Analysis

  • max time kernel
    136s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    01/07/2024, 20:42

General

  • Target

    1c6ec3a35ee36a08f6c2432be1727a27_JaffaCakes118.html

  • Size

    6KB

  • MD5

    1c6ec3a35ee36a08f6c2432be1727a27

  • SHA1

    9c34ac8867bd32851ae8cf152dea3e03eae5f018

  • SHA256

    1be3c3c5d92b4baa74451d2d669db554c1722540ce72328ea79b433c71e7f19e

  • SHA512

    69c0ac6b24829616766d8e1d3bba7ac1804d0571db03bfe105aee0d65a555d482ca0dc3c86540a459cec12cf1d34e7bbded9b62cd2a8eb15f1566b377c020329

  • SSDEEP

    96:uzVs+ux70xfLLY1k9o84d12ef7CSTUTZcEZ7ru7f:csz705AYS/Wb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1c6ec3a35ee36a08f6c2432be1727a27_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1936

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c0456c8cd0e02fa5025013627672226

    SHA1

    061d59ed00a5a4abc7b83b66d9347723c0aef0d6

    SHA256

    cbd6048ed4fa073348b710a6902ec128c0a1564169540309dbeeeb61f8b40d3f

    SHA512

    36ee40d51ff7e280bf8773554837eb3f7e1cce499ee3d53192961389e48668649d90b42c69f17bae470afbfd6a80eaf5579270a2fb0e8526dbf92367b075daba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12c5dbb15379bf74a80b81ada0de537d

    SHA1

    a92f5c9ef50c7a302bccb2f59cd9ee0e6dd6396c

    SHA256

    0decf3b8e0d761803d7300756fb7824b83cc0efe6e795f56f38cedfe085cd88d

    SHA512

    b79e379f17057527b81c1e0f22d5705cc20a9cf6f66298b2db5e34f571c5889dccdff644ee872377f4d25430ff9d2c91c8e0d708716bd013ac607643431100f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7d668ed0d37df5cee4c5764deef8307

    SHA1

    f3c31bddbb94c29e1e32842d31d0e72ecc668b37

    SHA256

    2f02240a11a5c48b8954ed2f79f843f9269dc5039d08783114eaa446cb6d4fd3

    SHA512

    cbdeb82cb0f0afb06f0fa3533059468a8d2964b1964b11536a59d75f16dee4f9c8c3108a72470c1c808ef930bed59f5c5bd0b65fa8ff2bb8f5de9940e9d67856

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35097404bd06b70d4cceb291c1f85c77

    SHA1

    01ee969a2c810c087b400830b90e93c4c17effbb

    SHA256

    64fbda1566ba107f17ffbf9f5c2bfe4985a355ce89899ec66e062852bbb7f339

    SHA512

    6942f257fbb2ac73a0685e2fca95057e892156cc08af90109f8e1edf1308747a8bc69d0378b0f0d160ba6e83b5ea2ffac1796de12ca74deeac6f678326a0a958

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d6f1e02961b03a22397aa61bc29d00f

    SHA1

    fc2e7ff2123c82996357b665fc3fbb9e1d2d0b09

    SHA256

    390777b434d50c5549bcd1bf3461173b4be010e2b409d1f4fced9a352f3fa46a

    SHA512

    6f1ad1e3b19f10f644b89578f6ed8536f2c06ca72efbfc5d86eef56241c77a287c02a27831d74c4bfab85ec696f446cb48cc7763fb693d0681e66af1db6268bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92672d3ac931ee2e6e0308c4c3c9b07f

    SHA1

    b0167d68f06c552ffc39ce71d1c4d5bc8ecf04ff

    SHA256

    7421d7953159296ecc0d68aec90901a38a7f40820244ac7c65bc5fa328c802d1

    SHA512

    e8c902e9970fec7ffc291411e0d82d6be9e8f17804337038245b7aaddc48bc9eb72dd130866aac2b7336923272900a1e8fe2a1cdc7c6fc9db0f3c40722093c78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d2d542becad17ee9ad69d0073da7917

    SHA1

    e226fbaf6463f83e27736bfe1559c22ae37f8499

    SHA256

    9b4a03c478650d12a8740db9fcc8976d264867ed70e840cb3387b376b64d75f5

    SHA512

    36e56a601f45dcc4fba2743e5a473581f8730282aeb103f0151017d53f6ff8f245849a79c1618a287268a25d84fb34c0bdaeb4a529fb56e2d33d2fc35a154d89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    353351c10ed35e0ba1f5c3daa4bd140c

    SHA1

    cbaca187779ce4c81b46bb3a40f535157b564dd6

    SHA256

    1ba68c45681798ede2998a3e5827eb42fdddaaeb04f5922f086e0b4f48a09f59

    SHA512

    265cba3720e29d61dfadc4868f25dc7ecdc099e5f50f16c95342a674fe6b6acdebc3b86acb50151f22e83e0084101afeefb55fba42fded64f694c254fbd9f02e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d84fc97ab780d8762213297d2553b8c

    SHA1

    24a683c331b94e9a2f3029938d023ee1a5cb33f3

    SHA256

    490f3ae1b47a4cbb5c5f22b69b62a263ecf5b96cc194c97ace93f55da5a8b4cc

    SHA512

    09d994d5c01df07f275ef99bf73bd9f89b1c0c8a32b770f678d59069e015e992956062914eb03b9ae92644df632b0fa7ed494f068902a52b2f7b1128202964b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4684c6a0dd635ab3836d8ece29e46fa

    SHA1

    ae94f2398c90d6a14b1a3db91953abff7b97401b

    SHA256

    3f46b947520c3c57157de535ab9ec74dfd4c7fe49d3ada520c00c1080bcf450e

    SHA512

    d707d31d4ea8411f44c043916531d300c6199fd8c428f987ac4c718eee3511f32330c3f1a224dc52aa35d23cc0ae19370964c74d5e2d9bd222e7931978f0b997

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15dfa4d04eff7205e5ff52315b0838cd

    SHA1

    c5df55b32de1b208cad9d20b52351618d8ecabc8

    SHA256

    a9e26ab16018ea31c08710ec2b277bac6ef3b99cf8ba3525d0e100441dd66b18

    SHA512

    80824e7c8ca501b42d079f739311f987323cee0a0c6287b5b59d774dc096affd2ab4ee31311b8810f6e3797a1dc549be49f8e63973938d9db51e911e71587ef6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6946cdd017a191fd6ffbb40b22f9bb72

    SHA1

    c8589975d72e9fb64ce500cee62f393b608db19d

    SHA256

    117b9c4b2f87bed3b28e0511f072d9ce07825cf94e376f7f418845cd35754505

    SHA512

    64359ea4b646467444f7c5dc9da642e973a8d3ea08897a212aaaeeb41b2efef3024ad3c8514a0ed9e4c65b1f8b518629fefdef6e5d36703186d4be7ce16b9e9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54172e61201165cb71056a7069593719

    SHA1

    e6acb1b4fb6d4c87901fa763e957bee1d28fb1ea

    SHA256

    ee439f453bc16e4d73a107dba3e68645a1c5e3e50b129cc3b26c4c828dd9b392

    SHA512

    0812b90d964a199316aff94eb3333d5c2840ee2406a1028691a3cbe8863fb9c49bfe9d04b9d8e44201d686a4a24fe0bd8de46732c1779e39bced7ccaf697bd26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97e1803744f0a520a18e921c70f2cfce

    SHA1

    90f11129a894c3adf11704905f02d92f5e2d90f3

    SHA256

    a2b36ea593b3164ea85de8c2f709ac621acb3658e3a52ef2012ede1a2ef9563c

    SHA512

    d58a10dc1b6b1f6fdf8d35309527b04b6ad901b9da7ac6005d8f5fec25a2e0e3683011341cbcdfdb1cb1d4e2c4b3ac66bdd999b788be740ea8bcfdc1e1d2e1f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96b9a0f76c22d57b7f951e8a533fa4a5

    SHA1

    d72dd25fbe2b63ec1896c3b1b40e94065511b6ec

    SHA256

    820bc504c9e61670377143f24b6b7acf124ba22d3048845c3d5cfe2c01c0a91d

    SHA512

    99b54ca70416272d25f47c6b02621e68322c3335fa9314aa3fa31d14b9a2516cc00801c543e6a20997654c6fe9f1ece256425f8c22d63a0b954b1693a7a53e49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8aade6e7a8febc3b4ff5e66761776eb2

    SHA1

    f4c3c8254d4e027ad7e0b63e989d2712fb513bd0

    SHA256

    5fb909c07dbdb7f380522f3ce186456b676c5c6b9394bf35678cd8c34c1b5661

    SHA512

    4ebf6bc9e711cf7ca017083061506e6789b34fcdc531f7d664bcc939dfd5fcc4785c6da39e8fa689af686de212f2a1e0a7bac65020fe8a815cfa165501731d1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01f8ce2d29c4cf02ef2533d88d5dc1e8

    SHA1

    e6a26a1c265fa1ebdfe338ae4eb970826b41ae85

    SHA256

    b8e5e3370d0cbec77e26ab168ca100b321de30c88940d67241ead5877247acbf

    SHA512

    f4b44f528c662f254df4dcb086f570d4fff7ce42f776cccd22c396706dd90794a4ea8c165bf47569ee06b2ab28326567dfad496f28b412bcad9836fc99ddfbba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3faf61a4c24f5fea0ca372e0e02f8e34

    SHA1

    02c1b15e62f93f9610658f8c344c9b63dca60c94

    SHA256

    846a705b8872319986b48104219d9344e1ae9ca20ddf0ff5f2c47b90c0fdd9ed

    SHA512

    9251c16b8086b351cef5de5cb38b8075d2f272ac97c5bb62e7611edeef69859f6fed6bf65d16fe15d19456063a2d73083d1c78efd39eef1ed2c35bb98f2af1ee

  • C:\Users\Admin\AppData\Local\Temp\Cab8AF2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8B83.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b