Analysis

  • max time kernel
    134s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04/07/2024, 18:09

General

  • Target

    25bc824385e42b85be0cc2a51190fb6e_JaffaCakes118.html

  • Size

    51KB

  • MD5

    25bc824385e42b85be0cc2a51190fb6e

  • SHA1

    a06275e1f515b5998c960c8d8ec2c50d3ad6881a

  • SHA256

    8605e35f87fe1042eb9bcdee55ab5dd91a57b1c6515824e849d91c24d62d1b2d

  • SHA512

    c55d9be48981b55c401e698e2b1bbb46aaf9787bfdf1f03bae114f25f18c1236b1f93778ba480cbb682b21dd1129b89ab842a986d48ee3cb53aa88032f6525b0

  • SSDEEP

    384:qr1C8ldpEt/e6vSjkx0SfoaluApuntcvd6v+SWkaS0ajf78cVHDMu0ncTw07x9CJ:qB3xAcq7hn+7wuVzMM6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\25bc824385e42b85be0cc2a51190fb6e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2088
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2088 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2731cb85a24979b18f5af5a1304392fa

    SHA1

    b4de85c45e3025e1b016cde4e703a6b640ef006e

    SHA256

    c37bdd89f0574c8d3e49f8567087c777581abd33a0e41ba4b2396645b5f00bbb

    SHA512

    8c315f2608047492e9c602d3916a7524bfaa69b945dc8ddd2d85442f711808ab4b2757f2ca13d53f36f1715ecbf673344e61d87832f5ff9432474bfe8d3d870a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8480335c257da874c10da9d90ad6622

    SHA1

    b6488fdf4b29b4026fff3715db6def4f0695483f

    SHA256

    37d785d610e04565b35288b744e80a9ae2cc62cf2766b8f56e526a19145da522

    SHA512

    fcdacce75968aed63df815d073339a7646e7e5d41c4d9bb618dd7879c7d3986ca1f18c1d9a684526b55c104163b1efe6d449d88706448cc43ad74f7ade37de4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    457609a8101cbde1c593e24ff13a6362

    SHA1

    a99ef274e18576e13f8276e3f8553ddb2f22a0e4

    SHA256

    f3988be2224c870889c12b381a951fcf976fcbf18f2fdc1d43cf68cb4af90407

    SHA512

    1485a71dc7c0a9cbf2c30b1094cc5a864d66b6428d0acbfd2053fc24bef7507b39c2653e2f28d022f8813967f7ce71b4d7f830af9a6f6b4bfee03d9a6fb1cd80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62cef894413a58f5da912e0c26dde723

    SHA1

    137d736eff709227710602e622ef2761642b56f7

    SHA256

    8803b507b3e24b31e582c5c7dd429671a7b2c57dfc294fe2e508756613dbefd1

    SHA512

    00f5fd492f120d84926931a80c9067d5da503426cfb626fa41faf2313e328069aaf544f86549cfaa986f217e9acb253fd6cd0d6592bec0fff4d0e42236140344

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d93738f1fa6227072106d88b40332b5c

    SHA1

    14ce91eb471602f0e3467b9bff2f2390c088b953

    SHA256

    3f5ea291e920f9218259abf2dce0e5ceb36a625753f7225fb7cebd0d8c896c67

    SHA512

    3d6614140beecb5074ff9ee5da1c7140dff9b9672543691124115a5f6066827c578a4b3156376d3ae451b6bfb358022fb3b2fb86c5bfc343d25007f6f7711755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d95429738e9764eef6e5aace5c93360

    SHA1

    851a1e81032651ae0f86ef9c6936acb7c17a64ae

    SHA256

    e4e66b523df7ff225912027df1e180da27e5518d5fc4dacb01f2ee37c2f800db

    SHA512

    304647e61d6386da4cc3354298bf5720ea14d26e8118c84c3e76f393b410c2d69d9b425e3c9c7f5480e9497eae5e2767c9e5db9b6e791a8ffd7594e5ffb849e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50fe4c97880a4804664d26885aa9bf34

    SHA1

    a6d4d679083709e938c260517144637e223bbf80

    SHA256

    593d345e95a3e38b4690e9331cbfb74549621fc246943b5972ee4cf17cee9e1d

    SHA512

    b2467cb53e827b7eeacab1c5ba8806700a95c8cdcb9acc59b322320421a658b6819c5b0070e5d36a7040503b69d2a9b24d6aac84f65ffb27b32a600507182da1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22600c9f180a45c600fee8ae0bf73dd8

    SHA1

    2d1bfd83290cabb2b48901dc37834f7eaa51efb6

    SHA256

    9e38d5c661a636191071f45c76b421d89777bf0ff80357531f6356b2a4cba167

    SHA512

    c6a8c4c92d0ef3c90152cbea8228b4ad91a76a4fc6d7459878f8e3c956bae7c7f436055104e4b98411861024f1415e1ad06b7aaf13edef2197b640ce7a795b7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1d6d01b03bb0114240a79adad837bf3

    SHA1

    3450ea9cabbb64f3c96204edb72a1a0cfcefa721

    SHA256

    d59270fd8ab9aa321399e0fcf7257ed9197a9ee9463eb548015ea313997402b8

    SHA512

    83f468194c76256bf9d0046ee266b0cb957d03cd56f12c1c63e348a574461cf6b43eaae71326d405166655f76df4ca37ffea6163bd682282d243beabbb0f553f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d062feaee9a1570ad56f0f720659e4df

    SHA1

    6e0aec62e8d6caaa7653bd2f37e288dcbf5b0bdc

    SHA256

    56df1ceb2a17b18571f31bf5a78aa2a39d1077d0fc0742768f287aecec0fb495

    SHA512

    0ede9785bfe707c699f172ac64026fa4bca84b102c398546f13f6808cf2831f1c1076b6da88648afadb5aeb3653d33906adf2130dac1dc7bc9064fccb2433099

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfa26e0f26d821abca9f8372d0685195

    SHA1

    842294148de50f9e770113ecff84a7a87a646db2

    SHA256

    979f2e8bff5b2389727d1a5b6990f32211adc0afef11f9752cc34d67dc16f6dc

    SHA512

    b44f81784db77038994211ce4c249f7cb1ae1adb31241f7f3267b30d4faba10293e7647b73fcef762f7a3588242569bead9c19c9c7f81df38aabd8daaeda4c3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0aec8bd6dd193351004af5f028d84619

    SHA1

    4df71b8a12d19057776767dc5b04f9601046d5e6

    SHA256

    13f45b65d89b6cbe00e453c9f08658f494e7328ce17c868b98dc905863e6b73b

    SHA512

    34ff2d961b61aef3275c9e3da29293e2aa6e632b9f5313c42e68f0f9ca2ca3d38add95ac681d1778b92ce76fc24cb2501f13f399cf0968611bd563b710d6e485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3b21c52a6afd52c13d845877f4a40b5

    SHA1

    1cc86dacfaec00b5ce4e45ee24955741f2369dbf

    SHA256

    0eb5a3d097da8fbdd30581f8fc9fde048e135dc733758fb397a99fc2f5ef4dcf

    SHA512

    f4c9eaece40f6b0a2b8413209f31d9217d20de075b524f9f449ac647679025f3e3e5dda3be48a8db961dd4c285a7f3c9a1f0c4745c200167a66c5f7035f18f51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57972a086f7b24a35fd59115b916963d

    SHA1

    bbd5e6018d802ccc4e2ae0c7a960e8be076bbd3d

    SHA256

    5ae920da399d5b70b7896f186b7fbfd2a2b53cbfde7dd1b020b75e4a4c896256

    SHA512

    82e9e46f531d87ef7427f2d8947f138590ac286081757812bbf71cbf57d0b96c1ed498b3a20ea33e522e58cfed5a22827e7308f0000f568b0e82a88e731a4fa7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3bb3a4970df5a91e213cca83d1959fb6

    SHA1

    8b026a4752b8925d57b1955638a5435992140415

    SHA256

    594875f426c1dabe58c18bc5b117b032b0ea3a9aec6c5b6c2883e87f5f7a8c8b

    SHA512

    5c7edd66a66c32c550d2074faeae10b411b4e2c71b3139f2134d1ff6271a558e9df4216a1c486a45f5c068fc5e59aad06a82a633fd40da018613901ec62c400a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f8b994d0dd6b9de1dd1156246e63197

    SHA1

    da089d89d1226d416ed0c47ff6f83c1d12a1cdea

    SHA256

    1c05632838550cdb127ff5688210fa2aafe57b429118b3ee9ebfdcb65c9fb957

    SHA512

    a65ad08c3c24e38c2bc47686aa4f76cda2400cdad8e3ae4eb001ab47b66f3744595a2f8ad8a6c542f2eb02d6b07fc192e0311dc0c3cdb4ea19b4058e8db39800

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b45f1ced82f374491814a017dfae136c

    SHA1

    0a5faf05659e84511febe78a76c795def6d06546

    SHA256

    2b837b3a136b1d85dbc9b93bd803ae370ad363f019655013fd3f7c4ec04b3366

    SHA512

    643e6db4439e3b04045ea094e5410002bcbf2f6acc650fe18b99d87c256aac6fc7ae8d2e9843261428cc2f930727a13e543f8937a2eae7645305af564922210e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b19d2a685ecf71bf2cd80f03c05cdfc

    SHA1

    89046289e372202c31ba969b94c62a58558d4ef8

    SHA256

    236879bc4fa471ba44c574d910ea5bbb0323692db8384118fe7b74301a2f3f71

    SHA512

    bf8e29ee12f0f586755453d4bd701d02d193658393d9f1c6efd8d88667229d14f26920868d3e718e7cc77b800af076c20f39ea112ac1c2127000ffe6c7966972

  • C:\Users\Admin\AppData\Local\Temp\Cab404E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab412A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar413F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b