Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24-05-2024 05:29

General

  • Target

    6d79027109cd3d4ef49fb8c5182e65bd_JaffaCakes118.html

  • Size

    40KB

  • MD5

    6d79027109cd3d4ef49fb8c5182e65bd

  • SHA1

    022b7151857997b278a0c75f94645ec096558a92

  • SHA256

    77b1cad604f82a07a5924063e7cb0445c662f529ca43c6004c6afade3221d22f

  • SHA512

    cea63eae70eca7b4dc4eee2df41db0740ddecd431b59060681f1ac9738ffbe2a9e227b21c43b690cb7e025ce3117632023c99edd16df934e5a814b2c6ce2d860

  • SSDEEP

    768:H4of7POQtj0W6r6f34QAOqhdlqY5B0XQkPpL3k20XVEuFV0XV4aq+:YofTLtj56rrF7zgQnrVEAmV4aq+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6d79027109cd3d4ef49fb8c5182e65bd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2248
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2196

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    6180880554079cce45e90c0e2f0d1a12

    SHA1

    582754d9efea56d5bf20d19ee3ea1c89aacfd755

    SHA256

    f1a584dadcff1d0771907befea8175a3085541c8e0d2db8b52de97c02a2a1f6b

    SHA512

    796aea097d6c41989e8955d0ead10773a529af2cbc32d245b50979b3abbc08a32d559277b49bce16e04882fcb59f2c25910091521c9ba6aaa4c6b73bc5a52b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\432DAB2DDEF4C07EB519D7A03DC057A3

    Filesize

    503B

    MD5

    b8332f1ca8331fdfea2f1ffed2bb1b1b

    SHA1

    75eb637ec84d16487d02800b2f194a874d8dce05

    SHA256

    bca028676e2e596e7d190fd428494dd3300d3219396be71985b2d4936baeaca8

    SHA512

    a11eccc50ed4cfffa5c93eca403e999e1cf6e4b38cefdeaed4bd7e23a8b1dbc9a74ff5fd641c3eafdd5633286e54829a86fc5f8750a9d46bab40129a35862467

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    ecc7205e125ba4e206b3687d61ebcb56

    SHA1

    2d263dd7871ddc07aa5d42c2f22d112a83cc876f

    SHA256

    b923a45e26cd3f8e1ae7d5508c1ac7eecf2272ce6a7c9ee97a2ad961307717a4

    SHA512

    c99c82984a43c8828babcbcc37a80a7b15e51899a555db591a8061bb854bcf770f608255d65d8e18ee146ba292702b1c2ccd629dabed5996a06b3e99ee723ef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    1231c752472642914ee321b78c7d9231

    SHA1

    a01fa97a9f01f788b7ffbd61f781b6dd88ac95b4

    SHA256

    ff1eb60f13866fcb5c1b0b7224c3877d74ccf3ebe23aa04d8c7c54d07ebbd490

    SHA512

    9c9cdbffd1a7a994f1932295cfd4f71e27ee464cc11485501dead537e7ff2ec771bdcf0192a1b32a735c77b3d5e95b6fd5954b366256f588eaa639e8662b16d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    6bf5898df0801b010518c8d425a84797

    SHA1

    e88556d662f142a1bac694f41496ae86b2af1fe3

    SHA256

    c2541edc4c0101e9b517a3e5e6e80e01eb890ca5b2466c71c37acfdd95e11376

    SHA512

    65cc22f9db2b5a729301119ff61074c70d2efff466b7cbd0dc759700bb4a911f4ebb2f60c92172c1ac992d576b726a0cf6dcb6f103d265060f4c2cb88af6816e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ac27db53b25d89aab6a2d254b1a47b30

    SHA1

    fd5096e57138896dbac597fee87fd18b276db37b

    SHA256

    1e1c99ab78cd224e20619146413b6c8b25713e4eb0ca06f1cf08693c9403225e

    SHA512

    56d83cc3114da43d9af986e5a27036fda7849c7bba37034ea05870daa6b5dc7d99e17d017e7e2cdcac6469ed6e7d6f7571672a5b9bf579d07119359e383bb926

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    176B

    MD5

    9098986ec48fb9f2d39438a8ab055405

    SHA1

    5891408fff782e3d7ee8ad3a5f80df0bb17d0295

    SHA256

    10c28937bf8f0f188a4a25bb2d368da03d1f26356ef78cc868f50b76f50f7e73

    SHA512

    0656af08f8a31ac51513a9fd6a60460e292b27b0a467aec5f86aa359b57a65326ab938d21acc7e54a61371b837b7303fb4b8a05a4850cb62b88fbe3fe1177327

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf560dd9d184ac085d0e12ddc904cec1

    SHA1

    419c452d6a740820e2515bf94dea718b06176289

    SHA256

    4806bc0a975b44a3c9f5f5d39a8a51067e0b0a685cc8075fcdaeed012744b183

    SHA512

    a0baeb67ad6607c2da3b4074d6fc5559be3f56f3ddea58b29984a44dd61faf139a5655a6457e7c2bb4a1f7428406f23a84802c50a74c2470dc3971e5ccc4ba7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba8b884db00c463a1069a4ee88684d32

    SHA1

    34df40bb34fef18b7ad8afbcac2272aa6d703e5f

    SHA256

    42a2fa81bf3f8b7f200688455e38a01bb3864ea2b335d34d18fefeae7b048ae2

    SHA512

    5605bfd8b6472aeb78ebbdc04f582f6c6c05fb33780e53f0f03ddbb830a21ee5fdf6c637f5ca62b9123de071ceedac950251ca69a80e2653f2adbf3aef47ee9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4045c6fd222b906d78b3a15e0162ee1

    SHA1

    9dba8a702cf2b163ffd322ef8788a8cb044ec900

    SHA256

    01cbcac81f0cef883301b1aa10b8c50fe259ba264645af0a1fbc0f22950fa39e

    SHA512

    049676ae505864ae4d9164e9068ac6c202039c0a42511bf6f47272b1a7e002975514e5b1160fb9fa687154a6a77864339d926c9f075f3be51fde11f32e6485be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df46f19e940b065283161923be17bc46

    SHA1

    1fb86c309db87e9279ca08d881b0396edf6f4645

    SHA256

    dcb3d8ad45449ce28907ce3048d8e0b70983bc2096b472b139a24423e6b93f91

    SHA512

    61f23b469b23ec318101f763d6890d4d066158f970ed1a43e52b6a36385265b6ed84b415f242859c309868b47adbf144dffb38b4e4e1193e171521b727588196

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    633a044582650c459b7cc9c5c2c44a81

    SHA1

    a5d47398912a34e5cb18310f4343fbe853380889

    SHA256

    420c100996db650c26534315302a96039a7318c687cea6da6c7fd39dbc63d027

    SHA512

    bc0d42d5b872e7d286dc23fa558d9774671f5a67c7a649ae0b87e4cab655b39a2a451bd16a063aa294bb94afefa2b0cf42d39d92f526625f4b34ba62ad5f5d06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30a93757cac3ef60b65097f3a2f76baa

    SHA1

    c7e5b3c6badc42925c7f27160fd7ce1733217b66

    SHA256

    01fe1d2b6392366d78f13f5cba5ea041eabf17756e9193b0e2a04afa1c603779

    SHA512

    8ebc29d233d3e8187ef8f050ee05dc10257e6e1939a98ab0656fdcf74660683b5b35b022bf37c5fb949b32c62cd4d39570d57904c5bacc34cc0b3766035eae81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    656dd7664307364de829f45c79a0e23d

    SHA1

    47b73a704cd6e5b9d3abd7dc58119382e0d285ae

    SHA256

    4ef680b29879bfde8ab0b926f753a00c80d33ce0d3e308ab1c5676df48a85c9d

    SHA512

    fee09b12511556f355f49aabbfb8e76c82ce64bbdd5796e42bd1a037dfa72dcff18ff43718a43732d9859302f5661cb7ad5adfcf4c5e6a4560996f89daa7f0bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a692f336121745bb166c95a8689d6247

    SHA1

    b6e81d6c4c209f23f00d9163b69b4050977d85e9

    SHA256

    55ce6cdd27f35711c634459881f79d05f71298707009601de0728251a5b804b3

    SHA512

    0a7ded1accc8bf5001959ae5856bf2f960172543ae5e6ef13399bd5821c3630c4f648a9b9490bb66c4e76b074e9369c74d04e1f19240546f80703e2948c07d1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59baebec18bb009a8a407bd3f8d29edc

    SHA1

    d782ba7b37da067d340bb5becf9b102781fd5373

    SHA256

    cc54ec85e7811a7374166f451dbadd5c2d962a77c974ff96444c407416b7e80e

    SHA512

    32d2883fea5518f47bb6924054d80286080c229881ba1e108e598504d37943bdf42cce8e446306ac52f1b6d6b7b42a8119dc4ad47fba9149f9eaf54a7c87ee40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bb24c2f44227f67dd06904dd1c6fabb

    SHA1

    fbde73dfb60313e43b9ae4ea3390c10b6f885155

    SHA256

    ea300f0265d663ee9581e5999c4e2e4abf7b522a556adf5cb8a195e563d10ce7

    SHA512

    a7711bf67266ff7fc8f5ad3a04643fec692a06c9237faf906bf3038a598d7357fc87c77a2ccee98f8722c5202eade0100f257170c2278b2ac044acf2d27fc0d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d055f85c9a8176ce4031e0893b2e89eb

    SHA1

    8435aab3a6a54642b116ad7faa9ec5058f3f4d9b

    SHA256

    1f5e57a143eefa58462cd4c2591adef5b8459c527454f0946e9b926919a81b77

    SHA512

    fc1129f940c885e0d4e5d335870e1e045d2f7e7c330f1d90a6791e1051788363f5747f4229a2a6ad880b64d862b00e6f9749d805a960de9b45508b8370580b06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab45e82d9f7c952378cd86be3ce01c1c

    SHA1

    34d8778dda9f55ea243e74df880cc852967ba62f

    SHA256

    5d7043dc36e45e905d66b49ea21d6ab3c41d200838f3e63925f83419a8057e63

    SHA512

    e9f71172afdc6fe153e7210ed318eeab31e589a5e073521bc7a1c3cd240330d6f45cf68f8b0d3949bf2183e45c5d062d197d9873d6d639eba5586a0260d68ac2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    765d81ecd91bd91b270d14933c5059e2

    SHA1

    226e2a90e43f3e715847fbf8afbab0b27b9e4661

    SHA256

    eb366a8ebc91d2074a6f008c64dd1b935ba1324e71b4940e84e512d8ba885d7a

    SHA512

    46a2fcb424a549eeb8497de5e19c28274cffd986cf753326d54cbd9f8461bb97879575351fb3d1243ea9892e6421c840c4bc1f4f7ea6e8cd8469530d825e5804

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a2058e98543edcc4b88afe1a7a1d035e

    SHA1

    03fcaae4a00994da54aee512d6840d6a8804e6ed

    SHA256

    5e1164856b92cdcf771d5650c5c011059abc3a2ec502c8cdce929d0815ccfd5d

    SHA512

    3383a8d4efc260263fed4c3ef5a5bc1289c91f5d96f3c0757713269cecae44bd9a90145912bcde31152dd5a12e539190456021a17eda6d6c2943d586d5c1e611

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2O8ET9JZ\font-awesome.min[1].css

    Filesize

    30KB

    MD5

    269550530cc127b6aa5a35925a7de6ce

    SHA1

    512c7d79033e3028a9be61b540cf1a6870c896f8

    SHA256

    799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd

    SHA512

    49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\43E2T5CO\bootstrap.min[1].js

    Filesize

    36KB

    MD5

    5869c96cc8f19086aee625d670d741f9

    SHA1

    430a443d74830fe9be26efca431f448c1b3740f9

    SHA256

    53964478a7c634e8dad34ecc303dd8048d00dce4993906de1bacf67f663486ef

    SHA512

    8b3b64a1bb2f9e329f02d4cd7479065630184ebaed942ee61a9ff9e1ce34c28c0eecb854458977815cf3704a8697fa8a5d096d2761f032b74b70d51da3e37f45

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8I2B3UEO\bootstrap.min[1].css

    Filesize

    118KB

    MD5

    ec3bb52a00e176a7181d454dffaea219

    SHA1

    6527d8bf3e1e9368bab8c7b60f56bc01fa3afd68

    SHA256

    f75e846cc83bd11432f4b1e21a45f31bc85283d11d372f7b19accd1bf6a2635c

    SHA512

    e8c5daf01eae68ed7c1e277a6e544c7ad108a0fa877fb531d6d9f2210769b7da88e4e002c7b0be3b72154ebf7cbf01a795c8342ce2dad368bd6351e956195f8b

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z6OS65NJ\analytics[1].js

    Filesize

    51KB

    MD5

    575b5480531da4d14e7453e2016fe0bc

    SHA1

    e5c5f3134fe29e60b591c87ea85951f0aea36ee1

    SHA256

    de36e50194320a7d3ef1ace9bd34a875a8bd458b253c061979dd628e9bf49afd

    SHA512

    174e48f4fb2a7e7a0be1e16564f9ed2d0bbcc8b4af18cb89ad49cf42b1c3894c8f8e29ce673bc5d9bc8552f88d1d47294ee0e216402566a3f446f04aca24857a

  • C:\Users\Admin\AppData\Local\Temp\CabFD93.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarFD96.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a