Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    03-07-2024 14:21

General

  • Target

    22ac335c50f6f03d2c3ae3efd96c6596_JaffaCakes118.html

  • Size

    7KB

  • MD5

    22ac335c50f6f03d2c3ae3efd96c6596

  • SHA1

    2fb18590f436d85e7105f324461a85e97658469b

  • SHA256

    f51b640d6e4350b25f98bca3e62d1adfa6df81ee6d290bd3c4ff058a05400302

  • SHA512

    4dbe99386be4425827726071f64040b571a13244d261a62218bfe9ab8198ce3bcf02fcaf89ae4ab7a0a99c1f7c7490adf52db1bf83ae1321e71ee573ca9a9f2b

  • SSDEEP

    192:Rsj+mT8bZuDlVky7G7nAj6AKP+HrnHQQtPuybu:WjnTOk3OAj6pP+Hrnbtmybu

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\22ac335c50f6f03d2c3ae3efd96c6596_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    187415ccfc7fc2c00fcc9bc19947061c

    SHA1

    062973df04a03b3bf9699b7bb2e06a9f6ed1730a

    SHA256

    6f8db63d17903b5122650323ad415a6ca17e92cfe42ac00df39483d113482ed9

    SHA512

    5b735f247955cd70e01c8a2583525bb8d4acabdeffaac9c832ffefe798edacf76c7a90847f346c0b511cfd0960dc41d029f18f546d9a8d4071685e99984b05bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8e6810feb21a198bb10a8945b2ddf31

    SHA1

    9d61ea90dbeba0ccc95f0ff68bbdd1a9d1084472

    SHA256

    e88cd67a848d2ec1a7628339060e9bb861284e1bd25c36e2f28165d66a34cc2f

    SHA512

    5d46001a79f8f54911c9f4272ba8af0e599bbb9d6e22ee136465908bd35bba3da744485a8a928781463ee0417f79e55e5c2b907a72c3e1b6e27493baf5d3df12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a2fe6bfeb24036338176b53356cfbbe

    SHA1

    595c33c35969b1c63df90bf517b89ba21e6c2def

    SHA256

    9284f4b846e3179f5112482d4da32e2fb96756e8551df867e9061127dd0f3535

    SHA512

    fd18a67813b6720b639670c6648ef2d67a441bfff70d12b9e41b4650135d6bb285203f6271bf17fbb9f05e5159c0959d96b6baccd4f5fe84fe97b97c9042e4cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5209e932111e2036dfd55aa22eca5de3

    SHA1

    53f0ddac5ba343e8e9d0dfdb331902dd1994e6ff

    SHA256

    861838c254f012582f84f2c12979b54c76f3c9f8beaa87f0ad747421a73b0e45

    SHA512

    5a62eded0d2eb22a45ae6f7b1b2ef9fab158c8a1d96b81b6f56fa58efa7e0dcb43dd83f2c9cf2d0a8eae2599663c6140345ec0f6baa8c6d46ae76bc4fc97b836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bcbc03b3013d32a6a592ca14f226cf7f

    SHA1

    32aa30aca13318ba96d2b1264516c37ed54382b8

    SHA256

    7fa2b42e06bd9f1228f2cb5d5824c8683f0f88540d884da450363e6a32590620

    SHA512

    0e2a1c64e5e25b9adc2a61a93c429a2a5ddc4dba87495d7384b8f4cac29c83203bfc00fb3e32e56031acf8c6d0df254ffebda2abf65213539e9f4f053993b66f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7da8ab82ab4321a9c906d2df6a5d60ca

    SHA1

    31e608689afa41bb19f38cd06520e0c0e545dd6a

    SHA256

    8ad5f1bc03063def710f19031968e791bee2dd0638289851ae92b0ae62320af5

    SHA512

    085e265c3100b212e444a3b946187f0ddc7d75c37e9b762011adef500a51e58c0e5ed8638c6672100d8b3cdc98e44ba559b1287049a6402896efdfbaa1916d8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a519a43226b807e248b759401c8a5c58

    SHA1

    f0a6bec1cff331b64f304e83ac8bc7b421621214

    SHA256

    4609f487bc8e6a0245ddb30bacf759281ca1158806524370d526e374b47f760a

    SHA512

    ed95a03d9d42dc27b123c612f0378a42660b2d45ba9da75dc574bacd2c8ee65200896090079b83cc2df6b9bd43f9f4b6d02be3884df100dda469981e2748aa90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45d71dcbb6e893cb86404bad7263e10d

    SHA1

    91ed675f69a4cf33326a228d89facf1ca9047b46

    SHA256

    fad144dd28f6b279cea3fb0e893c738cd48bf2674c4badb722d663f9f2feacf8

    SHA512

    ca17f17b673c1b3e8830a3273a5cd32789f1afaca8a0a6507907ead6f08f9a639367a822e578d8544fe4153a5a2659f12874552cfa93f4fc402b6fe67063a43f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    386fa7853c8a47506b959e778b6038fc

    SHA1

    97f035982a9810bb642cf2764ee8a59e617d3643

    SHA256

    ad07b19de306030c91c63501aa8b6bce00fa010bdd0c425b94fddd07ef49ebcf

    SHA512

    26935d959cf720c04bc874ce80b907d05263cc4a653ecba15e2f2c4c03f8a6ff1eb2f9f3773bbaa76620d213a711c0b3ac8a2a3b5e3f8b1924a37cf7d2da6dd2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e960d0c996c0fae56094211a426649f9

    SHA1

    310eefefe4e415d5d1b16036cdb5ed5feb2854ea

    SHA256

    2794b50f810a4ec42fa1219d7c0488ab3ea183c4619995308f1165fc35c56a1c

    SHA512

    3525c6e9f4add4a640a99d0eec829a4d9d55a4ca9e60c467e2329154d2e08c7ccce33bcde7674c5d49fb30a5e4b9a2f8291c8ecfc4b95b1ab1a2cedb1b6326f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c68b51c3c240199be9d292b1d087b318

    SHA1

    30cd9e463d233aac4063cd99cea7596ca8467cb8

    SHA256

    68b4130ff802373db71dc37c78b2475136a8cfbc0c2461214c85e29ceead3173

    SHA512

    91e1f95f531a8e07993449d43da3c1a0ccd019b0f6a92d5bfacfb42061227ee01e40527edfc375da3a5211d0fff9c79ee2e92e1edd8085a1e71db935b46fe548

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32dda6bc680114d96e7829c5e69ddcc3

    SHA1

    85f9056c7cfc8ce80f0e0d96917168c0deec45ad

    SHA256

    faaaada2c0b47230bd8e1d58af05f71af4656944af9258c8dd23641b966b7bc3

    SHA512

    ef0e5b9513ddd0d053168bdfaef1ebc39b3e890541620df789a085ab0ddca3b064d67c374ee36e32df3d346f5faaa552816c142fadc315ff947eb0c233279b7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5aa069a1151f029189e3b03791146d0e

    SHA1

    c5f0a4721c714bc1e2ab40a7ddd659f7b1e40e4f

    SHA256

    46fd380b2487d22033005a9d0a3c1b79a79d5201bb17df81dcb3ef2580728316

    SHA512

    6f2356425fdbc2f8fec1dba6f53b7838545f0980a6d9297ed16592ae875993dc817481b4462356b2c59b5f0963c62834c16f5c77653e9d1cdc695ad2ca6ff1e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86750c475617f218392f4b7c09c000ef

    SHA1

    71b06f4528125c93edf5ef0e3ac04798be19c549

    SHA256

    8db6645d747cbaeeaa098ef5017f9ff4a76230715abbdd5417c854bf2dda16d6

    SHA512

    33f68e913c4ce1048174a1771f00bd6ecb07f49a2c95440ffb6859c410fc099c894e6c44987c2323058257fd9f6b6a2480ae3b524e44b03ca127351f9ca8d2f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acfee108b07bdfe5574b1a04c5a5e10e

    SHA1

    7abd06b8d64941e8b576272005a8cbf478bd05c6

    SHA256

    0d35fcdc59a5270b95c513dce0b939dea88aea67397ff214fdadbc76f6c15c9c

    SHA512

    eb0a2e40eed10797bcd6c57652b3b848e9f4cf87af1bb95df1e720fdae96dd187dcbf5c2cca0a59a4b9bc526ee3fa46ea46fc703e8e7cf290538ea54f43a2770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    210c655334fe5252b1c6614b477d5a45

    SHA1

    cb9f50e4f0969702300f0c8e0b765077d17fa0ec

    SHA256

    cf4feb42122705d55e3974783726c503df38a6f07e5c7aa16991c8d225b2bb1f

    SHA512

    f0b4f911311bc8b859b7d62527df73d5d256dc26b6447a4c62803967ea0b388ef6da31737b61beb95f72c1d834eb004d55579ebd1f37de4a01382fbbbb279ca0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    941c378326f0d51869b48d8614622590

    SHA1

    8c3a109fe14c2d9bbb8cd79a93de048708d97b72

    SHA256

    0b4f47a909240aa5aea2e068dd9ddd5637993f0ed5e274c91f70866e9484d5c3

    SHA512

    09e621396b0555f294270f656c470eca12776a94b6389c41ec7e07af83d54cd21364aad435a81465a8396ee21c1631fac5a19d27fda2346ea581aa2ef9dd5bd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5185de5114427fa537138d2352c22fe3

    SHA1

    9cd1df0711f1e4239adc3f8391134e4cf43968fe

    SHA256

    ec2d672f30d1b46a26b9689600d22f33e6547069b51a6e9dd078985c3e4307f2

    SHA512

    c960ca56b4122356f5eb15ed5a0a9a1cf3de54333c7a236b59a1d83fd98a8badbcf33cc14798ddc5cf33efa8a86ac574283f335fa8010081d64d84b1f882ec42

  • C:\Users\Admin\AppData\Local\Temp\Cab1C49.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1C5C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b