Analysis

  • max time kernel
    144s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 17:25

General

  • Target

    473a784bc8fb06c3404359a4f9e0b713_JaffaCakes118.html

  • Size

    27KB

  • MD5

    473a784bc8fb06c3404359a4f9e0b713

  • SHA1

    071fdc2732e195d8e033e9160d4ab07781a016e3

  • SHA256

    136a7346803746bb798c58d45112c78a476ae9f3088a77a38caa1a2293dfb683

  • SHA512

    ae3e9f35e4c2297df5b2e480832d8821eca0cae122414bc5cc44d70f942f9243374f31227693f6e14335a57f4105dbe80de26eb204d5ebcb78fbafc21b66fd87

  • SSDEEP

    768:SWzdsFqvfudlQVV1C5m1CCCcmzm3C/CnCQGrGs5z2:SIdsFqvfug1C5m1CCCcmzm3C/CnCQ7s8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\473a784bc8fb06c3404359a4f9e0b713_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2856
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2856 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2332

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7a9dab0a13c6731835ce72237017fc60

    SHA1

    4d8a62343d84482d1b6e51697c86bb2965e8b8a2

    SHA256

    d43240f7ac6ad58b3dcdf55dcd37c1d3d1f9f15bd28febb8547f70876188deeb

    SHA512

    3d43af73a9e66b24616df6be457cae656422818efbc25b81d096f9f5d40a4b58bdd5798f6a8ff52524fc5298d6aba5ece38c2f1f5cf189b511f6166820f437eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28a2b263ef4703254aa32e10650d8b54

    SHA1

    e22572876c22e4774055907f8bed941e57a90b85

    SHA256

    dfbe35f48767b606ab8d7f388ab0989a5c4793f3efe4e16f2bb98c84cfac49e2

    SHA512

    33221b0f3b25e64d7ab015453c40a82e84d3ca0ce0f5cffb0e6e5802c5936f7143fc222f183bf0825ddb032c97e885e4cd039b47c9703f2d6b711f13fe9683f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd951c0f03c3ac964b946a006deec608

    SHA1

    567e98ec56db5a28dbbaba0e18cf59b6e58dbd76

    SHA256

    4acdec38aa102789c1edb338444f3bc2030601d5d7f69e66268f2dfea6ff5aea

    SHA512

    40d0f95df64ced5f08310255dde5d89f67551a466a4cc7b3e04b9ca3459dc7aff44b1d5c234a55f6c41ab8b4c508775dc449d41ada8a6ec140cbaed9a6152929

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    087f2b162876359225423ce90e98a79d

    SHA1

    32cd1b65087dc12e2ac25a0a89103cfc46c871b6

    SHA256

    3b1034d04e867b1d1846af53fd9bd4c49cf72030ff1928fd6aa71aa8a78075b2

    SHA512

    250bd641be851a2acfa828f2ad80147ed16e22d3d650290bb95f851b47ec13062379e66ed8cdde1eaab11a15c412a8bc43522f493806a57272a95528e317de1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d10ea75ae48b8a5feab96f4c137e586

    SHA1

    0545c932430bebbcdc847d3ee3dfda54ba7f2749

    SHA256

    3afde83978331ba00e2944b868b0ae1acc42d59aa39d7076157bcc6e62ffd49b

    SHA512

    28745a4dea10891e53129495730e95d4a57fd3d6b15c27fd5ddca71b7c73c298157a4d174fb17db1e262ac1343390a1b92ecaa973c3b3f92db39a34e18bca727

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ddeb6b5c648478e03c0538fb905c41f

    SHA1

    f6033dc4e4f17df2fdc067704a15a34023c10281

    SHA256

    b86f694a5e84021ca26b06e18e34e6f2e974fe2005f1cfaf6956e0d108e590ac

    SHA512

    53d45373aed220ede7371abbc613290273d80f4a5b092e0acdb844576faa12f96025d4f78aafc305ab4dc52aa8b006e8e15731c3b5f80e1512f3b6fd678257b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5284a2cc525ca40cd7307f2925d78a69

    SHA1

    6842c3f2f9079dc60b64347cd8d06ae1553589cd

    SHA256

    b2005253bbdb8bf774df6bf4f24af0443ea303c8ec4be8b1da822433d0f9b8f1

    SHA512

    1c7ed051e8812deebefc4390b274195a2e206dcda05046bfb56f301c6db6f8ce976535442f21e793bb7eaaee9725860d12ebd7a989f83adf8ef20282afc885b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7327ecf5da22b7901fbae8ec30466e9d

    SHA1

    d4d0c486ffd19fbbdd491349b94f4be2d3e06fa0

    SHA256

    3c91cf71b775e80eb77137cf63be81cc065d2f46629b015f29c43f4841e52048

    SHA512

    c0ba8dbbba26f51e6026880c202f53b6d54e6b5b60f1e91a5eb17e1133f35cc66a04bb7fac6f87c364f7ee82fdbef2eaf8056b9587c244f854b421d9561f0bfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c5d1f21abebb4c1cb91e21b84da378b

    SHA1

    1a620d57059e22fc033a6f238e470c92165ed3d1

    SHA256

    e36fb9f615aa5170e5e33ded18baddbcb6e3692808d67b429897c2935b0c3be4

    SHA512

    a7213e855650b4046359b03b408bcb3bcf8356b9045869dacb1bd4132cd4117d0bab12245a7a2e2e4c18a850907c892d91c0d10a0b8266ce6ae1ede073fe44ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e5b97be566b846d5ac792638d13164f

    SHA1

    7ae15f10e9c48b87ce6ca48b7f7657b9b103ff6e

    SHA256

    2511c328de51934ce48cb576ac9a4f66315ed479fb186c094885a4a283adc4a0

    SHA512

    3565b5f6ada5c35988fcb5743284c39daef1a229b3c000bb005c678079ec5627fb6d654e0e4f69292b7e517e6902ff88c5a5c6ea15fcd9b54171a4c5dd3d9880

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7786d67e683a5d6bfdb3b49968bcd2d4

    SHA1

    ecad6fa33573f5d0f63e0c262f7af7efccf60a88

    SHA256

    8dceb057b2f84a6cafe5b8241fdd22086455f2d5f30e6536f8773cb017bb8e5b

    SHA512

    0cfcb38f1161e5e3de7abb3e9d02f880e5278eaf8590675cafb197abbe79d92ce3d5ae134970c800c4a118423ffea9cacba682d1c6e65765959292fc2db499b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c3dde0a29aa552256030b275c8d0314

    SHA1

    b830b1ea8ef9401796afaa376842d86aa9277447

    SHA256

    47a6cb091ed2191b0732762b45adb8b6f3a81775cc90e46e896e08b6b3ea7595

    SHA512

    f91d708ec6e791abd0bd58e619bbbb7d7b1762fc6f25d63fe2af3fe128f564fb8434d4b55c3593d32ea484e98157b1d3e863f19bdbdf22f09aac8ab5278221d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ba5906db56d971f78f823497aa2c07a

    SHA1

    18d13bffb8c3ffd111dfb156512bb150602b6206

    SHA256

    7c2bc6930cc694e666f5a7861b165df597ef125f5b117cca4419aaa62b673852

    SHA512

    fecc64d528cbbc1e86456760cc6448087a0fb75fb629268ba3521b4eec666d70995cd33b861cd516d8bc7d6fe0cae62ec38035b6701723069f9e14b47323e4d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    49e18c3cb11c887eb8995a0bce878abb

    SHA1

    94ec580308294508aaabe25fb019c8a5c4dd7f80

    SHA256

    c2a15cec9304a8047790060faa801233be31aa3778a657a83dab095d4318641a

    SHA512

    1017caf00ccdc040271eaa256ac37d887f97d95a1cde46679e77b6eefad787d00832f673bd6be1682c972972b8b43d3419a5f89812c5a8a0bafd9bf2731b8fbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62a871ecd0dcd2083a68a96eb16a8e65

    SHA1

    046f3858b9c564c184ccc5e46b913ee5df026385

    SHA256

    0442576fbddf4fc4fa855d66f497cfbe92ddef854851d38e60d9d099e98aa632

    SHA512

    267187203987415e439377f06b0775409e3e8728328421620fa74c3d0e57e73303d26ea38e320d3d517479e4e22c96f427682f4d00bcefccbd9bf602b9626e3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd6cd039e8ffa86c1e5417bd796fc890

    SHA1

    ccc841d509ccf92201f60346f5edb8495dc7006f

    SHA256

    878c32cc5d7f3c7818be91a60598c8b5a85d7162ebe5dd0c667a9d61d0af40d9

    SHA512

    6228d5780e2b4ef64d9955797cbbb10baee7840a75733a062ad78456bd22d68755a7238fd088a0acfcc683d55d93fa2b4207c810a873e8f37dcaa33fd2439e4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    776a5897518bf97bed46b4ec8b4c08ad

    SHA1

    4034250e29e09af93722bda0def65826dd8fa67f

    SHA256

    0c5d68b66aaf84232a767bfa73a21f0bad8002aaa4d339e6b69f80e98e9b75e3

    SHA512

    ee0d3bad303f2841139db8f5128bde416bb7b57ce2b206b69f43289aa18dc857e38c1a80513d779f1639ce9310ef2e6b6223a73a868ff6c1eca9ddc6cfc1dd37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc4a7ad140ae5607e356ab7d28c9dd2e

    SHA1

    9987ebdc837cc82f25856d31b38696c283692aab

    SHA256

    6694cd4af6c24a80765c9f88e76df386e7c00aec51d41d7afe0855d923bec11a

    SHA512

    59383346308d77346d6dd7cbf41e767e7997f3e9bebc903ba89d2ac42c4cb1304b4cbdf788d2feb6db140dd655f5b12f7e56ddcaaad465751c44555be186d450

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    398f1a6a46fe6c2ef36c889c254ec8c9

    SHA1

    bd6fd4e798fe8bef45f0f5289420c078f35a1016

    SHA256

    228cf26956a34a30cdcdd186a529c37067856fd64179269ebdff7789dfe09629

    SHA512

    0528866340db448c93bc032271f3c99208ed9fa1f4dfc6be30cd5577b5703dc7a4b9705e3e593e5073fb5487149d50a1e72633d7aba2cf6f6bb8f3fb75b8aa0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4720321c611bd3f107e824eb322e180c

    SHA1

    e0ac4d33f956ade0c99c5bc05c4946e1428dd8c9

    SHA256

    5ee36ceeef1960d553f3a869cd423d597d0fb15c1c81e41da099a5af4ed2c396

    SHA512

    621d9aab3b72464d8c8f604d6ee5104f139f82c147e13add33da6426235eb708e022acb2a895967d528393f6305a01218389f45d9419266724c05ddc6abe03a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9dfff1d11dec506e85e79c5431435f0

    SHA1

    bb47368aef11ace910211ce7c5ec7c1ca3c99ccb

    SHA256

    9765d357bbb2dd703378f7dc5a4c7d76aa9769e90b83bff973498c55b61f086e

    SHA512

    0073f469b17cfee9861a18938bfcd1f7573ff5d6205610350944e000327238e8dbc1565e3fa4367b9c4e30614cf7ace95550b3737956b207e1602260f1c24e40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7cde6f0171869e2b3b05dc9a289cc2dc

    SHA1

    f434f23cb14c81d6fcf8d5257eb6a0a8717d9f55

    SHA256

    b9107d5a65ad6f039c519abb9d2220a819286cffae35da6d09cf113dbd3fd30c

    SHA512

    b1ad26bc97819cdd882b53283abd7ec0d7e01bc46f8c302035201ddb6f187ab837b5b9824976eef889167599556c44a27f16d5df506440790b337207fd5ee1df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2TLOS24O\superfish[1].htm

    Filesize

    122B

    MD5

    00d64a82ba2d055e5facd3a30efac924

    SHA1

    308e275068e3bec5effca608fe9df2008c979650

    SHA256

    aaa3feed097fda6687c7c27860c24980f3ff105b6f326d10c98854145e9afa6b

    SHA512

    1151e227086964ec19c11eb388ace411a56a6e1da96409b2bfdb5313fb5df75223add437a653decf3afdfbd2be2cde421c512f9de423ad74f2ebbaf81119d8fc

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6PFQCIPP\grid[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Temp\Tar395E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a