Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 18:11

General

  • Target

    72d2997af0e1bd25e658eedab4d024be_JaffaCakes118.html

  • Size

    36KB

  • MD5

    72d2997af0e1bd25e658eedab4d024be

  • SHA1

    88c6238563da64a3b83e4883ecc759e11c0390e4

  • SHA256

    2e9be282c744104a6829c97db29265d6daf1d8e01533c286371f06431a93f7cd

  • SHA512

    c618a1de48fd5866929c9a57280f8c56489d09022c2574ff50c9cf50f69bb0001b661a284f785ffad9c5a19e2bb8da67d42815b6c929cdc9bc9f229c5254a134

  • SSDEEP

    768:zwx/MDTHM288hAREZPXrE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TtZO46lrl6lLRcf:Q/jbJxNVuu0Sx/c84K

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\72d2997af0e1bd25e658eedab4d024be_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1900
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1900 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    dc337571e1761bc90793a887d8d01ef1

    SHA1

    792adb07436386a6fd2fb41705cc426971b1baeb

    SHA256

    24b0b21e98bfbb2b6d924b5f103a395faa41360bd7d14dfb4b0ab26e556ca81f

    SHA512

    02c669ec0232bc252b181b765f80f992185d1bbffa65b9079e784d4931ecba2837b4b05955d7db1111006d2cb904cb35e6ac49ccc7ed6ee848bda60e3d231d66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff648ef5f739822dd71da3e4f8de92e3

    SHA1

    417e8e3236de37c7917bdfa3a107b305ff0e0aef

    SHA256

    075426e4e2ab7f649d3f119e02f267eca222bceb353901171a919c128f9ef905

    SHA512

    288300c5137ff229d5348f4ee503f5ea2d9aa0fe10da4deddaf93bdacd28441bdaa32e01236f24dfa3763a660d82df9edfb0d74d8e2810ebba6869edad2dfd42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8818d3fd40b61cac10d75b863cf5009b

    SHA1

    53d9e31ed7b1f43c02e6cf16b7a7b1106dd08cec

    SHA256

    c0729d1cda7e297173f2ab6fa29d288e44d7518aec0b3e772201e0c6e623ca19

    SHA512

    1da9ffc3dbe3e6cc7f484a16edc0b47dc52983b278348782d9290bc68773be2e954bc8278de61c52659cc62e767eba822b8d90786f2d94560e056393ae293404

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1c311c439decd1b8af33c122b9301b7

    SHA1

    b31ce0ff2a02afb073a3cf5f656b084c027c6f24

    SHA256

    ec9d551d3e93ecaed95c668393370d6e28293597501cd7432bf7b1a613e855fe

    SHA512

    e518fef88e7b4df00c84afddaf444ee48be73a28f4f4238df76613a3960816a09d9bef96ff67e7c6ad52c13cccf23cbbda3f69218c33f025c938e5dd39b8dbfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2314b0bfc5bc310b8cf5638ab5cdf6ca

    SHA1

    feee2811e220ba64697448ca7fdd27c77e877436

    SHA256

    53573fdb446ac611df7ab5c128dceeb2b4f6f3ffb3a1690ac988e906a511431a

    SHA512

    9e9ebeb29ac9eff5da3b7d3aea487f7323e0498a8d22570f91d3ce4d457cc2c7025865032636a9969de6936fedfb93b3c467e2a6614c399d98f05738049e97ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    645aa8b2de9950bf70ced38045ef322b

    SHA1

    54dc5277a37f3f547923b022b88ad237e2a18163

    SHA256

    239c99f71dd9f3d9faf5db073bcb6ffda388b1006feaf921e82321adc365d7c2

    SHA512

    1e6f740d26fe026b90198ef1a48e0f89ecfeb8906118277610e7a6f554fad9cd04a8a703d1000cd3b548cfb7d2ac77dcfddc38e8fb9d5b31b3cab16c7306cdba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47a38afd49f20ff7fe15d71c0f9b48e1

    SHA1

    b833bf036654ec2cba52b09564b718fd586240a4

    SHA256

    5af5696d8975d3ae392e7497fe50b02239ff0c94acba99ea9ed9cc41e59a75ae

    SHA512

    d4c5127678abfd49eeb0c24b943ce0227211e7d22a20b5a4da0b132470b8daa1088a71398d865c96f173574c7e006c8f3a45d9082d83084fdee7c882cc10aa43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e28a243104c0a01fb3ccaa832f5c73de

    SHA1

    d0ddd432b7bf6868cd4e9da8d46741dc1456dd2e

    SHA256

    edc839eb6b2be58149c1e564b12652edbd81cd699ad352d5ee0cb2cdfee7c7fa

    SHA512

    01fd8ef008d9413ad3cd256120d1a019dcdce2d2dd209c39595fe200985c70607c0100e18e0e0367f038d3521a0554836e0b282a967784b33ccf7f8030bea8bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc57c3bc2259493372f09c526fc91c68

    SHA1

    e21b889ffc293d11cf5e4aa3cd039904fd426cf1

    SHA256

    a3d18320ac078e013a9add1e5bb2895e2a6da2f3c20ba16a28b771040ef204cb

    SHA512

    775fc3f277799d86b5e65b44174d9a11b8d9464286c2340708bed0ae880643e01088c8d9a5ce7620041a478d277b9b5ede1dc156ba608f47c5eb25a7d8228a8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db7ad4180e7c2cd2b40f1c42c349fd42

    SHA1

    2b29778b9d20b8bb613da70794784f432ebf641f

    SHA256

    6504a99a17e60032382fc9766c8c381404cc82293439f7357cf20233707abf8f

    SHA512

    9dee469e3fec0d7b5365bee39251bd898b18e9a02fc1c5e5f07572e9c8bac0a2ad5c05840ece495c8c208693d54cdaaa4dcd0628330ead1f82fe16c580ce8891

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ba9a3ce6d936dbd20bda3c2ef10ebb2

    SHA1

    2b07ef8cfdea7a4c6df3642be4d15ad931e8176f

    SHA256

    a7648f77666946301e84d365f160ad8985fba0b71703ebd420391b8998f30e3b

    SHA512

    50ce05f55c94e5a568cdac4c09bfc2fb31d39077fb8f9f727941aabc1db260d969b231c1c37d0bfeecc3d7e464140cf33a9632e18477c826205b10dd4cc6ae1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be491afba9986a2dd3c2e5d182171b6e

    SHA1

    ef25c98b377d20f1ad90b79c55f808d77e79fb98

    SHA256

    9930aa09cc51b48d0ce95f13155a21b070cb51306b975a70f46092191c715659

    SHA512

    afbd29d3c912951f9b0945e2def678794fca0f9bbd4bc22e0d45af3c65cb0589b1ca2d8945dd8d38f911ed997c2bb9afeee988accb7c6617a1cca1bf7b30fcd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d04fb7d022c12aae31bdc42a9e0acd83

    SHA1

    81d7ddbe9ddcf7b8954a1a63d6bfc63b8d211435

    SHA256

    bd2cd60e04f511cc02f19f6de8393552d0c09487f3c6582465863d4511cf3f10

    SHA512

    cb2feaf6b7688230c57c2255631c63233ca4b441abb9e2b957135498e729862f888db4491c749bc0a555032a8aa4920a6cfb2973ab3d6547f5b799a22ee3859a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4db56f3ab4547a1d4c56c1f8af66564b

    SHA1

    0a6fdb7f5b020d37060da271ee3e2ec0654d2575

    SHA256

    bcb8fdad65f3d1127f549ee7db323b7e1eebb637d496d69a66905f62a55b508c

    SHA512

    ceb86da8cfb90a4b64294fded96f9056bcea929b5f6065fa20d20979b3ffcdba3df301285cbca2948c2dd4eb222292381dde42aef3a24c42debc72696cba1581

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44c105581b45f94e241c14abc0631a16

    SHA1

    57e68f4af60e88f28fec8a0eccb370b26f5dd495

    SHA256

    af9e313fc23dc3351278e6e32a6b583510c89956392a40961e2d7b51102a2787

    SHA512

    2266d91dae9c357515e0d8c60477250e552dcadedfc4284bf9b2f4fbaa2ebe05be7d0d949f718e46d270d9675c072bf48a46c28ded6a7db3d9a361d66b96f63f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf1b55a9188215e9aba12514759ea5d5

    SHA1

    b85ae0c61e5f73af02ea1516e70d763150902d60

    SHA256

    b1b222af0020214483edd1bc213ace24e8ae785e9a83ce685602642c4bf6e8d3

    SHA512

    a37f2bd59d32c111e71987200c4487c33966b62db86b5f1edc04bab6ea0eedbaaec56e23f5d498df655a3beeeab98a094fa6d6b58e406ac67c407f65305e384a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a18bf5622b53fb7716364023cd7b8d95

    SHA1

    3473aa4ded0863679594b2bc910ff399d50262e3

    SHA256

    fce78e50fa54ba3a3910a3d7e5bfb6392e685bd5a6f03e88019b1125ded2e0e3

    SHA512

    7024b49b67993ee52a579f6475c3c6fac64d0c902e89ff319784d35467932d77c04795c8026c5fe9996f4d530f02e9c4e99a8e70c0f8c95868c637633fdb2837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f52cdc1c929a92d4f2053993fa854015

    SHA1

    f66430666f99d83648618510cc6d58c1342554a8

    SHA256

    d708930aadf4f12dbecb661ad23280cb96b0743209fb5f742f8c06e0c9fc7ef3

    SHA512

    1224e45cae69012335b40f7c66c8c79eb133afbf5b8657df92fc8cea5ccd44994d5b6fc90ed4867067b3f02f687e79a2f177cd77be5e2f097cf60b94a355e396

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9eecfc65d20c29ab9a5a31cbe79c3e95

    SHA1

    cc5ba3f7c23599310e9aca943f1a87477121f9b1

    SHA256

    71436c8713614725ad8811cd5a24363bfdc4cd6f803f4f24c9555722b98aa2a3

    SHA512

    da3f421fb79d79c01d57a84f4d01a26045328aa25a14e02790f7304de373289e15cedfe4489342cfcf4e6a7fe1574949f651ff1e67169010b4f35d8f5fb64d49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98a71fee9051038cf5708fc40b62cffb

    SHA1

    00f3deeb0c21e83db915b89349b1ac9391bf2e05

    SHA256

    95b23023f186112f692f0b93cdd65105b93646364e612981d3ce65f0a37f5cf0

    SHA512

    5387e51dd80568bd5c5f791a4b43be16ff04206b99d3d5c0dbcf983d44a2ec349d82aef95191fce95f49b1f05eaa101e962297cec90158e17f8dd6034677f1cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94210d4178b64d276692bf091c82ecfb

    SHA1

    99210def791337eff88694eef366cd84702e0cbc

    SHA256

    2d00f1f35204ea1cedd53ff6aaf04739a9bb80e3b0e920ad8fb911904c7a165b

    SHA512

    8748aab23ce9dc2089ee9aebe46b4ba64c403f48ea2bdef15cf8f3d7118ba81789d90dec6642f846565f6413c91bed31f70b08096f3a4dac76e7dcd48cc67a86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3e06a6bd7381a423ec811a0d6ba1aa5

    SHA1

    5feaaced052c59c9b2a4c225181e664766f7e0b2

    SHA256

    1dca714c7d33df6bf6b01cb87db75fdad883fbd14abe7998f588cc1d1de9fdeb

    SHA512

    88894a5f84af02177b1a8f55787d6d33e0cd93fc37a1c1451bfd2bf0ede5818fd484d4bae51cdb1bf3e5107adda630e85ba15763407a5b0ebe4808dc1e248792

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31eb21f2a1f3d07aa60c13794a89e143

    SHA1

    40858c184abae6e8f431359e5a48e295e09ab10d

    SHA256

    7824de9c257376970c300ad02cc1cdd0332711132e2c3c79bf27d3c13316d297

    SHA512

    d1cfb193c84d67bdce426d5e00eff7c4ca98d97145c724ef8796f0f4367d5471c46b239179eb78decf3089dd49ba4a8b67e327154c4c3b9f56e193fe46ec52e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    da3130bfe29130e3edb277e0be30975a

    SHA1

    05fa6e56b5c52dc914205b116313d045fa046e7f

    SHA256

    441854b1e2d12cdc6f87084d7488dd869ed53a00bae01134e12607c7d9606182

    SHA512

    b5555669a2e56d6e18b77ae173c873a9924ae8abe55160740ed9a2a055a33dc1a49ede0ce6fba37dec74ad7e7334f1dc4424a32feae0439fcecb2b10e76c15b7

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MPR7YYBV\ae111d25cbb9b2d7293e8bdb2fcfe8b3[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab14F9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab25C7.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar150C.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar261A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a