Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 22:21

General

  • Target

    92cde285769a9835b0151ea9f12b3dd8_JaffaCakes118.html

  • Size

    12KB

  • MD5

    92cde285769a9835b0151ea9f12b3dd8

  • SHA1

    7e435f28eb541695c34eaae00d52841a8170ec6b

  • SHA256

    6684b7cfe0493bf4e9b4580b21a74c8b4eea44f59b0c350cfc5683b6f9b41342

  • SHA512

    b6618cb3a82995a74239238ec8cbff0844d5caff5c7e336051346d9a73778456413e7929558c9ccc24229d7221cbe998cfbea862c8d92b4386bf59c49614022a

  • SSDEEP

    192:SIRUazMD43DODICx0I37qKGGlDU/xwfN0QmYy9sxHYMQmxhaJ4V2QPQFA/IxH:SIVqDIszUJJIy9IHjO4YE7/IxH

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\92cde285769a9835b0151ea9f12b3dd8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2644
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2644 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2556

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c163ee0b8b561919c28e94117fbedc18

          SHA1

          a788bb208bca260b0bd029b2317a0779ae6c8cf8

          SHA256

          8c9fe847f05eed30cc61a385211f335e9c27801c65040bff6e31a2371b4bdcb4

          SHA512

          331e9923fc5266129d4da89f332ac044cb8fee16cdfb67d70d62f487fb4d26f1191dd79bada41ca6963071641e4378cf993b36c5e397a93b94edfae1e5fed6a2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          43c0e2bbf5322aa79bfeb752691206bb

          SHA1

          1caac870fa11eb6e0806d8d038f3c5e11d5db2bd

          SHA256

          0af4bc19637973b398038697a70bb1be474421ebc8b614d98e44c3b4367ce17f

          SHA512

          4ddde2b9c30f6b4d2d471fa28029b9a33c60dfef643ebc0da5376313bf5abb0871c65e386f824e4ab35bd571584c1f44c18d0e60e61290ef63aa29071fa6886f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          776e93193b91ed77e27c975487b685b7

          SHA1

          7d3b37380bf85e62f28382a71951ce051080c9a8

          SHA256

          68d5f6cdc2b9431947f5408d4062d75a540ec5f10a0d5af309cd248e0b134536

          SHA512

          e2656d71ae1973bfbb19d90ff8e9882c994cf459d8dd6ec9309c8673222161a10a158145122a70a47723b0fa5bfc0e3c197cc3ea3c29bbd0c947502b6e484672

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8d115a8ca34e53e33577c834eb0eb260

          SHA1

          d10997d4a95e9453c4b8453e41aa07957dfbd219

          SHA256

          0b5d70a9a0a329e9b52170a93c7728678aad8c48b490d5ba9e3b36d989defe27

          SHA512

          f66cb01f1c6f77f363ead48d9f8eaf665e3aefceaf373f9a266095b6bf36f67dbee03f34e914c8f3d06957d53e60cbc22a356d1ac37973160014da5f8c66a5d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          262826bc4c52d4816eecd673f56c7304

          SHA1

          716aeb390f5d18f1098ac41fe4883db0ff5b8b97

          SHA256

          4233b65a986252283b8775ae6c5b2e87f63377e82bf8a2fcdec13a5dccaf4394

          SHA512

          9d58ff29175ace6f2d429eabca1254376edfeaced92766cb1745357c22719d83a0561b201be94638e34d4517df58e04d30ed6347d9a242bc4f7530471d00fcbe

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          523c8a9f51add6155520abe216c5fc75

          SHA1

          550d0bd5e89cab44b1d99030dd2fbb55b38b38ce

          SHA256

          c0d8df7f1cdd010afc2716cf47c2ddd3aaa7127bb4520716c36b1a88d29ce52e

          SHA512

          0ddb8592ef637d6dcd554ecf2ce0fecb73c249726e76f427fc73dca2dbaec000758a278710ed590575b1fbc379ede5ff2c15f5d418e0934144a0712aec12ba67

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4ca7d7ab369f128a8c89ef453dc079b2

          SHA1

          045f53621509a7e41ff11ab0a70f6c43006fe20d

          SHA256

          4282bee4d31cf973ff458ee04bceaeb7552a22c53793829a1bbdecc8b5106905

          SHA512

          a9c63eace6597429732c0495f938261b77e2fa043b9860ba0de63f947e0bd77d09a4db37ca5c022169b7eb127e4a4a5674f6d12b11eef8aa205aa5e1fa4a6834

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e846aa15daf2219d19ebd97ea7f54d1b

          SHA1

          4d4104ce09a83053af1c4b9c54b7b9100a4acc8b

          SHA256

          51df8508569b2c142a8e828cc8662b60804ca4886819156f41e9319f8498f4fc

          SHA512

          0f674dc398d2b8f9e8f032d20d0187692adf0027f882f25e34241b7a0fad4d2bd1d4d0afef87d2ebdc42c0234c1bb058d05d481e5bd2987795ce08d0d0f46a09

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f0cbeef9690b7eda6e3b57f9f605b9b3

          SHA1

          0b5a769421c1f275fca17ec7c999a0fbfd58f744

          SHA256

          56245d0c2f41e9f00753dc64fff6ea1fccb3d7bd774d6934d98b900272bca653

          SHA512

          d75529acf77efa7ea988db4786f6dd036952e2f21cd1c234a888305512b2588375dd384c64c56ee7c74a110a2c7f9eae7e8a6134051f517e5955b83f2581c7f9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7a7ef0d2610373584817378ea8c21823

          SHA1

          570197e31a37c17c866fd2b0c4d0fd6ca15d3c38

          SHA256

          45318c38ed6dae1d491ea9d31710f053fcef2b0a3f79dd4242483410c4f9f29f

          SHA512

          498a08776e59171da2fed3022621681eaa4be0fffe501558b08218f13cc4f5205a2ca96e379f9a3261678691b9a800a4664111173a373b021eb47177ce9023e4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bf41bf0433a41b5dbb4ea8cd1a25e935

          SHA1

          f1df7e3c21f8f2e8cad41faa085547d41d8be446

          SHA256

          709e5badd30b83707538cea7e7c427f95c2dcaa9c5bd54b48f396b23fea06385

          SHA512

          f54e3dbb6c1cbb72e00e70fec72e74586c4e412ed990f13b60ea413804643809e42457ac76e658e572d6855f13babcc40efd9c2b624410f3c95b33bcefcb4b18

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          82ef571def9708aec63cfe9d3012ea33

          SHA1

          bd5239bf47ab9bf215aee47bdbabcd82b6381729

          SHA256

          f597bf3b47113d9adc48ffa0f0724768cfa66bb2aef234843ef701b186325e6e

          SHA512

          69521f616e37fdd5df706176e29e44be7ee1fee4a8ffe25499f46b62cb0b57217a7970f8973033d9c3f3938d667e2b47c2f5546cd9fee37fcf85fbc3df4155a8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          243e8e46b5c0c7b6406d19c9660c77ee

          SHA1

          060fd19f5892d22e3a025275eaa0eab8e15df96d

          SHA256

          86dabdfddde82a8d7306a46b13ae5c79df21f73bd8a40b2c26329d9315d688cc

          SHA512

          5d35e6623c2caed337b444253ef8bd4b0267521d771be98c52f748ff0b0193d2728fa0fc1bbd86dd8afee3942e4352d79bb0cef413d0660c2106bcb93f9ccd84

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8a73018a5f1dbae2aa842174b50916e7

          SHA1

          a2238777188f6f01a9c92e9491c9ad2b5985845f

          SHA256

          0787749b6e1a104243d6530898f8a6877c37ee8afc389b2b5d039876b7551d4f

          SHA512

          2d44001491d2473cc0e6c38a41d6ea285345cd9bb9615189fd35c8ca7faaaffd3578f716791f1034b1edddd4970207844a033d585fe6c819df36767c2829bb05

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          139056447ab79467f15b4adbd8f62afa

          SHA1

          1112bfda4cd80a553cce006ff2d7bc06681be48f

          SHA256

          3adbb71e49d9a70d4f273569365659114fc3b84bce6cd9745ceb365aeb3a5d67

          SHA512

          b1af36f4a173bdb93416ffda1ac20173b7587083d168c3dd087c3e8182b3fa45eac5fe917449fae4d5a760b73234a822653307c2ad9a1753ecedf1a569028339

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8c91e740c61e7f8274877ec16c7c201f

          SHA1

          07625b795f2233874eeecdaf832c9f10eb81d922

          SHA256

          e74858e472ce106094f53f5a5c84fba8a498fe29dbe8fa911711edfa96edbe6d

          SHA512

          bf3cfcde6bec159b9cf86d826f96ce3c6f8fefe88738095397874f0d2d794c75b8c61ed48b8fc706e948ecc7960dcf08efea18064b76fc2db494cc979a5bdca3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a391c8f13f62d2cd5d200685302a1f66

          SHA1

          055afd7755c0482912be2bf03809b79b075d164b

          SHA256

          c613ddc2ec8c36dc7cbbceaf9d6a4442d7e1af0cb02266fd8d63366366daddae

          SHA512

          4db74da76cc6f0da55c951b48bf7f5c9f341f2692835a106385cae7eb197431ba3bf76a57594605eee2225ecaedbae878edc76e17f99053904ded4ad6f231f72

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f9d137e7fbc3192eb3be4f9f687d6422

          SHA1

          5aaa091216dec681a7a15361ef920820292f3413

          SHA256

          3248ce0fec77222fbd8233aa5514a9e336f696ea0201831d9c067029b9557c40

          SHA512

          ecf632da7cb2de13ac931dce5a9a9e66d7326c19c64e9aa43f4bc4e1522d14d316b67f4b53f28e2eadaea6139d58de05ab9ff4cbe5e3a01ab5540112e1c55cd0

        • C:\Users\Admin\AppData\Local\Temp\Cab2879.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar297B.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b