Analysis

  • max time kernel
    143s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/06/2024, 15:59

General

  • Target

    9ebad82f1af4a29afca853c81c439e6e_JaffaCakes118.html

  • Size

    31KB

  • MD5

    9ebad82f1af4a29afca853c81c439e6e

  • SHA1

    db91af648d8e3a5ecacd8167b2a579a227a253ba

  • SHA256

    e30d9eca6fc71bdbe89e7d732d3a438dc4a3391bf26073b0b1c23f35e8998c79

  • SHA512

    4e7ab85edd6c19ba82287764de9c0ec58537402cc8349657e898f1c70bb469e22cdc2be10b98a2c09cb33d459dc5425a0c876ebba8fa38495805cf54ff36f9d8

  • SSDEEP

    384:zz3gTqn65lyZs2Duk8XoNlFi7PNNQLh3TPj0ViwZpzGGABXCvvAfRfk+i7/:fuG18XoNl+NNoZ0ViwnzykM5iT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9ebad82f1af4a29afca853c81c439e6e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2112

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    a8d2ee8e82ed47a5b2b3c06864b333fe

    SHA1

    c0d2b4768e43f929d6567db2f7bda6c195142d77

    SHA256

    7602950f7e6781213c2f0c2081c968319af1fe06d6fd113d06fbe08cd3628239

    SHA512

    0971c0f9323d5d5ac59428c70d541ee3728a70f6b8bb8482deb0f1e812cc4493116fd135d23078584603268018c6d994456dbfc14dc6c4297742f39e5ee608b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9076e2cfa61d61fb7b62e8f2d6ca664a

    SHA1

    d9d67021a95599e6ace42a1ec29acef90adb52f1

    SHA256

    50ce97e7011bb06b8e6cbd6f3c47b78c084a38d28d6a605281e9785a90652d6d

    SHA512

    59a2f7e1f35b25c26a22fb66ca15768b73b579e2ee130259ba519c3518722f9f04f3064ef1fb1ed9daf69de327311a70278c0b69e9d931003ecb3e75eb94b469

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41d63c00483e569b0471badd70d3a899

    SHA1

    abf4a229512df5972d4a98e5f5c1b89827d8e20b

    SHA256

    fdc2e599874aaafb1632bc29431e32d8e034c70913b1073046d6d18cbad60834

    SHA512

    8cb29e072ae41df7819b76e8cbe3fb433023a9e285372bf6f5db91e21551d8e21fe199e0f707e70de0762d406871d8dfd1ce0e1c420e848175f5f9d61eff7dc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0aef31428836e661e36f3b0a52c5bf5d

    SHA1

    7949dad7a2262c65d292a03883a15370a1a099aa

    SHA256

    0a51ce61f0e46dbcf653d40e0369e3ac32e22dc648d50c55bbf368f75411f937

    SHA512

    394a494d5e09b9fef79a64778f81642f72cd6ed1ddaea354cace2254f936740faf40dcf951ae80e410aea137e661f9d2f3fc808bcdd9c6cc1736d89617a5b3b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7cbb6ad9e0f3086f979d806d9f875d8

    SHA1

    092943804419156370a45e59a1bb99c5defed82e

    SHA256

    3c6b5826dbc5acc3cb9a49e6045621b9320093644f9dbc67a4ba2299210b7726

    SHA512

    2bbfbb13066987e1366bd772d6e75ea33942efd5a30d5bba89b1a18363f2ef4b59b3b78c0c8a7d6ec9503aa4849ab28c6b9ad5119bffb7c3538a6d14a6cc4f04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d89e6c7999ef418b4a728bf3a674c27

    SHA1

    81770a9ba84490413108f2d774d5eb1736aaae5b

    SHA256

    53304b0f4504e58f10df4da3fb5d92b75c5e05b87ce2ea453b189721c93a2bf0

    SHA512

    e8629aee1b88a1456b6938d7ae7952a9504d5352aed89baaef2e90806e53001a1a7b42c0d16a7006436ac954f05063ba651255b978d5e358dd1b7fa27b90ee10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63b925feaa5073bf05dbc4df44304a95

    SHA1

    818946924c27b8eda552c6ba7cb073d0215ee5e6

    SHA256

    f9bfc383a291005dbf999f0e508500796a493d9b20f009d3a743d8976e96a5e7

    SHA512

    b60a6200818c1e55ce272098ea7889d59317914b27e6a15b4012e1092aa7dcd3be7010a388550354a57b1ace2d9e6bebb99bebac78d805a8a6c32533ba872321

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b89f0b44a951f01bb4a6fbeb8b90175a

    SHA1

    468def0ba86145124fd9a08d8c30450f86e78499

    SHA256

    11df4ec1abb2e4390d4b40a4610e77233046df56cf282fba2057a7d35929ecf3

    SHA512

    3b1fbedbf51b7ed6ae22f822e7f6a846b16321505a1cd7f28413b19002706d107ed75185d98df36fd59f9b887579d7fb2d6eaae79aba3b03814c81a2bffbbb13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e243979fe4e7add01a6d731388352ba

    SHA1

    2b8b404fb9dea0667bbc8acbd0088ad2956a07f7

    SHA256

    bcda2eafdd99ff845f00c88703626ef501ad34120cd61b76a573069a5caf8260

    SHA512

    af7df1e0c04f4eaf1f0f7b789d7d75ad429bc50a1175d685dd42c9523d05aaabb82fab246a86ea3a90be6e82db4343327bf3224e1b9c19cf86094e19d55b638a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3176e0709e245a024c17a5dddd11e7a8

    SHA1

    d8cc4fe2a903b0ce85e9906a07920dc3fd05560e

    SHA256

    7842d72f2caed23eb95e03210d44cead6e586ba48403397ae98f652a4f8efb6b

    SHA512

    a7f0612c6d95b3f35ce83313b54884969adcf209b33364c1334025527eb56a43cde83da39412eaa742b96e6d2986a5ad036d7619169eb9b4172b37e207816881

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cbdba9b455773e1c7a6ba1cf01eac484

    SHA1

    2e38676e26eb01f38f5e581db977858dca3f45de

    SHA256

    35e616cd661e90b5988d3818e5b9e91c0098524309bda0d326ce80fbece0e2de

    SHA512

    1a1f8640eee67456ee278c5609d5ba645b9a7736d0ca2d903e3a18afb160477a36df92c7e6e5401b51ebd71703ceefa2f739eb258885a695a17c29b728bfa0a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bab77541612b9afb166afe3ac5b3add1

    SHA1

    e35f3adaa2341d0e5d4b1b025e8feee31cc4c4c2

    SHA256

    10a7a57d2807a6d7c8e965387965cddad3dab492948f406fa65c4c6ab51d5ce9

    SHA512

    3a845978344f655d639a3949a6bf69f9c58ee31464505cec37a24bdd6666a183df0f69858b61f0be18190b31ba2d55b34bd49ec84cc3386e00684156d93f67d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80ff50a27c7071e866435a6196d7fa90

    SHA1

    221ad137bbb4f8f97bab2ba7ef7b655baab89069

    SHA256

    13648969706b869fd130710ebcccf343b8f000c369c6011f8f19951131028aba

    SHA512

    ec94c3148b8c43ac22709a44c8a0684d1ddb7f9c0fef4967e839aa49d8b1a1bb2c90de9c381ab5802e9898a2597eedac6014f099c01b6c7783aa52264572122c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1797b96291c00f138159a52ef332c576

    SHA1

    59928ef9dfb05570dc9577e330fda12651822b91

    SHA256

    9f28dda51f8f78c3c73fbba6b8f0b69d96569ce9e6497f43e32049e8e8af31e6

    SHA512

    1be99d791308c9aca9a30ef6b9b45395fe8cf495f9d5afb2a9857f9ff9f0ecb7da8f6c9f1c4de3bc5c86cecdb85df37ac92744a6997f326f7482c9daa60c1ff7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    543c4aa80a8273b38206ff89cd925284

    SHA1

    419d14627383ed0a3115ff371c801a5ffbc50461

    SHA256

    0d085dcb0cb512808b8f912055520cde012606e693cddaca5ca7847351b506ab

    SHA512

    2183593b31564529443fe83a4d10134516b67114c41d17ddf2dcc627bb122801515946cb7c4d0910168910f8ea636598930212f9a05af62fec3201f8a1fa847a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14456b85d7c1db325c5330dcc626d62d

    SHA1

    039b4fc26e6fa1903544375f96a5b25a6fc4f62f

    SHA256

    0a07963b0827226f2e5eedeccc67fc4f6f573c6e5f512b51038b9b3bd8337be6

    SHA512

    c86a37b63812535456dfc8e500452e5ddb43dce2c28827fd6bdb4bf0f23397a1edcf728fee5b80c1a5fecb0a347b288313b2a0e6cd907559165c7d8d3a422221

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81556772eb4f0bcfff7c62d138ea02b6

    SHA1

    1fb1a518483557343b49105f919e18d9f8c5474b

    SHA256

    2a4c19e77a3daac98f20a8f35585767be48d8b1ffadea08e8c5ba8b2b7a21e85

    SHA512

    3787b935e30a73ae2ed65d88bdba2d99df8498ae4e3e37e37545ab76b92b2736cbec3a0a86214b167d5fe4bc3bc18a020d402b4ea8197cbdada3d11bfa093651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2b3158f9cf1b9ec8c8cdb9ca3848027

    SHA1

    f0fdb8966782dcea1c4d81912d7147ff550caa64

    SHA256

    41c6a73f06f504d4233c171eaa914890e734a7f15768da6979be6b71df743efa

    SHA512

    97c5523c76c69f8aff8df50ab2d84188a95d69a23ae621584280129191c13bb8909c02159d7ce623fa0fc42abdb2a8537e15077e35b1d2141dcccc73716fc555

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47fa0af6e1ea5f8b610f95f1a590c45e

    SHA1

    5b5a3f5ad4540f2d0d37bc72f867b9d159395573

    SHA256

    a866a128a1c82739fcd10b170694ee92d1233d3d8ff042de26f0adf63940ef39

    SHA512

    20e21a9dd9bb8315e7a6ab1cf5e72bb50581de2b95a7ed9a416710b19be2f60baa7f84a7d3559903f44ed9989e5edb71fc9cd1d7afae36ab9a9bbf338ddba61e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8b3ccd5dcee0a459e6397e18d6a7cb5

    SHA1

    6c3a8d578ff18c0d299d91de6cf899f8e6bbc30e

    SHA256

    bc49f6951e8714e8b43bb0479c2bca8dab0d1c7631b5cf7b4ca7e320a90f2ec2

    SHA512

    feee44dd6511816ec4ed2ae9ab10603a9fbbdce9f14ebacc19e32e53b6b6ca35e5ab8ecb208a4a11149b90f5e6b9d2776fa5fa36551ad3080acda7196d1e39c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fabf5d1d12a87250d48c3ff8fed59ed9

    SHA1

    1b766a27a718307e6d067b73c7ac06e121c9bd82

    SHA256

    fdb3edd3e905693f6766118437fa6170002a757a7e8c2fab8d0ce08e58426e20

    SHA512

    fb5201cd92204e154274f4df3431b31aac234883ba906db6b8bb51b8f1aa7e95fd425a0ca847e2d7ed5d6aecdadae9e77d2781ec70127f54f2fbeebbc12504be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c9d87d71371e5d4a6a0f037c0eca9f9

    SHA1

    ec793a292f7fdc9140cff99e5d13dd24f3774073

    SHA256

    4719d1cf94d3e30ad5b1b50a7f65924f4dad138773911fc4865301bfc6a0e77a

    SHA512

    f3303e8dd67bdeb012ba05df95b616ed37786e73941b384b74123cb02c8a8e2337397535fdf720ab4f06213cec030d808f0236fa8ab590736841c3fc7793a37a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    cb4582e562ea530c32122e64f9463d7a

    SHA1

    a5e1a39c4d4b1b7007bb1e5b2d190da2f558b84c

    SHA256

    e0e22dc37e0d66192d1d073a75ff61e365fd1f97b4942568a3ec805a81e2d103

    SHA512

    c901459c98a87eadac63bbcaa9a04c31133d65ef43b16e9fe212e19741356ffeaf89a80a3ac84910b99abf5ae6730b38511943fead8e73ef757fbbdc787ca0fc

  • C:\Users\Admin\AppData\Local\Temp\Cab2001.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab20D2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2033.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar20E6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b