Analysis

  • max time kernel
    136s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 01:26

General

  • Target

    69488f21d2a89d372b78cca85816b87e_JaffaCakes118.html

  • Size

    151KB

  • MD5

    69488f21d2a89d372b78cca85816b87e

  • SHA1

    b86d452529e417725c7d74d944e022ea0e7bf45d

  • SHA256

    33262aa76fc61ec414bfc0ca22e510050a00f5c9cd83484f86f8c88ce9d2f41e

  • SHA512

    3305750ce0a32daa2565bf681b9eb3a9dd68c1b15ddf1cad3776e9f5327331320374d74b0201ce0c1b3e6a0bbb96366c29f917f6ed769e9623995ead59f1ee68

  • SSDEEP

    1536:SEwd5U4wMc86/+gCLIuUtlAuwDbKyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76Eu:SECw8EyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\69488f21d2a89d372b78cca85816b87e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2616
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2616 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2644

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da86d2a0ea1b3e7291965de2722ebed5

    SHA1

    b11e2f1831b031f5adb7429d8a75df5581360d06

    SHA256

    4259683071a001624b22171d22303df4f15385a02cd090ff044c184442f434b0

    SHA512

    2f689ba493dfb9962ea03c390bde56c1e947c970fe9ed5b125469aa5abaca70ef1e40b51bffa1885bfa7dff2ccbddc3713970b00bdef59a45e240e403c6f0bb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    351dbf8fd91bb035b3a48e77c9c2decc

    SHA1

    7927df1983940dcd36b06eb71cd1931158f5bdd5

    SHA256

    62dbae5f6b2f997997e347ec43a151c993653ee983ddbc09d0e71e9f25d07b1e

    SHA512

    4ca3325fc73790b11eac7e662eb95241cb557839c17da5931ed7265d37dac1f1e5257abacbe570460b4992fd09c8385bba79b99493e57bb8c0bcb2e60e637840

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b60d61faa43a9345a6fee775db0d1277

    SHA1

    70e2046522975a5a8231d0094cc6b88626d48719

    SHA256

    96dab843d79abf0aa3fad3ddaee111c64d7e7aa55552365bec045e129a545e2e

    SHA512

    7d4791798fce41acfb3c350a8b3441b84a9f3eefd634e4d53c0cd630ca9f3206253a803757362adb7843e6c44a4c46bd42ad804cc188d751a3d59e8dd647290f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    029c560c11ed670e6cab415afbd8a913

    SHA1

    f95a98d84b55b92b57348a5980e566022991b344

    SHA256

    6237bfb4223c32e3131670de66f512c74a41fbc2e3d40ee94bfaa1d41e8da8f4

    SHA512

    89ef22519108c9bb586ef9a8cc9b251c2e3cd84ac08dd4aa4782aa0024a3c3ba17d3cd7fbd95c4366a7a81a5191b4390b4eaa316fc5d4f4990d11636e62c19a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d11a670b9cb82b02c163545887535f1

    SHA1

    4fdb8b22440c9d328c03e291cbde6f6826b9a81b

    SHA256

    49e70c25c4b27a39c98b55b455f0cba1ddcad2c0a25f46b5aebd2e879b41bf83

    SHA512

    310a98cf11740cf60434145d6b6330478922ee901e5c3347f6e2829cc796c344049b1ab646377bd85881d3d7471be2adcbd0d93909b3d0bf2350d67c1444226d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b363415945514fc6c06e09047a3b1949

    SHA1

    ad1c908ab5976026045868b9712681796813f1a6

    SHA256

    5d8984303bfeb724d872091823eac829870a0cb0abf1b67aa5fc67319da60469

    SHA512

    14014bfbb02dcf36ffac1adc7f39d404c5e2336e3c442bbae67dcd932247d4578d7b1cea9dc94fc6d7e9f49eb9cbe6dbfe8f5c45e5814aca4f7ae2394bd60cb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62d868ed4fd75e9d9efa7a39a688cf74

    SHA1

    158ff79fcb90a76040bbb0c33b8394c335c410b9

    SHA256

    d5f144819027a97a96270b3de07bdd6109406d5ab3894987d51e4902302bbf9b

    SHA512

    a5bb4449ce76f7cd80912fb7d5730b67a3bf645b73cafd8ea1941a999b5aa1852156525760ba9bd2963016a81834479febca8e85b17a12546a129a4fc733eb84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83a79f08550a9341c9a75e242f35fd2f

    SHA1

    646d6f25271b9dd1c1f68a56f454398c4113c453

    SHA256

    ab3cc705206cce94581e6dad51b006c4e37d1be39370175c5b71eb685059bb00

    SHA512

    d95327517054af45b5736ea844cff3543694faa74fc0302d218335e16d285df5ffef87f4fc58df2c109d64334cf288431eb357a9aaff632c4c9055189f42dcc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29ed3a6562bc64f4e1fd43536f579736

    SHA1

    9a522b824a06deee80b8c57255e314c97e953444

    SHA256

    af7cd5f90027c23511f11b0c5b92215648af1ca589bdc1a7e14568d302c789f6

    SHA512

    90dc1091ef5c4332099030c708413836ee1ef86b5a3d543dce6539ad6e2eff150d79920ca0a0ec970fedff97dd21173f25f206cee855182534ce8856766725fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4208475a87dd49fa5c031b2cc19e7fde

    SHA1

    d6e1fd63b3a36c81269ad85ff3585926e55b76db

    SHA256

    cad53a2290d7c20eb8fd2369518728c0278cf1d421a4288805eaabee2242f076

    SHA512

    a3d056ceda7782343e904f029180d44fd70c22eae5722d6b5c5274af111e0e86f225a5fa4119fb0b5f51d0b9ab6f0e356b889900261a9e8bd5b02ccef8753dc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c6c90d514434585cb63a416e086417e

    SHA1

    977d308e46e6b3deaaeb77c3d21f84841f4ce2dd

    SHA256

    1f53d1566b8b9a28afb9e65040ebf91a861d4e8f671319dfbf59be8767c80a0a

    SHA512

    33dee1ba2ca7a6994d2dac9310d0588cef2e2d50d6f319766bbfa4d0066129a0db49185fbbae4dad139a1d30cd97925e2a0b83d34f725c2fc0932700845081bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a645a6114f0b1ef008b0d85935a68b6

    SHA1

    5bd9e174b09ecbc4703567bfea61f57791f5aea0

    SHA256

    bca5fe6b08bb74e842f45bac8d743a9a57d4af0042a5311f68655a370c674495

    SHA512

    76941949754a85e6c11da4567f0ed45233370fc39fb4d5ca0d1480dc5faa6d8b0757f96a11f09d80af523f868018db414a701addad568a5151c49f6556b02111

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b3da25a4a5f0651e26ca67df34de684

    SHA1

    619284b19b932da89ae38b53614c6abf1a66b4a2

    SHA256

    2879571c9ad325c5bee040f3f9f2c7d78c3e7ce416f74082d45009e5b95cfe6f

    SHA512

    3b71cd458b0b6b7e772ffb734c42175a357da74a3cb9141b858eb57c19c12ec080ae81153b679a8b1ecac179c9df20c8a8fdf58e93edbdac6449836b83f20695

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b981263dd516d16100c2fc157f17fdc

    SHA1

    c64231fe56893916f4b3bb8fab1c9e2a0904a447

    SHA256

    d6de56ffa025f2fdd2d0630fe5517a0b24552a179a22594e21d65fcbab5b27a5

    SHA512

    188e257388c683e403ee5e35bb45a416bbc09622699339a835c35f9c445e95c81935555b18a45c5e3afc4186cf115867aad5dd9ac84ba27920f86926611e3f75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8c784548e1c38024ce80852552ab438

    SHA1

    64393db4f74213510fb2c2a27a2284e2da2515c6

    SHA256

    745a02618163a88b06a38dda9b8b0f6a88f551619e31fe8b2e69913acd75d01e

    SHA512

    5ccb9344d1637d69a23a4f55e0a1861c399b0f945bc1cf8355daf50ae7813584f2d02be6235768c96fa3a1bb0bae46b177bad52c3279dcd18f0c183d3bf3545c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b581c604fa2911bb7f9bf8071f39b6e8

    SHA1

    eb5aafe346b50caa52e3822fc8e0e10dc5ed52a3

    SHA256

    c9e26c29b2119922dd9fa15f55f3de0383eae5aeb3c39156c7bbb5e65507e076

    SHA512

    2f718d6b69fa26a3938b15c040d1603ef737c19a90a658a52d6c5213769f594073e408418c6868ec795e73e4ccc0cda66679a650f99f16239f9d37d20b8a2315

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    848b365731df24e76081833620f0ca26

    SHA1

    0531ec949fe48debd1a3e1ddf72c24813a5e6c8c

    SHA256

    a14eed5690b0e0826bfd2c6ae2431bf13630989c96dffebd6c55b9d21eaea401

    SHA512

    049c647fa265c456b5f43c3d5bd79568e89ea1a22a2690578ba116f7022c823bd488780d4b4a58671c5f0941e84f9ebcac22fa462c2edf9a85463e7e0a0a1baf

  • C:\Users\Admin\AppData\Local\Temp\Cab7A1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar8D0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a