Analysis

  • max time kernel
    142s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 00:22

General

  • Target

    476d08df88ab46b26c46f2d3774c6729_JaffaCakes118.html

  • Size

    58KB

  • MD5

    476d08df88ab46b26c46f2d3774c6729

  • SHA1

    3c6183e842392ead8a3ff4e336635cd7f3ed6944

  • SHA256

    16bba71456d20f57dcb121d3109260d0c45510a0f0b1581ca8ccf93190ee20ae

  • SHA512

    5889d54afdb075de7d1c6ea1e752e7d7e91e3eaff439e6f45496de121cad82b9a9a947f7636c79a4c1f62c3ec7de79182120d42b3c8d9bd31534dce5edeb935a

  • SSDEEP

    1536:gQZBCCOdv0IxCZzSzfrfAf1TfSfmfRMf2frf9fFfTfpfufnfQf+fDfdfcfrfafyL:gk2J0Ix3jId6u5M+TlNrRWfIGLFkTyaL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\476d08df88ab46b26c46f2d3774c6729_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1760
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1760 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1616

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e580cd6d520bb1c7dfbe93e3704bbde5

          SHA1

          46db1987bec5705726ab87c908f812b588d14632

          SHA256

          ba79b5c01643b4c06eb3011ed5321af322dc9559eb8974abf886f580d738e3e6

          SHA512

          0ee40882a12508d5a7264f8cc48708745db6a73af49d56c89556aea192fb7f01192811371272467a552128c6a9bf94dd15d154bd72b99fdcef423e4f244223ab

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f37cdb9f1c16d5d6431bc2b614f84874

          SHA1

          fc33334ae8dbb6da419be6a13a840a9601e80e86

          SHA256

          838e811bf23b6ad77802be0290e6809702e046840cbecad0b5d13925f542969c

          SHA512

          12fefe7de05578f286bb613b346c331f81352c3e7c17605851a66652f4199c7beecdad5e48de113b9f31c306ab768bb72283bce0f23b3421ec23c2474cd77514

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0fb899636eca9e37bf78ee56b7ec424b

          SHA1

          1e694af510298ef5a52d3cad59db2adea229549e

          SHA256

          da18a8f02db612c40f5233639caed9a08b40c86778b085fcdd32da58ee26c4fb

          SHA512

          b836f9032a6e60cec5fdabcca279c356666475a9cdf497dcc6da5aef8c00113d2635934dfc4f98ee3ab5e787569b1da10a37c7c92ade997ab840203aaf5cabe8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          394cc164747747f6553679b4b596949b

          SHA1

          fde5b15c8bc1d0d891d83823d351b9359dcd7176

          SHA256

          0397e121dc20d9ef1037438df8ae8989c4b9b6812188cfd12b2db2d1841c5670

          SHA512

          f84056d6b1515d6c77ed5da1767305b6af86514ed3ff95587c62173e6af07b2c0c4537b08c1c9c48a07c60564bfbd03a349c7401ed57b13b3128e841914a4b14

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f0b3d67e68b19eb2ac7c2c76db464dfe

          SHA1

          393187de68602f9307e7bda4e0ac1021ce503df1

          SHA256

          9ecee23ec56057a7f6f172a1fb3188063f9b67a2979c99842ed8d2c98e60927e

          SHA512

          e925a5e3e04a4d60fa89cd39b491201daec82341fdf6c6a619398c282e6699e2660b88e72453ad5df0f62ecac6a98c8417da1c751552e4005427abcf509df03b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3372069c897451e1aefc5e62bc33aca3

          SHA1

          13924c7b34d10022e11cf61d7f11c4891dfa1efc

          SHA256

          f3c3bbe8342dd5bb36504f03b9ec42d847f80b76f68d16c427830591283f9e75

          SHA512

          382649abefd247d6ae28d08574c2f1c0f63eb7549d8b09819f534df1149f72cd7d919f5067fd02846768483eef79772f1ba5688f77d53c57fa42d65ce2face63

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2d415802116cf9ae6741e6ca2a9efe13

          SHA1

          acf3e78417b8d728a9247e99e03f2a90260992fb

          SHA256

          e2526bedad1f00707da7fe1e9dc7c84a880accec46141cd709ce529b9bbc7ad5

          SHA512

          618fe5be55b845f6bf2d2f4ca2fc1764874621febb9ebb1bba4ecd6be2917195b99277d843d84b55112dac7346333dfffc4b1b631644dbef6d0f2a5d7de713fa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          05e40da622434bcf3b0d2fdbc976bd7f

          SHA1

          2e8cdc5507c6dc166e2d2a85c15f74fc0c2860c7

          SHA256

          c46691e6727d1cbe7c7fec5b13b7037a970f712f550d2df59e91bd11c1cc567f

          SHA512

          029cd9399471ff3c43c16b7f7a122cdab65b429c4f21334912b4d7c15a6d28254b755ab16c9d898717a2dc0c2d438d9abc37f72eec787505763f2bd2592b3069

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3052d22ee27727e583ec7d6a003e2ab1

          SHA1

          36f6d3a15c143ce88795c2dd55ce5499c05e79cc

          SHA256

          90c170bfc030955e2f065fc07662bbbf06d3c67484f2a3a297e1a379e1509b7f

          SHA512

          65b530ce9e64f8020ec24fb0038625240587b5bf74f16de716ccc35f406ccb0f7bf00faba145d005015ae1f381396a0ff74e62f392e405e86364c6052fe69340

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          61ee463dfb03de166633757b288a5748

          SHA1

          1b92bdf78997a30838821ce63886b5623e522148

          SHA256

          2fafb96280ff75ff643fd69bcae8d13733beb988ffa55ec7883c9c1214878436

          SHA512

          170bb8dde11b97a901fb6cdd534629d4dc22e5db69fd9cb411fa90cadbec12ab41ff49accc5e5497005526ee29d381e4e1c2472e151f3ad606afefc239273124

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6a523ec6be1a3ac7411f33720c97c1f4

          SHA1

          225db4298518ed485b12cf8fa2512c6834956b5f

          SHA256

          a81757f25a5ef7a4f4450eb494c5a9994856d58a4822e117f7b95584c1f65595

          SHA512

          b8f7165228fa5ae3b63ed5da59284e0c8698cb8cc234644d0b46044f8598c3fafd6a18eb6b507e6bf21b8031856da336991586bde8a370a88984464a21d8a9cf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2caeb7b63f123b03a10d6eefd096bc56

          SHA1

          429500f66f6815ebff782f6105a8c68ee53c685a

          SHA256

          be7bf4cbf7bad568f0320f695acf16f350f07c2ad478c97fe3125f698baba87f

          SHA512

          177742c0c4bb97c0156a407d266872c8b2dda163b627a530504f3f6684a413140fc3ce8f96a856cdd6ab0a9ca58f582b7da476d14d7f1ab020d1a92f84acbde2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9cc9d609d903cd880ff340c64fc61bb1

          SHA1

          c3f007d37d5fd7e41f8a42e6c8e77e94df382731

          SHA256

          7e6a52186270624b01108df22b84dc0b7a09f3c6ea3e49ef8818b5874f38af4b

          SHA512

          3b12e5ef1d28149319343b410e2e1dfd8d452b6e053150173855aa63cc68160c779f7fc7832779751a1da17567b18e826971d3efa6f855d8296f238383a3ef8b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b16cf398e0e5f6da8617cf48aa407d01

          SHA1

          4fcd7e7426abbf706b9cd164a17e80fd9f10d211

          SHA256

          960f7b40bfd98a667dae6b822c057eee6cf582908db9220ed3854d87d767b7e4

          SHA512

          7658ab3f3f7655439d1b845792d488d3597b1970681ebdf414a98883d4f961cf701b8fcdf28331d96acd58b6fd530d67deb1fa961d8823678ccfac6c9ff2710a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1f5548247a5ad3ac27e7fc729a796385

          SHA1

          8d2292519598a733e2de793f136bcb3ce2bc0d3f

          SHA256

          3bf42d5d63a664ca9819a73d76a1d175cd7ed00d96eab7d161302ab88dddae6d

          SHA512

          aa9a0727c2aad1804f83da89027c3b43fe791f0e10bffdccc83d449f985f8cdd07507410d0a5bed1675f85cba0132045360e7cd0bd6b6812d38076953b4a0e0e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          228bb8d857cfb68a466313cb70541314

          SHA1

          29c703648fb517fa33d6dcc23021a3b209983bd2

          SHA256

          58b44b0b6bf906176438cc92fe7ca681857b048b2862cb0093bc705124921e7c

          SHA512

          1b2ff0cfaa60b683e24975609cc31dcfc28f31be91e158d51a43b3a276189c047cc09d8ca91ba7e6682007d4fcaa689fef30104a7242e4c54202ff865d628558

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bbf5a1c354e9fd15136383ba2d1c36ca

          SHA1

          03741199d797315289206b0bdc24636f24d1d3aa

          SHA256

          ea7832d0e6fa097ed6c43b6d7a6cd6172b6572697d13471544d532ef0eeb5391

          SHA512

          e7996ddce9cdbbf2b7c05dda1eea7b98b00c3f91c6a3cf59e2888131c751a7893ca200cd6064edd1d36ee7983d0e10edde8c7517f74facbda1c86d4d34930c54

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          575c7bc435994b1584a82cc5d78c369a

          SHA1

          3f44dcdd5119526f6434f931d2dfd9b24d3d74f0

          SHA256

          75a70bea8ff8d62837b9d96dcd1f9fd84eab1d65f4301d4da5aa23430d0f51f0

          SHA512

          3c3b0679b4a43b1e0c9c51d9bece2539e649a4a039c487e9b41b7f637274d01d7c672bad3a50823ebb1c86f62a24c78604b2e93df853493946160c3403ca3072

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0b970954c5996990ca3c28e228e79f19

          SHA1

          3136191a55f2242cd3e7b86289c7692ff8ba90a7

          SHA256

          9b48b4593191cdcc941cf940f04c47ff68e149ae989637c02185ce4524d88525

          SHA512

          836a2a0169994e0b9e501e12d6c7cc9c973f526adaa06fe28db9f686e6fa101a045c7eddf83aae51130025469cb622d6ec64746649a82fe4aa066b9214654166

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d5a33659da99d45157437297105a0b22

          SHA1

          bbf5ace80f00d2ce6c49add42e7725876be41cb4

          SHA256

          0e42261e9f6045f22a95612ed09d7c1e2c965a077a3dc6be9b5dbf6abce9dfee

          SHA512

          325b31fd16f509b22ab226e4dae87880eb64a7b49399bf1da32d75e4d4981ef03fccf72fe01f3649009a7450b933c4a243fa273658d09143d8968ddcc1b3e592

        • C:\Users\Admin\AppData\Local\Temp\Cab194E.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar194D.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b