Analysis

  • max time kernel
    118s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    25-05-2024 20:23

General

  • Target

    7323ab508b77d8b7bd31349f4909314e_JaffaCakes118.html

  • Size

    9KB

  • MD5

    7323ab508b77d8b7bd31349f4909314e

  • SHA1

    ddaf0b8ade46bb93eba83c3b3221761ebe574a40

  • SHA256

    d0184a2beae878b4561ee53f990938d8374ab3f65d4b0104c8457f1ed5ebe80f

  • SHA512

    774ecc4cfb9da29e438a8120878fd63a9c7ba6682d28653fc5e1b80c3a9f9b3de319fecb5dd197609a8fd971db701bd5f4b356f98d612254d56ff9f3c51d54da

  • SSDEEP

    192:SI0rIkacai+uOMWeF1d+6VqlpoAj/9zmCI:SI0EkG8t+6VqlpL1KCI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7323ab508b77d8b7bd31349f4909314e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1488
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1488 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b7ceacaf88b2b0da2d9dd8e8a3a7c42

    SHA1

    d0e2b1856aa83c0bfb0a92e2d30292c001c30971

    SHA256

    603a76b92cde7665c95d6ce34b1af8079c5570aefb0ed438dc5f5333cd58c727

    SHA512

    af5d22db7235b80d4d4b4dc560191e8902c176ae0301d890fa17333a37c9edc6cce4e3126d7ce1c477c8484598ab4e49d3f21411e5fcbc9054d023205e924397

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f67ea80aa977ee9329180d2ac2808ce2

    SHA1

    b686009c09653b4d943c976fbd390127f0d52b30

    SHA256

    844a3e1268bb31db2cc9be0c2c949631c5f811da0c9dab2d93d28c1b547b01c9

    SHA512

    6070946ebfc82294eac463034498ee23a0100228b104f884ce005591a9d877d1c271a02554d098becc2aa94813ff3abc08f5f0e9a7cd2b9d55e243ae9fad3208

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6988ab3d5d0dd0b33f8e87fb60a18fc

    SHA1

    0aff5e57b58df3337075d1073256006a4d67a968

    SHA256

    ecc4ab61ff6413b06413e19b35aa76db28fdc8390d304c1ef5c9a5fba38d576a

    SHA512

    811b206aad2ff1ef7f3b4f381946f28616cd3c6345e6e30f5d166cf72ea0ddfe6c6f9a97ae52f759d0bf2c45b0d152f75d3ee9c0b2c60516e2d3b00932885b82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b70102a557434053219d1d34640dd46a

    SHA1

    130513e713c43ff94f5c0430bdfda6c13d54d37b

    SHA256

    a6d0b7994c9f46c92dcfc69594eb5ac4ebd2ce96b03ad520bb255503a6e7272c

    SHA512

    caacae3794cab7a31ad2a834057171282875a3eeb1125137e8aa82b1848050f10d5577920ac7f07c7331fcfa25f5b6021ef4963bfd14b0738483f7d0cf6c5ebd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9ab367d0aed6f5a81db5a367328dad9

    SHA1

    c88549e1ab05c679a16b6ff77e2f95e854448667

    SHA256

    5f6b8b02742ae9d23708c646d59154b4146949fac9e68fdb4bc19055465a8a75

    SHA512

    a351e926f2a023979a419bcaa4298b0d290f0027158d9bb9c6b4d1e31c3ead26082ecd15114806ff6ac255aebc3b21927540f2ea1be4cb91006b9b0474bead6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60e57ca6802db1ce65c5e5c627a78513

    SHA1

    af1c7a64f0971e2052ea0c3061d780ad1910a0c7

    SHA256

    61bb1ccd057a34edd82e0001c035731aec4973ad9a0c64999f82706c49c2b9fe

    SHA512

    697913fcfefc575e50fab94c4556fb844af7dba3cc9fe8fe344b367f75622b6aafb061c5d3b6fa5953cfd4343ac52deb7dd26ccfd42d9f0da09faee732384c9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3e4832c2482a86a01e9049b3a4855be

    SHA1

    8d2fe71cb85623fc1040da0fd19461a254831ec1

    SHA256

    e1705bf9b5c588ef7b3707651afe79b6b31c77892535f353261bb12771927139

    SHA512

    63e92d512cf28c6aec4589a368739decdddfffbfc50461712469c1b31497b1d8e9dc8428c4b0b1fe3839a12afb002018dbb9e7e2a7f1e0570a11ccb3edf4cba6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    578d61ec4cbd6e783dae607a3ec8019f

    SHA1

    eb3f1415536d143beda9ef458c8021de549cd5f6

    SHA256

    8ae5944521bb6affe29c0c64c775e46df2e0aac2e593e39f45da774307d84802

    SHA512

    11e4c9e02306bc69c12595678d32bdb26e0d187df60f71aa21a303d99c0d1ea112c756e8d6f110386bf9b694cf3b6376d934518486c82d67fa7d4e77114589a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfb03c3892bf191d057d377c8d61f256

    SHA1

    c06965e453afb9b0f8b06ee9243196708068ba82

    SHA256

    d28707e4fba9bc5d4a14939aca5801361c950c12dad7481122b4b2e0aaade453

    SHA512

    568d1f8a25f1131578ad7bfddc4d2046c5949466b247146b71367285de86c78cf39a49a2dd7e4bc6446df7c5c3ce618f1878d79298999d7a7de65359ef9bb52f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bbd7b6c7b5b94dec91e00e5c5018500

    SHA1

    182da65ac06a48fc9c3e85e7ae15ed49e9c775c8

    SHA256

    86e7b5d300464b43306de3263134c07254c33ceaf10eace0ac47fece2124b472

    SHA512

    d93230c84e2f434e5c7c696f1144df55cf6ee9cb04d0af403191a63f0f69df662e6a8ad1073f3a5fa8f70063d20dca727e7159f98ed8f7214b6970a8e0807ee2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0d6061ecc2b0d9c6d039add3c92b772

    SHA1

    58958977d8d4f5836c3822b89792649a624e773a

    SHA256

    0b728fefd55d52d0c857d3fe45cc120910968b6d333eece6145ca00a93523a64

    SHA512

    a86a4712cca3717b06a7ec33c870d067a7638133442c2d7b0e1f2a0a7941a196d0d314a76d5564d81082f3547b7f741e02e4e4f9697f71bfc5adb7911f1791ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04e02ff4c88278ea09945c19e18b98fd

    SHA1

    ac7cada300ac5a94d7c22e812301d7068190c311

    SHA256

    5612a9ad353dc265ee72d56236f8284f85de697f2a4859caf1f48855e436540b

    SHA512

    ec94cb219802a0d76bdc19b67dd081cf5e15b5259b8df22f7ce067749ed819ab229ed8a1ea8ab705f6dc32e355eccc1e522a6e662f290c154d082de1093a6f95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0846a33b8d58f3d857f3c7997403b737

    SHA1

    da75a57da277b21349a01f3673b6c1d255f614ef

    SHA256

    8fd5c0287896ec8bf3ef7866c9710d8ba25083325d807516ce0f393820db376c

    SHA512

    55dfab035b8f5cd9f6fc818b2321cb376389d75cc93d864ccd1afb66c9faed35460c218a4d9aa187d5fb0c6ef207acba2ca4e474df9d7774ccbca63459e3970f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc1cec37b7ab685feaba0ba8857c074c

    SHA1

    8d276fb8a4c74bf5a20b41db38353f3692032691

    SHA256

    aa92a9bca79d19e6360eb77d64c7f2dbb125b9daaa971334598e3f16f685312a

    SHA512

    714920fe80e4bd102a07db958d6445f65611bfd9b4624a6ccc594718745cc95a5ce2624cf7b4619350847bfa67695fecd7d3a99e90d33c4683abc79dc9a778e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b506219c5c37424fe95345fa6ae3a048

    SHA1

    ac6c7babfb34328f0d4b44076e6aea402eca2d3a

    SHA256

    465dc44948bf1ef8d91accd0bad826108ca328c73976d39e69a59154067ca17e

    SHA512

    bc67a2b80011397afb7d1f3f5af456ddc5741e538df430a4385b61158e2603fce0e4ad1457d6516af3f3ddd12b764d5765cd9acc78ececa30cacfed7b3a4707d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77dd184a557a16b474285ce7ad299546

    SHA1

    d717bbf73bc253a22f4458cdd6ecc588598365a9

    SHA256

    a4c7c0ad84894f9b19cd3e1f421c09707080931076c2724a0641765ea0223106

    SHA512

    457ec5993e2e8ad498da0d98699675e82fa3449a2c64129215a6dc69b77bd2e321f05a943021c2a9a681642435c83934e8009bbdbd523072ea724423add88e5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    006f945dbe130cf63948703aba6a7b0c

    SHA1

    8c25f98869dc933ac0e834db0224b7ccc364e625

    SHA256

    592c33adb3e19cb30082308cc02b7b97897a90e4c5a2b25ea7b632e2e85a93d7

    SHA512

    ac356f2637f43dc2a220496552598ddc9e45f33f9dfbbea27824189f04c9d03e8088916a6e058570ce33efa04074dbc30588de9920ecbc687aea3a67af8d5e46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e20b6a30222d4d6671895d738a252696

    SHA1

    88c9e5f5872ea48643973f649ed67a71e2cabd9e

    SHA256

    6eb64078ae2a87ef966f436b70ae22250d382d4b00327a843bddc29ed33318aa

    SHA512

    1617fd62f461b1bc581ded5d149cf0a21c24431e8a082fd9cb3713681af5f32a0866a64aedc020fd47737e08cbe09fd9380e112bf7acf30c4ccbaf416169c0a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    543360ed027e835aa6516836c67325a8

    SHA1

    98a29f7b34a7098458cf53b5f38e06b94f6a14e6

    SHA256

    c57149cb618c39b3a4981d8dade56975189a92244c8b1c0e3045c79457860a92

    SHA512

    ab2d0e0b2d1bd821bcb6b464540c9bc1b897b5aa574d91b50474b476ba0df66ebc2ce97b75be1beb3e3db1fe450a20828106a4e59c42fba53c3d32b17e838462

  • C:\Users\Admin\AppData\Local\Temp\Cab25DA.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar265B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a