Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 23:28

General

  • Target

    7aeb52b2f46853d7f06c6e782e76f15c_JaffaCakes118.html

  • Size

    205KB

  • MD5

    7aeb52b2f46853d7f06c6e782e76f15c

  • SHA1

    3d2e13f1733e8edf9a26ed5351ccb6def35f806c

  • SHA256

    7c9d1a10cc798e3bb3c356d1edd8eee509d0ba763201753602f3e77a93050425

  • SHA512

    7b9efbfd047223e12318ddae51bcef73b8e54f5bc694a8cee3a6b5c2be6cad9f351044c9710872ea4f15a0f0349a091a2238ce29b3c6e797589e7ad7c65ada44

  • SSDEEP

    3072:icHYtJ6rHfgaToXdYbduYdf73pK7BzpQK:iGoaTo47o

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7aeb52b2f46853d7f06c6e782e76f15c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1928
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1928 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    e7e25a7c342a2b782db207545eae3405

    SHA1

    44b1e50f06a37530c2f835be3fb98db40872eda7

    SHA256

    6b4a89d18a5b093a0e4f0b4131ba454a10e09bec471c5cbf173c4003e902bb1e

    SHA512

    d18a4092f3900d5512a38588e42aa88d1244ea5b9bccb718ccd17609745eaf92155f74dc19e4a10e1aab193ef8d3421d59a2ff0e79b3cae9e0b6a2885c8c4841

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    806ec2d604bdb85fe171ee8b205c9376

    SHA1

    a3a034e25c2b05bbbeaa2208686198f30567ed20

    SHA256

    a2cb4b44eeff9283328182f214c42adae329dabfb712cd9686a4a017741fb84f

    SHA512

    250ed49aaa3557d19b384470bfbb7d0cfabc6b5e1227cd2642e9e5170105fd75b8b081b736b890a6a086cc8af82475fea896a2e945fa6756ca409c472aeca54c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    6ad19ee4b04b5d7bd37b5f35a8adf91b

    SHA1

    6b5878d3f1e9908dd66a2356856c91a4ebdd700d

    SHA256

    f070c253a96baf847bf94b20fb557d06d4cc2118373501297382b246a0b18df3

    SHA512

    640e45df847e3d0b4a53d1d8f999b76847ca0cd549dd13e2f1256030cc374026531d2206d81b218fd3aa0a412aba2c434baaae1e9448a0082a041c97801194f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a728348549d441a727dbfc6da761521

    SHA1

    19cf20fe116baee6902fd58e1d337fbf6d381a08

    SHA256

    8c0d7bd08b479bbcb6d01b33bbba69e8d79eca09a4284f4142439da081a1fb6f

    SHA512

    cf144c319d99701163dadef27b910143d39002ebd5525448c52086263f03032d3d69b5c9dca6005fca11d3628130583f7b7245fdd05aae57535f3558e3bf1fea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c0b4915b5ade9d3eef9b5ac78449507

    SHA1

    e2bcb85328e2230e5ca4e5fd90e7847f708c08c7

    SHA256

    4a642054931bc36d5ec491beea61fb28341c9a91d890e8709aa91c80791a8dda

    SHA512

    5bed0981e5e0d9665af9ab2a2d55ad97f629996a4992d492e1d35604b1ad267ca2d2cb9f9a7b62459e5180c2a1b063e3bab29c5e0865b2321f2d631e7067b5bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92754448360968198dbca5a9c84ead89

    SHA1

    56b00118143100dd92771c92055135ef730e8ce3

    SHA256

    73958ecb5dc851f8966b7809fb647e20d08400bd8ffb1d6359e09e9c8734f183

    SHA512

    80931d711ca0eda2d4955a8bef30024215b86ba5abffcbd794e5a18054f7c46c656cc2fcc2dae8e7d1798402e80e5cd63c3f328a916f9ca7e28c6ce9b9593551

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7310809b8c018f1086acac2701a6719b

    SHA1

    93952f3dafa2bf93d5f9c0e081e7fbf79289941f

    SHA256

    213eef29c87dc04989a0c889a723ddffdbce278e8fcd2c44aa56be15e1bb2bb1

    SHA512

    1ebee80225f5bf62973e8c49f2206f8b69ee3159be2077af2cbbe760c56b57c1ce0b2290cd08cc233b68f0aad37aaa5ae16ce1fd0f001994aa3ec83204deb1cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    518d584d73ebc6a1d8e324345141efc4

    SHA1

    ccfacbad748f71ce8095cc3232456893da55da2a

    SHA256

    3d37bcda8a47fd564879c72c4b7ade7ddad679f55d8dbdce3a6b55d843de81bb

    SHA512

    057b000287f33a66c27d69e52b1330b87f03a163b51d9ede84cc412dedabfd15364a2f2b952f2657ee537a97f34a49075998285a3804aabc1984af541c479a88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a24db37b6469368fe4958b4808e3a7ea

    SHA1

    b992225dc8dfe47d3391cb3b577eca42532a0895

    SHA256

    b535b95531899d5d3f046c6f121a424e5b2f99e17f3895df664647d6506e9822

    SHA512

    3a311563ef593c52225e4776268e0d2a824d8c7cac42627e863cbbf25b450e9847718378729dd6d7462a3f2511f2dfe839dc0d1fb199ad05a73fb8041a764aad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3393798be56833e16d451fd90f0c0c1b

    SHA1

    b6378660b8c05289231dc68ae3cf39b7266be469

    SHA256

    146854778dbd2619483f05aa098b53a81990c37567f40df8a4c8f4780230d9fe

    SHA512

    3b93556066c32ac78ab27ccaf00864ef8256bc9d6e75c207ed9d4faa3592062237f1749157aa45ef75307acce1c27eab1be9af753cd0ce56624da80719e7d527

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8bc88e3198b3e1dcfab7a2e439b12ad3

    SHA1

    59232ae0b8ec48480042ea680bab48fc0f20d9e8

    SHA256

    23fc548e62abb63da68ec0c318875a26a61ddbd8fe594a047cc8659e7d5fdfeb

    SHA512

    eaacf64a26941aa9b6c8a89f26aeb249090953f03c495d11b82e6612d1f12398d28c4787c33766514727733f324e141abf3cbe32ac2284135cfeff2267ff7e6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    05137485179b993e19295954357c53bb

    SHA1

    54b795bd1c410a3afbbc23af9ca1a079e13584f5

    SHA256

    44c0e842a914f1af8549c5247e0606c6fcc04a76ac9c2bffe1fceeb04a1f70c2

    SHA512

    3825d5e4939128da157a7afc3f64a5ab71fb7bf94498790795cc5c5abd4dee5615e20a9aff1fafe1073edc1e51db873710d16a0b91e8059f56d543cc2b5f6f64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34474b772de3ad0060cb5214e534fea4

    SHA1

    e2ca37073d24023409d4e09ed0576a3ab138b183

    SHA256

    b6038eefea5d14ef4e8e5f8e92cc5eef1b5f734bd90cb715417a615086ab5cdb

    SHA512

    dc1d017c2756ee197f8b9b9b244c5028ca9a05c3a1d91de6f3bceee0e9acaf19100a09b021c982534484f25d46c930a64b2bc54cd5ada1491bddea36a414811a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b05034c84cc0155a36cf5278c13aebed

    SHA1

    58a5fc52057c9d0719a56b95992fbb77c881393a

    SHA256

    e697974b18bea1e6c0b0a22142c4131aa726363cc6da149987bad186e00bcb04

    SHA512

    5b72c2e8d48213c9c9c362f56c91288af1779f33c570f66b0f43d0c4779297c961f2cda861095b73dd24059a68251f3ab004e8bc3d69e59fd203f5364d13fa6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b10b542e037bb56d1a94b3ab7e8fea1

    SHA1

    a71b0a54317107ee03789d21410bfe3819ac0cd0

    SHA256

    9bc8216186df686ba5c360cfaf93d63d261262cabf65a2fdd8dc86db63de2b1d

    SHA512

    d3b6a9ae2008bff7bf8efbd3e5460afe620c05093e1639af8f183145b26e8d8c2eeb0ff575f3a86b82cca61efb985482ed3122db9ca0aac2e614152d7d7876e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    105934f0dedf52b7ee6d653c6fc82fe5

    SHA1

    2539968b065ec47241275070f6b5b65793168b1f

    SHA256

    480ffd4e8f3d229531a01b75230324085d569895c35f0d4c0d73e627e35f96c4

    SHA512

    e7e2fbcaa278e4ccae071131337ca842678bb7d35584a373e71f20bf6cc07731b23dd1cf0ce64a9a014e5ece7b38e79de1d28bc3a2d9d55792fd7ccb9febc790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d51f9a8ff774a687860a7f7f6a0b35f

    SHA1

    fd851526d1147b458e1d49cb3ac0cbfbac040214

    SHA256

    199635e44f84dc4f96a59fdf91895ce037298fc16f23ff2df0daaa6462d61003

    SHA512

    5d57beec6cef63e41f390dffb106b252167623255260fa950a27b72a205437437e1c2935040b39c3e688e9d5e134ad49ea4e50edf3dc237cb0bbae43062ddfa4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dec9049e94c685cd93bedeced2a3fd97

    SHA1

    0ed3dae2b9de0ebf3615540d342a4bb6003ec568

    SHA256

    ede75cf7aff1e763c43bcf128659ab811ee6fb1253c45c71f73278db7ecfb519

    SHA512

    385e8dec63797ceb7d51b6eb42de3c3f8182aff11f8ba8a133da09f3794bec9a1abd6f11b86cfddd7f66932a4ff1265538cf38e9bf62050eec4712de1596a588

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28b5ddae5dd7e153ebbe9e78b3db09e7

    SHA1

    e85d71787d4af2e6a1e6cdcf3f8c2cf8aba82b20

    SHA256

    fd5832e717fbbd27813273d545c9a954547e3a45f9119605186ed2aeea699fa3

    SHA512

    3be3c6db915f8b8ac0e505f7c62463523edf5b7c6df48dd50d6e75e0f3e5f092f3dacb1ed1cd554f55155bbb8067b19bfcf838cc70af8acb91b7cb533ae7c8d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3d916dc33d65a46f5b3de11c8522c1d

    SHA1

    6ffd65c878827a166946f088b747245fbc597d8b

    SHA256

    1ee4d1ee216387a0de17b60b890edb6a863ef28052a14bd7c6a24491a33eb2ee

    SHA512

    f805ca6249363a472175166c9c5df6212a2dbe708b6283c340bb7611676a0b1dd68e60c8a1f79bd1032bce234368fa5d0e0dfbbf022620c0b272198e72e851b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8d6faee6e7342c1081a4e78b4c56fc7

    SHA1

    f380f8e0a7b792cc5ecb868a041d1ef5886ebd20

    SHA256

    65d6713afd5775ac0d4a074d252d2978f827cdc61462bf0cd100d3d54aaef4b4

    SHA512

    4a411f9188a8d876baea00f115b7b259000b4c10d25319aceb65cf172a2d4988e7d51b385b681088dfa01faff995c938db0226ddae20ae4f9ad319f36b217a41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7b966f94677e514b8cef21237a5bf29

    SHA1

    93ec58438857f909e18f3a0de2baee0fbd75f38c

    SHA256

    150b974c1c1c72dd39d14d4983902527afc6b677210ff3c9a38d29702d11acf7

    SHA512

    5a459b9179c8e1d74dda4da0d4a5e6eec874013cf20ac68f8edf69d371dde40f9368abcb72ca8dccd1a57dca0b85be72c79747bf1658e2e02fd6113d6291edfb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0129b52051cb9c632d4b799092d4cc5

    SHA1

    f0161ce8a86f4264350674f6ed7c5030c380ee99

    SHA256

    376934ea009798e4e7952f5c4427dc100d50e371d65270d3910daab8b9c1e696

    SHA512

    3f1bd16afb4a1879adab7a6ed5008e60b8f284d462db64a19ff4c9e071df0e608193ccba6630dc6f8a6c276658965f97eab58c10ebc84c3244da4fdcdde521cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ea7a249ab7f833e94229c60e541f53c

    SHA1

    c0beab3b97af82a88ac721f36948d9ad9356578e

    SHA256

    564afb5eb7ebccd495d4e9fe22daad777b01cc36ee55492963a5075b32a25259

    SHA512

    8cd5813a25cafd2099fbcf2f011b93ce9b6bb2fe2dba2a73a1540a188c4eddf20bb242d3601b37a5d488dd6efe9ac58cab96521a69132d2113ab4826ffb481f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    edb3be21dad39edc9c9678b0798314ae

    SHA1

    45ef41b382c1053c3d0079638f066db6a4124ec5

    SHA256

    0ee389bfee8a3ed1a123bb700e67ffb0ab7102cbea2166a13625f763a2ca223a

    SHA512

    b3dcd89001520f798a3b0621e8873d9faeb27b6cbde2228b02f9ba0267eb3af870597558d70df7362af83f24ace596b16e4db5fe16f49d02025faf97b368b330

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_02C4C6ED250727F9B08935C0A9565568

    Filesize

    406B

    MD5

    b72777008501b932560f78eccf45a1e9

    SHA1

    28f47af9123754860a0783c9a1a99bcba9415585

    SHA256

    8afcb218dea06e6dae64dca8aebe8ea751d6832c514a0a2ed74ace04d9672677

    SHA512

    77301829bf1590e097c51992d3fd469a421bb919776d570ea6b2d702afb6d8347e65fa303e668cf627f6aade20f66e98fa468b45ee6725ead48f54ee1abe7519

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    df3de9d3b7d949ba89727827e0832c6f

    SHA1

    6bd03dc1100edacac484e02a63f8cb7ec14a3f1c

    SHA256

    78c8bfba755361b49ac8a7092d163a657a6a72b1259dae7c3e57a395f32976c7

    SHA512

    dcaf4ba5322ac19aa45051301939846d0d3b27989ecd28f3dc03d5675d6346a03c7d9f06ebbfa7850e433741b734ada3200c8688b39e674043165d449866948c

  • C:\Users\Admin\AppData\Local\Temp\Cab2E24.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2F25.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a