Analysis

  • max time kernel
    120s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 08:08

General

  • Target

    5e0608bb76384deb02fe33eb3bd37172_JaffaCakes118.html

  • Size

    23KB

  • MD5

    5e0608bb76384deb02fe33eb3bd37172

  • SHA1

    8929073cd45eca519108165c426a936fe1d2de88

  • SHA256

    4bb840fdaef8d8c96947e85bc1c51698a5a761db20d6af6301f953b24165f62e

  • SHA512

    34a8d79e2fa64e9ac4b189ee0bce78cf0c574db9ad64a339a544e2ad1d7f3ee7ff02ab7bd5ea862114a11e04474cfe96c99cf4e14f55873b9e7e2ca940e7f65c

  • SSDEEP

    192:uWP0b5nW2nQjxn5Q/VnQieoNngnQOkEntXPnQTbnRnQOCnQtawMBIqnYnQ7tnOYB:nQ/uyBq

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5e0608bb76384deb02fe33eb3bd37172_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2368 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3000

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    000a46216be5e4f6f4b29ebb52d470ba

    SHA1

    a32e7bd54f103579e12f3906e96d2f8043cf862d

    SHA256

    7d815056977d9422739084e4b1d5815f80d9235c86916a0abaf0c80ee6456918

    SHA512

    1190c123c1c618c9367615bec3dc63d5e6806e01f1e1bbee66ba0ba9e24b1ba329b8a916a8593ef3290d269477e69338c1d387f3394978e62c2faf2ee3ff09ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06976ca328ac1d28da7ae4e304898f2a

    SHA1

    9404d0450e1cc424341b00e968dc03343e91ee4f

    SHA256

    c383d4a24f99bb573628de9c230e6703a659e2e987c28f56381ee4c62118e695

    SHA512

    0eefb373ec19a07c65856f19b1b93e9411c03f93601549d25006da01cf9de6a64890e88ef37049b4eb7a9edd64b984935c173534ed91f940f92a4cb72a0a6d82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d01e1d2d2509fd022f67d1e6bcd790e5

    SHA1

    9533140df95c2eba75e5d3b24b77b7101dc8ea89

    SHA256

    765544f3355f79e8e76c4dc4407a5a2fc4efa2d6165d483fec8cc26b4bf80594

    SHA512

    fa28bc51dd3bed4f93f1512a06b8356d0737d865f14fe6142ce4a5cf39a2de92a27f4c3d1414aca2357199336ba8d8798ce164de2be25d489ed05cd09a4c35e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dca3232ec666b10e6cd2462819025c2d

    SHA1

    a5485d3dcf20001f8f326a9b5b16c13145134dd1

    SHA256

    a8944a903c51add18b76f294ed46067daca4ae54f5642cb54ad3c7197c22f608

    SHA512

    286705671d530bd5df14f76ab467566b8cc601ff4608d200315614c0725876aba3e8ec94e36a12f7586070dd1250032949c5ae8112b0bcb78704ade3288d498c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9bc4e6a33a97537c0a49e8cb70e2268

    SHA1

    54f51bead85fdf847e6d8c984b648c7e7cb182e4

    SHA256

    54f4e3a71a8c4a779051343ce25770cc93ca69aa4d42c16303c47708dc367a56

    SHA512

    b6b2a9281ec3b3595c61b880448c404b4e2d7b40923329c6674ce466a5de5c90ed9179d2dc0b8f69c58a73ca4902f363786627813e4eeac2ec431e5acb79a468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e594626506558cc5d178343e5f74dd6

    SHA1

    1d0936f4d782a6c38418ad18255c117758c5f6de

    SHA256

    daf10fc01043891ac4396243a1dfea2b9b410f94b96f2ec1ffc8003b2de4bff9

    SHA512

    2923b92f5dbd45db88f4a818e4e7935ff7fa6214132cd68067a1dcd6bf84ebeb296d764e47e0560fccd84aefff343cb9f71e2b89f6a402554698418f12f42910

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d23e599bed0ce95180c92dc87aaa01b5

    SHA1

    972b89886d9494d2d923612c1f38d021cb865098

    SHA256

    76ba176388629c9c29e541f9e8774a2f5b8fc40de5ad2f65989569fe81b7aed5

    SHA512

    4fe870da2f9b5cea48216b99acc2b39a459bb1c90521c235b18310e5001602e94d2388c4e71e0278e605784f91640deb156acdabac9fd00c036645dbb7f7ed39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c5a49346733a713559901628f8127ab

    SHA1

    7a42e35b11e073ddc098aca0c16c1b77fe4cfb76

    SHA256

    a16ebddfa4da79713eb94cd5cec744d3c952112f189db2bc4e572cb7962dfa7f

    SHA512

    59dbcc8fb49d493bfebd6c73f39ed2f662d5f2a18430eefc79c40823f69b09e530d1fdc24a432d02f6c20ef6f0e731ef5248a2ce7aec6d88938b3ee73eb27ae8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58105e67e8aad7649e01b29866850a83

    SHA1

    17b2b1ddb289db9d3d41e3033d5809a46f3f7821

    SHA256

    c5f2b701e3d20acd761798f06662c037664b3973a11da226023053a13f59fc1a

    SHA512

    8141ac383130a2b347a5543daf676783201bc8ef67f73760df352ec3ac48165d808f7ba397a30d9d37da1deeceb81462c7bb83369afcc20153f0b6fe9bebb63c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66324589b73cfa45650401e830521d0a

    SHA1

    46b451caa1751f8ad751c3f1fd3969ebebdb2e2a

    SHA256

    28e8edad425b6a24965cb7f1eadcd83202dd446fdf499ad244569512368fbaac

    SHA512

    0d19cf5a0192678b2aba7ea727902791364485ef2bf3cee737797349d273084840afa7d15cafbe1e1a40350ad906c4ddd4a3817c2125d3826291016e0aecbfa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    671f7e6b91352ed59eb454b91356de29

    SHA1

    c9c3317424c43e9964b3f1df6a345351f7de311e

    SHA256

    8e947fd444f38be60fe440c2eb8abffbfee9f8721cba00e2bc537c594e5eec01

    SHA512

    e265ee2f8adbbe39ef376311db65043fa24196af59bc5357e5f49a908258e48209185e5fb98e12d05fb4042bf2025c86d6f8749829300a3100cf0f856de81b4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c22ce57dc8075e8bd752be17f244f2d

    SHA1

    0485ec0ffc2eee26e0f153684be88baf3fb94d8e

    SHA256

    4166cd7b6c56b504336423006bc8134c3d7225957aa7c4dc03e331b8acf14a98

    SHA512

    da520bc6c7d54097fec577155fee624a147180bed0174ced9e90bfbe180d3f5ee1c8c5ce8c0f9826d55e97f5f33ec02ee2865c06129de8ccce6dfff064cdb6e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b538e3155d83680c70d165a012788c45

    SHA1

    dad8a4ee1a017d4026863672bbfbfe8c4d44b897

    SHA256

    752d9bf7572f105fa37d08a2aff391dc3a6ce6bf1ef00a08ad1f0166a50a890b

    SHA512

    555f89d0cf27d891c35176265b4ed1cafe570fdc6bf4ca4d4380a4af7ee3e7e9ef459230af3ee56019ec2be80cfc95b89025d34817a551227a4297376ef1c223

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6075b35bd1ddb292e29578423513ab01

    SHA1

    d63c2153bbb05576ca095563c2b975fd4bfb0981

    SHA256

    99407e74e0328551ed6c652c2aa61ba19f1c018d24e542fa63efc41182683eff

    SHA512

    3e47d326f0e49eab22e809182736a68ce0d754da595a8e22f495d7a3bcae08d3ec3c16de683b764f7de1f03352dc7d0b4527b0669075bb284e59f70dee360dc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3eafb2b08122d7f5ba245ba0ac575af0

    SHA1

    207230df8666d06e077533d016fb6c90fa7d291a

    SHA256

    48cc806cd7b611464493db6d98223cd3487402b5164dc7bb9155d8d59debab90

    SHA512

    a15f9720c6eef7a017217fcaf34671f65d62a09f5d7be92fac90a1351e417fe1b57d3ef70abee8dce4f4a9118d6c8fae4f602bc8c09fbbdf01385c8ec5eb481c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7889fdc6a2dac02a115336cba16623f6

    SHA1

    e489e08b5cbf007289c2648581e58791e9af925f

    SHA256

    f5e7d319af38bf54dca1b77b7ae9171e7b5fc94fa7d490afa8fe021d324e0a7c

    SHA512

    e431eb4115c96bba68bc87f33673a946486546f843d3206c5d1709916c0751ffe2befeaea4c354bd23962e58c9efc5fd8be483d7e20538a320de1d5a8774ffd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e87eaecfab206aeb54f1590291c2e59

    SHA1

    7bc91ed2af7bfb6e9d05dc7c52f4380adb426c9e

    SHA256

    67140bade8a4aee31651a91ecdaee698b142c8bf6a38cf2ee970e915b12a40bd

    SHA512

    dd4840b40e3041b55fb0c71169c8b28713ab21d6df16813896c16867e266ff7cee279650f8250a8579c9a17ba72f3f7c1e7dd0679f47f83fa63ac6f57ab65cbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bfc3bb9146c374ab8f38c79c728025d

    SHA1

    b9d0a09e80244ac627d0daef741b7dcbde93d2f8

    SHA256

    43ba3583b3eac38c875f00ae9b74ec41d7ebb7d58628af7e496a8c66ef984c4c

    SHA512

    b2e74901bd0713603be7dce13c3cf377a20c2c8315900b1eb0fbb2d489a615d1542cbc7184f7ddf460789a17c36769b9a1220e4d860ce8a67d815bde96e35215

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65d87eb5b4c152ee0f1b53f5628138e6

    SHA1

    96bd11da1e2111c354e0379910d5d9ca3d0132da

    SHA256

    33124798c9597961ce6b9343e699b4e2ea3365d647e258f66e161175c7e63ab3

    SHA512

    71ab079e3c59da968fd3a48ef9412c356f42629a02249bd37673f270fec305ad4cd70ec165963ae12452dc1c772e6447d4d5be1d221837cc45d4efa670916501

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67e36bfc10153eb5d4e2c41837abfb02

    SHA1

    70070d716183615ba56f262933d4e661d4ddbf0c

    SHA256

    f28e5aadd2431edb46faadc7c9b3cf26df422bd4a5be2540a45cc3cccfe14f37

    SHA512

    11570f00fcf1d1abd6e8bda6e7f57e38d19816e776a3f1cb8dd78c7eec964fd2e7d8e7cbce1603781771893337f3df90fbbad1473f57037dc0dcf0912b23bff4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12244376194e7983c8ce1ed6942d8616

    SHA1

    ecce4625da0891753c58b29d2a67ec66d12407bd

    SHA256

    4e30033ac0a03d6131451a04a40b481dd3c90fd58ce772d66070ed3b324acda1

    SHA512

    8062e5965ca825c8e8dea1ba1926d2a88e018419cfeb1405157361d986a1739aa843fc9e97bc2592578e88b0555d42ea3ed1ed72e5b5fa14f4863bff0b6b2445

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    128caca28dc288b21d812202397e9746

    SHA1

    64592233a5caf5a89122f86e1a9c338a39c757cd

    SHA256

    0acfdf21b9bf843414a4a0ef8f47935f136e6bf3d5a9a547658878ab8ce3edcf

    SHA512

    f333f3423c28d6f0d706e952787541273c0f071dcfc81d90813ef237621646ebbff11c6d595a97d3d0b5ebaff964e3b5c13d6fc86463ebdcdaf2ca834dfcd837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab24C1.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar264C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a