Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 14:27

General

  • Target

    a604d5d9fbebebda02db75bb6b32a1b5_JaffaCakes118.html

  • Size

    461KB

  • MD5

    a604d5d9fbebebda02db75bb6b32a1b5

  • SHA1

    47015baf629cfbd5d90911474e04c258d8396c70

  • SHA256

    b627ff11b4245b6082bde9faa94319483eec6414af241ddfcfc6d4f95d353056

  • SHA512

    736e0abb51abe1763375679da5da52d386e600a4e7c40548dc76d616f7b5c303609049c798f026c1ff8b3edb798a1ce768556d2b828527a60e759085113226f1

  • SSDEEP

    6144:SWsMYod+X3oI+YBsMYod+X3oI+YjsMYod+X3oI+YLsMYod+X3oI+YQ:v5d+X3r5d+X3l5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a604d5d9fbebebda02db75bb6b32a1b5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1644

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d3ebd103fdb874bc23536df6622099fb

          SHA1

          f0c70c88cd9a690678cbfa6f6e792cb61527b764

          SHA256

          94388e19395727caa52b59d1fea45505dcc359c0f6cf6d4624d5cf817e7ec659

          SHA512

          fd359ed79c1147eb778a1d2cb95d56bc2ed0ef6cab999ea1f4a41ff13439bb823f47c3572b396486cc631961bfac4a8c070f300fb39547cf37c2bf41babf1dab

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          460f523c2c9dbbdc34c88377ff05c93d

          SHA1

          f42996cd6646da33b176fba9f1bf6eb8394a6f53

          SHA256

          7b20f8a0cea4666b97cfdf5f1fd26dfac6119dbb9af63c13af16e8e04b00c88e

          SHA512

          ba79a1e56be1ab8537ced1e2cea87511ffdd7bc59e115591c2243effcb6f7c2dcdecf3ea36e0e46342a6dcc4dce2c7de1242a819eb677fd7e226388fcf4fc117

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          58093aa7c4f8210e7e1ba2d7a3698450

          SHA1

          f6418c5b277423f03e3f6e7592ef326592d5656c

          SHA256

          3adbf248d42b2507dbff5fa9a430b43cc4b019b533c8885c46962472ecd9be8b

          SHA512

          d914f5f7643c9a76b0b55deb95ed80615c4bfb69b131a26e7537dc0aee13c506d99d8a3b3bb09918c71361d9d60c811b059b15d0b6ea9a3cf3eedc1f9938ef93

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5712eaef8a46185374bbe4aedce5b428

          SHA1

          e56a4f54b4fad025c04d1c025851437364e5b98d

          SHA256

          18f2fd91aad3becf4f7ce89d71ad6e4b4eeff8130466184f8687b58b27cbf065

          SHA512

          b110c7e685fd7b5e832214aeddbfbef7f11d39973a11c9514656ab5b062e9873aad70128376a2966eaf7d63372e1c8e80331d88e864c476875f3703fce027d66

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f4e46488addf55888d474ad3390f970f

          SHA1

          aa7781964583ca29a5452a2149b9711dcee66c0c

          SHA256

          0564b4183b0ca126209de7a8195bd8a8b25408869829e2152f49422a6382d87d

          SHA512

          b9b32af0c55695a810045220cec1011c262065a72a8b57ff4da8179125fd5ecc40bcf0d9a3ef2b37a8f4349f535fcbcc9cbea870e908c66a614ad6411f82af5f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          53cdc5f131fdce3044c2821658513c1e

          SHA1

          7ee9fd1def71b125c9330464ec9f2c7f3c39d490

          SHA256

          cb1eb7c43efb95d0110418d6ead2f2ee2ea986bc3664429b8dd53247249cfe60

          SHA512

          4727bc6992e3ead0ccbf0dd8141fcf15378dbe14ab02533d63110b9b27ef111be7ed30fff416b11ef88ec06990d24cda31f5e6b1a677a20a32bb54461c6c1d31

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b20f91fd6cf61f607a0cafc7a10164bb

          SHA1

          0d088766b5aba0c76e8b48c07aaebee33a9362d9

          SHA256

          5f13293738c6a5415595460ce95608271aa4d2a492d99608f6ee861335ebbf06

          SHA512

          1a5a8a2dbfa99b5be7f0556443892751f311a7a6552b9d284ad347f59b31a8520549a54ca6f4b7b667786930d2929660284616c24cc44babb729e4eab7747314

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          21b2d77eb6a4fcfdb8f05b0c079e9f7a

          SHA1

          7da7b66cd46ee0dda2bf91f653b69a74f011b769

          SHA256

          14542b48a40130dae558b6d6a188716859ad56da953cf4ebf4201e2d88c36d0a

          SHA512

          f9469ca8e1af6b9a864d62adfd02e626f535131ac98a7c74a3fd608bb1d9882414817bd468455aa7cc729ae191b5da1553ad6d6d90ddfe76111a3dbfec8ad49d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8c48de4e3cb567e74e66dddea465c952

          SHA1

          dceff21cb84db92d7c8f94e52b289037bafc0801

          SHA256

          4afaf7da15380bc1159a95f67cd6ad4e90f8fa46c95f0fda511142f1660e5611

          SHA512

          501a4849b18d60a9f6c4ea033b3c2de137fc8213e2188fae1f978d7f9f9ed7eb9afad42a12d265eb89102a135d8017e701b792fdd88b84d7ca4ecde359618b90

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2332d0847420819d3395e6b36e823e56

          SHA1

          9db054201271884c9706062ca6a2d779f41638b2

          SHA256

          9e2acb70fc71e5bb2e69cab9afaf93b4e38dfc9b8042b8c964a93242bf18b084

          SHA512

          14abcc909adac08eff7891d71d874a09c70c4ae99b8967d2bf0762a399c5063514106b93a374daf15d672facfe586f17c9658db6a504a6b00ebbdf2372368fa9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0ef2e29267770fa596f57e3c313ba69a

          SHA1

          6e329c5b258782c9ca9cad72f3bcc6f1b76d1e62

          SHA256

          0ab8b53021eea07d4cade496cfe07999ac13ae819d75016803ac7728aae27b80

          SHA512

          4263c2f86a5c61e9d38fc705d4e5d63bef1a5a82fa250d50cac0e0c78aef59934d454f3636130d65f096eb9ce92fc0b1828a2e38535c61cc0363bd13efd2cd7d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          123cde2e939fa5c8f4a4fb24961fd138

          SHA1

          fa598d1abcdff0cfd17d5c03abac5b349d650624

          SHA256

          4e4807f79de48b51cc5ed00f11f66cc3cbd9cec588646969c7b894b78700c36f

          SHA512

          6a1270059c461d96206d68299c93fa4bf2e0a0615617e86467de0465e8754e1c488b44023ad44744d60d6eecbe9bd2f9d0eb591be25dddc6e97b910ee3864778

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a07509d07b79791b97308429d39b96be

          SHA1

          0831391b6d246c497f7a56cbd3d0371b6141574b

          SHA256

          26579f0fb1b0db479e361b57754be254cef86098c3967997091c690982d44ac4

          SHA512

          4ec2338d7a4239abec1aa05cb8306db4e2c58b0013a9635ae25ad471e6287e1f4f569611ebb0c1ea8b2df8d77aa152644dbf2d5f105dc2a52178786eedc1319b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b6fc515faf2326e57bfbc792e3d65555

          SHA1

          1e995807f73cf4bc3919d78257c922fa6c1a4ae3

          SHA256

          95358d995534bc5723993ec7f6096a2d52a8970593625b5ead927fef44a25104

          SHA512

          208d6d975cb6c4840e572b0f6979461a896da5cb7215af555bb4279eb536d6a8bd4fbba85ed1291dab3e5c3051abc826d688a68cc24e5fc1ad210657ab9ef287

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6041df9e5466b64d00b3cee09d97499b

          SHA1

          4be22a3aada87171a04cc5e761b257bdbf068712

          SHA256

          9048b6f20c3f81ed005be17090d29abdeae6bf3494c2e206b5a74ee7964ff75b

          SHA512

          63555564e89f270ffc30835d5b4aef0e97f7b57b422612b5f76fb6459035e95d601391e340dc411b6877348c039b590167c389568f72ffacb7cee598f8e1bb43

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cef7ef72ccf82923b827b417b4aa2be7

          SHA1

          3e66f965fbdec57512e0394d3ec56c3988730760

          SHA256

          4597bcde328163898d47eed60a4f00276d93077eb6064cf84375f362409e263c

          SHA512

          bdacbe825c537fbce0783bbfb2bbc878466781ecba61ccf37186a6292062b5b40fde3bf4ba2b07a5556453abaabfc42f5cfb6c866ba629049a7978d233da58d2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f7c865dfe8c174285ffa8664ec689576

          SHA1

          cde33310c15b55f638bbc8f8adf18f0637992543

          SHA256

          6a259b74e3f5c55b37979e00a746d22a9b534901995d17cfff9ceffea323fa15

          SHA512

          24c78b5c4e39e7835cec28b932353a3456a01272b4d3207ff5d468c645a0417cb8de4bd384ac3d8c5cb38e89eabb0718a3c3c07b73071ded3567ef3b33183714

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          711b4aaf695fad597e6b23fdcf8fc398

          SHA1

          f88cd0b60d287f0c25573399cc1063f51c54f8cf

          SHA256

          99af246b430433c0926daeddd9981049b474bc5648434ec4a8f6e2e948e4b2e1

          SHA512

          9570b7d8f1868aebe9c05b8a77945f0514dcd9b056a092e9e6db9b50c6695193edc7dc4c31417fd5626fa4e8c4e1115dfa1afbe647d671e84fc983406d77f0aa

        • C:\Users\Admin\AppData\Local\Temp\Cab5219.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar52B8.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b