Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 23:02

General

  • Target

    8c16479ac5f6eb3476ec889f03e42e61_JaffaCakes118.html

  • Size

    114KB

  • MD5

    8c16479ac5f6eb3476ec889f03e42e61

  • SHA1

    3d50affb659dc941ad5f3b56e09b230ce7e9f950

  • SHA256

    2ef13f8078b13b0aa63725dced9e7f0a7e19f013cd9b7fce79735690c04baea6

  • SHA512

    aadab41e33200cd6d0423482fe6e27f7b6f21c29fa03f6ac71d436db39c2c3618b059eadcb86fc61af7d0815d4e29d6d33043a7634e7873d69b1d2ffd3264424

  • SSDEEP

    1536:XUyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:XUyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8c16479ac5f6eb3476ec889f03e42e61_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2812
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2812 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          707ddb772ac1c161841f046fca771bcc

          SHA1

          5fd749ccdfddd1acc0cefcabb4cc1cdb8820ecd1

          SHA256

          41b7aee4a41f0e6759e294c13de340c7910078bb1cb45cb3d8b33c881b534951

          SHA512

          381c5b7471d26e6eb1ab913545ff560bd3cd7fc73b985f80d823b73001554997b699a78a5b1a4068b9deafa41c7f5a9084c0fa93654e7af9d749a262b235448d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          363d12004a684a4ed6ac18c984e5f76b

          SHA1

          536aee92db5065108945c8176fbd714b9fb704f0

          SHA256

          3fa70c6e10d38f763ba3edfe08c15b4560e43eecd2ee8c591f5704a1d4a026af

          SHA512

          44fa5218485358d9dc0a39d1fef7ccb23e59b0ed3145db0dd63a8789bcd5c2f5dc5aca33e631b590bd518630c0ecda598ea03c70a74faca85de0fc3676962e09

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fb82d328c38a100c57b65580ba344974

          SHA1

          a6f4704818e2fdf904b266f5c4f1ccf325547501

          SHA256

          72d4e0cb261d7b12da96bb5a8937c25efb62f65fa0573dcfa1be2aa12cb47714

          SHA512

          c3d376d6764240059699f5beff8bb3f48ce415a1eba8965faf4e2c8b7877a469a88dcabd6ac6bc85479953c3f6ed172ea86ab31cb7868a3b2cdcdd9d6110e2b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          230a166ef6bf612fab4c8c18ad8e5a70

          SHA1

          634d8c5b696f45fee99e7797056864d2a0f1697d

          SHA256

          d7a2eb7d68ebc5913b81d4ed8cd143a9f3612c2d9a4029f0daae9f7d7f0a5a27

          SHA512

          c9fb4087f111c463bf77b18d5e08879d7039a9b1dfab5b0a89e23a02cfd1e720034e9225d2e4c584ce81d88650aca3195eab0f5ea79271df025b2c44d2789468

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f84a633b312da1748f51f42beddbd3d6

          SHA1

          27a1d0bf7a411c60452721c6544be5cdb64eb034

          SHA256

          3e1c955d5ca4e45f2aeecc514965ad7d5fbb9c6d1b7b5e86454be8b4f538063d

          SHA512

          d96eba5e6db46ea8b034a9ed42a2a7578ef2fd4bdb5d9af652bb41f1d556c83b362322f805c4805705b6d950bbcd6d6831e1d2a28789a5e8f042c4dfd6a3ac09

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          352774d4de661f8bc355aad97a3e04b9

          SHA1

          3621a3279982db16fff527a651fa60cf89dff1bb

          SHA256

          d353cee9c0130c01e1dbba7f3bbb799012f843778feb19b42155988562efff0d

          SHA512

          6ac8f8edbc29d5dace8ed4d5a2158a4a2a81682885578be099afd253b29d2ab0820a27963688cabee7fbcdad50e3e9504c5bdd16fdf2de217cfc0a08100e8c85

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5b10b97d55e2f4b45e2cbe827eadbe50

          SHA1

          db4929ff8dd822d88d7564b361c5764f5b6f483b

          SHA256

          cb25045d05ee8ac412af10a60603925730f2c16606bfad880bd6f48eaf8bf9fa

          SHA512

          b00712ef6f2f6909d510bc8b365a6b735f0b4357d025dfda9bb00f7f38caf204532850ea95d1c8f129ffa0ebd1c99c6fc9940746c84fcce8847475a827f8601b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7e6bad88cad9e7a0e07494f40f86d36b

          SHA1

          7b8a179c8627d7f97a3e6ab733f12278b5ed743e

          SHA256

          0647c0ce29a4d443a0df047e19b89d7956a8faa733de3814f76b4da5634a120a

          SHA512

          c01d3dbdbb764e40d3b195768eb7de657ce20e53331a48c2464f787e3487aa21589ca0b5a737dffea25d01652810f9b741d13e66a6c329aefaed5670425525ab

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3e999fe431f8bb6b358500f6f58d909f

          SHA1

          45f479c3f2454af25cd7686129dc068b94424c54

          SHA256

          8212c9160e5123c74ae0ebfd46400beebfdb7cefd8ae5f735950e104d6175e2c

          SHA512

          d3b04d7c9ec35244399a32adc49aae97ee33a679acc2ed2cb403e11a3843df39515a3db8d477b602c14c1838b4f049f2184f1436eeb0e185173a3c9beddb4a14

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          61113fdab426662b507a3ee4ee21b690

          SHA1

          e825f57aef3c18d9ed61dbd901bad69bbf68e659

          SHA256

          5913aa04970b0b4b5a01caed2124111e6f29127d9a6b9666b4f290dce33ded91

          SHA512

          72caf254f0b33d5bd636f94dc0647b53c81eb30d564d8fa3c8902c59319aeee9809d7de3ffe00289519190425225c7472110b7e1dd16fd5b7ff4ebc5b6f324d6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e04985dfcd91a98504a80bf5d2c9b1eb

          SHA1

          ce740871b2f79e8d16981f1e498a494264aebe18

          SHA256

          7b263308c8c83c7ce4437850339b305efbfdfda96636cb4c5b2aef2f536a054e

          SHA512

          31f85480ecf5557c365ffc061587cca3270d72855b2e7145fad266d18d01627b090a38fc79e2be38d66dcb9625d9514cde648eac260b141609a8e8630995fdc7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          482a46ec5d38cacb1cdb385b25f37270

          SHA1

          463c78022375aefc9ee19bb4efcaca86f5f0bd24

          SHA256

          466cab872cda726259e65c4f615fed50687c003405736aafbd4ac810762058b9

          SHA512

          e141c2eca2b9e79e26b348fdbb7edb36d24e9fa11674e018f5847fcc5114a1ab41c14eceb4111c8bcc2169e7604a4b70c5a0909ae54d1c4731d8232ef365266f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0d7af66602d93341aa8cca87379ffb2b

          SHA1

          60359921116f82c1bf26d62c98a2055bec6d83ce

          SHA256

          231b1e129ca9a693e99aa283ceb6e544d26c741e6b8ae8ba96c2162529215feb

          SHA512

          75a7d6949dba6eb5f038b269607f5f086db22c4fee0f50627dfcd8222bbf2c2c57234c07ba55ddeb7e1b199be28943d31836a940bf0964a8c7713680ebd985b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0eaa2edd700295a90ddafd0f84d24d73

          SHA1

          6f13505dd12ba5909b92a2f40e68a99861375c2a

          SHA256

          9712e13c8307eaa3e3d7fb323da5215b61b483e2a88a975b71c319fefacb4f5b

          SHA512

          9bbff498a259aa7bf4b717c1b068c355e56922ea3410b8a02281ee2b223efb4b4578924775f9ec74bf3bf48fc7b399d7f9bd535b7804152205fd89dee7cb559d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d1f2bba7927ed33e949794854d2a1270

          SHA1

          448a9caa908095b2c8535b829a9b931dedd4c7be

          SHA256

          940f53b9adb7668730bf91cdc09cd369239951f7cc6f7c2f0e073bfc5fc0075c

          SHA512

          eabebdde5529e985aaa14e209167e2f7bf8f092568a3d0e8d7f01fdfefd6e7ebbfebf57cfe653389955627deb62206cea3198d59d3c01aa20ddeb21b1facebe6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a644fe49170ab313f822ff9ce9d51b03

          SHA1

          edc7f35f5f62d078b3ce9ff3233347c7eb60dfcf

          SHA256

          a4aeed84db6bb19a412e5730a636b62d9fe8544895a7396e72c4ad065e75342c

          SHA512

          d4215a09dfdb671f2263ad67536d2d877b5ae9666362272e9d9c9dadf07cd35764f86fcc6808c5d86887218e9a86b7b1e104af54d10c2138b1ada7fa42dd2853

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          119950e8b220ce5b7f4c5bbaa6eb2eef

          SHA1

          c1b9a2ecbb647eaa41ba2f5a2cceb227d6f15cf1

          SHA256

          219fd2bd449c786ef346ef854efdfe50212294a5bfbfc366693ce0b732ca42b0

          SHA512

          d7b804e362fe5cb00dddfa44f151abe1b70ca3a14504771b466ed7e7d47439bc3601ea3f4b376ee3b3395a0ace0584699e49488ac6cb90dade8579d533c31310

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ba643aee4cfdc20cc53f019234403da6

          SHA1

          522f7001e8cd6aa248764f24871eb625c13341ec

          SHA256

          b365ab211c52ad015b3eda8532d6ca30a7fa006721f7881eff921114c4354b9a

          SHA512

          077ac1bb40fee1dc1fc6d40935b311273698d6b9be029c0567eb9f16623e3b5fa58f3802ca4a6ed31814975680748ef5c058d73d8c2e9f9dbab51e7bc9e2614f

        • C:\Users\Admin\AppData\Local\Temp\Cab9292.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Cab93ED.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar945D.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b