Analysis

  • max time kernel
    122s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 22:15

General

  • Target

    4ba263461b834851ae27bdec61093756_JaffaCakes118.html

  • Size

    7KB

  • MD5

    4ba263461b834851ae27bdec61093756

  • SHA1

    64657af69003082cf2eba377bd315f2629bc5763

  • SHA256

    589b4206d7204a24bd0f6219cc20a2df1760e46b54ff3f9a2a43d6c66effb8e7

  • SHA512

    5aa6ae59b2262cb90d5e6bf972d924703ef19e2616d872b68bdd76bf4284f7648c1017634d9ec698282da5cccfbcb34bef26b632ed203b743a4f5a8e6a2b12e6

  • SSDEEP

    96:uzVs+ux7JYLLY1k9o84d12ef7CSTUxzf7CcEZ7ru7f:csz7JYAYS/9b76f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4ba263461b834851ae27bdec61093756_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2732 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2956

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0434a9ef6080dcd001cf9712733f8791

    SHA1

    d6c44abcd5e3523085a730fe767d2ac4c4b34733

    SHA256

    37fbc43bd003541859ae09da8c4c0c42dd3c9b1491ce22ecfda20dd9da333237

    SHA512

    2b7cd4266cd7f08395de81827a42ba42ee39f6d5e71c8ee55ea8aef63c90bc3dda078887ffef061fa95003bdbd3578538228468c1aac1db1e6c9dd96907721b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06b5d7dd384604466aae2827afbe5ed1

    SHA1

    f72d0dc8e5ad8c0288a11fb0276d6ff7d0a53d3d

    SHA256

    20061ac4201bcaace5666d3670640e08f4fe8d2973d282f7848afccee82ac1b4

    SHA512

    2ebea443ac05fba1f58f213b7e06d5a9019f161526617ed12a43598e9da3e3d4cb7b25a6fb22c17574479292682460affe478dd7163493fcfe4ae219ef41dbc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03859f543aa6d2c06f3eb3f0acd5b4b6

    SHA1

    109b00a4912ca2166ad57d321cdc4239496c7492

    SHA256

    e575eb44a507d8fe5b43ea44fa667083b336f2b2edf69f70e40602fa65d5b341

    SHA512

    2d56181f9b18d4faa37a9b16e15251ab97ddeb6dac248da84df7cfc93c8d7c4eed502b217fd60b2440dbcccf34d9c648ae6e1e38f6eeb3a79dcd02416834483c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dc85ef5e8bf60ff17a5fe30c85bebbc

    SHA1

    8fe29dd03a710f7ae83efbd231320c8161414f61

    SHA256

    4898c785889c9ffd1fb7e5173db4b403272b9d12268dbd333cd0678f3fbaf822

    SHA512

    6a389c0e50fa09beff9b9690d3017dc8d56684b6d50dc72f00a4870210bcee4d298437bc5e746837b8d826d3933cd9025ec5ffc3224c452e49488f59dcd255bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e9e76d28f6454322a1a786f4c988c1e

    SHA1

    a294439516848c8c536758f9c814b33c5977ce55

    SHA256

    18c3f3d2934057f6de416137132dc96022f328e7ebf7606130b37cd1b4910bc1

    SHA512

    26549ad61d89671bab4a4c3948413a9db6458ca290407b102c1de3f4dfc06ab15374529669c50596cef0ec0d74d6f663b930c44f7935dd2d4f3fea7ab55665b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b34496a8bde4df65597c178154c8a955

    SHA1

    161e87e6fad5d3c033df943761e9a0ced99c4bdb

    SHA256

    0da45afa5e8b8bb795b2309ff8063e25ab332a4d8ee28d5485753a1b3d61ed78

    SHA512

    e649249553399ddaf8036b8291b48d7078fbc429f60c34434b8cd1bda6b22abc7d837ea488bd516e5ea0d9d662d275ab59c143564d02807dda65843071c5a55b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e896265e635d0dd13c93d1ed6c359fc

    SHA1

    6ca6e675cb0662a8f58382ab514d5e4c2c0c8b55

    SHA256

    ddc63d1f0f554338b2870838fc0df9132a2ebe2d690b897332ad4c54ae141f24

    SHA512

    66b6253a3524a7b99544ffbccb9947568b462fe621e8f67b9ae739778d029e8b1dbe5d19330b47d1bd6941bfc4ed763f438b22292a7a87d6108e304c1bf98577

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc2c96ddab35231dcdc2360585935543

    SHA1

    7bce439a63e8db92a030b30af775e2ab33ee9b18

    SHA256

    e4032ff29b87cedc469ac83cd819f013a2d4645fc109d26f8ea0080e5650197a

    SHA512

    06bbc330d7ae50ee7ab7579564886f6f19cde6254b8206e90d03138cee448b64634f062dc8faad74ed8995e6e1b8c341f919e8d750f74895d3f77808c4610c72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa68a2d073dd25af41b638111d9dae2f

    SHA1

    b24db9d7ffaedce82b801a9a765020cb047efd01

    SHA256

    5f0b4dbd415b7251eefa46e9e27c90534e67c89538a58d91c9e411fb2652b77d

    SHA512

    e02a539f68247b78f24ff493bda60a840d72ce1b976b11da821a8196c4245dcd5d20f4cdd23c71ceda02aac9ed39ca1c79e06d3277ae1574752477c037f7ea03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc5efd5640a115da72d36075ff1192ea

    SHA1

    783faa59c1adf5d454f9c6c65295b0211bdea472

    SHA256

    e3d5754983087ce0922e00ae5ba4f9506e81d66034ce27e2c5e7cd248bfb7b3e

    SHA512

    41ad71a432c61bce2585f0e78355bc8b79fde85f1a2b266f83c8b24de3e81f6943ceb6c42b2d6474e214c7882f24c7e429a7bd5c200763a193a21e9ff23278f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26b6a04ad72bfce5ca853cc94376fc1b

    SHA1

    c6e4153059cbb58984a8226f482a02369dc6c8f1

    SHA256

    2b26e929884cecfc39f46ed5682a464524b7af970f85f211b1ba902b5f6848c7

    SHA512

    2a181d5bf75b16eeefa7a5e5a3da3a3dcee05170252cb773e0d68b93b5a4334a6057a2b1d76cb07fb90ae4b6cfe84171c9553ed1f4d2facd52a4ed365da5734d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed9a27f4f091348f410ccc69a2ff5d4d

    SHA1

    dd62b58460b4658f4249b1f88a66f0d1853d86aa

    SHA256

    b10e26c4906ce9704f8af7fc7e5910cb1b06911de6e565159f0ca695e8c719f9

    SHA512

    7cd16268c37ce754828214f268a34e2b1457b89e20e0aa2d68706d1e20e796ebc7ad8c87f1a712f03f542f0d5a344acf66e9430514e3ed7af2a138a8e358a057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad349faf0846182de3221ca3ad8da744

    SHA1

    f04e4a530951b7ce9beb7c311618fe125ba3cb0e

    SHA256

    ffebb26544a86ac4fa87168aa81d6890f5216b0c99cafc0f9b9cc02b6a05ca66

    SHA512

    11408cbf6a8a0a3878bfe4db4a9d4a5f87431cc99337cc6aaee52af3bd245ef5caedb91070721039ff5b9a70f623b5d8f7ea7afb5ad7b3401681769f245852d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    794057f49575e39871898ee9241f632e

    SHA1

    5f911a91ab16b511a109b8955e56fa5a5a97888c

    SHA256

    9cd843a17c5ac0b4dd016543ba4f61d18ea1c9ab0ed28c9d86f0b387e96789df

    SHA512

    2da8d2c604f5a29ab5860e6cb14e93c3fcd34cd10990d719de2940b289457428144e2b86c4c006da64adec577a9191f692ca209e77ed9fd7604b2bc1224fb0d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2a39cc9e810ee936c1c34f0ade0a197

    SHA1

    d08acaf68f3d3156c0a38652a0a0766da40f0f82

    SHA256

    625f8e79142b9efefc4a87038867af7d9e4625968b8c0e980e371d9594675363

    SHA512

    ce1990d1391e2fa91747805afc084eaece9299345086cdfb5f174e26845eccd2fa88b0223fe686833643d5738bff5039ff64adf10a247bb393e58defd39606b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f46edcb6dc56e675f9071d9cf9f5415

    SHA1

    9f11e0be04522e70617731b1deb5cd56543a73cc

    SHA256

    a37d0d3e54fe8358637f5de6b6d93661e36136e5d46c553ca2550a8dd525aaf1

    SHA512

    82b9050e90c7747f8b97eb3b7df69958646a930402e51d3720114cf05d40bea5f7cc17ad89955a5f156649fdfc558cd0f39d2a701b9b3a2c8566246eb0f94d73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e6255a4055debe6e33e8fd94964ea0d

    SHA1

    c09140dcb64b517ef5a2b165f0f85679bb7f3151

    SHA256

    12357e07c840def975745ef29748a1cd9f3fb1af6f3af3003368c15a785448b8

    SHA512

    a17b708c73d937a2a575acecddeef9f06d8bbe17af4ffc2c0ac9cb7894d1dfbee42d0bcf705764123107b1dbc386216e98e17bd1426456b516d96ea039d68e97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d62a673c688ee6942fb30d30e60c86d1

    SHA1

    5ee2ec6089ac0c9f6953301f28cc6ef91e673f13

    SHA256

    7c0581154a1b98ec1e4c2c4e07f37a09710a98f21e615f4326728e26fae7cc90

    SHA512

    0000d9a6ad1a0bc9b63de15163d1e996054c5b1eb3072282824bde85933be1247988f18e257ce830fb7e21fabf9922b726244506401984b6c4c14314498f9a61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1de734410f8210b11f01149daecae2d2

    SHA1

    30eae849908d8edbaa9fd837d202c8638f934b53

    SHA256

    ed693174bb28af69fd53f4c3987d888ba929d11e18059e403a91475856ae5c4b

    SHA512

    cc0c90feff1c4f524b2d1fb7017afad3caf200d4474fedc9402a0fbc425547537927b4aefdaa5b79d685904fff9b578778c70bf5bc3ad7253065619fdfa633ad

  • C:\Users\Admin\AppData\Local\Temp\Cab7B1A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7BEA.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b