Analysis

  • max time kernel
    138s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 01:10

General

  • Target

    8c6a64cade097ec3dc710ce47cf4d6e5_JaffaCakes118.html

  • Size

    60KB

  • MD5

    8c6a64cade097ec3dc710ce47cf4d6e5

  • SHA1

    8fe95137f50bd5dbdf3a37acbada38f75e890b4f

  • SHA256

    9b4cd226cd45d2fc58129302b0228144ab92376742b8ee4fc84f92b47a9d6518

  • SHA512

    81ed0565b1c263bf0763509291da04a24ee49dc27a29b33b84aa801e53c28b5e6bfe2783bd24878337c4df0f6dc420731dc0775839f1e8bc10862a4ec150426d

  • SSDEEP

    768:Ji/gcMwUc9GeCSXuhjxf7oTyWhCZkoTnMdtbBnfBgN8/uQcc8QFVG8sP/Ijkk5nt:JfiR5TRgec0tbrgamchNnWC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8c6a64cade097ec3dc710ce47cf4d6e5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2204
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2204 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2612

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    044eb3a016e5f42da7f350ce84889f29

    SHA1

    4246792ca60ada2f8a74f8d06fb8b1af6ab9fb05

    SHA256

    b15be01f796bcf1d1c8fb4b818b038bcd149fb895db898e7135e042c935800d2

    SHA512

    afbd6d6c54bb689705f780f1ceb00b747a3e11e06c00a3705b51805456d1ed1748da58891fa86d0c28f0ff31396447d29a4e02fb0953df59d745e67507574eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91f85b40ff77dadf1b1bcb172e0d33c9

    SHA1

    78c5bdd21fa86fbffea16033cc3380f2b7663450

    SHA256

    4f2f5d5c74658543c308aefb2288f594c78f9ea45d3b74009d90f9574dd4ba66

    SHA512

    f1dbb5bd42f6b9f150ad1665a109a07bbf090856eda26378c672eb16a74162f9ba212fab0ad603355a50c6d45292b57d8bd06d5829310736e7238be3aba5e2f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6060195e2490ceae0e135050aa3e823

    SHA1

    703be3c471ccf3f26fb381c1bbe31ede6464529d

    SHA256

    baf698be9cb9a33c9d2b86bb6b87debe7534771ebc122e1e0bcfcf4ab38975fb

    SHA512

    f21f8817a2afa7327fa85c77e0d289dd7875d9471b31ffb8291daee9ac0d25bc70f81b1b21d0f333d3f1d460361267a999870eb257989257dc998b1ccf2e92ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28692d1010526058ed3b399673dd6532

    SHA1

    ef698533f478341e76f8098f2faae367112f3393

    SHA256

    30a066c200aff6633ae3b553ab88550fbf961bad41db05eee50af5d3f87840f5

    SHA512

    5c9c28b56adff55603f9c81436f555610d519b227191c21fdae3e154edc3958a304ba75f275f54f8a5581811c0bd7e5c2a80c7925c9a592f1a8976d21e03c1c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3c3bbe790028f74d7be1f593200c9bf

    SHA1

    b73cf23aeec7bd61ba702c184a0a9fddf4490cd5

    SHA256

    ce3e40e896dffaa3f186a3bf64b3827f6fda5b639c5f367b5ee312e965718c88

    SHA512

    97b6c83af9bdfcfd2829793935d0ef3d3fff06428910c77e24f7478228faa06f54354eef667916202094f3c6799f2dc7ea19e8a4a4cbfa0b0020af76bc89271b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b256ffdabf53c43b3715b914ab6b01c3

    SHA1

    042f0166652dee0a9b18f975934d026a0bea341d

    SHA256

    823f84c667ef14baa7f9e087fc9c50b188059f2235c9586278a77990761989e1

    SHA512

    cddaa1f2339e56e3112f0ec2a0a044a8d36cb880189ed3e9d8e58cd8915fd3d74ade228101e69a2523445214acec46e0eee1a5c273191d4de95891b71eda7242

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a64ceeb427740e84d66827b0666ffe51

    SHA1

    73c69b5946d015fec2c768d932ae1eee65c41f3c

    SHA256

    49e865673102da2d651ebd72443360c8edababecc90981767f0559e80dd446b6

    SHA512

    823ea3aa5565c080c07e7e0ab0ea4044379d66a088e0dffa7e5dec6c6407824460058e846824d6fb402528f416a80e29665c3ee1c96e0d041ffe0c32cbbbeafc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c60283af82156a8d13d21b8ca050568f

    SHA1

    eb34170d1e0e091d8df2db2e2cf182bd507f264e

    SHA256

    0e95c9c5446f2fe11cbeaab37a39df2ab4252b2f86dd0daca5daccb5730dc83e

    SHA512

    0e035aa830fda6d0fff3f8ecb63dc597e111922c3f1a5be67ccf079c01a5f1fa4d89980dedfd45360571929bb7cf7a7bbc2f9e276ad58990429a738d5cc9d2c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c062cdf541a4aa4433ce5d105bd285f

    SHA1

    aac26becd7d4ef30924e087a66d0392c5c0835d2

    SHA256

    3c7a026fa730eb3b668df74386103efb10851d5fa38bfda32bd4c06836ee9811

    SHA512

    4e62f459e1ec87230308f6227d435da1469b9b7452724862735c1c931ff73ea68df25de230be321f80c26ff7ffbc790c6af8c6fa03b7da6d1a6119be4d4201a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    773d25b2fa9437873bd901ac7b860cbe

    SHA1

    1e704af5f15889d17da3e782a76efdeb02d3f5d0

    SHA256

    362b7b8d650c53c63c3274c843116ecad411c0a20d89a8d9098172220985bfe3

    SHA512

    3b40056e0efd57ba1765d0db4fa28eb5befd4cbc939525f2a48302a0009ea39b02e2f75390431f232549807bb1e3f2e1ff187585d6f460deb6c24943899917d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6d7a0d36d54ac2589597e938d3dc8d0

    SHA1

    f5dc1e3d44e721dc411e2838a1b92d080abed704

    SHA256

    3499fbb73b66acd6c980d840d9a14af3d9fb9b730dcd8277f80d1adeb063df8c

    SHA512

    fa3b50ee617aeb716fa95fcbf16b6cbac438c9cffc16b7b4efe4d8989574198ca49b11e721e4066e9192d677a97588dee70c1051548f7711e625e26279a67973

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9deb28d3391bf0a7b35338ca5640cb12

    SHA1

    61e70b51ac3605a68a2d06d1128fdea5296636fc

    SHA256

    43ffdb8a6dcecee1f412a44634fe7e99c4bf3990211d14c4c1dac2f28066847e

    SHA512

    cbd4d4d8032350cdb71d90b38b357a54cccbab2541f4a8c345c0cfd5972c0c1371fa2e697c65063631ce07c17be44f260b0d271b75e77c665a1da637d1d1eecd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bec69eb360085342ef368b7e50287516

    SHA1

    5ccb6bb4ec74d1bba3637dca9d300aaf181e890d

    SHA256

    c9f155b6ace6229f87def920aebd3f01e94e88e84d9d94cb8a875cb9e705a52b

    SHA512

    e94ebfae61c6eef690c379d296dc25687ced5aa72747c526115ae7baccde5b6c879617a144828502fae3fcd324b123cc8de8dcdd7234cbd5d2db37ebfcbdc71c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7994cb8eb3742a3d0f488b6c93829e0d

    SHA1

    3c69565f2f1a632b109e803a4d400950b8a0920d

    SHA256

    03004c3d9d044604d8175d9509f7a4e26b56866760c5b57cc2e11f18fde7bd88

    SHA512

    37f185e7f7f82f51221c275b86c3354a87b23aeb6787c9b2af34b68a1c2b8a1001ed63eff316f457f29ce76fdd6186fa3e0b2a61782368ed0f00de49e34fb4ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab1431a8e7e82052282061aaec0b0bd9

    SHA1

    575e42ff3e81160ff225ee3dff0e4f14167fe411

    SHA256

    f8794b5229309e405debe4ab2780a5e7248edf85ea107a7b5c47bc489a088206

    SHA512

    fff3130409bb7265d763951aeb3efbb55dbd2b4c25ad3790ff7726f877e5b78b87599585f2403c6fc4c87eceaff46584dcd37629d4b9b1751da9b6a9099e74ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57fe7162089a99ad20fe1f2bce69e411

    SHA1

    7c6944f91353456415d95b79fefcbbe01cde30c1

    SHA256

    1c890769c56df9369efbf28e048e2bf0e1b4645b33109b85220aa6426831332e

    SHA512

    9a8514715412515f52ccfc785cb6a38d5de33f9afd9182137b382e36a3160ce0f02564443e7d43a88e883d358a4c802b120bce3dd05313f459aa3b41e09f09f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8303fb259aca0e5e07a17021656e134

    SHA1

    9ac0dccc4c24d46d0ff715b47e1ec3856251d999

    SHA256

    cc597e97ba9f290dd0f946fa211f5855e02ca0724307e2ebe36dd5871c2c100b

    SHA512

    e956f9d49a7814cbae39d24e4a280b9b7b82a2f98817aaadc8a744b5ca7d28bece0c65c9d92cb0c3a7fbe175a4a3571a83dc2713671c32260ad713a6fd08e998

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ce54b113070d6a190bd25874ef7e5bb

    SHA1

    1fbc8672c893c71cbbde7f41a0b4f990ea2d1caa

    SHA256

    1e253492d021676c062b648a88fe6ddb11abc878b7e5ff05718c22df02d2aaa7

    SHA512

    1af86fd19cbc062e3fe709588cdd22612f09bea5bd24628b26e9912f86a544d573544b200562ec2703bf0d2bf3b93278d4024b59c9a9afbbbc13bda183736a54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5136120e18175546cd3305e37dea4fc7

    SHA1

    513fda426ae3c36fc154f305c51b3bbd844195aa

    SHA256

    b1a69fb6fe6285c8e11d80b4f2e93005a65a37bd3f7248b1859b46ec5978c413

    SHA512

    2bbe95b72ff0964cbbdb3b0ef64e2d2dc47b118904ecd714152855f22a1f009363ed74efa5b65c41274d7aa88a53a1b0f75b9fefbb08a72eb2c36ca9e62d0ef7

  • C:\Users\Admin\AppData\Local\Temp\Cab457B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab4649.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar465D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b