Analysis

  • max time kernel
    140s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 03:17

General

  • Target

    22f7b876682a65d172c71b1426233d29_JaffaCakes118.html

  • Size

    214KB

  • MD5

    22f7b876682a65d172c71b1426233d29

  • SHA1

    6a15117dcd62a62b0f7c4b01bc32e7c013813d06

  • SHA256

    2f7519cda6c3ddee85fbb08a98ddd06fd23422bd8b8d0e87df969bbbb102e595

  • SHA512

    138df3751f91eb8eb2ea3c8cf270ef8fa5ad86a026c712a4a9be6bf6de50d349d7b35306bb07569690c3d6d055beee69da38a519967a7177265cad6aa7349004

  • SSDEEP

    6144:zBVXIIIJ5krCO0/V/8rnOL55ShutTfiVQ5MIsuQyf5bTM+MdBXpKgXpgx4t4cO9a:bDG5krCO0/V/8rnOL55ShutDiwMIsuQF

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\22f7b876682a65d172c71b1426233d29_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    13ad2e7c7ea6d871fc884c4be8390c58

    SHA1

    b7ed38b46ccd4ec625dfc6422e1c1a4d2fced5da

    SHA256

    7bae65328d14e2ce2c8d6faa6afde8a1eb618ba518315ee4e70ee5eab8f1f7b9

    SHA512

    fd1a30c9155a461800ca29d315bf925bde125e4c8685007a97a0a2c4f5e0642116710b581776f1f5b13dea690a0c6c5c396d2a3d5b8a6f9a4b0d7418425b91ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    472B

    MD5

    bd99672c7c6e556e0694600614fe77f3

    SHA1

    70c469cf6e2bd7c77d1e800719e8a44ea877b998

    SHA256

    2dc853657d79be625a5c9acec0b9bebf23554ed1a4cfdac900d261dfc0c2a1ce

    SHA512

    30eede763d6c101dc567e01e2b673aad75233ae91ce6324b31c7b0279e304b979f0c1ebae21cdcba9f441c8737263cb6347ed7f6a49974365f1493dfb0c92580

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_C66311BFC31F329FE5E6FBB46563B719

    Filesize

    472B

    MD5

    ea44005df160df5c3c1e5ffd2fb65d8e

    SHA1

    9f5dc1e2018aba37e7328c3b6709e0742074ac98

    SHA256

    fe058741694e0c279ce6011b2aa76c1a90ec0703433beffd460531098b006423

    SHA512

    3e78483dcd405ad8e6301daf32ca9f0cd1312a17b221e0848c8d7b05419768cedc3e33a170cbcbb2b17eb5a9a9996824a1c975b3454f83df326a64bcbd430370

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    a02d0c91bef8202e053173cea7b57801

    SHA1

    4ea779484bc2b1ec5ff77b43e9f4b46ea3b88fc9

    SHA256

    c962e5a67ff569b8089827de8528ef1adef59b988d4b70ddd94c22eff07d8fce

    SHA512

    e5fb571ebad44785cc8d2913483f1160442c4dfa756ed1d4c8d0a180215376a407510c512917b4e507ce79a07babf15b1edb9c8388ce702aab6ec63a978988eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    dd024a647fe8be9271084f866720824d

    SHA1

    694d582ef17dded6a6adfc0595da1aea8a328ecc

    SHA256

    5c3a2b1905eddf1e019c2834739cf7e29fcb2355ceacae5a64503fd87c9b296d

    SHA512

    5aa95e737581571e14b4a626e57b679ab95995f21d90db2b7d5bc5d4b7a5f17638ee4723d1240e0265c13f223937fefb9cf8e0210f2cd6c2f031f27eb9650bad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8af46de7eace4ab334de30ec12e038f7

    SHA1

    55433b754346ca3cf0844eb4539054f33a1eea68

    SHA256

    70f1af86fa78220799c67ec70b0e3a341b71ef8d363a5054c5853b42cd2a1389

    SHA512

    08d579d7e66804bdbfd9fead27d245e0f974bef9abc9169a7d65bd29d261fa927aab125acde2a59b965def560470b0001c78a2d1347a75d085f25c2f13362351

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8c1414c71db7c2b1ebacd49414325c0

    SHA1

    9c5593c719a3200ec19141db3c44ddab83703263

    SHA256

    679019f30bd2e86b4d89512dcfab1407cbfed5f7477f4727c2acb760ae6f5dbe

    SHA512

    4c2ce9127340f379b0b06c8b082585d46ae198400f4ff0f03846bd8bdbecc941e8e6f6a1c4f0c5bc902a6f275b5fadf4982c03720d6b173323d75e1ea99e0d5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f59372e5f842eea8a758a651664fb0f

    SHA1

    deeb066d43569f99d9ab6b1cc7f151f0e108fc39

    SHA256

    e5131077bd1edd2ae8518340f8b0eef02b1c6084b77a6b20672cbd336eb96da5

    SHA512

    6e422d10bbb066646f03305d4c9a8c9342b2ec5793babe19d8c66d3564516fa464a0f278b6a91eaf2a5ead8498779ef0cdae8ca172115520db68e6ce64f35743

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d62785098a2e7f2a831b21cafab9825

    SHA1

    b3b2811722109b1736c09ad709ea9f44a2fec4f9

    SHA256

    9ca674f394b1573b47e79e55d46f2b9d75bf169ed6f5cab91842861b6fe4eb5d

    SHA512

    64498e46c95dd7f3eec920b4be4a0dd0474e33ae09e47e946a4945f61cc2885dcca44b18bc943e8f7c71441d4e25040c03dd3f48cb7e5855a5537da84a942452

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    216cefd4affddb7779b2f52efecec8b5

    SHA1

    64cfd184e6745d7b40cf60f3a1b02ea8c6305d4f

    SHA256

    5cdcdf2b26f57bed5f55540ee305d6288ad5c96d22c29c5ad1a114b4db5d329d

    SHA512

    230f14bb9b2944e03a56dc122d8a1c87439b06f8ec73d226be7000a2a99d87b28b3460607f0e97c541dec5b52afe512ac3503cd3c9b690ed1bad3c4b9bd718bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77273b6fd6ffd387df0ad932e268e17f

    SHA1

    f6485d144ddb99c6125044d447330a5beda8ccd4

    SHA256

    fe46bfc88014150527da81ff6c6b2f658cb19db2f20c87ee2def4a7448a84a69

    SHA512

    f5e44b57cb417a8a4c16731e7ba7ce1d6a95e61eb8338fb91ae5dc19a66e334baa7ee14b4e9a591a8ca68eb34cf968de3da368d6999cb871d2e5aae38a0f166d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    772163dd32880f0ac41f9c9e2cddc633

    SHA1

    11e6889c662a30a732f24d0de8e96e8e84d6d17a

    SHA256

    0e64e1f9e3b172196dd3ab9cf5a72a1821893440fb4f82d0fb8f52077e52b701

    SHA512

    ad5d508e63f62e4589546697ed16a9ad536398471079b5dbd9bf905cb7976857a22bd1dad9390d1e34736100a6aa695104770655549cc9be70d7cbfe496c0bfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25924dd91a6ca26d7b5838c358e79dd9

    SHA1

    86c37a44f88bdd1e40d7030fdc4671d2cc29229a

    SHA256

    9c48f1f4357445e76675257a7ddc844466d593af2dfe3c21179c8c2c0d71dc3d

    SHA512

    498feea5de8760c7162c7337fe7f98a0633abbc58074752fb2b25116eab696b992b82c237cd66f4e55990c0f2dce7ad55795400fbc1968607817f73d1558300b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0f65ee2c638faa5c349861d86de5f8c

    SHA1

    9878a451b2274fff3189ec07089dcf29a47ad15e

    SHA256

    e046d9e92e38b4145d791b0bce7704a8e5d385d3bbefc0387713b33e3015f05b

    SHA512

    534d36eee4015f545ea8882151f76ced96098d2675176a0e9e1c488aa9e2bb1b35f2c4f5cbc46b71f12a1e3fb7895d33f031f9b7da71b2bfa75785fee405d66c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce67315fb46b3fe4b65f837339dfe8ed

    SHA1

    83cfba7010040ff3f5cbf0d8bfa7cdabc65f6b31

    SHA256

    7720d685a150b36e91f7141f34c7fd898ab434cff2076473a26a42f0d050710b

    SHA512

    7f7079af5c4fd4910e8acfbc548e724dbd0e8e5a78848390af93de0105eda944f2b3d4677929a84a3a3826936e76d67d9ea377601166c151575bde5f63fc3d7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55175d3e4476284e1b33f05c6df4e04e

    SHA1

    dfe79127c2beb4c1d63e388da03a6c453c8a19c9

    SHA256

    e256e5530ffa84a7468f7bd33f9c6314a3af863cd682564a386ce99775a31a31

    SHA512

    ac33cb7b951b964f3eff2441704e58b8bb6919219f7bb23876fee75369cdb99a87abe4a88754e6e2e3a862c003d4c71f17ad76b2bbf88d8bb5032c2751cf4283

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    406B

    MD5

    8590143ab4db50b146119430c86a7915

    SHA1

    882e9e94ca62efc6becb92da7ee087c5339525d2

    SHA256

    aafbf0d1829a6a4ede61c02346f24e5a34be461ce792b48a13af917e3aa836a1

    SHA512

    207f64fc29decad2155ad7eedaba19539ece8693e2afc6ee2d8d680ecfc10deb26e6ca776cba3f23ff25084bfcadc153f4d1c5c89db589b416112d0c2cd2ffca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    3c360e19c6445d4d499bae35780a264e

    SHA1

    f32906e8ceb51d90e690bd74f85de24ac660ef03

    SHA256

    463cd58212863a6b51aaa219d742927031a6ac13197ee9e078a5f8ca6fea227a

    SHA512

    04e4239f28ae685dbc1c392111494f80a41afbb7e22a4aa5709511989bda2b657fdfd656337e88ca2bc73daae8676cc8b2c3ced4f0656daa0192846ec95a3b29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    a276de74a5a8c2d66c8475810a038bca

    SHA1

    cce10aa55f784c0317ac9f40fadddfa67f043f1a

    SHA256

    1e305dc349e774f053a411bfa6da7a06b33388daee587af2c5cc0e947cee316e

    SHA512

    caa6352be5340a068e403ab037e087a5c7e2173c948c90307edf4b7deaec4962276a877eb0d22499a7472d13f159b821ea9a36bad6270e9a51265c8e3cba0b93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    29662e09379df7c9e48fb7d6d9faa785

    SHA1

    73be4ab7305383f0234a087a14980472f6c8f320

    SHA256

    ff36d13dc68f293a721673adee31c5ccbf0692ba373956b77e3dd2ebd8a42298

    SHA512

    d0890a16dda63c0c2dfffc640fd195a7821d6dc8da39440979407178af37c060a7c18a10f8391edc2b9f8183a89d746819ea4cca34fe11225980f07b9cc4d1fe

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UA1HZF3D\PJNE8EES.js

    Filesize

    157B

    MD5

    67e216a27dda24bdcb086c2385b0cb99

    SHA1

    17141c80f5d32bec3691c5ab24741d8b7dd5f0c6

    SHA256

    9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7

    SHA512

    802319543dc64cb011bc2684004e878a842b73aa55e4da1141ccb8650cbf42fabbf2b46c730760bbfcc7a140e11700244b9f5da78bafe9fca7ec7825c12b4255

  • C:\Users\Admin\AppData\Local\Temp\Cab2667.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2389.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar2517.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a