Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11-06-2024 17:36

General

  • Target

    9f0113e418ac8d08ff29204e762df10e_JaffaCakes118.html

  • Size

    53KB

  • MD5

    9f0113e418ac8d08ff29204e762df10e

  • SHA1

    8613654860c1c64d6b7b91972ba9254b799ad8c0

  • SHA256

    ac69ed1614fe896e5654849b7f6344c508634358bf8e04e392b6a03fdc50d886

  • SHA512

    74a8f9bf6d9b74b80b6032c0719c05c6a22ef5c7ab480d60a719e194815904727c6c25489ea56146e2d20f32336c4f5bbfd747f5ad64d6ebbad85f2162331606

  • SSDEEP

    1536:SmQFWcOvU0+yHjc2HfeaiDktVzlUxbDcdNmIDRFpqtL8rdtlL3Ckk:SpROjXPddg+5qtL8rdtlL3CD

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9f0113e418ac8d08ff29204e762df10e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2176

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fffb8234e89bc9e2e603cc5777736ae6

    SHA1

    bb85ce728157effa78f26620758fdcde673fdc5e

    SHA256

    b62c7065ddf127377ddbdaf311551a42f53ea6bbc635b8c35e9649ebaab900bd

    SHA512

    1ce58c4344ec5ef39f57546852f262d6aee285f12925546e5980493cf0e9c5514eed574df4a6169443f932ac30bb6dfe9ba454cb14a76b08c47109f33b8734db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af095e0ea854f385c54695f68ce9b903

    SHA1

    d12e716954ac8962ca1d698c4f2401bc5dccc182

    SHA256

    8bcc59ea9327705b43f58f1ec594bde432187b838199d2e76d9448c3f099f134

    SHA512

    47e45932e13d6dc7743a2c98b1911179cd6cb6dc1a9c6d0c334bb26d64c4e9609827da5c250f55fbdb1fb94b82dd86f4e5d5d9caea5447b90b0161520fa3cdba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a009cd66fcbad382264b0df204de38a1

    SHA1

    1abc6287b700b16545c92fb98896d26f4cc6a045

    SHA256

    d79f07d86d6e74bcc41b22f83a8c494196169aee609af27cee1543281b675d5e

    SHA512

    82148b5eeb346f26a8ebb2fb912f4a93453ce63b2edf7abc87a7afd5eb089f4019e2ca0d738d3f224c013465d1950284081a8a814e81e3774c6b4a863cb23b1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    711acb55456bf0c2942ae550e23270a1

    SHA1

    1fe79175ddc10a171b7734a7a51f65b4e71099ee

    SHA256

    dc5ef0b138b35672b2daed8bc9e99c992f988b8a93ffbbdf4900aa362a7db86a

    SHA512

    7230b0e38936c9bf4c9663bb1660b0653bf33bd9c3a947774cec261695ae31852533229c305b909c500391781cab37e8b487e81da314084b8470e63cb5619933

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0763da22e81bce7f36c1463a636e1b91

    SHA1

    dffadfe5655e0ae1cc4224a956585dc6c13be4ab

    SHA256

    b1c16c4790606c21f32ac77d6a55c87c8cc6e0f87aa481111323f7f961fb576d

    SHA512

    b31003064d9282f2546e84c7b47181a320216ce87466894ab58a1e9612b79b8a7231c0941f3aa2e1a75c393c057782a3f34a21d4338b0e5cdf99ba6a4b7cc3c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d280d5bf28473b94ae1b6264de817de

    SHA1

    af527f53b5f0f248a70d2fe165645be374056d1e

    SHA256

    b5165cc1f6923b38c9d275196ec0dd3405bcf1ed930384faac93a5e2813c71ab

    SHA512

    e69316141bff772ff8d91af497e361e8cf8e34f61fff2ab625d07588ea3d5b39ca1edfd3feac96cd7b7d5ee017c7cd477d6b303478e2cc05f2f54b68b9d8c084

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43bb2e7360b43b3210e450cf0a59ef52

    SHA1

    2a605f787e34e6276fbadc804142ad230fc8612e

    SHA256

    a900d31c30503ec097b25957ba196dc9a5d9ee2707664a4013486f127fe4c637

    SHA512

    213d23deb07e496b9b5c001c7b0117d226316909db289ff76883c6ec7bcf670d8e635be7e374f10443cce2420b0c36bae586a315a1701cb52b245617b9bfed52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d186e0dcaa76339a88e4a9aa56c1843f

    SHA1

    211c2ded8e2446031c84fb9e9c93d4c253878097

    SHA256

    6391fed21163b7b83f2ada90b138499326ffba69bb4a7840eaf9708933018c7a

    SHA512

    1d0c22b437210566d810f22c1976dbc130d258260441658967cd59214aa841e197e9fc0cd11bbc9844e363df799baa494bac5995c3c51da30e02929a2fdb9fed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0820e17d5cf4a18acb62c138508c2c42

    SHA1

    b41ad6edc8425e057ce7cf6a4c67dd056222baa5

    SHA256

    4497b74c1f3d1583ec47f8555c27ca3225a126de6a9f6ffaf13c4b6f2bc8d9fe

    SHA512

    27d67e72b65d854377849f6731697dfa52baf99fdb2e554e61182d219334ebe24cda09a23c7c1f0ebe778b654044d5d8159a285f00bd8cd4f716e012406ab19b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c76092af108ce70d06466f8a1ec5a42

    SHA1

    2010b595771a1303fb47ac0becee6712eccb93ad

    SHA256

    0d9b26ed230b9cfffb210a203213872fad0e67fcbc9bc90c52b0404d074cd205

    SHA512

    1a4ebb345a3ef02c19c41043f805262ab0d91322a212f27b8f50988d6df39432ad86dbf5b0e25ed9fe9ece02767267bc59b2f38b981dd3cb0c767587b353b080

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a00fef5084fe25ac1904e35a69814fe4

    SHA1

    8f64e91634e8746b05f1f4692b93074142457f07

    SHA256

    dffe33cf4eacdb432dc93a5515cebcaf84bc26935fec0f6ab1b55a78cb61dfa3

    SHA512

    2efaea1c068cf1189042f8661d38b0fb1c2317ac42376a1657f9fcd03cb6499dd63f5f1f4aeb0c9546dcda0d0e7330d61a7c40ce9c149cdcc46e94090d044255

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0db7241a087a4568e4664eca104d0d7c

    SHA1

    b6104b506f2b440bad8a91aa056f37fdf1adf62d

    SHA256

    9c53451c3be8fc0c7cba33d6afdbde3b23c2367ff5beaafe6eca6ad0126c1ef7

    SHA512

    594b310dd7fe2eb11c5110434eefd258b2df3fe84ff7a19954e9ff8fc51912e6a1adbd4cf0efd0ba4657e5a579d4ec3394c97754fd4b35cad0274c7130277f85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de2d4913b8b052afd103850d29390f0e

    SHA1

    fcc641b58e1ba96a67df76baf409ab87c94369ea

    SHA256

    40a2ac16a2a72ef0af62c44d988304bea13a769a3e44379326ac3ae1a304fce2

    SHA512

    667fad240d8f33f861f4c73ab9b8f7811086d97a3d775cf7440098a6b409cac151eeacb58e16abad001c2f4f95672e2af1dec9841b11ce72e0800b8cde8d8e45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5011bd3dc3cbcf3ab852133c4bfd6356

    SHA1

    4be57caa8a58f5346bef44948a208d200057fe2f

    SHA256

    5d0fec5af0530600fb79f55d635dc14b22b38e0e785d4859549d1c8e73b02605

    SHA512

    677013d61a7cf87aa621dbaabd5addac0c20641b7ee63732a2271942987d12f645bc1facdb55963e8c5a8e05eaed6f36fc6c8d0ee16795a9bbca43e3455a2a7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e59bd1f812deb16791e92590c3d754b1

    SHA1

    8599263b79ce1f501d3c13b847b7c731782cfa21

    SHA256

    9c6f567da98a23da22ccbe5db4520d938cc2c1563cd64de8ccf78bdfadef567b

    SHA512

    a89e941870a8e6097e0401e6e16ebb1989d7530ca93bd5aad9a5184af0dff1712629ab77fb6cd7a8dbf8dbfb0f334a599b8d0d4c843fa5e0d3a7417ccc83e742

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a98e3eb8f09bb5ae8f0a3bb715780de

    SHA1

    c2bd74695f37c76553196c2205e403e7257100fd

    SHA256

    9e55aafdc7cdd50e3b7f1f89a8b379054ac655d5cafb43d9529e3f4157445c28

    SHA512

    dd90889e4ad061a27b092a02712d955afdd26253fcf5aa1d4ea56c1fbcd60821afb151548f66c901a15d6602263a00e3562eedc1ef3941cc1b767d0be1f5f046

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad2065068452506d993d8e563bf2e24a

    SHA1

    2e5f1e26e5e852b6b8963ebacdb57bf46c8bf3d7

    SHA256

    b0a6f8f26b29b9d78da3d34b5fdb2977ff575bcef2ba84d9fe5a16fa5459c8db

    SHA512

    0a741a2b6b4d8e57463dcb05cd937c8183b5816fc9b9ec57ae8216a53fa6f34a2603ce69500eb3d1f7b15025265d5399b87ed87ebd33c34745e0217990e637d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3049b5f48eadf4ec98fe28a7011e8f54

    SHA1

    e7ee52856936cc0b74c5c9030cb15c54f807aa5a

    SHA256

    92cb785befbf124656754bc8a33a5ce55291fd29e57459b2f310d95c6515e5c7

    SHA512

    80fb5a2099d726ab458c5ffeac52825315a79c726ec18b8323037107d79d1b2423dead5b85156b03fd83054e41963a55300c5e700d3cce619b5ea15b95d818b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    060a9273734561e75cf696e1a01936ba

    SHA1

    bcd06a00e97988b533831634cae7c420fd4aab64

    SHA256

    1459adfaedb42def043053ba7211595e2da660241b1657540b449ec3e7f8ffe4

    SHA512

    d7de12433e3df58a464b32573ec5b723e7e72cb0cc817a421bb8bcd18851e199f035ad67eff31a2f9bc64227532e0c711e91adbc51ae6c22b5f438dcb465041d

  • C:\Users\Admin\AppData\Local\Temp\Cab4E8E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4FB0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b