Analysis

  • max time kernel
    121s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 13:34

General

  • Target

    3a5e18831ee8083d7f90228602f3ee39_JaffaCakes118.html

  • Size

    460KB

  • MD5

    3a5e18831ee8083d7f90228602f3ee39

  • SHA1

    e2f5784abb199c23f1053134650638be5c2136bb

  • SHA256

    80b19e0db90f9c5a193fe9e34a3e92f646e5ac9c6b39f3c17f7098aa5fd78ced

  • SHA512

    b6888462ad1aeaa9c684abd793ef10c24c987e9bbed0d4d264598c14432c4871c1cf5fb5fd27fe5f49f6bdd40b2ce38e661e1ced60b8bd72df340d63215eaf08

  • SSDEEP

    6144:SxsMYod+X3oI+YjsMYod+X3oI+YXsMYod+X3oI+YLsMYod+X3oI+YQ:G5d+X395d+X3p5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3a5e18831ee8083d7f90228602f3ee39_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2876

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    dd1bd603fcca0c15dae4ad7c42046619

    SHA1

    88cb8f951639cdc152489dd04e2499669c22edcf

    SHA256

    68db3a5ce4246f0a1adeb14e1bbc10e21b72ff202cded0f010f238486817a2c2

    SHA512

    9ef70feba7be684e28f017959477e878a8c43a528315f256d392aab39cac15f820bbbdfd018aafd97a346175e348086effb9847afda937daf08644fdd71f4615

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02e3952c703c2c8e3be71c9c15fbff4a

    SHA1

    6cc3e0c56cdc1a77d7cb90422859596b9a42d224

    SHA256

    0974804f1102e204e014fa37aa79a93470099f45f8d2f4f2503df60602c8d033

    SHA512

    df89f0d6e09a9bf23a41178e54700e71c64b4d8167fac8c269cbb6cf61b32258e35cca2d0c18d2d084152132b863f827f699e025b08c9734239abff9a1eda0df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c4f7df7bb367fbf180cb1fa064f0584

    SHA1

    d9927d9ea6f98adc78ad6134b24a516d685135ba

    SHA256

    c3e7473fd28719680c66951c9c5d8cad2c3da2bb32400ee3ad40efbb9c199a2e

    SHA512

    1e112dc9cd33635141baea0b7bc8881323ba7c05c4d8fde870f472cf37624b67a6bd381c71d2f229e4c47a8c66c7ac5406fa1cb4b7b078b1def1acfe147a951a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8681f16ccce9dc3d0448f99ad3176334

    SHA1

    0692db52b280440f1ff1a6f90bad2f0a21c19832

    SHA256

    8cb4749069cd270d2987d06ad700ceeea82aa2a174fde1a39635549b66f962de

    SHA512

    ea113d1768313d4e6904f283f752c114059bf082104024c2cdadd6d1665a77933d516238091bff1983499cc12c5324f5004317b490c6ee3b46527c000dc17a8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1bd5932a916ec78a9bd3ae45928ee313

    SHA1

    74ad35ae3ba0417bf8192e48b2d34a19552c7482

    SHA256

    201cdd8954f559745a1232c2da8d2740717e4bf9eae04ffbb1551094ed685f15

    SHA512

    295c09a601e3cfc95c726699cc3855f082e45a2b30e0d73cbf7635822eb6d2408f1dcb0b075c09b5fc5ed28e1b38ca058f8df9a72012bd30f08abbf3f7ee6f9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef0fbea1f2eb6614d3ea2591816b5854

    SHA1

    6b3fe53da49a23ce3912bf911e64207e60f14a61

    SHA256

    bcbc15b445973b0c411076acc70f4e67fbc5140207335999ede27b3d70004dfb

    SHA512

    354def526543a5883abd1fa6b728150cb944a7caa8819bf0ab2c9ecc3e065b188ae91f1e99a9ea00b90b6d6bcbd598047906827d859da8699f9276b4a5d83d2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c6c9421aef72050a76c7113f4330c9b

    SHA1

    d9ab9444cd4b13b9b97475988ebb4c404a2cc952

    SHA256

    ffee9e0938a20cc5bee7dd65ad2b68841f8fefa73712b9d93f3e6cee4e26922b

    SHA512

    d0f688ba23e99cf9212c88ccc2ae207644f0784d93ea1fd27c8b5522d3f7810cce7cdba07f54ba1c170b3b9df223498229bef412e3419cdd1b10102319874528

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3e5b8919247191a873b30ec7668c8b0

    SHA1

    33edd9621499cd99c31ce629bad7c388c35f5f01

    SHA256

    088623af162d867e7b0bd307442f637b4c88b1d8c7e7818939fbbc1bcb3b7d49

    SHA512

    9b76c110f2cefe2f6909b954f598dd092cba6e0d89c7ce7e06a2957c6aecefc2d7cf8e2a71ca69b14a2f394f4ab0f240b743753aa4f648ae0ff4bd2cc7bb80be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e98712dc5009fa107b07ed67eb145f6a

    SHA1

    c1299cbe034ed7b65a29ff0c6443c2dec7e255ea

    SHA256

    3149606ea371c12001a3544d9ad045c9fdf7e95bff13fabbf71e0f1d7f0c76ac

    SHA512

    0ffc6234ed7dca561c7ef031dccb93a4a2f8cec6b4528cbc23f2a74d5b418304a2aec9bc88df6acfd2c56fe40452c50b2233d3cc988962e8f1144ddcb38ee560

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3062496019ac5d61aa0b525b0a4244a0

    SHA1

    3c442b9380f02b62a08cfbad5949414c7203a922

    SHA256

    c1ef697314dda4e65a18f7cea4876d024b99348dc7181b36390d0958a4c16eba

    SHA512

    50fd94daccadb7d78978c0678de01a5d265ac32cd262554f38813b99e84d6332f758f05ca8ad2934bfa2ef5461e79f2239715a93a3a7764dc7c467e217b11085

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    36e5a9f371d3c7b76a35b99bddff9241

    SHA1

    58105c315a622f6375cd0524eb77210cc6e9d589

    SHA256

    77537e354e28a0b846c002d31397384a8aa967a9f54687d380f46f1cb7f62d85

    SHA512

    e25225b0e7102e039149c20f50b114e790ce55a0978eaf6f3e85441f9b667463e522130785a87ee8a27d7f279a5c4b6e97c25a494ec11a3a54548059a0e2a41b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26d88c28105893044ee2152671af55e5

    SHA1

    f89ce330903dfcbd1ee63fc151f8187ae10fb5c5

    SHA256

    106a51c7797f6ea42a2a0aa6128254bdf3ce45d64984cbee6e4fa383f2a6cbdf

    SHA512

    3c5710f4dd9a3c85f69437f12f9405b973cff183d87bbcefd4f19d9a1ae0caa1f100102ee7c71e04623b7f38fe183c0dfa8e4ab724685bdf1a1fdef6119d4da9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ecbb5742b8a16c1dc2380d811c5872f8

    SHA1

    a3808469a1ce7a894440a9a66363ce0afce07a9d

    SHA256

    533c19d0b27c58077c8e74ee93c8a7593f106c21364eae497635349b18970864

    SHA512

    fa7aed763d5af3cddf2611eace1875fd84e151d8a387e1f8d255ad40ce53cbc8e9750ce79cce1fbb60a00da74b48e4035e6d7b848d4ab454ac6378c9c235d880

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    388a363c5765c18b2f55febf28940798

    SHA1

    f92e55f85e59b1759183e4d4a937fdf616ddb415

    SHA256

    ade9a5c5efb283b1bf163728a2ea9288718925883cffa9ac410ad7caa23732cb

    SHA512

    ecb7ead5f8709ab13a4128adb7469ad72b38ee0a5f25a9c8089dad4e725af47f8d2780526404d4b6f69c22ad90f460e56bfadaf803210f235e6b1afc00e01b13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b18d7e0ddc5c402e40821b547b754ce

    SHA1

    59889246e5981ad34bb69508a17911c73c3a937c

    SHA256

    1911afc9d1402a6b94b3de6a4eeaa16af9ad937b5a4bd49b750ddbcd61436032

    SHA512

    ff919a2fadb5271018e9541f5d88cc7d6400618344a4c0504d7856b828cafa30528b7c295312b33fb95fa03493ac019e0a3c44214479b7a0c98042fd8287e82e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef541fb2386aa2e72132d40b2f52ac25

    SHA1

    0857e94eab739f884e522789149cd64485f5a9b4

    SHA256

    e8b354386935433f73d9672aa2c8f1d655fee30428628c051d71bab7be715e01

    SHA512

    9dc001baeefcdf9162fd537c242171b3edbc5151fb5f3c53ccb759ea0a5d6d6354afe5c5e63c26facd6eede6a85277f22a13ef78465008a67ae026b49df04dee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc31ffcbce72850c444d3307fd608b06

    SHA1

    59aea8a8553a33ac6548633098a846360c008e0d

    SHA256

    e3ad911a7f1b09843628cd076316ce711559f3cb75fa5d580b6246e4529a0ab0

    SHA512

    757f638d0da5e76fabddcc91979b7990a46055d101d68b05cdcd423f81aa4d0a6c5efe1b76f3564b6147d39b9b902f7d60b1deb3f907da42831a65e7ac7f0389

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b90d004aeb1ca57f610c6945b66f2ed7

    SHA1

    b217eed909b502a88111a2996772edfad0138335

    SHA256

    f9d19a193cb40a36f1d9557ecbffc781630f3b8466cea68d1a08d34122818d93

    SHA512

    44bcb8e956190cc51641f8195959075c999211c1358356065f435ebcfa6edf773ca5bdafef0e759907233e2d34438acbe4d1b078d3be13245e9b52322afbf61c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d4d038bbaa09a119b54be18067a8abd

    SHA1

    dcdd2dad80ffafc291f1020a27242a8edc755460

    SHA256

    7a568e9264159f45f3bad6566e6f0e703e72e2844e5834c43c0ebac452b939f2

    SHA512

    d86d66973575f414b009e5184c940d1749391639963c76e0684a5ea6ec6f179c14ce2c32af1a34f44d9cfae3c69f7a98bdd5f3a9197224afbb4271f973b057c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1491bace6518e028388867066c5b88b0

    SHA1

    72409cc600279ae375141459bb6e2707070abc48

    SHA256

    da2da672165c37efd0c0e7e55d376d0fbcc65a3594d8cf2041fd605f1ad9f0ae

    SHA512

    7b395768ae692a3ab594432d34e83fc7b250059abe6a9f1d324751011ce176bc2d1ca10e5eb3a6d55578a2af6bde6a8b756150e94d830331b63fbd351117b56c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    55dcc5b66b2ebc304e8572b7acd64ba5

    SHA1

    5d0d835ff16e9b35a7bab83c0e56ba15adea3c6c

    SHA256

    beef77e28d8b0f5722049d3969af83a085be2d6717b164d1d268275db72c4927

    SHA512

    acd45574f6d890be9303ea4d26d568de06ed429dc64f2efdf4fe1f4ac7e4575c59ffbd6cd92197b43a3432e870ac20e54d1cf36c62d5193c3b0044976e890baf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar379A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a