Analysis

  • max time kernel
    146s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 03:35

General

  • Target

    a3b1010b667923a06e1b3725aae76ff5_JaffaCakes118.html

  • Size

    17KB

  • MD5

    a3b1010b667923a06e1b3725aae76ff5

  • SHA1

    ca9e90283dae9124c9b388fa19cfc6ff18ffdcb7

  • SHA256

    9e5811510fd21ac9d3355da31f5eecb014b06b957b4d94c290ea690a46fdefe5

  • SHA512

    51c89571219e4b11215a81caf1547ebd4c5b270d926aca7053abcbdf6564188629993d13efc1cfc3b86ee9dfd2ddcc84adb3dcf74da6b9ba6c5d22401321f316

  • SSDEEP

    384:xAFTw5gcCm3tIBBiSlyNVfltzhrZMndfyEB:xAFTw5gcCKaHiSl+x7Mh

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a3b1010b667923a06e1b3725aae76ff5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1724
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1724 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2652

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55beb9934a70c33c959f2caae54647f6

    SHA1

    abb816497236ff4fbf3f52986d25b756f9e75d07

    SHA256

    7e34050257d17669c1fd82513c45b67fc304ffba3fde1dccfdccc3776a508118

    SHA512

    8b32fb3ac23c447e6c03a2b38fb7daab029d3cbb86507f1486aae2deda6c225243c0810264bd0af83f3c809b74d40297b1c64240b05a0e080234830f539dec3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    076d5b47a6082128277703744001a716

    SHA1

    b2ad5011f8b7526bdcac7c579397a027c39e413b

    SHA256

    5857de3d4398ee136de7592de1a2fcf4d4f870f63f37bf853ffe77e2533989e6

    SHA512

    6e4e9712b7f0c70400867cf0dc30c869315549df2448a739e41f7057a72845f073dd967b13c051ce092a016fffe70668ab3a45a13e73ddbcae4902abb047c3d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b5f2dbdfe677b060e8574bcda163504

    SHA1

    02d31843b048fed5ba6be6c8e88a9e6e53cc7719

    SHA256

    c8583290e48db5708d64b4c3a5d017401e18ebff88824eaaac17a5f5295716d3

    SHA512

    8f114a91fb0603da490f4867b63a4f13cfdad759c43e789c95c3f93b00db2afd8b76c7295b8dab9636e74bf3292497aa93956d3171e5686ffba892689695524b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b93df476b3c21be5aad9dc5c6ce2297

    SHA1

    ba4d71586a1e820f49f68d1e4df5949b8852e2fa

    SHA256

    53138b5cc91b4fd5561b3dbbdb6e7730279dd5aba30f5bfb71d7f42bc935bd16

    SHA512

    4fd9d92d0390e95661b6b983237c51188dbb17c7407c9a2459ef88d62e7a683db0e2ebcfd595b4bdfea922a7e7b26856e5d23fcea0444b08065518d3a7cddef6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84d61ff6e178d52a243a0e51e47682d3

    SHA1

    3b99e1f54806c82fceadb856705c9a3da217cda0

    SHA256

    ff114c3467502abee1c2fc99c11f6c3af314791e0945ebd1b7334a884934d445

    SHA512

    a02c366362ee340b57e5e59f4e96ab8c858358e5c8e52da1ae34810ea0056982772889b54cf5252adc169b6027a4abadb026456846eece7364b1e19fd2ad3b2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76e2b6338120ba0d616f6f4fc84a3a5e

    SHA1

    318fd9e4dba820fe601d12f2fd7272983667546b

    SHA256

    c0b31fe0b48edb8507b23cbae6e2bf9bbc684891befa7fa89d675acb57d5ed84

    SHA512

    091187358ea8cad029335282b3c67d236361ac94568ae5925ac79f5126aabcddd82a21452bbc6ff31359d0641b405ddfce4ccf0d920c6b0e338abff43563de99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ebc073df9ecf0f5ebfb3813f867ee2f

    SHA1

    a4f203e19af06ad16b8685c174de5badf3b67c99

    SHA256

    17d257105ae6ea18ef859083dce0c7e0f49f9684a43628f9b0aa78503e14070f

    SHA512

    6a209aadcbada3ded4647cc87f0657c8e5e7e11ccd9f1f2d17b2c49390cd80883b18c9d5410613327536dd42ba8344a4a52db54ef939eccce131a70135a83c4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83ab5d3321ee8c824d435de3bf137593

    SHA1

    3cde35ddb5ab2bd6b170661ce1cb75c409b2bd3c

    SHA256

    d96e737c7dc70ec04c88df76beffc8a257249296733d773fdd6947655645b182

    SHA512

    7c6bd96079defe3b07f9ab2df9f4b1823c2dcad5678ac9005d5f0abbc6137e7dba6b688401f4acf02fc4a1b5fe05656d8e0e021912b1591b7569dbf95bee1d76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f35df35a21f4e70fe769e75a83e8c4a8

    SHA1

    79e6dfa30315173fa3f688b241fdf76e073a65c2

    SHA256

    dee7afcc9166fdf048c735cef6b702c16c8d897b36c973c4eed247c082766c8b

    SHA512

    f6d71a6cb0c8bd9f50e6f2842c4e5f77b45b7ca2b3f731438599f16b0f723ad6d06a6768bc618d2fb27fd2d06482619ab7efe189343078269fc49fb48c112640

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ee41d77fe7030af996e77527e2e407b

    SHA1

    ab8d89df63e1c3f3161cda5f7dee625613548b15

    SHA256

    a9e63efb378b27185bd9738131394929a4035ed7028b8a49c985838d86f5d5e5

    SHA512

    89954e8b35793c89415c2dfc6482d790f667b51a73efda3d2ba0af749264aba5adf4f6be5020a9adcab6ce6e6b34063ef7f382ccd6d55d927908cfa876777e98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9207d523110bd3e4626f67a0ca1d707

    SHA1

    2f1f72dc0475dd72b9f8a59d9d307bedd46e8f63

    SHA256

    117ad90b645e74ee4a657ffef5b4b02ae23fe212132082e93e5f499f65fd8fb0

    SHA512

    2542df8c5ab4c57482b7dab1cdb5a2565bbf0570b6b8577ada206a098667b8413d5a62c93badbda4562a733a3e2e601cffefbc4cfb0bca48faabf15e65ef3d0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a0312fd388f37a2f46f6c294880f7d3

    SHA1

    c51ba5ae8b47b21a2f57afed59936a222bbf7780

    SHA256

    8c348198943b10e3888bd74d23bbf79da7a6d28423a6a1beb09526dc59082db6

    SHA512

    91cacdd8a623a044329dfce85659ec036f00b9d0203552afd914a3c76e305f0566cfbf433f768edf8418ab32f3ba144b085c6c9ba9405043c91f743ed591f4e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db3214eb2fd804a63df919ac6a6bee58

    SHA1

    64dafa99fb2de14831c4ed71cdc3b1349bd08b8b

    SHA256

    75dd6753405f2d41222b26a543f37b6bfd8117ce52628b69b8be2ab97ba888b0

    SHA512

    16e80a0b8650dfcc59b5a995395848d3bef7935acea1ece63996729078ff392733aee6784913df13204013b8898e9ece4d826caadd05b86f383ab796f87d0718

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f8f02d3f803db9c25d2c431bc0779b5

    SHA1

    a79984aaef5c6647ca1feecbdfc160180f6c9353

    SHA256

    8ada9434b2945176c4450d1036257f3031f9cbb7d70affe98d5b2af34e6c83f3

    SHA512

    0b9f8d3027d55d7d1deef284293eca50c6726562cf1adf9e73610c1a21992712996be851373c39f41331e98956bd447ceb3194bbbe06ef78a4e1e0b26688c074

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae7bb88a62cabca83220d5282011a381

    SHA1

    80015a3a3aafae2469bd7b62bf0696a8dd689c52

    SHA256

    692ef25d03351f2be9cc51d49fdca8579e0707e7a512c5de2f82b209a6a28d17

    SHA512

    8a4309162f0b2d90325af1320ac718df34cf2f6bf2443a4590b52f53bb67293c98563ad35ae8130917ff468143c0450b54eafd54b53882c4493da7b77e84bbf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9709dfbaba85b483f15ef6c2385a8c4

    SHA1

    59a029fe7b1ea09934b3c11489490c09df0e7bb1

    SHA256

    7e35db7d8ebe7041ed0c518bf3d637d1309f8eb2695f4ad0bbb0ac437634b33d

    SHA512

    de2ee14df9a714af8b810941f539330ce9987c9fa013c65b1c4c42235b1e1bc524bf195ffa54b5a7398103266733793bf4caff640d2d3f767956188b93465c1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    162eba768c60a878ffe250f374f74a14

    SHA1

    ad8788b789b07d7a0086eb3ea309bbe018f43fec

    SHA256

    6208ba498b8ce067af31bd85dc6c5a46f5889af8c3ff8a68e88cac23f1ba1e07

    SHA512

    d28f51657d51d9762a613ebbfa9b67537d47913d782b5e2613c0bcd093eade449937ad2683c0ae4038dd4338f0352478e4c3f933d6d80d911e0b7de37d08684b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61f0319c48d662631db630bde583ae39

    SHA1

    1c538e69bf38a8ca9bc2e6070667fd904e8e95dd

    SHA256

    543dcd97f471ae7e0579a9147cc45d0b7d692af69a8e3fee6a18d5bd24c83a22

    SHA512

    94d5207ef9a7e3da08645718826ec433447c36f8b53d5acc073f6ef636017e28de7cd82c01fe80647711c502cffb4668dbc988edbcd5087dccc6d7f2324b4616

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4821ba46170bc275481f69a24b4c9e5a

    SHA1

    43513439cc430eaabf10998933089f83fdada87f

    SHA256

    298403f39175ffbfc7360d470284ebd7257b5811d582e5b361152fbcb8391df1

    SHA512

    a2795f23c69af551af5c7c7b1b7e64d952a8277fc04ce24aeb7acd7c39747699878c202e56be93ea012a33f7e2562158d2e680143e8f396dcf2966f325d432f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05417794218ae5cc1115b212cd64ef88

    SHA1

    47382f29a536eaac1320a4c602b9fc1a93a23e51

    SHA256

    c5531165429a5988d3785931ebb148987c6e3574a5d3b6f09755aa16fec580e0

    SHA512

    a415f8d27b155a68b799b05251232e8f31b85b875beecc7d3f190549abe3dc9122750c4ba161351324c802fb22c0420a6d912203d427f6641af7fd31c4785022

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    881f0ce38d811e2c46b92a674c27e23f

    SHA1

    3be7db75513dc19c17d9e942621bd7815ead0090

    SHA256

    8ad1a94263815c34e6bfc484e77b5fe3ff1258bdfa3e871b7d82323532c344f2

    SHA512

    4501d78c6989681b63d7a44410849ca4130e1aecb674b7bda85cbaeea4eb7c56ea6ee5828540b4c1fe6803786f67f61d61c39fe2c39ca4e05e8f6427af6b5f57

  • C:\Users\Admin\AppData\Local\Temp\Cab673B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar67DC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b