Analysis

  • max time kernel
    141s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 19:20

General

  • Target

    430184297758c3c4c9f691f204d045ef_JaffaCakes118.html

  • Size

    117KB

  • MD5

    430184297758c3c4c9f691f204d045ef

  • SHA1

    792db344267419fc5b0de2da8f61405f1c66e243

  • SHA256

    5c84183c7b1f7fd6261ffd0f40f5b93973c29cfd64ffb4f9c7a15f1377956682

  • SHA512

    ab3ebd89f83705c6f2911fd98f1150794a8077a0b56ca209aa78fdb4083060910839271eb8dfa2283de86e9b99851110b0f1b80844730f018f5fbdf5c890eecf

  • SSDEEP

    768:sx1HZ7QpgSv4tEvDhWyuzEdKnIKWCQ4ulEZP4w7LyECOW7tQSTJeC:sL5siE4Pz8KIKtQl/wX637Kg

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\430184297758c3c4c9f691f204d045ef_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2348

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0623e93d26673576135e031694285e87

          SHA1

          9ee707f786ff0a8f0be17c1750c4f908a5974339

          SHA256

          d760f51a8254e4d15cbaa10deb21b0a9cf51e94cacb19a8e8a26b054e168db80

          SHA512

          9aec5e215d2087ef42151edf6ca09bae0d309552a572836dd50c540377247b05e6ee44af03803444978f4756b84667caa18c2fb8e3b0a49b57656597dc13ab25

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          da07ef37575e8d09856fcada60ba80a2

          SHA1

          effff3b84283218c530694df605bbfa1dc5105aa

          SHA256

          16d83d448f049a7e1916fe5b040db9d0e290501558bf0bea6eb48e78db45194e

          SHA512

          105a075cfcd30a8448c463f4a07e25f47b79ebf1b2213c896f13cb83921ab7eb972d76101aa74c39e585ba5c0f4ee24005398e5dbd5a3bf4e6cf9d0a1bdca150

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4567b15defde7a5381b7c7d309585e08

          SHA1

          4fe9d2eb15c1eeaada7d35f27006f020e30489f9

          SHA256

          b98e4873d117c6c1c8953d66f202d948a50636905c5991f798997bc8db5c36a4

          SHA512

          4d26693d3fe36d86aad1953dcb00af3382200edb3faab486bb7d364d96bc5c0b0f3fbb133d42da4da9392c65b52aae119cc8e58dbca3796136c1abecdf16e947

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ae44abebd3c1150e431b36c581b6f2ac

          SHA1

          1928d7483329eff9b38974865dd896d03acccabc

          SHA256

          c46e7361baf5279f11d4a98e11fc7f8b5247461fb89032d5d7699899fbc26aa2

          SHA512

          d96ca89ca83e3cfff7aa42750a47724000171ceba2af8a916172c91a9df0b024bf76e98b43c0a72e74def53a4550966b539ec47d6d41603939388d7add877864

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          78583bca8c5eba22e5ef06948d08906a

          SHA1

          2bf6c9c07fe08c48e792ef7f09f2bec0a2cf4936

          SHA256

          9db02152ff066fcd633668a10c5b89413cd9a5cd41a7af03d202b4bd16ca2d32

          SHA512

          659e77be32e0aa44a5917a3cf5b74c5f317a9d4e0bafc583d98aec2034bc8e858c8051a0ef60ccf865f7ffb3782fb37e97e8c1c6a8c48cd868ac116a769a9c42

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a9af67087246d93706adcb48c9bfde83

          SHA1

          2afb0dff320be2dc5fe7bf8132110aa9bc718a02

          SHA256

          cd1701ac20e809fbe6fb9289f26b38de3ac4178e385734f7d0d36108ba1ea915

          SHA512

          6751243cb6777ffaf6253ce62f7c80a34d00f2ee4a016fe32a509f2d99c464588cd4d69cb022e87523bb2ae3e90cd5efdfda10e29fd2867c2c73e92ef096e231

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3851fb91a0551691ef89bd3892768407

          SHA1

          f56d78d41e7c2848bc369264c8fccf13a50da4de

          SHA256

          f07799d7ae26f9574df44fe48c7cb763336df05aaa28358717cc4b2b59cf9df2

          SHA512

          798675ff3ec6120d182d395a2c7b39a6b27fbe66edde3b350c9265a17fc9e681e886f72e98989f06d76344555b538bb5116e91d0a35a526c316dfd368e85fcf8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          98ffe7281bc853b5d1729b09198f0f02

          SHA1

          8f6966869162f8a134626dc713450df4e1a6af69

          SHA256

          3cbb336e69ab05312ed36224262f48842cb2b3eaa4baff602cc58fcdc690df30

          SHA512

          e7a8e8df44105358a7f1555f92ae1371e1842d7d7d953794c744d042417991e288f1b5283135af926a17b13c30330ba26edce2f04992eb90ffe018c08f563df0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4ef6940a198b461c321c1cd9ba4e5c38

          SHA1

          d03febc79037a1549c2d5c3a4a0c603277fecb7f

          SHA256

          af1e611508bafa99858a134d19c06268afa50a94130fe8652d8722ade821babc

          SHA512

          0c0c15a4394109041e85853eb96807b64b37f6425e63a875ff0201f200fd85b5d2aaaa19a21b2bf0f304d3213cfadfdf5ea71d950060b698c650c155fb19e8a0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fbca649eb92c898b2178c51578fc9e5f

          SHA1

          c1a01235ff7ca20cff395c3cdd81e40ff09a4152

          SHA256

          cbdb58368878b5cd125d28701c19bb87d5a8735f51049ee6ddd9b6980585be81

          SHA512

          3a145212bd23f30eeffd6310d44a8da3d25e48e0c04fd862e57e224200790c0f4ff9cce8dfb7c61172c4f24bc051842a48ab72812c51441b15ee231875fa58c4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a4df9b7285ec07acadf9059a6936835a

          SHA1

          c4fd34445d2863c2e54516e86e32953fe6f958c7

          SHA256

          b3946930fb2de9c694f8e2e03408ffa9547e0d3f9da55f6460da3dea9cd890a3

          SHA512

          e3e252e288f852bbf09d7f20f456a4d53a94d4c576d54384bb60299027d3c2b16d5b0cc1421e7d22a2b95da8b65399b9be65ba7b3aa92c4fe42f402d20392ac4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          07cbc7ed875ac625b56c4bd6d3c4b6ae

          SHA1

          d6d35e2afb934c507af2888f0e947aeb825edc5c

          SHA256

          552855a8731eb1b75ce8c4f65d3e5b4be97a7e773057b2a51d2edc0e25e0af59

          SHA512

          4757d947ad57fb62dda62e28f55eec325d0251e5d71cfb3610321d91a83b41db5215ce3ceb8fbab4489832386ff7db029fbed6cf608dc1a6b54a7dc9db1347ad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          428777c78f9884962fe093c798a10fd5

          SHA1

          1a575308bacd99dbe1185b231c8536716767ff45

          SHA256

          ec652210540728002144abe841868c1bea8c4fa99dadd972ac4a4f810fcfcd45

          SHA512

          cd63695e3ab80d3ff5e1be46be43342c736f21c24fb4c055f259fe850ef3bdb3de435ef96e08e439211d40b95d851c07b806beda533193c079ada79eeddad8ee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0c1b0e4d60575b2d919c7945f45b2a10

          SHA1

          c779795c03d56f61aa0c9dee342da8f0c11436ac

          SHA256

          32edb6f84ce9ea68cf38901134b6837259bb2c3659a67079c6d7637a52d8f16d

          SHA512

          331d1310857db9f369b44ad2d85c09e1b029022ff6906ac82e99913e1de65687d472a4f5dfe6fe67e2ad00aa748e95c6aff76ba94d5b5f43242689d0e569409a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ce3988b14501409078c4fd375499fbef

          SHA1

          fe66ffb4561e6ae6ac2846713ea9bb219d5df58c

          SHA256

          9144de40680c5604dd18dd59112ccb4bae5f5909c06c2c59267aba23fffdade8

          SHA512

          f646895cc380079ec8fc7e7924d011b6b48ead71aff71dd367d350328fb0f1b9e2bdc8cb0b4223fb097a2c05b883bb9480e6a196f247ef7106e2b1bcfc9d0cae

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          40216bedb422b6f044441dca37f9b52f

          SHA1

          abaa7e6edec420d8c0141ddc8b6828a18a2e749e

          SHA256

          9c3e5d875bd170e0ad1b29decf0061a2e76b400ec4bfa0093754b6b721451a56

          SHA512

          cdc780ba46e7b057c08a5cb4f2f895321f396f4d2c28d136157925ed17b4d148d20d68e1b76fccb40c082076e61303e05728109fbadae69196ccddc17daac282

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4d2b11e5d43d723bda70ddc2d93e794e

          SHA1

          222941ebf79d096b02c0452ce2a189087c8e3830

          SHA256

          3922e6199c7b57683b97408c04ea99959f6b96e9bfeea96a3520034c7cf200bc

          SHA512

          783b89d21e96587502b826bc66fc0eccd1806eadb660c3e58126313fb39faeb3688d3dc4257c85bd98fd3858543d35b6299abd680e4c70c37022cb34497fd93f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2be1ac8cecc4b5c5d6395012deb5fbb0

          SHA1

          ea6fd7e1cee83cb93ba65135da7638341ecaef28

          SHA256

          ebc251c1f1eed0a19ef693734b51dbc9dfb1edbf062f906ed0d4b1d9c3ee557e

          SHA512

          63d44667ce82ac7f0ffc7fd20b4ed20b91405cf0108daa271dd8d48c139c234946d416361aec8ce24ef790d861103d710c1d991cdf11866c0516b4c993080fe2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c47731bac7dae126dc7cef7769ce300f

          SHA1

          8d8e17f166a35bc9a209d83819cd807fede51754

          SHA256

          d1097f52ba1a5e43e59066525101d7d89184946706cca2978664e25f21051b56

          SHA512

          f310ba148a2631d25a3a72768d15cab5d05873f7b0fb0b50aae10b7474e0db4164a5c4d903b8dccd6e48054246e2b5643e833b36b500414cfca66d63b81c84f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          61af55e02c738a2bdea7f7627f17434e

          SHA1

          c03f4f75b411485f1c671cc055aa79cc3a6ea2c4

          SHA256

          80b1593c35f811fc42fbf2d27311d46246466d7d819c356894b9960a0f415d75

          SHA512

          bf121ba77a6afcf48d7651f8571f6f2b7a2877967367b3aae6b791a349ae4291737ec4d26ceb89e857b3d1c2baf8b69bb66c27299bb51fc70cd44b48b3584f67

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b2bf361fb6bc34aaeee852dc4e6a4427

          SHA1

          55be86dd65327071ed7cd9608d4ae269b0efc87c

          SHA256

          4e914b043eac2ea316f9ad7a41f87685dd74b378f49cdf295373f0f3ff35c2f7

          SHA512

          aaa9ee85d572c496f27788787e3b11048823180bfb10b36a3ef8b31a65124c14316a655850b79cae851c544f477abfe8c829682b19426550c27916743d46178d

        • C:\Users\Admin\AppData\Local\Temp\CabC850.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarC851.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b