Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    21/05/2024, 00:00

General

  • Target

    616167e91295c3dd9f8cd9e9e76b0cf2_JaffaCakes118.html

  • Size

    23KB

  • MD5

    616167e91295c3dd9f8cd9e9e76b0cf2

  • SHA1

    3e181cbef39aa0efd32f9c428b9783dc3f645a08

  • SHA256

    a0532ed54aaa5e3ee929a3620fa62b6d28a20adceeac0529dcbb98703921c842

  • SHA512

    fb82e1f6e037bae6dcfd5511b25f0cd2286257e089b0d599933a40bb069748af7a7181a53aedfff5d8bad2c018ed08e627d86fb2b18c72da8e8c7e2eb04940b5

  • SSDEEP

    192:uWvEb5n9KnQjxn5Q/wnQieTNnunQOkEnt8ynQTbn1nQVCnQtrwMBzqnYnQ7tnEYY:AQ/m5Z

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\616167e91295c3dd9f8cd9e9e76b0cf2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2272

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50bcc50ef4a16eca91efc5c8ee6dbff2

    SHA1

    0183d26175a9a3fef3933116c32145185852b86d

    SHA256

    6631a814eb93201e488753a34b21831931aa973682ee0a2b36ea568b1e4454ea

    SHA512

    939b13b6db75f75a5943fa21883bc47e40d8ebd69195358549aa0891aac17528e38111290fa317034e9f7946ddcdc9220489f1a1584556d3d3c72bd025d13fb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd2645f9cca7299d3acbeb6bb1e209fe

    SHA1

    1cc5169daa216d4ff6cf3b8783ad84d179545e1c

    SHA256

    168871cb53e205ce860859c29f4ab533dbf31c2efc26710ef9d607488ef8a701

    SHA512

    7c2260046b09559700264eeab14295fb074e2147821350fc737621737c3f1b27c20a71e168dbf798af9e48606fffefded0f7cdca6ced2150b53ae68fbc834067

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    355a36d364b2e4c0feecab40d9642abe

    SHA1

    0ac944b2b790ea0d50e4c7b520ca0af2feda8f65

    SHA256

    70f99d82142f3ab57771346da5d1bbe422a24f7d3a5864caddd4729a75686bca

    SHA512

    5bb7a699f7f0564dc503ebd704e02099a08e27b0eae26f62aac88356f87f1d6c29724cfd6c1c1bfef6b5f1d2f4443afae872dd1288fa0de973f743c5cda3ecb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98b99bedab4b68e50225dffc15ffab16

    SHA1

    8dc8b2a6c9eac82d15e154fd3b1e75fe3d4c41e7

    SHA256

    e0c379baebaafe3f2774e4417a18e9e438116bcd83a564873c0e01798058d918

    SHA512

    c72fb978d0f4218a8113860cdde3d377e56067614159598707d422e374ff66ba697203ebf4ada1a2cef456c979ae626b3b9d06a4e03edd91d60d75e528cc2ca8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2feaff9d4bad4d37805a8c8be4f13c91

    SHA1

    db92a03005ede95af6ef27d0938cd8934e48feae

    SHA256

    4c0119ae34d03a58fe18edcab81b8b45eb396cc4dc701c57e92b7501ad9ac2c8

    SHA512

    e6d947956e5d82176683ee9bc95618bc5d0e34020d499ac96d9c74369209b6e6b909ade05d6c457fb62869cb272ad0d6c32e203631d7166d88fa30f09db33582

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41f50ce52f95a49b4983c1c5b181472a

    SHA1

    380e577b279ebcfc3b2e4b028bbd4a89fee8fac4

    SHA256

    b9364930639a1c5696b9170522db44034914bbab2600e364c8f1452e2baf5e8c

    SHA512

    8b5aa566c2bd7f01be95d22c222eefe1f674637e671c2d9b4f4d68ac0b7c044f8534f63100f3b54bb62885c356b021ff78e5907aabc98194e5770a3e540b9975

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4272761d48642f94facca53a3a5fac2

    SHA1

    893df8620f2aceee24f524f2dbe830352a992b27

    SHA256

    be11a6404a08e09855ed7816b6f13e2c1dcc5c8341e039592f007c200966af73

    SHA512

    7a5bce83128c88d1774c3d7b85a377f0c4badffd1076bab7e92e201e4c0cfd98da41a77a683089a3973e6be5e5d22cfedafaa482589b9f5c08c5d909d21896e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    064c0a98d401ea9c5e9c63a37134e7cc

    SHA1

    d64dec99e57cbc00bf99e1c0dfdc0cd92b935b9e

    SHA256

    e82f389c172a76a623ea6efb929cc3994f955872c617d6a649f6ef696710e0b9

    SHA512

    9302f71cb9b38c65236916fd1bf68f3f0dd3585408e9438c794881e813cf3532f4d078f001ba95f0ddb3b3660c29bdcf94cb4902b7da1f14a28ac810ad2dd447

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33f9bdde503fa59df815e1ce1159e865

    SHA1

    e50c2d9ebcd5d9dd5feb906bb21f93c0b6ecc979

    SHA256

    0fda533c02741bcac8977b89735d558a0ce33c649da518d1ab5eb6fe3dbd8476

    SHA512

    8891bc204573952e2d38b71dfc2b815f1dfafd1c6881b28cc97feca8f660422309f6034f72441b9876c9253cba263af66528fa838ca2ee4971e766b294117045

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6206ea205c703a1203bda4a14980b3e0

    SHA1

    7872ab27bcfc59640940598c50fceab617724461

    SHA256

    6b6afa4f076545ace41ee144dfeb923bf084ff2cf3f11dae4f89a833f605b153

    SHA512

    9f9b99cdcec743f05cbdef6731ddcfeb32e66dc224fc0027941321462d81874a86cbc786439e4a2fff879a465e266166b36530165635724807ee2e2d5e6741c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c2865e759f2e49829ca5590749da3c5

    SHA1

    2ee35da99bf729d65ded038e37ab35ebb49ae213

    SHA256

    20264e9665958ccda13a8c2f4d0d6c19b60b7f06656baf077a7eb9c9b4ce8c8d

    SHA512

    c1056c042b456d1fecfe33f7e5970348e872986ec65867eb643daa827df2cdf6b03a6b37def495b2f26421a314bb6819a66a423a1b3961c835b3ae22b780d98d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3c7546f5e30ee87d5b925c663f687c4

    SHA1

    1daa803926db7c4699ff75d05fa029c39758fa4a

    SHA256

    44e91e814d82585d00cfb6e8a6e812f86230b2c9639d73d30423b2e351134df8

    SHA512

    4cc5c2dc4aeceecf9c35e0d04a6d584277979499d94240a3c3283495c7df16f341066f859d0b2531d34e9ef646016dae1e92c9333eaef27b4a03083ed843787f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90ddeae162da7c7ddf917346ec075ada

    SHA1

    5f9d74134f6c91751d643f539b97316c3ff78848

    SHA256

    3c946b21dcd199ff7bf147e4ac314282ae251b83b3df7b3072afed26939208bc

    SHA512

    274aaf71e903128d059b0710a41f860734500dadb9f079ec09b3a77bcc1a02c2e4103a4d8ee8b22e8b39418392c24160e1c2e014ab3b5e318da94dc0ed394a47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd0adca092e5aa18bb80af1cdcd99b47

    SHA1

    21104c556a5179dabae8fd6894d0daee64e36621

    SHA256

    7b363ba08f6453f395bb0fbcb8fb0b2277d06c7a429bdc7ba51f9de6a8b8d1be

    SHA512

    830beea37a75250d61715d7cccb7c9be5705cd4145f8216d41de937c07e51ce523e1dc3044110e14b75e90019ec49648e919d253aadb1287724748a3766870cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c85aaaa7083722fc01e1a79d9fd7d7d

    SHA1

    b32881d36d8643ac57dedeb0fff38106122a76ec

    SHA256

    2cac7762789ae00967fb632b1e1d7cfb7a861759af9cb00117acaa343bb1cf63

    SHA512

    637b78ff7e0c62e6a0bbcdfc5fae2702990a50286eeb0c3d68b6ff45358c329acb1cfa2c87fd7c97e7af3328ee4c86c8501b565f86ecea147bf54bff1fd96b48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a2a9ce6780d7bdc71d3a23fd804dbc1

    SHA1

    7e45fb757c8b19da193210128d463a3f41cc6a15

    SHA256

    bb5fb68354c6dd21a38aaba0511e2be50ec4b0e4b87bba73e059a1c83a46ccf0

    SHA512

    70d8a73b1bca57658b03c0e3788e005c1482395f2eee76cd87f2be5f008a8188fa8dc795bad987369744f94683d416f6846f492488ed0f8b58cc87b843ff28e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b4f29fc5f5d966fc2dc11b0f6b6f5b3

    SHA1

    f149f319b1454146bc2e6ed578f111326efa9535

    SHA256

    b2760bcb4832ad1fe66d12d96d8db0d4a88dae86e9009398ff8a62993c10b321

    SHA512

    061ab990337bfe6a4692eac0080fb3d04c077e2d9119530a8dcc1c76cac746b73c0d78f1cf77e89543ee9752e5621c6951172517991be7747a4120862009067e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    236e6617aa900a21876c0d7a1cb17fd3

    SHA1

    f56c9a79016032216c120c22d82193455874fa9e

    SHA256

    e3c7edfd0605b6699099c6a37ebc54c3b5dc8219489be482769bb85bbee662c5

    SHA512

    4f368e83f08d1ec47f456165d27fc72f479abc634abed9217342fb490bf236319e000badc35bbfd9e69c38149950e10d9592595d4493a2f1a17e6f08118436b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee045dbd9bd1b523f91e30cb877e2fb7

    SHA1

    5f7db9da3a3b7de39519a0c10d457f22e9acd967

    SHA256

    21b3f211573537bbeed18a197009fbcd51e71d2544e646670f2b53d722a1d774

    SHA512

    6dfe40d9c3a4a1a27a522f7125dc46063ae1a489203f2e3889194a96dea1eecba761d4fac4055f9031f57cd90f034b85bcb68d3264f520eafa9f8967a503333b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    810cdce4a08ec9367c2cc6d12e0ca2c6

    SHA1

    cda3226af770f6cf01e6c32259f98b3676a59dda

    SHA256

    d1199da448f877f03055bc4a32bd340ef1601de17c6565b44d79cda522de6bd7

    SHA512

    715cf0f99ec0135935304c7001dc452e53635fd5e3b2248f683603ad3a8c658b665a548038c0477c90f7e17514c2e0d5da86a74e5fd3d7af8011b0d670803fef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4df894f6406bfba48cb1f1afdcf40818

    SHA1

    133405f579ec2addd077b8c60de0b26cecf5936b

    SHA256

    cee5171fd7a78e255cd10bf5228672ab82be8ff3cdcc85f359feee0944546a13

    SHA512

    201d2d0ce4057eda5cae9208950cdfac98224192fd3a3ed738a6a4e5cc660a7c9ba3b020ed1f88c5905f4ae4a5027883cf921e077a60c4d59c8d959020190fe8

  • C:\Users\Admin\AppData\Local\Temp\Cab198B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1A7F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a