Analysis

  • max time kernel
    145s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 20:38

General

  • Target

    732cb60025d5df8cb547a30aac1efa06_JaffaCakes118.html

  • Size

    36KB

  • MD5

    732cb60025d5df8cb547a30aac1efa06

  • SHA1

    2588f1f1f64480bc54ecf2b40097aea32f6cfa4b

  • SHA256

    a847c3a21ca581cb5ef28343f4a64201ed5b16d19258bebb4a05ac54c079bbd8

  • SHA512

    a9b6bb38dd04000c438830f9331da5421f6565536d20f1fa2a6a6eef143e9e9e4c37194c8cf4d911a9a364f64a3ac3e9f36650e8f4f8980b3b3a95496ce2b6c6

  • SSDEEP

    768:zwx/MDTHw1wd88hARWZPXRE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6ThZOg6f9U56l6:Q/piwbJxNVNufSM/P8kgK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\732cb60025d5df8cb547a30aac1efa06_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1096
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1096 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1816

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    a41f7b019dcf47e1754d4b0b4bc21c60

    SHA1

    aa3fc85fb580344652907a2f0fa62dc3761f7127

    SHA256

    6e5beb0ebd55e7c2835e2fe34f3dbb164a09d815318a32435c81eebffb5d3349

    SHA512

    d9b059c520abef47dcd8f7f879a42025e32dcf2d584f20a957eb560e8abc4adec058182079ef872b1cd378b7a44e12458c7d5a95b89631a8a6f0848ee58646d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dfec65bdbf3525b36699105dc5b447b

    SHA1

    c0cfcce06d6e50ccdc443e585c3e54569bb1af94

    SHA256

    a0a1e21ca64da026b7e94b821bc1ff10405404cf682e0cf8b6bc037335b278d5

    SHA512

    99a842b1355c981d5db9eae8d7e5e278859a39eec4d2c51843295b87c6e9de645f0b8a0cfed6f321c1d78e82725c43a9993f3f1f2adfd4a0e6e859d8849e3bbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eaca928d0720f1a5dc40c552da130c2d

    SHA1

    b0a10a20c3a6e77890f1cf79e134809e0744d5bd

    SHA256

    fa2165c0a0940aec1b38e2c83f26dba4167c34af1cbe3f54d7dbf8cb84c9c796

    SHA512

    dcc5f61129be5994b30c39159bd21598ccd2131cd5225baa2dba7bba7a55dce730becbbfe753c12ef6442bac6526e510598fbe9410292b204aa44fbc8c3b90e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89a015ac2f0489aa6b6ebb5f06d16775

    SHA1

    d1541a640e6a67d116a465d618ce5366f405e156

    SHA256

    0f0461caca16a4828c6613e90d7b528efcd5f3a8c2c82ab14a233e0825a2131c

    SHA512

    96f3f1a036d899938deb7b434b504846a2bef72d64b5111b727354afaf9b8f5c711deccb6b590727dfbbc5adaa7ff5f2c847dcd28912273afd6996d5ef0650df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8701ccfdf10316a03a483503b47fc873

    SHA1

    d774c6930a247996db5d21bd00f2d7de211d07a0

    SHA256

    4b133755e35dae19d5fcab9e4db01ff9ac0571f1a4b43024c4dfd71ea328a7c3

    SHA512

    ca27768e6db2367ea2d19211a13648e8bb91958ac1834d9b370cf153895466b5cea38b8a00fbc4655e521a275226373b84594a58b227b319866f74c6aa259495

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3599b796f539071692a5f986032a7647

    SHA1

    afabcd989c3fdc8fdc0096bd1d8a6bf8b66d74c7

    SHA256

    8d06615007fd3d62fd962352cfb837f998e95e69019e78b74a903932f49c7739

    SHA512

    132c448009f3dc5d7b7fdb8b2c85fb53688c13bf29f610f78634c5cf25ad2505444d87bf346ecab85e393a87b589c6dc20571c24729828c2afe04d4782010477

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e02ce94f6aae54edcbb53610e1513f0d

    SHA1

    cf58fdfcf2800cfb652f745862af9b5b06211c53

    SHA256

    00aac6a63e86912517102e0f4ab894ff6f050e3b050cfd636c7d11bf73361cf8

    SHA512

    05341c898a1904ce9ccfa3cf39e413df8b18bb611dcbe92159bd7fc81fc7854f81addfdb048adcb1e2814bed9c34b0bcba6112ef5e7e973665db7106d70241ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c20fcd24d5b9083ae95fa4674c8bf723

    SHA1

    0b9c0a950ecd3d35af3503e0549bdf4ddbe7458b

    SHA256

    614866de5b0eed31c8d17e6f6a1270f6c8fa799765df64a4bedeba185db28e08

    SHA512

    7155663453451283053bf451a9531323f7b11c501e1e03eb0fb6aaecc00e83149f553fadf60dfe8919df5380583f89381c23ba65145b2b2370b20a27a3ebe450

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5850237cc44b437801250f79184c68a

    SHA1

    47cf331f1ca1f24b786d792c9166a0dd7126f3a9

    SHA256

    84b4ba6fd7c5273cb1c122a45cb113b39fcba46c4a3bd344cbb7cd9cbd8df76d

    SHA512

    41e7e44608722cf5298448feb31258f9de9a90d8666eef32e0608930a6b769565140a4c4b7c1b178792ec19f96b0090634d6b08cd9d68ccd8ff53fdbd2f3c789

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1eda2f89e5f20073cb39200ee518ee4e

    SHA1

    1024e616b9d7d61df9f9e9a4ed37872145991720

    SHA256

    e44d226964294b56c635c8890806cce46aa7f7f14178cbf3fd291bf8f3792d2f

    SHA512

    0cb586122653c0d5f71a80e0bf356cd7001e03d89d9e4f68be8616575d2c0f888cc71b8e274a10dc3ec48c3bbf7f8fba1d23ecd6806a54012e4773bcca2cd99c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    597397f34d707f3b2ee87465ec4fd3ba

    SHA1

    b67a06353780a7f7a91f77d74082e94a84d6ef7d

    SHA256

    1be42fb0746f5197f3d27402aeeb6d55514827eaef688c6250bfc4c16c939eb2

    SHA512

    53e4548bbd18043747f775d667daa5926dc98730bac09cf879bd2ba42d80aff62c3a22266dcb36d45e7390a9f6edca575d47cde3320371a097465feb080b9bb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8339224209f5e5593c3c437a268d1e32

    SHA1

    75436865665f3af7dad1407ccc11fbcee620db17

    SHA256

    8698a87b33ae3f68b04184d3d720adb461a8193867b9dc8cc9b74d1ad3d601a3

    SHA512

    69463d0d6936ad346bc6d24c1a576ba43a38ed86a2fbc136aa7359728897391fa7b38d1cd670e111f7e6e1472a5a9b2eba088c3c267d4b38aea6c1c5c519b43e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e286f9f144614b4d6cb3d1d5bb6be642

    SHA1

    0383413cdda48b9a3abbb0c993fc8cd13f58187e

    SHA256

    3693ab6dc3d0fe7aac4043f2c843d05860e5aecf51bd82e3064c6c8473110244

    SHA512

    c931ab4d53f19f31ee19bc0b2e695dfd78d32859e3136a02b80b6863b131f78203373780a88b76c994629d052beff959a7e07e64dc35e5de95189080400a02ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    14c73079004857693c96639ecec8cdd8

    SHA1

    f8bc643046a64f3668b3f83df250de942d03d4de

    SHA256

    33417da77bcacf48c9cc3e78e13354ea794a4051c70dcb00a62d85fc04f7fc39

    SHA512

    d5dac93502aa8579b3efd86362d899a9fcc4755f0aa04acb78441c6ac658aecfdec7f356e17a60cd9b3080c0f3d6258b9901f615d235b0625cd097e02d146b1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ca97726e5a188a139edda23d76eddc7

    SHA1

    e9d83f7f86e073580f6ef6aefd955eae314ca7ab

    SHA256

    c06c6d58710cbff7bfc281eda6809e85ce8f199d3c698d6821de99c694bebdb3

    SHA512

    bba30a24e4ced491c41ea3e7d25d4c49bbb10a51a31e2dc9bb0be748bb538c5062ca8bd4d390d5bc110edb771b2feeea0939fd1066ad984e636f30c6a2b07886

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a02b2c6f2c6ecee194f9846fdbd4678

    SHA1

    37d578689a317ade795aafd090a824309b33d8f2

    SHA256

    deafbfee4f86dd91764d353bb506b3a3587e1499941882a4ffe71c7ba35f7db3

    SHA512

    94f808cd604c4204dbb437c39e9e5af4e706194751949af25ffde5d97a164c03648cdd909c09636e67cc5a1367fada20f5d9086bdd7cde92fd20c4bd5e7cefdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90d7662403694210305d00cb89f3d664

    SHA1

    a6deadabac026ee4e434c108fce3bfb297ea0698

    SHA256

    ae57e5f31d05a0c9f5f0aeac6340e4d4f3a3df40c5bbf1636f0c9babf6d34de4

    SHA512

    dfa4deb1aff0706acb8e01ada0b96dad3d0ed10774fd057fd384eb1af18fb4faf2a83eb78a3c70eea81ae04c7e5d0c18df7332e5eebd4a15aac011cca5c331b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62dc69ece4d963da58772b01c41d71f8

    SHA1

    3677b3435cf5b916a4725f904ce051815ddf0f44

    SHA256

    be21dbeb29f94f604066408e1564c3e05de898ec467d807a291d6ab281d71159

    SHA512

    487476b0fbe1abc5b05231eb70234fd5efff51d5bb815fb62da2a113757371799dc82715a5a63d06b8ca837d7dbe8f9c50be10c102a993b6403cc03e011c832e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9662a2cfdf5eaba9283d50099448258

    SHA1

    3d9736f285df93e598253aaea89b894773ac573b

    SHA256

    e9b60137bd07b9e4801440262dc2f3cb5ffd4263c3cca634b14abe01e34ca8c7

    SHA512

    bfeee09a838421f69f1314a84ddd7c31326710b789f6c72cc2557a245749da50626d43cdb18ee5e928390c926f8a84976187640e7e1d69c5a4cd6895a504c818

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    981f6fedd622e765ae074e01cce1315e

    SHA1

    deceb8b86c10cd215c6b4f2b1de1f18290c5ed5b

    SHA256

    31dd2d44e68d5e1a10a3d116f4ff3a3743b96e92b1ca1af733c05a99240eab9f

    SHA512

    a366b3467920350e75de2f96858088c3462f2fbdbe32033d1a4b68b3b875f33cef80fa3fa0eb9629742c9bdcef1cd9993c4aa48d9495ac3dbab6fe50bac1b557

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a2a952278380163b057a9ad8031a91a

    SHA1

    8b37360b890d1e5aa87cb60a9763e1d6b08a4314

    SHA256

    1daaa6815673c16af33b2c395402ec20d16cd912657bb3e5da4b80b95f8331e1

    SHA512

    5ce63e1b019cbcc8c645b590a7fcf2d37643754d9dabdf040665dd1c913acee6e1301544822c8812c76a8f96606930bac65e3f3c544cde4b8c4a0539e5234566

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c046b22fd406fffb7701c3cd2e94e0f1

    SHA1

    7eaf00338df291712924d24b95e9e9f50e10f620

    SHA256

    fd76c7b002d32f9d1f4327d9a02fca9aedb9bb1db087b380df811c0ee16a3d21

    SHA512

    151fa97a908699ef7d798d3325a34be57709140846c20ec4341aafe1f9d2be8c8744c2864caa498b10aa26cd13628b1e066ea7960799715cf0a43276fae27287

  • C:\Users\Admin\AppData\Local\Temp\Cab3516.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3D25.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar3EB1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a