Analysis

  • max time kernel
    118s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 21:33

General

  • Target

    82006f467f1f10fc07598263c1f12df2_JaffaCakes118.html

  • Size

    182KB

  • MD5

    82006f467f1f10fc07598263c1f12df2

  • SHA1

    eb0e028c28829d93dd55cbae09a8d4444c529f46

  • SHA256

    e9246f71bfa505db836434410241cebaf4a4d0e742dee081f4153f62a428b4f3

  • SHA512

    553a00f1bfc2fcc735a6ce10bef5841fa527735277a62abb3dc176eecb48fa64c635c098c0a752973d944d577e0586f6111ed0dd1fb80616a1ddf0b4d6e19677

  • SSDEEP

    3072:SBOt0pN3yfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:SBOt0pNCsMYod+X3oI+YS1tA8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\82006f467f1f10fc07598263c1f12df2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1308
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1308 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2516

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          85ba8c34e41ad622aa7d7d55ad29ff1c

          SHA1

          894d0eb53e74b1c65d23f98d73a2936b1b8b487a

          SHA256

          679493627a2d5c2c38fa7f91ed75871335f41490b909a895e8d470c2468b4c2b

          SHA512

          dacb69e1762e0102dededf9dd148fbc9194987e589e91bc2047f8264e931d2d608a244ec48f5bdaeedd964bcb264e285e81926722f5ccdbcfa77d446b84104be

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7f3d7b1dce0b9e86e10da82072ed1daa

          SHA1

          76e9c001b887779a7f75bc9d8728cc96335bfdf6

          SHA256

          78db11058c98cf226302289e08ba65153a6f26ad129547ee5ec3724afc428951

          SHA512

          665e2f306450cd38181f97dc3c0fa163475d84138a5a93247e2cb840d4cf7b09c20a771b2ab38208ad194022ac31314f1e479cf5f638f3522f015f4a30cff956

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7c749e3fa3c3e75debd37173cf2cad97

          SHA1

          b97fce56d6514adbfb14cc92dea413f072ceb03d

          SHA256

          f6a341c1f6e4ea54006eaee0f253b022b2ce02ef4ca02e6a64200f3b9f2b3552

          SHA512

          db194cebdc78188ee34d52b98c9f86c9fa28f366bb2c654340b9cbec25aea9fc53459d8d5635022f355801d125415ba76a4758fa18fee9bf6a2508cd74c7a1b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8c74097522085d6ff04114ab808624ef

          SHA1

          4c0203ca06a0c80fd27ec90928fd5b13375f82b4

          SHA256

          7a64e5c56f11883474e1a84e1a4829bbbc35ee8a88704a102d27d226c80cc883

          SHA512

          e387e668362387fbb78df3323b4c833781f8b51026085fde883ceccea0ec9083934d0686cffe3870f447afb7fe354f21a7255838b1b0d7f04178d1735ee265df

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3f4850072a912eda47e78b9a0f0abb78

          SHA1

          aabcdddc24a6b4d4c46b62c2488083bb39d38017

          SHA256

          da3857e9ea8f14e10c18061509961b76fb412d2813ed95221aeac4b88524d086

          SHA512

          91f567799589be7286656bfda92b7f6ec57dcb56b42a50c7b62af5bb5e675dacbac0c168a822017c25bf1d9c8f18a471fb904e3c4020c420871069b966f1145f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dd775d9df7fd691b896158651a656044

          SHA1

          e1f2d42845f891443650848937c4fc59635e15b9

          SHA256

          7f9a9fa574039ccb7622589ecfc21e105bf323ef7ebea860f81bcc02eb5b97e0

          SHA512

          b8099389ee644b4269c330e40039fb44f6c96ecc385b3172bad7d60e3855e4e12f636fcb1c53a348ad4e7b628062de6e8936d2130b23a18ef37bf3b5fc97c716

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          94617464cf034953126dd7cbd5417d88

          SHA1

          02cd100773797203d12eeab0a04703e3ac6cf2dc

          SHA256

          96bd87a41e421682befcef4bade74bc3400cca66c8177740fe95fb78455c4d92

          SHA512

          28de7a6020d0df31d9e289ff1c877f314761f91424161b51f0efe8f13dc1c1364ff147fca95f85bb757a32d22cbc8d3fe7811dace1a584d7b87e4ad67ece2a79

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e1416afc38d15bae3de04ccd9f0866ed

          SHA1

          190aa31a6f891966f3fb3389c3c076a8d14311c0

          SHA256

          1105e1edd7db8a82f7bc00f1717d713299978bf4426689030b1449ddb5667f0b

          SHA512

          6e10fe680f305d18b5699c483cd060c502de6f4b10174c01bbc1d29e819e190e024b7c7cb0b8d9fb48b094dafb8ebab9bb90b51ea3992638d943ecf9ac9f4c3a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          caec5f2e27481ab99fce545b44d77a44

          SHA1

          b5fbfc87f47d17ad2cfa6a89dceee7a55a0301ef

          SHA256

          3d4d3a2d64287286893b78a173419e5d8ded9c97f26f5baa8213e25b13709a60

          SHA512

          b9dfa7668a50643d3c0d8e02bae3a2fc70bb6064d0e4906d7315876d5cbf944793f9b5bf268883db4b2a05d04f30666914f7236f11b2bafc97a801291680b848

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3aa240e76d9018a988084a6d9dc1f268

          SHA1

          969a4d544bb4e2d9b723b79fde051343677f960d

          SHA256

          f267e7bbabc0ceb5f925d56193066f38a48aa912198328fca8aecb4ce864153a

          SHA512

          47b37d75e7380cb331530d1475579fb276aadf01341f60dd57a84567ab69b5545d5ab357e3db4dbae55ae9a8eb38b55c2896431503b9dc464e450d7679c4a12a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0399d8e47fc4abc79cd585e47ef11572

          SHA1

          386f77c0293e402c0b3f3f4c9dc338c8478e9b16

          SHA256

          f0389b0f2f094a3efc63c255a6d9aeeefd5c3e86bf6ee6c74f76b9ef62447794

          SHA512

          cebc4b7d2a10c32f772a0891fdbf1a8a369bb547ca15ea926f82db6e19f9f76b704bd47b8479856bded92c8f6e8949586ec9668a977a27b115568ce21a4e9dd9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ec508541dc634538a559d3a06df8839f

          SHA1

          7619ec2a9ff81ad7ba7e5da30bce2002c14041e6

          SHA256

          bc73cfad2e60fbc25641173c6ea9005666d12aea6bde05171571a96b09641018

          SHA512

          639c83c3054c55e0a4f546a0631e46fc81e528aeef741f2462c178a25a4e573e7eb114b834c329114c1661056a0f8e5e47520437e3b2495261457843f1f88298

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f6d5d5190dfc1d0d4e18430be94f48db

          SHA1

          a7ea1dbc78849459c28fbeba9bd15e12102a293b

          SHA256

          38eae501b73059ed367f8d4bd6afecfeba8c569fe714f45f0aabe5c0ad26cff7

          SHA512

          40108b3e40ac92dc0b3704dc90d7f31c424e2a36473fd74fba50d15ed175f9180e0a2a8f1e77ed101537af6571a477c2f891cc15b6b9c5769412d0da4df6696d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          091350e1209d2baea814a44bae60928a

          SHA1

          c087a3132c8def4a96f8d780a5415991b4ed0be8

          SHA256

          3123b5668aacd033861bb5b67ae2e98d53dd220f5327d20b77a03e40f5517c42

          SHA512

          cb7cba8b4cd5edfa3b53ece7e67cce31eb63c36820254b928cc6a98ddc8c36af9a34e268d7f5862671ae989002de981b39c179ff969c1273cb45b0b4c13a6fb7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6e2624123bc02f3c033635c519c170ba

          SHA1

          861618054934fa0204eb9d8b840ea11229887df2

          SHA256

          2620dce650083ffef05e9ddeeb6c72e2d7bbfc8f49d2a38e54e1f88ad8745a25

          SHA512

          5695e6526a62558608e456e9f9fdd20c106698c890918baa99c1eb327d1369a7846003a6aed444d519b8c1db3c770e21fa70ac319c0929a6d2f287e97e3f4a92

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          32d476657c5d1afa07e2d0727a1bad59

          SHA1

          ab4bea76b3a6498fdebef3f7a7a008d7849fbc28

          SHA256

          9cdae9a7e5ee9e543e0871750e7030002c7ec127ffb208213bad37e34b5a81d2

          SHA512

          8aa3e2a57209a8aae3da4105a57a963f9ea08b1a4103c315e76ba7bfba33c247f24675685849e279fad11ba172885eb598eaa0a1116cc8849fa6f9de32fcc55d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d24e38ab22e3eb26df2c5a7e6ea9275f

          SHA1

          0b61976d209ad731c09bf63e8757acb89425932a

          SHA256

          12b4ce2c4affc3453a80f4658a007f55fc4c8104ecb9cd4dabcc1b5f18abd840

          SHA512

          a972a0a9c855d09ce486628a92e08a9ed168eae1af7ed93efcad979f168bc15f74cbf988e1e1ba814839dac791bcef839d8e513c86079c92fe8e822b715db025

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          912b9d3b569f6cff3a4f3cded639bc65

          SHA1

          27b9673e1811f9e9a2344fbb1deb81534c66841b

          SHA256

          d844076f85bb19ca55920c06a241633e995167ecc158002b6b290b83a9f3062a

          SHA512

          02fbf16368a046be4a8dfd0cc703c52a351e83b4265f113f74982e851cb8d6ce2bf496a0936c0fa7c4cf5d86930aa09a8db1df1d5d83ba755d9bbc30c361c418

        • C:\Users\Admin\AppData\Local\Temp\CabA75A.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\TarA899.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b