Analysis

  • max time kernel
    118s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    24-06-2024 07:16

General

  • Target

    072301554fc5a462653aff34d7cfbb3e_JaffaCakes118.html

  • Size

    53KB

  • MD5

    072301554fc5a462653aff34d7cfbb3e

  • SHA1

    0e46ca027be7e39f0d7d9d3b529e3729cb982fbe

  • SHA256

    580c2ab0e574657924bee7af90fdb0c6bcf0afd55b96729cb676ddc2cdc257a4

  • SHA512

    5ba8cbe72edf349be42996fccbfba8fe088a0b360a011d0b72acee99dc6166dee062fa52b6dddf694986602a7351ebf75a0f80f197396f63eaa323bef78019ad

  • SSDEEP

    1536:CkgUiIakTqGivi+PyUgrunlY163Nj+q5VyvR0w2AzTICbbfo+/t9M/dNwIUEDmDK:CkgUiIakTqGivi+PyUgrunlY163Nj+qT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\072301554fc5a462653aff34d7cfbb3e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2176
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2176 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7b4c0aef1e430a47141007deb9b602e

    SHA1

    f3a1d34c2aae5537c50aec276d3b08226a3d6c0e

    SHA256

    2c2d9d9f6b8b1f0012d8b79d643f83f3f06271babffba2a55b16026ff4e17eb1

    SHA512

    ca812ceb234ea4ece05a195c52c9be83b1109fddcf57a74384bd155b5b316d119ad3d9d3e4d99a7f0cc718adc32cf77bcd86c203f28cef1fc925134375f74cf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    039334cee76a3c5c8ca5578a8fb03d58

    SHA1

    3d60c307f1f54e9636e76c8c1601e72739cb2ff5

    SHA256

    ce2cb95558c18e7335d7c450c37494c4197c6a873683a43b5ee278b6a88a140a

    SHA512

    e8a121ea7544b0c5407e22c5e6182232644b1cf1a2a33e1f47728fa1c799d1c7a208cc15d9f12332a105e9ed4314d911ad26dc6e826aec75e5eef0c762f78b79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95f35b7aed5223ffdd3d7046da3f9ac9

    SHA1

    1e1cd026abae9e6fa112b782020c1c19996a650b

    SHA256

    b27234649bb3ce578f222952dc5074883a14f4302afeef0c2b46f61b2ec381ed

    SHA512

    2f9556214dc7c2ec0ea4e12517ca94cbb6b902883a7e3b27d86404af756b510d7bf453a1ea3fd46d1532432e1405b012b1d01d3a228c15c4ebd039b96c880dff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20afe9aa3851cea3a876000a6d4eb7e0

    SHA1

    448ce2f52218ea0d3ce1b9e2193efee1adf26ec5

    SHA256

    47b89ede3304eb7dce79277d85e3bba63170202b6f881ef2de3528e796a32003

    SHA512

    fe5b6686f5f52a3795c4db52d5e78ca468b9c67bb81f2cbf34a529e5515094eecb36500f8f39a108b6d480c917a0212d6e97a035fc52077604114ec263f6ace4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0791ae2669125aed75e1994a0a421955

    SHA1

    742a576345a42d2c9e3a00bd3b0129397a0d866d

    SHA256

    7c4932acc7a43c401bbc0d64b90c8c9b6eea060358ef55ef3bca032b70f14209

    SHA512

    96125337c43ae042999445dad33b3933151a3767aac1f2815d0c4574ace6059bc25f454ffa4a88d239c72cc92420678f3a7746e7a6c5eb8acafc475356089b33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ebc65692e75c11046c63d9bff92f638

    SHA1

    5b296cd4a33802796658a14bfb69b04512cd4d90

    SHA256

    16f3566e12d1a2fbcfd4b427c0d1d1e3d5d4450d9a5f189ea270b8d1aa063175

    SHA512

    f10fd95acfffa8d774591dece17dbf38ff0c50ec28569c062128673a33291c6c54a002dbf4a511682b5a7003a0da596b44eb780eb38341bfff56b1eb7090568e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76742325a0100648f41926d9c86bc7a6

    SHA1

    523d192fe90642b15d89e9b6f57cabe464dfa13e

    SHA256

    fc3ba817a3e2afd0f84921331e080687fe1f1c85b351b6de046a71bbde8de310

    SHA512

    69a40fbe3a9701e0ef6e96117db7c071f520b36e928ef51627e1a6a77379e130f4792ced3ff6471f97e7ec051bcf86f5957d439e9b7669153580fe629cf7994f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13c1f0eb6dbba9ec76198b229f39864b

    SHA1

    54c8d1816cc4a18cf3912395a08289ecfb01c74a

    SHA256

    ed5b35e2881e7fd1a919015bffdc2575a3f9023bd818a99a6b6052f5168180c6

    SHA512

    860c37d09824bc7937556bea5a1e19ad7ef442f70658e4348f0c91b7455b854b8fbfe2df72027f6ec431040cdc3f491e21a1a0f3b0a5dae0731f1ac5f5748192

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd40b44ebeb89f076892a6764bc18c60

    SHA1

    9a523ea14aac5ee2c5adfdf8576f234dc9d7642f

    SHA256

    504e3e1d8776fd25e8ae86b841e258a235aa1c7266511c7bd9a3503975c01eab

    SHA512

    2caf38b5d9d16b753a068f6489a583b4c68b3ebc4f4ddb91a35f0959a698949cdcb56f8a1548e9e70793f07dd579fbf476d601f6f1a944acd4f188c21adf6fa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5e16433a53a13d73a068346b7bd4277

    SHA1

    e495e45820bfb4352becadbd9a6b018c858d6390

    SHA256

    3594db94e2b889ca3cc1312c0d2b61a0f9666b9912344287853a564da27f74df

    SHA512

    751d37a64b8d87c3d2740b41dec3dd520d77a11ec7b35e24ec02124019f9dbea877eff568dc8fdf9da6849c7add1edb05984c7a952dbf3cb46affa768615a02a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d59eea82390277ab86b52be8f29ae149

    SHA1

    21a446f1f2872d8ca1c353f9d9d774ee1b7fc795

    SHA256

    41b98720695506a6c719ed67c881b38305a89b282bc4daa823fad5ca38837246

    SHA512

    e61bf137802a1ccf387eff2b71b62d218d88380b554eb092321cbbfd58742abcf26be9f67d98b2aeb1823e337416843810ab7a9ee042ad25903e2041d5ef5ea7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ff1c7b1308b67fde5e5608b41e51313

    SHA1

    e0c31091308be24b2636cbfb321969f24e7c5c70

    SHA256

    45248b1e2d663eab7345ecbf9762cdac4e55f3208a964f77af0ec99daf297b80

    SHA512

    32cca0c4a1ab1d4cb71b993403f62b3ef47fe482a9c2289af870f242ca055368c3f3d765b4bfb1db7e25cfe4c22c6882dab22dac147a74dd287999039405aff6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8cfe22bd677ba24444b989d9c90436d

    SHA1

    28f1e9091368683c40a08ae10bcc85a7fb11b00f

    SHA256

    48b5999d0360ac120fe9918e22ac73f03c9c3c4b89d7a79bb8d47851de1ef9c1

    SHA512

    2cda1a50e6c2d0ef830384212ac741b0c76cd6488085eaf6bce91e53a69bf7138797ec0673e9dc9a929a83cd67307b5b41a6115054ca09f340c04b20ff2ffc8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f78982611b090395f573397d4bfdd3f9

    SHA1

    4bdeaf35033cabbab536de3afc3e0e87706fc77c

    SHA256

    91cea11f04a40fa6f9862e65f2c07a36c18eb1e49f3fe31ae68d31e333b14b6b

    SHA512

    cb415a3cb24dd453b2f5cb50e217e2cc8147fb0dc88bb3c1848227c70cacc1c2be56aa73d54677c22be6d9932b839aee7889f92db3afc7ef2cfc0fdb1407825e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32261febe6ad25f19fbce01de1642ee8

    SHA1

    a5fed8b6c6ab0012c6e1d676d01bf0ee5594398a

    SHA256

    de52c482a84dce77883c45456c596a3dcfe271b9a4c810d67ad934f3ef8d3c24

    SHA512

    c59f8f7ae768b5d4e605a2c2ebd0176f36c028768d8873b7e336cba3d98c7256b39a8142d96f48bce0db24b5cfffc04262a9173a40011a32fba2d90764fee351

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65fe06d940744c965129e93f0d0eddf9

    SHA1

    12a321fea5910d1ef28b5fde3bb254dc19ecd0e5

    SHA256

    3754ae38672e61b23a3992238ffd4009a8300a6db87b3b908a932c4cfd14b976

    SHA512

    5aa28aaf6883178d2d0dc113a4ce0fb245fc5c8d82a7eae3bf6225ba31073442dec73f4976a24f4b38cf7389ce489f89b8f8d2aa27984dbb9b3c594f791eeb58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34ac75a147f3a72bd3c4159d83c48a06

    SHA1

    f718a39853b4b95eec784ed74a67ee9085acffa2

    SHA256

    774d32ed67a04d74edf357556fadab3125acf85aab5c1b3c8dd49e556b24bb83

    SHA512

    bbed77681912bebbd1d45a8aa315f150e82d638b20e03e1ae03c4a4da14158ef140edbfd523c72ee598cff02857e35c846636dc8f6b4b1f3e94aa7c52f584790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdc94171383800f9facc47a2bad3986a

    SHA1

    b8fbe5a9e0dfb1e444e2d0d8395fb6cfbe151825

    SHA256

    4b98a44d3299ea51dcb368b8871e5a1bc202e856f7ac8ec8c774c73e00c4050f

    SHA512

    98e89fa36940fa47fc0f15892cdf4d3b52a8ca637d79954e24393e565dc98aa68e6ff617b546c982e1c42492a9e2e666831d96201dcc0bddc664bcda32a620b3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A8DU897P\style[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab8A87.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8B36.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b