Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 03:40

General

  • Target

    a7e297ed018c7acf6b7db89e912c20ac_JaffaCakes118.html

  • Size

    460KB

  • MD5

    a7e297ed018c7acf6b7db89e912c20ac

  • SHA1

    ca7ccb3d2b1ff86efb7370c22d754209a92e41a4

  • SHA256

    193a332ecd418fb5e56b6ceb857c0002dfc5cf06d98e6f05285b9806a6bcadab

  • SHA512

    1f58dd2e05d19ac5f7bed2f8bf2629b2800dbfc6eab125ae5e67e97228c6fa7abbdb7c00dfd2b8b099b4b05641ca18a67c8fcbe1ae5858b35c5017395baef303

  • SSDEEP

    6144:S7sMYod+X3oI+YxQIsMYod+X3oI+YYsMYod+X3oI+YLsMYod+X3oI+YQ:Q5d+X3H5d+X3Y5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a7e297ed018c7acf6b7db89e912c20ac_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2868 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2060

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ff7c01281bb3e9ec9ceb3dd67bb167a2

          SHA1

          9b2c27738290eadf812f522f183776fb2b99d0ea

          SHA256

          1c48b1b65a31062eeafbdb3aefbdab979bef0033d5cbd8f837ae1ba6760d1c1f

          SHA512

          62e86ab68b0731f867fd46a1b18c8b19b3ca657e9595efd2704857dd14f4f1094d691ba61e45bba0d151ae9eff1aab38429084833663b7ca738bdf29090b79e6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d67412659ca598c8b83718a8b0589bd8

          SHA1

          cdfe3405824a92a04188a96c411a4ec9cf9d865f

          SHA256

          a4afa3472585547f7c8b9169532da04266092da6a411cc8689478be43252be5d

          SHA512

          c362042050975890570478bb4ce34f4c2b12ca575de50ca9ed0126e7038053130e9b26abf29467627c502867edc8c23e375ad516aceb39d3dbd4cb19ef9aa4fd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b063765baeff0616b01b3e91127bb838

          SHA1

          659a1629700d0519cdec7b56451fc1cdc4da9cfc

          SHA256

          decc20831c56e1942015e789ac07798ec9a5c9a31d893a51635efef95f5ec97b

          SHA512

          47b7d88204424531f071ac3d19ead3f72e6cc0d00e87eb46297eff5e7bd487986920040752961cb728b93fe083c612188e639d8fbe59cf599e2ee5aef6bff1d9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1c73d325737789d8c320b051cfdbe625

          SHA1

          7661f98d781ee35d3d0b9b183a756aaf5c5f8633

          SHA256

          0d3b5ad2f7e044c25832328419e2a8f74ff8f2833827dfdb2877288f6ec11c2c

          SHA512

          e81b4f6555e01dae6bb53515d724e39fa03706257871358afd460b65bc416187b9d6dce0b406717c12c56a63ad552e7a863db767b6f6b78138a1e37c381fc3f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f35be5983ced030e2e970bdda49fac11

          SHA1

          0ee5784d1e4880b5a961ed8408f2a449868deef2

          SHA256

          e9e3f7aadedb3c8c251ea0245e907d1cc6cdb1ffa4e9f9a525fc90ed1ab3b3da

          SHA512

          82790fc832df68722aa12ed3750a500d4e60d8bbfe1dd79be886be83b4464d255fdbd2b5680a5915819a07c213d55adcb29bf6ed1a831207f8e26814882692ee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8e346eb8850dd70c744ac7eef83ca8cf

          SHA1

          5639acfc5a6e6496bdc407bdc5783d2459cbc601

          SHA256

          36fe5fd5068c9bc587a0301f81d045129312c5129c113398938d6f45d0501ea1

          SHA512

          435cc64f75732026e9e29ae1a8a1018fbc76c2cac6c6bba779690fc4fb3eca2ce0da734fdb36d6a2a09d32f1e14e5393df76d376c646e471386e2ba5807c1698

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          22a9574ee891f62a6d7a8baf0e417a21

          SHA1

          049f162678e10a85e9e776c2f5aad6f33f29c10b

          SHA256

          449104b03fede8679a1d19cf006930a4b71a332b16b9f4138e07ae8ee8f45648

          SHA512

          2645bc8c8338e5c663fe33cd96c6a7853d6cb2babdb43b3159e5d963f702acf8157dd718fba681ee7df5cf6ce2ff03bc3963a1a549c3a90f1c9353086bae08db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          09e470b2e48d72c4ba29be4ac720825e

          SHA1

          e41834da229cef23a572ed460f318953ccf8ab04

          SHA256

          80c1b55a70d59ffaac91cc379b6497e54646e35149767a410537ad2109bdf613

          SHA512

          fbeec4193861e8439d94b5c77e660569b9dfa259278ab6942df2191852195cd3b494479f03ba6d8fadb56c8724c10a948fb61f8c6a7e2cf9c3d82375872e998d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a99e4982d593391a9606dcf1d6c74845

          SHA1

          ac574b283f243872fe2b6798c85bb26f5e133871

          SHA256

          d315629d2d47385ad952b0e1d48d0dc530949c85ff9084277a73b54c39b3cb7d

          SHA512

          b4b4f9510a1fc46d2dbf4addac89cb83b68bbbe6e9d409242fe598abed514922595f4c69892a5faecff79061c1519c18f4b73f811bae947e1f67dab383f0fa3d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fdc777984dd90adcf10a71d961eb2881

          SHA1

          f5587a705c81bf8a6668a5b256437624c5d37daf

          SHA256

          fdd0260454efbc8251db531b230f99bee192c1ac930d2966fcc8c95f18dc26b4

          SHA512

          4748f85d9fc1573a7c650967aaf0148fc6ae44c8ed4c243e3530aa091b19135a95d644ed579f8e9e70933e268922a351b194ff816d70a5d93509c00461f1018d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d177b74c0b72cb7af0fdf6ea522f48f7

          SHA1

          5f937db9e2f5435b9777f25e383682f9e813b4ba

          SHA256

          b90495b70085553b0f43acac457a8acb51698da5ce7b06575d2824a79b84c9fb

          SHA512

          a2cb8cbf457fbe1df11119df19176f47fb935a59c349c969f631113cdfc07561f467348d5cbc74be96f0f2f587948bf4971487131f350a30363825a4744e05b9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5d8ca52e7581a877b02254093c80776e

          SHA1

          dc62e9351484996b34f0461e813b008085d3f093

          SHA256

          6c658b3bfff9601fa60c22bdadf6cbee950d88215a3e2a67b89f685aacde8eb1

          SHA512

          20f7c6420c90473936ac6c51207b8ffa98261e5d231a4aec9d1fa79f119b3658baaa35ea5f1ab58b755c6a3e3855cff0650edc4d1ee633d3f8482e7a7fa38f4d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5362507a49f89abbcd3a7f952be3d30e

          SHA1

          49e87be23f94d77388d2a26d81a03bff37b96147

          SHA256

          b75dd55a176d2ca97b3dd2c10e8c0e31550fc45806918306d54c1ba99179b7fb

          SHA512

          8a4f5f1cbbbf0943b60c91ccef3f26a2c65ac8c9ab67f14dd6cdd8d557ea6055c72d9142e82a7c264dc43301764e1c6419dcb40ccff5cb638fd1f56d59cd7587

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ccb66df31b3927ea501057267bd9d6fd

          SHA1

          893fbda5f39993a7b1cc06b322e577e98274dbf9

          SHA256

          633a826b8a205ca3d2c2db082d5793712ffa4f382e1e8e794be9f6e603e0fb26

          SHA512

          ae513d546675d937e0c1579b9a6b93470c447d1fdf0dccb8dff1569220d0de6ce81ea1e3f0bad0ca833564427bbb47edcb376a79eccf2e10b65e50d3a964ad48

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a3445efca470b9a934a7f472e9e6fbb0

          SHA1

          dfa7d374865ef33eb74c320c949ca197b90cefb5

          SHA256

          8b1566eacce9a58c4b660862f3f5f93320df17a6980eea60aac0c28881c90dd6

          SHA512

          23c845b29ddb9e660892995578fa6984dcd160dfc71015ae1472f2eaedc7ddfe89d623a5be70b8bebee96dcf0c6639a200653d32bbac3c71d06cd8d33a03926d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          99a0dd0ace4822bdb59febf65258e0b7

          SHA1

          f00d3578ca02a396bd6ea07070061d516015a768

          SHA256

          d19e95cc0d11433ead3bc5f912a04f1c1460c9e720b91c155da7c7a916163d6a

          SHA512

          4f09529a2ff15212acedfa366c35f116e1eb911205145f5fd0dbd9660a4adee331046451f927223341f78dc69f2fdee65c54e5836ad58661e1dcf308300a8f5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e63205f2155443b5b54325e4c302a584

          SHA1

          951c1ee6998484d8f96f296159c95debf81bd19c

          SHA256

          b94a1d921eadb8dd40ed38c25dfec5c97fd794e27c76587e7cefceca76060289

          SHA512

          9a0256e5363c36710548b756568fb28f27496f77ea4346f4e0a200bbb479497c52d0160ce3f25386f3227d41384ec4861ad841fdad40e30dde6b32b26140cb06

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d3168a270440a2a6b4aa63dff8e5df87

          SHA1

          3cef02c204c48140340ed5b09fca660118e2185b

          SHA256

          83ad097b2871205048fcfc323ffbbc8f28e025748712d3b645d3336ec1b8dbb5

          SHA512

          b729d4691394e87142983baf95f1a7990cd1b1a1fcd9043f73e25d6c95ff6634d2dec412ef7eca64d2775e4d6964bd928ace45b66ca6126e15a765977d71da01

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4ae334bdd45f092d4798a0a200810f48

          SHA1

          94a0fcf39ce40876477cc9d8f5bf1cbf2f4e0006

          SHA256

          e3ad9cab760cc2e0e4d5603748339ab9906cf1cf723fd122789969e4788fe3a1

          SHA512

          b6496896471c84425b9c08adc3b40af9d4a51601a644b04c9ff8c3f2a324473283a5a3ad4e4d841c2a8791568a9f10db4d44bd31d835299073c46916c8f0cf35

        • C:\Users\Admin\AppData\Local\Temp\Cab4878.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar4957.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b