Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 15:32

General

  • Target

    a12a90fcc7d862113a745fd65580b702_JaffaCakes118.html

  • Size

    36KB

  • MD5

    a12a90fcc7d862113a745fd65580b702

  • SHA1

    c79fa8f3e1844a96bcd79ed5a9540859f954c178

  • SHA256

    f2819522973b2f8e1b3000e532581a1371ed59e69e829351e80da39cd849eb8e

  • SHA512

    a07340624e9171edef00d1d9f05d88d65570e0955bc4d936bf1c864a4a7fa71aedd8e6db41631e134375d80d6b433f89ef51b61e075702ace1c0e74dc1e0cda8

  • SSDEEP

    768:zwx/MDTHM288hARbZPXOE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6ThZO16f9U56lLRa:Q/zbJxNVGufSW/S88K

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a12a90fcc7d862113a745fd65580b702_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2652
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2652 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2596

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    660b6e28b38ebe7e521064e60113fffc

    SHA1

    f2c25e9f931876bf6834191ec5b409f47f869129

    SHA256

    3e203426c4aa1403e940966905320c612ce4006cc87e03eb64058eaf6d402433

    SHA512

    96868e652d5e0c25b4d0f0ada20d345115f0c6fda26d3cab724c0c1867386d2dcedc408c51f776b7e019ce2e22755017d99bf663cdd9fd0d88b26182c6434bcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94f6404b1b3a98c16fc5e8484cfc64b0

    SHA1

    3fa0c7007d7db4836eb784539dae6fc922e19cea

    SHA256

    223d1bc68e9f4984e73c6091d8b576753918ae57fdd531c864c542186860fb68

    SHA512

    08685026ca66f332a05771e7d6c93a5d7846a13c96e086ca328c574acffc53aa4868fcfe02c38bac37244dc1bf17c46c1d5a2af2887c59f6bcd0af249fdd612d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f603d3f89f24c3b3d1d24c23c9b50340

    SHA1

    079f71a8e8bfd77881d93038d6651cb2f1672d1a

    SHA256

    886666d5de0d9d65b1cdc16e4fa567ad6d4658be9c7a158dfda411872f8327f4

    SHA512

    a382366530e40ebefba394cca15a34eb5ddafb960bafc0ac0ccf818f33f9f9f161a1fb61446924cf637358af0818f25a299fe154f8a2595cb3fb2fb21ddcac23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88c6a4c0f44b347a3ab216740c53a408

    SHA1

    420255d579712021b78a75a59026ed4b6b60eb83

    SHA256

    68a85ca94b3075fedf3ad98136aabe181d9ab8b43b5c8b7e29351cb655d6f3ec

    SHA512

    2f83a60a59721d7ecc5a0ecd5c69b6ece671e43f1698760b5c3b5144d6026f3985b4ae147d1fb7cc8479256d6f386d7d2e038e84fde3c78cfc3a306922d16034

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac26eebd55701229d1d78a6491ba0a93

    SHA1

    fa6627c241e692a4b7a42725281c409bc4faecba

    SHA256

    2d3654abec96d4dcef7c43ae8a7f5f587ff47f5d05ea80ab116e2c49acdfc708

    SHA512

    7a1135e81d904337ff0482f32a7d34b1f930207dad7fe7faa804d8bef4866722c6be3d2f3206d2f3e68feb3f1a9fc01aea936aee0e147294e202ede3191477ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d14658634597ce2b958f0f9bad75736d

    SHA1

    16a79db690e446adecbf72cc201d93572a68cb96

    SHA256

    7bbf412edece73041e8a844d159f118a37ba2707ce7d67523765e2e79f6cf96a

    SHA512

    0347a19abfdd66a70f20ff07566689ff71ca121ac3357e47e564e236249c295a79ff2fe0dd67d2de0df4842d9aa15f43b2494ab744e2aeb5b864d6e52c4e5455

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fce89115e60860957e426dbf2c93edf4

    SHA1

    471bd14188c67a15831b8de681d70fcda5aa74e8

    SHA256

    afb1ac012eaf87766c2752395972503c113360c4d5b973fa193825a37d1232cc

    SHA512

    233048be0786e9271cb807215a6690ef9b43be627ce03fd1160ea6e2df3264937551f5b3ec97a9e92899fd9367f6c8bff96d187eb68b1a0048a29af6425eb125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f48473ddf18e24ce1b827b980364e2b

    SHA1

    8e2add88e7d76ce3c640b46939d1c9a04b47e6cd

    SHA256

    808e2f406a35ffc5303e121f055be611ef1c684057c81c993e57125e783b4a0e

    SHA512

    00cb52842b86df424c60ca5ff0e27cfeb143fb641495557561309d50e33217b52b540366fc6571b6a4aafeacd96fe4c56308aef6d064f39e54cc81a4fceeca7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9804e6e9e3f166d3aeafbc56e7e9649

    SHA1

    a0ca9514e92db86277715ad7648515b44c9b5147

    SHA256

    925e409c0f91afcdaea11aa4f6d4b1ae68bdee67637fbcca6aa63d6806535596

    SHA512

    a0ace91a15629cc8c8f8e3a7c82d5089cce82d6c1e8fd7ee5dd3a30c2a1e7976b015fde6f9054923d165826c7f28f131884ee46d2f84dea6ff786321af67e6e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    690db1c8e6751f33b818992f26db9920

    SHA1

    005bfa19fd76b7fb7e62a95aa4fed2164789eaec

    SHA256

    2c768bbc81ad4edc1a0e471ec13bf0d6a94ccedfb8a0170ff7b8120980d3c212

    SHA512

    17a6af1a9c47682e81ed6df0d7048d2bceebe1ed99e4616b4901e40c09cd673c2f2185b87ea05233664f13744d410af053a72f1dd10527352dfdd882b4f0531c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3ed3f5ae41450251d943984f04a5053

    SHA1

    4b7cadbf02a95bb9b710550ae112f92f92800553

    SHA256

    15f3cd00fa5debf550698aa04b0cdd1c5a0831588182618379f7c256c9a210db

    SHA512

    a787b3e6ffb402b8e3fff9bd8c540d823f0c4506abe74b93c0a293559fc4ca18d063a79e959230db32f9cb57665358d51414e9d459dcdd107ffdaf46c4a0f707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c507198d2b806c419a157f2342d5df94

    SHA1

    0275e0211df567e602a774d254e7f2844ef9ecad

    SHA256

    94d8befbeb2bdaabe0590cb9253be163f685701225c25c1deaa45dbb3bdd5348

    SHA512

    5cc96508e2d765241204430c72524587bfaa1a93d35db55e363258ac93dc200a93ae3a575e83725270579a64de9514868f1b6c24270a37fa02b2751ea20410ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41ae359154204e837ab313a2631f3b37

    SHA1

    0892959c1132ac8ef7c7e39ffd3450623f60bbfb

    SHA256

    c9f008acd737533858b739a33a41555e4b282de70a6d2dd25f979ccf8009ade0

    SHA512

    099560a92cf79c3a2a08690a0db1ea333b5aa9ee5062085983654ff7664c0197d5d79b20d8ec93b344c3ce46fe9a6e75a4ac2c3e35a2d1c462a6875fb10984d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9dc69c2db54e77462d9c466e0f47a099

    SHA1

    5397a33cfec3d6bf4853fa8cd8846bacd43df105

    SHA256

    94f072d420e770b9351114ee4caa4c6531deba6497d7bfd0f824450e0bbb86f1

    SHA512

    68d5189cf22288c981fd4e4a7ff1b86e046a201df151f3dcc9afaedbb68e98743de15294ea7bc9f02fbb43662062fe56cecbb7f0b2ae4d25d40ff65f473953c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73537ea9e49562739e5e164ba6e21fe3

    SHA1

    9e58da513b37898f6ab57f66e2624db4437b01fe

    SHA256

    69aa2a823355d552eb16e7aac541add496b3d12582191f78118222ae952dd210

    SHA512

    c8fb8fa5606e07634c1642c16b44b84a8fb789a9d4a7ff7d23baaf0e30ec033d42dfc328ecb6807792f53681450166aa425c0c98c7f14cf9728618d21bf341a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e18cf9a4c069c3e22ad626e5ed8dad71

    SHA1

    5385296d278d7ac7aba080306fc6016ca959275b

    SHA256

    f76614e5056e91cf188641fab3d75daa8ba31de783f93366aa313ede3ad98437

    SHA512

    4c894a842de46a2126d171e6dc3f4a839dc21c7202a15a00598c8885e18a40281edb5e78c195f2e11a636fed2788ffdc744c7f94428e715ad6b68110f39bf683

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    871d27671f7cffe6b5c7c4cc0d291bc7

    SHA1

    1c81bb0de7cd94b92f971f299234f5fe08660094

    SHA256

    a0b9499e48d3906560cbdd3cb034e071f8b26d734adf75db6c9e9f7ae468d8e9

    SHA512

    7f6d96f7d851efbf9801455507ca6dbf6f0d16fcd51d17a92f7df530ca892c8d4486cb834564525228a6cdf34687eb71aae1bd817957a226e2d03284aafe5edd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88819fb93271e2430a5fac54c43597ea

    SHA1

    5b18c49df7061ced3eabc2b45bff94e72e591663

    SHA256

    6fedccd14a6cf0a46c422207623329de555e489364a8bd5d3c3b43b2656415d7

    SHA512

    731fbe77072e387f6234469099fd2a2b30bee058e480c6af1a0c511eb6498b2a0564467621bb14ef6131e3b2a47fba6f15ade8a55567b983472540882cbcf778

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffd2e7b8670e6710974d8e446548a850

    SHA1

    35ba42257d61a83ad8f509bfce9a1a06a1e3cb2c

    SHA256

    6be89247c6e9bba3900be0862b7bc585cc8a69c4b9d3e27001bb541b61bc903f

    SHA512

    635090c266ba510a492df231eeb3b31555d5df0ca0831b971a31aa99815be1c79cbf434597c23eace20db0d83451f3439666a856982785ce2609a560b41d45c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20b1474bd3a7a899ea12405f5e423442

    SHA1

    bed05c298d5b9bf17f0397019843d47474fcbfe0

    SHA256

    d7504f6edf3dcc70c8b90a95519448170535d0a8c4b8a6759cb4295d0ff26fcc

    SHA512

    4fe187dfa546e1e883423d8839b3a51f407ceb517c1baacb9077e2fcc42bf47d33881e7e048e71a4f54463801c0048d68ed33535c00f3d9f67faabc83e9d5b7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f112d4327812972b71aae5935fb6b5c1

    SHA1

    f341fea1f6ec23e6b7c9a4940d1d2a19ae6fbf5b

    SHA256

    6b0d3770688d12ec981b350996ec4d680780f795f2c6c0a82bed73052c864e4f

    SHA512

    741bfb468d0833f32b04f55a83506d6c8f02f3624588cf237d5aef6ce2431f84e9e4ad8f242b7d9f4764fa4543371e15d91c35bcb229e03741c8b44b492c6864

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e3695c5de7f94a5ae938f5c49dfc657

    SHA1

    eb57ab7afbe6b5dc30b997325087f1e51db1ce97

    SHA256

    2179e52779d958c1c4b13e076532e905f444209289fc03de405503b00844815b

    SHA512

    165b9e4efad5ed5946918592fbfdb696546438f360540a6c4c1dcdf72b35395724610c2edb2a160236d7eba506cbed17c3d83f3a3c593abb548afca869d1bbe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    9b9f134101c0c327d0e501445bf08172

    SHA1

    f7ebd7ef31a10b2b20c6baa811d30d139a7d95b3

    SHA256

    5b490d5de03c14e27ba24585becdc9d88f0e5615ca7f665d7eb9fe6f0a930dc6

    SHA512

    e761b3d29217424e5bd8dc8e1d4fc0ca1b23ceea5c6f8d54b95037c79c416d2e0b74a0b4782ef88e52e3fa129df46fb6114e8a68b90c974f566bb69fb2d8d8a8

  • C:\Users\Admin\AppData\Local\Temp\Cab2771.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2773.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b