Analysis

  • max time kernel
    132s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    01-06-2024 18:38

General

  • Target

    8b623bd32dc0872a3b84b431e4ca01fb_JaffaCakes118.html

  • Size

    4KB

  • MD5

    8b623bd32dc0872a3b84b431e4ca01fb

  • SHA1

    81137778194004fa2e9b5a3ded93b596a5be0f46

  • SHA256

    3acc1874964bf6a8c1a54b21eede16c9427474f8044b048e7fb5a0dc96b97ce9

  • SHA512

    3eb34cb925eeeb3689df241373343f8d13bdc2cc35d3752fc6446b302c9b92df094e2e81a16fe0d6cdf2e6b752150649d241beaa7b373fc75a153af2d5923cc6

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8o1/wd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b623bd32dc0872a3b84b431e4ca01fb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2352
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32636cc9268281b5cd11983344508dcc

    SHA1

    3b8c96a9e73b1531783cbf10b3890b4ea9d88f94

    SHA256

    ee33454ef0d97e6de3bf18bd640258cd2e12d665faa4570078dff053d84b4b34

    SHA512

    056623bb6510cc0cd85e65d9b73247f4feb3a425892934651d286e14e2811796c7ac7df89bdf3e49b2fb517ea129cb747d5e62ac5ee34828fb526cb221e51e31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f828cfe60ad643fe1d04c206989bce14

    SHA1

    21c2a10783f6b55ae3764d8aeb01cd7485855f07

    SHA256

    ae6b182f93c88682615c293cf816d989aebb5e8126415fd3ebe4a6cdd40f0f76

    SHA512

    34a99a0c6c8240c20b41f960e02077191daac221224ca12986e55bb36d06eee1ee461eb466b5ab3ac45d3842226d92b026f8e4bcac821631f3adb017a718d8f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8dd17ac97f4c6dfded3a33c819aa0da

    SHA1

    a6d1549eecc9791662443eb88e3ff5328bfb8a53

    SHA256

    c1f175027b5595117c524c7fc1321ef713bd89d7b9a089f4fde532e87c9dabe0

    SHA512

    145a3ed12bd45d45d8474aa21800302e1e28ec1088456c0376fa65217a5cd48a6d12675510f4c416e23a6bf9e780ad2d499e9d116e6e3383b320067e7dd74277

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    433ebfec43f290e1af3b399cbe64689b

    SHA1

    e611c1e705ba1498853686a3e7dfd324f53ddfcd

    SHA256

    cce875f0c3eb4edbeabfbf3d2ca663faee14ddf1c84329c02209679551c06b64

    SHA512

    dc3e4c107939c942be17cbdd58d36bd2824dec660076098d7395f85981a4135d2d3fc72658b46c4198530e9258bde473fefd5c49e0152d4a29a3ca3c02862f3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ef8a1de6592c2d2fc26aa2dbbde36a6

    SHA1

    24109477c3c5a0bb24a8c9b225ada26ddbf0d53c

    SHA256

    2fcf678d8124061cdcabc5d3c60223d6df0197b567036c53b28bed210e03a561

    SHA512

    ccd57819f02a70b2f96d4a763b079534445036ae9c51c51d1e867db3182a28b35b3c1b1cf5389cb0f5bad9436db3686d8bc240bd4e91554240e8905b5730e547

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c89411d131ae6a94398b5daadd505012

    SHA1

    a4633d385660b3cfe9af6177ce88fe77b87ae3e2

    SHA256

    eefa2c1c4122beeeaa0455756102453d366df862f7fb26d1c3f541cc5475ecfe

    SHA512

    051a5d32ce6b40b592b9bc4129dd534259c90228b295edc23afa06986b1ca9a16fe9da1747fb39bfe27a4cb1630b329ef0467b8b9373f88f2ad9843f8e00eb5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2dce05183bb562d7492b9289cd78e35

    SHA1

    5834d28f147f50f78376afcba7f25eb5abf1b41c

    SHA256

    851a062f9eb504bfca74c25df43c452a4053fdd06b776e7d49a4d63a5edc580a

    SHA512

    83f72ba38a58ed2b6146b1b2d9bee9ff1c05bb97ef3f27a758aa1d836171571d4e13229de646ac84d1c3fba3452144cf64c449ef139f2359a00d664ab3870c8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67bf9aea55e7a44c32e9de8167eca27f

    SHA1

    5d4752d78576a5a617259687b85d8761089f73fe

    SHA256

    16f8160b1b11fe39f2815c99861ba5f2c6a72e1be1502c0d9ba1838c6e73b3fb

    SHA512

    1abb8f2355a2811dadfa3e4531c48c31f321228695413f3bba8893685eb33c3a73b30c8d49c2f4ea567590336d7c0dbd24b780a1232ce486d56b583b397718c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f4c178c12683429362332cac8b1d471

    SHA1

    a874b9ff2772b165cde016bd7209f665addd29d1

    SHA256

    fa17c87fae78c2f2e28355e1494dda02811158bcc0202c3e7bfa43c393984de0

    SHA512

    4706628da36be821686a29ec6fb4d207d98e805d65c1c51cdac52f58c024c26813ffad3ff1e0e55772a37d420fc1a7e53a97c62596f79dc5544af76b65c2f882

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f4cd3c0c71e5681b3fa38ece41b989a

    SHA1

    bcc4db606c4fecfa160a6fd106f769eab0e43d68

    SHA256

    c43653fbb31dcdcde333e11277fcdccec98c696c5eea046ca65254ab4c1bef2d

    SHA512

    a7ccaee3c8822faf0c25d67faa9b458b517331d7b49417198b0ce95997e433370f96dbe102db9e6554a24f0543e115d657a33db381ee5bfc1963562307ec2f0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efca12153ec28540dc5e4ccb24ad0390

    SHA1

    d4b20b66bfa3f9828357c35bf76a159db2626c36

    SHA256

    2b31b5a726c82831f73ee89432b5feb0be282c50d8d44316d497f5bfcaa8e95f

    SHA512

    be19f8a57a233212137e28bca23ded4d3b876a26039d74651093867cbdd3adb510793c94a82ce439a347b6a232a237dc673c1b2a56bfc695b0943a059a347172

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc5c3dffec9516c081831d10705b239b

    SHA1

    32171fbd9cab4aec7c1779c7b8b36bf388c1d508

    SHA256

    d7343848326df3b33bcac73895123810401c57046fbf99adf15a90b22f9815c4

    SHA512

    3bb4a7d4558913d9b6fe74034c0924fd4d79a06fe09bda62fd346a42f9ad3499a34608f102dcb8c4221d3f5f9c1d580c5fbe9b7114e666310cb0bcca4b81d108

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bba3685c67fc93e9d40d1d069f2cb1d

    SHA1

    af9f58ad38889d2b5de2ec7040dacc85af2404b4

    SHA256

    ddb94f3fa810f23f8ed6a26f9a668d9cc33f6ed5fb172823ca59e8aa6567b262

    SHA512

    b2187f02c6950ac0a09097bca281a09d3feb3752e633e7e0928d78b0fe959cf5880af0abe80c0ee1897ce4241240fb64b219fc5c17bb7ed11e8c17215dc55efe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eae5dbe78302853798f7182fb332e421

    SHA1

    e5e0b3185486b1d9881c2d99c8d1fdd9fd718a39

    SHA256

    0c68325dfac266f1ec24d0cf1dc544891d254a8533589efdf84668e177a18ffc

    SHA512

    fdd79a423584ff18c8e6728321a9845d640dc49ef689c008ecce7c230b83656eb9150fbeeb2c60083e4f7cceae5df8c2d5318a88e23dc75fcd3f5d708b512d34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6bd11b475900b63532a47dc29167a25

    SHA1

    d3e26fe778265d98df70f139a76531e31d26b781

    SHA256

    26fe18d937ae4ffb53b254414481a4e6575fb04979dbe24160936887caab6da9

    SHA512

    360441b4c127edfbd12ce1dbec37ec08cd61b89ba85aca23db88e590eb723313081c121f2898929a1ac7a2f343201084e7a39c5e275d2654848bd51a5f0688f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a89fab670e5be3489c5d66d1e58d5b6

    SHA1

    a768904e837edf608cb9f24d1ced10a67a4934d0

    SHA256

    ab5301c878ec34466cc3d715a69e10dd694d9201e3ba01f31f32b78bd4b81fb0

    SHA512

    8eeba0e12d63cd62a01884b7481b34db9480125b2853bb5ec81351cfc5d3ed252b3aa5a785aad966415073295c745fc940719a992ca107f66b16505454750d20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    280c708f581979a3a03cf1ba3483eb2b

    SHA1

    e4c0c1416bee8878e74d688292f9d57a3d240605

    SHA256

    bfd8498b73ad4eded81acc9bcc18ea7ac2e653bdc59da166b1cd6ee3053e0882

    SHA512

    335373fab38004727c78f1a5f427c48a7e969e8724ad1b578b182fe5ce4dca33a701b21222db85a6047c01902095f8bd187a3752607ca2ff7cef50daad56ba79

  • C:\Users\Admin\AppData\Local\Temp\Cab27FD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar28CF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b