Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    02-06-2024 01:25

General

  • Target

    8c72d37ed37bd751c91ca9e6b26c6511_JaffaCakes118.html

  • Size

    4KB

  • MD5

    8c72d37ed37bd751c91ca9e6b26c6511

  • SHA1

    532540fefb34579f5980c2b91114283e02ec2fd7

  • SHA256

    7fca19cad707c5ec6f290571ad98b9d9c3300b4975c75888e213037ae7f30f3b

  • SHA512

    06f62a90f4ac01cc0af1b577521a313e576df43e8f24fbfc291587fa1d19c080b02cca3e78baa7eecc377007c3a80949f3f0d8f6bdc7394793cce16296fe85dc

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8o0Knlcd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8c72d37ed37bd751c91ca9e6b26c6511_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2460 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2488

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12b3572aba642cf5b336986711159413

    SHA1

    9f4bc28e6725b55cb438ebd5bfad4e62ae85022d

    SHA256

    2d29272cd1aba041114727486d76592c526db2be10bdc1be556986728ad97bac

    SHA512

    ac3061b0b056c2948c0cec9c5343b5398da5f7d944e16ddbf93300d710c8437f8227a784abf895e9de21fe45e5a5ab702715d026eb0f7952d0f6d93e375594a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2470396a259c49fd783a893993d160ae

    SHA1

    76da6ff46bc0e8a03f1ef8e67b6306ca577a9023

    SHA256

    c92f1079f34e85cd1804129ea3d017a868b7f6802c9406bf8f6152bc5e37b7c4

    SHA512

    ce6108e9d09cca50e23be572713fa95859dc14d06cbc9c80f41b0024fef4cd11517d4d64435463623d6edb345dabb698cbad479b34bd376066dfb8555de6951c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7096b8265bf8064ecb9d5f3b3e0d0a9

    SHA1

    7026a6a77180526251e9481aff233c8e0ee66901

    SHA256

    f4026922a25b3c7ca741096d225ca39c3584f7572a2661af0ce1f88220b8de49

    SHA512

    48101a19de4cf9092ce9358c094a40b3660eeb7e2b3aad91cad07d24d8d9a20e6b7d331169f51ec82d3fbfad7e2f39c91672b744978e568c2777b05d2ea3da24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b304ff0267c5d2ea5ca28cf5897c5b5

    SHA1

    d124824e3cda49f362f24a13906be56c1557593f

    SHA256

    0447d9b2b9fc87207697a0dfa182aed5a7dde666abfe4ef4d191cafe61d857ff

    SHA512

    20cc5de62baa18f60f40231ae18463472de8dfdabd1680249faba4e13527e22412c98aa55866af6f71128888d8d9cd502c790f0d86c7bc07fceff095ecb7405f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e9ad8a7f875b1117611f8c162737babf

    SHA1

    0f63879ca282bf230a9ae7504e4974da06f8efcb

    SHA256

    7f9094582660141e1ec7ff21d369b39c5aeb56811501d477fade33b60bb22576

    SHA512

    955b3569117a7fed91585f2cd8968fc9e5f0fa9316e795142ef1bedfe519a41cc7ec853813d67703964dbeb786dffd89f312900dedc74605df0f85249e09df69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4852d827c7710116227d68eedd79377e

    SHA1

    0d7700500924bc1edf19a9692dc1c731862d20fd

    SHA256

    73fc0849cb141772b07d3fd01ef347953132a7f5a76fe6ddda00d521d68d099e

    SHA512

    3d6116eac3904f37b138b84629e70a7bc8862eee327788ea45dde2f43b0b083ce728da3ff5e963af1f3a337d9cd055fed447fb2071eccaecca6a2e4cd42e8113

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    533bd6884fa8dcb47bee2670f1c91e64

    SHA1

    62036d3c0d952378388eeee75ea3d71661cafe3a

    SHA256

    fe06c5619baad99ea8214156b6581c3785f4b75b90dbbb9ac87884ef2cde6680

    SHA512

    0c514c8e7fc9413208f5dc6d340bbba73d19e1ff77a6b2ff32909d3b687cc0c3ae0bcac79ae33f08a340d44cf78ac6c8f068de48ec2fbd24eb85fe469dcc8f2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    470e78d7505cb15537013538ba2b1adc

    SHA1

    cb16ba47c4bb8c79add9e95668c9347dc578cd31

    SHA256

    2af2dee88fc97014bd3e90f4d5bc6f646b7c817e16258584804fa73070b1f96c

    SHA512

    40d0e4d730bb49f91edcad60c017e2dd6a98ae50cac404cac78e29ce2487aa6779e22f6d9f876d2c61a76cfbe5dff8fec2ce5df9eb1ef3c3e5a6f2fd4692f2a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e92c72cfe2581bd3eb1d0c90e95d973

    SHA1

    bfe275d9d1c78d5ed3f7457c1f83534c7fd5e60c

    SHA256

    325a04c7ad87f971bd01807d90501ef65a0a349a08974e3149ee093f7350dadd

    SHA512

    247e5cbcafb4a00e0038c8efc1ef0f9193309d62f9a0d0401dac5835e1c21b2dd8556ea98d0bd69956e35258cd59ce9b5498d7195746b0b91a4b20f767daf333

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7d0c64ae7cb58df09055f8468b1776f

    SHA1

    895c00b6b6a4a7b1380b9d0c7415456fcfd59bcc

    SHA256

    b6d3e455b34bd720900727f5bf762ef3861fbe1c149f52d0b1101cdca49359a3

    SHA512

    1e489e032f5e26fbb6787067d82835c0cbe369640b5675cc78dd05dfb11000e9dc2db83a669b143be302c5e3c9464817b88d6b200366fba9739eba2bc2d3a7b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a057b59c77885e50902efb8615a8fda5

    SHA1

    da5bce51d66aedc72da0dc1843e56b17004cb428

    SHA256

    523cdce200114192e35322f2c1b2c2abbd2ecf4a423f9f548e9b6cd2b4beb927

    SHA512

    ce9ed94bcd811bb794b381ee4e0f357bca4d58e3d7a5f35b233e3758e71c74a3aaa01a1ce5f3517af5234d44c199b5c63f2a3a44a4676a164da66f7026adaac6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    753ee462f6e0b6a94efe6e88362b14b0

    SHA1

    8a484cd58fd2794b9330ebbe6830018499d81a97

    SHA256

    49f73c7a738f2ca9008ba013f110d07515054b104449efd5d4eed7f4b5419a0b

    SHA512

    a6b1c8d709394df2812d6e17e0784d0702457fd8d27cd51e865c97799a6c6c432d6a6c1bb3c1d9adf6d19aa7f448cb91c020069bbb036fd5da763ad5b6c6be6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae9626a1f9582e8419516c31acf7dfdb

    SHA1

    819398fdbcf6d99f516fdd607d7fa355d08b9ff6

    SHA256

    38cb08b1805e139cf4bc41244e5f67da27f114bfc299c0c30a4026169dd1c0b2

    SHA512

    5e47d2338e6333f5521f18175bf3d24ca309877a05bd9c0445a93b546dd1c7f0697b90ef5a86dc8b518b261a656c2b1b00c28715ece0fe2da94a98c1ec30ea07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a77b6291f9e78299b9977ea83faf1e1

    SHA1

    e32653e4020c1a1d3b63be8bb5eb21acde24fb98

    SHA256

    f9742f1937e1f7cf2e7c8ac4ad2bb82245b34847409812f40733cc744238ec1e

    SHA512

    a82904082536f37773b1f471f57fba1c757513debfa27ce3c1e3fe8ee41db57d81a1c904045d990221fc0d12011933c05c14451886765f4b5a90f00529a123a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4051b41972c7f78472f40be9be62897d

    SHA1

    0ddf2cc1a02414c032c320f612e8d48d772342bb

    SHA256

    70963e998a8d660df3b3b79ee599c846124def163a19ce3b47c4ba7413e83cff

    SHA512

    e53df80e2af2504c11c311be11b713581a8b91945ff52fe0f3b036d6fa0a1f7fc297b92baa24c451d85f8ebabc35cba4d648ccd74fb81b612fcd61c0b7673e19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0641929b142f43e462a7baeb39cc3faa

    SHA1

    81b11cea1a63d1224cbccc5d06b9a0fc55ca6fae

    SHA256

    7daf547b562c7ba7babf15df21655441ef4f54e45a7c68da08816715317f0160

    SHA512

    038058f6450e1029acf2baf4293ddf52a2eca366c2ce9237b271fd903cd86b54f139456c357b5b7ca151e16b441b87dce718d9dd53c37f92b38af72c08e6f2c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    087e02793e4debd5b2567ef5c47b7a9e

    SHA1

    f88f6c108cbb9155aa4671f2813cb62dd26646c6

    SHA256

    8b6e3b61db10bcd13d47ba611a91942274f3d5d743922fbf087b01844c2abc60

    SHA512

    d20f65a51d18c2e9bfbaf3a7c958d94a5a9f40ea2b3feac67934f8c07c7129fc0c4e8e9bea951ed88c811e04895e5294fb36dac4e21e6c9b83a9493f62bdc97a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8a9bda65475f5c1a918b7841273d11f

    SHA1

    03a65d90f6bce29abe128af332173749459db82c

    SHA256

    29d2afc2cd7cbe182161dc55b11e3ea21b8c02af9dd2b0e12be2d67a3f6cac2c

    SHA512

    96f8cc9a892c3718cd18115dd282e72e312c5687c9dd902e5855c0251abc53c8f3710023798e511b7437523ec95fbd08acf47ebea058e54a15b848260896bf13

  • C:\Users\Admin\AppData\Local\Temp\Cab2197.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2298.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b