Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    29-05-2024 01:54

General

  • Target

    7f254fa320b7d285e5f733a971ca4bd0_JaffaCakes118.html

  • Size

    37KB

  • MD5

    7f254fa320b7d285e5f733a971ca4bd0

  • SHA1

    a1654a4c67c1310766191221893d9f731516d735

  • SHA256

    610cc3b96765238c83105352dd80ca732ea7d642a25c7e8f0681ce7407df5050

  • SHA512

    5e398ac48e8695795a0074d2799d43950b387c3d6117a3d3078e7bc7e5e9400184ec5c668aadb865ba0b106071c4fc34d6c529c6a6c4abee9a18816b49feca63

  • SSDEEP

    768:i/bVFRFQW81D4RA+vEOjz6rdG2Gil54RZfPGnf3Gu34aMi6781DdRA4vEOjq6h8q:ARFQW81D4RA+vEOjz6raA7IabC81DdRv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7f254fa320b7d285e5f733a971ca4bd0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2740
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2740 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2200

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    1deb125ccb7637480f66ee1dd40b6faa

    SHA1

    9100110bd9f266056b2df9105115125f5c913791

    SHA256

    72a8bb0bad2ed567c3818b4afa7f096e74d4750556c51b7252e83fcee268dd0b

    SHA512

    472413e78aac474b0c897bee7ccaef500b68b0deb9fe5ffe16bc275ca6dd379d2c517966f4233db76d7b315323bd73fe6eaf7ec5e166b2d0940fd0814a478918

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45cd035c212668534e2f70edceb2ea70

    SHA1

    21393b646454e2e2fb68c8d3a0b0b74391204cb1

    SHA256

    bdbf7150eaefc8db4f6bf19a335d565db082e48b98e7cf76acf1158ec1b8746b

    SHA512

    ee12d6c8a53114655a67f30e0550a9b42a833b88b394a1e3b43804ac984c20c81fa4a1a13ae8991b9c4abc83b579bf049c6f2f717f2a18243d7d8b36223159d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00a2b719d5c8e7363eff426b5beef272

    SHA1

    a310f9ffa0729269b27e81e1363442cb77e203c6

    SHA256

    05479f1de0dcbc39cdcbe43cfe92af80f00c152851e68faea854e1a8a0f68d7b

    SHA512

    3b1a090d710736e1061b9b57601ab8491aadc3e209c4f7fc24bbd045809d16596dd04557d0bccaff8c51b525adf410bea2b527f52e8854e1ee9f4e447314c894

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b0dfad2cd7acb4a92a2b44b15d62ffa

    SHA1

    43befd1f557c4460a33e3451fb928ef5e16aa407

    SHA256

    4fae983ca611a2bf563ee9c419f8bec537f956fc5e26bb37faac76dc07b1c5ca

    SHA512

    c503ee121b64cb209295b9650f9c0ccb0a73b0f0f1a6063841281b38317491473a4b77c0cca24eb3b5ff707bd56841ed86e9c5053d77b3ed4b7d806db0d7278b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cad9a9476d23cb5f3fb6f2b4b1d32e4e

    SHA1

    b6ae45ba1d4a135bf94eb8ce2b4c213868640bea

    SHA256

    12d7fdd40095bcba428b39cf961cc57f6d5c8f452753c021d8adb1b259ad461f

    SHA512

    d6e523f2a8b13d7868e085997fdf51bfe5ee58c23f08ad79e74c1ab39a1211c41723f440e546f9ee3d043f5c8cb170bba143190fbf9940704de6681ac09f12fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    998940a8d66ed5733d2e7499fd8ddfdc

    SHA1

    1cc265abf066ec4bbc6e4771328442c062d2309d

    SHA256

    12157127a0d859eac398ec005b67b944e82263dcca4b4b2eb75626ccdcc561fc

    SHA512

    b5795303ee7596918d8db1f0b54a09995fc83fcc6e754c992c123c62c11889c9b3a64b8b26bde951a3886a3a83edf56c3e99090c61af198aa7eb39746df6fbb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3287d68b35167951f3b40c9bfda99e4b

    SHA1

    c7d19179e242cadecaa5d977d82f79d8d261e077

    SHA256

    b68625db6e80af1a298ef40614d7f2a22482a3b95c0cdca0d79d2186d34b136a

    SHA512

    9c31bec9ccffe4119c0cb5083a797b183de1a5efe4233fad1d82e518b300601f94576668ab13341717fd3df3fb2024bd3e2e93789fa1bacc87106fe4ed53c9f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b89e02328fe1c2575417bc7ce6af40a0

    SHA1

    fb1fc91f14e22fdaa3ebf10b15136d01d5be9705

    SHA256

    9718a051af5546ba4285ad08b1be9549214cf26160d0908a7b6a48483aeab68c

    SHA512

    3b5a1a34fd7c76e4f6d4f1597c6d127717674fe1173edb8895a3059ae1d89ee48771c1230e033d63fd2dc07495a3b293f8fb137022b7da1a4d8af67b3fa6fdb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbe213f7df74d9d1333a5d15f58215ad

    SHA1

    af78a4589a392fbf41de5411d643332af0369e45

    SHA256

    5bb27f87489f8c8e3ebc6192fd715a73d20e0526488a4cd726424b1d874af8d2

    SHA512

    1f27cbfe9e406df70aa7f715eda20168ca9a001853ffb6d7e04c147260721121e2da6fec6aa59f318638a6fa9fd4c5275a79cab8125ffe3abac166ea265f8fd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a54a105e1a26c9fefe2eee98d415309

    SHA1

    dd64b2ef5480663e73365fc57c31860a8cdb3928

    SHA256

    8caf71034f096e249fae49e894a8bfd22750909d1eaf8e2ee9cbc87d77d40f5a

    SHA512

    3da9a1ddfa92c9fdbaf37e2af51f6c15570ea00193097ce4d1553a8e2ade2c483d90617d2c2beaf0491cce2eb80ea69b7125b62eca12ebc88f57cab6d68c8bcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f48b3fb2073fa31fa0fe1177077847ed

    SHA1

    9614c1a2769b4b122e36eacef02ca1ecbe776f1b

    SHA256

    ffe44320477a66b353ad714801480a5b5f4a5120b58c41abb5b5874378588333

    SHA512

    b50f415bf0b8feb0ed7a2f226fdb3582b088b50deb96e3688cd0a6d56572761c0012b8909802aff6328f468d0eb5b90e75e4ec95aafa7a479a1de3fd28931b2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7a9bd31ab181c9dc901af9738df4bf2

    SHA1

    f041abf208f87be18322d6f099dbec1a5a403b7e

    SHA256

    fa17156ba615b006bcdc3b18f9fdae6682deed3a1f6e28dbf6426aa864a307fa

    SHA512

    332ed71f8eaee1ebccd9bc1f05c5c6c1b5f23f06ac849bd3d121837ac1715ed0036884fcc4589fe89325c397bae668d82cf3dd2681cd8755bf677dd176e50dfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    94ae737d47af3730d8b10ef25a7e5bd7

    SHA1

    fc57c94d7b163a49ec16d8666d9f78720b9b6a46

    SHA256

    6a430afaf2afd5ac00f46a3fd992c48a5380597ff408159dd17147fd240ba941

    SHA512

    24ef4d92252733d516ca6e97a9d14697ebfcea8f39cd8c066258972eec046195a7cb70893b4718f3a70d150016a7e85930de0d440957310db3799567475f7ee1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    4d83a2aaf7b7063eca960a771fd0c0ba

    SHA1

    af06020006a782c7fb8e0324638337ebc8d267a9

    SHA256

    3be172df6951360b1d7d03bad6201cac52a0243db6551d5e75245fcbcfb7e21e

    SHA512

    d0a780267441bd2222c48a28dcac0df82c07424c29619f071252603d9c3c5dfb59383d2684ccab4e057d55852ad7fe79c66cd0573320c64f518efaa89418e170

  • C:\Users\Admin\AppData\Local\Temp\Cab32F4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar32F7.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar33F7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b