Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 17:44

General

  • Target

    7649ee2c00954c8f82603ef04923096f_JaffaCakes118.html

  • Size

    39KB

  • MD5

    7649ee2c00954c8f82603ef04923096f

  • SHA1

    5ab731ca4d91dfc65205f134bf4b1dbe07bfaea9

  • SHA256

    161660aa51ffc21f9f94b0f44e5d1ca7fff95eefdfbb081243532d3166573274

  • SHA512

    f65ae63e3240d99a741cdfa9a330faf17ea8e05f8f59d6a103ef3e90e11d5dbd3f5c2840245bd49e1b5148f5ce1acec47d6476445eaa86b9f8d08b138edeed62

  • SSDEEP

    768:S1B+nOrcmfmGnWRwoara92Fla92Fbv/tV4x/CKLdMEPt+tbWg:S1B+nOrcmfmGnWRNa+9n9U/tV41sBl

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7649ee2c00954c8f82603ef04923096f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3004

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    0dacab00eaed80a35b78a402d2a478ae

    SHA1

    94fe80b9fee3f6c761e916d362a0873e52e4ac84

    SHA256

    4a2f89bc5bfbb95ba0b10f140d3807ab87b6bee79d5662d05c293c6ac172f7de

    SHA512

    ea52034ac03092c4fe11b89d5c9ce7b0a932b4e18a885082ad02720e3ae1d7910a81f42610bd02afce618c50c50841c16a67a01de35002ff553dfc37fc55962a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0df6d19d491e694f62656977cf3e447a

    SHA1

    8bbc471a83fcd75227041a1d4d44938612624e07

    SHA256

    dadcfb2a39a071f87a9e50fb422428740f48d7686213520cd1353bc6e5c0bbe2

    SHA512

    5666cb09032a1a998084993aba49b101ff266a7b5fac9c9fcb3540c3e1964e4c6f04fac90fdf256632f74ab18eb3eb36bf846739d5ba2bf956ab0c2ef50918ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca57fd06bbd72df08ed0adbd36480ed5

    SHA1

    073087e5cfe3b08bb5d5ab27a8ada873e624690f

    SHA256

    65dae95809840d18781174cbdb5727f6061f2099e963afed98e7d43c901919bf

    SHA512

    a8cf7824a1b2ff843df0f9b39ee6bc6a09578f9dc5b290a806d70956df6050a33762e75691feecf73ce6027f4c4ac9c3283030697e5353ba95820721bd3dc25d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    898558a14d2f0b0bb40b7985b76c95ed

    SHA1

    3e81354209e605340a9abcad807479a5b4967de5

    SHA256

    af59d9d991ee5a12c534f428e2c1aa5e951bed831d769b63498dae269106f2d4

    SHA512

    2bfd5ab12e4744635925400babee1b1ae692e2ddee009405147bdfd2eb4c119127fabb860ad6ad6a8f935ea2ae483c8b99aa80e85611ece4945eaf942912372b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c04a5666fd64de1a2f5fa38aad930e9

    SHA1

    213af4126943b57dc0cb2479b9b1764769f2e1ad

    SHA256

    91ae1e64f944fbc486ab334c7b363edd6baec3db8f517dd114eb68eca102ece0

    SHA512

    38a1b7412babed03895cef63c2f76eb8a14f75766fb8d491c118631c9eaf928974765570cf96d20022a626bbbb9ee02c68fd4f621509ded7173f822c6cdf1a47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d536efcb0fd8a124755f9b78337feddf

    SHA1

    aba2bae0f744cd5ed6be6cd539c8d7fa2de5dadf

    SHA256

    9276578c810a9f670de3b57f1106f049f969e52e0ce1b82fb48413105dab2d91

    SHA512

    f07bd6153ea409f958f4ed51d84c82c6bc92794352868e3e2e558278afad0dc27ca0ae3ea5d71caf63c673d05e03a1d6a9581d27d5eb9bc6cdd8f0afbfcce5b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2175c75a79e6e4b0f37b2bee520946e

    SHA1

    a0dd972660a2b67e12e210a92b4935c903b7f06d

    SHA256

    d55a61fe7e190887c540730ba6ee8771c85b1120b517f62f23c4de83ea203bf3

    SHA512

    98b07e53feedd9b95169708ce40e0f2195617ce30b155366f39449ef337e502ccc741747424d5221a2a32325f73f70e14adb9b318ae4ec0539dd31906b56cae7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c3a469067e4d95b3d290f3733b1dd30

    SHA1

    517723f84717fc1bf34a9fae4599e3c4b82cef8e

    SHA256

    6c64bac0311ade612e2b59a0892f6d5f0163dd39d9e7ca8d33ecbad8d1308c93

    SHA512

    5996cbfea11d5c4dba3c18b6b47e5b8e5744f1fea77b7498422301b277adf929c5ada3bd2fa4bad33f7ab1790dc83cb5b43b4223a866fbdcc80fbcf34402e0e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de6e0c39b0ed3980f715963b92fd627c

    SHA1

    2add45f2128d950967184ded2c7d9de9934a610f

    SHA256

    1cd7bdddb8ab55f80de3028901e46089daacebe1eeaf624d7c4f2a4140266e32

    SHA512

    20e144ff8e605f736dfbdc104cf7447aa3d278c022eb6d2d665813dbe09d2f430621ffd3ee1b9375123a65a4b8594ac44f62a72fe86686e8592473710066b192

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    652c2fe00c985fc5665b270b1c4e2602

    SHA1

    e028826ac1cc1978c0d3e4bfc2285a13f7e17d65

    SHA256

    2cbbdde3601f8ee107033f48c7878cbd88ad51e5792aa6f17c4a1795ecbe6217

    SHA512

    715730db42fa8e13b74f68869563795b8b6638052a9c7096506dfc7229a376f663fe1bf3527223d31d2cc060d3f03120dad4863d19f6edf592748cb66cfacc5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aabdad0315d10f91d2bf15447f89bc50

    SHA1

    3970570f6a64a301a189206189859472115db7f3

    SHA256

    7260f9e6a4bf42fffa9a676bace243aa04343c873bff0fcf39dfd855564c477d

    SHA512

    b4ed2d2c22a0324a0ca5ac3b387f5a55a15f9214f05986b4f86fe0a36686ab1b9107bed9e8b39e42c18751d5e4389a1689b4124452220d9ce9801fe65dabe1a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9933ac8cac7990030b66f9da74b2bcf6

    SHA1

    6007eef44864cce483e3dc27753d0aa7c6cade19

    SHA256

    38e391545c35649f463743b5e8a0e0c39779482d1e4589b6548d1edbcabd423b

    SHA512

    c9a39a2f6af492201c864a6e74aef2a6fa7697dcd526611804c8f194dfb262040d163e54bacc9e79b49a0c105ce681c2df5bd7ef18f5e2e003396df9d8274e8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70c67bf7cacdd6b70b68e6ee7913b537

    SHA1

    5a4a73069a3ffd4483dd9a29966bde4db052f38a

    SHA256

    b5734b909859833948e9bd860f5e112f70e16e16b46a222bc920b3476c009148

    SHA512

    2b3d225adfa9a10c2e283340479a9a6f2f60cd6994e911813558ca24e2923bed4575b41089ed759ce1887fc7fc4a963e7688a3875135e8c5d3daa0c6f01eccf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91cd54adbcc65c100c0ff3d642d5d32d

    SHA1

    0d2f5ba2728175aac5f08d12614d8f2b1c3b6ba8

    SHA256

    c9143552e1750c108fb7e50d7e2f32bca1842735ed05edfba4431ed83d664737

    SHA512

    806a359bce7580b05fd29dde6289c8a5e5c5cf1c7341f07e090ce6330ab0cd18f0509288f2eaa57faa82bc127957cde9dd194541cc9a8f441a8247d7189a2911

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c74bb7311932c44bac285afaef83f62

    SHA1

    a18e26a4877ad948e5fdca43b8c873b9fba00d22

    SHA256

    7b09eba76cc72483a5642179b9cf2736e97277d6733e89b562c6723142358464

    SHA512

    7156b41e707ac2fdae9f9249e456fe0888ad0b4409830d8713731c3c24c901d625a78ea7400f449571215b1cd2e8ebf34210c44ea8688598be104a1eddee5bff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2b5067bd41694ee3b43a60c5c7dbe19

    SHA1

    a8ef63979064028b5e454c0070689aea2e3947f8

    SHA256

    1511f05ad8e53e83e33b699ef699748ec14d00d9dcfaed7eb4eb62c9f3793936

    SHA512

    731a1fa6ab45782d07ba53395ae0c42b0488d1baff473ca47eeb7c29249275705aab47fb26686b25c130fc0ef0ad87a79420ce72c9ef443a47f64a5f99274835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e26011f7da66b1686a87dddc803f400d

    SHA1

    88016aecc6f1a0cc59b8fdf6d89b31a1f62cdd0b

    SHA256

    1b21515e37dbb497b08784072d131519abee929f71200504f44472a5efed5dab

    SHA512

    9589166bc8a245d90a32bad404e590569f83e1b2c97f349957158be0a03989c95383607d0f06aa112a6b379158af357048d61b582d589c989a9d1b4f632cd289

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3be7d06a0bf9a461ff465104814a0b34

    SHA1

    dbb25fef6d69699460254e04934fa612a6b8c997

    SHA256

    b6bdfecb3b28b694bf9b0b04fb1f3168ad49dac82a25310331a3065a9d752708

    SHA512

    f36dca74313d664833994b64f3f1ec3e4fd015ff24e8f5d9c002c9852290b013305468cb5cf6ef2b7d40053d5fea8f3c66d23f6894adc642c4cd7a4356884971

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d55f23b12060698bf94bed07edaef938

    SHA1

    a63fe4ad61d0051771769fabb0b06a94610253fc

    SHA256

    488d5e54e22d920cbe08fc9866061d9b5799cda0b097c9dd48d338e0dd2b0b33

    SHA512

    d959d6cc18804be0125a1d704db470fbb0b35d2df8450dfee93a93aa2b51925a0dcaa8d2386b3b6e3933b53a921dbd6ceab4b8874ca6ff39b9212cb3e4ec5cd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9706a385cc03114509f713553543739d

    SHA1

    4a5f4137f212f18353c5ac44c96f41ba540873dd

    SHA256

    56e1b81ed63832a0114764c3b645b07c5f7f6d450c2e5cfd869fc64e28a4ac0c

    SHA512

    6cff6033c79c0ebe61b35556576187c52dba95e62e6a15d9b2e5398d6bf45a5629c3abf5d19868aa6d555022d99099856e260d67d40e229d8f1764ad9c2379b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2b9b5a18a0bd291385a0c031a0210666

    SHA1

    c8dc9ee7658baa1162dc436fd9985ca7491f8fa4

    SHA256

    7ab49634372ec352c24c692e233b098b52bdc08953b5cb8043db973f26c4d6e7

    SHA512

    418e50bb79880c9c3b840413dfec2dd56d628c3cf21e66b16a7ad034899265a855e3d812fe8b7ee811bc3bcac44fabed8ee79c98285e18c03cb12cd1925e31a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar11E1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a