Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    24-06-2024 09:16

General

  • Target

    07a64a3f80c2a0e109418a7cc805752a_JaffaCakes118.html

  • Size

    6KB

  • MD5

    07a64a3f80c2a0e109418a7cc805752a

  • SHA1

    19222fc4478f5ef77f226734f331c4d6723e9034

  • SHA256

    446da8cee0e2e362e48cb72ecb23beba4d451da58d4b9e4f3c8c0e57ccca45fa

  • SHA512

    a56af159d8f8e0fe2abc7382ba61110ef332426f4602d847e983f3dfd345c0147eba0158e0eadd5bf853b0d2d8172b1a11bda26fd5d9eabf947256deb18468b9

  • SSDEEP

    96:uzVs+ux79QLLY1k9o84d12ef7CSTUAZcEZ7ru7f:csz79QAYS/Xb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\07a64a3f80c2a0e109418a7cc805752a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2336 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2944

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57430e7e2738fe369c64ccc27d9ba7e0

    SHA1

    ac71ed9a30ea5b28716617e362c79b52f71db915

    SHA256

    42cddc390a576bb8810a68fdddf2f0270019e86a68c54a98d6ec6b033962f1ac

    SHA512

    76b214a04f22f1b8541fc36a4f9aa0c3c57c55a1dfd15a42d2c8315326d71aa74857467d080e41c662cb062914ccca515feb9b86be4bc025baba9fc1c7f05e14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d15bb33e8f1f9890c8a5ee5bc1ea1cc

    SHA1

    9fc677b511bc7573d660b87849a2935b379ad14b

    SHA256

    353bf6451f99231989513cf4db3bee56eb423a13ee5eaa2433ade1e35467d7e1

    SHA512

    5024f9effd7c4fe6861b51d957034730c9e1d4ea2bcda9ba89ac0e4922516ad75e318941419ab9414f6e76840a2769c0d6c2acd9713d8730af4bee05d682df6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03ce1124c447ac5e4ddba7d6caac4aed

    SHA1

    44b87488a2db0d49fd410f174c2c5c9846f29d07

    SHA256

    89eb725cbd7481df129008fecbc884052d51307f4dc7155f5ad421bd1f7ef170

    SHA512

    fe39a5e266470645064818c2005f0a240c499e2df263b9d20bbc2b9b68cb6218bf6066b62a350987e3219394b7ee0f7572f73091f61bddf3f4c77f3e50265092

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    311f57075dff972a31e9079ce6a8579a

    SHA1

    120eec4e68eaee5f09c3d8d1fc048883a11d8234

    SHA256

    85c4ef0c53f95c61bb113dd2169deca913903791fecca8410e28a05d9a1ee58d

    SHA512

    d56a674495acf79b429fb8482e3ceccc7e8edc08d0bf1b4a4494f9f8d0942588e5c2feb0e621b351e18b7d631fcd1fde467ce3848a59449cb0d503a1a58d3d93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d64c64c1ff858727a6c3ebc076dc870

    SHA1

    89a9702facba99ad0f7d50a34b72aac538e15a5f

    SHA256

    7d73a6eb145f781ebe0ecc6f72a4bbdb25add01325795ae529397c0e945eb201

    SHA512

    7bd6a67d65b8f111ed115964464990b76621fc662b1a2e41b31f84218b42ffbf975f710e3449b2bdb2e310ea59f91ed51efb3a96f1224850683117d83eab10b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    725b93114956fe73166e262c7298a5ed

    SHA1

    8ec1f8412143ae3c355e20b0120ac92471353f29

    SHA256

    d2da28c3ae6e1867cedf6ae498e9a7e3711bbde039ce5634d6aa71313f97e20d

    SHA512

    b70d4497b310b9cccd4febbbcdd23fe4678c4e48e662304fe85dc2442638faecdb0f128bf7246b211b1ce6eefdf9132cfd29e1163d06d225f8eed26964b93dc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58f53f5095c84579e1a9cb6df5566c95

    SHA1

    9b7d0df1c8d6ada7bfeb08d8640d26de1dfe9f36

    SHA256

    f16a45712aaa1b4caa587405bd14a9930b7762edf830a540daa1fe4fc6830473

    SHA512

    29252d81dac4b1168493cb162caf64f61c665270441cb6c8b1ebc97057ae42e572ee6ce5f9bf254b341b042fde349d3806be0ef0b1e192126b172f3e3d15932f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a1fd65aebb02788a5e97026bb210f51

    SHA1

    e0aaf44bfae458a3490bd2ba0b2515e6d57f7d00

    SHA256

    f16764e3ccd717e2f9a24066cca08528ad81e03bd134678667a862a3f8bc0d41

    SHA512

    f855c60458a7a2e2723f33648d5b80cff3fea9b233c06b0fce385b94295f5bd3f6742d5fc928bf8d47f64987ee765d57020531b8379b94b812c39e50feabe444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65ebdd88b9bb202abb49c64815a8b911

    SHA1

    f225f81979da62c35f2f8aa84dee03432b19270c

    SHA256

    d95eff5d8d24e16f0d5ad0c961b59d60ee39c50a70cdb18357e1a3da84fda9f2

    SHA512

    c12b64469785fbea671497275ede395eaa1ae7ac02df7fa3e84f590ca93689062dd1aa02e23177839d885b090b14f112032da5a8d68ae2a6b6c72d09fe283798

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    346ceff7838450651462eb0b8f63494b

    SHA1

    90e1e623d5f629e6c0f93d882c962118153f3e93

    SHA256

    b0e75e2fc7d0a9c72ca80b0e12d179364efe1db1fa44d51068c0bb5f96510969

    SHA512

    32cdf3c979ff0dcf7e6c6f24090d87600204196dfbad7f36be481ba812c6ccd28e9f23324f2a2c4c3bbab3d2988390b16569b90877d07c5450fc2bbf0486caf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    828f912a44f726a1d2a134ce91ed0d3c

    SHA1

    90e56ddd64bd11a97e049a88acc93113b987f506

    SHA256

    4a95c5580a6fdf7da797cd3889e0a16a5f02ffa36a92f4a9f79bae1757481789

    SHA512

    68a35bc4a8fa9b7f713e906aa9a198fd5bdc517fd13fddb206b5369812d0badf1268f439c1d23a3d1b16a86931be6f336e80b4fd414e958d8e02d277ae65ec25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab66b9e569d322dea7e23a7fcd7a464f

    SHA1

    4493086688ba48dc1bf962a49b31785ef517e9ea

    SHA256

    35534bcb4045ee8c8cdd688d74b2092def27523c424459b6b7f77a141fc2923f

    SHA512

    3a75a91aa9ad53d6f4195c430bde62dbe3ea34c26702071e9fba0eac0ac4df9a813fe1258d67fe0d3a73be6b9af465ab2f1692a21295bb24313a536bcab99cd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40b6c8213a4d6cc780191b1aada37635

    SHA1

    894df4afd97475e24d8eceef6728e0efa3b07225

    SHA256

    4979875f9d03c08b825de211be1637eabe9b848af1cf1dd2fc13ed08de3c864e

    SHA512

    810e6adc46abbd14d7ec95e6a007a960382a31b1b0e8a1db14dd7a540ac5676ef33b53e3ccdd9d3d970ef56bf17b56fa6c2ba8f835d65284fa4689466a195dd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d76f396bc224604ed8bab26f527d8013

    SHA1

    16e816cbd29e6fcd84075c66e30344f72307f1a8

    SHA256

    0e212407a018760ab0d9d25111f3d395587d7be560657f169ea06a6f1446dcb8

    SHA512

    8b40778e41d867f3f2bb39de28695643ce7826a41d485d1eeb16858b30f14edaa10726f990e7c21b3d7449ff0d57d72504958c92b6572b5529564a5ec4fff1a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    843c69436ed6a8c419e3460596998350

    SHA1

    39a171045a5652b98349bc22a1fef2ccc8095b49

    SHA256

    8667d4dd61306321ef13d6115d65617482f149d30acc378f9d66be725d772e26

    SHA512

    89ab982f973ae2584d2705ba8e93323b332a0099e1d8f4fa2a2052924705ebe7a98a590d2eeb94e04850d348e9e6972cec05f7aba9143483826778b4097ae22f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11fde1133cbc5365122e5bd0a75f4a78

    SHA1

    f4bebc921a034b8ffb46f00c6c41498c04c6e16f

    SHA256

    296175304a86e2b2be084bcb1b3063b3c4aff532198e9e60fc162ba9bdd57018

    SHA512

    edac35599b47b9338c6916cb3b3bc1c9373e148a9fcb39467cdec8af7c0e8002b7232af457a3dc4ddc2d18b1bf907b05678fa739f2bac21d0b2d30e1a75aaa98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a73fd858ec4a66729f5d6670b5abc42e

    SHA1

    47e8568341610abca72388e6022519b50911796f

    SHA256

    6c2bfb63ac2590e59850a2ad8471af930f4ebfd3b7bfe5ed99bc52818ef80476

    SHA512

    7adc914d8e8a80b83977a58b7cfcb36d3eca16a2c57a23b803b8f701c2811c6b535d55afe063f1b5a606a41dc840dfb289f5846220d37e71a1fc285b2c708031

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ab0353f8bed0bd4524bf6973ea58b7b

    SHA1

    4f53ff61b7137de513b1f1553d53e3822a422408

    SHA256

    46a78b54cf377c2724d61a3873865fee4d9e62d0271265d791f219b5b9fc2628

    SHA512

    b0dc7d42616b0a3c3df3184a2ddca7f36b675016b6ac0b5eb7540c101fdbdf8dfa4a9ed9e5489e2c5a0a380388e8f219d7dc183aca06da1dc6d8f91afb11128e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f7b50b3735bd5fadb7473d2276ad26f

    SHA1

    ad7289f7f5719da35d82df42b82dd8977c72bfe5

    SHA256

    1940ff73fb3aadebd2b55f577c47a55b8f21ce821b6968858c1331f6db611b87

    SHA512

    86a390afe7455eb48be9505db1199b07b5c2ddc3821b610ae82ece3dc0cc09033d59f2074ca0e8b59a1651cfb9fdb49fe48156c426e0f2c4218f03dede5d2219

  • C:\Users\Admin\AppData\Local\Temp\Cab2BE2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2CD5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b