Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 14:43

General

  • Target

    724dc101b1515447aab78f52b98f0e30_JaffaCakes118.html

  • Size

    37KB

  • MD5

    724dc101b1515447aab78f52b98f0e30

  • SHA1

    75b73e54e0ba4af3f7dfa87c5ab7936d30be2e51

  • SHA256

    b1db440f1c3dc8d8c3d52e2471eb134078f5b5a89e346feae51dadae1fc2219f

  • SHA512

    31fccb036f76db540fa406176d893818f428102d743eab13afeaa9e61834bcd25475a16d619f2d2f8d86a86b10f7aacefe0acaa170c118e6f019055ec106cd9e

  • SSDEEP

    768:Y/bVoRTW81D4RA+vEOjz6rdG2Gil54RZfPGnf3Gu34aci6781DdRA4vEOjq6h8at:nRTW81D4RA+vEOjz6raA7IarC81DdRAW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\724dc101b1515447aab78f52b98f0e30_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2836
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2836 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2748

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    c8e5e1856b55a045c7a01709ca4f3dbf

    SHA1

    724d4cf67b82fa3ce4c6fedaf9d5bd01d886e66e

    SHA256

    7e665d68392e0fc87920496b24a2df4fe4d901ccb958a60eb139b69048d56c65

    SHA512

    45d1c04f151651f1ff58bdeee202384aa22f5057e57c4ddeb56da13f794d64fdc244de14adb66dd66bc89f1d2a61f1c3d47a10f9dd2a6f2c8baedb4ceb223284

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72f13e179946a0d991961136221853d3

    SHA1

    19eb90eaefe2807f7dffadfbab576bea1d903d99

    SHA256

    cf07d4a6f7145ff676556834b9bd547f55daf6dab68ed35818ddfd0d9fb6bb11

    SHA512

    a170b474caea232249564ac7e0ed368e7badd07355b26493a02e4451eba32c9634c0be5789d0c40f00de1954d41487280fd21751d3d829323c1437ec20d61a01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e514e19b80b7a012964d2c58ab748ec0

    SHA1

    e2453f5866e4f1fa4a9cf46d31c22cce3cd6193e

    SHA256

    88b72b0ef1ad74da2e21c2a5777226858890e66448fc8e389ece6bfc34d142ab

    SHA512

    96f05a7e378a6a5ae501f63df53dbb86d1a602f066c823417d38142592e230b62c0aac791411a4b547f920bd7f5fcb86d63971b731a8b5df889093d418280add

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93ad2819e70677fdf024d056f0dd4b64

    SHA1

    33b4a40d18d835207035a599cd49969217522953

    SHA256

    a2745b379e267dc17479d671c66786c57ae1ad62061bf5b70332a73ee3c2fe63

    SHA512

    35c4c0573b14725db4400d29a1e579f34f8e573685feaf61d5e0b4e2470c595c5dcf41a3f833f64252e09975c5218368e47f69f93cb9b8236dff03ca6c7213ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d53719434983854d5d45fe2685f45b14

    SHA1

    d6104577834204934153106244543d4ceeac01ad

    SHA256

    5b098a8afdcb3866e63a31e8cfec2316ae5eec548d9339329fff0d45d5dfc5f5

    SHA512

    5de4190ce21d43fd0299aae658371003b727e356ce05f528e0c997888084370a07d42c5f33dc2cea16b4c1cf14eda4749852a767a5c3998caa8e7aba82ccae1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28f90edad6467d2bedf6250c1e7dd5ca

    SHA1

    953b23a02a743b0792a88416134fc7536489b3cd

    SHA256

    729629a972a69815150cffe759e9ab00c3120da02c3c0fa2e77062b97412701a

    SHA512

    bc351b195d2399b797ff02fb4148188793687f456132d6848d4f39f82ca912b11177989bcb254eb305fbde2786cfa506e3709d8218533075050efbcdcc7c8461

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f29e202f1a35fa54ba684c7d7cbcdf23

    SHA1

    f266f08774f4a6eead797078d616683e774e5f27

    SHA256

    1ff054cc208f76a6c7aac3cd3302587e16b0340bf33748e577fb8381b73aa282

    SHA512

    c35297a805e1483f03a6539e582f2309c5bad81749fa94ddbe47d66523bc207ccecf8c285e17fc6e097a8c7c78b21fd270cf9dc9b0a816fb1c95ef1d4b9b5866

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    686aead8877a3f6251c9be5412d6dd46

    SHA1

    d85c7f2c755fdc91d78778ff38b2d61d93b2936e

    SHA256

    af625f064c4b4501e50266f8a6d69390b4db8fb35558043a744e21fcde02596b

    SHA512

    0bd75e05bd37d369dc7677a9216dfa7ac6f695d93effec3feacce00a84f195153e5cc60985c2b59730f257a32938c03d0fb20f1bd40abc783cb7851f09905393

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    007535cbbe02fb8626943a9615b26cbd

    SHA1

    a5d85364d90e22de77e057b0ef1afead44688f1e

    SHA256

    64fde55ad1e3f1dc22f4c35a617130674542bdddce772af4e746302be40ce01e

    SHA512

    66fa556249806af08878e5d7d0b48284044cc75f66bb059e503a83fbf547da392af951644a25c7bc294d7a85a63636b0c0d1b9c389bf6fa3053759e41968546e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46fb80ee788ce728fd10189f2b3436c9

    SHA1

    f2610ff1b911f97c34f539cc9e39f78911d1e0d2

    SHA256

    d6e8389c9bb5f0ed3db2b12e2a8cb2481bf07d4b77c0baa06f31aa1b3a05a137

    SHA512

    ca60de160c2869164d7cd04b104d4bda47485791c8dac9afa0f116a6056205fac86feca22426fc501a2ab1d117feb1905424fe1b127c4da20a7a0d7f0327803b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42ff14632ebff828b8e94474466abdf2

    SHA1

    5ac7ab280d5d52c2465c9a86d6d22c7802782ce9

    SHA256

    639f70f910d1c04f45fb643fa1d62f775f796acf03e41271be5ac0ceb9389c79

    SHA512

    40e030aec59209aacb14e5275b2356a3bc099ea8cdf45b4339624083c733ccced9e0a2a95d2a13b1ff8885cae4461abc9ab8cbc62428c231d441d76bc3dfdf46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87329bfdf675a4193889c4b62e409d93

    SHA1

    a9421a40ecfb03b1471f0ac51ab28861f75cf59d

    SHA256

    0716b926009e91a6bcb9f046fad19bd986de887a746395b9975328045b177b75

    SHA512

    ea485e5161bf6ca8ae14f188f3bac68c7667ec1793f4b80bbd619cec47a55b5b7ebb050279fa95e76160d805929d15e63291dd1c12d4136cead9f54176841c5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    818e163dbc8551869d3b0dcc8c53d38e

    SHA1

    e1adaa5ab2661b187bce32193ce86166ced52afd

    SHA256

    ba30efbf043fbdbed90684ff6fcb948902725b44cfc4676d5cf25c05f8046f8b

    SHA512

    e6459ef5e211368a2817d2413d5e7b70fd747b4768afca99c35e653f66f0a2e0aa105636ce68acf199d81afbb33942a9cbcdf918afc32e49f111397213a226f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c006cf21287ea206a204521ef3e5212

    SHA1

    e3e03bacae277fdbf9c29b5b6e7696bcace27fa1

    SHA256

    ba4c8539c334ea6a5b4dd3018099abfaca6dcbc574e39a78f2f8f362eafee9b4

    SHA512

    90629455541e6fe718803303de563c06483e3d13a20304c0befad1f358ecf1f7866386544a9e675106fe1b8c23defdd06f08aea067ec898f0a79df1625e342f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    221246c68bb9abb221bed77c1452e1c6

    SHA1

    1128fab18c1dc2bd54d2fc111816e7aa7cb632aa

    SHA256

    08d92c62aacd45ad8c86bea8af2561ea1256997fe0f4692c4a4ca1bb3fefa9ff

    SHA512

    8567bae18662f7b5cfccb44d40319c6506412cf9d6d56cef67bad33c719278d1b6ca1404bd63533dbfe0a2a7266d5ab46166b53b8bd0c045d325cd6e0a367296

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc0656e5e6ac185cdcf781a747892ccf

    SHA1

    3c523d8d1b5a97ce1477bc1447619ab13eb7178f

    SHA256

    20a3d0cf63c662b9d5079ed43a10e56a1e1740dfdd0f057e51186d45a759efc2

    SHA512

    ef5e53dd1242b017522672abeab07304c7136c049d89db67b2e81ee09ba44a8a23219afc4e97b378fe33e6460dce2b949d78ae7faa4c3cc479d732dfb051a730

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    030d65c59db3cdef65c8668d8d12ee1d

    SHA1

    3193d55bc5165ff299f3778f57a606b6b1bdd74a

    SHA256

    7ab1dfa221be6bd04cdfee7ee12d7f0dbc220b1a43aa6c1894294572ac57aa6c

    SHA512

    06b42dafbcb8a7c88eeb617906ed5f9eeae81a2fe891e72dc2b15abd222646d966de000eac743cb8735fc78a3e548658cc0bace2c5f174b8f03bb7e57c577d2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79962cc27c1f85bcac42012da7cd754a

    SHA1

    66cbac1bdb8269e2fb240b3121ba59a65f53bd28

    SHA256

    37c0ef53753908718436aaa55db171a69c230e30bd8501de6b32d914609505c5

    SHA512

    9d217c0260f96af8e0decee5a2ed2317ead05b1d2aea78a7d982e3b443fdefd3f28c1afcc70d7c02643352cab665aec6d8a230449512efe354083a75e42784af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ac1af05d6e8e84da337b1ad1be89c98

    SHA1

    5636bd15442bbbd28a496daa412f86de5e268b7f

    SHA256

    3f0b3a8d9899cae2e916b1962c20838733b64041b3ea6339f30923692e7c223a

    SHA512

    bcd6446ba682fdcef29172d73823d45e327232a0d3da7dab75843321b02ca26b4643f35dfec96ac2c5141b70a6c5d61f714b021bcc747e0b7916ce35bbd74212

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8270ba16348f8fcd9edc919beec0a26d

    SHA1

    ed9d5fcd900c0235f9384ab92a10485a00009f34

    SHA256

    e01590410fa5656847722b121e3b3d9866d2b5c50584f9c8890da19093c08885

    SHA512

    c89ca33f78266d8d8b26d599fe6c97f339d15494839b717276f05309257b317c389ab3008d157dbe6bad9455faf9a8b04f0da6de00d993550228b2b798e4e576

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c2b44f82cf7059b8278bc2fd8b7d536

    SHA1

    0d1e47872e7c94acf443008fe45ed1f9e3b4dc8d

    SHA256

    8dbecb6e2ca85cfeb868d75e3ad417f7e9e6ec1cf8e9a3cb70fb92702b6b3d84

    SHA512

    d357e62d26215797ffb756c1cdabe91514036a7a633777b40f2fa7a16f16a8d7454468330c576638c72b16e810e1d10e90964e1631a3adc46833bacccfaa8108

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e65ede395fe083a72560389fb542a55a

    SHA1

    881c3cdee3ab9ba7db855fe14ec093cd42e141fe

    SHA256

    3f93517fc6aae3bc17896489fd5e5626588af3bc4841f4858575c4a86b2718a0

    SHA512

    5ec202b8a6c5dfc64b3d10613a1e7286b53a0e4a519e0d198e8343beb9a886c4bab7ab6fb180a6bb3a0311cfaa5cdc75b0ff862c735de10eeecde83a7d1ba598

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7875e73d9a1acf61152442ff27022011

    SHA1

    4943996705b0bbde16ce56f3e291b6bca086c82a

    SHA256

    619412d7339ef3abaca41c28817fd5c5e14a83888c4ea50ae34ec445654187b0

    SHA512

    f2be0a82e3879f752f055ac8dac84f9693b0e828bd8698890045fcedb734c5ad4c96a4947142733c82e0ddd1f4fe7a31ac6d72fc01b0b4c91017d32e3bdcd170

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7348413f9ca101a9d738a0cbd49e94e8

    SHA1

    624d82b3fb18b93c646a1975181b122bd5093360

    SHA256

    781cd590643a384dca64e3f08370bf92c107f3151be271eba59d29ec709e6281

    SHA512

    e7bc9d6e9289aa5427be8b7ea141ab6cb0e6225cf6cea56630f93795bfe60c99d6e72b2141c30078ce5762c48794f4d85bc5176e47328dae1f60ce1e44d4c791

  • C:\Users\Admin\AppData\Local\Temp\Cab3AE0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3AE3.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar3BC4.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a