Analysis

  • max time kernel
    134s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01-06-2024 15:11

General

  • Target

    8ad96b8e77c4449b39d67f2471df2164_JaffaCakes118.html

  • Size

    214KB

  • MD5

    8ad96b8e77c4449b39d67f2471df2164

  • SHA1

    1b4b4a07df255d9300c43132fa35c03751a9485a

  • SHA256

    d0217a600bc3688a762f528bfa534d329a9f262dfa8eff5d5a382198c8cc2f59

  • SHA512

    aaa5b749cd9bc73f34af0aab6440648c69726bdee1612832ccea23b9b6f671ca87d5b0b51b571f6a9b69636c601b5462d2324a5e5bc30657a792e7bc5443e9cc

  • SSDEEP

    3072:UrhB9CyHxX7Be7iAvtLPbAwuBNKifXTJk:sz9VxLY7iAVLTBQJlk

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 35 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8ad96b8e77c4449b39d67f2471df2164_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2228
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2228 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1344

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e9aa9bb6e57c4d00386d76d0bac36f07

    SHA1

    a2c2e9371c09e45fc4a585140dc74dadca683a84

    SHA256

    ecc9fc1ab65806431b7563a880b2bfc33bde4965ab85e7116183d1a5e791b15f

    SHA512

    4cbedd190e46b33769c016e8ebf49a628e5d0eff324dd83b53b4892494bdf56b315fc0e68d8d7f4635cca514b75adbd4ea7098899a46e4a188668248c7b72778

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    6ed2869566c1aeedefdf09bfbb7a5bc5

    SHA1

    eb25c5912ef9f2c70226c3c801b28d6803eaeaa4

    SHA256

    234620df74556de68291fb958002b92f5904fd773ae5003245a7776e5302631a

    SHA512

    e8cc5246636c235f4b2a42539e4c33d967dd35db453334cdbf9027830db694f0c4478535eaee4519956bd88aecd0a3b7ae88930acfe19923202b077e1205bea2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f3f023a5224986289ed16322f60ae0b3

    SHA1

    0213baa58aeb7120b5e6ca6598497d3c56f57da6

    SHA256

    d5bfbd9879e372c5a7ac027e2c60bd31b6812529e6d0c47278f783de961dab45

    SHA512

    852a7891a4b312dbeb239386b07154056f646e4654c9ff078daa359f95cfce03b78cbf9a73e21201722ecd6017797dd9be39e3909a14c19127fd0f807bf7ebea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e23bb4d6955ed5fa6f448a5a3b8210a8

    SHA1

    416fcdbacac41c619ec859039f125f8d2e8985f1

    SHA256

    c483766cf305833b65eca7397e077eb69ea3f6b1bcbed5161f2c17f4b2f5b24b

    SHA512

    b911af0e4f2364d623125f4b90d2956b1b711c76c01fd7c25be8706ac1054e5e02d1fd61b725dc361b9367fa92f6df3d72d4a9e658a2138649d57fd492a0f6ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4e2e789d79a8240c3a5ec627b2b2b225

    SHA1

    b7ee1eeaeaaa7bdea35d58f99fd7c36dbe20a756

    SHA256

    af515e46a508ea5890bae73c2ff069185704f8d7785a170b0b01b2de9488db63

    SHA512

    e9b6226b3995875f4d563bbad029cd52cafe2ddd70321765518c031e79d858cb92431074ae2720074b23382b6dc07afbe95c39dbd2846a9e5019ddfd3a929bc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5323ec2b839b4d4d92e10be3bebf5c11

    SHA1

    288ec5fb87ab68e8eb68b82b984b9e0eaa858ec1

    SHA256

    73cb1ae85123bcf297665d2e485a72f145f13dfff866c49a6923fdcd6bbaeb25

    SHA512

    03f384d7846c18fe8a9a6b5cdcb0b1758cf46b6bf63cc68603009209c1812d0572da02e2b42dc8867877d9405c37c0e240ff1ef550cf3bd70293f0b9118dc469

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    30711a3f0b81e6457b775b0c51372a24

    SHA1

    60406870670d73a851d93e9653f49cc01b786b47

    SHA256

    c06418555564cac0d0e6245e5dfd03c5eefd1d5e9b98146b4ab13973b76e0bcc

    SHA512

    3fe9b272229dadf7b69ced6547993bc4ed4639bfb99d6a5ae30d8e3633315267a1bf6efe4cf3f7251d3882e5fdcb2790f2071009bc43b9787c861e9c89e8fbe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8b3bed2d83a5b91e29e3ec0f97166b7c

    SHA1

    342f6ea2748a656fe157788f7a90c338aae34ab4

    SHA256

    d426351a9672ee73bb7fb156093534ea1f8cfdb932fa3671c7b2a2759a7c34e5

    SHA512

    f96a41308ca152995573c58c68828602a1bb5d12270cc4269f8ca76725678b12238c177dabfeef6e2b9089b63dddba592802fd0ee09a637054331b91530ff61a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f93b8fe2def0f09a39effde9baf92e95

    SHA1

    b17df96aa201d2d3dfc2c2d5a94ffcc54f849f8f

    SHA256

    7bfb325fb755a2374f1ddcff17f56a89569bcf52c4f43e708aaa0b37f4ce857c

    SHA512

    2ebefe23fb472b0fe034c626a4026d1dbd82df564c74bc26887785bbb8532ab6220837c483331415a32e18b7037a8e8cec11bf39ae9b1d5871d6cbfa7e008250

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2be86b5f7570fc807a6a83eea880aebd

    SHA1

    99419c16ef3592672fceda85589f9eb8f4500d73

    SHA256

    a25243eea629a623eb0dbd7dc22a76584e63c1863f82177148782867af912b97

    SHA512

    726827a40fdad7a65e31377c17e7c3198e835c9b189d3d9e40a20c196bd3eae5d0707d33606d6a949cde279412fa48c999395f93c0a8ad3f329117c3da47d882

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    05f6aa8e07ea83a75cb34708959f6c86

    SHA1

    bbae7fc2fa32e0ec343591c6327f8fa4263818b1

    SHA256

    03956393578d1968c9c37065fa6b9b1da94bdd0689b80d8c47ca54a176fa24b3

    SHA512

    adfc72d0e41bc0dc8417a87d194fff8de591fc63c8d57a8e33a99ca0b45cd0976b217709662698a1754fc72a65ce92e3f9d76548d44abbf50b7a45a8ecb06d8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2f64022ce919b572b8ad7451b17750a9

    SHA1

    78ef564793ba42d7c7f6cd9448a9cafe439e6dd6

    SHA256

    a2d42e812d9e7442a30d00529bb5b88a0f2e50352032c97d8746f9bf59b48401

    SHA512

    9459d91c7cbd198e9bf3065b56c01214c26e383ea771ff06674c76e616dcac26805f58a6e8e073465c4af79da27bd08cd574c24e2a090606b58f4418d92bfdde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7ff474e359d8ed0130ccf7ad8062d460

    SHA1

    3b43fc36e818477b346e644e49d8459d7d89557b

    SHA256

    09728bac78687e28efdddd9daa5deeaac46c5b19c8f411b53a30595dc0cfb429

    SHA512

    fba5320bcf3ac9dc2a3693c0e4ce213196aefbad22199438509bc7bddd9789afc4a8b694d2389a0b7767fc88dd75d7d7f8df125792df4ead4c89c751d086ef25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    74b0e9033e8f1303c5b30da3d081ea01

    SHA1

    d0dd5ac9a6233db1f34271e090d507f2af42ac1d

    SHA256

    a0e39c4552f29a1702b5a4fb4c27d3631fea3d42f11f8391526462e728c2ac5f

    SHA512

    17ccbf91c7212d753b183e40d8ce00095cd0cd14496afb0a3c918c19b0be7814ce7cf78f11a6355fbe412923a13e3f1600c27b4395006a9f91a99f25c60ff3a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    69bce303bd4140f3829f7fd43e323ffa

    SHA1

    7f304e9a052191a99db2ca404f0ed6f74f938d1a

    SHA256

    b7b3dec420803bb378770839e4a6c8b01c2f0f9bc9f818a2251a5943958b014a

    SHA512

    7f9e8b283e27ccf7539011b23ad5ae4f872514e5c4e63e2b0c73dde6c52ef22dbaa9361f9dc7c36b0ec6941239437e6c826eb951e9e84645ff7ab5b42cefe6bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ae286a30de25a48e3dee0974ab9d4d1a

    SHA1

    57ac7f1b29767b1c44138bb8eb289927298e85c9

    SHA256

    e43ff898f1e97b6cfe81abcfa61aea4548071d5412276c1cb5654fd1c938c489

    SHA512

    f15412e492342fbd99ba629f80b9492bcd989870cec9940a6551ee02cc0c47c6d3fb56757bba6973bed9dc69e246c5fa3a3c42b8e77c510b4a5401fb7b61a2ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    25477c675057489763a6f7aa2e7c02a0

    SHA1

    6ee3d0bac60339359574248a033dd2385d22fdda

    SHA256

    f83074cbfbcf0f8576fbffe8bc1b8935f47abac458fc18e412ef6f35826a701b

    SHA512

    040e53e6b606a7f8cdc921a3a126fcf3207f65d27355e3fcab40627ef39557a8431be657d05c444bdd666d4a012f115bed7665dda93473e8ddad7269caeb4a28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4193fd2d0c4a1e8f0f94eb2c86c3d43a

    SHA1

    30da1b8c78d2d5a82a076e2cabad550a9ccc8bf1

    SHA256

    2593326ccbaf4292288bddb3a03e4393806214275b36e87265179983be20b7bb

    SHA512

    c2e0e1721211701a1689a18568d4a9e24ba58dcf93f9dcaa14af278a1963c318b16c51dbf8ed59d9168dda1ebc3c8f29c2ef77ef259039dbd497510c6e81ac90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5490aff1d90b24c5c2538b2130732268

    SHA1

    e7798b92f7560f410ceafcc2867be270d6532554

    SHA256

    0c64b9b03eacd0921d5d5cb5a94941299b48f20c1776a5a8e98d57f3e42c6ecc

    SHA512

    5b50db1566636536c6b5d1b29ce6123a2209667ca27a95b7d12f2ec50f961b99e80459ca52850d4a83b9dd9bb7b35eac3580ffce7ba56b0372aaa6de329044b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8f5258710e332358756f16aa6de4c228

    SHA1

    52d1de35911ba22524d71c994e71bd012614ecfb

    SHA256

    56b77032aac22298cdf323b68be988c9e9d0c60da2b379e8535a4bea7f9b8b79

    SHA512

    e75c1d8ae591b498392f0fa81850678682fa6cbc0697d0dd83a42a7c6bd03f8d8d7cece573a96253d706d263937a7bc0fc1b6e6cc3fdf27774dc5beb9339a048

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7ca5f45dc5f8ca6e562f5c3b0e915252

    SHA1

    f129114dc9d81b6b4ab7921049b9fc87e947b2b9

    SHA256

    e2d6ca6732aaf9b8aa228cf00aa9e45b392a86c4f83afb26e21c31c1ac910d02

    SHA512

    dd97522cdc11d0e89b2b513dc38192d2f2f8beea2dec939c29cd080cd2b5537752dd9c5f0cfc177675150df38c0bc24e087ec26084771393e936d585174769bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c0798e00d258e7172b13b0e5ca36c3c8

    SHA1

    f5d2c532fd66efc5133c82f8436142cfadedad28

    SHA256

    8dee45e63496a45e034b3d02db965ae085bf2585f51b0a22b3a685ce4f8280d2

    SHA512

    92b1b53e975284703eecd2e57e35aa52f0e9cfdbd1579b314afc0d69ddacba21ba0a6a0dd321df6c8351a9d868c7633e34ee256791b7feb160a08730fda52b49

  • C:\Users\Admin\AppData\Local\Temp\Cab1881.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar18F6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b