Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    24/05/2024, 13:16

General

  • Target

    6ea21fb8fe6d82a48391043beb465b8d_JaffaCakes118.html

  • Size

    460KB

  • MD5

    6ea21fb8fe6d82a48391043beb465b8d

  • SHA1

    80ac6753441d8c436549f51796701a974d59d6c2

  • SHA256

    0f8905520cedacedecbf898f74527e7db66ed8e64877dcd885a04079538fa486

  • SHA512

    79df69e0d74b7db9f0def679c3969639827345b05268602af582f9347b5ef1f425498d05fc0cfab63121ff422e506e947ca65f13302133ba1533ef8bd035563e

  • SSDEEP

    6144:SBsMYod+X3oI+YPsMYod+X3oI+YYsMYod+X3oI+YLsMYod+X3oI+YQ:C5d+X3V5d+X3o5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6ea21fb8fe6d82a48391043beb465b8d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1848 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2936

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8445e7d2e767900062f5cb2db8f2bddb

    SHA1

    aa25dc060cd90c59e1dac2efa3a336b76cd0098a

    SHA256

    95b2b6cdc2a0b9a3a1dd4772164d78740c4897fa0784662b00ed21647253f6be

    SHA512

    d96185af5a5716bf82f3333e29170eeab20c236f25aa15c9092bc341881be3bdbb951f6d6b0eea499da4da9e1e6a0b04a05d288b74369f97cf41764209263493

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e85dce9a5a182facada1bb7ba3668b7c

    SHA1

    6d3d9cd25085f06d95d604a0ef9db935e0b0b5b5

    SHA256

    6f58e144a02e7d853bbdb595c4683602ba391c6c53573ae431e48bf92dc81613

    SHA512

    cf2412d0192c037d61c5d2fd7a3605115baf7e49050fa66a680179060e6bf93ffad6c6d3505e733a02222147864b3c47fce20762ab5a69677009342188399c6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    112861090ae04556f889316c36419015

    SHA1

    f463c86ff3b3b242e34f62505df0175e51fe0fe9

    SHA256

    5a00f474ef768bbab21e872c4445bcf166d97985bc76dc90bebf779d0182c5bd

    SHA512

    307d1446e32a97a34206a70ba01d03c040cf605b679964b03abc9b826cd8837242e931c3f32d85e7dc9e995da54fbe4cedee0d37aed80fb6ba5c1a47a0640e5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df3e3137127f632492964e1bd99ec3d7

    SHA1

    5f4dd53af94a5a482eb9afd936c95be15000dbf2

    SHA256

    dcc5f4af70b9aec7f5ca59d944ef3cfacbd0ec23e70aff9167c6f37446eaa251

    SHA512

    c6ecb373ab5d9eabdc6383033b8319b7e994bf3a9256b036064afdfe4da94b272c8aee2dce4c644b12056b9528eb4c7f4ad559d09dc35ab229218cccede7dfbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3848437a2c65aa9f1d6b917cb9b743e

    SHA1

    5243e24721618dfbade5b124892df1d62ee8eec5

    SHA256

    49d230241030d0e820fe4ad21c0e7ec2fc59295b9d8764591742b7d7009966d3

    SHA512

    2bd209db8a313071375ceeac42fdfc85e0adcb61d15a1fa7be3e5ece206cf86d380e5dabc4dff6c6c5e1ae2b9b21a1215b083fcf7eab63b32827171c589ea25f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    733cb3e6ca0157bcae1def84f40f6257

    SHA1

    60ea62635a7062a4f5c179476b747b1e14349459

    SHA256

    15a846925ab2bdc32b4b49607a4893036dfbdf781d1a0109866f66ab77946458

    SHA512

    f4273f896c974fcca580f3bd6109afb7060a6bde0e4e272e5e502b7415e1d98fe8989c701a0baa7ab1b19626880a05637b2d68feb64d31b04efb9b77250468fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f149b6887fe74eb7d10b55d7d591a308

    SHA1

    f44d43be580ae15f75f955227c261fe5b2333c17

    SHA256

    9244ff97d1fccde55b7369e75a8c6718ad563f607281893e66981dfa3e3f9e1b

    SHA512

    0b460d69333e9457c3b9777996f34f3fddcb9b52a249eb1fd732879962a7f1767def7673aea6d2c5bc47358ef85301c6b03c4e9ca332f262bff488fc3629f157

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96b08ab039ac52015b8d09f157501bdc

    SHA1

    090dfe94d28f68ea4a0495ba7eec467e3e2bef9c

    SHA256

    3597f3a740142d2264253af8d018b9797490258ef5ec98d19e3c19e4caa01d32

    SHA512

    aaf75df86796d0795733b833c4f37653ca28fd763293326deb588937e56377f48af5eb2a88dd066431d42b05bebe296bde42798e35429b7cefaf88451954eaaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3f1c5aefa610c340f77e14efeeddf93

    SHA1

    7bcaea5f4138c15299e190f37b3de7993c45d7ee

    SHA256

    122445e0eca63a598a93e335546092b8923ccbe06d76f33a825644da0c6fa0f0

    SHA512

    f298a1e0ed54b7e19fe053cf1bdfc9a0691f449f9bb1f827fb531008ab7caca2d9fdba15060f1418a7cdd7ddad57cc74882b3fdf60830ae48bba1db9849e68c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e1c968129264a2573df9ed5bb6cd11d

    SHA1

    ab3bd18a7e5ddfaaa691a761d39f493b40eeaea0

    SHA256

    ef614463b9adc123e3f7b0c6c88ec9d718ac1d5d36cad9d03432f6e9955bd6b1

    SHA512

    631246337f9685fac0d4b50ce26d0ae1ebbcbe6d5cc913d72db203781bf19d64e6c1564831fd2278b7b404f416eb5de3ff92435c4773f7222b0f87cf71de46ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2fd21c1677d1a921eaedab36ef8438f

    SHA1

    d0e6ae489d64591d6b58ee5ce5f3557c415cc96d

    SHA256

    f5d54dcec045249a38445e2f9a1d4274c864c6c35223fc493b6ebbe2301c1b1f

    SHA512

    26d31b1fd38f4df073737496170b7d80ef76fd9562ebe2cd7eb10f180211d3da7c269bf9e5284f7aa21c51a7b962851ac3e0e6227cdaab9371882896ee54b617

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f936195c49737ab763bae594c25ab6f0

    SHA1

    13cb681363b4a415425eaa43e60c4665e59d9099

    SHA256

    f8e1900467b2846dce10336815e290a85d0511aafcc58fa513de6dc48d9d572b

    SHA512

    fa734f22e69fcbfb458e09a97f90a9449fc6e8eb78151079b17958f6479bd6e7fa7afc5b6d2659483fd2a2abc47837a0c356ccf8830d38b8de73cce4db0e535a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5efc2413740c41a660b82d4ccefac64

    SHA1

    f9d05f432ca9efb76e4d92510dcabd17c40fbe4c

    SHA256

    fd4591dd552aed9d8a6902552284112d7c26fa33fed7e52ee5cb24e2dd27737b

    SHA512

    53da6de9a1838b7acb4d3c888cf3bbafa1a946b2c2a8b3795d902fdaae7e350361a2ff53ca0efad6ba39028d34a8302bb5a52389c84a67875931768ac2f0ab3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7641256b5c18e3f71294045bd1e51504

    SHA1

    627d7b3d750ad7751ccee880e4cfc43650acd9d0

    SHA256

    8b7881bc3ba7c9ba38689cb77c29ed24a39a7ccd76ec8586f616519b30dcfc1d

    SHA512

    c85b0f07f9c0660ea426f1bf26ff45603124fa042b4278b512595c9784772063a470ad4067a0903afcadb460f5c68a1d71941cf68ad7328ffa9e24fd9ad55bfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0f8bfb7c16093ede31fd5fd761a5a42

    SHA1

    81e31eeff9b3a685be771412ec35834e6ba6fa10

    SHA256

    1c1169d342624056f3357ad63a1f27cc381cf17bfadf2738972bbd2135e8edc4

    SHA512

    a99fdebcc00d221e9631272f3b9e3887b8a6879789a25525cb8403aac82333d7aafbef3cda7a06b0a33085eb8e72cf5ff829730c3a14bca0472c0e7f7544bf42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf4d767d241ab260cd25eed7fd87de55

    SHA1

    79bf063061aa74d27a213c3e45fe69e7d4cf3c27

    SHA256

    9a9d3ceeb51c6d2510884ccdd1cc8b33bad38e91605b37ae758ac08bf99c45a9

    SHA512

    c79fe1e655181eaf60c998da5d29568eb3be7b190600f6ff2c26403b97d28533c7b4ca6c68d075fb51d7a8bce5674595b91efcedc8cb7feb51e74fec6e8dbb8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68ea72fe5bc2e64e009edb8fcb7b4edb

    SHA1

    62e4ebf631832d0a903d2cebe0a4e967a82b564f

    SHA256

    f0d54e0738c54b98db840a15652936d6b5a914f25a32048e207bc7d371e99e73

    SHA512

    a64b7739c2f6478cff31906563a87edd9fadf580b186e4d9cc4acaf44d7a12bd32e91139f62d1d253cfa3975691c0b720717e5f1caeb9855b6febf04d4f812d5

  • C:\Users\Admin\AppData\Local\Temp\Cab5266.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar5358.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a