Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 18:18

General

  • Target

    a1b31e98bfed34afc10d749fae12b68f_JaffaCakes118.html

  • Size

    46KB

  • MD5

    a1b31e98bfed34afc10d749fae12b68f

  • SHA1

    4a59c49951fee4abf53f543f7ea45c01903750f2

  • SHA256

    2c734ca5c2b376fd3d26d67a01fb62613acbb30ee4378b25672d84547d48ac94

  • SHA512

    a8ddcc917bb731aafa40d0e62436bfb43769ec03a4ab2c88f25d5d1389e5aafafb3a266af8d6a9b7f7d8a6ab5e023cba4788ab19743c1b0206bb7ed11f439852

  • SSDEEP

    768:Lr1F16EtgLQhbCNiXLGiREd/lCRwJGt0ghirjIZ0qqYGJvu+XUoCraE5zWAYRYiP:1H6EtgLQhbCQXLV+XCRwJG0gKjI2DYGn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a1b31e98bfed34afc10d749fae12b68f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2904
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2904 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\265C0DEB29181DD1891051371C5F863A_5E390E1CA50E646B1021D6CAA485D322

    Filesize

    471B

    MD5

    e6868114550f22eb84a50b078bda483d

    SHA1

    9304e0f07a02f36a9624dd43e3e5f6e3a8423b1f

    SHA256

    0265d5c043ab007adb15f48b2af9a09b691af3b80b78ddcf24b1b915c94690d0

    SHA512

    7f69f27595759bf043ff75d48980606fb2746ae47696002616dd3fefce194b68651325106e643a93c0b67fbba8dea7e86377b7b8f0f6051d8356a095b858db9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7f261dd4d356a1fdf25bd7dc3c8483e9

    SHA1

    f211e5f733e0736e3a5fc057d6806e80b7d056db

    SHA256

    890ec6f1eb432c730d6746cfb68bd4f99278812c4b872771d2bc65924f903f62

    SHA512

    21c3ef53ac946e41df6277a13c2783c3ca342fa4c6ef8642db5b16e7f02821df4f68f02b0ed1b68f85f35fa2ae7b9458947e4f93ebfdb2b194710780c896f051

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90a43ce34ee21ddfa3a1e668d6108842

    SHA1

    c6b797cb6542cce834881b9d74989537e2464a2d

    SHA256

    6653afdd781c2fa5dacf75d22172e4b5f77a80207b9ff342b55102ee4bbba080

    SHA512

    a27d6cf8eba30b8edccecb30c006c12e94fb3938204693c269c4bcb39b72ea8e9375c4e9817d162fe57796ae489375f965cee606a386528f9a542fb1fb93766d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb3dffe8ac904ef0dad339c2e7819082

    SHA1

    7cbce41476c7d18834eb4444fc5821f7bcb27136

    SHA256

    ca03b67689a305e5e6a3308f473fb69143a55a2c4baab0a3cd2af41e7be4f855

    SHA512

    ecc67ce976f92bea71bbc7eafbf18d53b75452ec1278e6cf5caa71839489c9cc2c668fb6fde4d342abc10527597775e55eb92c1b06fe2de40bc9c9410746dbad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4086fc4803505e7bb41a42c24672917

    SHA1

    0d1aa22dd35d4f15f99f84658efac9ab9eeda251

    SHA256

    4012039b505f7c2d192704199815f83c131eceb06faa85c6982aba5cafedc208

    SHA512

    4bbc231e8e6c9378a36037faf26f03c3162e9ee054514f46b59b3286acea9a16a4194abfcdfd7c58fcd11c0b909ef19b698c3c6e5411ddf8dba96599ab2bdec7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f22f30268160025a0c2efcffdeffa33

    SHA1

    e2e6362dc64b297e0d9fef2c7a9b5c51d384c043

    SHA256

    77a7b10de9f916603c70f737bc0bd51c59f5f1c2dcf08a73fb530e43a78adb36

    SHA512

    0425016ccbde6712e680965c9eb1f5b28a93fd7be86cb2fe33ed5dba91557313f907ad90b27685b68cf6ce34ef373e5f350f2527bb1b632b9543477a228fcf8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47572e4d51ab49f0148e2d095e0292f8

    SHA1

    21b0e1cd1e0e05739d9a705da3224a45711e7566

    SHA256

    bcf1abfad8b06d4be44a14d3cde235f16761bd3a87abd59750e80239f06899d8

    SHA512

    b054e63415355f749246aaa7a7558bbbcb38852e58d93db2f82fb190a64c541d96f8e7823e21211f979cece1c0bad62f49229bed7c3e19335e24cffdbe5a03fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b709b955cbbd2f060d2d66b4fcf73778

    SHA1

    ed7c0ba8cd6f1116df6d743d3d0f6db75cd99e4a

    SHA256

    91975a93e2ee951b6e427c9c11afa98b97079d76a0e8a93ed056eb8bb699a978

    SHA512

    605679c52e9889db743b0a9c90c0b987be689c08f13953e712a542b16df36fb8dda5403cbd023167437c0a3955e7c63220589b92f0ba02ab506cc5d8c00a375d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1629fb205746cd14d89f4d4efbfc3db8

    SHA1

    f118ccdb60dccd3e9e6628b2d90240ce39234eb3

    SHA256

    a04126fbdebf28079f2876978a329b5fa9a5673935fba92bf7089700d968c0c7

    SHA512

    129e487cfa8460d895faae3f8222e969a759c9a74d64e4836619e74a78bc48b1590e7556b2340e52b5c8917fcaa6d4fb95098102e1865fdd8f453d06cc1de974

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    512d8d6eaa39e73bfb71302df8d3a487

    SHA1

    491399ffb4b1d70e72a4604ab7d71f0474e403cf

    SHA256

    fe0042d76be9b0b0d79db0086f5dfcb85028f0950e396774fe1e4c02046fb13e

    SHA512

    e41cdf81ba7783e4f79c2dbce41bdd911f012fa62d82e19f6e15eec334a34c5f3ab0ddf07dfc73f44a1af48669751a0ebeb3b5149cc341ef8c8a3eed78e36bbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98b423db54c7e565cf722f9b9d3b7052

    SHA1

    709efdb1eb03369a281319845ee88d07c98a79ba

    SHA256

    13b41e58c27bd923ee3020a5c016052e36893fc73f2b64a35c6c94d313943a23

    SHA512

    b49f8ccd2b141715e3e3e9cd08f68e7636cc906571e63c3badaebe54a027fc9e65fdbf1a8310530c1d992bfb19e43dc50dbffd71b10fb2cb978c664f9b184d8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20bb30b42c1f8831db25ed5e920f7d06

    SHA1

    9e6f764d6acbb532abdca5bc6461e00dac7bfc5f

    SHA256

    9e584abf26a5641443641807532f0b10c23c2c89584ebafba8a6e8668c6fe94c

    SHA512

    ec18a230c18c00d9f5d837f1dc826935a548136008031e52504b250caeba93650baa11f679d748c42e8ef92ea44de67e946a3256a6fb8d3572b2ccfe0208f51c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3eed3962168debca3435fa19fcf6c954

    SHA1

    49df67987787a61363307f87ff3fea2f2e9c641d

    SHA256

    77d132b77043d8cdeedb5580a96ac95798bffad63bb1c62f76fc9c46b20b0de5

    SHA512

    cd0aada81a6236ec1c7b365b537b489a06e20b2229df8b1f895319c503d5a425d09f742aa15dcb949da7b039082f5ad003b945ca826c0fdce7deef84a7a49ba3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6da0deda46f22014bae58e9c47bb623a

    SHA1

    43fb16aeeec03f8552a4d0585723ec18d61492a0

    SHA256

    876df074625787f22696fa38c9ee80f2897a99617cbca800ee579ca7f5dd2eb5

    SHA512

    a8e80d0090587303b9ddacd91221c2af3193b6af4d03439e83bcc29fa454f5189f790a44e5ce092a787553c7b6181edfc5d636a22dcaeffcaf1efe09b65c0cf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc5121f530acae2a20ba79ef720d2d60

    SHA1

    f899d409e50b90bed4054b8e06da6fa772461f9a

    SHA256

    d1a75e9b21a97d7d0a1292d587bef4933c7e732237457ae6947da1a0a48239d1

    SHA512

    918508b85161818dc7b1fdefe5284eba13f6ec88f451b6671216e790ccfdb6f8207dd744554afdf22cd655f9c4eb41d147dcf631e56b86d38471fa94149338a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50cc5f23bb4de796b5a017d4e2f847c9

    SHA1

    da23f36d6ba83a18846e89f18ef87c954de99f59

    SHA256

    b2f291b232273147f848731ec8ebb40690843ed48e696663ebf0e6e1a259665c

    SHA512

    32eed70feda19706f43cb34d3b4482a7b65dea880850cbc94eba44937e36e3b82ed996d6510b0bce798935bb26bbe22b33ea89f13a062d0e0c834db943cd25c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aba3c9afd72b938caedab3d2c4cd070f

    SHA1

    dd2e3d1fb28005307149eacb6466b78dff412d5b

    SHA256

    2a62b849d3161e71cbd4ead3a50d6dcedba0b0f0ded4a352ac9987cc0ce0a186

    SHA512

    22c87cd266df1003f5a004fe326ded32298f9c75329f844c9d9634bacd8d38b9d8858a6fce4dd9222b2cc1087cde1586807afda95524262521d7961beb581de8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7be3034c78dd8d5c200d785fb67701fb

    SHA1

    0139d3b09094d61a13188ffc2503795c655dd8cf

    SHA256

    00d2f1f9bdb25060aa44ddaed4b432f879b0f1eaa78c89dfe1037a349eb2dc7a

    SHA512

    e32db589e46c0e26c65048a28feb738d3170ef957cef00d17738fadbb76913f7e726c3b07f41b388a5eda7b99f4d372254005a0d7a0420954c209c84ed99620b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27196bb142eac8933acb002395f607d0

    SHA1

    dd4031505ba8b94e1a4076d06064acd53221f044

    SHA256

    64c4f167a91f02aa716d29870bc089fe82bd0816d4a593cf126ed7aa5b901c74

    SHA512

    c120235cefc1d31c0b29e4ff484a094f63be947c66e84f5a186b7e1a3c9c64611463ffce85049b7690d58c34aed69bdfaa08266aa4ac5e3eb0a454697900fb4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9178066debbfc198ea2520f708711c3f

    SHA1

    4e5da8013d5e9925e359837c6910737487655dc4

    SHA256

    8d0798cc37b43047bb259d25c4467400e5783b88585d400d9cf4840626fa1747

    SHA512

    57139f5dd6cd11d7bab145c81cbeaa96544ba4a3b9fd44cccb88eaade3efabeb38dbe338005bde9589f6977122ac43c53a33dbeb08174ffee483dd973dec09f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ddf976abf5403c69174617740dca7dc1

    SHA1

    c03030dd6ee2365a1d26d39ac074af0885c33f27

    SHA256

    541d2acfbeafd51a7a77be8d399548685c2c19e4e1ad9e3ea52a8de377f098c0

    SHA512

    a06414fa7eb13c1f4dd3ee5fbc2609331a1929ef1bb9806a14840d8299d754c0188363dec77259a3977ecffed317c624e8e2c66f8f632aa0979a862f908666b9

  • C:\Users\Admin\AppData\Local\Temp\Cab4867.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4879.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar4969.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b