Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 08:28

General

  • Target
    801a99af0a063c429a80ea557a5d872c_JaffaCakes118.html
  • Size 513KB
  • Sample240529-kdfxcagf21
  • SHA256 8998a16fb67a4ca2059a042e17173e65a62f65ddf5d2a0f0cd0d1f3bdcb4d898
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\801a99af0a063c429a80ea557a5d872c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1504
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1504 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2324

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
        • Size 1KB
        • SHA256 35c92a56b5f0f8520f27ee9b8d093c80deeb4f7599dbedfa8619559986db3c03
        • MD5 SHA1 SHA512

        3C428B1A3E5F57D887EC4B864FAC5DCC

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC
        • Size 914B
        • SHA256 cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
        • Size 70KB
        • SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
        • MD5 SHA1 SHA512 SSDEEP

        CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
        • Size 724B
        • SHA256 0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
        • MD5 SHA1 SHA512

        F0ACCF77CDCBFF39F6191887F6D2D357

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357
        • Size 1KB
        • SHA256 df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
        • MD5 SHA1 SHA512

        24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
        • Size 410B
        • SHA256 f9879c171bdca2fb6e11c73ddb4bfc73728bdf21e0ec4feefa4020ede9a747fd
        • MD5 SHA1 SHA512

        24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
        • Size 410B
        • SHA256 259f11357a9072620aba503679fbdff292c447c0f7137e0ee1ee187914aadc7c
        • MD5 SHA1 SHA512

        3C428B1A3E5F57D887EC4B864FAC5DCC

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
        • Size 252B
        • SHA256 2c6586206edf16bbb326817e79b5d9616dcff549e9b8345ea4f03935a9e5daf7
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 9beaaae0b1db9dab612a0024fabf0b00bc8833198d6d9465bc9485dd90220784
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 c3c8af135cd566143bcc55a8f0a96a0503b60709a57e97dc504895e2d4e07e3a
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 63f0d67da7832763dbd71c04d6715dd8be13081838c8e3089f9dc86ea71985d7
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 8f302f9ea5b7f61010d8caf02b7af24638d4ba904e57af78350bc3167a02366c
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 9b320c20bf88c65ba9af9146e0b4055abb07cf8e1f76b4c6d8019a03b25dcb12
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 967a71e75909d3edf4bd5fc6fffedcb727022cc700243b58dc032d54061df316
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 ad828a95a06997502d44925d9337ad81a2cb8731f5f159a5fd7ff6c86a8ced6f
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 2a1572048bd1a6c1e42a29bacc7808c391e4fc894dc5c9625369200c1bd8cebb
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 ce6d45d6df6d5c1cd5c34c606c49ad6a354f8aa2a247309d36f2fb688d379e0b
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 74b5052924de5b6d5ad24d2d1efd5fe63a1879340255ad3cd8d05faaac0ca32d
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 2e5811b7f0e4437a04286b2b2393c011324989bf91bad42bb319965fed0903fa
        • MD5 SHA1 SHA512

        94308059B57B3142E455B38A6EB92015

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
        • Size 342B
        • SHA256 b4b1c9cca487002556f0455761ac3456f01579b3ec968f7f48f8981def3c147b
        • MD5 SHA1 SHA512

        F0ACCF77CDCBFF39F6191887F6D2D357

        • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
        • Size 242B
        • SHA256 7c9743fdc8497abd0fb17de09e0ef366e24da979f7080545d644311bd276e790
        • MD5 SHA1 SHA512

        platform_gapi.iframes.style.common[1].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9ZQLLOZN\platform_gapi.iframes.style.common[1].js
        • Size 54KB
        • SHA256 192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838
        • MD5 SHA1 SHA512 SSDEEP

        cb=gapi[3].js

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\cb=gapi[3].js
        • Size 133KB
        • SHA256 5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693
        • MD5 SHA1 SHA512 SSDEEP

        Cab2168.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\Cab2168.tmp
        • Size 65KB
        • SHA256 c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
        • MD5 SHA1 SHA512 SSDEEP

        Tar216A.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\Tar216A.tmp
        • Size 171KB
        • SHA256 4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
        • MD5 SHA1 SHA512 SSDEEP

        Tar224B.tmp

        • Path C:\Users\Admin\AppData\Local\Temp\Tar224B.tmp
        • Size 181KB
        • SHA256 8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
        • MD5 SHA1 SHA512 SSDEEP