Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 16:26

General

  • Target

    aaab3c875788c6f1cfc938caeb6f893d_JaffaCakes118.html

  • Size

    155KB

  • MD5

    aaab3c875788c6f1cfc938caeb6f893d

  • SHA1

    692263987489403d4f4c65b02fbe9e30a84150c1

  • SHA256

    c12328f3d707e57fd93e842ffe747dd2f48e0f521200aad9f34e28a346124f1e

  • SHA512

    1f246d75dc9fb29eab8cba258d4f69353cedd79a6f8288db1802ddb32926a5dbf4709e376e15f03952d26385c8c852d22e7a87ec33982b145c510245b8b4d05b

  • SSDEEP

    1536:SiBlcmQb4JsWImOAmGkQyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09wee:Si33yfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\aaab3c875788c6f1cfc938caeb6f893d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2152
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2152 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2844

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    319d385582b8bbd7607c5098b516bfaa

    SHA1

    46dd56665c5c2f3baa363c37244b9f8483fce05d

    SHA256

    ace4da2139cb6b952ec9d3edfdb21932c896112367d3dbb96abffc5a8e11d696

    SHA512

    1481e20bcdd4760c999657c83a114733cb82032559273e84723ecfaee5e9249c1b96bc43aa0b598c3e329b7b14ecd6368e83b1efdcf22c3f7c207b1a4771277e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c243526c9ea1746bb71efad3579b942

    SHA1

    ebb82826db3dda05d10534dfc07a8edf0577fb87

    SHA256

    9da642c6e1b77ff9ecab081a8ff2a04ba07262d5a4a5eb7e3dd175280458d0a5

    SHA512

    dd09e979e62da7770c247b24d137c1650cd2865c798a1c1e77ab5b1f6f8e48db97dc8bf1a0710ec73cbfe3f8244b12cda99938b90b3679b2f394b5413e0f6872

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82093e30f2a843d3865f9d628429fc07

    SHA1

    35674b23e65189a298553c3a7e6db6944c90c986

    SHA256

    3dae49abe3fa09bf821e4e82b7f7f30a50b208ce6c4d15fd34d1720c750e4688

    SHA512

    4e12112e824bb4958d99909943dc1ae5698281b93c5775b5893a4882b284aa06e79aeb1e2886eb13d00cd174236d090272b9ad1ce8460f32e9e05d69bc3fe106

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    513c2f45846599f003830ed0e07e78e1

    SHA1

    00a95ed893bb5132a23ea6bb48895c881d42d3fe

    SHA256

    d36ff5a1eedf255ddfb73d9979581c659cec26d5d12295a81303fbfd5f88747b

    SHA512

    983b0479f844cdaf525e3ae536b123e9bc9c23060390b8b2163825943005f4a1fbf2f48e6214dff183f1ed132fd131e1f7aa0f2cd8a65e68da9a71dab1a77a5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04059c759173145e9ed32d97ac71598a

    SHA1

    241b4dbcf4278ad8c4d4a4bfdbd98493249adabf

    SHA256

    79ca896e2bebedf510be9a2237b871b0012c4e38320a4150daeb673548a844ee

    SHA512

    11e9f9dc13385d5a4b312b7f11d2f98930d0525fc2d51e424f6a9415865c765df9b08c3f2097f464dfe43c46e1eb2fb6a68c1b667c921d6ac099f6c42de58182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2da12abf40189f836eb2c8b84c0613f

    SHA1

    cec639abe1c6656bbb2466841099878774a749f7

    SHA256

    3d97fcb8f26a240fd7f0cc8cc590c83b8669ea1d61d0d60f130e2c4ba346d2e2

    SHA512

    e2af6404dcdb470ce1b1cb4464fc1c4a8ca5adab5ae04029bc4fe11e939f372981ca3709d52abfdca0f61d90c627b24df48d2a26602271244e6ac154432adad4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34eeab7303c0c7290af1b32d05dc2b8e

    SHA1

    a891dda02c8746635ab64d1f88f84013314716a1

    SHA256

    817e70b600aa7230515824266256a620b89be823e93028a4397d937054b1ab48

    SHA512

    b0c1c0f01197cbc7a1edee3c5b6d6d5c25ddcd56d18a2d5961f15433ec9ad4387ca98a8f4847068973c54b51280753d4556a408701d07170940fb75672eeb386

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d270a7bb5a630768a43579b342742fa7

    SHA1

    747b08a3ef5d4c30299a793192ff889c3a7a8e71

    SHA256

    d009cde6b7d58fdefebf3c88f7792588a1399c655a8e7dd990f1ffdcff8e1792

    SHA512

    5187668ce3ea41dbc2c513e994a9de142f5aa4b0ef2f351d8c32a95d400adc7350ea07e9f760b29f57364d2181d7a2850062b5f0d532a68344f2f9905f0c9f50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87b1f6bb99670892947133265edee4e7

    SHA1

    826c69940a9387a0b9654a11f6d517bc26b29aec

    SHA256

    b622914e727899c1eac76c98d26db8f39a73d0404ad72410d29b38cdce731e2b

    SHA512

    5138e05d5dec89849dc76afa09143b1c1881fc2184f22d4d05878a422a32aca8dccf06a2bad9380ca5c85572646e5147c6a8a9b05ed4226b38cb7c57baa2410b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea34ac911a2398bc52ba7ee4d2dacab1

    SHA1

    3a800f7fbdcf36f80958b5cd32eec06bcfcf54f2

    SHA256

    13540aaf071b95294a0a6dd860e78394cf92b8d3b2d35748beb8fdfd82a0e733

    SHA512

    a6a48fd38d63ccf360c717a2b6993baa45c3d3cfbcdb11106af9f69c7d4e40e804345e83363a6d16a2dd7c97116c2b2c4773ef68605da29b9a11365286818435

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5efea16837b2b4f56942284e938045df

    SHA1

    481de213287e44a16c877991b1802af1dc9585f3

    SHA256

    5f63dbcc77053b20ab913e0573427bbd19cbde0ceafbfb70cc56ce139ad40709

    SHA512

    0341ea2a8ac46611ec86b095887d755b742e7441324e2580c6be30d5544b7f416e06bb782e3963f5f3abd8489cd5f5d82b157b169adff9be1920674fc40b1fef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc5b281a34cb5db3adeef7959bc0b453

    SHA1

    3a65137f83ac6a8430777edaa026c592bf1cd8b2

    SHA256

    2ef482b11f6b374bc4f279f1f054639b7e527f734143bc5fac8e29db7a1d410f

    SHA512

    5e538230ad7081b1c70a48a6c38f8ddfb0814f91c375692f3ccb8d168c5995c761ef7ea7c2f0045f1344603344e30605b30c18630b3f6a30f6b1a5fede166025

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa787f5fbe0877a27dbfc71b569b1981

    SHA1

    247ad187d6bf8f6d6a10581db986c7f0086b3810

    SHA256

    07b585e7c39295f9a1e22253875a7450f01fe55ba270a8709b94b9007caf130e

    SHA512

    dedfa37aeb3b4c54cce8e5a1f8da7e460042d251556f1c78350d4c1f523feb32782bbe74b532455a0979c5feec711c0d48ddfcd9f39f20014f869f1efd4f28d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46e6d4fc84f3b6e9ab7573c473a17235

    SHA1

    35a8302e5c6aec3fc0613bcff5fb1c170fc526e8

    SHA256

    4236442b1ffd46515fccde4678fb1b0d8d3f5aed1ee3195606dd47fa5f8848ae

    SHA512

    f8899a651795c0c369483c428113d4b0fc484ebe3cd0385b9e73abd2e2793e6054492e99330a26b23ec3536d4012cc03d19b87847939ebda4c82d7ae32438694

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e5276ca81b030e56dd161c2d8ee808e

    SHA1

    82847e04537bac9311ba8808a7a870bd99ad3618

    SHA256

    e0777a883a3e82b700fe186f84b85738f2034a0ed2dd17f401685bcddd06ae1c

    SHA512

    49b606e7116cedb9bb34217a2ad616ee0b28b0935696f12dbce8c7b7c83237b961ab42e574382d3dc69c103cae5befeb26aadb5921206936b7cc2d16269eba35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f73ba273beefe50549c03d830e8369b

    SHA1

    599edb1c457ab2bcfffd8b4684a88c2f91383bf4

    SHA256

    ad3cb160850bf53a7248ecdd2be3d8cbf6eb0af7675f732df81a9b2d42905b98

    SHA512

    845c03d4682a05e56d657588b31bfdcce971e7844b2dbe5c8dd931e00fa22d2f207cf04df62addc844d3b1d3c936778d8ff2cc445e8748a22878f47db7806caf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98d5bc63f92a5d2b9bdfe0fff37f8916

    SHA1

    511658da12f150ae3b0e8774ff6bf6c739959528

    SHA256

    a3422986658604d7fea07c499133431d7214f416cfd69ce6f0c97b67f22df010

    SHA512

    1174e9103281b1c5ab11737e3624e2333c279ba559b1c0d8a2adcd0428da8020d892877bd055cb6e8202913378d26bf94fb04a5c7e91cb1787b79bca8f52177a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fe0f2138eac935fd326dcc1879e4482

    SHA1

    272055086fc8b27c37ce5a1238ae68ba7e12abed

    SHA256

    4d7472f656af745f3aea3faefe391155545e83fb9ddaa19d99a1a9dd4ed07131

    SHA512

    b9f69412555abe412338744a8e00f458927f4696d17e34c14dae462e09a609bd0b33fa2559cdd47ca5eaf8a92c6c93a9adff59db9cf5c9a96377fd91f08fbedc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ba5729d85d0414c9ab1b41ffbde3c03

    SHA1

    c7c3cee15490fc165fec753041b7791e55b14750

    SHA256

    9dd2bb3d505c6259d801c8c204bece8dc88e321cc3612e910c0b94ea0432fba2

    SHA512

    644c6d0ece9e9e94923b0e7b8e8e7f7cab98bd14e963cf927a5f2c345ee28048bc1fdc14d94f4273af6d462bf20399ba7bce2e156e752a046433e28b20b32682

  • C:\Users\Admin\AppData\Local\Temp\Cab699F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6A7C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b