Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20/05/2024, 15:58

General

  • Target

    5ff27a468b8c75a75424fe841369df8a_JaffaCakes118.html

  • Size

    16KB

  • MD5

    5ff27a468b8c75a75424fe841369df8a

  • SHA1

    ef86de6fb99b910fc6430f544dc00255ec713712

  • SHA256

    bdb36b48f16526001e02474eb55054a93c466dc49794a557fcd30026aa3a1a4a

  • SHA512

    f9a93922537759c3701adacb96a58e0350c63c00080f496a257f13b8454ec97d32fff5151d2b9bd4bbca52612ad66f90c0ed8a4b321e29192b00371a2ec3061f

  • SSDEEP

    192:Bf4961Y/0InkdHdQsQVbgULG0iiuo7YX0DgBozjBE6IPZM/FmpNkSldSv:2MvIVii57YX0DSoHO6IhMtmZdQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5ff27a468b8c75a75424fe841369df8a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    bfaa8b7ec30618e039aba737c09d2958

    SHA1

    9e43f0e15a730cc095f6e484a8fb72d5bdcfec04

    SHA256

    321a7293a14b9daf135f1c291f5ca9aea30081d29ce86ef14be5387c94833cdd

    SHA512

    14b1dce414acf9a168b8692521f0accd7aef433e130c90e9b61f116e7d5ed7907c58cbae939d08108d97b46ae10844d71ef2d8e3148067a12ca23dcf19c1ccef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    5edf1d653761cc3f40bf16d5a07edbcb

    SHA1

    47e7ad20176b9af02f6982b97aa0d0259a5a199f

    SHA256

    4d5ae26f2a686527372ce8badeeed3ac930edba4291ceb887265e7d571b8f932

    SHA512

    deaa508c7836d5bcaa64ec08096056e2e24915f238e2e0b1ba5c0a57baf3a6f144ca76219d5266863cbe8396260e40a44ef7ed2d59496c9b5e90c1dee043d3bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7dd01eb5450a0b8ba0888215b2e57593

    SHA1

    b51bb867aff8f080e63213b05c60590b8d2987f1

    SHA256

    1afe459b1addd1eb4c2944e7ccaa0d70b9feda0310aa3f5c4dbb5db4467b0b43

    SHA512

    546d2617ec0eb25672a0206e40ccb50dee00d15442893d064f2cb98d09a20fe3d910fc03dd317de41d5fa8ed44238e36c6931e6560512f9dc68f494e06aad1ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6cadec8a057020b2a74167bccd270df

    SHA1

    d46ecef2884b91d5b33c7c47c39914631c7ad978

    SHA256

    b1a0189e44756deca20a81a527fb49e3f851eb9cda1761350dc44601abded363

    SHA512

    ce2aa24d18bb9bd15fe178b886abf940eaa385f3b8f460a37e55d9be6ceeece9749e5737e02bab53071d4bd609188b97a4464cc4c36b5391d2f5d54d14472e96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f7d9f612f2b70231ca863d58b9b3b56

    SHA1

    d363e50daa07ff90c068c7fe2ce53502ad381c2a

    SHA256

    f5c9285206c3a24d0fbdc65840c30dc5f77ec9f1481404150a65d8bdc37147a8

    SHA512

    a2ee48dfa05f45f4495ac96bfafda36bed9e38572c13127b4a08d6c6d4877bf4a89cbaacf8704587f32e8d1dc736f7f903166f468cc3f8a9fb8549d988250a38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e0b0fe35be825079ee817e8495684e0

    SHA1

    90be90645ec716e663de5963d767f717f7616c97

    SHA256

    c7561715aede515dacccd527f1b733084586252ef9c62537a0224a41046553d1

    SHA512

    b7b42baf51fdc7544033471a96984af115cc54b90e62fc67d36ff7c88406b79d368e0e646841d31fe489cd8ee73e0d5339d5bb27db289240e70b383649cb1fb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c634285c34b049e96ec128b9e86c31db

    SHA1

    199f72fb2b9064ed7d38cc37566b200575ef3a24

    SHA256

    b5ddf2635e29e10964ccf376e50745e1001ac82452cf76f5126c1860d7270c89

    SHA512

    0d23b668679ad533a1b20b43102c28619b8ee78793033b6f39b46d20f375273ab2ae9dd0051721e3eb5c1cc050bc0cab96363d7fc756747c8861b00185e33a36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ef4779fab7453dba22d7074e3f2f7686

    SHA1

    22af8607d9ef88f1ec595b9fd55294bf019b6ec0

    SHA256

    4a26a083d058e38f7d162e932eecd5f712542e2fc1da8180fb4ef8777fe8d062

    SHA512

    8d8e88ee37e7d2c790c00b561fdc7a16168401adf77f436a5fb7033774c9c60e9f2cfef424a234eb4ebbd914fe1c583b864994dd811043fbb49e56bfedcde025

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2ff6faa1403a200241ef46b2d607273

    SHA1

    a1010cb11740d945b920ba03b38bf7dd00e3f3ed

    SHA256

    0edde6cde76f8046a11f53c6a538973f39e5403f49e22b5bf174ebe8db9f78d8

    SHA512

    e14d7012a3038f8564eaa03732da0da56a40c9b1089f953658db841c7380d7af158f72a5cbc1c29d4ac471b08a6b8952f8171c5b36353001964c940dcc5f3e5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d477ca153829c54c03fc58fda0e7e563

    SHA1

    86a73dbf6c178dff5f47af3d3e9919662508e620

    SHA256

    9a5ac635bc03bf3d68037c55234f20165fdae2eac4f4c437bba0f46424922755

    SHA512

    974224f4af0a1ca2643a8837c2ad6736d9eecd54fa336cd5be58ae144626d81ece060a7291d853e0b74bdbfc2e2fe0569e61e231a20008912051f7cbec9f38c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76d4e895632355d47bcab42ca2e9e00c

    SHA1

    afcf835941779df9eddce053cdf0651999d42579

    SHA256

    89411a026b25c38ccddd075ee4ceeb3140551cd36b305f141f2fa915ba529573

    SHA512

    394db2e607edacacbbd06945499d8459f1bcc5c2c3990830ffb86593b84608b7472d0ab9fd69ad6af16dc3bc1db162c8e086550a0a503dc3c3ccd99669be48fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ac23063bcab4723ca8bfbd7e12055cf

    SHA1

    5bdda468e1ea1e634aa537d7b18a435e55c25aea

    SHA256

    053e6b26fb3d3b69e86c0602eb1b4e8c930487aecaff16b8bf1639b7cf0d4b2d

    SHA512

    064a4b197b168752f4b8f06c3772d853cd0ec9bba8ef78ec7f4241bc5f1883e9e022d9319c717b3021fd1e5a1eea8ef8fa1343b256bf1c7c9c6206126c1b86e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1efbf5a739ddc1959304787383d467f7

    SHA1

    b9e6373b4004318baf0cde503a77d220e1082fb8

    SHA256

    1d352986f2b1d3bdd4cf435be91b20aa25c120651b7e6f6f07f3d89dbb2933f1

    SHA512

    65f19330ee7da8f6e3c0276e1024c56dcb52ab9cf2eadf8e2d26cd80b868619ab2021434760e05e9d06a84dae8dbc322bbb6a55645334a83d1ff81d8b8787043

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b50acece5de16c2f8637b3bee5ca85f0

    SHA1

    2284a9ff3b339351c43e6abc2702126aa6f2f383

    SHA256

    26bda751f741c9569251d06b983c4458752a1a2bfafe6120bedf98fb11ca289c

    SHA512

    43c92d76de10465b8eebd7f23edafe627fe5cae8146ee1fd486e7370a58526718dedb975223573199633d493075b03564751602eec9261a06c956b4f35992f72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bec7133c20aab61f076cae2ffa86c00

    SHA1

    a8a76a600799dc580ba0ae4d8395a9371ad1fd20

    SHA256

    56529dbbec76d7b2c34cb33c9ddf3605228116ae89c7ed51565cbc488fe14030

    SHA512

    c13c4e08631ccaf4a7902796099f0e556901c737f441c7c1890072128f75df79afd1bb42dce6ecde945a5647837070f357eeaffd966107f0fbd05e9c26510ce5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9df0d5e7b3aa04f4c3b65e1589eb2f5

    SHA1

    3417aa0aa3f0c18d614a052b83077f6da0f707bd

    SHA256

    5eddba22779692a061d3fdf3b0b635095648ce41244147f6beeccfb3412af63f

    SHA512

    dd7cb5880bf5db04565ed40c09f62c843f2ce6527810e5822a741dc2f1e75debda3bec298dd5d2423a87b681a1c4becfc14de8206ccd8544bf0f09bbab4a1596

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9da7f16778e02ab461f14afb097e3ee3

    SHA1

    f08abda693adcca3fe81faf6ea7447947ec3de6a

    SHA256

    83527881366b2fbb5a7e4c361b98256224767f51507e0912955eec4a0716819b

    SHA512

    469307726b56736f7b906eacb48165dde4f262a66bd998653830663b1c42fc14cf8e3f852f57bd774b71e82d7653c9d07deafde9d911930f8b1876d0a7967f86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72b0df98c8105df579430a8f5ed9b3c3

    SHA1

    b1a339fe70f5f5cbf5f23e568f4bcaa09ba0261b

    SHA256

    7f1bea101e4415ac4d4dcaee712567e114d52765ef7d451b3826a25f474c0c28

    SHA512

    ca16e8f27910b5d12ce16594344dbbfebeaa6293b99cb9469556ce253d046ebd5c9cc3ca1fdbcc678a6284178b31f5d9b444e51e2385e281df8c971e879a2372

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2246afe5f96cd127052efb40f8beaa91

    SHA1

    f4382cd4833eae5acc75a8325034d838837a4a76

    SHA256

    f4bcb76bef27ac3839f2e693be84df6a3e4e744d6d55f27a17ff5ab63195aef6

    SHA512

    90e96d905ff27ef25d924ca876604bbe89ca6191a5462ef3fb71c5e980520046bdf385c0a6d90431721034372f70b7f1169eb590bf0412b4c3146a2731c3d5ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e6e8e710848f3b0db1b47c485030b48

    SHA1

    9fe7085bbeab6aab8d64c0c59c167b21ba2abd07

    SHA256

    94e3909be43b2809aea1ce0a5ea7ef13a752cb5a53c37acbc1a0acfe63560d3d

    SHA512

    1b5d30f65302816c75f81c6aec8b80c60028c3d013821b701fa9722660e8a445f4297f1cf999c5c29307af96c310bd7558395092545389d4b9dfd6e0f0617e94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e316ce609e3db69503e8530825b6d515

    SHA1

    c669457282cb825d790eb5ec9f1253947a8d56e8

    SHA256

    c799f367664d1d98d4c9cdba9abf8ee26bc5bb9d3323aff742a3491f588f5243

    SHA512

    c7a0d81f6a8dfcfc365fe84d92d027af862aad60c27680d2fdc31a1b940de440997112f6f441df9803f25ed95763437f0218d28268eec9e56c6f9bf0cd6b6f1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    61bdec60c27fc925134dd6b1fa340ce0

    SHA1

    94295e45a34e9d17313f171eacd7b5e6240898b9

    SHA256

    37ea10858d9a83d08aed44ea4bcb4a156debddc743410253044892f481eadf83

    SHA512

    8d5cc2d04bf07b8ae9701f3b16033498133225115c03b2c5000d13c2e48cfae3d9f2c894666ad96f4e46cfcaee5d1f862c593101a0ed41e00fcd197f6194c065

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4JZQ5QLK\index[2].htm

    Filesize

    165B

    MD5

    9a90212ce0470b245ca1603be4d97ca3

    SHA1

    f234cffff1d28f7fd5087b14a8e620f5883c155f

    SHA256

    969b4b85bf6f45565eb6c45bde413c723343840f8ba81568a0f16eb494f62099

    SHA512

    3b7b30bf6f3a7dabcf2764dfd929742b4aec6d8bab5e7a2156c031d0f4a6896705bc5a2a13abfcea82038fcd3a1b0ecfd9bd450c7a55eaa8faf9e33cd18429f4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\banner4[1].htm

    Filesize

    405B

    MD5

    237fc6541192c72ae5f47fc8ecf11e5c

    SHA1

    f28af7f9ed0ed192e79607c45e00714a9eb147e5

    SHA256

    513b8bd7306c6e8f18c784a165454e6e2bb2204cee943d1149e5ed1100319616

    SHA512

    f2716b3beb82646fda1bb14ad540f63e49a248b7831e200fb4a2cc64bb032713fc0d37f29cd2de9e5953e11111fe228f061e679ad5fd078d09291bda0e254b6b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\index[1].htm

    Filesize

    248B

    MD5

    e346b479270c4088c1e33d68cf925bf5

    SHA1

    9e18a88f404c2a302eebadbb6048260c84148be8

    SHA256

    46803118198217ecc05e54c13047e7ed7aea02a0215e4e7d105d511f98a700f2

    SHA512

    8767d25bdb9f08d762f456627d0252e545a065540006562a229708383636681ed38ac6e6c9d495a1935c39bd1a8d291642a57b400344ce15252d79e1b123ac4c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OORQXHVT\index[2].htm

    Filesize

    164B

    MD5

    d8ab581f91c224950865f2987c191039

    SHA1

    c12bb97b6e70d64ad5d9ae531122adb8aa3032a6

    SHA256

    261b4bfd9eec0dec72a980269590d20530220eb0184f76b324ca1d00fd2d5af6

    SHA512

    a377e23e238b905979ab27a1370a91c2a3aa0dea7f1184e2113b16102be3c9dd4d85d0868827fa3b3f9217b38e6a093c33adccab3c49b8a63d6b79e227215f1e

  • C:\Users\Admin\AppData\Local\Temp\Cab4DC4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4DC6.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar4E95.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a