Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 21:42

General

  • Target

    8f86c1b73d149dd4b34a600388e3715c_JaffaCakes118.html

  • Size

    6KB

  • MD5

    8f86c1b73d149dd4b34a600388e3715c

  • SHA1

    0109683037cccc0a239fe79bdf5ba32799fd64b5

  • SHA256

    14e3ce38abe7cc95bae3ef4b77fcf3ec4586de9ac3a43a8623f65f4ab265bd12

  • SHA512

    a213feabc11b8ad0ce182c49002b2392b47041ec14d8d9b64642d86fa4d1d0ce7473549c63913a310f437d67553be0b82aa639a0d84507bc6f8be40dd4d4853e

  • SSDEEP

    96:BhM3sHfb4m9LPca1/TEgNTIC1GwWWhWJ5AfuT3:BhM32OSEgTI6GwWWod

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8f86c1b73d149dd4b34a600388e3715c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1228
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1228 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ad5da9e245b51ccc5f14baceb2f3f8c

    SHA1

    002863c96e7698375a7b6d617c24a7315763ad73

    SHA256

    9402af1494b6ac62e7d3a5ba9cc297183ab9b3a1c82a83ba198a71b0b9b17826

    SHA512

    c718b01b254227416f18b75da3f295b993f6f9804d759a946f7292743849663f908f483b43c069d94764033d2e0e42d94b2aafadeecf7e70a70a107ef85a8eb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c790abad28f3bf7053ae4fb11a33d0a0

    SHA1

    67ef00f70831ab0ddcbae95d17bc079007543c38

    SHA256

    8ef52897d9102ec6896a3656ca4812acb3e98736ffe40eac719df33adcdd6aae

    SHA512

    386514f93644539a2924420e85873cc072b1719147fcafccfdb95fa61acaadd474d3fd2af215a2a68e1e6638f8b784e7022986b80d559fdfc99d2a3cab9d6dc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b18206fb0017695654b96efa7e7c5d8b

    SHA1

    4186af38fb8f242dedbee383544ee4b378ced689

    SHA256

    2e24f9afed95e1adf66cfd0533ef4456131675e247a8053c0fcd23bb4c8d16f6

    SHA512

    da6c90293b6ff015cf5fa423f922e9d48fe2af76c7e5d80e0ac0ec40c50ff80d1af0948551f984a32efec58de2d861321043d86cd4603b1688837e69a19e28f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4ebd34ea767c57a823aff6955488910

    SHA1

    c510bad8f7a0d8dc80b42ccc0a7f5778801f484e

    SHA256

    e6586996251fef670f13fd0b148611eeb8925fb4042ab64db2434e78538c4649

    SHA512

    b01b9b0e71e0f0bfeb1c5b3ef13550d71e252639e395086796ff7ecd25010235361735b04edea7d0c9019f8f8992e063f90bd3f8cc0f805bd634aec1750f63cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bea289f370c17600922b35234bfcc7e

    SHA1

    b6ca5c35a49ac203cf0b69a6029587996d1ea5c8

    SHA256

    a55a5ef675009e977ebbbbf8d464a371c4148597d3f36d68482bbb9952bc6b43

    SHA512

    3a0a96ac4205daacd416998187813127d68204b517a36dd16a2cf0d20fe066d7787d3676279b9376d2d3006a56f97f0e0bb4c942534c5a908d0e4fba9341e9df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    769f2caabf4ca9244b06e251ad2bd06f

    SHA1

    83eaa500e3312042d501c05e23712aa3d2c54a27

    SHA256

    f91eb62f6e0fa9573e319fdf2e717ee5884887885b2b16cf1393470e3c20c300

    SHA512

    43346b20985976d617df9d98c1e012c0d2767287be6c4f428b6587a926a9bcc1869ee656c789034290795a1d99a860121093727dc8e941b02b4f18c32b6c499a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fa2594a5a23001ab288db153155860e

    SHA1

    a22d70bdfe27d929bac45087b6c098478dfb28db

    SHA256

    99baecfa68af6a79b215e4ad940dc32a251376005a5a60f54b24336e464e6499

    SHA512

    817286da43ec723baadc4b22779591553a2a016565e9bf96fc0e054a0180efea2bfb0b29bbcbd1fe6fbd60dfde3fb71076ffc961e83f72960fa25ef9b284e174

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f6a6c4be898c1845a4ad1fe9df57c3c

    SHA1

    47a2bfa6b5f8e03dae6c2ba1ae138ac35e1a54d4

    SHA256

    8d7d948e6fd9e5e06641898ee601a78bb60fb56feceb4ec5bc0dbc40407ec481

    SHA512

    30fbb23eee7c3bf935d7456d6d54b0479ffda204e3c12bddf68678dbd5dbdd7816f76211702e6139080ac087e39116fd4d0b7f10a40d750c34ab758039c1a5a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9830e5d3a67ef74bc8bd73ae0b715901

    SHA1

    847c41590eb8c72c80bbbecb588bde5e9006b525

    SHA256

    f3547eee0fb50e1635888396f507760ab46caf6ea6878835afa8024b1c605a50

    SHA512

    ac8d86ce689f360b551064a4ef38c10cc4e825cf638daaa0598328dc79a3f8c582ee9ad7bf86da71a9018927372de5297d038c189dc1a25af155cdcd24888024

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fa87380e1a823f6be639e71d4fe996a

    SHA1

    2efff374accd09318850a3ccac4987769a7b8da6

    SHA256

    dffe8f0cd66e8e8411a8f8d4019ccb11679102bef3ef2a37d502af2d2fbe24f6

    SHA512

    5ab065d82f1172ad6376c31da33199a5f7061410ba8c720df8cad3d7f04620d0edc26b55c8a59122e244b1d0187490b4eabf1a708103a023dae5427ef2b024db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    898200ae9e944fdac780feda2574e4c0

    SHA1

    ca7ccabdea83f06a38b4828373bd1570a87511b7

    SHA256

    b524166cc154f268cb81a796d3c24a014d3914c5f8127354af7306400564654e

    SHA512

    78e20e4cbba539179df98caf96de94d3dfde978cf20dd60ddd134444ac0a30fcbcc06f6eb73665c0a2f0a25a29889d446d518bcfc39818c6392eba75e5787101

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5e213237b50091856bbf7d8a1716519

    SHA1

    66cd505a784ba5e631599cccee3eadec70d020ee

    SHA256

    6b5d269374eff32aa9a0a9e0909ecc1707d752b5b928aa2f4344d9c128d56ed4

    SHA512

    c9290fd6201045ece822340c0906677b9d989f12a8fdab5279d5663e9adc7ba2e714d7c3e18ff960b2479769a8fcbd759056a63054723dd0f26df27e44b6b1b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1017fbfa19f4eb5d081650c25062f907

    SHA1

    eceab1c5d169e7a68593ba55a49950c3f210d847

    SHA256

    923818850a0fe8472944ad26d88dec52040d76c35d509c00fd26d5ba897b564a

    SHA512

    b816d3dcf48206f4adc7521490d68c960c6d941658b46e0fd6a82e02563a46de8511ee5340be8c933147834b2f2fcc8fbd4adf17bbd6097a8505d0e6ae6ce34f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4996cf8b0c9c68bb55d68873cf9980c4

    SHA1

    eff3bf2eb86d2c5bc0cba20ef07a0e566063616f

    SHA256

    e23c48d9917e596411aa9d147c5f83dd3b4ed178a524e064b24420728f378bfd

    SHA512

    6d005c6bc922fa694cda19d552bbce9b1bf371f6f276c6cdc1abf095c49934a0cb2db5d2ab9e599dcdc08c072d95bd478afd145ae75a242739947ad7733dafe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d04e2fa88436a128008ec0b2b854e67b

    SHA1

    ce538d5b1f064ef41026c1a986a782d12467d836

    SHA256

    e6a865fd0de33c5f4b1a0147a840175cbccf0ddd720edc61797ccb60e37c0beb

    SHA512

    da6e03c37cd6fef5907333d83a26020aed391be4bf5d1992c6a9454d4b66b1c137e1ff6b14f19a15bc8d6e3ab7fa19efa3157e60245c8d900e1bdd1dec5ebf85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19692fc34f7d9a53028e502d61b16d54

    SHA1

    fa3b4d94e3ded5b1d4c6d63777eeedb3f40b4dbd

    SHA256

    c743ac1206e19029bad9bebfd23508bff72d565a792c5ae0cc791ba159c990b6

    SHA512

    079d752d8217f773f62a4310c353fb6c83dd7a1b1d5662a4049bda12d9380a7e9655c63d7b35a453fe3132d062fcc8aac2b6abdab9d08ca008c07d1144519b2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65309e8ab48aa60cf2e496b818904e00

    SHA1

    3158e457072954210c9c562fb096f0426c1b9836

    SHA256

    055bdd7ab295747c9f985ec047d62e7943c8994842203282fda4528b30e7ff85

    SHA512

    44268af5cc3820f6de0add091f5af2e9e654ad41cd698b5beda2fe56ab241b2ea228c0eae1cb9957a3e99813fde0531d07a3b064b422e42b68a6bb480f9fe1d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e8a426dc3b09c2e9a1bcb89ff97b441

    SHA1

    f0240f7104d266b9f99a5f25cb81a2cfdb93ddb6

    SHA256

    334bfd98de0918b9e37b817ed5efcaba4905d29f462b22c8cae4127474f1e050

    SHA512

    f0cf061f0af44fc10eaae417136c888ce82ed28200178a54203556c9e8947b533bd4f0d54fa723c048b6955ea152eda85736b9a0a56152bc733c14eed4ca92b9

  • C:\Users\Admin\AppData\Local\Temp\Cab27AF.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar28B0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b