Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 00:06

General

  • Target

    77426a5fb386f7a1a67e545f7d3c043a_JaffaCakes118.html

  • Size

    36KB

  • MD5

    77426a5fb386f7a1a67e545f7d3c043a

  • SHA1

    ee4ebec83aa43fbe77f3c10a9407fe2fb7e299dd

  • SHA256

    86a01035826cbe8f2a6c9b58f01e3ee20b4503dab5b5f858b59f8670ffbb9354

  • SHA512

    3a28d3dfb2035f5c0ca9440c76aa00b9367053f3a9ed2aa792f999c3fe4d93312721d968d6bd723f56e2dee7f97bad4d903f766dcb5fb4df6b8ea9414d2bee61

  • SSDEEP

    768:zwx/MDTH0u88hARNZPXkE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TUZOD6lrw6lLRcj:Q/3bJxNVru0S9/S8eK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\77426a5fb386f7a1a67e545f7d3c043a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2020
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2020 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2168

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    29fba829e51d351380b2d06fb58593b0

    SHA1

    c629a7e872a366d9b625ae5d0b7bd43fa52e79bb

    SHA256

    ac0ab66007dfbb74a2a17294f21acd13f3eafe9b1654c28bd31a9ba549c4f98a

    SHA512

    b517e9d346763e340d5a81567ae7bbf202c24d8a229f51bb2cd26789b1e6972b284589dce542447f22e150ea3516226764cb8530a03f95a922d9c022af512df6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    979B

    MD5

    18a1f140623e21ec4b37490a7a021f78

    SHA1

    e958fa0815360968f60abca23432fe17af3b407e

    SHA256

    356a6f6647021463249be49c7f3c28346f62f0b001fa151c8839cd2f3736060b

    SHA512

    eae7006a5504ca343e4aa8173c86eb4db213f09e0bc2d6715ca1a65fd4c5a9f124560125c4e208691707be8ccf3e85e12e626e01303fbf741bd1788e8d2f82b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    106f634751ed103ee9ac8c802ea7a6cb

    SHA1

    29fe28354a07609fb6ccad46f42857a837bce0da

    SHA256

    4080df10dc408140d7663a630d847064d39a9fc350a3037fdbbd151d429703c0

    SHA512

    ecc13a14a2fc9a4471f189e119a293b23de7a8094fd671ffe0d8372179bfa4b9c278780d44db41221dfa7968a64d7fddb749a54beb5d25aa93480fda31fb82fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9bbb3f7867daaf5f019019948119fd9

    SHA1

    074de17dc900d636c81030b3bbb3531e46e6cc7c

    SHA256

    6794d84867f2173deea39e820619a93d5751e2806f0b0c944d0b1d3dc55aed0c

    SHA512

    e79ab35108082d1cc8b6f7b6d1635bb1488a124d1bb06fee21df9f695d29e64e6962a8610ff2c37aaf8f43e9a4fa185b5b74f8180aff1dff4001a9f0096f60d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07efd127a3e1266a92b752a42efce284

    SHA1

    cd30265b41e195e1d2fc506e7d48ebbd968e8b4c

    SHA256

    43200ad6211f433c7536bc870ebcb12029a758de66ed287f59981a691bd30325

    SHA512

    e2322f3dee648df1e8d61e29135d689ef341305aef0f6d3982ae612f7994266cf5348410b7a4ad2ddd83c8c8dec928a46306991755d012df43792a065d9a213b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    583a16a4565476bae2f275d53ea4e4b1

    SHA1

    8dfcfc0fec0c995f78e1ce3a61e8ec5a28826854

    SHA256

    1cea9a4200c7c490f7cb964d9f3d3496ac1f8d30192a9c2eb02ef17b377df957

    SHA512

    35c3c24f03d597dee62a77bcef44d91db2856f91ed3924a1a9f2ec6c6c0526b21c70734292fbcecd39658d87a9fbc7bae41f4dbc41ad4d1fa79520395e0eec8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ab8fa7e352a69fec5a3c7efe79f4a9a

    SHA1

    6e2779e9782b035aac3e0f0f000f00a932f729e1

    SHA256

    7713157998de2f88083161e472530089e799e16695c05426f836112788f780ec

    SHA512

    92aaca1a3adb268161737e2414ace2319625593673549dff33f3690f8de62c4d957fe74d5c3b43e5332b23ba32a3464885a261afea7dc04d1009dc25d305ea5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da3013934de78ec9fc1a0262f8dd4190

    SHA1

    7af89f51c936f0a875ac5874260995976d0cf6e6

    SHA256

    d5dd72b06bbb735dc406d9e8f62d5c7e01cab803401a109360a112be35c214d2

    SHA512

    52fb2f107a9f92a5ff01bb37b6adace0e2ceb807b6dcbe6df39671110fadb70ef8ee6d4c70f6a1078f3fac60966128104fb8dbafb4d9459331a844add72d23e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    316252bd53da06fdc636314b643a636e

    SHA1

    39d82d399f6f67a2a0b7b0226d9abe39550de809

    SHA256

    7160e92ebca3739ed75c31e7201d273ad8dd3114125dd9a3551deba81b630208

    SHA512

    37682da0290a15a56f93eec5f6c7b47309cfa608cfef9ad4dc827bc3e22bcd80b81e99afcf09c74d5b097232a5cd48226e842869bd1945080354c47c7bba25bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4f66ac25d3f3f5472f8258a760c6115

    SHA1

    72791268bc067d93f145733b6044c5cb4468e5dc

    SHA256

    5549e9dc0fc0089a0a71dfc211eb5e6fa5e840e61a26daee0b82ab258bd195ad

    SHA512

    7c3d838db47f36240dc6f1ab26f4953313cb8bd8ba4e9bd50e3b9cc9cbab68fd3a3549c1a9e9d708c612d63e66089baaafe04374e2b1cef728482299bd1da4d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed0bface91458d101eba1b0d90dfc41b

    SHA1

    a0434be4c4ceb1ad696ca7139dfb5506a2bfb9ee

    SHA256

    25e65cc9821cb6c87ade65a4ac0d72fa302336d0a75b595819cc68a30e47aef3

    SHA512

    3771b0f2c830dac6e755644ce16df019485292e00911ba050de5c75ca88015b66d137681378d52da74b20a75fb7c0592e46b1fc8062947a4cabc6a228ca99f72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56507595fe4ab78b4aa386fbd56db4be

    SHA1

    769eeef2203d707e2cba6dcd72fb15e166e925e3

    SHA256

    4e93c837e49e86140d10945ed51b8c9af2c56161c3705e140fff2796dd7ad561

    SHA512

    3cee7d165a58311546f80e255479d0f7334e38f4591768ad3a21bcf7fe42d870aa4388516e84d3fb55d955e3eba220c9cf83947953057f67fd66be92dcb3ac38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a021d857e5209ca244862e2cd95e32fe

    SHA1

    db9801dc269911cfa0b339674626f108b88a5562

    SHA256

    68519f64e18f565341bbe3a1faf931ce61be7de8a39f4240b475b8058b3fa514

    SHA512

    0eabe1e1c41a2c396ebff1db7413a4aa0b5cb9bd04e8aa481b2dbf59beeaef16b8bac90a9e67b197e9fa9d51183a0a4effaf5244e458576cb6292e8d71f31586

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe97339a1b477305e7fd99af07a5e77f

    SHA1

    ee2c442a943cd1057aa608855969d9c7d6891c24

    SHA256

    8e211e81cc5647de395c2c3a78b976bbd51e93708968b42c592dadc20dc5dcd8

    SHA512

    7a093ab6c658638b348bd79c9207210e3d2d73ad620e5a94313f5f0b2abe6e75bb0a52dd3fd25c62243cf8627b16f92ae85f238ac25bf0ffeaf6fdc7d241cfb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5542fee4373726c2fe660385150967f

    SHA1

    3dce61fdeaadc201eeb4c879c5068ef535d41290

    SHA256

    3df72d39e1beb7426b4ca140165a3dad2ac4f179506f4773301403ea20e983cc

    SHA512

    969f5f39b743deee5c3967e63dd79dc4397c662011e85e3ac328e90043bcfa3011f183383e538505259860a974c64a696ce400119cd110dde012b40468e708a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a35e550fc84550abf2367b39f46000e

    SHA1

    7323fec8aa0bf6dbae849bc18a5293c4b37f65b6

    SHA256

    6f323cb6f125dcf053c4599f3f5cd6fc85b7d35308d3e2e5ae94bdde20e591ef

    SHA512

    426e79e38c295a0e9690adcdbb4818c3ca8d3cf97411c745ad5695dc14baa07c549432a75334ba0c6f62ad8c1724013079277702a58754b1cc187a7b8d67dc84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f79a05eecca581dd6c53bd629ebeb303

    SHA1

    6534e648cd282a945124c5cc5791b5139e5ac7a0

    SHA256

    7ac742e9df4669bb7f03e9a725b7d76df0b0091651b0bc5df6668fe6804bc344

    SHA512

    54c0ee550e51ce94e799551298bf6cdb078581e4b3fa5447ba6a656671be25990245317c22ca5b45c9d6d03c9e8684d069504d25989c8565b705ad78f72c07c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73f756287b68c9ae929b4e9a07c3199b

    SHA1

    1c459207615a0850417923473eddff23eeaeb353

    SHA256

    3d07ecfdf0fd47e523d97f6ca0341a69de35c78b2cf6209ddc9c0b3158d447e8

    SHA512

    6512ab480a11bb00fc7688c79a5fa1d3ef9dfed73527740d4684d5ab0040f89967d62cbb5bc97a453b6227494d9f65a5ec887ed9911bb3999e967d1be5c6de99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    045dac0d8b5c48e9cbdf366923e7aae8

    SHA1

    65806abef7a0887f78aff99e55313ac5f49a4c1c

    SHA256

    8f97c497d08befe818f1ce44e9c5436bff1192a6777fb088379f2ccaa031bcac

    SHA512

    62f8e8484b3c48d0c072c4ad43e27bf7556d6b208e05c20cc0b47173668dc67adeaea4ff1d4e5ed6838696d3c1d627345d76182998b5ded1b27018d4e7fda30c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0aa5548c61a842e122748d353237a8d5

    SHA1

    dca2108affb545cbd5688bcd55bc3df7168f7122

    SHA256

    55bfedb659ba61d607bf789b9b118491f6ff175e5163fd23899b8d935af329a9

    SHA512

    52d63e79b9b8d5c6cb117c153ac2cbc81f08643fc3aca2bc0b316dffd1ed260e4efa306ff57dd168ccb8dc4773378e93b06c128e4eb53583a9a07e1a3cb24fac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5ce7f3283222a666af00740acf25f46

    SHA1

    461c9b22a2b18c882f5e8eea15d4bd48a608ecfc

    SHA256

    8a40f95beb411311c8c8bb7c7d4872488803e19d2121396c376e7fb7d74fc322

    SHA512

    acd7674495dc65e9b099fa853a1c926d6f38d4c38c331c35f2244c508cbb60b662ae1ff6a9b912706eb5f5ca9c266e26604e9f83e3ea21555dc6031ef49ac24e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f663313f86de3294b868bcb829636d7

    SHA1

    6708ec53e010017f852ce2ad9094a00702f2b3b1

    SHA256

    2d25c8e71508b4434c8837d157e4f177534512fc09f90c62de2284ad50b78195

    SHA512

    546765734ee5f96eb5302ca788333ee4f8f49a45f9a2473f014e607227e1fe00ffd0ab9bdd9ebffa5a133971effc0030f505cdeb941aaf212b6ac6fe4d94675b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d36cb6e5ab759debb9e684126484db53

    SHA1

    d9f3fc05df14c9c71071d61067fe1bf9183b24b3

    SHA256

    f3fb01010c26c82b0fc92877315b82380b5d560db3d768368def752c12da1f18

    SHA512

    a50292dfda3324a4706439ef2684e65df8fa03b58eec7375ba99d30f5e4ed70c47098d52597326197b8ee54ec1aa32420e4a23fb9d252194650c3abbdc16d8ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    482B

    MD5

    e1a2b00323a489f08c7b196ea2438869

    SHA1

    a13bed4868d9c199cb3252eb51c566cdb6785889

    SHA256

    dbac27fb6419da41cc35f39dd8c4aec9f48fcd76b631367000b4e35d2f832b81

    SHA512

    838e15ce0d52a8b529b8a12adb8c8a1e31b2c0801b6238f7006b356540db5463399d4638f89c53941ebdf2a40c7477e2b23a0e1780b77fbd091b048b444026ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    4ddb968bc596b76b4c62c24bf8c08106

    SHA1

    335c9fd76d2e3793b9c58111c877133c88dacd34

    SHA256

    f5d6124c3718ce5b1859eed72ccc783fccc5f0c26ebad73d36d082b42345162c

    SHA512

    b06ec597e25abac2ee2b9e2c141787c7947ddd3f08ef533f17e4507779021848d347d8032cb9e393d1548444f5c94cb1f6cad716a468900ec80d0ac7e4211546

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\6128162e0ab80b6aaefd01d25ec9fefe[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab2963.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar29A5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a