Analysis

  • max time kernel
    133s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 21:56

General

  • Target

    68c4214d94f0629d3776d374872efa75_JaffaCakes118.html

  • Size

    94KB

  • MD5

    68c4214d94f0629d3776d374872efa75

  • SHA1

    2c345e213b4880e27c3cf7ee8145ec53f8f2f366

  • SHA256

    0609b15f633c5f2515211b602076724e295f1c14f372da6179e293379eae16d4

  • SHA512

    3c1d3c6b63a15f8acf09d614ac763b71b4774d36b2172bbe11f9426ba9e2b14b3a6932c5539a9bac64c5844180e97cfa4e3d98029c69e48f1fed73a6ac08ff95

  • SSDEEP

    1536:WMLiNagra7LAfptf2A5fdsspsWAfeFLJZdSBpyKBdkrY8mgHC+qpEyW:WAiax/BdkrY8mgHC+qpEyW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\68c4214d94f0629d3776d374872efa75_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2348
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2348 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2836

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          914B

          MD5

          e4a68ac854ac5242460afd72481b2a44

          SHA1

          df3c24f9bfd666761b268073fe06d1cc8d4f82a4

          SHA256

          cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

          SHA512

          5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          1KB

          MD5

          a266bb7dcc38a562631361bbf61dd11b

          SHA1

          3b1efd3a66ea28b16697394703a72ca340a05bd5

          SHA256

          df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

          SHA512

          0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          252B

          MD5

          fd80b38727fea3e0f2e233537f50b883

          SHA1

          9f7cb490cfaea23d6171274fce434cc117b1e9ed

          SHA256

          e6ce04dac93e18c34e06ad4fa5cd3c7b608bfd0b1ff333b24a7057a9f3f80e1d

          SHA512

          a6f703f580645ec54049339364fd24ae9cd45de8e032ebf0501c91865f3c7764ef828c564983a9ce4a345422ae932823a231db579bb81ffa7e540a2ae78de6bd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ec77a6869476ca146f2d19c553df87c7

          SHA1

          7fc05acc1763871c676f4085c7979bfc29db4c2d

          SHA256

          1569eb3eb6a349cc456926a0bd0c4c7ac97626dada9aef2a31f102f28cc4083e

          SHA512

          2233de5a513ad8a6fdbc4e5e6487ccb3c55cf521639514e6fb6ddbf7d567724d659384d1f389b86164c4362113b2dbc666de17c01276e5e607527692900ff2b0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4879975728dfa330928ad4791cb1730d

          SHA1

          10bf9bbf002ff3f18573adb6ff36aa6162e8d386

          SHA256

          b5df78b1246f4673b1021da0ae26a4a0dbd2c8bece844eec073b9175f479ba20

          SHA512

          fbcf3bfd588ec82a8bbb963a322acbf1b95a6389bef818ee2e7347d8365a2817958ef6f52cc383add12860bb25547f12a4d093a8e85a992d6fe3f7df6671f8b5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          536dba42c96e85d1d858028965f8d52c

          SHA1

          6338fdfc29971127312c707d33433a74703bbf77

          SHA256

          03f4328919f00d105d45346a04dc1bb2a480180ece8c89c3007fbc4108784ef3

          SHA512

          21ce18026375899e850cadc5cb82ca6bdf7bbbe8963cacff591de06cb74c840beb685a84b1ba8e55c2b3c685b391094c9a41201242dc97d60573bf0ae74132cb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2411b9b6b8eb8412972584836e42a667

          SHA1

          62dd8bd0e889ec9502117095aaf834443c7d8f68

          SHA256

          2ccd1cad52ae033354431209422d8a12b7255406820c2b30d504c63184d5b3a7

          SHA512

          a03c9df29000447f6931e5e9cb78e1b09b585e3316f9ed9bf83a552867f12a17b19a6af699bb0df3e4226ae64913c25c0f68c7d6008df07b9e2759a087c5c5ee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          80da6cadf27dc76070972e50c7e79e7f

          SHA1

          b5c03db992d13d7c76abc2c1fc294d7201e58200

          SHA256

          7383d679fe9fda7a6409a4da9dc93ac019969cbd773a928232b5d06faca5011f

          SHA512

          10a9260d0aaea7cba818229f3fb847a8444d1e9cfa5bd39cccd1b35f540821c829d20097ddfa1324209acbc43b0701b78d644e45ff6444bf1e415f784c85933b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          5629d4e80140d5a5840991b2063b6059

          SHA1

          be6fe0cac4aa569055c3d9569d38611643df9f30

          SHA256

          165ad62560e3f9903c79fa10f41895642b72ad0b5d915df32eecac2079ca7e44

          SHA512

          f3181ebea9b81e780e3ce330a6a94c8c0e258e76a80ede304888d5715113edfffd99f93641158f627c74c0fbaac939ea928bfefae8a1414f998f50cac1f61036

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c591d1f25759cc2ce514b5e90b258a5c

          SHA1

          b7e9310e4a9c56c371dc9685569bf7d86b58ca66

          SHA256

          dd98386cd88f92230ce9501a3347d0ad7cc24082c93b12d9d5af49983c6a7d7b

          SHA512

          1187f4358c0e244ad4f8fbe41ab6afb7d1ac825f50677c921230388cc97504a1df18e66282efd25530d5e11f0725abab2c53581504c9fd9f4117665b16301bb0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          37e4bf50295e854b464dd19f5a9ce532

          SHA1

          dacef345e990132961dad232be0bdd548e135f54

          SHA256

          7ecefcc8e55d780a0ee161946fda806ffc18035ece1f6a52c0d7b954fbee9a22

          SHA512

          9ca180281903ca29a964e4d5bfd8a9d255d82b3802a953ea72992b4dd5b84133a9fc69a3372929ce69b85b425385fe42b3241a74122e751d0def96e78ccd917d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e333d63fd18059153b0755bf189f0d45

          SHA1

          511120b46132af1dfb219dd5f89c450750b63276

          SHA256

          585b4e5cac450e1cf6ea3432c3847927f6f5e16fb71b1fb0e57a1d8b0e3a2292

          SHA512

          55f8d4c54565d84886374a344e4d53973fee8ad39657e5babcff654640a1e7e5303cb23d88cb9493e42f3f5328222c2dde78a8fe3e6138e513562a57d5d21c98

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1f516be3623b45e1cfd413b156d759b1

          SHA1

          f50e5a23f6598fcddb976dcad617728cfe700c5f

          SHA256

          4c9db41a35ab4b1be0ffd502aabb326b1fe3181a720dd5e75a1a37778a4f4ea4

          SHA512

          10eb040fc2ec93e912c0fcccdd7e23a36562e34477ee1c352066c94da42a5b22da268708e99a326fde1fde4fe3b7caf32282a08b857e1ac4203140c7309e1896

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ee7ebe2367249ae54482f47e607c4475

          SHA1

          56206e4121a8c2be9fe3fa318544a863a06bee1b

          SHA256

          469aaed99ff9613a5cd87047731ad3a8c179840d65cf2afce1a25b53137caac9

          SHA512

          840b58f2e9da0c217e1af911b52182e90315dd5c764e58b49579fb25996d830903fc2939586da14d879886d8125187c648fb99eef6090ec7c29cad30f122958b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          a6c027cbb6287bcc8be80f62d56e1ad7

          SHA1

          8e2d1c68f33014a2fb6ff325e4a5e28184fde612

          SHA256

          65ae9704ec4c109ff4eab8ae5627f3dc8d79a20bd5b54e4ed30395fb4ac8c9f1

          SHA512

          5f1a46c4fe3d940c9e26e7f86c1c833ac9f86c94f25717071b113c2fd18d9576cf86fbc111921142c847098d7e99373bcb7ad267e4fa57852c27b79428e2be95

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          165b8ddcf346c4870fbf2b85a7cc701e

          SHA1

          e2321470b750358d922e64f8b8acc6f692d9622c

          SHA256

          9e7038c1c7f258da488f8e7213b8fed039b440d049bc3013026170e7052f6604

          SHA512

          a69ecdd3d1dd1914dcf6fca2197d1b7b2a44dd3e393feca1c3c30dac3bc1f9f83b90215cb2a2a8adbe2429f3b118a45e6ebe4f594f7bbd72cc8121959b587811

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          524470a11c991aee6529ebe1cd283eb3

          SHA1

          3293458df7f754104f4a41ca0de907417bb24100

          SHA256

          2ef606d7d7b31580ae879a822734ad7306ba6d73acfb49850cca824b2ce01e50

          SHA512

          d8eaec5b3538ee49eee365e58efd656544a7f5133c0e0ec2e9b668303e905049f16db3c776dd1c3e8de3b7dfb4b1e1c2aadf64d1fb4437c7202c06e8d4a2fc68

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          514007415987e5eb2de76278814a738b

          SHA1

          3741da8e6dfa3d07f95988e22e0b7b55ce6e55da

          SHA256

          b5052da721193fb8671cb08413896d89511aeee4931ef0b1c1a8d89669cf9a49

          SHA512

          9bd77bdf1e84d2f7794c003b36bddb6f2036d984c0157c7605c93f3924d16a41d29c63b27c62805b25cef5e7175dbe989e289bdde4b390e4e7d38cd41be44705

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0adb04b512bfc01d294707d8ae7ff5fc

          SHA1

          d5cea71baf3dfec740b56596cf55115bbbf92388

          SHA256

          687ddfdda76bcba9b3e49e91ca85e0de3d6520ca3bf6eeca8b2d8d341247666f

          SHA512

          94cb949402ae79d2bb4acb7c11967f690835b4d84ad41e04ef1094e3d98df7e698fae580b0a7f03f374227cb2b74bedee6db48b4afdd0c4eca90ff60e46a447d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          64f53be92545d3e110151faeea78b125

          SHA1

          c4a96cf6d4e14e45271159912b0ccdf6eadfb86b

          SHA256

          e25b1b8b146c84a56b7160da9fca586e4cae23d3b2e85888646203704e29ff43

          SHA512

          2896723b110866c44bbcf290372f9dd26965465309e9e2777886c3b6896e46b85b831b64df1811f3d582128a3a32fa8445ce2e85ef8c78d8fb396ebef8c30065

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          14616cb9125835372ef12fd72fe28bcb

          SHA1

          2520300cc8a6bef8a888d19bdba426502b0d3ab2

          SHA256

          db6830537b8e99f9cc7336aca27ac61a0302cf83e8a24daf7e4ef425a7f358c9

          SHA512

          fce42200316c27d68463da5bb429ec3857002cbfd84f79059c22935a6e2c513907bd5671664e3a6bb691caf489617b84d2e4dc42296d2a4da875576f5d9169ac

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3a9bdea20ef01146b3c73f50a7dd491d

          SHA1

          0303b4bad785ff85710f91b824f83966c64c68a6

          SHA256

          7643b9d2bfa1aa2df28aef4891051fbbfedaa74815962d1444743a4d6e817d6b

          SHA512

          717102d0ca8fcf575f264de4941b3f70a5aed852fa2d7b81bbfe277a6d960adcd93dc99cdddf3ebbfe26fa9821c464e83c16a6aef018bd83e499a8ee306aaefc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          242B

          MD5

          62d40d5a604ca1d4701c05052892e4d2

          SHA1

          d2c39603cfc757ed66d351f324b6fd6ebcb7e174

          SHA256

          a2bacc69311d3a4d180e19d8948c748ce058611321a6a0a53633944b65ecb92e

          SHA512

          1b72a99e74bd2c08a6e310a6d6f1ebdf91701239d2eb6c54e3441c8f420fec38cb39dbe88d4ded3471b41da79c8e5697c96ca9aea600d975f74ceda8abee1e3d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

          Filesize

          4KB

          MD5

          da597791be3b6e732f0bc8b20e38ee62

          SHA1

          1125c45d285c360542027d7554a5c442288974de

          SHA256

          5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

          SHA512

          d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XSOZM8VG\jquery-migrate.min[1].htm

          Filesize

          162B

          MD5

          4f8e702cc244ec5d4de32740c0ecbd97

          SHA1

          3adb1f02d5b6054de0046e367c1d687b6cdf7aff

          SHA256

          9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

          SHA512

          21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

        • C:\Users\Admin\AppData\Local\Temp\Cab3B8B.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar3D06.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a