Analysis

  • max time kernel
    135s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 13:46

General

  • Target

    98517a26f0cd1f3c4e2e70c35a8b2d70_JaffaCakes118.html

  • Size

    217KB

  • MD5

    98517a26f0cd1f3c4e2e70c35a8b2d70

  • SHA1

    79e9642ac2cf1abf155d8fc324d838ff868b7df3

  • SHA256

    a5aa80dcc04fc3835d38ef21165380cc85af1ce5b64d37f8ed7f15e8af55a37e

  • SHA512

    1bdfcfb92d3a46fae15fe79d3df9b8827ba75d5fa7383ccb511b5735c0d389ee65ea2f6c3c9eb2670262154b12f5bcbf714401d31234c24f3138b64d334920d1

  • SSDEEP

    3072:Sl4rhB9CyHxX7Be7iAvtLPbAwuBNKifXTJL:Slgz9VxLY7iAVLTBQJlL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\98517a26f0cd1f3c4e2e70c35a8b2d70_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1720
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1720 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2908

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          90197a0eabab471431d1faa49b930b61

          SHA1

          a64f512039f4a2a1aeae93bbe8884347b0770d4b

          SHA256

          a1e5b4a715b11412d56ac55969f4ef3bc5227fcf1335fa3821ec442af4005f62

          SHA512

          267a007b48326a5f9d15f3dd9740d1d8ba6ee4991ffb168532492f47f5c4aad07d6b2d50fb66ee04e0ac165114556e54ee71a435fa1d26c1c1144b671e963958

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1099055ea34662abc7c52c54d85616fc

          SHA1

          74b229da144bb2e1c501fb05631059d7b226c9ab

          SHA256

          115816ffecc44d697ac399c4a1e89be0682d1437fc5498201d2341f61ba27858

          SHA512

          be0259f67593795652a15b09507a5634f94a09b1714cce37d5883348e3eaed7814317feacdf1d9643fdb4bf14884d76c49cc8844fbf314fda7d7dc556250e4cb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8f72d8fc384434c2be5c7d4daf25a584

          SHA1

          14cb81d6140ad4fac1361dadcccf7ba7d364a06f

          SHA256

          0f4599892bcfa253ad184ffc420c03f88ab89d46bf5b9851c221a44a9c646ea0

          SHA512

          318f9ea7dfc4da08db307a171e5fd537a876db05831d0a74b4f13286e3a16d34306e1e9dd7d5cc41d76906656c5bac15a4800beb4658d1aa9ccb0d617908ee38

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3a5037963aa99f368b2034adef920f95

          SHA1

          e1bd727b31f3d1f5003fc09ebc764a1f1f762040

          SHA256

          7d06f37fb2119c80baebda3d97ef1ee2b9e46fd54d81515e10a83a68a4c02da1

          SHA512

          8aca29ed8d9fde8e79fefd5b18c6724883045a149ed6abb27a371ea3d3b492d2c95f88a7f842e45f62a0f7e407a1dd71a68aa93fa9b09b53499fab215e37e4b7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          61048677216fd111745a70119e9bd282

          SHA1

          8b54a7f8b505c677332fb1a74b694fc675e5476c

          SHA256

          f4c5914603c3e00d276378cbfa9045b3ade4e1196b3e2c39e5664b578feb240d

          SHA512

          a19daa73b1c53a5811027d8e359d1b06ace9bbd971aa89cdd9cae49e78ba96b1d8771c7c73e0cacca4e321b6ea89ab761a36d59747087c76a0dc3676ec86550d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d7fea6c31e41b3a49e272ae866b2701d

          SHA1

          d52e331a06bd6c38b56949eec452d5bee644300b

          SHA256

          682227e439177d5917f74f859f33fcce8d2bafc6cf321ec3c5279bd94f0c7eac

          SHA512

          e29c0d48aacd4e53add16a56c148fec4c0d3718853b39c3989ad97e27b45296973e6236e88ded51a19e4f5390f8254747733be821ed7604078c2fa35c9d32181

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dbcd3c112c62f82b044469032d7475f8

          SHA1

          358eb2efc666d3be1b5f3a76755d0e539ba06f9a

          SHA256

          b0a2a154a725bb198c9987444e7b9a6c5cdf1a6cf05b165f84cbd6f7fe12ad60

          SHA512

          591e904de97f54a5e3ef97773b11b7e9c1aed83c0967c719c6fd2ad62ac89c748ec05afb6936ead5c076ef180f12b4d35eb0bb5796662a552b9d20098c5373b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e3a472cdd125b32090a677e7837fa76f

          SHA1

          180af6b85ac372847c3784ccdd2a705cafb56aad

          SHA256

          a928c971b8374fd66543da6f6056d3051b37af3cd8d517e31d6077ceb5d1d389

          SHA512

          8582ef5d2435ad86e74814484c58a6a9cd3fbd45ef4cc8ba1450acfe2f3dfe1719a53576f256b99f7df00237a405e7f61096a11d19f1544744cd0ad27a58091b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8ea962315f923c5e4cb4d387dfdd909c

          SHA1

          e5f7f8db4a5a3a5d671fd80e904f4a870a1c7647

          SHA256

          8f7db81be3623f0613ee8fb394a4024703f6c917a1832c467ba4bd57664dd20c

          SHA512

          cd3157c0e9706f3d0565a8d632394309fe581157c0f23a715f341c0d881dc21d00f481b467c8e526704ab04771e6766df5fb848bd9f8c3d3283982ba58108662

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0facda919046e1ef59cd00bc5b35b049

          SHA1

          8c92c199a2111b17177b23326f3a6820f4ce119c

          SHA256

          fb32cb114c04dbaa78b40fa9eba430dab2e01b129c6887175fbf9b3919602a8f

          SHA512

          9fdee4366666d7ae43ee3db240dc4bc19cc412c132f8853bb64e6a481f4fc0c4307bacb461d5233106a2a6b79eb88599958710d50d31ce12236de2e5fe3dc318

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4bf08c48a7610bf73b78d3402d3ecd51

          SHA1

          41ed7067c3bee19c16f7604a4f1dd21a8fab4fce

          SHA256

          c9368c329fc7dc71d0bd2dc289f6f26203ec67a80042bdeb4b5739fd069e51d7

          SHA512

          a465a3b09b53755921bcc2279d1414b7596478a3804b6acdc70539c68629e71e0d33d443ce5523f60b40f788f4b528ffc25f5b6fd6870c789f8f6d88eb270132

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5f618ffafd2a67854a0b5d21bf13777f

          SHA1

          6bd824ab94ae58ee47a322308d8f078286c65932

          SHA256

          21c502cf9061df0d23a5cd325ed7d9af6831fba1c3919352039ab8b5459999b5

          SHA512

          a80068d3abed48e4d5db4e9434bcbc37c3a42a4507270b8003ef920767359f4765f453f09fdd7bcec85de2af99707df5aa2f2582200df7db82c04990582758c9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d73c2a5b2ea92a400b8d80c77ad5e88b

          SHA1

          b0fedb804db2369305806e74f2dd0197b12d7049

          SHA256

          1228423c1026237716ea3b1dfa63e9fc7599e0ed31a244252989eb298f20ed64

          SHA512

          0a4f633821abc2fa24e23d6441e85116aa644a24e73fc56762afb8d013258ab6573faa8003e3ddcf0feff91a520666b449eed662eda27f8bcf20c6d50e889f45

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          04cc2b305d18fbac654708d1a4e4a18c

          SHA1

          7f49fb632c299b33d4a05485062e4c9441b1dee7

          SHA256

          35f187a646b8671c25833a2a110b2ae1da873685b75827083cb2924a6be0ca3b

          SHA512

          c0ddcb2369d79778ff84049cd50f94b38d92d6975de1848a89e5882dba36aae0cfe4ebbb3a441b62bafcf67d9adc604b88f96f06146a53340b767a45bbfee793

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          42f513514e8d26c20f8b8ceb820c7c30

          SHA1

          837bcc8d3b308a0946ae1e03f2f34b076354f068

          SHA256

          6cfa12f2e774cde2a3fc2da83b3d3d4fab1de1e9e4493571c319d58e63fc103c

          SHA512

          9a7fa2a5a1015b38fd17b9604049e275a95dbb4231ef1d654897d5906a3c3c234240670d4fd0e7c8c5ab4c36da7db714919055a257a083d1071208abd25681b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a0c4a94b64ec6a5e32731c5ceccbfc78

          SHA1

          0f20deb8949f33debdc3472ea1edcdf5967d9b7e

          SHA256

          19966b5834aa0a6a7eba6c5881bf59c550b71235fbe07eaa23cdfd550376f17d

          SHA512

          5f4fa6356083a12714d060df0139d2ba75c88dbd60d3795ad7bf2e6178ef2a7dbac5384b92b7bf66aa3c053dd5f021dc0cde04093e3b985a15eacf3d757779d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e66b010f68457f52ff8b634e9656255d

          SHA1

          3b0878c13a9af7e7790c92380e9b971dce7b51fa

          SHA256

          32eeec2b7ceb0b1f8fcc9d5164f99d6f0cdf779df260456b14e69ce7c7b269f4

          SHA512

          99c25bd20b1d3d747ad5bf222cc74e66283288535c3edce83972fea5936422656e6f437fd82b99eeb24712e4c0fe98b96a7477aa27a8282990f1c66ff7574345

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          00058cd8517016c31acecad5094c1e81

          SHA1

          7dad530bdd32c99c6092acc6ff700bbf041e114b

          SHA256

          c0cfb0595550e82f09597d2c8fec218fe8bd4a99bbcdb0886d8d9ca01e4ce167

          SHA512

          f7cd1d0ac1a8125daa0a63963722edf9d07514e0f158cc57297ad19b37ef0c1c70d51409143d5a6d44b1a04ff13cedee4ab28a698d1041bbc4483e37a94fadfd

        • C:\Users\Admin\AppData\Local\Temp\Cab9667.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar97A8.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b