Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 23:06

General

  • Target

    3cf21362f07d6c05c7053faee26c9383_JaffaCakes118.html

  • Size

    130KB

  • MD5

    3cf21362f07d6c05c7053faee26c9383

  • SHA1

    ac111ea1b7451e270576cc8d9d021d67f11f5555

  • SHA256

    c3f672f2a93d60a410d227700c95578b9f96ec0c86f041f267c7afa2292608be

  • SHA512

    08ab725c6ea8c25d58618401bc737cbc5d8c08923a316cf915d41b0cd1f0d27d810f69b91a94ccbe51ba6c3823ebf5abc5f6f01f0aaeffa381a4bdccf1f1512c

  • SSDEEP

    1536:uZMDcDyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dU:uZNDyfkMY+BES09JXAnyrZalI+Yy

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3cf21362f07d6c05c7053faee26c9383_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ef871f8c949af11ed9f5fc54424ba4c4

    SHA1

    8a7ab04d8df3b1864d463ab74df919ba92edf94d

    SHA256

    2993c60c3d446a2301daf17b5b9e5585a17dedfd7be6b647978b110b034435ea

    SHA512

    8668088f29ac67aedcf3e5efbe634b26b93d306fc45460994bb01849e6b5682f42b7a81312179136d25b6b40c5f8c2533c1a07593f936a69263e01352ba6a3a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64c85771dad694cde69d84534f85ad13

    SHA1

    c1097f3715d36cfa28f6694a7c56cf76f89b32d9

    SHA256

    a1ea066d3889b07562399a05ff06547c785193f01c3b77f9854fa797bb3dda4e

    SHA512

    e3c30f3e4bd5fbacc17ed16bb61112da0d4762d257b0e6adadd635cb0c703e8a10487970db15fe75195088fcba4ac1b3c2731e6897ac93d33cf5e629724684f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98315b7e8f8ee6a5f09577dd74e34538

    SHA1

    ea996a998c75e186f6785dab2276ef095534554a

    SHA256

    b3d0a4175afc1c6db9d7ff836abec02b2e52d8258f33fbebe384a531239b575f

    SHA512

    d4c6a135a4e78502a71a44052368d72b74e2bb3a0e900729ddae8ee6d709e8b26c9b17b741efd2e2c9a0ce9e976712076b69c1d68b628d46d6345006ff81406c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2191b19f2495793371efe8148b731a3a

    SHA1

    7b5c7ecb350ecd8f99b4eef1c6a6928e4dd8f392

    SHA256

    ca7a36be1ec8d69c996210837ff81b810c21177099b2c7fad82f7546df3f17e4

    SHA512

    84c9a39c7774a772be1d4583caf550881af09c5fadc9868b6eb426bb5e54e8ca21505786873c71d4bb3364c252c2003c0863d7c8be52a695a267fa9582e838bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c9c10e66b2bc3bc2a02b379530a3df3b

    SHA1

    85ac371531f8ff9dac4abaa813b8c9ec8888333e

    SHA256

    560fee9478d9c164a34c537bd3f8d6aeef5e70cea8a2bc4292e58c38b0a55b83

    SHA512

    ee9a10031bd7277a57752aeddba65a51966d93751cae7f2cf749db10d74d6198fcb4f953c87e9332758399f560e6966d45e574075aab4bc3657792e959e00868

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bdcd92a3c049fe87ed1e8e440fadf81

    SHA1

    3eff8dfbef4872cfb54a091a55ff70ee8ba8a042

    SHA256

    b4b0ef5f0a8c8687e2c8249184a7624921c792e79b6944efc0e9d52f23c463cd

    SHA512

    6a067d57601427bd1f9717482e56e7a3551057dc50d7ae5eb3320fd3cd52f6f42bf693741e356c5047e11be24480bcb2af25c8281adc79a4f6efa72cf2c5b790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9db1c115304901c0f74c880d1dfda589

    SHA1

    f2365d883bb91d8e1ab66f5c280c2588af387fec

    SHA256

    4125f99a696af9304c0be17ef948c03c1e7ec9095e31ba087c8aac103959959a

    SHA512

    9e6894b799347526034fd1e33fd4ea875767caa21d31b83e571379eaed3482854b800af68f61d6a9b5f85e582fb9aab209317cc7ea342bca05d9f9348bb88119

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a4341456b4621ffd3d057356d030653

    SHA1

    217179ebd7154d4b8dedb89e81d7dbd47b30f458

    SHA256

    7b1ff6a8045ed52a5468365ead546a6bec103eabe8cffabd215cb77bb4cba2a2

    SHA512

    90fd9300224f749b1c01cb6bb176fc46498794df1e47f28a804d8610284992c7a7dd990de842134abe9e1e320d8f41885ad5087c55b5dde288d525fe6a869601

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a9b9a874bb8ce776156b0f93c69d178

    SHA1

    242cf03c174b8527b0ef95592a1d0ba0dd590545

    SHA256

    14fd31117dffe47ff129afeb0bc70f111991adcccdd53bea3c23ebce86f79183

    SHA512

    654e4c9310a7df190a258dd8057bcf2d51d66c0a824f46cf35f39225faac14e804add6da87292800b25ec68370fe7f8b70618b9e8d053cad279abf54a9841f0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4e4f5b227dc3c8a54de6acba71b089e1

    SHA1

    69db18fe18f6664b0e80c77812250e52c18d3637

    SHA256

    c7166650ac6681bfcfc54e8943090a16ea23f38cff56ecf1a94df0f5e93680e8

    SHA512

    4c7fdbba9a1a326ca45c9d820b41be0f2ab8d5889ec3b2ba6c32ce0d5bc4676ba5f24dfe002bb537271e64d7fdc502b268785640d62c5b2b1560a7b02fbf9b27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e56fec4a19c3cc08a3b9e7e1222f70e

    SHA1

    c43dbac76dc54afb8965f55fa21ab476ac93a8f7

    SHA256

    97fb3473cbf6c7a52b459e303d5a5a5c10c8cfef9282bfef755fdba6fe2e3c5a

    SHA512

    eabe7ebd51b84af67b68cd415ecb746439335e34db27af7afa3d0413f0771e6ce2f2db824e2a2f210194877da21d0fb7202ecabeb2d487f78ba871b22beac48d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cd6d57eca403aebe4b84710ae066d3d

    SHA1

    e8912f5714dc44ed5b001843306383886e1b0362

    SHA256

    b995041e0b82a5cf5a5f8c345917f9d766299d94fd0f395b480ca53255ffa829

    SHA512

    4c9cc74843e9d2eda4db34127c33496fa38488dc0e2c41fd6cf5c49cab91aebe11e7b2a7ae5f1d920e18b7f74e16789750bc178068c4f8658637e7fe543bcc8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5bbf43166073af12d1982bc107c4259c

    SHA1

    6635efad67e9d025c0cd51a827095d09c96c5c9e

    SHA256

    24fad9175e791799d991fb2ca506cd4e156b08222d78a2882a5cbba099db156f

    SHA512

    aba98742158d9ed3ecd72c8054017bcc2e6ff5d8ae2aff03266fb9ac4725819f71413a72783e1a580716986807f119ec0538024f2bf6a69376cb0df1525b1cdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51a9200800d8c4f3ee9bec3af00fae63

    SHA1

    5e07e43e160d9254a3580005b3f80fce5b3f2ef5

    SHA256

    1085ce16f472f0041e62da3b224f36e4289fc7ded7ee49556c6f005f0722f0a4

    SHA512

    e03dadc24597e9f6f3e2177110b26d1c8ff2128c0deb7519b102f2ea123a5e5ca6e62be295a59e43e1ee73df05a2503fb3aba86abf09dfd3a9a8ac1fbf5f3c34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    629f827c27cf3a1f870a85a7b706917b

    SHA1

    c84d97469ef0d5b609c63f0f4e116887f3045c51

    SHA256

    ecc21e92c569d6e89067132112680ccc18173ff94c29bd6e0b1841736de27d43

    SHA512

    970edf7b81ef83b69c56343fa227c83486880bb42733d78337d71dcebd094e25e2307edf266d779401d785c6f6513747b6c9d014f6fb03e0880b503da3d7ba6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ffc1534e6ad6c5bd9d77daca656132c

    SHA1

    f78a5f76375da86e770933e3bc63545f6202d051

    SHA256

    64ab2ac43a5e5ed1131a3b5441b95cf892f8e11057589739890e15435271fd44

    SHA512

    d48a5d3f68ba72d4b387ae994be21a658243935a22f7a2d9960649b2774ae4d9f22074db038363c94025813e6c533979bcd13592128d11a5728d4e409a20c7ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05889ebd5338037fc3c10a9797b22d45

    SHA1

    5630a2e981ce8fd862f7e24eb0d8663c25a00a5a

    SHA256

    70ecc7aa96ecabe823c3c0ebec33ec1d4e0a85373a538020d7ef77e5f84a45c0

    SHA512

    279c7e9661d145bfe2f3104e27cad4be2ddde1baf29b755aa46cec992c3bfa759bd6058f42dff3b0ba2b5e1c69c8b1ee8c62b96deb31edd9ad7f2555c2235db2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8bec0031ff9c52dc0b34a624a437a4f

    SHA1

    7491ce920a111448eee02ff2a0a7de928063dd38

    SHA256

    b7beefea79c48d3b367f9281973e4df8bde9325c531589a1d6a6511f40ec0007

    SHA512

    bac4efd094e5cde70a2a9c7b6b92a8ea3242c9144fe5bab90b7e9c9fa56e856f59c10008b5f05cf92554d7d7cbc2388684a9193cdbe11139f62d33deeba62133

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1692ead8b174e32ce3ccac26f6388469

    SHA1

    d8c6a2144763715e8dde7bfca3c274a0ef548c40

    SHA256

    18dc6e086d4ef52302b33d4926c3ae6f9ae46a4316516c3154ca3b1a5541687e

    SHA512

    3ee5d6bad77cf0e4289ef6b86e92a0a21641299d67fc931fb1b0d42c203135017079ce6a9259c5a4df22b83fdda80075c2e8bdc4cc0b166e02de1ee050e1d113

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d5f4bc2486c257bf8d8146c07ecf00d

    SHA1

    7b0cb5e43e01410f3d4b2c093ace687df9d64c53

    SHA256

    cf04752d802c30f250660630ed3be1ae43f98b4a6d6bf4d110a2ae11854ba8d6

    SHA512

    18b95be1ef9d1d4f16bfc6321faa88db343b5c3848c26cdb889fe02891e5b86be1e690e5ac1cce44ec16a8b61a17998d31db733616c89161d35283fcdfcb970b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c8194bae085e0b562940601a45e920a2

    SHA1

    586d7a4d554fb81971f2ba49f5619160b0265679

    SHA256

    cebd090171e2ff7151dfc62a811d04b97d226bbe5fea36d613c97ed9ca94cb42

    SHA512

    09d89ed5c8dfc2c7b5ef96b0646ec7b384cc23f228a43284fab7a71c603cc789e1611a538aeb2bfd7243f9cb5e2b652b06550c184613d6a8234fea59fb999e58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar379A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a