Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    16/06/2024, 04:41

General

  • Target

    b1c384a34db1e169d866043b484a597f_JaffaCakes118.html

  • Size

    8KB

  • MD5

    b1c384a34db1e169d866043b484a597f

  • SHA1

    522af84914744029ab28c418a1d1fb4cc10076ef

  • SHA256

    00f9032e036c287e009813f946146bfd40fdd47195c4b8489b5c89d8bb871779

  • SHA512

    e1b96c5b6301a2f927aa7127869f13843c9627086fcb2cfdf1f0e2ad0e37784eb9aa0877f725a2908388d87ab6d0538fd012f79d155ec0b44d1caee5de2ec2ee

  • SSDEEP

    192:mX8BFw/YAVMLnOFdfbTYpU4bMKsALO8+qLAyKl04bkruP9rsSmn:mX8BFw/J+LnOFdfPYpUxQLOTqLAyKl0J

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b1c384a34db1e169d866043b484a597f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2372
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2372 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:868

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    952bfdf7606a3e0e09e3e3c0808addd8

    SHA1

    0968e4909bff58996932a2df43069ba105caa64e

    SHA256

    478b86456ef593be3f180dcee9f896101c5da384da269254cfae51a06467dbdb

    SHA512

    fe266a6c8b174ded2beabc00412fdb286d04d3b3530e22566773f55bc71030cecfa13eda4c19af621809ec2b06c30a6b39673d1042b95e18affd7e1a2236cb39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    529bcd809cf70ced6b126722724a3adc

    SHA1

    9c756225d4a8b0cabbd08675ae6e41fdc2f526a2

    SHA256

    3736944681da814dc13c47c865a8b0d7116aeac59c7897d510232fe531c7d569

    SHA512

    6f871d28316391b2130faed04fd6a3150614189e368725b8319e5a788dcb49ad816701ebeeb7924421f0f5f33a1fd471664f62c830ef7a5db3b80bea8fb027c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    deecb68244fd5708b7220e9b76c760aa

    SHA1

    e2b51a4af1af70aa96af3eb73ef1a534b2e344c9

    SHA256

    f1c5cc79e021e34a12d7a5ef32402931fc610b0e6e6947c7c31495135ac6e2f0

    SHA512

    155a5786e7a02272ace740d1d0d82c781ff5329e18e812def2aabf2783722c45420b0ac2399bc323f679baf24ec23273813b46a656cffbf687005086aa9d62ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a735e50b48cd1ff4452190a9f325a6e

    SHA1

    fc74fce7e87eebb36075966584e4618fd8f3921e

    SHA256

    50bf3ea4ea4712f3521ee5bd271530a0de2af88f1fb92b761dfe1b38838925d7

    SHA512

    6bd07d1428486fd71c4dfa8c042f4b30fbf8979616fd4f7f707db4fb26ecf821953b7184b4e813d4f4a99e600b7df3f33704c9d3308b30d36796b19aaface850

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e886899a0656c3f0545de6278e87c14

    SHA1

    0f70f7692feff43c700de7f69a5bd2c479cc7f20

    SHA256

    e69309af28930866a9aec11b7501096b5847e33e750d8480d4ec8e8801ba6feb

    SHA512

    d4949807916c51c1678d0fb040624e8a3913ee65f32ca6590bd2e45711bcf59ccbf375214af2215b2169d5e8c0df9541981c28101ab944dbfba7e49a9864541d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c1e585eb480f24a30a2a747037f04fb

    SHA1

    b31b82a8202b74d72354aaa379f503dbb95a5dba

    SHA256

    7553f3fef28122aef3834bc5864057ea173d5016fbeb9116b6663c776dde6eb6

    SHA512

    bd7c4425941d805331337ff6217f64a43fc638b43f801ba3b3bdbc57f48756f733ee5eb59b533eed357f255128e8b879cdd4f8d669a06e20458e125387c34fdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4fcaa36b2dca28d5ee58df317ee9fc5

    SHA1

    0ca2281959fb81d1a6fe8ac8aa81b2479524860d

    SHA256

    c26379701da156e0ec002b1ce329a0d8632ef8834ad0274ba5bdb742f5c0b108

    SHA512

    f7ff7dc9dd16aab02368e2847084bbd13d4e4510a301da96909f40944f43f5834a712a6677f4990bc3f86ed232ca2819a04c87b95bd45b4fad78786238140803

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    467b4244b96e726815b9d2f0069eac40

    SHA1

    bf68850f9183cb635ef294277cfe828d4c547e9f

    SHA256

    3797fcfecd45304078c62b2b4753ade17dffd2c0cd34c9fc055098e16bb2b48f

    SHA512

    fd0b4f89f6f86d13ed39c7c3e54475895af970953b76816529561b42661e673fa12e60b2bdcc9eac62fed116308e74b782e13815aba27b18e3c0e37adf991287

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    165f71a5b10495a3f1faadbdf1db4b6e

    SHA1

    f9d18c5f999a9cffddd1936d00f0220518fcbcdf

    SHA256

    0116ee8b8e1472d90ebcd61c9d2b6600c8850cc9039acec4f03339ac5ecd99bd

    SHA512

    4618ce39a44451b58fb4f5fbb81b6dc2ab5d1c92fb1778dd2df163efaecf23f6f69c15eaa6b4d61a98e040e1cd7307d864aa5db97b46db1818fcf67bb5016a04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5818fbc639ce32923976f384b5452ac5

    SHA1

    07c52e26bc3df3dac1fd076d109e5ba233b4bb5e

    SHA256

    b0fd9e66a0b2ddec2f61bfd72f1a18e067ccb6ed7c4ea76972660da895366455

    SHA512

    504087290103054f4fb9c9b22c44b3344b39dda8df8984639267b553b8d68e09321f7c778f347ac0369bf5071cba57d9426e8421e0289ffad140c9c0c31e9375

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1eb8192bb19bac147e123f9b974adf2d

    SHA1

    afd2f9af9937d3f6a8dfc4d8926ae4d24b458c62

    SHA256

    cc05a1ff7fa10f354a841e54ff4c20ba644aef14e09dc830c259d01a5a537ef2

    SHA512

    be3ff68bce409ff21384c4c73b8fa28972dcd9a31a4b8d0f74c43d51b6046376c0c294b972b84242807937d3caec5f9d2d8572449770b3ff6283d24b6b4207fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    682f614ae7c0e61f0314979a855f07e7

    SHA1

    5603dce65e040f9b2952e8e9513ca52a03007141

    SHA256

    40e8223d517784dca709a6ce0859ce25bdb48516670ec82faed3f80d1e05b0d4

    SHA512

    b134d0c41312ac40862e9bc7eff19b6dc9cb4d88e50ea74f15232f15b2ba730ed5f5189867ffbe62d0464a7a82f8963642b0a9edbe4c5393ba74ef089ff37b06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b98451aad8cd66e2ce9c3eb04a0e190a

    SHA1

    604c714370eb7f86a600ddaef357ed553a6d02db

    SHA256

    b010b3e5c8362921702f067ec81ea88d1ff921a38178012cf14c695f4262a1b7

    SHA512

    30c3caf88e2f5796bf4c0a886a5cb50633044e13b407e96eed8d22a1ef755806d4af4c0df55867b5cb4631c662b61bc3c4d351164485bc67321345b67ffa6c70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00fbf7a581177ecf75fa519792f73209

    SHA1

    c2ed464861adae3e3e62d9b1ab817db44458202b

    SHA256

    6be0fcb9d46ec84aa3165a446c22b6e92c6514a54e693a38686810b07c889a2d

    SHA512

    231b442781190cd1751e92084a9721f9a25ae909db8eb9191c750f35cf534f6d208415d1caac68577b5e7bb446dc3960c67db52d3c195b27dcfa43b219c3f82f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9492db43c0ccca08f3226099a535dab4

    SHA1

    b2e55a6f2d3585f411d759ca7f56ad12a354c7a0

    SHA256

    126cd5d941f5f3cd426ba89f9ecb320dce6f8bea30ee533c481b09773abb9b5d

    SHA512

    3a0414e21a93191f2f95ea1bcf46afb901401646b08647961c8c713a5788291e1e3c60bcf91ab362deb6a6624fe26bb6d083d78622e9cca9a35876190174c9ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cda6bab91db342f4e44553b6f700bc3

    SHA1

    60e317b58cc4ce7d3ef7ed2944f1cc1035655e40

    SHA256

    cff00115f6ef15d4ab61b113e28b79261e86d1c4058edb48ea8c0510fde65621

    SHA512

    46b5a0f19553f94a8d2952860e605c12385095c54d641f9a3faba46ea5d5adf9a581753eaf521592ed9e766217725b2bd35f2932cd273b008e903b2cd4a0a5ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b2b6db1bd963d5c91723af19dd70f4b

    SHA1

    725a2a266ff6aa4e81734e372c8a2fdc07eb1f29

    SHA256

    daa7251d7501c561f9a516b7615965e398c939687188e2af5f13c03a07008ae1

    SHA512

    866c3934833512e14708f4b761b51820c0d18e1ab1a955a09665451404b1963092eb4aa58fdb142220a7ea7f05c13b37d58e8539824d4f3577410a25dedc18a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0021f306bee02ca0e4f3e603e3fb58e

    SHA1

    8b68352eeb73699352b92973d4c7fe6b8a5cc44c

    SHA256

    cef96604f8c166c8396caa432976bd1d15132115012a982377d5118195694a43

    SHA512

    a1940e7feeb196cf3f24b31be9671b3a0781c431a496aa252d12f559328239bd7fd28213bfda82e59b1aa294c9b5f75d4a17e8e32f0b050853c6f0d0c51028de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d3946efcc4fb1f9017b9f395d566a9e8

    SHA1

    f7b1b9b6c3169e8f8b7b4fe2dfbeac1ea04922fa

    SHA256

    c131334428f7cf3f1937f472263dca10f9aa738371c7e320ea080583d6f304e9

    SHA512

    bff65f9be856ada0539f4716cc17a7bf0614a7b0eb3985c039cad36f820d9bd1e30a510fac032c50b45c3ef6d2db23ce1db3b0efb14485a975cdee6168cc9108

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\TarA089.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b