Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    23-07-2024 12:15

General

  • Target

    678dbe822c6556c5eceb652cc487f243_JaffaCakes118.html

  • Size

    39KB

  • MD5

    678dbe822c6556c5eceb652cc487f243

  • SHA1

    8481c02a9c04c7e7640a7c2cde03b24f4c284c3d

  • SHA256

    aae775fa0fcab6918e3d6a3f2fd4196b6fd517304e7389f2d084321da98ead59

  • SHA512

    3f10de97fcf4e8cacad89cb530ec79b693d242e8923d910129c632610a573b0401b5956a374fcd4beee2a6a418577eb9c7cf02bfe6d3a2e28cf9a95374be5cb6

  • SSDEEP

    768:GIRIOITIwIgIlKZgNDfIwIGI5I8J7SYIRIOITIwIgIHKZgNDfIwIGI5IvJ7S87/E:GIRIOITIwIgIlKZgNDfIwIGI5I8J7SYL

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\678dbe822c6556c5eceb652cc487f243_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2128
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2592

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a02ec4534b1787ed66865c1fd4d58582

    SHA1

    9b2bfeb6b6a5a0451d1d38e6a45c4f6f8661e5f6

    SHA256

    f702a5d2fd8662af4462af957dd706981771ca53825666a6e00b6340d9fefbd7

    SHA512

    9b34d617090b68f646ea827f1356c6fa8185aa59ca9b8afa8f1ebabb82ee7323398696b39a33981d9f9e91adb8b493f72648da1da2ff8627d588cb12627c1842

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    524d94957445350a28eeba5e0b6aca18

    SHA1

    1d550a0386496626c6f8a2fd098119ef41ddbbcc

    SHA256

    8ed2e619adb3cddbbe11d0d3fd00f8ba8103835ef3620a054b311e06e95a823d

    SHA512

    1d6140f726f4d4f4bae8779c0bc1eaad8a7f4508f913f1789df90c27c85d85b13b9fcf10c68aa48cbe7f6ca3926541a0c9103fbbfde77aac6cd42beef8bd65bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28bd3e738bb6f765d8e2291155133b48

    SHA1

    448bebdfac42783b581617df5f98bb4d49af2c4e

    SHA256

    a01f9fed80583ebc489ac6b49b7d095113d2422367eeb76ed9c9f022311ba82f

    SHA512

    e49a2df5cf1e0c777f260db338c73cd3d303a00ac70329ff40b34b2189529b46ab80da5bc4eb396ccfce295022e2c11a239e36936463f5869b0959d3e92c99c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f20654a6f2abfaa921bdda840bf371b4

    SHA1

    d0e79edde3e22d1c87eebe4dbea4bf0a203bd058

    SHA256

    2339062f97c5d43f2397c096481d005c021eaeb606064ea598faf6d510f65ff1

    SHA512

    c7c2ec9ff3da1f7237ae4b9da6071a4122be47539d78ac5c429b7183be5dbf4c753a879fa28e8b56a386f324fd382bf4b87caab678dd66a7dfcd46522d1a63db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    360d0470d80495bb42fbbde59cde183c

    SHA1

    d91434c5dee3965cf9d2238003184bd90e165d2c

    SHA256

    537d8d7e6408b4ad1f867e8d58c983e2517a59a4b1d1491a6769329288df9a97

    SHA512

    93dc54ed2c8dc8fb1c4bbcccac7774ec8d4c943d5f0e2a66d64217eaa9b02c22961f578fe7a9515a5ec6be7ec14ad603307b03df7c4b967631512538be45a56f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4bd24439b12497e774e22ca53616b3d

    SHA1

    2b368d4d05ac101c37baaebf092db4d844ed3468

    SHA256

    c7658575d6cf8fe5af9c13fe7928b8e8685998228294b07f569dcbd66202046b

    SHA512

    9ada328014aea37e6913b32cab2368f0c45b0322b59269a88ea002e394150603722e6b44451723e9a9fee3030ded790a104720446b8481575a27cbbd990f7106

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae66e996c42eecea40d452c7ff1901a7

    SHA1

    4202ae9befa49b7957d58f409283fb2b5ddeeea8

    SHA256

    43d53d63391cd78bc4bf9c008f43e209096827abafac522950dc2af8e55a28f6

    SHA512

    0e13ec84b54ddcaccaa23f70358934c7aff5f18bf0ad30981a4ef47aeb0034d7555041d0224ccb79f288dac02335035b3af3527c3024d5dfd21ef21a069f67a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    348c742f8f9792f17b9e23af80fbbebf

    SHA1

    6c69d298597473fe4d9f9ecc80c9c9b63182063c

    SHA256

    98d26352b97ff6814a12aa1e248e18926705174019b77ffa559ac2c24869616f

    SHA512

    7a494d1b10a0d986f186340f0880c148ea6d0cff89357a5f14435220a33871fcd5a98483fdbafb5144fc225ee0f0a75c5bef967d27dc9c7064f5c0815219e5b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3dd28fc97ca5bb15680f06aa81f166a0

    SHA1

    3326ffbd49ec17a8342a65301290d9a0162592b5

    SHA256

    fd26dd4d6eae38a2f5ac023c1a8228ec5a0f3ee4a625d190696e1b787005f73f

    SHA512

    2ef55fd0ddbd00f84d083aa97dd20bfd43a74992ac47ab9c08043628d99928fae548ff168e92a8583a2d5f186a14e41157109e381e786c99938cf2152635bed1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04e5f1389928413685a4ef0bb1b9f5d1

    SHA1

    e9c403cb3de2d725573fc4b186bfea6861642fe3

    SHA256

    5c40e34bf68a837c8f7c7022a38f2cfffbaff31591a5aca8d5a597dc2c5b5226

    SHA512

    c831994c7521f2d512496e50398b2c8fde660a0d6051602e215242f17fcc6f268d309d91e0e0ab5b5d1c3c0aa54181430e4784e68682c8accf7bc5c727f63563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fe45677969f081ae05900a27b509613

    SHA1

    b53813bc13fb1bbf68067d7f3894762da04ee943

    SHA256

    0e57deab6d8bee90114384b1275f70a33ebee63bc127b11db5573d0ff38adf34

    SHA512

    68f0dbc5b0a34ab5d15e0ec5b032de5da475e18069545c549c6075f4c4739244b88b22b35650bcbbd9364bf8cc2eb3c9a46af65820401d0037375170c7175eef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    334f3aeebe571de391850e2e45189185

    SHA1

    1401b6e6b99049e453589ee9c5606f9bec9e7035

    SHA256

    362bace7f31ec51e47c96c2b61d9ed01d5f86931c191317883094a5aa28909ed

    SHA512

    0f43c8100837058ba9c3ae2b68d10aba6174bd96c9a6eeeb77fc28570e09e48ccb5304f15414311cca2f285648c4206008692c2932d23e2889ade2244ae4df8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22478ec84aceea261678436ebc9c889a

    SHA1

    868dc997f740bd952c1a192e2c372568254143a4

    SHA256

    0ab58a8820e3a0e1915a32423f9dfc578f4bc233c9c74ef7bf9119d3d0dcb361

    SHA512

    aaf8fc1d0dc83dd03b5d7dce27d9b6a66e9aa9177b1a931d9cb4710cb83d0d772589e9cda1523ae236db370849610e81d916b886baedf18b3eecee5db6c3d4b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5dab41c942e17540497353c3a0bfd5e9

    SHA1

    9c94fec7838c9538abd81f2d54e1819709199fa2

    SHA256

    81f20d625d741bd9fc657b945340b586b6c45435a63bfb1a7fadd3ccd8a073c9

    SHA512

    fe10a0114daa29a48cb1373ffed1bde31e969b4df04b47e9a1fae36978794f4ddcf9f54c9667e65e6fb5a16d6988a7e3d6153fa485dea9cbc6c38affd4b4221a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95afb06e47ee34b69666aa78635cc57b

    SHA1

    df7c1bd222fa9d265bf211ca92ce7dd489df37ee

    SHA256

    9c5ecff52e772d9140af746b6de87fe45e3dc664fa61ee2bef2166f0757b0656

    SHA512

    93e074a62c00c93cc2302d487ebfac513b839d0c32c72cdb2d9143b07878c876acab3ea16a3168101a3ca7f0809175534249107e014e181d9671ce0019f32f41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ede1e6a468914fa87fee4861af5a926c

    SHA1

    d5208e2e15f1a9e9f8930de342dd7b71c825b468

    SHA256

    0083efc042885594a6e7b917997735692412bca2568ee44f084a751fe8c4ed5c

    SHA512

    0957b2d78f8ae8b39374e445e4056d4854e751bd5fcdb6fcfc12488aa2de9011845d67a13c889be9b10cdb9816342715df4a84aad2fd98d8a30cb539d31d057d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3423b13de1ba014a87e5f5bd23da7ad2

    SHA1

    63a50ece13a315b893011f54b5df55bf0ecc42eb

    SHA256

    32b9b6023145e8c2a5170f0d4650f0f52ebbe7edaf1051896aa2407b0c4c16fc

    SHA512

    0cfb6fae469b8bfd6c40e6434185d2ebfb160b014c778da09364ab1950e1d55d9cec85697a6d224c5274583f0fb9fb629e571ad90c69ae7ea07fa143e133a818

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d25c3ee3ab3a75ca3cb1984261e3a25

    SHA1

    939bfa8a084602e6eb569144753ddb1c5da83718

    SHA256

    8b5fb519ec66633e3a5f7c3ce350006a008405976dd395739bf2d656e043556d

    SHA512

    2d2b055391c3498e0a392945d43e1a02560e4054270b58ec18a025ed2ee2a0bb0a835ff654416154c30a33dea7bc535d51d8fc5a1e6ae476f96355f9eca1080a

  • C:\Users\Admin\AppData\Local\Temp\CabE9E3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE9E5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b