Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 21:01

General

  • Target

    7e634fe14731a5191de523e89be0807a_JaffaCakes118.html

  • Size

    249KB

  • MD5

    7e634fe14731a5191de523e89be0807a

  • SHA1

    21753677b5f06a835c269063830b462a8ec4336a

  • SHA256

    a0ccc8be31979b6ade687f8e744565eeb86f58d8f364297136a9fb73278c854e

  • SHA512

    ca4f2334c97968b8d72cf4bfd6df5de838493f11be626478113f50fb9033bbd7878092cd9ebbfcd4d0a224c15d9b5544fe3ccabe96e45294fa1c816e8d199863

  • SSDEEP

    3072:SsyfkMY+BES09JXAnyrZalI+YhyfkMY+BES09JXAnyrZalI+Yw2Q:SRsMYod+X3oI+YksMYod+X3oI+Yw2Q

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7e634fe14731a5191de523e89be0807a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1936 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3217AAECE20956500C22BDB70A7D005F

    Filesize

    471B

    MD5

    7f5ad6ad8c97e79785f366d540e379c8

    SHA1

    65c12529eec0a5e64128e00d81ba1b2cee3d3b7b

    SHA256

    186a06e51e3114992c0f935fd2c5a66ebb50db079a8d399b3d905f12073a7e34

    SHA512

    81709f3950e368f8a86f52cc64555f53441840337634a33a2d13d4c21047d1ed9a6106cf80bdb54ca1fda18e70b5f0db1fad1a98b13a61696ee974e6f74456a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_D14B79B440CDC26D7D21C81855E2C04D

    Filesize

    471B

    MD5

    dfe6f83ab868451e5d5a0a423ae10aef

    SHA1

    27a633b172cc0d0cf453e9f1d4d54d9efd0dec21

    SHA256

    c1c3cab4efac73c167cab23220222f55e9c7559e6150014c5033fed4b1865ece

    SHA512

    8e8746aac428a4918f75a0c33a1ea376d230d61be21c506e61c69c68b323a83231837a0471421a166030bc1e0f36094fb3d5095211b035e8000b32d7864e4c00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3217AAECE20956500C22BDB70A7D005F

    Filesize

    400B

    MD5

    90ade742a50e4a71c9206604519a9860

    SHA1

    394499f4456c40fa95bb93e98e2b8576c983196d

    SHA256

    db0c031895f40a6a7cce59492b381ae16c1f1abb42a4396df26b0b05c15fa541

    SHA512

    c122155cdf2682339d0c0dde834812aa3c45f635062d157139d502fc742e999785b96395941927e1c663540d5c2ce8019078972530c3785ff088da6722e9a9dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3217AAECE20956500C22BDB70A7D005F

    Filesize

    400B

    MD5

    262390c5869af09e820ef23c4a6a4d6a

    SHA1

    3d0bc52465a6146ed7c9310adeb25e04d96acfd3

    SHA256

    fcc926072e642a55bd1a0d486c02ad46702430d3467d588d5d82f120d4962db4

    SHA512

    e36ab427d1d4910b9a5c184be458707c301e2a05c4bef695d6fc934ede0cf223591683f3aa19a86feeaf3c13f3e052f4bae603bd4add2e54dbb1b0b9a2aaa127

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    331288a2ec8cc7a37a6be86f17d9749c

    SHA1

    d8dba656df586193fee3ec78503604dda1f731bc

    SHA256

    775ad571376de180c1465457b70b9b4994812c7e90c8c46428ff087589a3334e

    SHA512

    d1138f6aa96b0a5cd64a93d0e65bd4ba22833e6f2e0c0040cefb5c20c28891b6879808e701f778a99743fa2499731e942ee802bf730b44b3449f0982a5a9af3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75ee5b2b9b8d2ffef3b06ca7b8d610e9

    SHA1

    4f583d9ee1688383aaa93b12da49d572e0e7adc4

    SHA256

    77fa36688afccf241ee423d8b9a79d621899dcaa8a59e1a5633fe4d0093341c1

    SHA512

    f8e5786659a4a5a179c05062b150e158e68bc0df9268c932f35ecae00f5b81c38daefa2607b9ea025f4ed41a472b0865e611784dab2e97a7bdb10351fd7670b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab04199f7013f45b78509966331875a8

    SHA1

    2e42237e1dd3db499b9ca41ea14c7b45a21ead75

    SHA256

    bf82c460560c936328b68192eacc5203c0f39c94ef07d853564fc7854de7f788

    SHA512

    c85348694fe89c650d5ef8c260d4b05c40665c03bf334074e2a5b33593db96e8658be83401a02baf4a59e73cd40ace9a9a123b8ba7281e3ad2acf4d9213267d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec58386d699615cd86acdf072d0b799a

    SHA1

    6d856ce4831fd7e3382416f9aa022fd199934de9

    SHA256

    eb83f1d268ed4096b5fc4641bb6ad248e5d06c0cfb892bd375aa7c3f9f3cc93b

    SHA512

    969fdd20b681afaec8c52929ea28905385239c7d1102105b4b4d23aa84d20698ceed8a1a6c8b134c091c09c5bf050a91050308a5df3037f5f8e4e97d90f0971d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8c014a18ca5db6ccca978a8ca5b7ae5

    SHA1

    146028e21a4cb5836fa00d0b3dc5bdde27eefe3e

    SHA256

    e667d75775b3e2bbcadbbc3b34cb1cae6709c5fe2fa12ef4d66f471aa8a02b0c

    SHA512

    a4e4438420be80f58736d24d239dd43af8d1d145de40dd9c5cc1300027c12b6a7c234ee26e09c943bb1f5a7ce57d90427abc9317c742c897c988ae05ca762669

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e24458856f104bb42ffb7af01d9e8ca2

    SHA1

    d87917cc0acb3c0bde33f86e4629b7eb27fe7072

    SHA256

    08467c6c334a0299d7af9e2376c8f44da558e4b39b6902f6713bb3399cd5cda4

    SHA512

    11c844f2b27c18e33ce5e63e136f497f329b628f4b15732fbae1c6dc6e7536d3fee8fdbfe7f97ac6462f61618996c7be2c207580b1ee4a1c3b982e3e869c576f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82fdae5af775b97f8e1b03287f714088

    SHA1

    48b41bc16667b4f0d4dea1554531eeffc9be34ba

    SHA256

    75c298a624627b98d74288ed889ac914a22d226c0ddbbdcdc8136dbbeb51b48e

    SHA512

    839ba61a533d7af696a9208280046fb04a80b78650d71c7af23f55c857dc8bfa3b7c7f62af5a34284c5d44b327da1e3af106db61140709f614c1b9b66a5d3ab8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9fb57bb4e63f199a74d9782efeaf318

    SHA1

    db9735223f39ab9d8998ad5fdb7ddb71906dff66

    SHA256

    b5eaef66c5314cc7e8f62d618e72e6bcfdcc38b5214455cd62714faa79a4e71a

    SHA512

    725c65fbd1d98885f2af39dbf67e4712a577225ceb22789964720d77dd99fabb91e86b1228ebd75f0168cef2161c4dec046ba209ef981c3a42d5a3a0b80c7969

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c86ed3a0e4abc816f61cbdd8f68dd584

    SHA1

    77d633e3b1fadea5ddf06a6aa2033066d72201e4

    SHA256

    82699910d3b5ae071ccd0018372067192861b513986016268717e53b8165ae5a

    SHA512

    99222bc7e4880fe61df616a18eac2abbf3d0f843337cbfe149586b39a3bee54250900480e423b45b9e446bc553891829cf205985040eff2731fd307a2d1366b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    390677584d71fb27a98ba768d7b18176

    SHA1

    e74bf9436ac584791d00c013f370a07332039bef

    SHA256

    cb9b5758d22f819b6c62cc835477e290f74b036e0a8ffa09b750624797b98ac5

    SHA512

    d6bcf42bd8861d4266e7114cd8eac58a29a0ccb8741d61590d3f9366d3ed3e226897dab98ecb6d390f8b7567f7a6341444cbf8e04becc16ca6e76a81534ef38b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d131f12df9710753f77a59918a13c012

    SHA1

    173f5212230915f541b520d9edebb60bc0bafe1c

    SHA256

    f8cac51239255a1fbd238f5cd040455e44b4599845d2fabfdeaba90035e04e8d

    SHA512

    26eb687dd1168a728e47926fc3e2f4b16be675ebda492f9e4d0e687e81d0f27799a1ef82fdcc30e3f32ffd44de90da7f787360c38ce9f7ddf6670453d3ad45fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89e446c6ddeb61105d82b38390a84707

    SHA1

    501dfed3b18cef78618539f46fa98d050bc7a608

    SHA256

    fc2adcce341b158e1c226decddb0941d7d0c9c0ff4e39f4fecc8b22f19f1b74c

    SHA512

    144336fdca725585e7753a6381d5767516b98758eaab79f0b465612c33e07cdfea7cc15655c2ab8555428022036a09512d85108e0d4abd20e9fc33b033ef04a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5aea8bd5056beaf7e6b99de5eea33b52

    SHA1

    22cd63493dd3ca2337bace69ac3b4380b712282a

    SHA256

    965ae8c5206c018f6f60da5f1fe64b640711d709c236831e3fa0a15248a297ae

    SHA512

    7c10e33fe9dd40f486814f1d74fcf730a22bf9e50521e4a84aee98cd92a6963923e1aab202f22305674826eb0883719e829aa625a8a85eef245df65fd469d865

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65de5af9b8d0cb790d9e8e34f02323a3

    SHA1

    22668c7617fd716130f4e1da78d8688df5f42bd7

    SHA256

    81dfc600cce8df84ca8465b56351f5be5b2a5c41c8a38b3445fb444b9d8c1010

    SHA512

    916d55865459fab1474fab9e3b59809b0e68d632b405fe8cd263ced007af2e0ce1093cf2c3658ac60fcbc27e41c71ab7b2c197fcc0e22feed7735298f2e6cb53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5224ea632ec647328acf2a86f366f72d

    SHA1

    27d4ba9573e575cb73f8ed54b606528b608c6a72

    SHA256

    d361e95ad1a9ce8196f938736ad206762f4499b546c7105a870a074733d513a7

    SHA512

    e1b399b0e184c7dcb3f95e255f918f66c04e65c154eeb4284614e14100e367f24bdc1beaca743f853e92bf8049aaabeb0ff9883daeb5dc72146a92cc5683d57d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87ab466cc02bce4af8a398c6f6926edc

    SHA1

    459246ad0d7a58bc18e1d8d0006cd7b7cf2bea79

    SHA256

    6a638014e84ff53109714cd27f9e6ebb7593f6a5e3ea05499877e0c28c5538e6

    SHA512

    12a370390797328cfa7c9a572d4809656eb34c4fc96e2464a07585d44395ba74338c09f6451240d05c7ca3db6604bcc69efdee22c4126342af1eda6487803320

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ccd5bcd6d359cf8fbbbaa6e45c72aa8d

    SHA1

    7b5fea6b49f73aa5fc7dabccb89e495736a50ff8

    SHA256

    e9341038a46bc4f8d315be486f94bf3f6648745d221785df52fbc4b119487a64

    SHA512

    101974c89d9d7caeaad3acfcc9bf7f9ebddd2db8a8be40395df6e9fb51ed02abb29d80b1e7a6614888e756b68189ed024a2884e45301a085e14d9b9e9018c00c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96b04ea07fc5a337d446461fb88ddacf

    SHA1

    37dae29b604684afa9371161c43d080f3b11b987

    SHA256

    6d1dcb762714b5389ea88cf36049702d984bc3aec9eff455a20bef1377d58c9d

    SHA512

    08ab1f46bba1bca0e78d20044327bf622367903d37157603e1f01761b4df6164d3e7b52cc5384ec6992c41cddc4ea474cd42fa8ea9f792740fec5fc95b6bacca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acff18d0bf0953003a19d996f07e8915

    SHA1

    9e2ea010bd292f37a4fadf598feac09945455aa0

    SHA256

    3410fef7ee781e0ae6ce09d923123f5b27024ade231dfb63e9c440deb4de4c12

    SHA512

    5386049fc2700e03b76260dd8de4e20f0692d13f7fffa34ec6338590ded5eb01c68a06da2d3cace43d81123456d75090dc596179bd87b63cf800ab074719b792

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d704c9a8a4f1b093d366e2d9223c7aae

    SHA1

    820acd6d2e6e58fbfcd365c4236b0fe06013ef1e

    SHA256

    7c165551ebfcbce86624f1ba805906528db08b64a781f28403fdca7060ce1138

    SHA512

    f269e66474b564c553ac07d0f46612e96cb1b8dd77aa0ffb826fe8ec01d7db4f57483c6655e60d1f5ecd97508d95a94bb985fd427de6ea56dc89f7737344efb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_D14B79B440CDC26D7D21C81855E2C04D

    Filesize

    404B

    MD5

    039650c995eecc4dd8a794a25d2c0b44

    SHA1

    083af350eaabbf3fa257c8179a82735115bb0951

    SHA256

    f7d6e44baa13dc78adbd66b760236d336a9f9626700a7119eb4dd183da7dc63a

    SHA512

    e102ce582f216c6ac62ce99665823b032dea959e84fc2da1f440613b8ca478027688b9125397cc36f7b3c5242d61f24d75900a0db823eab49c35940dd10b89de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    1c3a8d1d3fe76b98fa0e60900d44fb26

    SHA1

    8003eb26a6fd04c5e77a6885b9f2969621ed3949

    SHA256

    1771d4104ee7d13b6d3eb1b984188c3a6acc85a5087c35283e31badf6c4baef7

    SHA512

    5cfa402ba02459022acd71390c661038dc4665b5cb6850736f8d9abfe1d39a24a3fe24ee855a740a40533688a7982376a83b44ccd05811fefef42d52a4f6a14f

  • C:\Users\Admin\AppData\Local\Temp\Cab2230.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2233.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a