Analysis

  • max time kernel
    119s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23/05/2024, 17:29

General

  • Target

    6bb7c9a2db6e1737deb6db8104251971_JaffaCakes118.html

  • Size

    82KB

  • MD5

    6bb7c9a2db6e1737deb6db8104251971

  • SHA1

    41e745821e658a2ea645f62975a07982c5ad774e

  • SHA256

    a87db3d8b5319c5dd164957154d42a0f4345b19922dc63395871faacd63ba1e8

  • SHA512

    71b1b539f6f8eefeb0bbc23c6d1180eb0a812b3ae7c78ae9cc84749bf33099fde6758edd2f454b2ce68504ec57bcfc64135a4e01b4ef545d7aed649cb7716612

  • SSDEEP

    768:SV/gDCBgtYTSx60PdMtQD8pi0Fz5ylWRi7+YmmH3QZsbjA2MqRwXte3oIChTVDGr:SVYDAg/D8pTBJmHgzDGr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6bb7c9a2db6e1737deb6db8104251971_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1612
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1612 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2072

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8b00055f3fcf8132ac7706bc39641002

    SHA1

    7f61df2c5f0a84c328cfdb0640b359c84d799489

    SHA256

    27ff62079439d163e96febfe71131c27ae80d386d0626e6abf51055a503cd7aa

    SHA512

    706700abec7fe46b866dbc49a1d2e7653c3541ac8bb67da73b394f4f1b2a3873f7c71f730222ee323250ad85d34c8e2e96c103266b55bf63c9b9310914372ce2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b10b7b87d4d25b0eee48a79ad4727440

    SHA1

    581ce22eb007bce7d23fbfcf93cf18f421c2e0bf

    SHA256

    cf2321fa75bee8b8522b57c684a9622ab632223f9b7a5236aea11c8fb915d270

    SHA512

    f67ac595c82f435bb7954e547c6ebe7e7a0bfd9b882d54c9ddfd00e6304389febe75baa6fdad56d937452d83a1546c154ea6153ae4541a61d41f6e72fe77ebe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    fa9bc4a5196bb7936f70f5ca86c86c23

    SHA1

    13c479f1cdd217a38741edc15e49705bb9f27a27

    SHA256

    ed09086a98decaf85649eaa7eccc010afb60d648971f2091e35520087d824207

    SHA512

    ec7405328e0f08b3506ced5f3d8e1f5c28409480a9ac0e23738b541c7a312a5174b429a24b351b0c152ef95f7de3637b4b8df80619eff3ad1888b1e8c14a75f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    bd797b52b8b4b3ae4019880ee0c6591d

    SHA1

    96b4c92641c19d62ef33986174d2373b14c61603

    SHA256

    b474d593d249025e09f8b74555aa9cfe78df9dd423f4d3c24a985f0ecbf25d3c

    SHA512

    d78d7411fb63209ff15533311cc55bda0f271a6ba422231f4c79f82db437d8d6d00c257b51f97278aeb3b2510c6ecfd2126da023756a8fa1f4e5ea734ce537f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    455dc3a75c26180feb70993a36f23ef7

    SHA1

    c66868fe018920172c72ae2bef0b29fa794b0817

    SHA256

    b8707b8f635ed2edf6ae673e2059b7ee67f09d38a56391ee884f7035e894a41f

    SHA512

    a612ff96e93bf45bfc993f719621b74f33f7dabd3c518efb3e33ec095c61779ebc0ff6c940d630600a1789b98ac3fd716f9983046e05a4e648442a3dba30f665

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3ebd0d86f45fa16565486569cd4c78d6

    SHA1

    49a5b41dd4a4ee60bd093032495dacecf7aae9ca

    SHA256

    fe235f262c0f170ed794f56064b2f41032dfa2aaa46233c3f313aa4a2ead4336

    SHA512

    198c3f1b19cc36cb0106db07599d5e99b5467bcd371294e9f10005a41bec3b36427df787b4f04a06aa929d8e31ac21d40f4904443a388adfb4ade8addd1a8b85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    acf55ed6513a51c98ee013959ef1404d

    SHA1

    686177d56e1e3613cdfc4acba85d035d8b44b737

    SHA256

    b059e919a89ed9457588aa0319b53ea7aa27327d6e1ca14d982ba4a0205c990a

    SHA512

    b32959b807301d27ee57864f3599edd73b715160a6396eb2775ddf6a11c638f2a7d2934d7b432061a3b9eb343588720e9c7940fd5d90a0da78096816d9da1836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a5cd90b66311d46eeed351e1adb4d858

    SHA1

    16debefa9742c7a4f5dd5db09000a66a40b74476

    SHA256

    c854d019a727203818db1265ec5429c3ed5d06f3f6c4b44a8178359760d2267a

    SHA512

    170bd0e18df655e1781348b7b52db8b215ac6bbe760c45e6697a326eda7b80956cb3014d394c2820b9b0ecacdb2f22d1762e67273b03da969573925a21f21078

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c87b7926ea16373bbc383958da85b34c

    SHA1

    d4277259aebc8d8dc7f8977cfb99c489b7f0e7e9

    SHA256

    5e987ea5c2eb8e34d1cbe50c19c2dde2146d105c0da2de13202ae31fc5f44335

    SHA512

    6f3cee9e1684f9f84e27bdd82dd7a6c1bb036229f04fcbb98a3a10f6d354f3ba8ccc25f348c96a5881300e456e5be0ad7388fca66b4d2260a8ef8fdbd2e213a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2e375d3ca2050958c397b57fed4c2acd

    SHA1

    c3666810e63d5e77e2495a5a958ddeb2eee48ed9

    SHA256

    76783c5e4428e3d0e98376152d76a532f766c49fae76345a7d5727eb792805d7

    SHA512

    4e511d0b40eefa7ab4d87646c245897c5a67b06727eb5bdc1a338c916c54efb521de5e917a2d9f46aaa4326885b2e69aefc9c50a38554350d33947ef5a1192df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3494cf8f3711cb00681bf302e59cbe56

    SHA1

    19ea8048b761fa676cfe4d973c29ef58eddbcdec

    SHA256

    7e99e32bb9254412adde70091c26528ece98acf4726540a1db4a656694c569bf

    SHA512

    71571e1867adbd5511583f536e29b446e1e50b0b4d3e4fd3a1f921bfcee635df06f19a0ab934d06de67fa75623bc0a1c2be9a33079cc128ec38aeef177eb06e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0a3cf13eb63b85fd93d783e2ca4dbe74

    SHA1

    20efe804c8369dbb8cf10bf9a21ca3b2259f1c49

    SHA256

    2c3b537b3efb6aab48b401ed91077e4ce56e3516951886845e304a4090b6f99b

    SHA512

    c1b9f9df8e04f00a5ef9b5d925f7689257ba7216f77a1352e24a6a573eff004bdd4dbaeb9675b4e850fa568604434adf16bb6a79049f54aecb7d9c26f4cde6ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    882d77a64d739b768a37e85d25834f2a

    SHA1

    eac55fc2e8e66c5a2213538293f8d5e63f0fb06b

    SHA256

    4c72ba4b7efdf6d259188adb659c368df62376f4e302d36db2ba1857ac9d3033

    SHA512

    759157dc2a57e2e3c180b8c30578cf08e9794964a3270541afe743f03797300d3598640fbd3e8907716c4499a0f172e0f39a9c7b67f8a549a45854613c2e0294

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c04bb92937e8d65274a0c4191f4f0f63

    SHA1

    b256f11499164853a45474e04ab1457581503875

    SHA256

    088f13c2b28e3e716cdfa497f9ead331d27ff61cbdd7af872e01899b9973c8b7

    SHA512

    17f73e68b34526d85b2a89e5491fa74da2a7155209165b57919412f932c69e6ce6e361056efb4036d239d9a003ed12c0d82dcee8b68300bbc0daafd38cab43e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7eebb11a9ab585c30bd9c71a59a8828a

    SHA1

    19004c501e5ace7259c1512bc0500334e5ae19af

    SHA256

    a782d4a8c70424a914e4acb3042e976a6dbc7ff9b581c3054e6d27035d65c11e

    SHA512

    f1ae2d163a7a2abf723e0bc1797678e9c969325541864d893bb1a6e26364a44ef12d9723fac07639090ff56a380412920e39a79a5c7684aa26f9fed58fda0fea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7da85ab438278f2d4e47eea6357afff3

    SHA1

    35ea5147e30be3b74e876786fdf163b545a57ff9

    SHA256

    a1a7427b54fc31b5c89a49e78f82337b315b254c4132fbcf0b8e8bf113461156

    SHA512

    314857606838c8cef7f6fcb2ffd1ddcabc3355b392df657384d9d4a4ad9a41b03be9bde3d214a12106a2e4ba0360f689621bcbfc274db04a4fe87c29d9724046

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f3d4190443a7b263850204d9f85ad1b0

    SHA1

    0c679e99a75184f6db2643e366df2ef5bf3e4456

    SHA256

    0d9cef6d5168d714f78eb3ac17e11511af6ee7ac05abe6baa9e93130f1a4b0ce

    SHA512

    3099ce868aa32a094ebbef7de0f184f17f5eb4d25fbbbe075658d0cd5844fec21692c0129fdc213b1b213b4653e761336d407ecc76296f3d49a7b05e1163a22d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9c9fdf4f4c3d262cfb864127292230a5

    SHA1

    dda44a10991f17ce1bba211ef9c3585c3e270666

    SHA256

    33b86fa94f90fba803be481ee5a7c8c75db849425883b4e2b3f1e7ac83158b9e

    SHA512

    c3097f1d20f111277d900635104c2bfe74063a85fc139adf22c023f4b11700ac4c18470b422a296516650b65178148e79c494b7962e020a5c85729a1f6df25cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    141c5ee05edd273bd2148f658a58d799

    SHA1

    40e2c1e58717a3f9d0f0f3f20584fdb779febeb4

    SHA256

    4e7503ff41827d764b07ac11eac85b70b20abdc65c1bc929743c1ac14398257b

    SHA512

    7a104ba8a39e3b621d968cb8b5109c75c73827b2a3afa500c36ae8a7ecbf86e271763f35e68a88e679d0cc5c2ee072d7b90b48056ef6f2f748538f29fd97c60d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1ca195195ac0460888044af3c169e8f2

    SHA1

    e846ed8853c7b4176c8d3c14d797904327487dbc

    SHA256

    296d3ad9bce3921dc381ce6766d15d4deb039d81f137dc3498d31b85a05f986f

    SHA512

    7ad158bc215610cf5e97b144fe0369044a5ebb34a696e98b607fd46f676ac86d0c5d0c72bde49d8ce66db77878ebfed4c26d0039fb49b9409f0dd12a7bbf210b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4814b17d91d0dbeb06f6fb5dcce034c9

    SHA1

    93c8f2ec76d1720149333b8e6d7c29b229a936e8

    SHA256

    76aada9e1f7729668f8f0dd2b3b18447b3ab1c55da81f8795d734363d299636c

    SHA512

    74b8ea0d6c8568d0fb96ee9ab6f60d7584f4451c00a643f5064c445888679fdf22d084831f461e44fdd10aa33f0836716f5bbd986777c5066c2d4d5a5154b0c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    abb4b0b79c228ea31dfde1eeb34fef36

    SHA1

    b6cdf18b74b7af383fe37d6360a6f6396de7cc2e

    SHA256

    f6ef5159ff07f2c68d3d80c3290a6612f915b5422df360d199a46252a383b715

    SHA512

    00f4a0f243a316e72f8c2aef6ee5cc34451fac93cb2a5f49b5477fd5d9490c603692ec99ca93ddbab65b9903f25ed849e53373b7dc4a13d1282c0499a899320a

  • C:\Users\Admin\AppData\Local\Temp\Tar96BB.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a