2ba46b8b007b0520323c3f29ad371e028505431b2dcd79b13190dfed2fd962b953427865

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e36cbe693a4a4d8b839c0f482e983a11

    SHA1

    9f0b0716493362819bc62872eb74dbe25c8dbe61

    SHA256

    61bb47758966e6e7540cdf1869c9c34102b2bf9a38833178774178bccb633c3b

    SHA512

    13aed23230b046d14d39b4bf9a54e8a7dbf6dfaacc2be488802d0d7c780e15066fb39db149bc019cf579f7977afa748df165e2277f2247372398c7ef374d62a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    775f88153a7699cf76d0b70e75c1bb4e

    SHA1

    c3f88a7b68b3ec223fa8a95cdc50a48713ab1c44

    SHA256

    2800ec75863fc0309cd26b07510a1c46598acac21f1ff74c8ed449167b1c5a58

    SHA512

    4ac333dfcb6927c0f14119187ac77da73a30a6f0855adbe25ac0c692f5fab2d7e0924bce1181866699408e5b2672ed13c00f0c50c14ef2d361224b36840ddce7

  • C:\Users\Admin\AppData\Local\Temp\Cab9782.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9892.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a