Analysis

  • max time kernel
    117s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 02:07

General

  • Target

    696583776e0e6b439e41874b7aa18db2_JaffaCakes118.html

  • Size

    230KB

  • MD5

    696583776e0e6b439e41874b7aa18db2

  • SHA1

    770cbf64465cf2b30851f61b783113342a5da2b9

  • SHA256

    d0745f121eedb7e5f1b46b7bb0046f7b6bc5430fc287a7443b4bf61d0ff4f07f

  • SHA512

    d022dcb1b690a3556cf847d4d05cc2c7b5bce520d5d65aa1a2f1ae47caffde4bcfef28ecc64c1a078198d3e195752bf99a082406534be96b3767ad2aad2b84b4

  • SSDEEP

    1536:dsgFEZgT2ENOdZGoVw0psR+PQlpJRLIVEZcknvmOdZhRwzgNSBnP1PPWqb4V:tVIUX8K3JNSBnP1PPWqbY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\696583776e0e6b439e41874b7aa18db2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2892

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d57b4557c4de1a8b773200c2e94a8f58

    SHA1

    b01faef6c941a49aeb558a15a2225eff9d9e6c5e

    SHA256

    ff4e49e2694dd5237eceb8ee692acf7e54079366bf66a36c99805d33af71c572

    SHA512

    a66a003dcedd5f303705eef4f2e2d6609f292cf5660b76195d537d3e99efbba115086ecdc953f7b29dc881998f2a94eef171d3662ee003b70dcf604e833c81dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0fc3174f863a500d9d7f8f7a4b3c35c

    SHA1

    b3bd82702ed9cbd3d78cdc02925a604ca37246b1

    SHA256

    b7b520c8bb841fa0c07fbb7c1d3fc32aebacef446d382fa6a20464b0748f6990

    SHA512

    df565f857febc3fe1c84846ed113e57095880e1ec9c4b0c079512fd455a700e7c66ca7f4f79907db3984360ded46228ae2bb83cc5d7f1184b29879107f787d31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99c01f8e1924a81334e91109770ef7f1

    SHA1

    8f098b09a38e5ea90e2af8cc9a31b8e1bd3ed815

    SHA256

    428f3a399fef530f4ae3ca41f6d17752966d23390d16b5f646bdc0afef5b2a37

    SHA512

    95b0e5d9e328e8aae53a07d1e86696a55cd84de8cc2d7bc749d4c68258932df21384e8ea74081f9a816ea1bff79db4d42ec4f905590358a764294b86a5e57703

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc01e52e50aed36930155275a2d957d5

    SHA1

    255cd633b84a2cbe0bae124eb3044f97b254f625

    SHA256

    33a49cd7ce3a948dc14a7a0f6b1c01b189827f6c07dee017e95fb90b652e88d6

    SHA512

    7bd5354569e0b8aec9aad57188fe9b1b60fcb349dbd8ac74f3b857c9ed55180f78199c326231c633302876572271580c40dd88ecf9ef2e70a8268168dec1f342

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae01fe8894f177788e84b51ea63c660d

    SHA1

    ed666725fb40cb3fec998fe31bcf68cea312be05

    SHA256

    41a844a3bad1068904d52ce9dba667109783f7235e3960d6536b012b11a2baff

    SHA512

    24a5d72f2ea7a133b121504ccc924df493045c9c364cde2d23b65c7e2b88c995c9d4346a651126eb3a5e1cab9a82bb2693f3c41f2388b0945daeec6239a9ce5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d0e610a53ca46fac97b2ab75ae6a14a

    SHA1

    385ac7c085813d4aa067797179afa4a1dea71afb

    SHA256

    9ba01d3f5437b602c97185b4f414d29a10831988694ea30d895856754acb7d78

    SHA512

    b44c411da016b0008867691eb96b130fd93f33e48b35403e72a783e5c7db31d43758bf7cddae95711de681d2949862a39169ea31b7bb5ed8dfececa9d0b00ece

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    565e04943331dda8f4ade96b31524b25

    SHA1

    4e7d552106c88f0f8b3ff0ddee92abf34ddc7a05

    SHA256

    aade4110e4b71e839015cec67d814981af2458e4f8ab2bdcd81b12bd4fdfaa63

    SHA512

    b277e00e04b4123b9745020bc9e8fca9a31acb011b883ae1f947f1ff2d1867a4cd978c7b9e4663c11aae16db65cf86aa569936d0dea1d2ba50bcb95932f07dfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    455b89aa82c2af79ccae4f994e3ff5f2

    SHA1

    279d67897fad7d83a0513feb1cec7b74bd40ec17

    SHA256

    d52995f35e8c7783967ba05ef4c08305e5c8ee48b21f9efe36614db9cd258c9c

    SHA512

    483422f36e8069d7b2068c5384d52ab9c371b1d91caf3d8141a029b8a506e858e17b3f5ebed3f6c7697fca286f04db4f5c29b4b32fdebcb7014afedd844dc888

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d2dfc61cdc7e7955543b1c69e84d77d

    SHA1

    d299e61e98a7f6d7d10d61189a523706193cc419

    SHA256

    f0cf3d2fde8707d006dd8e8d8c3d3d56b52ce83513489362efacb3bb47181904

    SHA512

    68194844323d17eb1992f52669ec88f26c47a8fb06c34210eaa707ddc98f57c86a7f830f39f73bcbf0be367eec39171807ca0978cc6596b6724abe18e526ca7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d55de31e39efb59f9f557ae2e6da2c35

    SHA1

    ee45857b508b851c14db089cd4e83fb31aa0a24b

    SHA256

    307516f4002a6b9efcbf98f7b0acebc89b4c4059e51664b260f70a2f7636da83

    SHA512

    e8e2e57cb5db2c5248839760d1ffb87042ef480271f8b2993007e5c85bdbe900f21caa6965fe8de98dc72fe3c4f0c5698fcdaf95d16df5d4f0e48f8d3e1471f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3055d24e79cc6cff96552ddc668d9e7f

    SHA1

    c8350646593a131e66aeead9915069420e0ff333

    SHA256

    788767f39f7501b629868230df188cebc857b4dbae011ac64bbcd89ba2e44abe

    SHA512

    4c7e8a53024f95698eeacbd03f640e6abf96f7c3fe037e2f4989df2d20ccebff18dd8dc3e455e8d73c0da22501e86709c2974e0b51c48d885a7cb3d701428db1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    206a58433e8e81056d6facde3b4ef4ad

    SHA1

    18fa88a49f9c2bc67af9cc0eab5298300143f330

    SHA256

    9e754339c275481b7903f19ca96497ab7ac0357994b9d665e3f6968b20c4a062

    SHA512

    032e583e16efc9bd3c5acc1b5903a0c0d76e14bb68226e577ed75e2b9ad8f5be48b996f40f016c9d209cd2ae48e7ac657cd7a6bfb1fc306b7cb79d9f7d5aba95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78d0c302006ed6c12e3a82b42f004eed

    SHA1

    b7ef5a5a5c41505e0d7ec410f2fa63eeb57fe8f0

    SHA256

    08a73f53c4b3e160a0db91ddc4c082ccab9159a5ab7b10cfceae7f7c62e78968

    SHA512

    7a920fc1ddb3b107803e6354b18d879692bb887086a03b4461173c8fd05a9c8c227dc51a1829ef2076539ea51512e2ec67d1af4360fc4c80f3255d59ac1cd63c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2006f0e6d66c82f1ad701551b1be50e3

    SHA1

    ff0e48fa68687f5341ce138c0e6405d5a0eac7c3

    SHA256

    5d68a0f0786d33088295390389ca2f4076b5612021456817c2418924eed88408

    SHA512

    4d3caa751e504790010a60a642b6b4d4ee9398cb676917fb4d80da8abe9a9b6f5da654533f99adef54dec9907c288506c5eee01d4b8f03f1b53b64e3e4ef5dcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60912177ad5e0398aa3d8686bf15db18

    SHA1

    5688d69a76793acaa361267f3f782cc0db6d1ed4

    SHA256

    4cbbab612f6526fb4d432b246dc7d9d02baa313095e3eaccd1defc6e822ed2be

    SHA512

    189dda89a6b767bf620e18ede34efeb72b5d420b28b37e807c8abaa2528da5ef4b94f59a0ca9f24d64223ab8ba74ff4e9a72cddd124d4fc6a98c85964a508de5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b82a9e40f50105e72b134dafcb3084b5

    SHA1

    06923ac6fe9f27bbb286f4c36e1444ff2540fdd9

    SHA256

    26db98c15ccd378e0531375bc1b10c4e533779376218619bae9c4b83620dfafa

    SHA512

    86b0b5bcd566a50bec1c68710e05f9edb9bf5e57c660adae47dfaee27f0889ebe2aed610879f4d65eff1c766599447a414a77efbcfb4a4aca2d5c485398a0f5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf30d0811e67a6883c7497224fa29d10

    SHA1

    7ce0bee09112238bb9f4a851a741c2f67bc997d7

    SHA256

    0777fccb06dc9568413823ada884269f8a239adb8aebd8132ef8aaa253c74619

    SHA512

    574cf9a0fcb5bad54ad0e0d40ca4d3f8d31b03ad7b2fa8b248801ddba0d6486d65dae4ac35c1fd83f82214319ac53d21a739191056c745f67b537ca080ff983c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e2f9c3f393f9511729f28417fe81b62

    SHA1

    7e4c7a2808b0d64084baa2a2bb823700aaa0badf

    SHA256

    f8dfdd611d9f7c8554b38710e8aa0bf2d28f73a7d8b08863077a1a56d7fd983b

    SHA512

    049a24d0253d1c9242a7697ed508fbb0c0841f61027cb541923f7f80e330464a13ea80118505be3401360eadd808d8405d76f26453f01605381b269cf2a9b96e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb28aa40d578b8a76b345838bf17b4f9

    SHA1

    3dad15efe7f9c12825930b030db2e58c2e362568

    SHA256

    286cd8b83a4a44248372272cffd0576c2266c4d582555b728e0ab09b382cfe53

    SHA512

    0d647eafd1b38a3310bf5e09ff7f485d41882f9d1ccebba4059a29a1833c6809a391974d8abd129b956b271c10fea1977e44ea8cb282d6453efb7ec84d424833

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0098322dc8116f1e851efc391cddf535

    SHA1

    9bd12a9979e3d3364e261aa7ef20cf2bb06631a0

    SHA256

    949d0068fe915ff411ac9bdc97f8dfc2551583fe026d04a38e4cb1819a61f47d

    SHA512

    1ed92152b54bc9f281e63ffca2390c20ac0149f40918e73e815b4e73eb43aaab68cd1d0b231993e37bcf1b5fbe0cd9a4250f87b0ccd6175024e341cab745419f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa53f60a700772420cab3f4f8f566a4d

    SHA1

    06c76da188d23c12d83c34b525d61a2cedd9e667

    SHA256

    da3c4cc934f638319d9e3d288ee9b823d800d0efad648f11805af9d8cf1bc32b

    SHA512

    da2492fb7374a9cb2d14eb2b44ab8edf37d0d90162063ba1ab2943de84684d400b5fc122a709e50cfd2094127bac7a1c7524b39dc0237bae29e0f60ea8006e55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a07a03c5fa93849788d400e6116e8b83

    SHA1

    35317bbffa5c879d3f46a74d10647f10e209ee62

    SHA256

    e71bc069461a53b43d51a0bb24e0b5a5a57a51ff25b6fa15c320359340d91fe1

    SHA512

    7b8221f29628eea616eb80b4dddd95a4b7f493251effa94364e0e8c56d70cde046139d02928543b2f27253e0a049159b29c1505038cbd9d3d44f85f9365c7706

  • C:\Users\Admin\AppData\Local\Temp\CabD5B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarAAC.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarC3A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a