Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 04:06

General

  • Target

    69ae56b4481b979db1a45caee8f73ffe_JaffaCakes118.html

  • Size

    461KB

  • MD5

    69ae56b4481b979db1a45caee8f73ffe

  • SHA1

    165af6fd2719a47aa57c261fa59a7879ba156123

  • SHA256

    9ab3822dfcfc060957a1c283e96d7fdd22dd18e6b8e28f589c6010977e1d73a5

  • SHA512

    a118bc76077f3bf4878dfe34f1b91713490d54ac5cc83a127ca90abe494169cb7aad95aefdfdeb5c0349e4c7f46142cd0ed1be25c7cd8e7c4e6ed3a4a83dc218

  • SSDEEP

    6144:SjosMYod+X3oI+YMMsMYod+X3oI+YbsMYod+X3oI+YLsMYod+X3oI+YQ:C25d+X3y65d+X3V5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\69ae56b4481b979db1a45caee8f73ffe_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1196
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1196 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2734a32a30a7aeaa35a9236e26511cd

    SHA1

    a7d289f6eb48d374c08f39ee91f108022065bef5

    SHA256

    759d15f954c84bcd47bc4c48ceae8717fd601613f27a02294333f8ecb202cf39

    SHA512

    149e0992d761edcd37400c03aa67d37230d0425ea23fa5c3adb87644beb536478462fd73f81c88be5f7dd008d43ab35c8cfd6480aaede711823f922d9291f041

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c2584843ee6611750254ba023e3bcb2

    SHA1

    ce579ee64fa7a997f678e3207686e9832c5e5722

    SHA256

    49a7872862219c669329d97c39da2ec01de99bf0424684d3e40b8562cea7b070

    SHA512

    2dc5d2ecf4bd80e3ab2e1cfd9cbeeab400b0cf7063cde58f00906bdbafdd9135c3b4b6363119cea7207380a01617957577a17f6d662404a8e6b69cae3f2b1b68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf993b9781a81a26402ca70bcf2ec76f

    SHA1

    cedd4954943ff76fd5a950593685edb0d4eb8dcb

    SHA256

    5e028cbc874ab1f12784b23fd8314c9a65a9734ea46e9f667f5d2133c5208f54

    SHA512

    521652d5131b67501dca987c7396f2645c86912561e33cc5a54b12fa1d05fd7dcf1e297979b086f129d2ba2e714c665e66a7ab9c078f9f975a0895528ee83b6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    428ff97bcb72cfab0135e8395cd320e3

    SHA1

    518cc6e601f1d4eab6c6bb0420590aba3dd04db4

    SHA256

    4bb0114ad59f2c3da2a625d0f7443997b5a9b3523e11e8b36ec5eacf78bf3cb4

    SHA512

    a4297f4317e63a25837d0ac693e3a95ae79bfa7ca8c2cb2384c6ca0df26406f79b6d6b6b58852b3fe88ad0c047b7e1a9c448135b9257f2ff2ab1c78bf209db6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    998b4726abfe0c68c91b74d3d57d5211

    SHA1

    4059637e787cd5c8bf807c4cb10f4be27829a6d9

    SHA256

    713248ee07bbd4db368a4f409381749ea6d9d8c02a7e8e8fdfc3c5bd977c47a4

    SHA512

    959043e0c810a504cb286231da4edb4a0fd6e8f2c0d27b937e8877c2a6056124f1ca547eef5826d1fce993e7c0280435b89ac00398fee4fe50761db6b2a30fda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82218ffae8838b84d8c1db2b1ad27c5e

    SHA1

    3edc1f3741a2dd2717ebec26de6a64f81e3ef451

    SHA256

    237b6b0384e36316ee446736a6d3fa3bb9dc24f5417990d0a8452471a2ee2b65

    SHA512

    4eaf30abc9e318b2e58efdcdea303226fa7ff49b2b68904770f28f2b22d65181c9f0a5c5b55080d2499c4dbae5b097a2154c172e880ab5f53ac8f11dd9fd4de8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7493a9df95abcc6b40fc5f0e6ff3455

    SHA1

    fa5e79e1f3ec5d9bb730b9ced0a364f381196192

    SHA256

    a3707c13b46c11fa32a7c25988f5d1d485573f0c82ae0cf1a0ad620612ee0679

    SHA512

    40c2f4965ce747d50ce84e2681ebe6260819e894ab83e68d6055cf1d183388e57023273981c427005d0ca24b3372a813429294916ca0036ec83a2adb90b5cd0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72c77aff8389386d3c2a3747081b0090

    SHA1

    18aca1fb603f3584699f865eee95daf0cd9c054a

    SHA256

    3d3cc06440d578b0b4e1097404187db50ecfdd8043ecc4d398782732324b25fc

    SHA512

    89ae980987a5507e8800cce43ada1dece7b330ced1ff0177e37413023103434fbfda20490855cd154a1e53c79afda27ca27e5bf9ba3a7c85004db20a45325492

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    662dd004446596bfbf8dbe03eaefe6c0

    SHA1

    0ab7351fbf751dc543ad9a827329f5385858684f

    SHA256

    415fe101603cb34e22840f38292cd23be12b50b74fd23a89d302e447bd30ca62

    SHA512

    12b5b264dcd10ccffae237ab652fe74dd104ade29d51ad7ee0a3db539aed4eb5f49f8023eb93aafafef5cd0153be38f4dac5b9116132adc97ddead6d2c633879

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a99cbc048dcf2aafef2335b3f8371887

    SHA1

    160b0bac4c425f83bb36d12724ae9a64048183e3

    SHA256

    82df1de76c7276473cc5ca4510ceaa8e4c454a4396991ebe773c80c5a12141d5

    SHA512

    5e9da21797279eacdfd0fa4a018c196701cae3c355b92091a8b741508a90c5c7b20f5ebaf3a3ee5b3bd1a123ed2ba253eee5e2b3218f01094063a86701e58cc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5093218d7421506478570518d423ccab

    SHA1

    d171681350a2b0daaf57c5cfe1b8a0e57e01b8cc

    SHA256

    a85dd182198675e1d608f665c670ca1f469fea380aed8c7d9aa076496ab5175a

    SHA512

    8dd7ace78babae07246d9ca9cec44ac88f224765e792b807094a0215a81d81c506a12a1a70a5e6f18eaedc7694be380ad7c3ad0c105902001696931d2b0a09f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7464269d94129a84a16768e2cdc369f

    SHA1

    544861ebdf9361972667757214ff469f281b4395

    SHA256

    494db84f42e483c3054728006e32455dcd0424bb1b50591f4c06e79b72f7eefa

    SHA512

    0465ba2a8c3cd196f4c0313bd6e6e9d737f300c8b873b98bd2c8808990906be77aea7d7fca23b7dfe600ac8ab6ae5ade09d6f7298a1ec1bba0a99c9619200e26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    128ae97af6aaaff50d180a3fff2739bd

    SHA1

    bd9f8731c419195f963be58913c6c2529dc51c72

    SHA256

    38a366b14cd199f5e04f9713e14b980c2a61188a7ed3be447fdda3f07b6cb92e

    SHA512

    a3b3f476b1dd1814520082e1eebb678c0380f9881b7636a700152ea05f90f480bce394f11bbb2dc9338d7c9ba66dfa38179f0942238fea36df729b473f801887

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffe20564379f57e297939c718e25cea4

    SHA1

    ef1824979b7ca179ee402f5e8c3046533a629494

    SHA256

    55cdf9de67a6b052b189c09e88eb203748fb8d4f3bb115d9711abeb83a256aa3

    SHA512

    23e81ffcaab4a28158d478cc19ef2cd0910eaddda0a33cfcd70c71a7391fdbe30c41a3f89d84613b0cda656521db7ea54b56242691d9417fb0c240b9cbcac604

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    315829f4b69e5325f40da53e586399df

    SHA1

    da6356c436c368e6471922161f5515a338272565

    SHA256

    fa65921e0f901d81142b0ab319aec99b228cdb74d955359e67ea1b55057958be

    SHA512

    15a6aacd1f8b95fa1e250cd3cb45502ef05a93b1c5bb9325c771dbc3145fa9630f6047919309f9d4cea43f1d2123f4d58799bb33fea70271797d639e5ab175be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    600000e2f6ecb8585b45de8ea595fd11

    SHA1

    0d6fd431c9447fd7e39d08d031eaf2794c6bc892

    SHA256

    86da0337c6aab35c7e72f9cdc91bccba49c7610f3ae3a4d0faf981817f756a8a

    SHA512

    e3d512cb1ddc7201af22fc349fcc26c016984d6cdf7bf2a8bcbf553980ffb6698848b73ac75973ce491ad4e24b8a12097cf9a9f3893c99748fc83400000d24f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fd89f09ea645d59f82c2772c1aa656e

    SHA1

    a612583dcddfefcb5c35bc5ae52bd80078957992

    SHA256

    88a8b289cca7216b79f1c58a53dc7ccc16d7cb372f2c807cc1dd114fe8a612db

    SHA512

    4a941fe60db5206ac1b23031c98512533d9bcdf76a97fe0acff994044e722b8da9e2d60bee5cc49407cbd9d161019e4ef62b0f4bc57ee5ada7a62d52dcf9f60e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1995d5a7caa2d6eee689cb665df5622b

    SHA1

    ce831d76be27a64c0a8a87ca5e9c2f6eaf996aa9

    SHA256

    01e4f302d9ea486ed7f9a25c45ee6f00466eb2dad3bdd32c3b2eb7c5a977d915

    SHA512

    0e8c24691b1c4629488d176d996dd77c7f081e0cc96b4f382fe7caa69522f560055338444b1e973e100f53a33b526742fda8cdd612b8cbc3d2cd9dbe84cc4267

  • C:\Users\Admin\AppData\Local\Temp\Cab4A69.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4ADC.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a