Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 15:03

General

  • Target

    422ee4db6fc1fa4718f67b3515bfb4eb_JaffaCakes118.html

  • Size

    9KB

  • MD5

    422ee4db6fc1fa4718f67b3515bfb4eb

  • SHA1

    bbde4562bd24c1c8d1d1af1efc71414eddfa43e1

  • SHA256

    585162061386d16e75dbc88645cf73f8003b2e7269c550525570bff7328d9dcb

  • SHA512

    8a7f406b918b7c613f4b18c6f2bb1c9e1f15bec67627cad955ead84469c7d2f808ead0808f997a7c063fa96f632380132e8b44900d38a0c497afc881dd445b94

  • SSDEEP

    96:uzVs+ux7cVLLY1k9o84d12ef7CSTUcGT/k3qp2lVHcEZ7ru7f:csz7cVAYS/pA2PHb76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\422ee4db6fc1fa4718f67b3515bfb4eb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2208

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed37ae64359748063905e279a96ada66

    SHA1

    8c38e226f2799d77ba669795efcbdbd8afa5e5be

    SHA256

    27f5887a783bfbc21db9f780195f57c306cce48e1e9bfb1d6249aa7ef4ac198c

    SHA512

    e7141cfd45aa1dec7d06aba38417731294f8f9564ff9460b9bc6095622994032d0a665c9cfdbd67470b35bada0945cfc2bea98bba3d207a2fa6752372bf5643e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acecafadf30abdc6f5acf389514d0fb2

    SHA1

    2cff3995213e8e5416f1ae08c7ca6c064d980129

    SHA256

    16c89d8d8dd0d2407c33c912b3c01d689dadc537e08625e377b0c1d18389b59d

    SHA512

    1792bd37e8e5f8d5deabb077415898bb55082c1ce8605e47447fc3ba930003a706260fe282b6ef0580432966be626ae6e492a06a61a692e112863e2737f9bb99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56f4094ade1289a19ff1b1ca4f84fdd1

    SHA1

    79eddf8d22fe182a6bcdeecae1a13c013aadc53d

    SHA256

    56929297dbef1f7d0deaa3e8a5a6f9a674d16128e4c03ede724d602c045b1c7d

    SHA512

    532e808ab600ce3815c1f03e6aa4a5c281595a25f232d16a29d6b8c65eecbb0d94c26e0802b4e223fcf31e31331335b2a8b529cda589713bcfa8360e215ed61c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47a24efad707e41a3886139956f044cf

    SHA1

    a66c4ee6e54acdb65e34a28df41fbe1e42a42a87

    SHA256

    59e89db1d09d94c0ff79703cfefa8fde194b8cf203411a8e16786c28efa2caf5

    SHA512

    05625caf1e174eea84bf975a3fd42604faca7f177dd9b6e050dbfbaf1a1bdb129a813f87c75e7787c861ad44dccd2455347c276bbf8b8b8c8d7bad66f8517fd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55a35d8680846698efeee2df243e7afd

    SHA1

    1eb1684356d95ea0413c08bd05f5aa9d2f5611ce

    SHA256

    3ce16b954eeda43716179742c3e063d178af9d7a34fd58857889bde9b9a8d502

    SHA512

    618a55f6fd2f9293c8ba6e5bb3749912cd0bcd4aa0a04cb4450bf045f78867552bb4c83399f4439b7d7d493450a7211f95ccb494eb20c4547fc8b99b14ad79dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cb169c2cc9a1f398447b8ea4255cf16

    SHA1

    91bb7d096148101b2ae3756e6e62f89e8f6786cf

    SHA256

    1aabe6e053788d626df23b7b1bc10dcdd89123955b0765200777ff941489756f

    SHA512

    1a187fb7170131703b67b42b2188fbd33707fe625ac17fa2927eded4ce61a374667031d18cefe4103f62e0907cd2ef817b4f3e4da53eb79ad42311517040e2b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2578acbd4e73bd65184d7d5d642bcb8c

    SHA1

    38b9340cf1eddc7fb164031f63b2caf6c83f5234

    SHA256

    6c4749d6013faf3e8dfa2eac49b995f7d23f33af676a19eb29aec74daec2aa69

    SHA512

    2f63278992d9190b82ddb7d68a1cb2084b330259c22a5a405007b0d6e669f3d765fb3878cedfe102bd320fb70e4cec3a467e62fe94043616657f42c9407a6d80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bb5b225fec43c271ad26d727c42a4c7

    SHA1

    44c3cbfc19a76b2a1d74caa5d0be9397ba4aee0b

    SHA256

    68ad00faf6b62a90517322f84a2cec33b3028fbe5c3564c38a28821a918341cc

    SHA512

    bb44216eb6dfb90028c954b25a966d5b78ac5ff6dd3d573189b88c3324d3ddb29f91ab9ba3aef2ea17074a024e6337c57e80abec5f500a970fc33f0ff7552ade

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59740f0d002874d415b820ceb987de12

    SHA1

    47d4ba5f80a2424884754df758281f2ed982b2c7

    SHA256

    d0549451ae8c03cce08090ebaa59b3190a4f728a62c8170e16296e1f8bbc203b

    SHA512

    3359188aacfde61ff47a4b24050616cf83d6e2e5d949a031ef52d2951c9defe87f343e106a8db400f2a4ad0d9b94486ac5ada6731e33e5df7b726247bc6ef7fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9332d98dd88d1df59bdeeca9bc6a58b

    SHA1

    0de9344a7b94f42a476bb02233ecb8846631ca14

    SHA256

    56b3724ddba7336c8ad3ba0add0f23b791af07da111e2c8868aed2e43ce9237b

    SHA512

    c2af1f09c0749c6f699d099d1b90c4a17713754d82e2ed7294f9d40779d8cb9be0ab28b1c1e74613d367d5bbafe41a8c958eff04f1bbf2d0e449576403185f6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b850233f6b71817d78c06821bf511cd3

    SHA1

    7d6ab5d10f16caea07c78f393b4c725c5873bd50

    SHA256

    09eab8ae796d0270ae1c871b42a2b50f2f41c995b75c99641c56a1077bfaaeee

    SHA512

    08b9f1d5daeeb50336e336424cea001e1d0d29540608089a87d6a1f0932a2c633c288d0a007c8b101983553e99d8c84307fefe7d44bc04dfb77f49a4032e0370

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4748e2ad0c205e81634aab963c24cc5a

    SHA1

    c2cce934a67d061ee161d8b1d3a0aa6e912db567

    SHA256

    e79c6d272e2a700b176cc7970c7fc5c0021620955c06899013f1b2696eea5f29

    SHA512

    e199fb7389a4ba7f6b741e20913d89c386d9dc757af4983e9a7bfc0be36b77db3297ba26a2d5b7f5ea174dac767771f582d024f050ccc7c8961034220189b068

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b133736ed9723adbd941ae8d893e1dba

    SHA1

    2e302ea464bf25d656ce475685c54cc3437a96af

    SHA256

    7d2021d8094e13d07e2e8d8fa66957c72a6bb7ca6cb6e0340d787e7ad24d69c6

    SHA512

    c96b5437411aae6a65625c88d147f2f3a9eef8f9d9ceafee560bfced0179b0357167a731956af4a234ab6f3aca477a7fd15886c48ad9f114a809b7e8e190f76d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2dd10559f8fcc3abd4c8665e4eac713

    SHA1

    f2d3989985903fc730c9ac09cb3004b60904a462

    SHA256

    feb55dc4b2ef749bef827da9690a9a37fa4585ae7a00e7e65c572239e1d68e14

    SHA512

    5c6a2a5b36f885b4c18de8b81011d77dcd33fb43ebc48d4a4ab188f4450e1be1072f3fee856dad5c85ded34d54f273e305ed42b2fec92f7ef34e0bd38db7a93e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1bc9d2b8c88b2c06647474f97c406d20

    SHA1

    820f6ae5389c77fcc93d65622462349f58458d7f

    SHA256

    14f01b3e549ac679789310779465039e3d6e81ff676dda4d7deb3aa5dfd9c7e7

    SHA512

    7afd319e6b1f513d51b7198ae23581713ea8f4db4044d25c539ea5a32e46257bcf1b39e26513e32236f90b83980cd5d115ed2ead2761820c0fbafb8474b29812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b4157238eb2e4bf5244f70342479137

    SHA1

    dc072f390b012f4c38393350250bec3e1748f220

    SHA256

    f2930a8de673716c23c5c9850ae5d27b2e4d28762acf78ae017350c3f7c16b34

    SHA512

    b896bbf8336c98917fa496c93688811e56ba6a6e0d3ba1171061cfc8f535047ea3ee7ba69191bf3ea6438cacfb3f4bb77adb0d27b0108f2b401ab0917a7278ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9becdf9999378c703a2ea5787190ce8e

    SHA1

    a3ebaabb18e808f7cf511ce3d8b7037c94925338

    SHA256

    ed08313ff4d8268cf42428f0ff807648d2a9ff4ab98d0378592ddc65d0616714

    SHA512

    4be8568bdea7443db22238394ff45c668ec2bc3bb8dae3ab97391b0bd3bce3c602e7b173b88960cadcb9bea50a5ad73dd48634423f3ab03cda47830f9f20ae33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab038f75f1144c567b9154f7ee573eb9

    SHA1

    952308abcbff1abb8ecb9589cbfdd73fa52aa5f5

    SHA256

    92365a88c059dce52a2a5c28218a2d614f2dca9ea6b298519e17c8101f1bed28

    SHA512

    a1cd8920bcc9fa2708aeb9bf5e67b529ddb3adfd303cc6e090ba12c35bb98f2ca5da467d52c10a99f5d7d3d38fbbf85506059dc3d03e534edc37b2a61cf4c74c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e4ad6f5271de21f6f3a6fcd0dac80ac

    SHA1

    a9e34f746431d939ee06a84342d4f5fcbc3638cd

    SHA256

    48898eedc19556d76c03297e7f671d9acd060819f24df445dc1b503529d84ee3

    SHA512

    81d744e048e18335385e4cea10541c6813d9fd151380324a19d933ab43e3c5c2a2ecc4942d3d9641fa69840c13001d39956c45de16542fe740076d772896d11c

  • C:\Users\Admin\AppData\Local\Temp\CabE6E9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE797.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b