Analysis

  • max time kernel
    138s
  • max time network
    124s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 10:37

General

  • Target

    9178786534a5fbdde0ea8891ed47fd42_JaffaCakes118.html

  • Size

    139KB

  • MD5

    9178786534a5fbdde0ea8891ed47fd42

  • SHA1

    f70ce00d77d3db21c7039abbfc97031d2f0dc019

  • SHA256

    977db3040abebcb4e47a51e012cf9ce429a7d3394725b5b971419516fe83a175

  • SHA512

    48f70a41562e7da3ee2ebe7f1f391d542cea252c745ccfe8bdd425fc4c981369f62ca0fca7df9ee028deafc09479dc5e42a84785823043d644aa261a2332cc7b

  • SSDEEP

    1536:SYtoYdlbiGyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTs:SYZbiGyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9178786534a5fbdde0ea8891ed47fd42_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2176
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2176 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2896

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ad251e7b935e3dc3882a14463a98a92

    SHA1

    75303d05d37d82df2f42ae408e134af33013b233

    SHA256

    ad20a07c338c314d93eaa6f3e3167a6a37142df4dd74011dec245f2e924e412d

    SHA512

    f8d3f093339887f079265ec6c5ccbd82cc890b1ac972fc8c5922931dbfacd8d9885a9fb078d89ed433344cb468416076a78e3ad961965c53f77d109e4419a542

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96b7ddf12f6674350ad84b64cd52e714

    SHA1

    676fd9cddbbe7dfcf28b08414aff9e1c52f56707

    SHA256

    ff271ca835ab4a13b16bcb8c62f0b00720f1eb5f041effec41f0001bd9114c7c

    SHA512

    56934aeb44ca3330be145eeacacffddc9c1d70edcc1814088bcf3765c99ffb297357127e5c03756cc8bade8422a4f8e1f82c4910cc061e079055f21b713037dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0596ea0fdee582f9be6721edb8997a8

    SHA1

    486d2f86ada502ac246a30cddc3c91a1ecf917c4

    SHA256

    123d76be1f363093610d4b6971ea86261d6ac2b6628da5b2bba39489a739566f

    SHA512

    38a1d7e905c1d0c9dd68d0205b7d1e39d679969bb0f5a8c48e08b0f810f06cca97cd8305a45c2dcc7b4501737884e9c31a06bf6282f316ba6504f777605f8fd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbfba0f6acf0f5faebb9825d5036d904

    SHA1

    5a0861b076815c06d36e3a07171a0cf7fb885f45

    SHA256

    e5adf0b7d59e87c8eae81df3b9ca436092fe030af0c17a506366c5c5c90704ee

    SHA512

    7b928889ff4e9bae5d568d84aff543861fc810d3381f7406c7df19d07b0d4c23f70be8f358c0a11b52b48a3744bc2bc9e4f7f548aa3d86462d4c6ed5e2af1384

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40e1a19cc745af720fd321d984546822

    SHA1

    027c514b6520446a6924fc56aa403efc615e2edf

    SHA256

    1befaab5c2092bbf11a4909181d48641eff10a97340aaac304a9e74e90c7196f

    SHA512

    e0dde9deb1d6d2719bb2b0efca230b1c158f5daf2a0b57d0df09ea8955e52dd8969ccfc80795ccfa4d44e043ea2a1cd435f86838ce41e042e539608c28601dad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7964ccdde98b138aa961df62d78caeee

    SHA1

    01921575eabf068e3fdee11a56429a2cfced9b62

    SHA256

    06f66e52d007707444453bd8ef7744ae00ad30ad2241c2b4254e9e034945b8d6

    SHA512

    478bb25d012a65b10371a1071547d467fdfc1eb9d12cdeb8faf858b36c051775278f5fb19f003a49386524725fd380bba38cf3db7e36da06be48420ad8054cd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f501914acf06f6d4679ca3fc8c090237

    SHA1

    08cc0d8a3fa04192b26ab1d28e65454c87b1fd14

    SHA256

    7b594d8a22435da7754620331424d69e61a4abbea12764de8707d2d69a00cb83

    SHA512

    46acf537c4a35c0b438e45138092abdedc56cf9234f40287771b1a4c31d2fc2ad348202cc138a69be696d0629a70eec474cb4028625149def3eefd817f1c924f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f8db73fb97c88147a0eed591a5d2bda

    SHA1

    65dd775d46324025d7e66bf428dfc9a6be7f073d

    SHA256

    eb8955a4224666e8fd3228a8db75d663cd9374d1587ba67e6a0e2f9b677fab7d

    SHA512

    02296a99ff05efd11f50e9085f1c48b7ac8e916508b3cecce492cc075ba90a4a6ef80208f6c1cd895f572b41cf992bac22dd34c352f637b070b6c25a0238375a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae88e8ac3cc4ca454b533ddd08d4295a

    SHA1

    625d6179c3ce788f56bafcaf4f13cefb93743d0a

    SHA256

    5948c97261515ff42530df1807bb0b8512961b9a446c6301d3dae7e3e646da5f

    SHA512

    a5e883546cf1fabf0db471be9969bba96ba234c5213260105b1ce45e50fbe7398825bfc550556b281b93962c8bbfab97a9780220879465ecef87bedff4e4f8d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa86a2bf8a2bec66ca84d65be1f4a2a1

    SHA1

    a5d8253d20a5243d2a2b95d761d359dc0c15639f

    SHA256

    4d557f644c135c547010dc41a9cf06375ecaf4133ce28c20490bbbd3435c2469

    SHA512

    18b973a097022e2d1f12dab85b523f91d20d6f5e970451f0125d9e96dd5668f537aee5095237e030ec3fd6e84bc894f46077b2f061bd2485bfc0a460cb661f6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0adf7854a20311c5caa30b8b1a59fc9

    SHA1

    0239cc537b46765b91eee53d4f4260f02dc7a685

    SHA256

    f6e2a49255d05b36de2d253d88a77e72d53b9a6ffbaafdf9771d19e99c4ff736

    SHA512

    682596c47a91c5cbb7b3c3ad0d2f43f4566a304667bade3d453f2a274cf4a01584bf23fdc4bc92fb5a5714058bc1e4e8ddce767d1d664b67ef2db646ac9adcbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    889dfe05c6d59a786b1682e7152def40

    SHA1

    763933c535555c891b803108142b1b2ab8e2cea2

    SHA256

    664356f0ee4617631e204045aea396762c699c7f6ce1e42a66019da6bda73484

    SHA512

    57faf090238ef0187c97564b64c82750e8dc6d9fc013edba8e46bc3c868dab0310f839c9e52bdec7347d79eedc8fbce407960d361f87e22d9fb834d84fc0d26d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    680228d78b6f6aeba5814d041e298a58

    SHA1

    3662ff19a93d005e8eab257781e741e3273d8b8f

    SHA256

    51577bbfabd04b8e58620c39f371845fd2f857932d236eb5ecee48e10231b554

    SHA512

    6255b8d2396f789b8c8da6c2689c5c2b4a97b4dbdd1f45ad925858785c9d5b8642c5376135715385a6eaf553fdadf2901acd6376016069342e799356835daf13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2228f744cfd205d480359fb1b382f0aa

    SHA1

    13f59cb40d3a6d3c8457b16424fcef8aa00666c3

    SHA256

    4155eb998e97ccc80f4aad2aac28d7516c3f66664c110866435c4c2e6a164f4e

    SHA512

    464837cee98c22e720f705ae432d8654543b399e04778ce6fc92494880ae2fefee5a4c0e46ff14ae15158f7b7e6a1c46b3d28de53d1797ac28f58c455f30848e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dad00b6c2de41ebe4bb5af390f545bb4

    SHA1

    a02d90939c89b08ab6d3520eea6e0faa384f040b

    SHA256

    de560de681e50a905abb59ac38c7f73ae677128d46482967908a21106a205302

    SHA512

    631a35b008c32d2874af518906b9e9bf02cd4762ee3fa828d0b7e19abd63d499ed1d6f9be217d7d0d530ae159a4e17fea97bb01f8274f6513b399be2397720e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1fa17cbb89c938a0809aaf8228e1f0c3

    SHA1

    1edea74c6904926a7a8fb5a8e8f79869bc5e696e

    SHA256

    cbbcfa6386ab9de4fdb7ceb469f810a38c4b1fc2a997a2c8d4218e702c046dc7

    SHA512

    b17c1432133e17f3a0fa724d730723703846d41128e04d8b0c67e18c907bb983268017cadc7dee4e0bbd1e3cec8fd88d70172bebaa56ad7db7aa544224f9eb15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60a849dc4eec45df144ab60fc7c69e0b

    SHA1

    f6e717188ce07333d3bb78fbaa92928465d584da

    SHA256

    0540cf4ef807e4cf548c36fc2043113369d75d4ac3893f3ba6a51a003251f203

    SHA512

    5756036fe2eb3d70e5fda199ba201b7fc0e9c28aeb5ec68bdac7c6f2445ede4d32f254729058e82af40154d9faf6eb33e661c64f167ae8bc504561d5426a1def

  • C:\Users\Admin\AppData\Local\Temp\Cab1A75.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab1B04.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1B18.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b