Analysis

  • max time kernel
    119s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03-06-2024 14:03

General

  • Target

    920d16df26ee14d2088a0774eaf6eed0_JaffaCakes118.html

  • Size

    13KB

  • MD5

    920d16df26ee14d2088a0774eaf6eed0

  • SHA1

    e482150d5dd00955bac672f5a17f32117cdba537

  • SHA256

    6fcb2df547ab60c3061b83e3a1b2671233c0a1a0c5f4b1b241dd82334dcc59fe

  • SHA512

    fbbba295b81400fb5419e229497f0f064173c0c94d9ac3c31bcf50ec8458ce4c6e0258ab2e00a5289b12e9945983b34fc26b30fe73257295e2b57693a2a65207

  • SSDEEP

    192:CyiYr1FkhODdjbXi6vzrwQFCVCf733y1w3EMy2VNwcdX8C8aW8/SzkYeg7:CyiCEA/RwQFAi7ny1w0My2kcX8cukm

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\920d16df26ee14d2088a0774eaf6eed0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2696
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2696 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e95e30d7beb9654253888f408bbfe4ed

    SHA1

    df9976f7be94046263c7df87626f42dfed017fc7

    SHA256

    5586a6fbed3f897bdf8e4052b2dfe706be34c91761930b66440bb848044c344e

    SHA512

    1528552c191ba15358ae84d9cf470ad050cf6b20813ca69fed2919ce0bf528e51896cd7ac0a0d6625b36057213c381232c291c1447335a6326179b69b6a8987f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f1d43ab014dafbb313ad4ce94522eb4

    SHA1

    a41baa35b0e54aa9f17fe2b9ef1df983b205a7de

    SHA256

    4cb50b87c45ca31c182e57f707d6fb64d7f8f8085726b9568bb0c53b249e718c

    SHA512

    28143543370889692a7daa66dc0527a60b32444d32291627df9ca97f63332b5419e112cb4b47bf4da9d11cfcf3f18a24a213dda28ca7997b2a9d9d2a776e606c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e37c2ebaf8228254e9843d3093f332d0

    SHA1

    b18ae9c408a2ba03cdcdd9ca9f6d7bc4a873e468

    SHA256

    2bfb8192cd243afa5099b6b83b01b22210da2511e11a5704acfb02171b99e8e8

    SHA512

    8e1f65f10ad30ad3b62019833e65421b334288559183876e6915fad805955ded02c7180ebae5e05a4cc56bb35a3485f947440f28aa89eb5a04682ef037bbf78e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b8d3b89e601995c9b1ea58474bd4583

    SHA1

    a8340d2839ca1906af46709d177eb4fe6c67bc54

    SHA256

    f665d3f327ea1cfbc526be86d275a5e89507b221a0795b94e66652f7c54e33cb

    SHA512

    87cc9c52304ef555fe4815e8d8fa38d84eb2566ce5790bf2634d09c1d71b1ad053cf101990aa97205467c114d15f1b0e73ce443cfbfc752d5b6245d0031f9ada

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9f67fbb535486d65b79bfdb86c06406

    SHA1

    3277395f2d36edece21137c57460daea4a6da5cf

    SHA256

    f1f3bbbc892cd9f5ed103681a9a19a087bacad62411ac13c15eea27b42059014

    SHA512

    e9a52608a8d21537c1d3476852c9b2dbd3851f1a7456097288eae8aae386eef04f50d2379ef015544caaa018c05a7d2a143311a4c97327aab4cb0f791349670c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9375bbf75ab847d1ca4cc6b2c721b8a5

    SHA1

    76000864361065c7e1b6d62dc2334bde0463bc5f

    SHA256

    15cffd8f10346e9716ac58c8f5d96b9f5247ec61a1d97dd3aeceadb402e46c3d

    SHA512

    b9965e5bc05eba85e955c78a1a8dc3a7a831b02c3256f080841e16c72e5bc4a14a539e4965a70ca131b0d762069868993ad26ea89cf4023bc6aed09b46600b7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b891fa4f7ace8485bdfd2e14abece80

    SHA1

    1f84aae9bdc32de0119a49f01361ed9642494645

    SHA256

    07ff7571fa5768e5787a133092900a9a4e30150c5754a1fa326601c6b95be2e0

    SHA512

    0ac8101345715da3230af8eead8712c9de29c7fe7274a384f6c1aab1206ff2a21b96093e494c24a259434c86e60e5fc3f1ea321c03fcd6d27f96dce69186e73c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97bcacedc3e0286b5764cab9434e54fe

    SHA1

    9a17c5e9b9e8cfdb861733e365a1aecea8fd8b51

    SHA256

    a6d4bcc9b99ed2d15085563f08cb0ec72457daffbe80363f06a5e8986c37520b

    SHA512

    f680e957a01165907b117b9340df625f7b148a9cb8c2a182f6967760d678ca07c06b9c9d21f7fb3b275f794f7871906a126ad2afc1b49667e2ebde885a059c25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4b708e1cf5a8509ebc7cd2a179047ab

    SHA1

    0eae72a3bbe5c3c78b08c60a88d993101200fbcf

    SHA256

    c051165728bfbd9d964c74942a881eeb24a7c57975f9c18033a633a632fcb543

    SHA512

    36639091a4cdc410cf95daa5e7032a36aa768a2eb1359553190a1b639922cdb0d85887515c293af2eb2806547f29b1246a3d2f78d96bcff00dad7494956777c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85431f665fd612afcc5e3b8fb18bfa8a

    SHA1

    ceba22fd52a40adcc7d87cfefca6bbe669a47f58

    SHA256

    d10a087c5a00d642800a468f5a1ac1c81570f1b2d1c7403241c287a86a80330c

    SHA512

    18dc0bf7d1d970a0ba5722416a12d2ad6c5c7b08914f15e74578b271b5c4a1bd56cb89edec659376fac94d292e71bf9ec9f9bad7a2ac18b382c3700dd5efab58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2c3e733b8fc5de368ad74078177b85c

    SHA1

    a4cd2f0a5a5757afb661db4995a3db4a9c47f10b

    SHA256

    e42d0b8b41aeb544d2a00b00727cf062510862136364458a3d898c2ff0376dfb

    SHA512

    0f894b1b1524f6cfe9e047b068af4fd0e7956f259bb934224a1e9e74fd8b232b24548d09da8f45158a565c3735fd7c30155959573825ea0374c3fd4075412261

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    089e4cfc88f88f8698c2a25dce725078

    SHA1

    dc5b16054ae42f0de673d34b79bb7b70d6d56fc3

    SHA256

    6966e64906d3e09bedd8f902a150fe319bfb37f256dd078446b452217b94dcc9

    SHA512

    5da146d460d01e0af3b3e7eb110d53f351aa1ed82e146ac5b8c3b68bbb60f63c1a3d1b8f63186ba89abe798a29af0dfd357035eebaa15b70cb867a18a95fc41b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f3b10d1ff08ed07c9f072c59ef207a4

    SHA1

    4986c72ac33b2fc2efc95b9c3961c1e477ab35a9

    SHA256

    698406eb2b045e7b6b05c8f745754fbbd158ad72bab8bbb101a39a3a5dbfa693

    SHA512

    434a5322a5910220fd0c6ca158a36ef308fd5e789d8b672ffc3f1ad6324d112f1556a91a51afc4fcbc6bb1f720ca56e4967694a37f56d78e28735f59319ba1da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ed2630bbaf27433b757720d9b3f87a7

    SHA1

    2f2cf98f9620fdd1fa2d8b41f4492a7749025053

    SHA256

    ba747afa323d82dca3053a4b3a494ebcc990fb761d56870fad1025410d0eb443

    SHA512

    45f20d26990862818b960e5be7c8ae00e2128aabb478ec587c6a65eac208e43deebaf0f983947ef5258234490d4be10eb8eb572945e4bd610f64696a8fbab700

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ef39fc093735ff757530af5dc3a1b0a

    SHA1

    5e8428c7e86d5a38bc4d1eeef859323f76475b37

    SHA256

    d759ede1d72182a59718cf489bf61bb8c0ad43e12a7176663c1a179f9bdca4a4

    SHA512

    9416b7988a59811e5033c584f35b004fad8d7e75185f0d93084ce8bbb5f58356f4a83ad839a8b1847109ff087219bdd4e0e1808e02c8f3cdb3da57d4c6336ea9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50f744228f5070b771a0b3a7f599c50c

    SHA1

    af7b12de38f82ded0f551814b48d76f1884f7dba

    SHA256

    8c7d8310ce602a5ea7d559ae3ca8337795c939f9afc007c142e18c35d1b3b8eb

    SHA512

    a44711843f61849a3fe89db99e1fbccfbc69396872e3aa03bdf2d8516455ae3553c74ee1467016afb54e6667623cdc1fef4e696edf202286a416cb4dde4c4cdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    122cb0d135e0464b24aee43d4cd6709a

    SHA1

    992f653860905f416cce2f65cfe4c759aa2d8542

    SHA256

    f60869f1302111d7229de9ce8e6f6b9a1d7f923a6c981d206ac13031ccf2728f

    SHA512

    defe05a6deea622de9c4d0103ddedc2d8fae5314b5ce64debbfec0f0802b14601af1487c54bd5d46cf9bc999260635e4cb810caa5514abff37a31184e47ff612

  • C:\Users\Admin\AppData\Local\Temp\Cab9E26.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9F36.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b