Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 05:41

General

  • Target

    7102c20738d6a137ca33c44a8666607a_JaffaCakes118.html

  • Size

    87KB

  • MD5

    7102c20738d6a137ca33c44a8666607a

  • SHA1

    f975fff1ea3bf3040bca21a0cdedeeb24020edde

  • SHA256

    d8656b1be02dc89d715bee1dbeeb158bf1539bca353423530bc2213d7979b26f

  • SHA512

    ce9c61a9bff97897375487e7802d2e6bc04f0dbec1d31d5357abcdd8dc9970e149e27f44dc1916408223ea21a78bfe9287a15cdbf46fa1aa932ba02527bd42b4

  • SSDEEP

    1536:wTV5b3JDB5jT+PBlzntabmiEnYwdPxDGnamU9vbiCKqnPz78AKW87wOOujzOs8Po:GJDB5jTIBlzntabmiEYOxDcU9+CKqnPA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7102c20738d6a137ca33c44a8666607a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2108

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    6f6e3fca3096a0e7e7eb59d51f4a5350

    SHA1

    c978fa12d9045c593d5e7e097037ee465e09c3b2

    SHA256

    d27a9ba9c11dbd9c2b2bcb61a4128f457e7d15a3db20fad170588821e4003d78

    SHA512

    c45004cb6359a32eb55f1f2ff762ab948d79991ec890ceaf988d513ff9cd4dc0168deb2235b391b43ca8d69d960ba302fde0ed13a2b0e1dddbd63135f27cb546

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    7409d3f937ae92c5eec3cf99fc9eae39

    SHA1

    fabe19b2e91cbf055c61a77d54ed88f000930a40

    SHA256

    6ce8412f6dc0521bd93a16863227745de0e43dae8a1fc84f48f1bd74ebb98f14

    SHA512

    a49e1e37fa3504773f3c69a6b90cc68dc9de9b68df9848cdf2ce906714880a0da773130dea92d80cecff2507508f32f8df6298cefd3c5f07b0275b95925f048c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4abf9e8efed889a50976401a9df05249

    SHA1

    773fa73c2d0d3bac304f031dd94a6f0d0e71a944

    SHA256

    48b4e882a616839e1260cbf6fdb2fc2313c7fc7f32eecc3d5b9ae333920f7ae0

    SHA512

    711a516b71cc4abf7025c89704ca981edc3897ba0eba17c9d9e3a2c7568b43bdf8a209d3fd2d1b4ddfee8af5c2a75d415b416a94a1c0bf8ca5b14d1cdbfe4f08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4f7d5f71f06334db94fc9955d8acb7a

    SHA1

    e7740aadd59a359b5b91b7df774b1b30820f7439

    SHA256

    1d2a45f6ee94a1fdf657d9b037020257bab84411fd504e7a099f46a198d4b2d2

    SHA512

    9f87b4fd8e868d367043bb628a140438ac4719da1b5b452b705426ec81cc2248985aad2bf8e3b210175ae0646d2b4a3e2039e25b07d15511771da07db3301a2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3f73ea35b73787a0f09d3347668683fa

    SHA1

    ec417db3fa1d27de9501daca80812487d67933c6

    SHA256

    a1caf9659ccc18c11312b8394690f11ee7f18cf5783c3438a4f8f50a009a3767

    SHA512

    0e377c24bdacaef765868adf57ea88010e3505aba37774abec36a3c98930cd62451243a40ffa9773a6a5c5532bc053717646ef0383fe8db739322f15d7a6e38a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2be358b58b4ebabfe91abeca62f3a522

    SHA1

    b997935fc2f5a4e5cdbb6fa82ddd17a74195b092

    SHA256

    228aeccda330fdd8d6b3cbe2171eff9b5d767e0874dd112ae139b677908c0694

    SHA512

    cd9d783e83dc03124bc81f8c20fd6ef3032344535de3fd610a2de473fe33cf98dd79249c545e35a200c08ed712bb6b78c9e9217984dc30d48d05690dd132eaf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    358df4bac097e104cf4465a6c7791f70

    SHA1

    41e43f283a7961d6e970f522962c43293637fc5d

    SHA256

    077e35bf2463556a069727f6e0f6925edeed1dd7b33188f21f709119bd2a3d9a

    SHA512

    92de46282e5cab3979b5fa4182eb9ed3db2687f5f1d5c9141afe7a4de634c098351dd73615eaa901853b974728ab21110a9057bdd6c619ab962277d1ff32ce8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d3591ff3f479975e6cc88a182c88a31

    SHA1

    4aefee765e144540498a318a36855f3701835aed

    SHA256

    65c170bbf62e0df3183d9f0b574543eb2257f6f027bb09d57d47b8c51a361606

    SHA512

    32b006ac44c3ed89a82ca7992644e0c0bfcce3110f75f994e8a4f9b1789318686abece6ee4fe8b4a500d255cece640ea0a1441bcce1a1499fc7d5c46dea6d8f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0af951d77d6605bfb9120e191fe3be87

    SHA1

    58581c4a857a720cadd0a4f7de54256568a9e0fc

    SHA256

    5ef3da0739bc88b7e2bcbb67108dff7ad0b510e1b168188bc6b1cf881ac2b026

    SHA512

    8f1acc19117c7de769f974e4e4928ac52a84ed3f8d725d4672b15fbf94d3c956fb89f33f02361ec8e9adca9a3a1edd13c46c552f55b9d8ee89b92950af015913

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1724082420c2d8b33d2afebc9b55120

    SHA1

    4982cc3e25040c56552e7f379d397478c98ca385

    SHA256

    47e6faff1634c3697cb19fa38855370f48e279ee4dcd456cbcbaebbf7a4af2da

    SHA512

    d1c0a05a7e3ea84b70abb55573fe85acf994c2d51d6dbd63fd81be31d29ba16790f68f57270a42df88490d6e3b2d8cb4a7e50625469894eaae72e56bac35af3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b70217ba475f33f21a88e3225ffe0697

    SHA1

    978ec62e4b03237e794170ef991fd195a5cea28c

    SHA256

    cd7e29ab2723f3bd03b9f4eae31d59015701b88499e297895e1d98688a0b49c3

    SHA512

    c01d64f492f92e88a37c832874f787f71abdacf2c0d3b44b81972ddfe1e3feab136c055636c83183c540c04e9778f4e442e33322c44610a4fe5cec8f75285b2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca9604f1d1abbfedcacc1542bb8a3a56

    SHA1

    e7be18bdf03cbc64b5b2cd319586f31aab697977

    SHA256

    2909dac2dc73d50d87a15c588956b2de95d172630bd9a917095aa6cc9b800381

    SHA512

    cc68d40e5d5dd98f3591bc6c1cdb1dbf60e4427d9f62b71ef1d9110fc8a9ca7470990485b18e3828aacc19980aa3aeccf154b9cf09473fbca14ba55b604bd454

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cbd911f16d6d4b23c47144fabc44dc3

    SHA1

    812973fb1de4bb3d7573aef2aea276c804d14ce1

    SHA256

    37e334857a439c3ce0c9054857d5a6b69f010c3374bf875344801ea3a5414f45

    SHA512

    31b978e88c08ed3d8c248bcfc9a4159c02e4bda2bee5669ad1392fb1bdd509ce20dc8423a115ffb136841f439add1907b5d295e2a97740135415ce09f8c10f25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aaf5fe7fcc1383a7c4762cedba8e7a0e

    SHA1

    d3bfa1821ea0e256daf4b2477927a90f79b44e52

    SHA256

    814f2117a93b2b3c232e48a82235b7df77fd940afb4211cded4cd0f0ade79c03

    SHA512

    86f2f3ccc5384ea9ca2a4f5dc75565a23b068e4cdda7b7c21692092122aee27fd1f07e6defacf7d3bb985fe0634287000c39582139998f478a2329a5ece6c979

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c90235775ef143da4463741b0c2f17bf

    SHA1

    02a21937bcc4cfe9d06dbe9191894a73f4efb753

    SHA256

    8efb3296945169ae047c6acc43ec81941376425512dd0703ecacdf0b9b00e694

    SHA512

    b0b8bffb2858d24eb3b2fb0838d3a1120c679a241c48d2b24ca5fb2d992ee18db2e1afa6c75abbfa1dd22ad49228a833b193a703496d219530d386eef1e5c512

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7904e857f8e0c5c0a0cbeafef3158c36

    SHA1

    a73ab420fb8403b2fa2c8f003ed63f4baf49a8df

    SHA256

    c304ffd9fd1958a129a003c5813b68507a48344348923d4ac2a6500c52288f91

    SHA512

    31b36e517e59f7834aaec59562075a5464709e615d731b522895f4f654ae170ec590d1d987ee3583a9e3d233832e5132163fd582df784cb78c7d25e9f3f47223

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12030d6b819c74871b0fef1bd6beb161

    SHA1

    fcff8931d438175617c6d102150db6f150aac325

    SHA256

    e991a87749fd1d568033b25c814b877075705d2fea06768e4be6edb358790a38

    SHA512

    3ec60f205e1bda0d40f6bf547356f13c3758befcc2f2bfb0116c49e721610454bb30adfeb297797edf7d6644fe8083f31d96e5fab278074b8f9c6cf67302d1dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8acb6508c0b558b493dad0893afe855d

    SHA1

    204b4aadc7d00d337d647e21810acb1de7bbe481

    SHA256

    a867e57aa96380175f03ef26861304d162cc36d5bcad72d56dd971c9724353c2

    SHA512

    7a334046fe95c9d2a3faa09abb3d8abf39d4332a20d1bcf4a676ae5dd60af3541e4357c709be6322062ff1c78e8c27beee1180cc0cb2893094efc21702fa3087

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42b06d81f9c0d84a5fba36b109d70395

    SHA1

    5ff9ff2ebd7d7f84deb21e22e20ab82afe69db45

    SHA256

    c7a3f56872ff817a033fecb71198447b2dcf7bf4fc067719965d6cac330475fe

    SHA512

    46433acb7096ab874b43de6c6a31a543bce6e0d4c1028445ccbb9909df6cd13eb25929f6c3c9a887534a24cd85644b81c1fd6afada59b99b2441d3855dad25df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5d7c9acf708bdc1682e79b582083b3b

    SHA1

    f8abe0062d9794c7b02789fabcf7d6aba381c4e4

    SHA256

    9c081b15dc130c581b6f39362b984e6d2e2ce674fbc9f677ae56190672147e19

    SHA512

    a4ad462a75d8792f8f41e2aa9eddc89aa1928ecc253c2cc93699087a765dafef802d8411a5dd8392fa4c1631292eaa00f5ce4ffc049a2a9056b01cc9db173331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00c9ef7c735d225e18a06bba74031d71

    SHA1

    bab353766f6fb795546f63731a1977b21b16bbea

    SHA256

    5781ecd5694288382f109de66e832afe020c68746ea0279cc5e1e8fed2d4a67a

    SHA512

    57b8fba2794d56d1db30c5f821ad60022f5e556ae436630db21fbb004adb54f0e20827ac1e106e5f9ffb141e3802da901fe18196af4894eb811ea95dac6c7bf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    5d23f29638d29667709ed92370cfdaaf

    SHA1

    4093e43b76e92c38318e9c3d38e485144581415e

    SHA256

    fbd4dd9c800a061a047a011b7df1ade543f667caf26ed18ffe6905e19d0c9aef

    SHA512

    1de11f69abc94cc451809be95857916ebe856f3af1cfed8c75be2286a89d5c7e641d0f202c651e8b75dd74bdc2b889e81822f62a9b7fddcb52549c966ff9a9d6

  • C:\Users\Admin\AppData\Local\Temp\Cab516B.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar516E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a