Analysis

  • max time kernel
    147s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 06:06

General

  • Target

    7825949d109681e079a2408cec0d89c8_JaffaCakes118.html

  • Size

    70KB

  • MD5

    7825949d109681e079a2408cec0d89c8

  • SHA1

    346d13078db98de4ef49848c5c212088ac18b34d

  • SHA256

    0262baa334fd9a3ba9505fbdcbd7c72c02ed68c7dc835eff6e1dc32bd4749042

  • SHA512

    7048a9301644e721e7bedf7a674a3ac84b025b8a0997c778cac006fba184e43ac4a2f7098c8061e69ae46224e5a90342a63a966f21cf934af665b7742d9af3b2

  • SSDEEP

    768:Ji2gcMiR3sI2PDDnX0g6su6HcFYA1YgoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpq:JIdTzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7825949d109681e079a2408cec0d89c8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c20f50675c8b65fba3c3d30697fa65de

    SHA1

    6633ec17641bc1eb2ef2a15fa089eeebd835a228

    SHA256

    9f419617bae04698a080999a48009d764ada03b983f307265017f7b78648e32f

    SHA512

    711141e3753e3a3840d5fbbd62dad690fcee496ee351fde1cb673822891202a4f3da36f5a864d69b1974324a647df8989d9061a66e4d225cf7a4be565e025513

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f39580d8cdee19b9285939d5946b77d

    SHA1

    c807c2aa2eea48316982b4e3655b94e9c5385d21

    SHA256

    077eb2955c0143c4ee39d123df7a5002dc223a11f032a4f8d067c0f8349a4bc2

    SHA512

    b923c2460ae2d99ff79e3e88551fcec1f9edb424bc77a98da76149ddda74ee4ed853d4e9bf7190e510948d1615355d5be361ffb5137c17838bfc1bf127757b8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9c94b2c5ed38a43c3bedcfdc6f91604

    SHA1

    c8bd2ea2a2c8474c7db767a192122c1c6cfcc03e

    SHA256

    6cd1bd0960bd6b4eac8dc1f415f271f0a11ce7c5da38fce47a0158f98c92f192

    SHA512

    a266bfc35e47645816c50cfb1968ef3eaef6cbd27fb09d98fcf8b1cb3d6ca877bdc8ef026a6cc903cac605387e802cdc38251a17ebec844ae768ec1f7f96ba7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba0ef0dca6c012112cee6e15538eb27d

    SHA1

    2ed28248e625673b8b5e7fae32af73adbc4fd9a7

    SHA256

    c0362058e5b15b5fe932d17d4c08d77ee83ec17a6b3d43cfc5875424b7e9b4ee

    SHA512

    88da9d18a51c2bb3c72b2a142beb893a43378939c0c55bf2bc745c617e292db41fd3243732a6f124f656e48f753f8f521a59868067d09d03770e159e0ed9c293

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55aab6af1989ed82c654a4b0e0e94a20

    SHA1

    c98cde0cacf51505ff3d1685848421986ee12157

    SHA256

    f75800042dc647f642afa8378872879d0012a934180f91319d65cb3eb52cea22

    SHA512

    9d84b2644338ec43312d77551bb6c2f46fa459bf1331d0e574e0991e50e344f6e0daa59b08c9a5bb8ed6af6bd85e84fd26f14cd39b94b084367a87aa2978dedd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c102b456630f87dedd02116a22f7f97e

    SHA1

    a0593b0fe43d57449028c0c7166300752a1940a7

    SHA256

    998e860ca2eeb95753f7b1a49b20d446cb7847bf6c15beff4534ec9d059bea9e

    SHA512

    50d12dadc75edc423b85a72cab048eaba6a5b50f0326a6878ad719efe0e0302047ca21be8dc4747c497c9be001baa210950506edbd20d931521f45fc0f645d8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cff2ea48bb0e0b5469d64bc2ccd44dd

    SHA1

    c9b524fc3f5e463cc3bb24d86a17e3e219568965

    SHA256

    8e3e1874c042b78e39435ac42890b80f556faef9909e19b7b47f497372dc15f0

    SHA512

    b6a3106353b092bfce6a111097e4a8a9ed76428490b3da458139bf5451c958fb528d810a0199bcd903cf9b0eb6304816ac6c80088872922ed5d93913d4868a4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e3432791477bfe951682120e9f57655

    SHA1

    ef9c55e7ed15e7715c40d9c1856d5c469764dcd5

    SHA256

    341e211d60718f6d62a37297b2e5123d2cd042930820bdafd4f294c4a562bd97

    SHA512

    0e9139cfbe6155e64900c2f0dcbc53333b7f71a82073ef44ee5e1dc4de64d282b72dd5f420d72dcb8339af18c7311c9c85a690a880da33e549b43fa1c9cd4201

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e933f80372da436e43ad7d85c368fd3a

    SHA1

    bbd9a5d49670fa6675c07865cda62cf7486ae3fd

    SHA256

    2b5f3ddd5bc298644b1ff6a0586aac5b5f0a3fdc3db675086509debf2fe56bbe

    SHA512

    cd238c5a3b9010a204e3155bedb5e8fa0891cbda852b50a84e220a16624e974776aacc767e3d6372b7283d7547bd0635b0298558511b4a7990a6e56da1936d71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cb2e70c3aca4a4dd4aa10ba5510ff07

    SHA1

    f34262932f6f069371b6d47e3c02250c13365024

    SHA256

    d9f022bac297734aca9cc67c50c07e6039449ea3354be06768ec1743de4da892

    SHA512

    b0a92f336d345395bc383cfa02db366d60cfd47ebeba88749320978c7b08eda289a90b354f59dffd43579b1ea3c8fa23bb40075ec5b9211976d882e390ad46b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    956e641185af254ff3c0690ff44a397b

    SHA1

    7224fe1456c23b94c68e2a78253d8849cce8e836

    SHA256

    ea282ad75960850864c95a7afca092f4dc8810d194d195e0d7f6614e201ba4dc

    SHA512

    17e517107021217f9d7d21799a1fc35a7ccd57df797089977e3930bdfc992ad3bf3935c1b1b8bbd7f516c666c6cf4dc13017a88c1919717daf589bab7e54319f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c66bb8a1c2dfb945c270da923ca2d424

    SHA1

    9b68414f0ed9f2aafb518101fdf96f380500b1d2

    SHA256

    d036aa6b6ecd374b6016e5e94dd3d49ed26ef734f54ba5670a75fcf19bad4c4d

    SHA512

    410ea96b3096ce4f791fffd52ef0f033a9c599dde3be389aa2da35ec8ccea966d57a2636eb2951849b69809db9193007a2b6441fe3ce63fc4eeda1d6b0ec659b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b372a3f51f2dcdc868c2de503798fe1f

    SHA1

    0816ee801b092fdf9ca7ee0cd511f4ae6e037459

    SHA256

    4ef82f0e5f33764b5c43ef94f0eae59be5ee2e46b64d50d2063b620555f436e0

    SHA512

    5cc96464a7e46e88bb98b26ffbad885fc2b8a7fbec14688f493b403f61351c516de7d53b33e18f0ee6686b0398ded5b513ff13e6a2a3639db9364dc089702fb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a7decfcda4773b7caeba9349e7c5149

    SHA1

    bd35e84bb819da2cc84ff942b19a7c778bebb6bf

    SHA256

    b159cc9a091e32ac8cfa340f86b07a16aa936d12565ca360ffaaa11fe513446a

    SHA512

    bb007917d9f2740ad3bc501d897ab4e6d4abcc96f350df1261a7a83afb94c16356ab58b3234d137ad66c004b0b6f997b6731f7d8d001a4b0b5eadd761d7af5dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3601e6d323a6416e0b9da835e02472d

    SHA1

    18b07f1cde0dfcba0448f7bbc80f7cdf877d8179

    SHA256

    e3a5fe39e878c318c0a5860d5686a44cbd28d94cec4ab5f2b440a570ed201081

    SHA512

    4ea7e3eba6bd6b404f03984b033bb85334b67626d0908d2560fd9fc706d8db86d472d7d5a19e260d17058e3195e3669b4bde5c76d0425fc92dbeaa4e6a7b4f85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd19dfc7c052fd2c6615b31e15cdb8b5

    SHA1

    b7a15c60132dad917450ee7aa0dfb36320015c04

    SHA256

    09bbee3839eda2e6c932fba946d5fa1cd62dae03c4140912c2aac41e8e417239

    SHA512

    eece8d2ac8350dda31bebf7f9c49c19057d6b9f860aae52e8027c83d9588adfe7fee90124b6bed59116668fbdbe09b0b5d8b50490870fe000ed9c7aa9a90a19f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26e7cce5ef5bdcd7311ee7d0d369177f

    SHA1

    8a581032814d06c4cfae34a0dbb32009398003ac

    SHA256

    10377bf632a150a095b98953189ad2fd22f026b72c6370777530a8bc2565a92d

    SHA512

    a327a105ede96e63738452ab30269daa146fffc29c97e63767b976dc7146b7d41f4213d11d83e8de1af3243539237eff11d1fb247daf50c4c54088215ddec1e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a7f80ecab9b9c98430d0154b9e70792

    SHA1

    cf733d8b25a652ebc5b4f4ed72a6186000d7d083

    SHA256

    36b4f57ed4a77c2365d474aeb60b68e1c71b9f59f3e764e30c3934d9b7201049

    SHA512

    63cf5bd439bf77235341396984071f17618504181755743b1a70ed836cc458804664a1339c571e1b2b74d9fd9268fb45e5defb515252ddcbb4f1f5d1eac0ff13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    407478ef059fbd52da5d6252d7889e07

    SHA1

    aacce44a6264ef4f5ba3ec1e22d909615e53d9b3

    SHA256

    9a3f67e1055966b73825f30e10f9d82d1a5cbf6d450d6d7eeff7a19a16bb4c01

    SHA512

    044d85e386afccdee14d75d0353da71f497b98ea99b22edb5dbcde8167611abddfcd74d69902eec7183602eca7f5ddd1d5b772c555a03beff307e28bd19a9cbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb93fdf61c91aa9785ff41698647dfb1

    SHA1

    159a849159c7cdbb63e163defd9dd439e17e5ce2

    SHA256

    e5fad45d799cb8c2a8e96a40768917ff7962ca576ac08c46b42cb658e69997d6

    SHA512

    e50a73bfe9573b438a212b7cfac6896c9ae4b5d6d2c8f17f1b8bc4d182286e6e91b52132ff3c51a7abf2ddd89cf40885fd1b172f06086acb1294394f1277e349

  • C:\Users\Admin\AppData\Local\Temp\Cab32D4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar33B8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a