Analysis

  • max time kernel
    143s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 23:40

General

  • Target

    6906c4ef04ead85d0702c3b1de4d789b_JaffaCakes118.html

  • Size

    33KB

  • MD5

    6906c4ef04ead85d0702c3b1de4d789b

  • SHA1

    26770eafbfecd7d59beb1b7f3977f90bba26d066

  • SHA256

    0f6cf7f26b015a7a029e1a74942966bfb8c6f361d86160f9c2a0ec1e3a8a998f

  • SHA512

    1204c5274a61110f3b6e83f0cfe6ab71e1e24b476fabf9700680c69c065f803a95229cae6fa669e0088ca779f4a030f5190ac70b49bf138d4c124790e743a3fb

  • SSDEEP

    768:iQlYXfOa/z9p3iWUkDVG4VegHC8xQgMU9hkny0+wn9A:iQlY3z9p3iWUkDVG4VegHC8xQHU9hkny

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6906c4ef04ead85d0702c3b1de4d789b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2748
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2748 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2560

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    51ebfdb776a9ba9f65c2cb9d920b48f3

    SHA1

    b6e5d0a7310fa78eaad42432cbc50623b68af553

    SHA256

    8826ea34b1580e6258079cee7d4638341aa6622340bdb9bff94e1df6b844399b

    SHA512

    5ac173ac99f631df383149d8f51f75d359e7feb3fadb53bacb65e65978c203f525f8c69f7fdec80c974947103c6984bfcb2eaaa92b46bb49b7fbe2d4513f5f05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06631506c00188c19004eeb27ff18930

    SHA1

    4110e52b85b5b7344eb423e053b37d97652669c5

    SHA256

    f39fcb5a0965cd30f6cc95ad8428fd79c6160b10a173d46080a872d01a1980e6

    SHA512

    01cd0c4aeb207412a0c53077fe6b49778e1d7d809d1f98e0835ee5b38c3937ba0ef3a203180ec533209b77987d5df26c41d5941bfe459ddb1d23423e5b0836e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8aad6b58b59ac32ebad45cb86dbe428d

    SHA1

    8434deba06dcbb681ad20db9314edbcccd59e2cf

    SHA256

    4dcf7c38b770bf71626fc3e29fd27f9d1a2b1e4769175f8ad4002fb2a5d748a4

    SHA512

    96c761767c9d0c1fcb870b3e9756d9a87ee05c3dfd6c1ff3e4a4c1c387f89bd64125d7c5449bfb4ceece946001e3218f64f3279a504a8ff6a26c73b4c6dd7d46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    134b0670f2f6148012660ff636b55a5e

    SHA1

    5ae8ed3ca4feffafd381fe24f1be2a4886babf88

    SHA256

    def96c281f1ab7f8e2adc9eb37378c89caee51280c096e24e2562b95d7b2ef3c

    SHA512

    9747d970cf4d5d5d61390b231618641018d8a3c3c1ecd8843f4659fbee6926eb8aa2fc5ad3eb84e0720b0d8f34b87463753bd148cc1ce2bb52ec4ecdb681c124

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1f8a030522d1f5fa6d550331b97d703

    SHA1

    21514e787686fa1e9bbc521e1a0633eca477d03e

    SHA256

    bf48506013d78acdb03572bc9468e14c6e58ecd87d184fa068f782fde5102fa5

    SHA512

    86aea01585540a4134d55bc7ea5ce7003f48b42185af92b13dada420b0a50d54acab2fdf6caa97a41b799fadd405692fa6f230483f0bb3aa854d5e29c73f58d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6067653e5f79384c1a2e7ffd5eb1df41

    SHA1

    1aeaf1114928b76a3d6b632b0bdd97db766889bc

    SHA256

    eab56cce7aa70fa30f80ed5b8d6d31d987614d79b943639a8c2f1542d5f50a26

    SHA512

    68a07466b67b2672816173e9dcd41d6104ee312c0e9fcd6add34ff911ec0108b75dcc50ee9b2a648b92cbdc4ac78eb75872fa05bc946cf53312e6edf0f92040d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f5017a1f32b7a93547af161bedafb0e

    SHA1

    6b656e9288235fa8fe27b84ba739212ef02fc4b5

    SHA256

    19591d765704e950ae64f6def7588a731279ba503a064e267b499d6596011044

    SHA512

    9b61272e8aad712e9547f892038dd01750fab0e886c3b486886258bde6ba65351a43cef955f8a99ce2a2d6ef80ca74da3ab2763f30cbb574aa1c49e1108fa5ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cf55e6f86d6786951508d6bcb5a0bf6

    SHA1

    d10e9c7cf30709d10ce6071b3656cb790b0d65ff

    SHA256

    5fcd9cc120e52761232037f5ae29f936aac71ffddc94a2868ac0c5a8fb941b2d

    SHA512

    e3939b6eb99f7348d0a505ccc52ddd6040f1dfefce97ca6af816333c25ba4f0eb5b54447e0ce8352d5212380103b54e3bbffe3f8a11aedfdffe23ae2dc3e713c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e726ed0a00034a857d6f0a97559b503

    SHA1

    fc8bc63167322be4861a4e34d8c1c6020a39ebb5

    SHA256

    27180ea2f9110cfd219205d0f2831f908ae07d79b6f954b47ca285791ed349e3

    SHA512

    e335b780fe4ef970033088edac4607358c6f977b79542971631a92b6048062ee4ebcae542c86bb4c6f0aac4508a13d883cd12cb8ba791f7ce47ab4004a395358

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3439fa732085754590940cec9518e666

    SHA1

    964e55272e7dba91b6219efae8124307c5bc8b04

    SHA256

    b48ad8b7e2297b57d3f5f6c433941943e85da1a3c548e3f888871f7652ca58aa

    SHA512

    b9cfe81cd04b19e720ddd29146c78340af3d8cfa53a0b4e9f2ee69748ca405ff0b6844102f5a891f2cc255114e2e1accab18b00fefb8719427ab9fa24bfa2140

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e1897f1dbba54f1f61b67e217385d5a

    SHA1

    20070b3549dfe2008d338a7d6a7c2091df43578c

    SHA256

    00813e6e61b3772909bfd2ec14c5268b8c5cfac973602bb5b4df0486bab3a8af

    SHA512

    799cc7ed126204e976e99bebb9337f2c54d67224f24d459c5d0b5f021264a33adc78dc31abcf5a1c40e3db73eea0c0c07bc7a02baea575335375f34605ed6954

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20257afd9e364946f25d4a117bd51aa1

    SHA1

    3ef1f4cc60a4bc87465d9514c4032767a11d30f3

    SHA256

    0594aaf97e6bbb877217a423e081cf6d91fbb9cdec3e18bbf96bec82f4ef394d

    SHA512

    8091facbbc19bd15e415f61063029594e7edd091a53de7c49553b0c7be1a7eb012ff0b1afc28c79387f52b920437f39423ff8a0dd5f86394a982e0628701579d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25befb7102dc12b17a045e3b048ddc09

    SHA1

    f9ce2ffcff0240805596b3ca81a0ca5cfaa84083

    SHA256

    68585f6a253e14636e013aaeaf3460058c699c54755860dc1308861f25370f7e

    SHA512

    17b4802c5407098eecb6c2399119a1602c900999e8ca48488ffa726fc57623af781de7dd95e86f5156481558067f4074c785ae16e82b05d0424d84dfbbd680d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a118a64eed87cee2b432e7f1585ebbd4

    SHA1

    124346802577638ef7849aa789df5abd733b71ef

    SHA256

    370fc0e108a2c61b299f0b9722dd39dc6d0db4ee2aed2191d0b15dfc25b78328

    SHA512

    75384813a23d306ee10ede7f65b6fc5811528bc1bb3a5519c4a278a383a2b00d5b96011404a71756a282f3625045e7cf36236154a59c16a2cbbf5393623abdce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    847d2206ae8be5a3cb32f989cda0de03

    SHA1

    b4a4860c12cd15119abdde2ea598be84d9cc444a

    SHA256

    24e556427e34d4182d41016de666fb5aa08749dc02702aa2c9a1cdfaa629b660

    SHA512

    d3e468048c1292b38569af9f83d901efc6c9aa8d83a8a8b1118ecfdcb64b8cdb5188c2cbe1d9c025b32ad68744fd98251f5521c36fc1861d5855c2264b5a0f3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f138b0292577bc425a28a85a109606e

    SHA1

    aeef6543a1e08a2f7840d2e531924f62084dab9a

    SHA256

    7df387c1ed0665cc1172d3eced1ca2de8fc7c6b79ff2d4177608a7502c3454c7

    SHA512

    a85aa9ed9ba3c4944e7afffcca856f33b5c59a39eda0234b2c094b0708d522a1b703a65176536b5db378a2c012ca318aef5b73c09acad3a13cadf75d22ee2901

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5b07c9bf9362d68c038cdcdc83514f7

    SHA1

    a1adbc64860f68f121c3e3b24a5bfbd6a73f5481

    SHA256

    9282d166688e8859c3ab00b7ba8cace99166ab08f55c05ce54e0d62f92494e2b

    SHA512

    8917092f6beefbc7d41dac1a25a973fc54e376661dc4fe078e17993bfb8a7c6b16c6b3aea1c80b5d093f2b9f34b1613054d3577ee506ee31ebd106f8d22888fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3035b6da988ccacb3764eb77a52e1b2c

    SHA1

    f48dd5bb6268901662d072f291553139f64e6e8e

    SHA256

    a2b7a3aa7c87b43db55988f85a86e06a7c157e4f44ae89ae3cebf5c4c49ce74b

    SHA512

    3259f1a694afafb7d16cf7877f1ebcd37c919aa6c1c8536fff19b6a7175b040d9e0b0ab096da4936a0d59809894dfd58a2ccfd7289d7b9fdc909f4af6e121937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e96f8508229a0cc7d5be87e4cc55fc9

    SHA1

    0a17264287f3c7ec56335deedf233c30869e6a40

    SHA256

    bf97a94c7d6ca53232402447e8e7838705628d31e401fb87568c92b609c55a9b

    SHA512

    0e19d39df9cbce9d5be02b7c5979ba95819c6bf98280e1ae83653070c895849d3154bb8c3c9b03a4df462302f9a4af0ae923cf038e52a776736a32509f15bf37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    071982ff997ed578c1146bd77a0e10f8

    SHA1

    234c53c91f2d397f26160387b6998937f4e2aa6b

    SHA256

    21bbe49347d66212dbf6fe31ef446416a5cd60654e5424a73dfc298dc45e2fc8

    SHA512

    91cbcc28d16ed599b65fd28345e3cf6dba49c28f35e0161276460a01c2d2adde7364906a06b4dd4d2ea83258deeff2e8b6ac1b86c5ef31dc6e1ffd96056e09a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31e1a32475277d1be6038bcb3fa7e613

    SHA1

    0cf23656369e1e7f3f3080ac8dbeef78a80b66a3

    SHA256

    1f5a544f51ba518ffa0e8570bae43d28c5467d164593d694a806210949af7a5b

    SHA512

    1330c4f379f6f4d07feaea5330d1e0655f7b3a8417a2e05d5b455a7fa82bde6b68f81202ed0c6efb1f35fff85c3ad7506dd3d246e2892b3e8495abe7bc35a859

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e1de1e38b078e0318a4c042bde922e5

    SHA1

    cb0b1903233f882f758fcc9d205bc55ba779876e

    SHA256

    4130504296db8f8eaf38a57a10940f2e7c742ade686eab4a769e076644f34e4b

    SHA512

    00088651db20f7b0a061f44524133a6f21033f68840ca4eb43887180d7a9d364a88be8cd67d0766bd5aa90fab0a72373fdcb8bedf4f93be49e59719182895a84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd7fab9621ea86e1c94772b0a89530fc

    SHA1

    bec684ce287d245ad7a81307189f0d74ecd54bbc

    SHA256

    cd4ca5f02fa9cefe3666cf370dc859b35b938eab967476b7f1a155fc60d10bbd

    SHA512

    a1715fb7e3bd78306627c3b2c32b8f4e0ab5e64cfbb512b21bd57f566dbca919315f277966bbb30897f18f02f7a6ce1fba0bce3c430a834c7252f7665b948247

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ebb24c958b806b0970817ff770ca02e

    SHA1

    6315e84d2c5c9b9e816e9d6d2ed6ce4f7d2832d7

    SHA256

    c78b760436fd1ed835cc1041efcab04b7ea5d44dc780f389da6ad2b87ea3bdab

    SHA512

    adc9a4a3b5006b00407be07211d831b22286a1918987c50e4c132a4536a4580b5730b546d58b0c341389d46a360e3ef41b91370c36f68b7332cbb82910504acf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ab7db506ab5541e4a874f66922b01c6b

    SHA1

    72ff2bb053a4fa7d491783331379570ea47835a6

    SHA256

    c2e49b2d032d54ff947ec71ebde39a31b95bd4f6412bf890afab780b8c67db48

    SHA512

    fa5d8a24b827808d83c66f21217ac1ef59d12aed8b1321e00e602958dcce3078cbadae0d86bebd5ab6b55f5b5acb068ef05e56599d087806b015ec634eff79bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    156ada67886449a414031f0cef66c317

    SHA1

    e2baeea2eb3bf2a74b3dac82966f5df65c3578d7

    SHA256

    462c7caf04d16a5d7a821c68b2590184a6486b87abd6fa305ca0d2598aba7635

    SHA512

    c1c3469ae8d21b67e7e72e0ffd69541dd08a666454ffe0a10c4e2a3fbf3588ba76ab3bdf6cf4c982dc585b2726901a8a4d4425060c6a5a8a4d7ebe1ad98e41c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\CabAAE.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarAB0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a