Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 18:53

General

  • Target

    1c2042207e79a4b8cc75d4ff82c05fda_JaffaCakes118.html

  • Size

    6KB

  • MD5

    1c2042207e79a4b8cc75d4ff82c05fda

  • SHA1

    8a197459145f87516b03b02667366d4c7726e758

  • SHA256

    923c77e16933a2038f07edde3245831e50241fbf30c66312c009ad878af06a89

  • SHA512

    397a825355d9ae212a9f928a35ce0cac4de60e38e98b212e1bac1004c9f17a266a1854bd6183503dc8053a88fdd9061467ba37cd4e82fabf2da907d451a2c55d

  • SSDEEP

    96:uzVs+ux7zyLLY1k9o84d12ef7CSTUFjdOZncWZ7ru7f:csz7zyAYS/tnD76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1c2042207e79a4b8cc75d4ff82c05fda_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2944

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          40b3de6887a259ee9dadb87bc300ad87

          SHA1

          06271e8816ab0e89968cc0ca7051f42ba4cdb108

          SHA256

          687f35582a63adfa7a33269a52642936379cde429b6b48f9b43e771f80144c29

          SHA512

          e569039f4546cbd1883809fb506c4eddb56445eca86bf7abb5d934516854f0b4cf5d3de70db3d4aa18710d5d89bbdf184f31bcbc038b4c4525587b1641d0fdbd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c0470e22ba004ec20c5c7a8e7ed5d6e8

          SHA1

          8ea0cfc342e5a8b2c5403d4dae63411cabcdcc29

          SHA256

          ac62436e7f2633c8bbfe58f26e966699041d530be9b77bbf10cdac88583a6b84

          SHA512

          5ed6101a01144984240aec0f63c1b01224e8688b880f884c1051b251aab38950707ef6dad16725638319f70f5b801e820212777441b50d6144cfbedc6147ed74

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1f6a4a037602c9650eea6a554cf2b918

          SHA1

          a3cc88ec244b70a0d7f346284309473168201476

          SHA256

          008176cdd8d815d943639086d97f61fd644b43c9714bcd79eb042cd11c76eba2

          SHA512

          901355f1a528fb9bcd727135ba788e0832c1fd9a6f52a0c4e02b77b564f49c1f23c5c4e15559e707adebb6d2a53f9913afa5011eb78e2722ac73c13c18cc3c5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0fa8c96821222687f5d3d3e2f227e93c

          SHA1

          2a6e4cbbf7c2e3896cf04b131cc1db360ccdab75

          SHA256

          6b34530e18696953e8897169f0e5aea097199eb775663a5c3e90596d0c6c21ed

          SHA512

          1f3fb26d417c8536d46d6e3a2b0dc8f59d5372a42a7a1659d185f009e3eacd4ef9b864c093439520a57be413238fa46f53f30d965262b092da14914ce855b140

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9cbe668fb06f2e5fd3e044dbeb81d0f2

          SHA1

          0d46d6af8fe25097c35c78433a7764f64feb6a64

          SHA256

          266aad995d76a1226442e23e2024169914522a8da4c515752c180bb2b11747a8

          SHA512

          c2c496f32711f5fee7934d029b60e6c83d9a2834948dff25472ca15768cad34b05d5c468d17d7f58367de64a092c48933b2dc88a701fa5a82503312cfd35797a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          42462d487797a9ba4f6b8c4c1e5547c1

          SHA1

          064d8bb8f360d60ff209b2c27cf2877625d0f169

          SHA256

          35f9244ed25edaa6aa7503a04947118b0a1509a4e870d91614764694b5b20f85

          SHA512

          f87325f519079e76401fea86651628245a3a8108edb4a9d0514802f2024cfe3341d8ef39c42d1b3e0453ad663e7b661e49a5aeb9a8901544eb186e6de1e07c86

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          463d8da7502ac9519d3f1f59293a4b38

          SHA1

          229ee9258ffb05df8818c3ac3e08bd0811e41f19

          SHA256

          4011a5a6c8513d6afb5965fb1d595d173392058e59f000eefdd2529ccec54011

          SHA512

          8d73560a954b447f5465075cc4c690b52d66ee7530f8fce48c4f909d3f1170e3179c3122f59b5801a0c0a439a031c1d41bb164f2e02c67280cd1da0c2fcc400c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          97a35cc612626477c4b6efed41d90663

          SHA1

          7d6281e17996e813ebd0af1dc8abe32c6da34cdd

          SHA256

          5fd7d2517cd13a1ea2347ad9cbd5105de8563f74545003769820112645887a9c

          SHA512

          1e18c9d031c1123412f4ee17f1bfd62f0d602b374436ad041841167fa22971b3bb166537369d4c327dcd311bb31142179fe1bdb056a48c9409db07dc31b4863e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bc0fe918a9cfa26d318726cd1835f983

          SHA1

          296044f47ef0d14e04144e3e40660b3df8321cbc

          SHA256

          f3dc6fe9a770f8d3a64fadc62440a195038023a6b1d3c74ca2bb46422947f389

          SHA512

          214d7dca736ab96ce451a6dd2ad943de80bd99e212543620be5c8e9a57eb368a6472e3329dcbb4903d7e8daea72cbad1e2973c281a03849618b0e14bb5eafb07

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          968d11ad299cab2ab65b88f410be0891

          SHA1

          c4df63b16c933db7b64d7188cd6424c7485e1cf0

          SHA256

          27767f78f4f91aac78b79a38255b276a3cdb12b47cff54231eac59bc46ae0b0a

          SHA512

          b78891de84ea2fd7361ae8736e7525a8f32968ce228a56ad0c0ecc61cd04fd80750a8fc19a6d90dc5d86561bcbcb65abc563f6770ad71cd51814b1973b876e2c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7b7a11caa5de359b2d83b3bb23b67b94

          SHA1

          654e2312e20a3659616f988cbe61ed26d84976cc

          SHA256

          1fe854c9c381c4b5d2fda282c55ef8fd8b6e1d61837d0d6894856cb391e9a190

          SHA512

          26cdf2adec7e6919f4cb3bfd0645b961811e0145602f622b5efceea8a2520ebbbe43496219cfa8bb12171897b351be1567d452cfb06cf25edac24e720d77608e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5577d0cff27b33033a00ba1db44d660d

          SHA1

          0d5e563cd11da83a5d741df6a68f07b7a0f6babb

          SHA256

          158bfb71ed58410e71da2881f09f93abd1edb260d302daeaf28f2f04d96e19c1

          SHA512

          5c3dad335c41ad2bddc3e59a6c7cf48a0ea3a01b33f5ab8baa56bb5a35d2a9149ee285b495cf20c71d53fda62a1fb71c3caac6a5c0e68f897e281923235614d0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c8b035b60a29059bc8be3d4ec7b541a0

          SHA1

          638a5427fbcbaa24026165250b4fdf8d3d6315e3

          SHA256

          752b2816872eab71906559a9d212a3662f99d649635c34e1513e81156a79e3f6

          SHA512

          979cacc39e730f8278515390f1d4d67c2757b3317a254a3eac04d1519ccd71a76250bfc28954e89918381fc5633a714dfb0f17e11cf5e91270528d9b95f34a48

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8d21da691c9876521526fd72afc18aa1

          SHA1

          326fc70fecfc76a88a559a444a41f3527af9d9c3

          SHA256

          2425a3c1c94719b35c8ac9c8e581428b5ec61b004ae2c23a84edd2f40e98d0e4

          SHA512

          cf98b579163b7f146e55768f9f9a2e121650d68cf49ba1a43a36358da0578cb5b3496e435cd758d32540863fe542c4fcec3544da711cc260130547e2ae45fdcd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          baf1d6249a6432775d72b9140b5b295a

          SHA1

          87043349bc21875e1e65aaef24ad8cd54cea8aad

          SHA256

          9865506a0d4d0beab8d415d09547f4dffe09e161b93d98a241d3a4b9d1219e18

          SHA512

          997f2ce7f9299a20dedffe10a7eaa36dd943120316a3eddbc61016debb29a879bd8676b44ac1f37ff5f9249920f273c9463f76daf95fa342097f6a44e82b12c0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          687f08470ace9d03cfc69e1a5b0127ca

          SHA1

          25869c5c65a4ce11e17e4a1c48b06f1c426efff8

          SHA256

          351f1d85b03baf5be32ac7f1a174f9243968a3ee021b930b196c79d954165afa

          SHA512

          d2f4ce81fac2b001fd0eb48dd8a0e3cb90d3c2e2afc299c30f50993c154dbcc26a203623fe8f678bef95311bc59a13ce469468c746c6f5b8931c11d08a361824

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2e0e3e866bc97441316dd9633b5346d8

          SHA1

          a6553389e1029900b66bff504a71838b3eb8ef3e

          SHA256

          c63923cc54d626fef8110c6d649714de161281825322c609545a293262b5fdde

          SHA512

          6721f351db2e96906ef0f1557e9f807c85ab7586218f635fdb7d47b6ca40e2f698b1ffce4d67d2429962ff9e8587a5ae89bc0176b3a751af94da5d408ebd6425

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          69ab336b0d3efaf50b36173db268f00b

          SHA1

          a282daf0fc7571b61704bf8a77d6772d19c11960

          SHA256

          d2001771c78f794cdf2cbed613057f36e8d14c404102f03df0b136a895d98167

          SHA512

          f63cb6ef914903b4a21c40778d653da24e9a88fca0493417a1d8f653c24697db0572f34252cd2db91c60bf718962a3a09de7c28df76cef244bd15477a364a6e2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a65388d5d9155eab7c2612f7ebfa066a

          SHA1

          62dbefdc5f4f8a9f40d7209a9a4f21521afe6445

          SHA256

          6108f174c7ee8634dec3889eacbac67b084a801b6635c1abfefd7f9d4af8d641

          SHA512

          6fb2df6e97812de73ef59e9ef3f8172540b3b24a9e194334b52cf14fb61524695e3f323b4bc761dd71fc6411fa8b5e88d24c669be83ceeb32b07483f5ce18030

        • C:\Users\Admin\AppData\Local\Temp\Cab2214.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar22F6.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b