Analysis

  • max time kernel
    134s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    26-05-2024 13:49

General

  • Target

    75aeb61953399ccc8730b1fa10bab8f5_JaffaCakes118.html

  • Size

    226KB

  • MD5

    75aeb61953399ccc8730b1fa10bab8f5

  • SHA1

    d2c1534b418df969123dd96594f2c88ee16bcd32

  • SHA256

    440ec4cd228a49f1066dc71c8337a73a970ee998d53a45bb206ee7bb774258fe

  • SHA512

    93fb5eaa7eccf5d916ed3900b88307a11920dc7fc49386710f608aa5f41153fe267d99d52d7fade9be730871e18c249ce0664ef3a31a760afbd9ae0bf57ed248

  • SSDEEP

    3072:7yfkMY+BES09JXAnyrZalI+Y0F5iyfkMY+BES09JXAnyrZalI+YL:esMYod+X3oI+Y0F5nsMYod+X3oI+YL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\75aeb61953399ccc8730b1fa10bab8f5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1740
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1740 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2444

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7a4faebd4563202854be2376986b011

    SHA1

    48385c573d251317af68d6197ed6024dd3e5a810

    SHA256

    e1b217f349a31a9ca5e689c4e1cbe3bc58ce6c0fb2e3a18807735f5e57dbd33e

    SHA512

    00ea47288c303ed13a8d662bd1119e5e654800b7358deb78883ca5710c3169634a305f7d1b74b6b7a65bfc034c339c241a5b7a3d18bc6c66bcbb30cb1acbaddb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51562e9f1e9741cca9408ef2fedddedb

    SHA1

    013c6246a7f25a371a6df5d7320458025d089ad4

    SHA256

    f22744fe5745a1c5fe469f4de7e000f2c62e7617f317bb5ecb03d1fa7525ff44

    SHA512

    a63ec2ef6753de29f318a8d2e106fea14d52400bbd08b6d17465399dddbb59844ecc9331d3192fc480814d6ac32f98f9f260b24d9b095a622f5997cdb57754c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7794fe60fe6db92db200cb8d6e174a2f

    SHA1

    33353c66683946ff3d04c4fef749ce6d5a7375da

    SHA256

    dbe4f4730211d9f6eb94e557ae974b319dc48b62a232e23d1efff98fa8893037

    SHA512

    578d0ee794c977913cfaf9cd704e3f181585792cf3a4ecbf6665215eb360ac1b21f4213963d0e00f031be5fedccc7bffbb5d594ae4cc56d168bf9194dadfd411

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe005284ab7dc55fc3d96a67b2982053

    SHA1

    423279c804f90bffbf8c3c093c62f2926bbe648d

    SHA256

    03303817caec9f3352e90e8a084e5ccf48db33b04ffd2a33f6ebdf1e6259f848

    SHA512

    b65e40a932bd0e1ae3f78461630697b9990549b4d3f7963206af4d72b323b438dd6b579e1e130bdc7e538b79b289cb5a3742948016f05a9da46cf265f08e75f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a9961182b95de1bc3b1d368d9f91594

    SHA1

    1ba612d33d5fbd5913c96674d0a2ec82da17e6ea

    SHA256

    6e5e4b3fce5ae3b4d382fffedce62edc1988324e352f6fafbbc20e36224f6082

    SHA512

    65e672b295fa31693a5b790dd360c1f645b83b1b80dd8749121389fb14ee2411d7490899fe5c9ee13a15b30fd45e244d74e99e5e52a6dff2dd1a1e6cd1b5953d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b46ff03461c63f70bdb219fb10f44e86

    SHA1

    08cbcd4739720e63a76e1064b84075fa43277c8e

    SHA256

    f73db135a1fb0cb5b6cc85acc3595dffa62115c423a218dba90742e3a782d5d3

    SHA512

    e8a461624b2e4fe2ce78aa0c25567102ef1aa0ab837aff90c3c3a6e41b5e4474646ab808713718c4de373b771e4ff46f6681fbbe87a4af3a5760eb73d9970a27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb0b3a61717c5d29a759b788de837693

    SHA1

    8dbfcb5c5a8b344c3c7859ca5afd53fd6155def6

    SHA256

    4d086608fb2177e15510badabb8c98f6b31d0d36bf4ee60311c19298cdcbefd0

    SHA512

    08bbbe2b5b5462e437cf98d170a91ef904dea8cd3ccd1cce1e0fa8d7b05b10fcd38ca088fe90626c6d6eac70a07c9abb23c25e838935196a33cdac6696820793

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11320cf445857a9c5328cb9f62ffaeb0

    SHA1

    d439da3d47c072aaeff5be8c632dfc202b7126c9

    SHA256

    3933e6303ab6e873dfb9a84f1708fc12d806c0252481c8b76dc64e350fa62c85

    SHA512

    878d01be9fd9997d50a0bb1f710d4bd37d113380caed0dc60acb6d5f416a1a691b5355007c069f1a73c82a4d8911fba72d8a98afb1af498758f65d57b78c0eb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6942b899eedf91d2a3ca51a2896355ce

    SHA1

    9d9859d8bb3ba5129762738b403d9b5b4a62634e

    SHA256

    31c51e634b58752ac9a5c27fcf17c2f7ced5536249c4971bf9cd26ba379e921f

    SHA512

    7d81cfb28010356bcf883666ebf03d7d6e001b77669638cb07eb559c31377bf4a3fc59172b768edd2775d5d38c37d512e621f34eb0e58d9ec55ab1753aa59e41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de807382a2536c2416b1ade2b7bde2a2

    SHA1

    63458a32848f5c70fe87ee925ed130f94c3c2f37

    SHA256

    571ec91bd7b3b3195fe88acc6b26f7f4216edc893c32f34c7012d48abac4a55e

    SHA512

    f269d3ac4eb736962a4331d15162acbc2dc859d06f9a1a20c0a8c909c79e4636ea20d6857a3e3c1370b45acbd6ee0cd87f8b4809453a4d9c1ea29ebad2aaaf49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    777fe154777879abd23f4eea29f507a4

    SHA1

    fbc4a01c67f0b94c0e12839a16f96e33f2402eb8

    SHA256

    0fd8e409b6735da3dc242391654c677c3cf6f81fa32be8f38a03e65ad45dc453

    SHA512

    8e2c3d7d3d74d5204d80928cf023f05bcd4e3916242dc78ab4d198634228509d7a48bf82ebbf9002172d552a3b0827c60c53c1a3889f4ccbbda0172da30c91d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3a3f5a234b2621c0b285ae7ef3f3f7c

    SHA1

    b25e2eb742c85283c1c6274799807d9aed9e2b80

    SHA256

    116fbb5e3ae9d9feed96ec0e0f2aae35e6aa86919163e6a312c2cba42151c710

    SHA512

    2f9916dd6fdfbd8c095e1d0391adcda5c4a9b159a4d7b91a5671cb872383f56ad1617e7d2e7b94aa41efe19c6b16c43314173567816624d8d18f1b34fdc18167

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13de50d7d46b5f6deb1d71ffeb0e8985

    SHA1

    9409577715d43070f68ab9b9e5d3ec02f18c4e6c

    SHA256

    abdffa3d7b8263cef86790ded3cb184a6d93db0491993e68cbd4e860cfb5c28e

    SHA512

    956f61e1fafdf641af651e6bae3d7fcc92d3b4a724033ca0d6a0b27645a6066fc5294b62a08ec55b6eece80ed6d6c6224c408de2a202e09cde959cc436a4f08c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7246c04d37e07b31a46d29225ccba378

    SHA1

    82ba2f86a76b7a7c095735bb25e023ad8248ef54

    SHA256

    705a18d031d5eb10dcde4a20ae60ce2ebfcef5297239097f2b67023d46e2a2a1

    SHA512

    deb6708298f944073f9b7316e3d25cce301403949ef97432cf2ad96622d42ba4be5f3ebb7c18557b6392dd56e92b4f3d6505a2cf6341dc211ef40dfc612b8eb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05bbe128f0a087828c7d2ea8a1cf6b72

    SHA1

    0670b555d3539c18a5ddac2d7b28c690d2e7cd78

    SHA256

    413d9f1eb4e9e98cbb72548b2dc1e75f7ecdaa8ff27b0804e1f360313a18f064

    SHA512

    62d33d8ef04a108f3c187ca631f9b875d14bdca2ab10a676ada1bbe8b7086564746d8a4aa182d31b77b4c425a9d774e4f0105a1bf26d0963f24c4d613e406ea7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60fa92c6e89a04f58834a8c4c5cb85d7

    SHA1

    3cfd14de4e7b98835d1ec6610f0e68cc77d348d8

    SHA256

    f92476726fcc9db83fc26b104ed4e739bc7b70c3fd9f1a4862d4cfd22d585283

    SHA512

    d488fcc3c10ea7b94ae9757fa13467d738e7e338d6545a064d970cc6be35ae13b08005f032b065cb67ea9bfa024254c3b8ae03456d418feaa373bc5c1bd7f82a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06d75f5498412ef9211ca9d9d6fe2fb7

    SHA1

    fc6dea0bdbca877d54439ec2d91df2c406283cc3

    SHA256

    29689acd42ac70e07490a6073065d72e7c197b3bbda6f86cb1d27fee8606549b

    SHA512

    09bf304b99f6bbf12e52644adbc5e2009c8be0f83feb7cb0a25872bdf06836ae361a80b2e4093be90381ea868c11150e3b4c1580f6ae111170df4d3012bdfb2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6edb91c7ac53e99181b4a53701ee7e11

    SHA1

    893689687551f71d9f862ee7de3e02238f615a23

    SHA256

    175ba57c054234f0d2b7abaf54ecf9404447accc009061e1c089e32c6b68f7f1

    SHA512

    2c2886764720b8c42006b527e5298fd646b4340f68ef6d5d7a082d4ac87728a0783c561115d94e754d652cfebd761352b1a1992d6f22b5a0c7778da4f93a092a

  • C:\Users\Admin\AppData\Local\Temp\Cab2D77.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2DF9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a