Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26-05-2024 09:22

General

  • Target

    7503d5a905735baf6be44290e60cc511_JaffaCakes118.html

  • Size

    43KB

  • MD5

    7503d5a905735baf6be44290e60cc511

  • SHA1

    516bca55a383a9e91379e39db4b8bf5ed2a267f7

  • SHA256

    6f45a47de88f9ed76e3b804b380c9cf843eb1b6c542b214dddfe3eb8265eb7d6

  • SHA512

    1c05f7e2b502e9765ff8d36b69e9216e373415f11ba5b06f74e50fc1ff07716e237fafdc7843876344ee4e555e461302ea3c1d1b0adaadacc488def434fa8f3e

  • SSDEEP

    768:apFrJGQRFjpPhJ0EeNso+bN3hFQD0AgFbj6YoZnGfhFYjuwQi038W+4X/:mwQr15J0EeNsoyN37Dv0nG5FUuwQi0se

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7503d5a905735baf6be44290e60cc511_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2420
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2420 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d1ca690580c224bb2bcadbe2999d457

    SHA1

    f2119ae3a2e655b5e7535b687661ad97911a460d

    SHA256

    e357540e00a4d0f0258f7cd954c779901cced648092ba43ae59c5a8f25e53696

    SHA512

    a5d03bd31d4da48c6aa22a6d756466e809385b1a14603ef939faef792455f1ed6f83c53aefa0b1f2fdae3427a04690e439d20c035fe7509b7841bdb2b7c64ccc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cc08f517f6aac8742a51e81ea298b66

    SHA1

    30afd8c5e9d5f98c50ae3a59897f326c6314b498

    SHA256

    d03e01b1ca435739809e64526be689c43eb188121c7fc49c3eca813a2017fae1

    SHA512

    e5a1ffd87a8cf8d79251e4ca5c2c32dd70b566df0f7e200c6fed6e88d907f85da970f8b203e0482fbf8847ae765cb9aa0a174741d79b62372f0cc8255927819a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e1bdee7e4b787b0b682cf80d9e2d226

    SHA1

    b651fe95b0d4343cf933b869f2370f540a09b1c7

    SHA256

    0f4aa9afdc49d567b228d2ec45334002f564c14361c375f53d527cb3214d9ec9

    SHA512

    6f2bc3fce2ff903f90b92da5746c422ac66147de256a0a0784b645c6ad71d74839fd93b0d0c2275f38503c75a91c0fca865412f765af64a5e6a81ea0fbb159dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0095d940446e056f4abb65e90871c3b

    SHA1

    bb17c0298c2240acba4085a6c31d160e598b7932

    SHA256

    003b87ab9de0f89ee3480e6250608d0f68a97b0ff1af4209e9ffeb21433dc53c

    SHA512

    a0018c93f858175c03772a4af1d75a22aaf1c0e63a5cf3b2590e24fdc0ac92e0b6eadbceb9a2acf89664bddbbf4564af18cfe788abd41311b9661742823ab775

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc1ac413b3454f9f3e3d99da45df1530

    SHA1

    7ac09ad9774d59336ef7877159e26f60a1a66665

    SHA256

    fccce8f5dc5d7bfcdd44ce53586f701212500d3c9276a94fcf636dc5dc98a8de

    SHA512

    c05d992981bf9ec13db0e71429333e46a7a08272134b2693141d4e97e58510bd179a062b8e9bb4c5bbfdf7617f9f117ce2cc6eb477c5860d77e1317eecf3a3bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fc536edb424c63ddc298d97df850540

    SHA1

    e90db7bcfc447eda423c5b79da6ff27b9d2e02b9

    SHA256

    41cd6126ae83b12681dd2c6a5f5590409fb5b5850700ff9e370201233b139249

    SHA512

    8cea99645bf21606a007567d6744dde929d818fcc541c144f234120886e6ca23b38d2e9b1af2ce7b4a7866f73b27f5d9ac17471618e9b3ce52c5966585bc8044

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29a2be7614b3633abc1880b382634caf

    SHA1

    e7af9f88ec56db07b0b1819907394654663b46e6

    SHA256

    b23106619416a80105a36270ffe78c5832cd91b0b637482e0bb3391d455d4822

    SHA512

    e96e9aa9e3acf0cec75fbcb9771ef9e75a68eade9bc2d73f7407abde2258ab7790b7d37f3b367d3b33641715fd4bbba12eb231423c2ce7ede5060acb05ab9579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5025fc4f2ee1b68c2dbf16824c9dcf8

    SHA1

    fe9c0c1cf67487df102c34ac89679ce56d122b48

    SHA256

    cfc8005952795be4df108375d1e465c566351bee67e35e3af8af4a4e896a6d1d

    SHA512

    48e6317533caef24fd198ddc0f348f172ae1e1c47acf0c4a17caa2e0bf8ef5ada1903bd53e7acde13347e11cf70731727b9eef25857415611b39ba7180a29bb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d9c77e5c8e4941c2675775f8dcc7d56

    SHA1

    035f82dde827f4e050e13e7409f5c896173899a7

    SHA256

    5942a697501171ce9eec228754a46ae7aa484621ecf5a51274abb9cd7af9ded1

    SHA512

    04941b0671385cf4304e88f448842e01910214dfa07e579190105765fa81a685d2a9ac62b1e14e1201d5963077cdfe3d2e698b212b491d46872af4cd76498139

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5174236e37cad89ce8eb4b7d26e1dc0

    SHA1

    155af18effd75f8dcd44027c7261b213f964baba

    SHA256

    2dc02bf8827c1eadf6f208097a1df2388ce63aa2e7be563ea9ef9b4d1000bd3b

    SHA512

    ff2e1ae256f90fa3f85d6bb45652eccafa3ce3c805bef21a8403e3cd6d660a97c8e4e5e15385b6ebd61a63321d1355b40fea1bf1312479b440052efb7a3da50e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    018bc73120a28f8529c818749a59ea22

    SHA1

    48366a9f6e22ebc2105b7ab422f11577c5dca1cb

    SHA256

    b486de4e8056e7434cb8bc9ac4760403acec44edca5d5e3ffc0888c8bf5396b7

    SHA512

    5dbe7fe5c887f097c7eb26cd1f5800c8db6d3afcf57ce18314744f354c11fa40502225af100d979cc8be5d2213672ee678c83c860777d58347cfa06d43c0713b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fcd662a8735fae090a2c5f9eb11eba92

    SHA1

    3b6c75e0f31387d7348186d8c4078ea46d40f2f0

    SHA256

    6d0aface0605ad39697eb88f5f59f1c25ec2ca308e25e75a211ba75b3eed8d4c

    SHA512

    584a05b60345c2f01aecae62f43c797c568e6ad93a8f5cb283fe42afbcad1c676d9bf51c683c962016a9733fd08244c9b718771ac4f66514bdd09d5b9c82b2ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e011131fa2a7797323195d22692aaaf0

    SHA1

    80fb593230798e7cd8539b45fe6af4f5857c5997

    SHA256

    5a29ec98af7d9e9e8c6b96373d583435df045acfea1716be5bfcc343b64b3a8e

    SHA512

    571580cf8ecca8a098fd6dbf9713b8a47579c0818e0c5a879bc487d66b6357f63f209b710c626388f68f50733cef218e9341abb8bd9c969aa581f6d5dc2357f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a986874c2b5f69e4d006f45cdd4df2e0

    SHA1

    eda48cbc549a9f4750823f51ec6db102c1d3cb3d

    SHA256

    c8b9f72e4912962d9c56b6eb4f589074bbd9c0b524916cb301f33e28583df581

    SHA512

    dca84580852bdf124faefd9716dc9b0fa41445a7d77e5caf1b08a1f06844d5cf013fbbecc043a9e8908eaa44f105ef0ebe442225a96d4dcc5947456125e5c69b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    daa0182e36cfc4a5c434cd2b20d0f719

    SHA1

    87b994753468e5a5e918f7aa5dd38e3a40e3236e

    SHA256

    ae01f078732f5194da9c8be3a1414dc4eb3c884e66434a7d1d09d9dc30caa55d

    SHA512

    735a8e70061331c5cabff0e1e64bebe5ea5a9f9dbccf8d7176469d94348b66fe5f4fdb859aa860ef454f307e7e7ede86450a88f779858684debf562af05b62bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    737c9757477cb3a124b910a5c845ea5c

    SHA1

    3ac19e597733459525ce0baddd6dc202323d77e2

    SHA256

    e6388c50e6ad47c1a97c8da16a1ca517364d3975c0c9d50a65d941e73347b171

    SHA512

    d1a7866e63d4df71453418da63f7afdefe174b8b5b599ef9d2722627b697c4db57d7612d521091fe005d1e2fd444ec9272679e4df5b1cb0cfec47b2adc953f8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df84cd656a0903582068230a3629c6d5

    SHA1

    8074d457d153c4a5e582cee6e4670afbc9a443be

    SHA256

    5716ab480995590517160e2783e58e221ab5ee1b2c721ca7d68ce56d2b7c086f

    SHA512

    7714598b2973b2e8e1c9b440b25f2a7b29a7caba70a0d3690867e6b35d478eec73a20cd4621b572e1c502bcdf76048402aed5d689f6479855ce821fa98c59238

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd5f8f59f8b602de21beb52ce5271cd5

    SHA1

    7e0c9b289ea0d7789f96f40b8ef464e600078516

    SHA256

    a1c4a68976ca0ded5d1c6aeca5054839227ee0920c1c0b01d982fd3d337cae68

    SHA512

    3b25d9a9126bd9f4966d68c61e5e1487ca626c67b2b8282c0eea2ebb4932850c084674283532e9be37774b237c6146f1c5ac05aff78c1a6399df9ff983d35b93

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5OCCPTL4\validationEngine.jquery[1].htm

    Filesize

    60B

    MD5

    66f23d7e7b287e497cf4e1e4a244780a

    SHA1

    b0a372c795f17fbebd305e07100043dda4b5d55e

    SHA256

    41b18942a62a8cf6281f1ea7eb9461f1739d65ef354f1bd5ddd9b60fb78c78a2

    SHA512

    93bc9af4b05737a7a3445a381bde9b06e4bcaa89ba7034001152ad66e549b20672127eb0e925aa091a52908e1a3ab80d3592fbc9c5975223ce17a988c7258169

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\B1014REI\jquery[1].js

    Filesize

    45B

    MD5

    d1e1bc7b232605227be37f50abe9dc21

    SHA1

    17e1cc7f7de0f11408f327881da54758825b5f77

    SHA256

    3aa6d7fd9eaec62a86e242b967cfc3aee2c623fa98573554dd2f05347a35d837

    SHA512

    c3a2187f0a2af1bafd745d7f2871a96c87541b7c381978b59d0e780b6e09afb34ea0237a5723bf2f847400c7104aa6b2512b02b6e9358d482fd536b79ff82bbc

  • C:\Users\Admin\AppData\Local\Temp\Cab2C5F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2D32.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a