Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 08:50

General

  • Target

    866e5bd79dcf971469a70ec6f9c73a96_JaffaCakes118.html

  • Size

    110KB

  • MD5

    866e5bd79dcf971469a70ec6f9c73a96

  • SHA1

    2043cccd33e690f0e9e5c9bacc5a5650b7ea4b6e

  • SHA256

    2a8693bb625b901923e7eb7ba6c948bd6a6fc1558d30786c7dcc1c7921cbf249

  • SHA512

    d6962e7f54439405af28e866ec09b59e06cf6caabfffa5e8a28d1ade1ed9fbddda26e632f88c69d5c9245375c19d8a0887863d9115174bdd3d6b2627cd7c9aa1

  • SSDEEP

    3072:L2eDsReAPxbDm0V033y5i63y52vx523rAt825Qh8Rs:qxxbDm0Vw3y5f3y5+M

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\866e5bd79dcf971469a70ec6f9c73a96_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2292 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2540

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

          Filesize

          1KB

          MD5

          55540a230bdab55187a841cfe1aa1545

          SHA1

          363e4734f757bdeb89868efe94907774a327695e

          SHA256

          d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

          SHA512

          c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          914B

          MD5

          e4a68ac854ac5242460afd72481b2a44

          SHA1

          df3c24f9bfd666761b268073fe06d1cc8d4f82a4

          SHA256

          cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

          SHA512

          5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          1KB

          MD5

          a266bb7dcc38a562631361bbf61dd11b

          SHA1

          3b1efd3a66ea28b16697394703a72ca340a05bd5

          SHA256

          df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

          SHA512

          0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

          Filesize

          230B

          MD5

          f26598ea4df7a7fe9f5269a7438ecaa5

          SHA1

          06eb371f6240f042c364fbacff144bb6ef0f0a0b

          SHA256

          2e4d97c78e27e0ba40a5aef7fd9867646f5b89e6b7d87ffec3c32b63dcf607f8

          SHA512

          8f8e3568796c983d90764d0f84d2877b7f78c3130b15d19c8d2e5746b7730ad40c4b4537a9b0b9c99e780c777c38e2560f44bcce38faae0a44b0dd626d5d8cd2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          252B

          MD5

          faf0470bff1fc0853c0e790135ea3c87

          SHA1

          61bdaa2a4bc2f25f1736374534ef021074c2970d

          SHA256

          43c7d5b166e476d16288f39210755dde3266368c5f24d4a643aedc826b04d663

          SHA512

          c46ab30439594b13460977c3bc7c5c7a42913bb7a5b96ab276a72be00ab45b6ce7f03614dea4eb7d7dc64fc013cc5130350ac55b947956e5ad8a44afb010690c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b17096a3a3c412ebe95e0704c855f4b4

          SHA1

          13bcc9838165320f2ea9ba24dc4ff09abc94ea86

          SHA256

          af76701b58add571697831b022b18cc65765131a0172bdef301cb537abdc931e

          SHA512

          78f75073b23caffa3e99d943477029772d9222da29afdb616a79f96d39038de1a85d287b556a6fe01122455e9fbc95f6a127689ec6be707111b23eae409502cf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          85bccd702ce093aac3ab35a62b5f48e8

          SHA1

          9ff823a5f66bc7f5ed1cb3d510075d29fcae6ca6

          SHA256

          e7847bc568eef1af3f0320af51ec103d0a14e4daeb19e4ca2bb9a84f97ecc4cc

          SHA512

          63c31f29dcea214e32f0a6a59a4cc8cdac14faa9f64b05f25e07e0046e8c73da8b6509961198327a10b9c692573ab5f6aec0e2e20efa1681f9abc4611320f787

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          36996cf16c80a437910d9d39621d7c76

          SHA1

          f6794d0532545f829b8d59f1e87757b73ee2309a

          SHA256

          c35210cc8c999f4b93065c1df9e9dee15d18430435000d0962d322c7c4b4a09c

          SHA512

          40b594ba402d00c967510f147e7ba438691fd89f111ff249ac97c0e3de406e69d371461b878d21a5fc0da5bad47d725c2d9aaf92be990387b00270f695eb4f68

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          78f8c3c755a722709400407556fcf4e0

          SHA1

          2772d91ae516392b60e4dd3bf8ae2503a0f10cca

          SHA256

          78719a9fe7bfa0bb6d8c6c1de477539cf6fb04c70eb7c0f5a1ef21c9a34ccf8b

          SHA512

          41a164bdcc9c4d2b0368bfc9794c0c442b691d7b8e656278274d84473595da6f2034b1856969f869f14fe1198854d213e71c440635d716a1aa3f6cb66c0f37ef

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          454327cad46f51335e9a0a527d0175ce

          SHA1

          1925dbc870e911db5b3241a8e8655fea519c14a7

          SHA256

          083921bb3d20e471bbc41877d20b4ff6310420adbaaa063af47b98d9a00be4a7

          SHA512

          2ab9d39912c0df4ac901e8c8703b818e1f6035f7b50856039f6382c063f09db84fbbf91b4b1f2cc4cf0ddc624c5db28f02f7a49b09772755c203aa9b925d8e39

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c1b545f0d4db2dd7fb1a25527355c11b

          SHA1

          996a4cbb701b9cd9686457a1f4590d27d3aeb5e2

          SHA256

          71833b9886572a68ec07e6fe7727b0f392442d3187edf7284422a8bb27bf5151

          SHA512

          14c8976b694df3f5222c1a45d956f3a008917cdda1a8888511ccde3a3f7e9f60f63fbaf1d965f9bb7a2e5700e651f849734a6ec2b3f7756b1acf5da891c5690a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e759b6af1bb2c38c4966511dd661e550

          SHA1

          23b107aede5b0d614235eb66c857f1083e0a2fd1

          SHA256

          1bb5d41f75c77aad02e2fa0d7511800a4d537b05cabf6a86476868d1ef6c2875

          SHA512

          b510326863d617123a14c4c18003340109906864316dd128cdc573e9427e12761d4019cf213fcaddbc5552cdbad9925fdc47a8a72d4365ceed89be458d4cb11a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          42d8de08df4662db3544fef11d000fc5

          SHA1

          9a30ef1641173e14fe8281e9965468a1ffd6701b

          SHA256

          d896c80f8d92839caf0845890f3e5c3206fb74035206e3b585662bcfe6a8d5ae

          SHA512

          27b8299ed6345a90c66b5f5da4e34ab3f76411d922d30df6ef1d921d0e53e936abf6b0c806bf051be48fb0a6afc18eb55680be2eae9ac0cd4be069f2fedb42eb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          932145b7b3c3b5a30d929ed9840dbb9a

          SHA1

          4625941561a33b5cd38c506b1eb362e0592cc369

          SHA256

          ce4fc1ae152bf2bf7b53fa791401d1247432a57f2ce64bcdda96048c472cb4e3

          SHA512

          abf62e66c5c0c010f4bd47d0c8edc37a7a5db08be4263fb273cfdb91ffdad22829f67e1a2192857011e91afee476bdb426add2585dbf881ee5acc1294a821663

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          707542cd47c3cfa755f45a159e711a29

          SHA1

          ed866f55bb5e877e6e7988fee676de62a7f49e20

          SHA256

          25b3ced3ffed904cfea671957d7b7cefb1f1382da1f67bc950d969b588c635f6

          SHA512

          b113dfd89ccc8c9d63d876b5d302d86d0dd0280a9b1e635452da11bf3be876c3648ca63fe204f6515865b49d4345780d388f56047a8aefbd0149fd5b5408c977

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6c039643ef4f81713f443f14c7553e28

          SHA1

          b716a9dc83a99a68fc99626497ae8702c92889a3

          SHA256

          229d61d124291d63f8738cdaa41a10bcee23053db7e77aef2002e25225fb2dde

          SHA512

          8945ef416fc8d684b760bf50cd39f14caba787e42344231f61fc238870ebcaeccb9713d2dbb9d36b3f3f4350a0e1af926a23708dcacff9976f301557c4ae9148

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          70aecf291f42eee774118fb477307fa5

          SHA1

          b60339b1bc2732244b38c37e9f37e0a4213756b2

          SHA256

          b0b1ac8226199e745b1a312b4ef572e615bbb454f45a44a4d60f4d64bb88a9ba

          SHA512

          23d8b684ba83de0d5ad9c55900d2bb6afb0264b7ff2e43af08bbce0cd5675abbad6de0c5699a23a6d046676e6616713d93521435c64dcc496694cced621579de

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7f9402976ac051abc4b423b6c964a964

          SHA1

          122d85490fe2e556069a4b86c7804984664018ac

          SHA256

          214a2744510d905dea194e6d1d1ddab4bae2d23f849ace037ebebbd12697e23d

          SHA512

          80d295f471b6435fc118a450fbcbe24e75d5da9bd7a935262b01cf3602d9cbe34054c2274e4f38e578c8347bcc02ae2d84f4b16b10713d22a270af92b0b9ae7a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ba7319f3ed949688c863384a8b8dad97

          SHA1

          99d7a55e968b046c5d6afd9143e5ff21a45d0d6f

          SHA256

          db79962710f627b34c3caf5de4763abf2c639472112755346be77362a0efb8cd

          SHA512

          e7b1826a4d4ac7ad55ec63532877172d24db073a2f594c02420932e8e5879886ed80f25794886cb1a75426ad858db604fabe38ea51c22325852355e9389bb01b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a7e973c88d2294fe2302927937d3c5c3

          SHA1

          6315bece6487914ccccc9ec7590c97889a2d0f35

          SHA256

          cf35bc842038a3e920895a5edf63144b0a55bf55eb3b6a07a30e91cb3a2bd0c0

          SHA512

          da800a1ce8cb065f2ecf6ef5a220df298a37db4e0c165fc44b29a974f4736ef91197439cd7e877e0104784837671f31de4d5515eea507ae0abe6b786e3d4fb63

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9d294ee3151134a7b48d865f60ab4510

          SHA1

          338b19a69aac2d9216b5955b087512a1c59a563e

          SHA256

          87c5100dccc0f2ee9c2e0d717a786ca775d102020172437f7de713067afd71cb

          SHA512

          f14debd9d262f87f003636dfc9f0c763f7aad257e64c24b540a5fcdaa7ed4ad1518e8ca47733168ba8eb41ef951eb1173167bd6964d9e0bc9458e4d17ea322b1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          18f2447f00df787cdb4baf2756b6717f

          SHA1

          4699e60293cb2041a8c7625eb86e3cb09a562ffe

          SHA256

          ab08976fe230bba57d2604671ceae8f8b61ff146dbb72f77fb6d14a46542f26f

          SHA512

          cbd20679508a85c7de8e8d2422edc0035df1d6b2e3564c0d4e9f150abbb75e7de40af6fd536f2221dfa7ba8a2039fffcda71a518bec97775eaefcb49030d3535

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bb7ba4fb35029babd8dbd7165c5e9e70

          SHA1

          31439e80625a524e781f2c1161fa876eab08b28a

          SHA256

          d84ea88b675cf60a19d87527e358c4be5de80cbe24a3248beea6a856dc43d641

          SHA512

          58ed732173035ff8f485c87377d9ba9495f9aca95079b4daa7183f7fb5d638f39a35ffcb807d67b98ce9490b89b2dbb362621589083fe4eff42c6a239f119edd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          020d6a0d5750e959dfd6d2c6471dcca4

          SHA1

          d0051a721a61c15d7ef754077ef4e5ce44a632df

          SHA256

          3acab2ac0b851ab77b1061672f7cf556efa2e2e1edbd177ad6050127520a0f5b

          SHA512

          63d7ce8ef898b1f13a3e9d283863d7f81497f3cf7a1042d1e8bd512e3b6c56969136b3746235cf76ee0f0063ef90a6da82e419bc3e033768ffe435c182207a40

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          242B

          MD5

          c59c1e7efda24e9afb616362c0559c6d

          SHA1

          84d96fb7ff12ab065f249112c50bb94b8da51097

          SHA256

          e4f0e6537d5a8d206a60714b7aca5160e52c2a25ed839c22ae28edadb5126039

          SHA512

          3e73969176516157af1a75bfb14d0440581ce87858633bf10b124ddee9c54353be08e86f77cc64991b76020c65ddfdc2278684e58bb4036f2ca7cf2152dbd3e0

        • C:\Users\Admin\AppData\Local\Temp\Cab8577.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Cab86C1.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar86D5.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b