Analysis

  • max time kernel
    135s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12-07-2024 04:52

General

  • Target

    3c0a9df4f13baf052216cbb3baa98466_JaffaCakes118.html

  • Size

    18KB

  • MD5

    3c0a9df4f13baf052216cbb3baa98466

  • SHA1

    e5d8a11444c65a97a6b4ed8074c859794ba1b7ea

  • SHA256

    7703449400a1c3d53a712cc691a85322ae446142afc8a532ab0f055c15ae1a4a

  • SHA512

    dfed93a80b6954bc79dec1dfb6ca4b9c7aa228fa38be8ee442da6ce087f00c56597e4225d3e911283d1de21e5de021001a6cf6a630db4646786c8eefde10c7b8

  • SSDEEP

    384:gzlozfjnTOk3OAj6pP+HrnbtmyURagQ4pAS9qgtgcVfrXK132mk:HPtmywQqFbXrXK1Gmk

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3c0a9df4f13baf052216cbb3baa98466_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2388
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2388 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2356

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    daac82c026fbf6a9682581d71d7fc3a7

    SHA1

    79bde11b022622f26c4a7980cee9eafa9ffc58c7

    SHA256

    c0b4cdd4243033df0739d3cd49ff419648bb00583ad9dc1c778f8ff615d25201

    SHA512

    2def19cad001c6cba96c121f3560335e0d13bf6104fa76e3a701f56882b96f03a0e7e4eca0c74f1507ee8b88884748943ce35121f835ba3327f34cb6d6cc333b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc3854cf81215c3b93abdd820f9812f0

    SHA1

    a989e25bc280d3926f4ff16c8f53103002f3cb79

    SHA256

    fe79f8e85b6770585e67adc1facb871ffa5d9ff4d59cbebdc6323eae8172de4c

    SHA512

    bbf8433bbaab6e7ef278981723cce96844472f691bff9d9c6e516d9962fe2406bed5e54c76dbcefd7103254cd7f37248f545233a19609255233d8cef63bf7676

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c459e85ad65f4df167254890d264276b

    SHA1

    28ab9055382e0355cf3806f08064051ee39de0fa

    SHA256

    742175acac8b17bcc4db7c914ee6edf9f423351d856e948d6324169beaf9ae11

    SHA512

    92231eb34c7546c51e7eec1236c686baf7e20205d128c6177b70dec8f5363457a367e25547afd8bbe4c25575d5013e99ef5d783fbcd52a60a4ff9e55fd57198e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fef2b1b18463e9aaf03d39db06dcbc8f

    SHA1

    65285153d3d2883d55aecdcca6c3791ea0ce321b

    SHA256

    1fada5ce859d2fc8fde0abad6076746fdf38ab29527f3405606a951819287170

    SHA512

    0db9eb9e93ecb675ebf15133d00666083d73ac77df1c16a3ec272396d9f5d7821bd92c79a60d46367d0a7b62dc3b560a0cd821f18a10d6e8ce0f8ec62a30dc12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b668ed70753fa2757c1422d910ef23d0

    SHA1

    bc3a6a0a886f038b10d9a17858a0c3906b3bbe2a

    SHA256

    1f9641631dad0212dfa6d25401ab43c39e2a70bf96a7c5c888f82d1379187141

    SHA512

    3292e74c0cc5fb57a1e47fdf3e288f2d4cd00ea6c167b9b2a4466d6bb8cfb88ce5f2ed67123f37f7d6abf98eb2c9999a16d902b85c4dcc27adc36b1c680dab9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4618ed70f34ffb79f2897523eae5afe

    SHA1

    6f0e80bcbbf53c2beec46428685290663cc618a9

    SHA256

    5d06976ea51699f446b5303d057d20a8719eee3f3987af719b030b2369b34ebb

    SHA512

    788c7430d400ec0756e52a4df9998f01f7a250bbbee7719aa4c344fa11daacf29a0a7e585171cb71119feee0ed2cccf4948814bf447c7dd605bb173d6764dfd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58308921308b79a3c4da9907702f21fa

    SHA1

    fb21108c0b89b2059983eada287d5a455b9ccc77

    SHA256

    7f33357fd3cdb42391a5d8a955b7b17e90152a21f053e0b72a81514a0d199535

    SHA512

    1731cae03d9bf00b0e4261f7247176d9c730f94d39806ca6113f420f4aa46c248efda18b40bc31f6a43a7495e41700dcdf5a28857ece9b7cfd8726afe991e801

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    658362683305bceec46736fb647c35d7

    SHA1

    1e135c80af9396a71cb9cfa40db714c68e47d251

    SHA256

    23bcbe58c04529da345f0087c1ebe2c1a3764dd60553b4ae7aafd453c8bf9137

    SHA512

    5570ec034a151a9232229ff2fbc8218b558c7a67fc1bbcafc1f4a8494831f9e47c4a686e859c59355ea9e7445d0aad501eb25c4db65bb9cdb6679c8024157cb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd1a015d1fa84b43fa7df59903bdd409

    SHA1

    e3c0e71fc9cf6cb1a5696e7e0846a2d770d56a9d

    SHA256

    23d5f7e52177496bd55c3f2679b246a6ff6faaa08e73987a7d0d97f5c0f9960d

    SHA512

    2d68fda4e504f72cff9e874cc6316ba04eba9626787bf3e77aec3211140e13181e2131467087c9b647d68d9063b73c39bc7a694af8d109ced00ef63d937da49c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7998b30ceffc9860bcc86186c5b7cee6

    SHA1

    67c48fdbc971c2859a920bd35332bf8fb364ae64

    SHA256

    cb6df8873cd279b79a20b3d4a2c256083e3353f8a4fee44bd88dbfcc5f58e36a

    SHA512

    35df77790b41c624d5a4aa09e3c3abce9fce61a83faaf51a021900a11c36fab167cd3afbc53dea45a6ce704e16596f5c3229e6c15e5665fda9130bfb3a33f1aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b65ebb29d7150d1703c779004cf61742

    SHA1

    14a01c58869c80e50016dc7d4dfe065eb949e8ec

    SHA256

    f37e05c36fb1a074923c0281dcc6cf90b4f949fc7afa04cf573d25a72d26a504

    SHA512

    4b1ccf5bfa4d498cf0ce890fd4e005df29959e4d7434e45ccf00664d07aa58f009fa289139743bef786b41140cf7a841b118cdfaa6c53c206336e2db065042ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96e6b2063ba74c4be640957887b7db43

    SHA1

    48b1fe7e9460183594e94f098cace11231e544ba

    SHA256

    3b61e0a95d20cb92d7a911bae99e462683ce0e993bc9e9f12a6945c59aae9a3f

    SHA512

    17258e4b372854fd148825ec72b9ff3aeb7e2425368fbf0d0bde1a86424e4409e3bbd39b92d94d53e846e707ad9a3f41f0ad001dda437559f47e51dc1f8b229c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ee1554640c30b98c6ae7b2f030958dc

    SHA1

    279aaf452f58cfdb81db7c54679e2816a8103b82

    SHA256

    45e69eb2d55b402a6ef19ca2ace7218ea7b020d96367fecd745858b6c98eb329

    SHA512

    63130fe29af0db44ae230c136ef3c2d7837305a2c2050842d1e5c44d0e3e92fe7d29c96ce330dfb58f8ffde772f191a930327809090e2f1f212dc2dfab612574

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    defe02631a6f4af4d29eb2a429231b13

    SHA1

    e6986036d274458ed188458c76e961cf4eb43c11

    SHA256

    73298c12f9a29dc1708dbca250d1f0856eb954487c75e7cf1b650dc03b31ceb4

    SHA512

    692b1e78203e8fd5f4409ee622150983fb00fce84660b7e9ec9d21db28b47d824d134e5c32d8d787ebd2b07090e4e8df27404da373a25cc6ebb8ff908cdcc9e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fce880c584e21d8e3d1778335da1f445

    SHA1

    30b968a0e73e9d38d9a38cfab8be819332096730

    SHA256

    1473fcb3c61e45688ec3c469e80aac3e2c8e607e0b20b733f989f85a0bfb7340

    SHA512

    44b69e20adba488d6428940aa2b7dc2548cb8c8cef62f2d41613076b6659de2e091348c2449142d61f3a48a4695779c2308b0abb26741797badd8b84f06109de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    295108f2095526906e1bf8210d28c5ea

    SHA1

    1dbb63bba8741be21513b31d48f011c585803bde

    SHA256

    171cb0708c4951018b3398ac143e1a965b403375f880133789f119d83b42360b

    SHA512

    54fdc3b564d49efd4035d8e4f075ae8d989f8edc71a181e941c8fd95261190ba20ba6220871d37828be6351534c83abc04b4888769a7652014ea8156580df666

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65ad6085190a699574bb098d1030f024

    SHA1

    ee163bc0b8889a92dcd102e363382b64ceac7e72

    SHA256

    bd625c0bcc985c4e3e192131a245f5913730b5f060c8f3f4e9ae3574b00269e4

    SHA512

    00d431486f5448b525c8a305fb5b7b50426c40123bfe35550f74a9f0e6e8333fadc6949de18ddc74cea8ecbbd0d64bc60f3334b0821e47f3ee83861d58ee2610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2dfc163d2fcdf2c6deb42e247995dd96

    SHA1

    0d07e5cea090df4078448d1272fbcb14f4a3cc1b

    SHA256

    731d642b6b6a9b16cd8199e69b54e1cc3fe5c8fc20091250f8ae4aded9195676

    SHA512

    e41a0c7b7f04f6280c43851c7708d5f3f3f29c2f75f04cd64dc0fd7287f61b52e97290e93d62e63a49248c1c0537208e67ee47040efd6e13738e6ec31c92911f

  • C:\Users\Admin\AppData\Local\Temp\Cab12B9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1358.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b