Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 21:50

General

  • Target

    a28da3af01b9206e995d0fb449681210_JaffaCakes118.html

  • Size

    66KB

  • MD5

    a28da3af01b9206e995d0fb449681210

  • SHA1

    2936ce628d6fbe664419f037489d35ca64e1603f

  • SHA256

    d3b13265c7e162071feee475541b5553d93b86c9f4c4e89457ab199e6365f0eb

  • SHA512

    d5e3380b6628def0efe759d0230e54bd962bc44c447b30a906d05ad68332078d30d534c4dc4d46df0b06d1382c71fcf5e991be5bba99ef138a0d782da3b119cd

  • SSDEEP

    768:NG3g/V1F6nFZH3D7V5zwtC2wQP+Lz2xSaGTX9HjV322qHTeotfGGgheJzD:Aj5ktGQGvos9DV3WdGGghetD

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a28da3af01b9206e995d0fb449681210_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2848

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          914B

          MD5

          e4a68ac854ac5242460afd72481b2a44

          SHA1

          df3c24f9bfd666761b268073fe06d1cc8d4f82a4

          SHA256

          cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

          SHA512

          5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          1KB

          MD5

          a266bb7dcc38a562631361bbf61dd11b

          SHA1

          3b1efd3a66ea28b16697394703a72ca340a05bd5

          SHA256

          df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

          SHA512

          0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          252B

          MD5

          d044c02ad0a3fe4679797404d7e7c9ee

          SHA1

          9f1e43ba88bcae3889b2ba02f4ac188353a7cb97

          SHA256

          ba7aa25ea4ea519c928bf7dc528f20d0da633c8b51e4c836944c4729282c1cc4

          SHA512

          a3310a496a78b50196c55ebcd3ff0b7bbf0111f058bcbae9e0100b8afc62c0ee11fa8a817b58c52c6be7149689d68eec3d14eeaac7095f4d397fe5137b0f80e5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0d64ac5be02a55ba3c8599813892e0f7

          SHA1

          86a6a195c75a5cf2ee3bcb09afda39d26e753d69

          SHA256

          f27ea51bf1d1f35c4ee6ff74bb42983b042873c75aba861c34c1c4d3d6ec55b7

          SHA512

          9410f1b146aa74783dbd265e5b1063836411d4fd438f2fbc1a5ffdacbba588d49a3cf5e3b9e3fda3f9ada6e975ea01c50dcdd2f4d69f4dff4b4196e24a3d5dc1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          89cc63ad75479088a047b8eb33175ca6

          SHA1

          e6ebf6b7a246a041435552cbc5f8696288910c91

          SHA256

          41765fe7f820f98b10f39acde72dd2ce74a445d2109c4231a76ebcd68218354b

          SHA512

          11c7f57b259631b70afc2b978867c9e5ce99b9296754c38863a944353ceb2572466d617f13a02cf4bc79cd14f175033605c981f9c3fcff4a4cff687fa3fa22af

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          164656134facb4a37c8dd925092eb505

          SHA1

          fc94371ac3acf8c72bc29519f0fa9192dd541ccf

          SHA256

          e36dcfcdfb4fff42560f506e06c8868c8fb0248d7b5f679cb293e0ec2cc8128f

          SHA512

          443edd825627f1a88ee7167464900d97cb2b2f1adc56969e8afa485b6b2d43e62f405e2b556068fd3455161b497c754ecc181a650e3df74a00749df9e7cc0613

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          52267047ba52a4ffb5497e63629dc78a

          SHA1

          ccd16cf0fd35298451731e8817f84c259e50ffc9

          SHA256

          e94c669355e18c257b0001e079b69b6aba5e824d6e53cf00f709e651c5a2980e

          SHA512

          888bc7ffd9c724e6d75d1cb6d71a45ba4bf9b1bcaba4789be7971b7527cbd9402957c695070e98aea2c1f6fa6633b007015419a755b993be48d0838656156850

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d28122197a6c380b26c66d224f5fb6f9

          SHA1

          95206a35dbc31ec1156a94ab4072a464077010c6

          SHA256

          c6a8a1ef21e0e413daec5f9aceaea362b6692802e421014f86b1e4297853847b

          SHA512

          bf620c5f0b4bbd20d5b239b1f414aa2cabcbfaa234d9cb7dc8dcb133c87341635b5982698a0eae2ef61b28b1c526776c87b3c8030d5e644a6864b913ef566c17

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ba9f7dda37391e4875dabe42402447b9

          SHA1

          062dc183a5a8c0ee4977b36281e3c3e3c9cdd821

          SHA256

          60f65b2f7c4cfefa0ee2f9c24df3f079839680f5feaccb50fb421115f0e28223

          SHA512

          2cf1754b6683a35d3645feae51ba34234c10124a975747fb9f2c1df9cc1a0fd23382c62d81485c7d13fe1f122f01e3f7dfb3363b22b6d9e3e38f710e3e44c998

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a03ae10433896c6a4f74cd760fe49b10

          SHA1

          42a2bd96eca4ec82b68b45ffba689b790e405d3b

          SHA256

          ca799c189831424ee3fef1073ff5715ea581d88ca85e950b937646d50a58e176

          SHA512

          61fea493c73af2e97bbbe3685a12b6d9a935baa7e7cc765f5bb20c31e0f1f6576dff84924b288c336d21bc6e0e78f64244e2576a981322b0e3dbed2281ba7064

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5a7fab83f7f36633bfc907bc9b2a697c

          SHA1

          2862fbba2b618a7a21167190640f34849f26d61a

          SHA256

          c8c10e126888805099e75d17215f416adea15236c21d93a63e1f74196e5a91d7

          SHA512

          0c834d93e02760bdfd4fb46944537cf425944912d426e978f34b6a58cb0ebb4be441fe9df800f413877100c28670faa2ab195507a08cdfcf245c8ba4bf6403c3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b1adffe996240186667148be1f267064

          SHA1

          b273d7b48a79971c217664585b68aeac8ff54607

          SHA256

          448f1849e9b1b2b3a9b7eaea52804b8f596b338afb7138714b29aad34ad27718

          SHA512

          0ddcf59b83235fdef79e4f94aef34382c4a2f1ea46d46dc629c234a7785f119fe956207a9dc342e1486970727fcfdddefd4732bf363db5e87ad2dc337aad10b8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          694c8ae2f7574233f455ef52116c1be2

          SHA1

          eb34e35daaa911fe07f33dbc799173cf3acfd617

          SHA256

          1d6fb19e6fbbe2985b30e004de7081ee75d30820471c37019ffc763dfa57acfd

          SHA512

          511da7ca7e5c8823bb8c23c396c8a915bae6ff6397739be9d990a0e43c8a4a60d0a6d87d988de768792eef8e427f0341ec777990f6b732b20454e065b2e3924a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6e2ae7fe61b0d835eec8d958201a1e7c

          SHA1

          b6968a2226f4d8517652181f17a1b4943fd9c18d

          SHA256

          ebfefcf61f8491528d4b3614ab31339bdf483c6e3f674e3e929e71b08c5e9391

          SHA512

          fb051fc8ff977a4337533ac92f36fc1cc81ac407c8f7d683ed480a4a0f93a2cb73c6456711ae508540fce99c48f2cad9d21de3e4df917b79a669de59c5cc85c7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d51a6206bf0202ddd3e4ba17e44ecd44

          SHA1

          3ed4e99059ce165a7c72c35999c5e4f77b79c276

          SHA256

          5077cc486ee655e10d752842a6ffbb946808f96a6308d46ced6de8c7d4b8e78e

          SHA512

          769559d39097b9041664ab2f19954408bc1f0ad9395ab309fc401949381acc888c61c19fbcb9ed409380c4d16d9695d18dbfcdd4bea818fdf35e95b6095bab45

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          49241698c07ea2222fba8c8389e4553d

          SHA1

          b670b7cfec118910d10632625a7c9ffe0c8b0d18

          SHA256

          3582c02d220f9a691bbd69f6a004dd59892c63c7c2092be6ccca67b749c65996

          SHA512

          121dae53d2f49f6820d63a1c3b43e50a30b0ebb06f631f3a7b7f0b267d4532ea24175451622cefcc9f3b1a3dec0ba4dbac4eadd6f5eab8a4316d4a1b618a5f4a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fcbd0c792c48e0edd520f8ba91c98706

          SHA1

          7d1b352f882cf8bc8abc9cbb16e7d059f8f71c6e

          SHA256

          dc375a734aeddc6a216b234b6535b59d7d8474328470b8ec816a561394f0cefc

          SHA512

          3dbe551e43bf74fa89aa5dd09458d1d24591cf3fc36ed28f47909ead59564ea86630b6192ecd6d533d5cf80e838cec0c058ad1615ae32e51f2655b8da935631e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          67f8751b1214538e1a315aa38149287d

          SHA1

          08273d9a1b5fdd5e793726c485c15648990c9aba

          SHA256

          15c9cc304e2e26cd48fe2a0c4434729431e2a03baaafe81f239b0614e4b209ed

          SHA512

          9a9fcb8ee8d3cd1b43eda6dd7eb6635c896775564c6d0b177ff9039baa73f79bb13a818ab6a080174f9c9d1f210a7688017c46429f10aaec0322aa8192b3a1f6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          635181c370437a8665427c19eb20b530

          SHA1

          0a913be65bc852188a1419f57c89d7011d8c31b7

          SHA256

          92444093b4193eeaed2d76a833521eed77b91b4e5ffd7312462875138b16004f

          SHA512

          b6e7a734cbe2e7cbfdb62baee91d9101c3d25975cb7237aac36810bf56abbf1571e2e81293e0e81c3098ab6299ebd1d0bb43cd0cf55e737d0f0f5decf19b91aa

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ed76213caca2f191e9b719d06c5ef94b

          SHA1

          5d37c8a7c8e4c79886ca676cb6a6fac9ee069d74

          SHA256

          56522d64ab50330f0b3dcb89290c9cc9709bddef5e4e9093c4ce3e94f88cdf3c

          SHA512

          ecef7f45f73fbcfd4939a995906369135b7adac0c46a1ec65c820f5f95af70886cf1cc2a830d43353af074ea0e6fe6de1bef88651622fd48a6393e2a5b147cdf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          aaaefffba76d323939170a1c102104c7

          SHA1

          67009f841682795cf524d52cd24fdbd98a16ec4f

          SHA256

          e7e8bf7b0537102738c7d9f9cd711f1f1c704bb1de4d502e1c02da879ee1bd7c

          SHA512

          c6b622cade67cf8e16548b4e1a14101006cb75a1294bc71d6481aa9cff5db0f7b735b1a04e45cbc845567fb4e4d4361e9b5364097bad0fa34b53a9268c4c91a0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          43aa687ffced6b3025c4092cc7ababc3

          SHA1

          9340fc300517ff0c582edd2c42ba318c8b2572c2

          SHA256

          71060287fe006316344f96f8fc307e94714413833d674409fee18be0df579856

          SHA512

          3322d297770aa04bfa1dea11688abbfb5ff60dc91e910ccf7b7e0a56f9d4dbe7e39a923b0a94e2dc7fde1ac65f4d0399a95cc33c04e8ad537d406f0dfaa5a07c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e7bc5604c8debcca7f21b7aa0cc03771

          SHA1

          7bff7eabce686495976f79f974e6e9afcd7bf016

          SHA256

          48e462d9727b58e97eb0866ddc2f47e832a730ce588c422780300a257ada3df5

          SHA512

          219fc7b2a00a2ccb494fa0b69514b7c935784b12707929ff616ea85a96e3500c82206d41b5c6b969adc9d673b9e9cf3492cc4c6436703748dffc7fb12ff4c6ee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9c0c08446c8f0cfaf204ba5b37bfa763

          SHA1

          97a29a602607c9bef0f08f17ae27109db56f3b86

          SHA256

          0cca368442375d60926f6c23204137b88fe5d92f75c151f2607922275d3011bc

          SHA512

          618942b6edb08b038a7b1c31eab823e8a960ed2a1a99f38d2d27cc6b3145da0327e5857ce10bd75430022e9912becb3ea228051528b60382799a366f33fb98a1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c78d75111e5eeecc98a87851a82a5c53

          SHA1

          241f8c37b3c2686b550b48acbe98d65489f67f82

          SHA256

          b6e3479e8af328b1628d805b6d242e9f6b4f2a0eaa1fcf2fd68b440a011b3944

          SHA512

          0e21784b84d3ba0f5d0d5898205c336c315738b6322f005ed2a920b7210fb72855ff5e0339a4671e82adb2d212c23225efa822a8fc5775483d176c4120a83b40

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          242B

          MD5

          1088e71271805cf809cf882351af118c

          SHA1

          60ecd5925368974dea4777a2b33effda6edf63c1

          SHA256

          df18204413d8454c68d56e78eeb641efe95618a1bf798a6f10b1850c05a9235d

          SHA512

          77343711f06b7acfb0d58dd1364bcff611fab80a0461455fb4b280f4c9d3dc5cb40b6a97eb03b282da11467c9f556011c8cbfdd674448e9b92ab1aebaf0161a8

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RYNL6UIN\jquery-1.9.1.min[1].js

          Filesize

          33KB

          MD5

          4d638ce4dd9b9b12c52ae8318827515f

          SHA1

          e1c26c6becd9b44711fb85b64ae66df54aba1891

          SHA256

          78feb6ec409aa8ce11bbc8890f01f95c48363a872f87e7c518c872155530211c

          SHA512

          4bcde825eec97e1ec76a34bdf31930f5e2a938a2c265e88bbbbc1b80d9b45a43f010fdfa00c49b42d347d13b01e8e0bb9ea75faee624162890627c818fe7b545

        • C:\Users\Admin\AppData\Local\Temp\Cab12D7.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar13B5.tmp

          Filesize

          171KB

          MD5

          9c0c641c06238516f27941aa1166d427

          SHA1

          64cd549fb8cf014fcd9312aa7a5b023847b6c977

          SHA256

          4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

          SHA512

          936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

        • C:\Users\Admin\AppData\Local\Temp\Tar1476.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b