Analysis

  • max time kernel
    117s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14-07-2024 06:14

General

  • Target

    44a4731597552a387d73f657b5cd089e_JaffaCakes118.html

  • Size

    15KB

  • MD5

    44a4731597552a387d73f657b5cd089e

  • SHA1

    00c04bf8ce4ca23622599c6ea790ba80146a602b

  • SHA256

    219e436a8d1977b4ad0923feb4df59b23aa3e9ddb4ff6b57c64b29fd2d701fce

  • SHA512

    18867668f5d788d29f0b3daaafb15f344df47257533b4cd5a9189d26204726024604614d476c6a063c2d526083fd7eb238e14292686d8d906dd8aae7366429de

  • SSDEEP

    384:J50rDhcTGIGa8V7Y5jNe+ZqJuUx8rJMXan+Q+5:JYDQaJY5Ipgw8N/n+R5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\44a4731597552a387d73f657b5cd089e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1908 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2688

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8cf29b41fd73084c81ad667625268c5

    SHA1

    970643ae69e51abde4bb705b69396ae5397b5941

    SHA256

    8a3f270aed36147c64c4e99965f1d26eb32e54868329fb8b3c9e32ed138a5bad

    SHA512

    6d2745bfd60f3865687b4c8f368b2b5c92ae1f6ed7de751ea9ad738a44bb807f0dda34a0825c30096b70a20a3f65733d36446f9c4748996ffa196800b4dc4636

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7969e678a37229f0ecacfc749402a1b

    SHA1

    dad926476bfb4038f72b047b35cb964428c8174a

    SHA256

    6aec5b5bc675f8ec5ea006a18cb688675444c47f8ba421088e01939ca2f68ffb

    SHA512

    5ecec2ca625fd3759d076cc52fec95a2f0febeb31504a0d64ac2e4e4fc99dc75eedd5c73279ff839c9e8341294e60d0302728d5f8d76bb6cc1fa9fdc76b5f418

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    face81ef2e052a25dd63855792da54d4

    SHA1

    749a328fa80da5db290871ba45ef0f42239a8eb1

    SHA256

    dffd9564189a9b3b4d127b4cb4530692c6e3a122a39c05d0f316e285864cabb8

    SHA512

    35d3a39f0894dbcdf672e0badc177ea46765fd8304ba8f562696c0e0c4c80d49e08e3262794c652d97cd895e9d71c9eba41133a5a3d90fd81bee64b755568c37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9e39d2a23643e7f9f6763aac846bbe8

    SHA1

    78357b18ef00162d8c1464295247b9edefb21ac3

    SHA256

    73e649a635f4880cdc2ee15a6cc4f5533873dc774f053e6aa8c5dad337ac47fb

    SHA512

    ce17a62f460e404802c05118c8b9749725c613082dc387dd11146a182a292dc9b90a3c4884820b36c7487a6fed132821127c64f32a1ef4aa571e568c2992e4a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e75255711e93605a4902a1bdbc182b6

    SHA1

    c628ed60397fa81760f64c5a9b284c13bfccdaa8

    SHA256

    caf36adfd1306691e7299e71660fdb56012f4b283f13cb3a6c50d3148918da59

    SHA512

    6b47aabae9ee4a273953858eec1f62c2c45f3131133b02e2b4de1b902b65e80e5e59414b315dbfbad1e5cd7f7ebd613d1ae4addf3c55ceb9e098e3697960f96b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    201b97752468970b3649acd7f58bfb31

    SHA1

    26b387ecdc3a6fcb60f403325f88b8040055b5fc

    SHA256

    5e64d4de978cf21fde0c29a6810aededa405c7049fb2002065c03be68019e255

    SHA512

    6b93f690eb92094ba38ada4a0ac15c25ef5422a31257571b7bb332d656d1fee6c47bf3d5d5319b3b2e1acd88904a8911dfdcdc17e0381da0a42b04e3f1489ad8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b809af4bf25979a515ff4308f2fb22dd

    SHA1

    db96bd03cec1735ee59c44bd6c3f03491a345932

    SHA256

    3d8d4a7359ba3ca204c6a647515d8963ea560df9df526bba2952303aba2c2cc7

    SHA512

    99040036f9351ee65734766dfb2b8337d26e0b348c7f45976ea8fed552d5c53572b9a33bbabe4d2e7e151dc16ec936036f339625628c9d44ac2f410f01553387

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4bd6e83b6718769c394e87396f2906a9

    SHA1

    90b3dc0f9ef49e37b4d7025c9c492b4538f73e15

    SHA256

    c4b654209e0b59ba068c4c79e7642099c147558b3b5d585919a7950497a40423

    SHA512

    0400019f14a9b6454a92ff5a5ffa5ee9feaad1c80e89c2c63c809dc0845e941684f25d6d52ba162c0aa08577cb48d3deab8ba911ab6c7138815f5919b51b3d02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1718c8d5c494d9bba83bbfa0390f4112

    SHA1

    de1d9232149a6a7c0e49e8599ed62bb04e1d6c9b

    SHA256

    6b959018e8198ff88d033798dee8e84a4772d7a05a5f32a2edf9e63affe6fa75

    SHA512

    dad71c9e11319796780c8019367d9016cf898b447f5af1699f83c22c6960548c4bac636a5655ec68e0e1d3200d739b887fad51c55fb2fc0031b886c2965b5e44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b07b643d5cab10823fe049493dad13c7

    SHA1

    0f8fcfb5bb630dc0b591ab17d287144c2a87d310

    SHA256

    046b8b888dd5767f3ddf7ef1b6c13a54e9d6234ca6e31b2e672d0a4d8e2aa558

    SHA512

    82c5054414ee93080b248db4d19bb1971e2f547bbf9c50ecc46502d582bbe6f9adce043d4c81cc56a490c8459a9e5b20661865c57156b1ae0aefa89e2aaa42b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31db88dadd7ca72f59bf1e3c5aab619a

    SHA1

    4494ffdd9d7c2b383ad57359883c8033f60e9943

    SHA256

    ad4d4563a36d047d34e357ba5245ce215e5bdb912f076b8211f0d2bd8352393f

    SHA512

    48e5b6b5cc9302cfd455dddd74f9d84a3f61333afd27e2e314f3b0feec33db1bcf2494683f18459472049f05112e40ec80da126551b0e98721188064fc93c5c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d1f55b88b9dea2e700207d946bb3137

    SHA1

    d8afd07225d2d994f57b19b31be6617119fb4806

    SHA256

    793094c3e3c23d0fce238290a87e217a1bd5bbdad8448e074f0646e51f0c3b1f

    SHA512

    a6f1f74a240459638fdb9127a21163b6d0bbae3532c6c73e4ccdbd115e5a36696d12698414ef0bd24b60f741094d432f392187d45672706606556f87d07a156d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdba4641905ab83d16325964bc7e7396

    SHA1

    b7a525e489c51cb2514b6cb2d8e497f0f5b87d8b

    SHA256

    700daf1a0e25ac26247002d2f91ee100381f022e807d661de68a412c8e3701e8

    SHA512

    0874ece4dab1c4f2c2766906e86aa6e861995b69e05752eb25272393e21ba05262fac8d90d97acba96ac141587701d6caae29201b1c4c0dd9f9f93f30bf6fdca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5735dbd8954801c1cc587e60985c444

    SHA1

    99867653cf9fefa77aab4b59566538549d129acc

    SHA256

    fbea29d77bdb9bfefe7b2ad2cf16ae6f28bfa0f3c736b21c34be85cea17a49eb

    SHA512

    9e7315483e509b8782bea7c17218c7cae55933ac1900ecdd962b1e9239f1523d7c95daa8ea876999b6bbb16a04649343232b3ed4322299318445394f920529dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7df188ba7f8251b58b517ea12ce6a32

    SHA1

    d7a4c0070a24a6a34cd0113416aa0cfff84abab5

    SHA256

    2f05f35eb6e69a3785aadc282063ccab2cf0ccfd148297a3fc61dc76f32b0b1e

    SHA512

    6cd330b3d5c386f5f360ea685cf5e700c34e8c44715dbf265d1552cf0aebd205ec0c5151ff4bf2dc5f40b8e44f3301f6e588fad7cdc1701e8dbd209019779211

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e1f31d62a12f96c280927c4ed5a69e3

    SHA1

    d86055656df4dac6705689c4c0436c6bf702ca24

    SHA256

    b0a74b959e464e0262cb6aef32cb25c320c5b31632ba13bd7d84113fb660f366

    SHA512

    e44d6d2ccd300d16c9978680cf9ee2363b8925c9e044623150b218807e50adc2e5f3e55246cf621ebfaa2bbc20be6c7328dd03be0a31f093372894bb0abbb182

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8870444e9e016b5f3dc9bf0ce29095d

    SHA1

    02bcf22385a13177daa639423b8eaf757f940e97

    SHA256

    2d0c4480ff3fecefb99654482fa82fc1bb25fbe9482632ad440a00ebda8b4e16

    SHA512

    e2731ee740e34488d572e82ec1baa918c3f7c7e8c19ae8e7406388528b4d3185d4ab37f0d4dc28540946e52e845d6acb80b3d9903c581370a8dfd75b33771805

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9199d4395d20f6c773b414154ecf9feb

    SHA1

    6a2235d7f1219ae7beea819175c3e5ab919250bc

    SHA256

    a9d6617476eb4c1befdcc2b0195d8eb5ea702fed007752e260718453f678388b

    SHA512

    8e88f809a48668f94ece1a7f2a26f83535474376568c6c2498e91ea250485c22441200a336ee1ce5ad064bdb15a0773ff26d0d5f6bccc16a2ed231f40b6e5678

  • C:\Users\Admin\AppData\Local\Temp\Cab85C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar86F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b