Analysis

  • max time kernel
    140s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 17:43

General

  • Target

    87cc7b2e45252f5551c0c959a2d0d4b5_JaffaCakes118.html

  • Size

    20KB

  • MD5

    87cc7b2e45252f5551c0c959a2d0d4b5

  • SHA1

    99742cd6b63c70a9a2e0d2bfc24408966c7ba2bf

  • SHA256

    35f944f66a3137c5119e11fcc4b788ee8f7dc80d3b078abcedf4a9aa2394567f

  • SHA512

    09a2b2e265759a7034ea6429f0b30ae05cfb4bc467cbf976ce67e7297c9f42c52c9433ff5c5e75f948095150c6a3802fe1d1e84d321b5653638fa2256ecf51ec

  • SSDEEP

    384:CanlVBbjPqoV+zji0Ft0LOzTQTzT+TCTGmvTG8LYqnJTydoBEUj3:nlVBbjik+zxPKPg0GmrGEJTydoqUb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\87cc7b2e45252f5551c0c959a2d0d4b5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63dd44ade2d86855ca6e4e5553a9b15e

    SHA1

    9abe20cefda3a1016b377c43ef81cfa80cf97112

    SHA256

    cf1fb1a44f32ddff66c7e66c7b6ae5001442d0d2f3dfe30c4cd672abd2402c3b

    SHA512

    7781661e01a804688adf65b4e9d83cdcce3c2c93f78d3a6424571b1ceb4c7d221a5839b92d570e04564b2921c1aa7f33547ae1025800eb918a0a2a5208fd036a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    826b064f81c3d142aeb21628647e89ba

    SHA1

    c07c66cebf0a640e8a24f2389bd4e894c7cada69

    SHA256

    d9c7dd382be3022000e07f0b01116a4125796d83022bad3ceeea8dec98645cea

    SHA512

    838f2d4a1b8cee72eb802115e02d61b5d2dda8d5a63f01fca8f1e78329770130256ed80e14ca3bbfd612febd8f9476033d38464b2a5457f56d0b4d6282489486

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68dec1df58b821b9da1b32a087fb2876

    SHA1

    6d81a38731a08ffd53c9a4c7782c857388428db7

    SHA256

    92addcd53b456bf2b898eaac3b651116e23ad4d5b9fb4d4ac2e5a1abe3584645

    SHA512

    c6190d62d3deb13ec4f0a1c9955e2bd769d43369ef543842e930cf8a7f4cc37559536d7bdec3ab7541e8b1a8e376bff89c719841a72486ad93ccb2578ce2a98b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d98bb6d06072f3481ed5509c2a9376c1

    SHA1

    0b57d8135fe0a3a11ba597d77bc7d7c950196d24

    SHA256

    d0e67f895c9aea98b1ef7a78c7658b4a85ffa10bdf96228a51a513fe3f1f0102

    SHA512

    77f7d485f2d025973026ee8c51a379c17e2ee35f5f2665403f3ea97ea98fac0c5a9fdb1b6d3a5b74dd24f9daefbf7069d87e5fca5180e0c13a9286fcbb09d480

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65337ff47bfc485de7e893801d31bf85

    SHA1

    9858981503f606486abdbc7275e6d0833cb64273

    SHA256

    e9e74623e027f83570602edd4f3aaf3c9c65bedfa384c76dc6bbb658e2672f14

    SHA512

    03496ff378e0fe92e5db5c658d203ab0217774610ca2e61ceffadd3c459973a89b4c3d573e5cd2197ab6233603a90cb60f19f2641b95f049dc8bcd817fa92924

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4abff8814173bb623cb055d30ec21fb

    SHA1

    61ff8f8470d6ff1aba4e41fbed67388412eace14

    SHA256

    138dceccd553a62b1cb0ba2c5d1027ad037bffe2643e7fecea521aff87c00538

    SHA512

    6d763e56dbf138983f2169f85e6b51c46e7a02837cef56e312a02bb0b33d3fb8ac943b19a65a391f7207ca899f95d2333e0dd8c656bfe43e3243023f68b0fde2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8eb4e2f3126a9a4d9fe8710a3a03752

    SHA1

    01729bd8853338363e53852dc7785f8859dd0542

    SHA256

    ebee57ef0954d79213bed1915d70a6d4d68f9f2c0c962350316dfeaa3c6176df

    SHA512

    69ed9aadddc6939158144bade66f05e027664e4dc7336272356a3872841ee2679d6c6284e621fd5fcd3528efa886ec4af21062016becbfc5e30dcbb5cfba22be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    775c9c2450425373448b2d737edc2c3a

    SHA1

    031e8b29d6e1bada3c7f567bcdbbfb7710697bfc

    SHA256

    7fdce1c8473ec043fa3a1d9efa5207cfdf1b4dab044e3c8106d21d11c95adc82

    SHA512

    c5944995f1f21b4dd8d1427e2f3653b86435387a17b70c80295719974a301bf6de824c6bec55a8ba1c0de3f4b569c5aba696b19057da6508f07d62b704507b8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0751aa43bcdc7f61900b66aea3ec934

    SHA1

    e69ea6d5bb367313e1a972990e3ae0a13f8fb600

    SHA256

    d3c19e4ee3971b6089f0b1e33827dfcee879ce93f6c22fb22a6a5fe51bd5d93b

    SHA512

    008161b776baf3547f4a16bf94f1d8bd3681422dc9503754981ef2850ca8004bb83ddb1fb3d5f8a38a1aacc5d007c8d772ecf6cc367c2936a7b6a99a1868c8c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b72b5ae8c3abb95b0df4e73999adc8dd

    SHA1

    19c4f9a7061f904d5303807476868f376512ffc5

    SHA256

    0f4c3d356201e611711e1d0b61e650befbba4739928c679691db2f1936b7b4d9

    SHA512

    b3fa3e70e2abfb4059e0f1c42782c2a63ebef4ff5a5e967c76df9bb3789c3ff9c4e15e9c19fa154351229099c403f6d5bfecf2ea04017ed99cf3a17ec3d929ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1616343fb77eb65834fe083ffdb3dea

    SHA1

    f84cc5218fbb8f9b135c3fa67163c30edb23ee27

    SHA256

    770479097b44db0ea71cdddd4899d6fcd5b035f9eac044becf697be4b00139cf

    SHA512

    9be901470e0d9b072bc8bd01dca511e311850424cf3cb4b71de04265b64bfa43da01dc179f5490a27de4be21e12981a4d35b01b7299f020c2d5993116d720e15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    510aa4d49859bebe75022f980d969442

    SHA1

    a4837a7b19ffe3f937e867558c12393136911cc7

    SHA256

    5392d3126eeb6fd33160bdbfa26d1c99514b7e5776368021aa6ab285466f0993

    SHA512

    d61da9ec8f8039c2673883d6775749cdead0d949fb8354de3ceb0bcdccd0c4fb916747b5f416f5a2260f3234646c5a54b68166e8147393508a77307f1999e302

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fad5447ec645634c0bdf3b9086d9d8f8

    SHA1

    f706bd2befcc9465d760f1cf88ff37fcb911007a

    SHA256

    973cf005e71234a919ebe8aca0571b6e35c33faceb493ec26ed16f1b579739b7

    SHA512

    de4860405353d8be0b8d76a6c79840be36a2c9285d2797114da8d2d9453d68ed4b8f4dcc4ca4e0ed659548bb63c93990922fd77c05511d11ed267214af79148e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6431b690ce7e141c2d794447e02d5be1

    SHA1

    185b359e99458240f3457abb3a4c1a6f920ac96d

    SHA256

    c4edb0a23260d2d9e7939a3fbc7dfbd808eee254803b5be29b62a3a6095c4f5b

    SHA512

    516df339ce8d16f4617e67f70a0fd1f5b306afe5693626c1d504dd2713aa9801e64ddd3143fcc482ffc7c9e61b03aaa8d43b539d2e74258f9d245b6ab1c42e0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ffcf0a2db8655be47778c9dce02ae5b

    SHA1

    ab8e911e9c5fbfc002778e65bf4632aae509970e

    SHA256

    94667d5e58b4d6cf187ef9ce5ca72c8dbfe3b20d0f7b97dea88fb1ba9be8cc6a

    SHA512

    bd8ff3a5b8353d7defe5b502f87e125df19bae5fe3f01922490b81e84e6c01069aeb490bf55f85959454993a65963e6d957a4336f60670a71c80edd18b33ff2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc020e0a85917f22729cd332dd2d6c92

    SHA1

    17094e6be49ede424395a2a84d7fc3c23439f40a

    SHA256

    4dae7543f2087c8f67d8903f5582ca0a4501e089e7fc6d6576348bd6ff4501e3

    SHA512

    e3de00b07e35aa945e819937e6edd6509daeef22e7e9f74cf7fe92656661c49711181c293dac0b3d02f4a33740fc75099538201fa4c48c61348a230c95c35b19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffa786fe55227882d7c74fb190415652

    SHA1

    ca2b3b9401fc648ef889e3207ab5f1f57d39cee9

    SHA256

    760242e4635ecb37662fb8f964a8a864d78d188d49f214542767fe01f0f64f92

    SHA512

    5416f316ef08f12d4d54762f8dcb0ebfff5d14797584c63015ef8a2e51f5ef6105bde0dc5bdf05d861d8fa0731c4c94da283ccf967311421c1ffdf31f49b40b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    807c8fba902f91f7054c60c793982a97

    SHA1

    8e74ab6950dca7deb996e20dd5ff21d437c4a144

    SHA256

    77728d6075aa6f155d0588fd758cb262115a8f831994c0b602bb3498e697e4ff

    SHA512

    730a5d09c8033a3e21a18a681907f28a9604cf15d62b31002f31c95ee14dbd5ecfbcfd2eb150bda3330d2f0bc9637d6dcaf76ddde6f017d0ee908a1d39b21f1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    106cca8a0e69a529fd8a434f967dad56

    SHA1

    441fb584f9cce242aed81ca498e3b8c6b5b360a1

    SHA256

    684bdf76d7e9718b5c244f901bf628584c242d4aaeeb195b6a1a7707d46dd4aa

    SHA512

    0cc7a58f10c19b92ca4dd7ee6930152b92ef2971fe2d1fef97b7c164ae93fa8facabe75945ca179779b57d89c53cfbddaab7d894978af0d6402c5c70748db62e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6225f1504cb7d26261e1fbcd072d6512

    SHA1

    9a968e282d67ba8807e881dbb8ee8084221c0db0

    SHA256

    be0dbf5606ff0c4e9257c5891c9d353df33fb59ce167c1fcae6a3fc8e778dde4

    SHA512

    48891428a4863ff45f9b790ba6cbe1622ccafa4e4b5a5940072fb4314ad1b9074168aca9ce3c50723b08833ea323efa02656f25fdd4071277173973138e22fc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a22ec535cf138b9ef5bdb2fc141d649a

    SHA1

    8f843525107cc68da868b7300868f8ff4a126a79

    SHA256

    80e3c1df73bdee0e1b2986238d4d1c06e9274620f2259a25f9ea67dede8acc21

    SHA512

    69fb3a7f579864b606dc8804af8339459502d2227d0f13a5265240c8a4e683968bbc5744503b23079a1c4713a12f6de48711142adb1e9da2a1640296be6171dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    59977af640602659f6f4fe9199eb240f

    SHA1

    152a9588ae4fb928aa8a66efd7cd80697cb666f4

    SHA256

    de8ab50482f2bc33258892a41810191ee5b88142d5ab9c705c9c3baec64ac1b0

    SHA512

    0c1a9ef0934791b5368351edac3fd2562f4c3ba64faaf971c0fa9ce8c42c2598f5a08722cc5e233358d5e4ecd2b55c08929eb28ab2847dfde062f0883f672768

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70023d35a85b3190212eb1aad1f7b7d1

    SHA1

    d8869722e6d392c8c7e5ede695924265f20a65d0

    SHA256

    9f7006e5d31c44b49e4f976a79244b142f5efada7152d30041c4910b83539ac2

    SHA512

    bcf3cb082d091b3d29493cd909b3980c5edac50a7498e73da9512bd78b83b46156ffb4018feeb457cd2c31a0f29ae08b2365e4b4a917f8d678e6c93a6f826f8b

  • C:\Users\Admin\AppData\Local\Temp\Cab29E0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab2A5F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2A83.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b