Analysis

  • max time kernel
    134s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    07/07/2024, 08:43

General

  • Target

    29dd1216fcf9627f0f84b1369a086e97_JaffaCakes118.html

  • Size

    6KB

  • MD5

    29dd1216fcf9627f0f84b1369a086e97

  • SHA1

    91f51df49b9906b3b710d5c3c2d13d7a8d2eaa70

  • SHA256

    27f2e8be541aef563e4287ae3e2158eca494047eaa7a640e1be478e8b26e4089

  • SHA512

    3159b7526ca9951d2682c9c91729e827e69d88b779093b3af3be5c084f8f59585cd6e1c81f363b414b6c09091d520d907ce66efe18df9f49317ceed845b9148a

  • SSDEEP

    96:uzVs+ux71VHLLY1k9o84d12ef7CSTU3wScEZ7ru7f:csz7jHAYS/uvb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\29dd1216fcf9627f0f84b1369a086e97_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2316

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    291665b5afaf89c0018fd79eadee382b

    SHA1

    2a3254698f3ded0d96d4573dd105cea67bf42679

    SHA256

    4870a5bc4773fb3fcacdafb4fa232cc00b1e2ed2ba9029077e2fa67106eda3cb

    SHA512

    83c853f83c0a9377234a4ee7db4b3ef841dcd3847c72a358da36be428661897346bed65a737e6fa72e6f35fe875d074b7cdfbcd10edf64c387acbd5b3d73c3d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b83e8261ed748b6148c6e742f4ca83ff

    SHA1

    336388165945deaf3d307bb3f4c881c350b90c5f

    SHA256

    8154025c3cad8568ff91f1fb57661d9e7012be6912347a4ede05c71db4aef7bb

    SHA512

    cefd8819f3d2c9c1072ace63f7b3c8b68d29aa0ec916a9deeacbe6b931ac990de8c4388b65c1a8fcea828c1ca06df93961cc3eebc9f305446367240849d04bb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    381b2ff8ec0ac8b9df8d07412b25f894

    SHA1

    e54de4147e6df1674daa12db562543b608cfed83

    SHA256

    b13a5678b1360a2ce43955774485e082e86b001cb60226ff8f7179b85dba3e06

    SHA512

    3dbe77151795f2f94bfe12bdb5dd6581b53c526d2736f4a084c66ef59053e9ee7cf8731232b0dd55cc9131fe79482b00738349d377899b9b2cc52e79d4d3d834

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09434d38c1ba1cf43f36a178980829e0

    SHA1

    da39c88938b8ac0d33bce0865c28522960b945e4

    SHA256

    1e275d849feb5ef14b14462fad8fe5cb47c26aa8dd3a5e6b840a9be2a5b021b8

    SHA512

    0353e768579a4ab1b6fdf4eaf4e87d12c6c2ff35d6af783ac7d9a44ee14470c2193f5c02d325f74a35c25958f9c0b67ebeed91b6325673eec8dcec98d6038feb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b6743b9b051855f16b51dc3e169a492

    SHA1

    4bb4ef3f7193300a65f005066de78538208646af

    SHA256

    052d2954a57d988a89fd1628bebeca624ea5e1eaa2aa552289d5cd8d5b5f5d71

    SHA512

    045f1fe12acd5cdd71195130ea8532ec27d7e4b36a23d9cb3c9998f9872d1b6f6f86bf20994a08433e84a630f2b737e0305224d4ae2ab76149631e259e0ceaaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9bae14066cc55dcfba3e6891ea5e693

    SHA1

    ffb93f52edbe16121bdf5880f8c716f936cfec7d

    SHA256

    46f14550d5254a9cd708a38977fae8ef61acaf0a63504f47f91fc73049fe3232

    SHA512

    4a1b9b00defdb03b9b41f1c05e66627c521d21ba2250f9bb37efd039de30415c11b115e41bde6bca7255d95ceb17e84dc439855d104f8d0b68bd409bde95607c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae30188e88ea559f51a32f9067c28fdf

    SHA1

    e1d1c69e39ab09795b6e62318dcfb50b5783fc9a

    SHA256

    3d4444eb84c1d533035c87a3fe70de89f098f389d60a4546fcdd670d0984fe39

    SHA512

    408f72d69813eb418445b2a4b4c05de15a7739c6e74f8460a48500007d278d98f09bde7eed964057370eeef5a84e52d03787d82eb188ed34e4c48674a1c8368a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    080682f14a6619f64b1dd52ab7a4e137

    SHA1

    8e45ca835a42d9a212923b76110bcc6d85695401

    SHA256

    69b846fc2f84ce8cd31f88857c2f430195a3bd9e2c012e334147dfabd938edce

    SHA512

    0c787a2e30787aa7ae0bd6726d4058610e69c488bfb7965e95769bcaa7f80b22b8f304e20bf2488c45020ce6b6f8de566d489d61f887dcc1adc93cd0d9c4b991

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    053dc35e98924b38b880a04bc6c6de53

    SHA1

    a339348215d1e3130089dc75924e2392c6cb9142

    SHA256

    0a1d4d67948d1b21238005839b561198710ecb2a6de327883af1c174a799b22d

    SHA512

    05ccfd593662d90566573a7d79d0e4ea8a5ed2cd95602d059a6c130e468bae67b2abfee158a4f6b9b69691fd183af77d278714d29e4d5744bfd2bc6e6617d646

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4867e2852c6ef66360fca061baca12a

    SHA1

    b6978c7b93db1d1d1f709a4795f0c9e255e86a09

    SHA256

    ac984c1d5e9008fbdb28f21a40fdcdb333c965d210e26da04834848dd93c62ed

    SHA512

    dac4f5d86118f0ba107cfd7143d2d48f015f046394fe413923bd661bbe3c9ce3e5bbc13d186110283c038935daa8ca3219f7e95ee2785c58e7106608c0d41034

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e933fa2215cd62afd9133af9e0e7e07

    SHA1

    2c1bfc591a19834d9111beab48fd492a72b2b3a9

    SHA256

    e337cd2feb09fdc894aa29a5ef0b9afaf61de4dc5a90f6ef9f27879c7d166442

    SHA512

    43354ad4af62c2637f7f92a064c1f4c505382cf925a1b011565db4e75fa51960acb3c4aeb791e9a8b539c82577017357b7396e1bcca84665ff403e842ada731c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a86058b40ca2ed82af30865fa0048dd

    SHA1

    f13166a82e380d5276d1dddf8d2096fae63e5619

    SHA256

    2e3dae5f447e9ae9b0645289ca4ff399a431eabb94d71c45b2aedd43f99e0829

    SHA512

    2ce8977b7efcafc4ea0213b987234a6e8d0ab7da3b7227dea59f42a56dd857a38d3e5fe729d4351ffdfb0f6d7ba801708bfca8868b3674acbaf9bc241947f020

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6ea7b92ede478afc7395edfb3d50644

    SHA1

    a0a20104f8493f3b48015d8866149bbbd944903b

    SHA256

    5ab2c57bc2a18587692e52c2f5cc7ace884541368ae238ecc045a247815dc8bc

    SHA512

    17502cd9cb12dcd84258243535dec93a706d17484231a4c264fe9c664091a4b5689c44f573fa54724544bdb7f90a34c1fe39af35fffc50fb6426e94e6f99c338

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ccd333c0c8af8b82039253e0af329e67

    SHA1

    4b5343ebefd9e26d02bd7fe62cd958ca9ca8f271

    SHA256

    1ba6f181258ed798a2d146c9f0cc58d51c548c0e048c862ab134b130ef105746

    SHA512

    ce4d91f4b1ec0534fad8bf57a183b1d439776f2d2d47e104913aaec574150ec2b32b98210db9a73b9d1de672b8683954a9c950015b23d7a5918d9fbde7d4007d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35d08cc6a7a8a299cd0620056cabcbb5

    SHA1

    46f64aad19a3ba7061adb63944a107f46441984c

    SHA256

    3ffd884f984b698ef1a1850a63c4d76c86ea8564ea8a33a67bf0dc5e3388af83

    SHA512

    b26176d7c950d149c906826c82252e3777fa26dc3122c19cce12cb46f48910e592cb05c9359e5ded9d774a4bf32ec7b821fce6a5d8c01d9d483c82b898382133

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19aa83b3deb80f992776f9713ca341c5

    SHA1

    9944c2d3bb91df2581be9b15e4d92832abcdf672

    SHA256

    86795183375a101422db882cbd37662096be6526720f5e20345865e897541366

    SHA512

    e609d1d744ea332c8ddcc8598b3350f914b21f2785b7cd16066c3deecdaaa2cd12a10ee6b7c5aeaa17df2625b3f6ca99745f0d81f3b6af623b37d073fbc3b4b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88dcbff2bf9000fd187be6dd4b9c7814

    SHA1

    73cbc93a4c9f5c3ea3bb4d00175c7d70f0c52c9e

    SHA256

    c94e94391c4a6a30bb0ab5bb8fdcabd96a4d78cc6ed7263c34a11a83300a3db3

    SHA512

    9a6c22b02c6a20e8044cf345d5e83e4e2b530f2c76456d1d9a1cf3cad83eef62ae81c655d4b9057682886ca916e1eb8ec01ae8f379643d24fc10221a2c193a39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed84fa1b6704eb757113fe14e33e21b0

    SHA1

    5e6d2e21829bf5db34188948e514ac636b23088b

    SHA256

    21a409f2f2fc34f446ec6a378d7f07957f2a89093b49566aa7223505ae9ee8d1

    SHA512

    ddd5fdf57dabb901a5e485c4e3b0a62f2a4e8f35fdccb5e7995b6378838b69b8f346d6f827f416efdac22b812c7ae41f131c6e21383231cddd4637f198993a6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1064b501a77cd891896c16f347e6738

    SHA1

    0ad7fde922e8ca6b99d5cd35d558ecf93843f2c9

    SHA256

    0694b300afc4c19007c7f7695ab79da81728d4fefccf9f1b1604090caa23ea8c

    SHA512

    8be7f6cf9c675f6bc94cb36aaaad0c1385827414191c19b9f492bb1567597fc21d2c2173a72be2750880c84b273700f6f87a3b32994449d158a13ba6b06b3d3c

  • C:\Users\Admin\AppData\Local\Temp\Cab8317.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar83C6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b