Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 14:27

General

  • Target

    6792c3d41543a2ebe0c44802a3b60c5d_JaffaCakes118.html

  • Size

    209KB

  • MD5

    6792c3d41543a2ebe0c44802a3b60c5d

  • SHA1

    facb0af33112e8c5ea61ac3c7295e4644c364c0e

  • SHA256

    1f29971cc2b358fe86981fcc4a7658925b416d92b469a5be481d34b9a273edef

  • SHA512

    6ae8118c912efa5f0fe0cc61d0343a49e6df0ff17b79f06c21bebab78b757f5f5bfdc70c53cfe08628ab958b2e87df97ba8b79e9f9f4e9ad69d5d7a990027add

  • SSDEEP

    3072:St7CrWQ2eKyfkMY+BES09JXAnyrZalI+Y6XXI6EyA8:SBCrnsMYod+X3oI+YS1tA8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6792c3d41543a2ebe0c44802a3b60c5d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1988
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1988 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2708

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    a1b8d1cbc93b0d72b8d7f488ac423f57

    SHA1

    fbce68b0c37aae8a43487f923237b19a377dc6a8

    SHA256

    7e4bf59ed3eeb1e2252f548d7be3286fab616929310312280613c49abf7a9110

    SHA512

    bd8128db363136e8d4521958e0745e140ebbd943c57e9eca6db2015d852ef915fca4a7e7ac2e408571dc7abe2a98d4804b7921791d3cd484bea34d51f39f2028

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b81e55b5c9f3cfcc1f35fe35073f11d

    SHA1

    612bac10b2d495ecd407260ad2083968f8bf3e81

    SHA256

    cb073fbca5ceaa589844f00b564183eeee70d2f2bfd7fc023919eaa3ec9bd48a

    SHA512

    057d7e02195e3a7878659437f7c6a43176e9427fdb6227755b1ed0d601235d4b1d59add35ef26d7ba36a6485a12726356d5b71ed3bf0f3bf9d02602613fc709e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    232082751761ef761fc3b36893ac834e

    SHA1

    7409553984a67df7e1d31cc89ce184ea3407d10a

    SHA256

    c3f41b78e4ac6f542a168317dd3e34d91f1623254deba2f687b81994d63bb35c

    SHA512

    8fd59085c81aad289a6e4a4d77ce614a3a648af812197d2fb16c76bfbf403311ac64b8bbb17e4190e58fbf9fd3e89816adb087e968059d0c6ad010ad49ae0ac6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    516f04990d91f87d8817a75f137736f9

    SHA1

    51cea284041b2de40b5e1d06bb81da0f6a5a1bb8

    SHA256

    80473eb11b3c355648e79049cef439d11bddc64ffc6683d5c9ac046ea9522461

    SHA512

    153461d6f87d18921f53008dfbc68cb6cd7c3b688f83dfe99231ca11720d0889e3eb4a0d0ea94581f4871512cadea73f2831b2601f1cc39a0c3e5c26568873b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16099455e184b69012874388c023d0fe

    SHA1

    18c7fa9184dca6a66da9998c0947c14fea636a00

    SHA256

    d3fe768871edc175c6e255655d50a7983ff9e6080aee48717a452d7c5d4ea65a

    SHA512

    4fdf21438476cb1e629e9faa058ff5ea1e006519420b39b696ce2881eef03a4127fdde8c022fef1f8968eb5b78cd1d4a698bb160f1562423422ff0ac457a2f0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3384ff2ee95f6a4209dc8447cd2882a

    SHA1

    014326a082410da5f0c50ec74882bbcfb3fe0d86

    SHA256

    d3765107c75f1c6f537a90114d41626b1335a75b11486f9751e8b09fb0a670c6

    SHA512

    01e375be661baf4e0c1a5d7a76eb33016ee98bfd973f86d88cdeadb579648fa020db19a9ae7a043eea99fbb0199168d6799d15c61998344d65285a8b6d8b5475

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2e8e11a9d85c71dd7ffc7eac8c5b37f

    SHA1

    22cc8912d5daa00fa1b10497aa63efda21857b5e

    SHA256

    f610b96abba0f3a5bf907136a4bc56d18bbcb18a1418f6e9744ce45de66d8f6e

    SHA512

    f44cddf9da2c1d4c7a75a5eb7dab30548a24993cef3d83f0ddf0ef44b85fddc7bda1a045da1dc72272a5b2e03b3068e88f08f7c48a6887045876190d51764a54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61c44d99093edf2a52b9cf78872d40fe

    SHA1

    b4881e0f04d7953f07e1cf49acb7b43931ecfe82

    SHA256

    85cff89218fd2340c5f1fd2695cf485838d5f83d40cce6401570f06f0621cf9a

    SHA512

    d93ce69cc6c3df61700a0238f5248dab6feb89d530612ae2d88b0ebeff0981b1270a2f2d5713866dbdd69442494ddda23dcd048f0cda54563d8cb004fc5bfdd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    651ac1c34d4cf0eca88c574a76a2e495

    SHA1

    bc8308cab4dad34d85d15b99b82b99771d844394

    SHA256

    e58c7a17509b023bffefbf6b8b32bbfb5801dfb53154d5129ccea1ccc20f7c4c

    SHA512

    b2eae0351284378e3d93d53ceb3458e6f8868a04f9c7ab06b2e35aa150cde7ce74f791f99c7bd78d252b52c0ec72dfb32545ad8dda1886ee1b23a504fe894ce3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8451dbf59ae87e82a60e6372b59e9b49

    SHA1

    5ea1d33cc160abf7d6b01369fb5c00e76fcbe9a8

    SHA256

    09f7be7bb0fa915d6f77a7ee3793218b6f772a44bff0a98cc4997f16c34f7ad5

    SHA512

    a1898d9609946ca5c7774cd04ea13018aa62dd7eb30cb558209c8888189b19a5cccd2485d5717e42cfdd019724368551238d3dd1d1710df5d8889e31b27b43dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eca5b4983b28481a4bfb4ff6e3cee4d9

    SHA1

    abb7d28e88f3c32892c12e0d8f69115bb14ad231

    SHA256

    930317cd5aacf53b647e9113954d8e0a7dddbfe1f97efdc8e2ac1dbcf413cc4e

    SHA512

    e4e63c80fa7c093730eeebb07dee44eec8815ee0e8b79586e507e43188048f8c1e8aab6b6d59e8fe92b61bdae0ee3b04d5a204122d5884b4034d52dc26858575

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2505c95fa675055e430fe0e2ffaca9d3

    SHA1

    4bb81d737a2744be8fa0b7f65bd66a8ba8bf82c3

    SHA256

    d80d0943d23139c2008926b2b957a7817a0e775ccf5475fbfcaf82ed0de9af79

    SHA512

    46d35dfacdbfb145462b3d7859b9092c5dbe58d565230b6009c56af305a38fb47794eab6ba0dcc312ba10d467d08db792a4917e4ba0217a20f7db432166b1634

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7ec1f8b35f161a340f4607012b5567a

    SHA1

    5a6828d7f400fc6d412542a7445f957eb34379ff

    SHA256

    535d8982801acb8512db61af095112ce989dd3d7fa4df4a84876635c89d76c96

    SHA512

    6bcd9794e7c095a6cf0e23863203bfd9c477790dbed12a8024b29373a319c23c1973c1b98f562178b1b92ef71bf00ff97f22449291c7829e3d8e15c71e917df1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    430b069b163216cc116a71b6d6dedd19

    SHA1

    a0d503c9bf5127989547a598f970a108c01a6239

    SHA256

    a718d12915c46a1ebcd1faa7be5a1419f968e016e392dfde1ec5230f533aec40

    SHA512

    6f93525388acfc2ed7fcdc7f48e8a9c2adc0f3cdb546890efe192ab79fe21e103b2ffe0c844c28ed791caea9288bc9641005e061a81c7cb4d040e92eb61157a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8481bbf6aef3630d51faa56e7b270fb2

    SHA1

    a82dc29a660c8cace1ba185f4f264fbf957ef171

    SHA256

    c707c3d059cbc577211e611b93623b0295bc62738024869d65e666d9ad659935

    SHA512

    a187d84c84f587a67201ef4c12d4b0c9d180f785fc51fc08ca3676dafb41a68e195fb897c11858b42ac67147003972d888a440f311be52ade013d9d49b7777e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1b6ea3525bbb5002f5c46f04424861d

    SHA1

    32f77f24623c2a20c8519d9c23cdafb43392ad2f

    SHA256

    19025c09e35946981d27d27df773a26b559f42e698455ed7b148f09b65e53324

    SHA512

    8d5e128b98ee1fea0af1c92828f6e0e466d88e84b0bc71f66d5c1b63997c5555ec015babedb374c6ec9a17be06e96da2872d0af709a9b9de4174fa0e9c846d35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54625aa9c6c68d6a03a21a21de49197d

    SHA1

    0cde9234db05e71f1b6c90e60f12917162daa600

    SHA256

    b2a949b0f91089b4ff7d8402f5de692e4e76240a8e7e8ccee8316e0b4f816d4f

    SHA512

    b3e50eecd45c3de908861a18ab9884c3755d3c4634a0b2113569fa3581330f2631a57dd8b73b9d19ba2b38cdecaea4ac8229745fa982dc5f06a8740f458392a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba9b375fd1ad8c7fa58dca2f6a60788c

    SHA1

    b0dbaa63c4413db319822d5ee8401dccedfa2287

    SHA256

    f11394d2a4115b842d28937f36c33d39f0b59f7ef736b386e9758331ca6965a5

    SHA512

    9ea2db3d0a5a98e56f513840c98a3f8dada92056f02257c34fb5e63af3460b2808c5fd51d0e58dff59705116741ebf0289daa8e7af85c75332d0ceaf01b93729

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72e5f3df5656e9963f39f63b6ad8a799

    SHA1

    b20b838ef8c37fff74bceb245cf62b7415dd3b6b

    SHA256

    10732ccc1446aee31b7f4e23af72b4c07fd308ea8c555f18c5ceba4d6956f07b

    SHA512

    326f5fb5f2bf0403182efe08ad3e63246fb9500fc12cd03fdbd70b5e34c4cbad2cc7c968788ad4ff0289280fbebeffd0477955b522574ed51862dd62cf647284

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b168768184b45ebb249feeb4ffc3d050

    SHA1

    dd078aa609358e97702235973236442b5d5e4a69

    SHA256

    75f6a5af18d026ec203065c63b217be2821599f5e00c870e7f10f4d9061317a5

    SHA512

    26ab9a18ecb9d14599633ea01b5026a69887a7c00b033ad9d6a080e979ea54f0d468ebf2e6a2aef5fa20ca1ed3f856ceea81f3da510e67bb767a21d1e6ebd5ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e2c70924cd784fb1d692f7895b49998

    SHA1

    ba65110dfa074a51a50ab620c8f6a1cf92da982f

    SHA256

    adb71cb0577bd216c0b4e4e5f61c82ad72747447268b89e25ade5d4f6d0aeadf

    SHA512

    27c5b4e2873c7274d501a2dcfb52ec5d3097a9646e0f785684388e2e02730bc7a5ad7fdeb55d459938b5feea65b132b90cd55392def2a4c1e54ec8843bb3ca9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b187a7127272c877a466478263524d2e

    SHA1

    617829388cd0769d269e0ebd73fb75350093e887

    SHA256

    c6b0ea6aab950339e0bcb29210822a580265d0ef468c9974d84d732fd4579663

    SHA512

    c66a41bbcb883df7ceec308727024706c5f1e63b296e66f69663c9973c6720efdad7f2a7757a95ec174b7609696a8e7be1e1f3e4ce563534e081a285a9faa336

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab2675.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar27F1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a