Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    27-06-2024 23:38

General

  • Target

    17f6d73cbd9c94c13a4a8f7a3b1e8074_JaffaCakes118.html

  • Size

    35KB

  • MD5

    17f6d73cbd9c94c13a4a8f7a3b1e8074

  • SHA1

    afda1bc13d0b7862f7ef2624dba7f84b10a48d52

  • SHA256

    34645d197784ab8d1ea03356d7a327c9c5397c57c094b09c142cd82e77c98768

  • SHA512

    73446ef16d5d5134ac1053366069673c368cbde91bc2d8a495e210dfc218f4261179ba1a2e5349dd30e22afaf60e9b5fafed1026de3a0ae54f028622bd81dbc0

  • SSDEEP

    768:rTNi1+DqwQhodECg71zvIqXjILyts6kTvDjtwcynCkeE9J3mmzyxaDVnR4AK:rA1xet

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\17f6d73cbd9c94c13a4a8f7a3b1e8074_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2628

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91410b5f613c90e35703594c8a65ce9d

    SHA1

    025125e19d1ab4fdafc412deec348220bfc37cab

    SHA256

    c207c0f95f325dc3cbef25b113cdadfb92721b4560c2b08af71a00142050ee26

    SHA512

    b9e3afeb592eab55f7696dd16ea1257ce21f8b8217d0224949405e2a39a8bbade57fa1e2da796444cab412f2b39459c316ac1e7e4f16f2cedc472e7e2d38ec9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    473c24c28f47b259bb167816ebeeb034

    SHA1

    18ae0bc87938481fa795a918123bb19272b42ab8

    SHA256

    1c89295db7953a64f6980690134a0834772fba0a700011e76e692e8d88a4ebf8

    SHA512

    81f530f2b1816aac18d3f54c1a1bc2d4ef470f56491791f531a9c5bd413f717b3836d09d57eff30112e448e58301a8dc6812e23a114a8dd8d7bce9628e2cdcfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    955dbbfff8acf7b270a25e70394c3bd2

    SHA1

    8f560ca05825657984952104cec12c20420a7884

    SHA256

    76d1ec58409fec117d56fbfc46b9c40d05a25892640ef458769d3f762b3496d1

    SHA512

    4d894855ecade709996d0f7f2e367d90f4da2a3c7067ea35c9c885b537511ee4ebce8d4881777fd89dd0768ccaf816f238e84f58993ace3da0d3b9028bd79abc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3225d148d148301fe45c9be5961b54c2

    SHA1

    bf1dcbe09f0783227ee223e7aa5b3b2b3efd8d30

    SHA256

    fbc001ad4c5a91c673551f52514821f9f083b0e92a1528d81bbdf09f1220872b

    SHA512

    80e0f31d0ec6ba99fbcd096c9ae99af9885141a2921fd27d4caf0ee4a1b007e4e69ab8bee1d5adb83727eb42e3bd53e1dddbfe82f3fc506174fae5ba5cff0776

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b767a8ebab226e78a0572c82548c45f0

    SHA1

    1bae4cc48845337dcaf347e7ad49ce0e4c954b02

    SHA256

    8b32098b07b0bf278e8510ba4090be53718c3fc392543e9b95ef018134ae33e7

    SHA512

    2146b0b4447b856054946b947909d6a7736394b9c235c3099033e5c8eaac4359d6af4e1508a7abc40fbccbe4629790ab0500e56825fdfba0a0b721a45f3f6f7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1019f16dd8f65d34c3278bb2d99aa03a

    SHA1

    80bf889cbf0e5a8d366c0c2130840ef76a9b413e

    SHA256

    359ac067c03add07d0be99c82b05844a2a2ac39a43e69da6330932f466f1aad2

    SHA512

    3395ad37430b2fdc2b66cee9adef819f196f3b72211ad62cbc5c39274fc16615e6d1208106f1bd82e1f0121010fd61a0f2f6a189eadc31bc85a80d1208a96c70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69e8bed67921340322f19db46788ca35

    SHA1

    719af9721e04dd0a9735886b181731a939318bad

    SHA256

    b8af925a0879ee07312a27a7d2f750d3360d865f99888024f4b0089dc09e871b

    SHA512

    8dd3e3c47fcbb666b891958f4014ace1920f3ae54449ce89e30484ca5b11e1a0aa0edfdb2126a9d533ab4a59e1855888f99477b3f945a1f40dbe7acec178233b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1ce196e7d35e3bb40e6a87183f9ca31

    SHA1

    aed1582ba156bd454ff54f64fc96ba159705d9ed

    SHA256

    128f91fca31835d2406e5f0dd750d45cedd829955d6076c5883af5d050305cdd

    SHA512

    0595b23a4c4e1aaaec39b2b77f687e05ddf22748687fb8e1f9f7426359e23d6c05eea4a9677985affaa4e975e0566340c3c160cba1330a8d64be6176ffa4227f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8317dcb5782c0bba284b077235ad1ca

    SHA1

    fdc09f8b345e9080374711adb446fb72b49b4964

    SHA256

    0f9ce1aba4c94e42dc962271d4fd0d01fb6d1b1f6bbfe238f73a22e051e82285

    SHA512

    501f6986a8de88e83bd0d466e62a02b55aa2e07df6e3f0cb39e72ffa624687c50249eaedc51755e19dcbab5a4f3c5a7dfc3ff47572e8323625e7433bfe778b40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e273d240a8f67571e5aebccdf99f30a

    SHA1

    f9a0cf24f21572c63b89bdd43819353970ca9844

    SHA256

    3a282a308b737b376244f3ec8b25d7a38652304607f85c4dbff1ba1e27141b2e

    SHA512

    da8dbd0a94dded39617f5de348aa9b2b148401bfce2093d177fca09c5744be5d37b85bbaf0500981e99e626f2e8f61f691068fce05cfbc4661bce197eaa8684e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7dcb4e457262d7e5318af762ad2c47a9

    SHA1

    eae1faad53cb6d05725fb37f5f05d1703acc24a3

    SHA256

    f04f86c9a5fb10fb728782ea8e5f011076248e846494087e08fad84fb4f4b40b

    SHA512

    952e56b63694aafe9b8dce4b51f642c5295ccceddf9dc08ef43e29b72314176a9de2dbe6787094e50104edd823103e30c28df0851a75957cf9b6cfb772e3dfc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7319576ab4fed3e3bc60557b409371c8

    SHA1

    7f22e3321333dac9561ba3b190be435ee17e2f2d

    SHA256

    f2d3f0a904ba88b449be1d82921377d1642a4c3343b55a159d1b8ab662e9a932

    SHA512

    a2e53032ec35a53da4041aa46e14f896831e76c1e6b37460230326efcd1d4d9206b9f2545b632a92409535e6d56a6240344651ff323a66ddc825a80a7716bb8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba3b3f7c2d9f2fdce8ef9bc9d48dbfc9

    SHA1

    c54dffede0cea9beac85eb50fd3e9fb145e7d8a7

    SHA256

    a4758c9ecce1547a5cb3f4286dda992937ab8af62c31de46a999e9ee96bc10db

    SHA512

    65246e3100c0f7c70908999cab67deed77fd8cd657985e3cc940cfa2679c66ca46cd342861ff8a50fd0e13a6f947ca841cf1d980411c33bd434b1293062e236d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef1fbb639a5a679c793fffef650cada5

    SHA1

    13f2ef74a03bd53eb461704e11c822994306b238

    SHA256

    551cbf321b42fea5b9f634c0175d0747ce9a08c19135b0c91130338ebef7914d

    SHA512

    3170a9e132691a03ea8cfe6293dfdb40f70acd90e1a8fe023af22256807e9fddeb136f00054979c508265ff413d8dbcaa766995ad4c93673941a1fc257c49d22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1fdeee6d199a41898debd48d939a2ad

    SHA1

    567f0634b8da9924e356e66b640cffd14c255b39

    SHA256

    cbd16eb36997bb74b0769e2a15e96cdade1402adfe5d1efa5724494915fe911d

    SHA512

    4bc486b9cadac4679f4efa74d7db0000c0b5943b7f9a6103904cc4c7957e0395c5c39d121157d0a8e71ec53e3636aa7f688c62f7d86ca2dcc994b88b04ffe585

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    759ab003b2d5bb3b39db0df70f01ba6a

    SHA1

    82ec47a94688da55564d4792bb38956875d33b5b

    SHA256

    79458266f3c32674ade6a445177c2dd0400cb4149251c210a35e77d7527e894c

    SHA512

    49b6c7e0c84a9fcfc755676a0ead0f279958ff8a9fb7eb12d06e608e9f591115f6894a10b10bf163dc020545ba8a02f83be938e66b9f7f9a7ab20e15dad34079

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    374c111308785847f174f75e657e6921

    SHA1

    f37c3e06ca98da7ed82a06711cd3aead92773321

    SHA256

    2bddc7fdc35a63787f6cc18fed8e6a91b4d1fcf82b33fbbd921710169e7f58a7

    SHA512

    81488ecc85ce94dcfd688eedccccec2e6e70cb99e596a234daf569293215d533de5a70185ddc990a7986ea6f72626743b6cac6a7f54a2f6ddefd0b5450b5350c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9acb32a93d378094a1fd8baf45b6b98

    SHA1

    a32c2aa9578dc8d97a538848751de896d3970dc8

    SHA256

    0bb2c74f819e5726278c2253fa7efb600990f77214d85c5d19412fa2bad6f991

    SHA512

    65fa465ed0eefaad34a89d9ffddc96296d22d612fc12846de5be4dbc8480f2592d6b10b36852e496ccab3e33f790422d182ef9d66a5bd23c999290579c1a4496

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89e902809d7c6ed895a4ccea8202681d

    SHA1

    919cd812030f82039e4fb303303cd820dd161d43

    SHA256

    e061f36c78c521a15e3b43942787b15f3349fa185cd6af87eccc8bd585a18004

    SHA512

    44e203ab3712e6a0814340efef6e5b8f4f674435cf4b2e2b4ab2a6a9dd7184a8682484b636b47b3ca9cf7429071dfa192ea60a1ad775e4a7e2f9c94b60d431e3

  • C:\Users\Admin\AppData\Local\Temp\Cab2983.tmp

    Filesize

    67KB

    MD5

    2d3dcf90f6c99f47e7593ea250c9e749

    SHA1

    51be82be4a272669983313565b4940d4b1385237

    SHA256

    8714e7be9f9b6de26673d9d09bd4c9f41b1b27ae10b1d56a7ad83abd7430ebd4

    SHA512

    9c11dd7d448ffebe2167acde37be77d42175edacf5aaf6fb31d3bdfe6bb1f63f5fdbc9a0a2125ed9d5ce0529b6b548818c8021532e1ea6b324717cc9bec0aaa5

  • C:\Users\Admin\AppData\Local\Temp\Tar2A46.tmp

    Filesize

    160KB

    MD5

    7186ad693b8ad9444401bd9bcd2217c2

    SHA1

    5c28ca10a650f6026b0df4737078fa4197f3bac1

    SHA256

    9a71fa0cb44aa51412b16a0bf83a275977ba4e807d022f78364338b99b3a3eed

    SHA512

    135be0e6370fd057762c56149526f46bf6a62fb65ef5b3b26ae01fa07b4c4e37188e203bd3812f31e260ec5cccff5924633dd55ab17e9fa106479783c2fb212b