Analysis

  • max time kernel
    141s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2024, 12:32

General

  • Target

    9e30a78b20bc008cab8ec1560cf2d7ee_JaffaCakes118.html

  • Size

    139KB

  • MD5

    9e30a78b20bc008cab8ec1560cf2d7ee

  • SHA1

    893a76cc4466f44fd4cdb3292e781dd560d64f2c

  • SHA256

    3c60bed280142a7694ba941e545efe18f517ef90de039b71a48ceb19481b7026

  • SHA512

    4f3a2f7c20dd88ee8e821eca9662a35406c36a6321dd7a239ecaba5739dcf730218e16256daa9d34da0d84dbc33ad1ff4aa3d26d9f78e75c03137fd117c5f135

  • SSDEEP

    1536:SINPGSlmzyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:SIwyfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9e30a78b20bc008cab8ec1560cf2d7ee_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2152
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2152 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    6d4f61e4ecd0133dd1a9587aaf4c019b

    SHA1

    58e584e280caba1d4c146ffe4068d70b0c977976

    SHA256

    53dc8e068b5154baee5228626789e2d52f87f7c65a3bcc3f5164bac96acf8621

    SHA512

    4126262b924ab253508603a8f7a790bcbb0b0552619ce5017b76930bc54133f709a6131d2eead7ee255ab9c0427aece8550d11b3b4194de0a99ed1b73e4a9374

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66737aa54bd6ca086c7330566416d06d

    SHA1

    b2a5149cca70a3a75f21a0bc22bea6d8819b264c

    SHA256

    169fe17b98b7fe0b018c043294d04317375a68324f7a3e81669eec47309d7ad5

    SHA512

    52cc57b210ff117744c1b148aaad6612880a8f8d4f0e635a36d2cce326ee6a8a322aec97533d07730a899cbd0aca51e9277c85983f45fb57b94bee84c9787eff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6eaec30b1f948e1d7461baf555fe3b14

    SHA1

    e0cd41942fff22a098e7b3d2221608c36fbfe1c7

    SHA256

    23dfee8699513a0b12b78eef84d5e5fa820016b617eaa64c1f57c549df202cec

    SHA512

    9bd20cb1ab70731a1e87e8a0eef22bc6699070210b94e1c0ad8de8ea4390396ff666e4ffb87d92c1fc93fff168e4a5d1b83947b434d062cffb7c65e73fe89c7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    530303f476ec586c9c1f4ada3e1ff552

    SHA1

    4b76af8f55371bcdd13a4e8021e6ee144d789c32

    SHA256

    8c56a0133d0ca9c5525ddb0e81973c24b88aff8cb29e353e3d98696bdc9a7adb

    SHA512

    2bab0773280e6b6d47e5eee9b321a8894075bbf1286388bb53e36983daf904e4e5b631fbf98171e2321a5f891a3ff70e21297adad9ad1a64b380a5b992606200

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0945fd41e24e665461fead2d653e6461

    SHA1

    045bc14b77fec06629386e2b0bc7194cbb88b213

    SHA256

    0d686b18d718ee30bd6587aefa287dbd1cdb0de2e04a15028bb66d75f134bc35

    SHA512

    a23b6759127852043b0dce2260047ed4bd45b6a0ec9717a8e3f17be7de66b4c00e753384ffccf300a65b7abaf65186538e72df4ccd5d0f79a3a74048705f0dfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    918303f227950a93c190f5c29dbb4198

    SHA1

    728ced1aecce5306b5f96d8f3b2a27558006dcf1

    SHA256

    ba702a8be2fcea5c1fff7dfeda3237af061e0eaacb43090638c3e768ba666c3a

    SHA512

    893762d8ccbfd318a39e07a212fa814989fbe2433de6c6ffc7a8373c0a42a8b70976c2702d2110d9216cac76b045c89daf1285126ea9bc5ee3d6f11140c2cbbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b05cd735f83236fd24d038ad4f71544

    SHA1

    e632d8d3bea2966da4bda31bd06e4faaa3566ecd

    SHA256

    677247866c3b152e61442677331116fd07601d390797e335aea1dda4e512eb90

    SHA512

    8fd5d9095b56e9904cf4cf31477ac81f2afb8af987e6c4412cdf8f880073405444d83124d93f7776230294066c606abb867b7339c1390f496985a5f1e01cc8d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15ad80f8d2ad8ed87a9bc65d81547275

    SHA1

    26ae66f8bf46b587956439342e5a21c2fd28a128

    SHA256

    23035a4415ff67cda61181efd1bc3d1da359a54d3c92b0182bdc3b01e96f5129

    SHA512

    e72f3f825b4a5eae01b43dea83f41263fc356c1df77cef22c5a2207aba39dab836ffcf195181eaa594b350f5f49640c6b7cfe15e96c47a76683d756fba924ec1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    541ac8f7d3e3a37c0f33b49f5ed5b3ef

    SHA1

    4db05fd1aa4f85046632e8be6d82cfda5abc69f3

    SHA256

    ca14b060563bd6dfc39a0efc05e0d4ba0767170d3b68c3b0a7ddad322a654861

    SHA512

    a4d7c8d1ec022c39e38f07aa4da709eaa64fff7dc63973d1c4133a8db6706e6f0f6b1a3ebf551aedc3939d3fb3e26e2730e5f92424762750378592cf4e6fe6a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93878a1699c4094d64a7c8d100cc2e11

    SHA1

    4e1b6890df66e8868b957a9673ea3e77db2a73fc

    SHA256

    c803525a63593a7ab0d3cf1a82165bdf473bea322a553f694cd869cd9fc8e171

    SHA512

    4cd2043f9f5eb6670377c22d0feae7484afcec3f549165db5f8e9405a84d833764daca93da58be8549ed9ab845f3cd16ec365713bf6b2426cf12d9937a216689

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3615b554f50f2c8c60631087b4831615

    SHA1

    9c3bdb8022d5f88ec2d97da25091ead4b1a05fc0

    SHA256

    25efb9dcec7152dbe5fbec3418a0746b2e4f0a2ea20a6ac99c445aae7b967b7c

    SHA512

    cb635951747ca09bf8ff0e6158cbd2a3fe8825e045e67d3847d4868f5728e3d47580bbc8facba5233e5250fd4c58052b130de31ca0a39e0914e76c1e6103904d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b97578a3b0466a64890bccb3ff0f89f4

    SHA1

    abf93f88f77c5adefba359540988fde6520c5c4c

    SHA256

    a535ab0452b0beac179180397c7fc6a1f49c0e31844828ab21ae1bc4f12c0e96

    SHA512

    0f2035ca7ed35398107c967ca0e31389de6dc744dfab7997bd752455851a01e3bfad17bc343916202e919d131ec5901ec175e1d36a9219616fc2d736ed144a98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d97075829ad0e3fa386a3079890eb232

    SHA1

    6bd81612c8e8a564089788ad073a00e7274cc01b

    SHA256

    bec2c77e24b4b27890d514923e5f788118463ec4283b3a8793d892fc364cca61

    SHA512

    c5b92aa5b2e514a610015a73bc510c3a2d64a47f87612b4e2820319659d7b39efd90f87e515dd0f8ac861c410ed929cd3612e700a80d6a356b6217e8bff16bf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da9bd329db2cde30de5246a11fcf0db7

    SHA1

    09bc71b4c393fe4d1cec3f6510e5e9564ae26708

    SHA256

    6df7c79d7272ea349bb0cb844e67b44faa33aee2379e2aefa803414ed596c204

    SHA512

    9c6e1968114969dab3fdade5d83306a37260678b34c2e260e320f288c988a5ee9cc97d41292aa9f034a7c1abe140d249fcd732e620f3895acc662c97796d3896

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16464f1b1516e1559e8ebe00f39f3010

    SHA1

    1bd47b2fd100a92321bfc2c01189deb5e474990d

    SHA256

    9b2e3299c73a1d5d0c6e3cf09a915f6978c57816db6772356825295363294ab0

    SHA512

    45316bfa432da833167c51a811a78707bb531821a2a1449434f8a033dc5d91ee53423a274b7110e074978d39891bcb8154da4a67e712c0736e4cb0edb3097dd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    756ca9dcf4d7623f48bcb5c640293ea5

    SHA1

    0207222e83f9c014eaf05075cee000c1bb4964a9

    SHA256

    cf3a3e30a18ea4391cf6506058bec4103b425467e4c7ab0b5cad4c867c2ccbd2

    SHA512

    f1ce42e5edce72df5bdddbb072e200b7aa1ea19b3d81f8b3611f46bb9902878e82089becee25299c45c585d9453df4af18cb89c0b782917e1e358d3c646f58a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b215717b15583046cad2b8460b821e5

    SHA1

    9f18e00e8516ee65a81ca187aea94d64bb41969b

    SHA256

    ce7e9214c3c59b4c400eef21455fa3db535042b8b49d3f7ea5558f8f78bd55bb

    SHA512

    8ef3fd34e2deb51255e4d855afb4c9df5be2aaace9fb772348afceb94d8002059caaa7f1b17e66ab6fd933247e17597679b0985b4c8a7205a85ecf47e396c597

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b28968757d012e09052478c5fe420d4f

    SHA1

    e0e77f433874657cfdfe21505ae747718a36dfd9

    SHA256

    3f476dc041852cf6e3e6d464b6ea462dda2b7c2a0a22f4f2ee9e6107a7b22978

    SHA512

    77bbe091aa83a43f76e2846f6e6ea80d1959e4dad7691c5f54a4501e826c0434ab68a33e3f1972c4945fcc0a0983d883d1070e3c801031f619c8ec0d786395fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    677cf2af289cc6a5d04f1d14a9fa232d

    SHA1

    54797fd65fafd94fd51175f405770573b75b3e89

    SHA256

    207f7b7425689ea02677f229c04a1e770dd17eabcc9da10ccd76131ae344ae0c

    SHA512

    522b1ac3222f4286f50bf04b7a63556c4597ebcda9bcd66807e84a1c5dc01cd6dd70f0e408543a0010366fcfc77b727a168ff9c3a76dbcd7542e3d3411541182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\TarF81.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b