Analysis

  • max time kernel
    143s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 05:00

General

  • Target

    70ec9aaa6c06d44d78809095c4c4111e_JaffaCakes118.html

  • Size

    48KB

  • MD5

    70ec9aaa6c06d44d78809095c4c4111e

  • SHA1

    ff02912a67d3060f0d47388d3b91e4ea8ceec5e1

  • SHA256

    3729198558d372d912342f28b788bb2f4a8540fc57cfcc6dc3a9d6fa935a9ca3

  • SHA512

    2a3181042e46c734da4f109c4006db30db39fd3f3b173bd2c3eb63ae371f423e7c0bbd22dc29fbe73397ad7390f097ec73b0b47ea63cd54ef10ccd48d911a06b

  • SSDEEP

    768:0zMGRNr6+boVfSMUkFZhpWzLNB050Q1Ao6ct42SxAr:4wfSyZ/MLNeX6ctlr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\70ec9aaa6c06d44d78809095c4c4111e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3008

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    cf3a00524f45c6a974f9ac0ecf8edd36

    SHA1

    a665c986bcd0fcfd50b6a539ab6335a0aa2a304a

    SHA256

    b78349b5931e53781e3ab061f572b187a5f1c3d3144837c441f6dd4955e7d64b

    SHA512

    7aa476b9e0179579bde83143f6362a48727cea2c4174d0d38fcf6b361611f6f8b6534316003b61b43e2896e3e0773cd89bebef257287c9fc9851c6f5857f2137

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04f9d5b4c3adc0bc46f42dcc2fbe681a

    SHA1

    be1e50e694c6e00fc70c26022334658eb13cc0a0

    SHA256

    6bdd9f004bb955727a07ec6aa08e4732741020bd2abcab509f42c84a462e46b2

    SHA512

    6e601cc7e62e29745e34c5aa9dd4d5aca3ee925e5bf44e281e87b0da6ddc1a7ea2447aca704f27fa068a78860553a8b4894b8990f1de30714532c1321506310e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    463a8e67d3f6bff0ccf75d799277c276

    SHA1

    4e58aa2749058d75abada0b892076dbce1a7cfb7

    SHA256

    b23b8f3e1d3de5173efe83948d0f7011588e7d46b9c9673342324003428e023b

    SHA512

    bd95f2352b749c6ede5cd180b999460b9ed155a35c0894cb346f57209af43b6fdb02e5302cb062ebd54c28d8fa6d0683844b6f4c0033e544e60d5f2d5099fab0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bbd945a95f858a1571aef4c8d2ce812

    SHA1

    f76b8d81aaf5a7d63697e01b426e442d24cd55aa

    SHA256

    a141ca0db31fce190b8fde4fe8d5c78a78123b9fa0c0abe668887581c209123a

    SHA512

    cab9f1310032eb163840457a25239fb2e32e7f1e77d5916c98a6cd26ce1f7c01f1330cb80223815c890da681f3aa245b70ad7fc69c32c6da8d61b229f155d3fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a2ea7a06b18a6396dd4b07b158f5756

    SHA1

    b8613a45a5f8c969d8f9682f5517ffa9cc1e1068

    SHA256

    f70e8bd5a2d7ff5e095a0773e06cb10ff9da93ec8db41a973d3d7862f4ca095a

    SHA512

    dcacb15673ae3a1c186ff11e44508dd0741d23a445c331643b399df910a058a4c96c9786693f5f6b2acaeab50a09744d0739d2da7b94c4f394085a3d05746df7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b930e199971b3d24f73ff2a7205ec4da

    SHA1

    b3751c9667c96aec7613e2975c8e0b7a0c7ae25c

    SHA256

    45664bf82929630e189b292df81afaa773d2642cfabccd890dfd3989fff656f2

    SHA512

    1e553c03dde1d4f62955f216762d586e9fa4341d58feecc9abcb2fa9f423c2e5848e6871cb2fc51618c556aaf7974c0316f9a94fda0f6bd2603adcb1e270627c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42da56820034bfc4012927a166631b32

    SHA1

    d28bbf274d43b2c8991b059a1d8dbde00518d87e

    SHA256

    56b897c172bff5ae1be8cdcd2ae7735120ec646ab77c161d067ea22cc64f2abf

    SHA512

    b378f36fa0cf0af8ae2d38b1fac4db88747b3882523a1d949775588fe215c5872eca1ae36cb8274e2adcd2c71fa826b6cbc32091e75653b4beb5e8ebd6ae9e3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac79c27699b16099a392ffdb62ec598c

    SHA1

    04a004d5a24f94f1c1313469a7a55a51149ac891

    SHA256

    78e99edd7a908c325d11a07be4713b2e5b027ffc9fd282a822be05ba508553ec

    SHA512

    cf919783b1b7c804531755368eec671f7024d76af77f277759dd9b86300bc0389434db8f79cfb98882e705a8c480a06350378f6d4e2936ee475d683c699e6b21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d40a25d003ef5d542ae0a517372bbc02

    SHA1

    769c037a4fa5fe810fe661301e73a436391bd797

    SHA256

    03c5364670c7162541d7b13448eb6904fc3ea4b307f5751ab9ad2798077f61eb

    SHA512

    e82c95f7f87c86469f60ad76c7e1147c9bb12828a8abf5e43c732aa303e4383ad820cd394af8e4f82f5f05f9fe1c612d4ebbc49a03fc8ba4df12f71501ecdb04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad3f272082b475b39cb2dad2a118e714

    SHA1

    716384ab7ff0f0e59cc669f118a0b761c07f21b6

    SHA256

    c7b1eecdf252365b44611e5a49f792cd87d011b8da66ea3b53fcf96d45e2af7a

    SHA512

    d99cfa1f2d9acee485d24eaffdc5fd6a66248a7a4eb6431dc2f9d7f6521a0ebda18c87547aee8a5d0876895c83fe3991992ed3660ed354517d9316828887dd5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f4524c5e1f570d1a888b0814ddc6121

    SHA1

    81e335411df17719b725ccbefffcf599597a4dea

    SHA256

    f41ea2ba5b5e6eed0b8abdddae1d77c24b1afa84a7cbbab06f20fb2a95484e38

    SHA512

    ac7ca7f8a3e04e56f7dac6f101dee79747e2e5b5e4fd4e9b78d2773e4adf7d5027fc81948f88ce2db48d80cde3e6d6843128fd2689d24dbd424a7a4b5ab7c1bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0c061d9c52ea53a11b2cc6cd021a9c8

    SHA1

    24186da9a88fe54c6632db23012d14ef433312fb

    SHA256

    bf7afc6df77466dc4383f6e9e78bcfbcf36995d7074b6a420bf9c61e45d284b5

    SHA512

    407f184a7a58f826206f5dff77160f850cd8c1f299e3d43d11f638530ed2f3d213e1a6acba11eac74155d063384ed4f0a09e15fef88e20236e2757a622cac399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf512b443f06e50fda6acddde589b48b

    SHA1

    b89d0c7bf0584f541f9aa6b78e67e46d71b731d0

    SHA256

    2be84bd6374652224f12992846701d1695ee5ea4cb02a2114f86a813455e618b

    SHA512

    1f20eeeb4479ce2da4d73a243789c0dc291a599ca5671615f48f7be44e5f996dd997fe849af5db275c958ac7a13bf1abfce99877f42b8f6ad60ebe1c5baf3c3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae8001169b3dfb377de84f69afb0cd09

    SHA1

    44a22e77a35ee2c2cf2f1557c948b7fba07e9aaf

    SHA256

    68db7b53dde6609aab12fa07025bf5391ee98ecaf451d05729edd926bc8a566b

    SHA512

    3f15369b748f57912c075eae978362fc9e71bb70d570ad4a1d0d79dead021681abbd8cb2aa000443b4462f7fb44115642f97a05e8b436a9c689c318060d199cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c9dc173f55b0a888f11aa0494157f32

    SHA1

    2e193f7cf869981166fef47589d6cffef35fc914

    SHA256

    feb3334b30d23134feaceb6912a4eb372c0e5f8735b1e02133dadc9be6bc5b6d

    SHA512

    eb29af06afde8e6bbf0a760168ab1ad1d37d1591180bad9e373942f6149a4be948d4e48891529a864603ef041856ac022760804cd487b5ce35a5bacf3ad936fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd63f5c8397035a89ea3a839786e38a2

    SHA1

    e429eaba7c0ac0f7cbbccb743669a0077f7630ff

    SHA256

    d25cad7a079df798ed0ba511a80b37a2b2ae19072db21550ec2cc09210928129

    SHA512

    8d59098403a8fb9f92eff0ea3838f51f6e3aac6668221444b475dfb0ce653f0967efce8f1992db8314d6b791c50b5e45f5d0807df1be1f051520315ea3107f9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    129df97fff8475057da72e3d242fd304

    SHA1

    b7fde1de2e229df07d265a92eedb853c71fd0e06

    SHA256

    adb076abb6471310e61e8aac6bc8bb556ae335aaf9e5815b5e284fd36f95f880

    SHA512

    ca9e3b85f47ee36312d9971b5ee925be553320fd5c454f18268a43a146d13064024d3650434a4b800269691294069d7d03b6beb091081ebb772c876cceabcbb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db6fe46f491a3136117b4ae2ac69db97

    SHA1

    5c6a60eee14877375ba07c115fd6a8775f0fefcf

    SHA256

    4195efa4fae9197697534f39499f20ded6f046697f77ab2bc75bf043f6ad6928

    SHA512

    0f59005e93a8d1b3127bddf5007faca24c7e10547b342063f37159b367090c8a08e6037ba3647825b5ac1865748699335b41dcf328d01b571d10868bd3f91d24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee3834ec4fa5243c20c7892ec933fc58

    SHA1

    b9ee26050abbba4925e12e19ca2e40d0af38bc1d

    SHA256

    94662aeb70294343611a1bdb229747b622907c4e3a10931c7219d1ecc4132ede

    SHA512

    c4511ff1c424826c22b72659133fa7bf129b5ae82be0a91809b39a7eed29b65406d9cf35aac73b91a36577ae969df8478601f213d0bb0116579e79dcba611ab4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    645b2b8f8781e346a4cb61b53fd53e14

    SHA1

    936f25c4ed12ed7c3a86aefed6943151c8b737a7

    SHA256

    78a0182b7dccb257c978f5d1af8a70b4006f03802a36ed0789f29a782e8c2936

    SHA512

    87c6dcd25f0e144d8f4c2dc3abfea1c38e934e9e69d94b06ef85b1e1df31b1c5f180276b956032d6d89719dbf313d25459654acc69c3f738cfad3a1334b97b43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    610c4df21c232ebab210012c57f8e4b0

    SHA1

    29ff2a1c9761fdb4278568abb2af672a5b637a97

    SHA256

    aa0c818b4105802ea46e97e613ddc822e71202612b23c270dc36a4f328fa06ce

    SHA512

    f59eb4abb71a83cf640c608a88f4aa1cdf83d99b5339b791916bde1e53d8daf790819f9ab981f0971ac25e67e41518547faeb0989a290be4ceda58bc8957ad8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26b15bcfa119f824bae6ddcb77fcc270

    SHA1

    9371c165163b745da61191a141c90c8e2fc13375

    SHA256

    42654cbaaeea8c70e0eff93d1a5fecc1f492482de1e0d2d8c672bd4a10e62ebc

    SHA512

    70de6bf72db7eb3bfd98560859c0310abd787f70433a9b433afacb3dd86ebb79ac558c90bba63e9b72909c83096642df629688734492e95ddd579a6de7be1dbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb0de1d4c8d2a82df3a82e1eeb7a5d50

    SHA1

    388bef804b0a650117e16c153a13d8f0980453e4

    SHA256

    4e2d968ff39f562922d1a0c27a580fa29c52b2e4bc873419e6b3889c71a7108e

    SHA512

    c4f31bb1e37f648824b15fc002b337716808ead5a22e2f59196cd991c7b2e12338f5d5125f48449c7825f03b2b1691d62f6d4981b9526041b57e74df22c3c137

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e1864b626bfb94ba65c08b12756c92dc

    SHA1

    87a97a3e8639754cab0d3ae4f52a5e49483c94a7

    SHA256

    9309551dcca9d6fb3a8b948a5c808b7d74e0c332db9f2b1853737f39da026ac5

    SHA512

    64bc30bacea563985456b82587a3bc81e8ae7a9755183513df1eb9f5d87ba00e7115ce91bb031ed2730e75a93c85fda1aca7e537cd31ff2e727e14aa59e7b62d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar1D07.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a