Analysis

  • max time kernel
    119s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 20:03

General

  • Target

    8b9cd79d49b3a736e7dfb29fb1da0ce9_JaffaCakes118.html

  • Size

    36KB

  • MD5

    8b9cd79d49b3a736e7dfb29fb1da0ce9

  • SHA1

    9ceb9bb1b12a47e439b4d8b28b2801aa1c3a182b

  • SHA256

    527fa38cbc996dd7b26be2836a9f3b60f45597aaa1e7f7166da271875c09512c

  • SHA512

    912dc9e549056f17aced73d4a9560327008614edb9d8de75a54578a6e5dd9f2f9afafd32d1562d4d5919e3555da74750a0c7ad603f5881898944b1b1bbbae299

  • SSDEEP

    768:zwx/MDTHAa88hARWZPX9E1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TyZO+6cLV6OxJyZ:Q/HbJxNV0u6SF/j8+K

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b9cd79d49b3a736e7dfb29fb1da0ce9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1548
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1548 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2128

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          1KB

          MD5

          367be39f0f0bd10ee528276085ebdf48

          SHA1

          bd2d8f3b91e3d0e5dcca4c0734f27ca4b0f257ce

          SHA256

          6568d4a4c638ae3fec4d5bef16d7f5378195466005a7d7de3667b501878e566c

          SHA512

          1e33cbeabbf89c1d5f5320be70459a27b2b4fdbbb4e5bd8fdcd4f4dea5b5b7761e49ca4cc72dd0a33423e4ce15353495eeef01472c7cb005c9d9dd4ea9d4a606

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

          Filesize

          724B

          MD5

          8202a1cd02e7d69597995cabbe881a12

          SHA1

          8858d9d934b7aa9330ee73de6c476acf19929ff6

          SHA256

          58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

          SHA512

          97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          410B

          MD5

          11ed40fd7e704d7781bc2bc262ae3366

          SHA1

          5839c02482977086c32779612dcc900afd14bbcd

          SHA256

          34102660769b476fc85353add2c6408301731148ce658b4aaee84c57de1c76aa

          SHA512

          5a6c9125593db92c548df1dcc8d12eefd44b7ce19798e55720a9263cdd34f27f4264d480f21bd5e8abe1fccf0257026718440d51cefc28ba1e27ae5f4e7c1ef4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          410B

          MD5

          0981827dc7d7a2c22dd8257d1760dcb6

          SHA1

          2ba4c72d90120b2a6e15ecfdd688b8298184314a

          SHA256

          6b7d2311146f9c6eeaf22bfc3794064614c780ffb858d960caa193d8ea846f7f

          SHA512

          e8cc01a3f108aa0f0c0d2deaf33174453edee7770ac67064d58b5ff87bcf558911f0b9fd5ef1e296113a149e38136ebf4dfdcd764c875344f3f4d42f21185d48

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8aebcb5790a0e279e9ff314bb1abec22

          SHA1

          aa4365590eb417d517b0b717309ed234bb95327c

          SHA256

          451b655f607029efaceaa27190b082cdbce2cea4815bfb4c88b0934a33b89fc5

          SHA512

          4befa7b01dd6b4ad32241db7f94bb34c8078e59358cbc12ff9cb838ba6cca84ad5b2a3d925f736df1a89a1cea10c1df4d58fa81e674e51005fb820f9a1d0fdeb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          aa62b7ece302b4ff276959ed401bdc0d

          SHA1

          d761f115e9466ad4d5b435a535378eda214c30eb

          SHA256

          3a706ccbf2a1c83aa8728d5f306312e9f1d3326d9585a54503d8cea3237f1c84

          SHA512

          a3e14e91a890c6ada86c5e7764ba8c1575d0c86adcfbdb029da0d0263ffde3a1937b8dce3eca4151ce2b50d8047e0c232fc0518ae5eba71753774b6d4be6f3c9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          062e3a24156be06666f8c4026bcdbea0

          SHA1

          59b60edaacc0d526438b8a691c55ffdf85657924

          SHA256

          6aee9246763acef96c7f5cf1eeaa0b291566bcae0e3f9cc318f31fcec9870897

          SHA512

          b72e29b643188a711f62a60d767d4a87951f57ac2eceb1828b09a9f6c9a1fd73db72844dc0ad7cb277ca4fb86d00a1c8d13f123b400d44d7d7f0646e48929257

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e81188e614b5ee897767bf0b9c064e1b

          SHA1

          ec2563fda6507145129ca2fce5b5172df4a94fcb

          SHA256

          c7a082a8fcb317e96c1ed515c14d7359555ca7a0c7330aad8852d507a187b4e9

          SHA512

          555253d63c8c59b0834723a40fbba324b9d49fd34c8274c3acc780f89f5255ca37818c70bd644147b3933c83413ab7505f1527fcff7003d988bb47b0427be454

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          254344d738ce2bcbacb040cfed73e656

          SHA1

          0551811431bdf81c367391fac61751c8e1571eec

          SHA256

          43173c1befab930970fa830ea7589bdb754381847b4111526351e91bd7fa1493

          SHA512

          d251333af4177faf7feeb7e6fee02b42544d1bf15d17ceb1f6db0ce997c6ed7834bd33cdddfda9b89287670434e81376b3872710a676e608b180fefe79dcd193

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5ae5f56544ddd005594567095a6a7e59

          SHA1

          3c8054bcbef8138e75667f62c1946faa075dd5d7

          SHA256

          ef1f9f5a744a25bb5ce5776429a9621c55a81ddc7ce8d6caa126102520711be2

          SHA512

          af7500df739db29d9572e6d3b9d9122e55b8189747fbbbe96a3979e6e7f0681b1f230bd105032de41fb215b84996ba9bfbc6f87779b5d73e4042f739812659ba

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c4634d18a90772f2792c20556680a790

          SHA1

          2a4e262d670e491e33ad6b4eab199db41b6bbea3

          SHA256

          2b715d55fb3cc1571da3057f0acb2c6b1aa92e8cbf88673ca3059a75e6cc8be8

          SHA512

          e139cccd672314bb813125045405df22ab188b3bd4bc3c71457cdca6cf3aa3701cc14d68fa45f224e70316c6ee7c9da970213e5d79e46b2d42d3e90d0692087c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cf47033021db1be458fe383284084443

          SHA1

          43aff5e30737c8dd4b5083e4d8e5615dca638eb6

          SHA256

          cafa752389cec09fc0b163ada63224908ae987d5f0f69a7fe2a369d07ad6718e

          SHA512

          7678b00066f38146dfb2e5563e59b0bbdf06a1958215bfea392ac15ab5d99b048c97b632e1c7d0e23a6bf2b230c1645cc5c37d197d89ff50726091a667454935

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          45e229a7d508ad1f291f2a53e9fc8e27

          SHA1

          3854eb3d37b10b2da9b834022bebde7722de4da6

          SHA256

          06172c568a45da2bd0f541834e76dab8542439a77aaf4c98043668ad95a31d28

          SHA512

          f17b0d5f9ea6bbf803e5395a6ca4d98c700336ef0e5ad58d48c8512160b5771921a496dc52819329ec0da011cb5402bbe63fe678ac2558e3c111f3c8bbb95cf7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8d81052b740ed3621a38f634b525d6c4

          SHA1

          dc91ceffb38a8c7ea26bb5760f97a2f07aefc3aa

          SHA256

          198a6a41b1ae545db99ffb2d08be09893217c47a335fe7e53626d50262cdf3b6

          SHA512

          9aa2140f9df31a91dbe7e3fa1f7822949b9ae799b568a6612981d48e65eae4e4f3e2b03d371ae8ca9251aff52ebc0854a4b3592c9c34c43d2e1db7412a7ed201

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2fbe9e8cca94aababf2cc563a74ab8bb

          SHA1

          292a48365a7b1e547973842f24ec943ce53f10aa

          SHA256

          8bf7e0250de98fcef5bed7bbb2742c5af6ec5a9c7ef1f3f1da1bd111e92576a3

          SHA512

          916ac4a647be145315559855d2a17f76b28745764721dac2551474364fc0dff28b20e2345d42623c9ef3a2a37d63a69502114a597b7994bc7ef9cc51eee66efa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d8764f38c9eb3057eb48d0ef2f29c2df

          SHA1

          2e5c5d855b70a415b7ea057b4fd175d49d834b07

          SHA256

          e60c142305a0768370740a56a05bdb13d0b855de096bedb2f902f95b90d1855f

          SHA512

          ebba02ae578ad6be91d5c24a56a67085278a010e446e921059bf6b1c9349cd62a59dcbc411158cf59f87b0913ea64795bc38a012c31f12159ad00ecaf0a54115

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          98d9994a0d1d12f60366fe8e4182b8ed

          SHA1

          1fabfac2ebf965914909ccfac45228ae50b5371a

          SHA256

          b7a65330d089fa42018c20fdd04cf5f328a55c2ebe84eb26ce936a541bee58fd

          SHA512

          b48edf60335a84bcaed68613a1c176f1ca0de60fc65ebad115778404b18f7c89ded45b532493e700ce270d90b2f6db9a3bb20eeca86bb79f4f6700cbe8cc9f1e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a7589076f525dc6a357d60ab7ba9944e

          SHA1

          e96ecf7ab4709e50f3a6249b4f0c3fa1a65fb440

          SHA256

          404f667c7e3a84aa49f91569e3540a06a73c42a4ee2368d8f9496041e02479c1

          SHA512

          6b3ba9d6b6cb8fa4a581560a32f7cd40820d4fdf1bab1b835ccf6b6c3bf68bdba867a89ee1167a2eb99fcf3687b1c4168cb563cd9d7f6dd22e190a519285977b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4783d2539336a7eed813a51da9f22048

          SHA1

          f93addad43fa76476c06bf46b342da0930b0a063

          SHA256

          ef2f9943d4b48d23a3ecfa5c7ce10782b797ab6f9684071d63a6fdf906b6b75c

          SHA512

          f12aa22b4aceeb5311fac9c4e6c12bba46d4b9d4695a3ccf31bda103052f07cf90a01c469fda5ff9f1bc75fbfd61728f431113f15c7b2f949c9b89056c2ba9e8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e5b65be1512926e80454ecd1152f055a

          SHA1

          01fa6dded3c762cb62aed1c21be13f1df9689107

          SHA256

          c3f613168176357d76014fc0108fbf39f26c2090f146080edc93dbee7f49e5f8

          SHA512

          bb2a648563d4888ad6d6d716b5f66fff49eb1923cc3a655d8cd6bf6c2de12ab85c8d00dec4de32afef55bec76c9fba31a3c4a1bf5b6a991ac38fe722394c4cbc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dac8ee5dbc7631ccb8790207905fd347

          SHA1

          07a2c356f5ecc0775e34f5ddf4a6b8cf1712b53c

          SHA256

          ae8f59a63ff51c4d5163b4ef7f170e2514fcb2847c3033201a6b8312f2ee3cf4

          SHA512

          d948c45dc4728eb49aaa232d5f61f4d4a34ff6dd9ac2242061775e4932f95ede1ed360ec6b452c01e530b74c1db550574f694aa19688b281a12559c73e7996ca

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ef0f3a37e1ca262be0e64cab5f6bc19e

          SHA1

          e77399e0a8a942094e530b5e9f52cc9149114382

          SHA256

          5bb77863e31e95a2b079128a981ca9b31dd69ebb0756b2e02fc6a1672720f3b0

          SHA512

          d79a6fb3243be62b2d6096f2ce7f1ee4b6c39e13de3add4660fbb1e6c7d2d28d246fbea934bc7106998409e120e4fb5379e21689af054a18ccda01414bee3c1d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f3d719232572912f0b317d788cbe58a1

          SHA1

          fd7e4dd5ef5ca5dfd55489cf880fd00ff11d2e81

          SHA256

          a61f8deb2be2e243a2963a387d50025ac72cc7f4140845025d6be39f7c7de2fc

          SHA512

          35bcb6f55aae97f86654ae0cc54bf9a1a4c087a8948e02bc8c4c9b085e602a881a32fe824d9d231f1f42096749d6b7d8daf3c6ceba71fd5f4b937f23511615d2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d67cec203540fe4d6ef9f8140828dd3b

          SHA1

          119733c7c8fd23d67e5c759b742e0c0135476f3c

          SHA256

          14afc0f222b119c9bbe1b584ede47dba217e347977219c6287faf197ba62c396

          SHA512

          02c41ff9cbb284d174d1d59c87bb6dd6cf1f4f1834d4f8ebb470faead8586f833dde233fcfd0ed036d316ddd0e9b11692b92c6a7630d2531c70fa887e64bcbf1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b15b1e6848aac2a79536aaf7162c5337

          SHA1

          7fb0db6cd37c3833a756da615c5b70760ec63ea2

          SHA256

          2147c65232a91c72a8a5d4442cc8190d904c7da972a3482d807d0a2df19da9ca

          SHA512

          463288d3597da98b8bffebbb82acf78a42f4cc535bcd31831ce738f48ed5dd6331ffce740ff41ee0fe0727bc6d286ff9b6394d5c91447741e115a22873c11097

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e9c7392150f9368f52e2b83de082a93a

          SHA1

          7936efeba809a058eb2f0f522698f8f820adb85f

          SHA256

          7dc0aaa608614eed315f4acf27688810b6d5233739595e6a8de359c27b8488dc

          SHA512

          5016dc7ee1bf3762e74ef1028c5bd9c9c72cceafe251010d880c7777358732b9938d1c6ed186045532c08159b042dabe46cb39c6c4e598f46fd869d45b008379

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

          Filesize

          392B

          MD5

          f97e92c79d2604c78c453aa952ca5309

          SHA1

          6741a937150481c1a4723dcb8cce4263f37286af

          SHA256

          568da3ed3438199eea5b992861d326dca3b5405ad96da8ad89a1d6e67754bd10

          SHA512

          7cf9dd8dc0357e710dc5c5b1db4d354f579dce4e8934bcaad91b1494efda976ad22ba6df3c3b11e6034a18e89c831e7645f4c54517c3470bbe346c06e5f433c1

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\TTL9DZJ3\3229668c08b0c6b05485dc56f9b63b9a[1].htm

          Filesize

          162B

          MD5

          4f8e702cc244ec5d4de32740c0ecbd97

          SHA1

          3adb1f02d5b6054de0046e367c1d687b6cdf7aff

          SHA256

          9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

          SHA512

          21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

        • C:\Users\Admin\AppData\Local\Temp\Cab33FE.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar3410.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

        • C:\Users\Admin\AppData\Local\Temp\Tar3533.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b