Analysis

  • max time kernel
    119s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 03:42

General

  • Target

    328ad8ee20ee2a672435d871917c23f4_JaffaCakes118.html

  • Size

    68KB

  • MD5

    328ad8ee20ee2a672435d871917c23f4

  • SHA1

    d654e51d56504fe29896568d7479a9ba46a2f526

  • SHA256

    44adaa99ee5fe6bf6735ceaeb200c6e30d1168b65732f6a30692153b295141d5

  • SHA512

    fa4ccdd75b1220d91ae1abbeb3c29ccd7f2958cc4acde6b76e3ac8946c94b3d1369a549aa113b5b64110cb46e9c216d98892db94c872431260e4ef0a8902ad77

  • SSDEEP

    1536:nuSW1ClSWQIaAktlh91x1H2LzxDVpjmfHNRZN/Yke2seaWeWneyqePqFjZgo5aLg:JW1CAWox1H2LzxDVpjmfHNRZN/gPAfa5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\328ad8ee20ee2a672435d871917c23f4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2300
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2300 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    4016cf313e254f34ca401dcffc84c5b6

    SHA1

    3b71c0bfe8400880bdc91574b9c02535b222efc0

    SHA256

    14ed6e4b3e7f617cb11db44e8248362f97597dea5172e9626ab7853eae5df8b8

    SHA512

    7afbfd27234de939bfdaf7254e40bfb43d6d53c2dce50344394cdcb3c8bf651394a34d6faddcfbe3d9fadf7db036734736e1228bcb68f6751457041448741564

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b49dc31988089ad898fc0fa3ed19deb8

    SHA1

    34ef6ff0cb6ddfb138581673f5a1c0f232a8cdf6

    SHA256

    e79bff8c071392626990275d34c95759fa4f8ba82c49f3d4a9a18d55ea0e6bb6

    SHA512

    3274b2ca952916b718e294480f6f1715852f332e874e9d02563df7d3ee9ce06fe229e16c5aa65f1982fb3d19ac1ce032c63ce0e20aa4836fe3957940b5388d27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e956570956243d2eabaf46e0f65f2c7

    SHA1

    58539125db8aa4e076d42c5a385387dcac998c54

    SHA256

    afd92a49cd84e2e46e43f25cddeaef07cc9f17d89ef1fd2af9fb43779cf8c7b3

    SHA512

    05c9347124c62fe4e266814f44b0295ac606832ac7f255c66faf5e9e7d30bac96c55715b767a3de49731389d5f5c552c37daa5f8071e5e14edef3233732be101

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d3a63aabc5c9812fc3a545e27b25a8b

    SHA1

    633cfce98cf2e8d1ffae3d771692e5c231cac9ef

    SHA256

    8502c7ee269783e771ffd5bfb64ca2699d278e073307fab961087d1e5c34b872

    SHA512

    a926bceb7f47bbfd007e5ecfbc88bae5c4a7628cb3f55a3addabd6af1ec0a609ac7509786d11df55cca4ce4f897c3d36b836f262cb4aeed5994a9621e4a109f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    472806e92cfc7d8d6784d973dceb1a3d

    SHA1

    a4de71e14fef345b81e3e2886feea95c34d99b7e

    SHA256

    d463e0e8dfbfd16b4c795d37c5d482a56b18c8600256d98134aa67f317312a38

    SHA512

    ad113f227721567ef92cdbd93eb05df6ef3587f8fe6744b81f2eed5742c45c59ca513941f004dec92fee42029e4f327a23f80bb69d8e90ca559b49dadcff3b0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44737ee064778ec1be5efa709876fa9f

    SHA1

    fdc2bc67775befff2f1a8b32cdfc3d9dd85dfbb5

    SHA256

    419d2e80c8288a4be8f38e35fe54ed080741b05313dd8efe2a480bdccf6ccd77

    SHA512

    c67ff16d278382d975301451bfc87164e3cc1c53a792b29050bf69968e0e697acca76128461657efad1fad196c431f0cbd29bfc9af499046117b5a76b73b8fcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5b79d347177968698b739ed418da7b9

    SHA1

    4ae41c162d160f1d1e88ef1da92f95aefa7f88b6

    SHA256

    997b7f7ef7071984f97abb9d7fd6f5ba5a7f0dc3e91d229d2c57839656015bf4

    SHA512

    cc8d853eb50171e3007cc8d8ba2b320424b1659db27432cc963aad650594e57c7911434f0c26ca9be9862cbdc77f56ec80c8bb53f5e5fb53583e5932c65383f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67c71a1d5a13409499fb8f43d3aa9fc7

    SHA1

    6cda5886033b37a21a6917dcc9549c763c9ca94b

    SHA256

    cc47964fadd7a94b8d52e90cca7128eab79dc853ec964e02e675a5ead7916dcc

    SHA512

    58e5b25d2da378c22e3ef267911569fef1584c34e796a050a42a4aca0c81674b5e0b0745f269094f4bc9a2a1ee0c7fc983a69da68f95caaf70aeeb5c8d43f29b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9451972f6dc6fa823ed9d87429f1c2a

    SHA1

    eb5d7bf88dfae856bdabfe6c902e1a15c29c2794

    SHA256

    db70cd87628c345c876e353ba99c330cf2e492c314a61decb503422bbde804f1

    SHA512

    0c6a7ece258a537da62bb3e22f6d0074a185540f8e5542550ecd2d7c2dc1597b1ae0d47f598d1c5a43a7bdb49d2b89bdbfa0b0b849ff622f521510dd0f46bc87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f102f592f270723772e17ebaa6c08fb

    SHA1

    1d4bb92298539b3b436dbe912c4f736ba818d062

    SHA256

    a58267c5acac67a680d07110a73b7e75976def522aa3c2384fa2c2da83a7048e

    SHA512

    9777a80b9b48b3a9dfc80f867eb75d579a3cf8a038b50eecb3c330c6d2f7c70e264fef9a9cb3da693e681b794338ffd0fe4c6be75ca5f20d15bda4e6f3c9f8f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b6938d366d6498fff5c609eab0a1c3d

    SHA1

    14698c730066268138029a38443ef2fd37961483

    SHA256

    53832d1e96e96dbfdf15f0564629cac264a6741cf2c329ce4d32118a60b61c71

    SHA512

    c515967b51df2bbf09f29bac09ec6027afdfb92281ccb8dbff6e73c5f7fded435a3911a17858ffc7f4bd1467dcaadee8273b570700a3001a785aa71709568263

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edb0b691b51cc22e50b92de23a76f0c8

    SHA1

    423439c63b3b8a0c337da449db1214bad2a8e6e9

    SHA256

    f9259dd0fcf9e884345e2a6879462efec51af056279882738f20932bde9c3e91

    SHA512

    fc7abd854e29937e610a8c78e18e89078f7c9f3a6341a654928ea6d6e185d04defeaf4163140f7a259aa47eb1d0daa8bdae781a85a521e0a77b86219bd81fbac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68ec417ef4114874da49a3bd3cc55ca9

    SHA1

    c240e990c7ba87a2a0ddac5f99b69d7eea4a41db

    SHA256

    edc40d15b30317293f1df3b42558deb0b6670d35e85ead100485d2af18ad5023

    SHA512

    95431bade2b41225ba73ea034c2a3d95c8a404b74fe7591802676540e04f7fa21b7d36b0c9e97d3e06bf66a186892b2d611bead281951789e99397448ad950a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f78fb5e986d6834ac1a29ecde9bb6f7

    SHA1

    471061c4dc25cde713fdc2da69f7013c7b508b86

    SHA256

    3f44f2edff6f9d961f66b7e53de23019fc4bd033cf6ccf8757b797c8f82b0908

    SHA512

    a43a9e7b8e49f89d96126591df94988d76dbb6818e0a3d428bd4cbf5780450a2d940b811ded34cda30987dc77916607374361f0cd3dd5ed4218ae1a557f68365

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58d069711a5337270a4cb7b2e9e1eef4

    SHA1

    abaecd5685ce9ff5b9c9fa022047e47ace932720

    SHA256

    5f40076c9698f843e73f10fa76bed6fef590e6ba8d78b7371fbab7eb968680cc

    SHA512

    c7ce738f49bfa2b7499c4bf77084790cf92d46c453c475fb99dfdf36dec20b2e70e9832c3b7c748bb8200ebf3a33179db832b07c50f847ca5b48ac67d1cc5ea7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6336214c5fcb6fcaeb0da2abcf7afca

    SHA1

    414d6b0b522f8747f41d94cce8e1b3a4a458f321

    SHA256

    1256dced262124faf111e95b811d6f941f7f3f171c0fab182dcd59b435050cfe

    SHA512

    b0dd93e18e2063c8e4d027aa1c48c3b7fe201be6a2d18bb142e068b00b171181aeb4c50aca4ddfffcd2ef2b09aaed970d865f56213d0f6b61d9121269fd3bef8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e98b8534d4ff05ac636960ca99ef3735

    SHA1

    ff48c21edfb99952cea47f2caae98fbbe624d683

    SHA256

    f7bca3c3d84db0810f3e374ac2bc4adca3e5a349148d84a5272d231b73c6314b

    SHA512

    31af897f27404712d271e977d9b59fa55ff69f3434a9cf32124b111692309931ff709b8b931de128e13bc554b35cf13b4adc345fdab37288206507522c212318

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e80fe4d692041bcd4da520173dcdd09

    SHA1

    2f274521325bf26c682504521d74ecafd69e67dd

    SHA256

    7a964ea376f9553b807a13fcafc7c73a06c4d562648072be41f5dc13fd2956e8

    SHA512

    1f685ddb771a9ad7cbbb3f01b344c5cb536699838f539bfce627631e691f8e1160663187af30d7fc32af450b317988499ebbe4991e52094a35ed20fce10c8489

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de12ad62ecc71795bb5d74b909dd9ec9

    SHA1

    e5340ce386b8c75963a45c314a79fb0ad69d9e60

    SHA256

    0244c206ec72eb5d69525f181afc21f18f1945092d168d1ab2b01a3d63b7ce37

    SHA512

    772021bfd5fdfba9915c8e72dbb5580c0e8cb0f9c87d54591e4a2dafd8b88217fd0fe35270d0d5fcd5b943b0c4be4330473ba473457b96ad210e38d13780aa5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    102be800af03e3a4997e16ce2911b2e9

    SHA1

    d0692156fdd54071a60962c86f4a39aefd34d015

    SHA256

    fb37152bd9544d76e32c460e8cd03289ab2817d346e68021a897935c3bec3e0e

    SHA512

    4dfdfb139a75a7908bc20c49a2a2884234a6a56982dc2bbf62f9e88ab4596c849fb03a02d6a4f845ee8040a0a9a6c5d03563b67f415972b18b6149636b06d963

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f01843d49af48fd8b720fd187e0dfd3

    SHA1

    c6593ad8241a23e26b2aa706a1decd0f32ae2493

    SHA256

    fcab9436aecca2532cc52e283430e5657768287e66791c209495d7d6bc3cbf60

    SHA512

    d47c0c7d1aa7f779bc1a09ec927b65736d67a2304ca56af73aeae28064243dcfd7d08b9a9e7fa293b87ba6f296ed688ef4d78e400403b5feb3bd6bda36639d01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e90d02d81af25dbaa2cbfcb63129d8f4

    SHA1

    c06f153255d4d00754f6505a329c61df27ceadc0

    SHA256

    2c08389f8d4fe1fbe0c730d105b7b276e9d2ca7b54d544b0c9749ebaf6dfd1e1

    SHA512

    55433d8c2f0be79299b694adcf6221c3c8829aefa5e38bce08f4095242bc9634734efc496d830f3edfda46fbfc0d116deb75447910c71c061ee55cd190f8d487

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b196df8b4be65b84e2d94e39a3d67b55

    SHA1

    8e3b01cdc4b829dca3a9c5c32e1a27aaedaa3a60

    SHA256

    639b0911b3124f95500165567425968528de9b99c8e94584bb627a1a25b4b08a

    SHA512

    908010d05c04d75a3b1d6b51c4207baac57942dc5f6ae65cfebc273490259a5b2746ec6c1ac26515ce4b7ac3e0ffd98219e4d1a7ea42a0d9c5e69188d34722e3

  • C:\Users\Admin\AppData\Local\Temp\CabBD0A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabBDD8.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarBD0C.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarBE0C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a