Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 12:57

General

  • Target

    6b0319bb59233641ebfecec5ed56bad0_JaffaCakes118.html

  • Size

    350KB

  • MD5

    6b0319bb59233641ebfecec5ed56bad0

  • SHA1

    e5c2b7f2dd439b0df9b8aedba0c45a4e8113322d

  • SHA256

    9e162d83a172ff16ac1220be7f63243adf7812c82d6efe1a9ba80e0afbe09f73

  • SHA512

    2fd7c1eef9bf38a1d7b9591ebd6c7e25c2a32567d13d62181501d153c32ebdf7f50b0f4d722973be65e1d6d7f55ba993dc2127956dcf7addda36b7fc79bec90b

  • SSDEEP

    6144:SYsMYod+X3oI+YBBmYsMYod+X3oI+YAsMYod+X3oI+YQ:15d+X3r5d+X3Y5d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6b0319bb59233641ebfecec5ed56bad0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    328c9e8376a06a70e212d085b448cb49

    SHA1

    3c45276bd3e004e6c2d675bc75ec0ee625719ac9

    SHA256

    3a62e8e06fb1d4f1725d3befcd3afe45a70b378b640de50b15b1b500f77ec148

    SHA512

    5cd22ad345a3c3fe633de69febd61c8a637daef703a3e6b3fd0ebf58189eeafe96d810c77405a150e931ee8275cdeaaa2c415d30ece159c154f5151b82a80234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85addc12dcd6ca3004b72f5ee2ade440

    SHA1

    7e55327c1b83f96a1ca111562e5e891930152b74

    SHA256

    62997bfc50989e069e5d11e05bb07f922d213a91c266b35c58ec392384cc2143

    SHA512

    a513b7b8042d618584aeed839a4f3f482c7ea863f760c164912d10a8aabfeb4367e3134c82f4d55c40fb79732bedc4d13979f01053ed2f404b63984844486458

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3dfb3e492ecc7df81475d6719d06ae26

    SHA1

    063f8d26dd516b07492ca2b2073fe6b074cc6ca7

    SHA256

    a04e17c2ba49bf1ced448d01b7cd52108be7e4bd4b2b58d54aa2a5945caf8512

    SHA512

    c887f34a9fcce01b291fb4b7142095a41b091976d0489f512712f992a2ea9538948e0d94f1f525b7a902a064f032e07c4904b7da7c3e6f5bbbca2b22352c2661

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3552536b4dd1f7a15fadef1f65394edf

    SHA1

    63b6c113dbbd3176941c84403d1d956137064936

    SHA256

    41d532e0db2f6b7d9b1de12f438abf6f86e509a2b2987d3504972598660a13aa

    SHA512

    c0fdf1318fd480b43cb79a5f4049788166875baa6617aed98a5f104b71120dcf58e1e48b6ea24718452de44b7248731d5f631ef1fc40cfde015c73dc51389e8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0854ebfc1328b886dec7ec38870dfdf6

    SHA1

    8464818a54055b7f627c10a28ee7581ef6416da6

    SHA256

    3ef5265c223d326a7c95d203671cecfa89dcf26244cdb512b496fe12c56a342f

    SHA512

    b4f416477b5df8de7002fb1bf713c9bded27cbf58be3f9f2768bc9a6d43a0e94cd15b68c3742bfe8c60400c2b00ca9a6e2f1673a75e277341175990ab2b9cff2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44a372cf3f6cda669a93cc96cc8b7073

    SHA1

    81ae2550d503816e7eee4fa7022bb57f2ca2a538

    SHA256

    1b80a4828e623780e0c20a6ae7f35bc60dad6d832aadb1c3b3aa20f60a60a088

    SHA512

    d63b85f122a8c691f04db1c56977b3d787112dd2acb074826e8ec9750ddf0d824e89cfbc364614a642cd60313befb5fa89d5b46db6c0bef1792079b65885882d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c327e5a69754d7c4634febb45da31d1a

    SHA1

    423eabe08ba3234db3f8fef7de993e16d42dd33d

    SHA256

    706ddf884753fa3bf295be17de220d8b65d22469ce1371fed1ae72c5c3a4e0eb

    SHA512

    ba7ddafb1257701222381118f64ecd3404d884b8a0782db1c2bae5dc11a420c1262454d9834ff946448851531e4e9d9d5953dbf4308d0ba85c3e20053b82512e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ce2cfb68329864054ab5ef7f6e96298

    SHA1

    6378d016aa2d78757c1031b70635368ebd960694

    SHA256

    cb793a36679c25eb627144ab6bf0e3a49256bab6bfeb7f269f9d898c489e07f9

    SHA512

    10542b2ba459f0c1691ed6908b68f7d6a46f1910e847abc7e42e88eca379724bf76a4cd0fd3c72adb6cc70fdf35547de5f65c6fd3f0d02de1a673292a1fa1e8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fe978106728d1e5971484742c8d0f97

    SHA1

    d238a9551485727db72906b957b8e5357d26d00f

    SHA256

    9751a48bfad9505c193dc7b22f0c19731f995c21b903ce1881f1d99f53de8321

    SHA512

    c9a67658e5ca0a953160eaa6c03bf3ec6ceccb0b23a2075e292e0078ee22b016b3a30967c0161465ce5cff2dafd67ab9da781f5ec4f2627f43bac296dabdc89d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0862b7014434d76fe6ff2b4f7cbb370a

    SHA1

    34de90e4daa28222fd77f53ab893c0019145b283

    SHA256

    98905526230d45fcafe9dc0436ae3442778690d04dc356d5124789de790ad76f

    SHA512

    f74704dfad95d330fa4d20ed0a588849df0317892667460ceda75decbbe90f0273a064659766cbad1070a0bc2de2baae96f2f02adbae4e41ee04f0c4348e226d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c42e5c069f9de3394379e2f3319a426

    SHA1

    4d2be45eaba16e183f550f763398cd40b7d1a8ab

    SHA256

    5e043329f2c55345a75c7d315949657b2b412379840fa5f8937d0a736be53311

    SHA512

    325e9ed0701fd3e22ca000832831d95ad3cd623c9abdcef24b3686a5e1801450be30f377b2bf4df167d683d9e31b2b43b43fb161b6b163f1f7214d97744a6275

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25410e0e5a8bb2c1d00ebb8a09ac32d5

    SHA1

    822b2e293b103c9004fa6e1670ae49c7eab7f866

    SHA256

    cae9c452cfab1b038030ac404510c9322506043b7da51e71d211011ae095d1aa

    SHA512

    96953ac8c7ee77bf7a3050fbb09fffaf2c4f72a9eb0d8dbf6af52e11a9de3f63ed216c59e255bc573f87852a80814d5b5ac8c572e4f3011ad0c4f0ed918f6434

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    019413e0fadd1c17c85b547357b6f821

    SHA1

    8b2103ee290ac68fa47b2de959ea0125e2b45997

    SHA256

    938b1fb1c5b4888561d30d32e1deef31addff7a3b686e19729f4c5a8f49db473

    SHA512

    28b2964e51e05003cd9503faa22fce447f0582483d2b84b43e3784b5463bfd595eea6434c32f69346f8d15cb250b3effdb6ebba7f03f430448c6e5f243762906

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffe2447a9e4546bcb135fea8e1e5b7fe

    SHA1

    f38806b87ce0aa5ef5889ab734b4084bcff71951

    SHA256

    d9556e141f04ca716a7f0316489ca3953db9bf4e4b4633b560eb410d7330806d

    SHA512

    94e969e91fd35877faf252ab8052f40891e0096212974e4f0733d0219898a37a3fd1b4d1256e07c6a249a9d78970aa9d9c80b7d150a1345248b2e8d96994616f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7b95f0306f9d4bf3e0b52a4df2220b1

    SHA1

    389780e1f9eb0c2f5aa3d07258db8a4a3af843fe

    SHA256

    e561f8914c964798802771c7304789ebc294bcf8086cdb253580cbcadc868f49

    SHA512

    564f4d1c0c8c5423fe710e00235fe5e36c5151e2001c5ba70d93c5301bbd274c930c31625b9a39ce25b57e45bbcbfdaa33c76b1ab6adc97019ebb1e642433d28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c928a0b1c3a088bdccf13d1f3bc09fab

    SHA1

    795a2769744a9237802df7f51ac2e57a3989196a

    SHA256

    e5cc63df6c5388c4065ff7c9f468292bdf8b2c456ba9c55e324c552d138da1c3

    SHA512

    da5da32214cf01153b09ea6f70e7a9dee634289c9f9c2d640950f146f6452846bc168859fe44f81ebe8a8e3c0fbf80abf661a89fa2501b3a522af6437bd25f24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8cea340c0b706fe54c8302cd2ecf3d0

    SHA1

    d11d8b6571bf2f90e38bf6f34c80c6abb56f5f7a

    SHA256

    9e61c2de4cc15366ba246cb667deafa676ead5a56c4d7fa06122f0813905cbb6

    SHA512

    f4242e7c3ee0d8ba50e56cb608aadf6fc61c321385fe4b00dbcda0da4e57243f667d3bf9cc5b20c72daf2faa068ba14396a98e7ebf5c6f9a98c28b6a99cced5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72c03a2d47ca982d7f46586733727ac4

    SHA1

    3a9ca5c6c7f0bf77bc04daa2cf40bb029ebc7df4

    SHA256

    1370c61dbe2b10e43867a92002dfb547ee554077f65a3fe707dfa8e4c680f4b9

    SHA512

    bd0b75a1092b4b004b37df663dcb10e2f0bddc9253c29b00992f791447aa34f57b11554bde51d38467a8c9b7debefe9a4c9fea60063ee897df38fa4de2958573

  • C:\Users\Admin\AppData\Local\Temp\CabBCEC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarBDDD.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a