Analysis

  • max time kernel
    136s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2024, 12:14

General

  • Target

    9e240e8031e699fb7bdb47771f347169_JaffaCakes118.html

  • Size

    214KB

  • MD5

    9e240e8031e699fb7bdb47771f347169

  • SHA1

    be947ffea2499f599e371936ccabb3e2dcdecf48

  • SHA256

    b3b567513ccb52d3b863205ad8235a3bf5d41c09b08dd792ccd960744951f2c5

  • SHA512

    ddaa4600c5d2701a9ffe19b441951377b7960adcc3b5cf756e0021c1d9b6d14d303ed9a5ea59829f5baa36fbab9846db03834addf19daba1b785849d15b05bf6

  • SSDEEP

    3072:DrhB9CyHxX7Be7iAvtLPbAwuBNKifXTJ3:Hz9VxLY7iAVLTBQJl3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 43 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9e240e8031e699fb7bdb47771f347169_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1220 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1276

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    400d454fa1610d1afe0dba90e0973811

    SHA1

    49c9fe507f82f4a6097bb5fc2fe53064c168ac30

    SHA256

    0dec7322b7c7d86056486fcab8c63d9fb64b39859fbdd30c6f04eeac62d77027

    SHA512

    d4f0ceae53d6e15d78f11a647c5fda70538410e4ea7a1986ad8421c4499909d6b8e1bfab4e9c6bad190d98600a5da116fdeddf8fd975a4a6947b8257c913e743

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a3b959ac2c9e38819048592a65086c8

    SHA1

    450b35bb0816cc97a55de37e35d87e6d554e6cc0

    SHA256

    32244ce495d2e5755034744cab0149008e7c8d1897467aa4bda984e75a0d6c5d

    SHA512

    56ada53c87312ec8ef97c79cacddaf3e6a0bfd880dc23392fb490744bc4d8d0764ab245c5125e6f81f2e3b714698a41c47f48470187ca7072b087d7b04094d64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b7dc9909030ff843d13ec7944c28df1

    SHA1

    f408dc23b55d9439384a6b45d521002b104c1d20

    SHA256

    91b2a02989c64789d21a8932e53477caa714439e12b8d0567c6d580a3af3a18c

    SHA512

    909ab9f56ce150d390fa4289ddc0d6f47301912b0f7512019216331805674eebc9eaffbef6e0faf6f5c96846aead966da66b72bc7d0ce4e9b972d0bcad135413

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87b7a23193b3600f9df840f6770d941f

    SHA1

    0a3331ba3802ab070c9b3088a57590be81c01c51

    SHA256

    c7727d8e7aa73d5d44095e73fa59696f098098fbc2142c3af82e7adc3cea6da4

    SHA512

    39dacf4004f820cb4c05ab85521bb990eddddc842619fd5f7f913e79ed6bb3ecdcd08999c1c159e60dfdb7d7ea49955217b57fa515c0a350cc62385785e963a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76f80f4523001bd1d427fd478af81b5a

    SHA1

    60654f975acf38de645717fc78b5964d821c86ca

    SHA256

    840b328867c980bf0bfd34425238ac0d5d4579804ac567930f0a1fbcba6c4373

    SHA512

    2075a8203e5fa1a45aaf536c859d5dacf497db84db92a37a54972435fc400d9a16cd3fcce664c2bf67891f2f1e5ba0604287ddd60da6f81084e3eee79ca15f7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7fbb162da4fa22130534592178e67d6

    SHA1

    1bfb9bd52b32ca1a9a1c37052dd24cb4336beb4f

    SHA256

    4980f4c411b313ef98d9e6cc278eee74116eb3bae8df498ff98e6243b1a9dc72

    SHA512

    6aa7a37f6f7c7e00fd28c38a6ea198a3356f42ead37b0cc245305cdc9c6398fd296d722076f289ce3d898dd3a02bd0d4098fbcd5807b719cea510fd423a6a9e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    423645bdec4f93e0f644aa1c66420db1

    SHA1

    c6bd388d7820ef3ef1cfd016a31cbc6efee6f09e

    SHA256

    6b71b444f7c90b5a8259015dcfe70bdda6a9fd3be03f17c6bb74ab1a133efc10

    SHA512

    83dc11b56c1571bab6287d896cd88f8436b226008badec4a5c383cf72564d8abe43516bc8900ddb72c275c6f99b05fcd17ec1b715a71848f6a5426680da80b02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba257f9b0b9e36cc77bea5c9aae0756a

    SHA1

    bb5551437fcf87ab7cea91e95e4706be825b6ec7

    SHA256

    ddf245c84b3f2d0a85050013dcefccfa1edd189cf052c49ad529730733f490fe

    SHA512

    7f379fab3449894b70ea944098d20c358934ed312f48ff033abf26ff1f159c6d5c2b046460e72e353560181c365bcdbd29e59e00672c381078373b92b9e25832

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cbab7427c18a7b49018a97f68147a7b

    SHA1

    b3f38b52ea53baab7d61e249a11be7c5383b434c

    SHA256

    e2324d918edd91b9a40186a0880330ba3bcb3b367549abd76d96f95cc615b4f1

    SHA512

    5f18cc24f86142fca05aff72092ad178a5df8ce84d08528eff58ad040fe729e0c580604a176a096dca5d2ed8d54c6b85fd0fa096d8d397ed4d35846f15a042ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d21fd1d7c31f5fa2be678a958a76cbf5

    SHA1

    e33b29243146f05ebac404c50480a5a8129c7704

    SHA256

    5133515e9a593fd6f0ffb6027b25098ef25e9377059678f5ecc17c80a3ad6ee3

    SHA512

    30bba6a464f0b284f4a8670a775e88cbf190f99db08720a866643913f3d59a3d305bb4b59b981fb1b9665e4c99c93643f5fdce7e949065ae6f94e2667ea140e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b690e4ab9aeab30fb50d1d0760b8eaf

    SHA1

    a67e310fad63ba2fc94503109a63ef9d402cd5ab

    SHA256

    dfa8f1ae6a670d8bdf52918f36d08e110df3f150743c1ca0d8d9a9b900ac5b0a

    SHA512

    6878d5c689f9ff16f1e6def2ca43bae587657ebd887f79c877616b91deaf7186f56a33f17c101bf3473c6dfee6164f8637389878bd9ed2bbaad1f0e624c34898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd880f11bd1f319d0a5ce74ebd347b94

    SHA1

    2732c5b16b5463628518fa46dec5950fb01da7df

    SHA256

    0411f626632d457fceaf72ef2de99b2f62c59dbf6b191181d897b745e69162f3

    SHA512

    abc3638f1ec72ec6a1e88e92550478ba5f598212e7625a593421301b415ebea8168cbad3d4db710e39c4aa075da8c14af7446de86247d9dc07a6117a031ccd77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0423de801abf9a339bed6c60a67eaa93

    SHA1

    11724be2b4a47fdaca3b0eaaf7f19986b4edd459

    SHA256

    18dde0bd3e8f21adaaefdc4a67a0954803609f1762176c95e662d8dd246ef30f

    SHA512

    3794b27e29c65a50431134a842c3e3ae14adeef7d5a9ccec8d46913be1dd8480ca6eb587151364b7211c088210d9ebf3a8246fb2e70b87371cb25502c05ec5da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7936373eb244f69f992185ebe7d03069

    SHA1

    3878b0572c5c9a13645a7686636c087e311ea93b

    SHA256

    a3fbb2a80461af75abf7bc93a22ab1218d087b9a496615cfe86baf0824c049da

    SHA512

    3fe3db98abad2e6c0ff289c595f6a7351587e4c90ec119650b7d9935aff9b1f8c772cfe6b59b953d11ec7f63c6b8c2f6718f22323612f9e7b8a09fd921d9ddbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2051f9516d068354ec306d85fb33da20

    SHA1

    e1f8743b84ec4a076e3bce19a0ea483e2f9f2f5c

    SHA256

    8072d816005fcf2d6563b32f980a501c66fc5bd2769abef8f218f88b5c9bbaac

    SHA512

    1cb43d99c9c5dfa8e9e53d9aad0018cb113fcc242f3f28641b2c607a822c3a84231acc18b83c298c46bb45ead86ef758a7528eca5b3710ed34ab25572e665a01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0c0923df593b610007dcf8fed672381

    SHA1

    4d7fb4c58ca59d2241a1f0f1a3ea587d0738919f

    SHA256

    525b964e67a9c966d1cd50040f245b10b64f1fe34d230eada5e0c6130a91b319

    SHA512

    8e0b1d805d06445235d219078e9cd4c5a39c1dd61bcfc8164fd3197af5f1013cb0ee977c8f1dabaa3b4959843b5ce88ace77ce4f84f54c028de7ecb5f8aa3514

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d65e4d5612337c9e148d47b1a5f3707

    SHA1

    4cf5c46283fad6f4d5234a76a719aed65cd7a482

    SHA256

    a3110aee014347eb398d4b7d863ecf9bb12594e061bfc0baab167f67aef56336

    SHA512

    0cd8aee86836226b42447d30b101861c310cb0824833d8f2109ea12822844a4e62b1266f6f8a9d7dd7cec0b2b5c5416a2a2d43cd0f4bff85c7ab2d87dc4d1488

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a2029dae2dff1022a58295a21444e2b

    SHA1

    31b574f6554bba59290516ca4aa40391bd0db945

    SHA256

    24ecb1690fcd7c5c72e32c953f7f1941007ebf43a12947153d0ee8b570680ff7

    SHA512

    8a2f9363a6758f67a638c4dad1fb23684d43db7fa92bfed3019d30fea14d7cd63dc9b7886297f56562828ed0adcc4bd517cebe4df4d02eabb239f82cc06788ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5fd1182cd24e6ef0b722ca120589d2c

    SHA1

    7fbc3f91512e11b592ef19a1ab2009b13a8ff35a

    SHA256

    917274fa2a32579f0d4d6aaead525d17c8f0bb173e3cfa31ce932ec8988c00c5

    SHA512

    81f2079eba13ff59cd2c3e858a3bb4867e7bddcf6b5f4cd43f0a03294b5fe6b8952cd93aa5ba4b10a9007914810a6cfbe2bacfd524d32ce66dbd44ccb07655ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28eea240136f81000c5c65804a38d863

    SHA1

    e0e22a2f496d034dcafa05aeb50d000b2b8cae75

    SHA256

    032a3e18cb64dc99201617e32601ad69bcf0d395f72d759cc20f22bfd877dce5

    SHA512

    fffc85fdc7e78d0eac0cac45f3c91e7ef2eeaea2b83a06ad4b9714cbc1b79d4ffe8e250c65b0e57fa8a7180f3ee349007aae6a09db2c50f2f95012934e72c356

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a164c2a343b54b77eb13d0cfebb53ff

    SHA1

    5e3f175a061b956d167a20dd4f15a219b0ac5bcd

    SHA256

    202fb8afa8dbd011826ae99d0aea6a7953caf13fb6671d2dc4b721ab3501e552

    SHA512

    3904dfccfa6287c1560e5de6806e9a48acae203410558d8fc8b196dfd6bd4b18f48ff97bc14bc597dcb080da489b0472eaddc915337826970ca6c53867a88a6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    100d26fed91796c40330bd6a72ed7d54

    SHA1

    5087f59dd8f57a08b922b7b120722533b3acf5b5

    SHA256

    270ee670b38c8bf0b67b38a7076e68061309dc24391c14fbb01a4e016cbed57f

    SHA512

    a910cac7945bdd5095682ac18928d9fcb496d3e322e8edb3a8b4268a085ced4d092efb3a3da880da15682cdc81cbed8e0f78162dd71c4898d766f71ddf52fc49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar1BA1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b