Analysis

  • max time kernel
    138s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 18:49

General

  • Target

    a1d46ca5d1dd3a4128aaf74091f63f91_JaffaCakes118.html

  • Size

    4.3MB

  • MD5

    a1d46ca5d1dd3a4128aaf74091f63f91

  • SHA1

    30d1c94f977b57a2b0b93e69ed35507d28409cfb

  • SHA256

    effdd1c1c57245f1fe49e94f2f17647bed46667a22748f8536779a8d493ba6ee

  • SHA512

    99ca1e28d8678b8bdc7f7caf4e9685019ce98c6bd58e0b99df38ae42d8e89515543a7a6f0d4121c0bb7b980197ad6f19a413b44388c0c46f2fb66210029aa0b6

  • SSDEEP

    3072:aiJeqyeeR5OmsvEfHo8lsvMXRXr3j9N0LRp:gXOv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a1d46ca5d1dd3a4128aaf74091f63f91_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2212
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2212 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1696

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    b565a2068ff2037ca52b2e8573669af9

    SHA1

    1290f5796fd58cbf0f8931b96bfcd9d65b038552

    SHA256

    0643a9b7ac3b15dc479ff67c8f58c598acf9dd49a0dabbfbbec31b7e7413fded

    SHA512

    32366a486e63f63b8d0eab0c0431f9d3943de8010f31e37a5fa28599954dfd7525a69321fac4446854a2033bd01bc878b072e1698434b5b728e0cbc04fdc86be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12d6ca916c26baccd54acb8bf70708d8

    SHA1

    d338c59f7626b165fed2707bd61e536ed94c87f6

    SHA256

    1cc42d516f1603bfd59acd9f578c0395d1133e3ef659623f2e6556da89a4516c

    SHA512

    f0e395374aba62715cef6c7c67837c70b1ec62a65510064dc707d332676e533d7c2d2018a6a8ea184416dba175ee623d790a6ade4e25602c24647a66a3523d96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7770a885e38cfd2a65fa2431f5be9eb

    SHA1

    ba281ec58de539ad92c4049a6ee9437b4a9a2b50

    SHA256

    507267d4386886f82f34e4a2b0be6df1eb19238e2218345c09e218d9d7c16357

    SHA512

    38fc15ec9d15f92dcbd85abe954342748a5fd70239306460649f651c0f356642cf98a0aa6090d0bc64363aeb30d6dd40a2f1ebc5cb71b33ef74a6900e8f31015

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad23af5256af2d6dc06a5db5e9a4b35f

    SHA1

    6c0b6ffcbc6eec1722e92e5b2929def945865146

    SHA256

    5bcf906bb3e58b6411c4917fef0531c3a443c0540be5fdb113d0e16177bebc72

    SHA512

    5df4b43056122e529a85b2c06eb8d80da2550ccce03d7aa22338499e9b8ad5f0614e1063f304052c5563ef22704976f99a3fb27dd5e6e644729807760f38abaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f29e3f5979e72d3625686faf098f2bad

    SHA1

    f4d8b7d73d4e42cebd98eb371afb41198f3e6118

    SHA256

    31793091c788a07b7934bc924ced5b40f9cf6f9cf495f18452e4d8c6700ee8a7

    SHA512

    ce40238332e0a3f3b54f1fe5de6ed0264f7dcf26eaba917fc09346f1b4bf0464723e1a1a088d051dbf9e9ce8d2591d8a50dfa97f9eae9bfdee4405fea883ef86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cadf4919e82f6760c25c229449d95e5

    SHA1

    67713f5706c4c760f2bd68b183e4742269cf669d

    SHA256

    aeee389d7e586c20940bd673242dd27410f0e587774bc11d7accafda92c33fa3

    SHA512

    2c874edfa07f0417c02054a69ff88382eb7ccb3642ab9bc190526aceb4082aa552f1841ea707cd51e5ca664a6544ab0fd703c53b793ddec4c968b7d62dd52092

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5beeb3f349402c875df619be143eeee0

    SHA1

    22b2e656544c9e38e10333d2ce04b4e2dd3df5f1

    SHA256

    73f5390cbd978dec734de62520310106c2c7fb42c75d15e032bc2803eaf53e1e

    SHA512

    cbeeec2d5283d06a117391700c091c1671fa891d020bd4813d04f83ec09c755e156355289d16737f8dfb116d67ceba0852e8ee6eb395d0d982bbb41a0d2626d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45a045b027879aa32dd49f73edf94229

    SHA1

    863bf50845ede8399a35724f2363f4e5974d0c67

    SHA256

    0aec19a46732182c46a207023a5fe58bbd8a04fe0608c68d236ed3493be7046c

    SHA512

    071d30331c6d3b1fd737b881e40cce343377d2018d78d05ee9f7df374b072340a78ebae4267e25a82ba869ec32253a3b0abe69ccde86def0302d7bf709ef73b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ff3e7ca00d4e5d95ae423f9354ebd23

    SHA1

    03a06042f4ef708eae36242642948a0631d6d5db

    SHA256

    b79be50a03cc7a466bc4027755ada1f4f64e3e27ffa1a0badd3ac8fffd351422

    SHA512

    4fa8c7b2a634ed81463e19cffae3659d239fa2ebf173cf05dc9a684730c4466ba0897347f6792aff336f2a0d4bde44ad28fe8673e5e1ea1615316f41e61c335c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1eb1a3a215130767b710d6df3eccb5c

    SHA1

    d1df0953c7fd0933f05c55b3acdc7ab3726d8d3d

    SHA256

    42fc0db4c79aa2330de41c597293ffe55719dc896efd8abe86ec0ef2ac0a2372

    SHA512

    f744ab17af15d56b833c8bc1a62f93b4d02b5f66ad357e48f69bd46146650b3feb6a6181e519ea1e648e35ac4fa0da35c570c68d92b4eeb05ec9b8a65a70448b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a62dcb94195d57b589365160b959aec9

    SHA1

    83c315c3673f0147b7e6ac42679310476de34f9e

    SHA256

    cac0c1ea19fd95447e43270b9fc029d1bb4e8ef5b9c65315482726b5e02bc632

    SHA512

    f6c4360f4893e43188bcaa64569c941e9a3a96d10e203729ab65a709bdb19949f85a89146492afe6ac791edb4c1be91015b944a8aa9ba8ce8ad1cf5093867485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    904515d543fbca97bcd2c8dcd9feb1c2

    SHA1

    2f442f79d4732ad6fc61f2ffe0e4923ec409fa0e

    SHA256

    5a1ebfb46bc1ab2184150526368f3f5f548ef34be71de72ef7e4d9633c6f5f5d

    SHA512

    5596922fda6d21e05e9b1be95d5b3052f41dc347230ecadb8c57bd855470d7b3492d5ad2114bf5b4dc301d01c5c7477a402873b40b3d476a82af049f72143d0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f86e4b7451eb299687e2448a86e6c8c

    SHA1

    dccab8eb4ad748ab08c6120b36cd6dae4f6cbb4b

    SHA256

    561c20022bcec3eb639540db2f38c4ee6a808d9f6c2cbf1f647726d48bc93357

    SHA512

    cd920a4ea5c7421d04dbc3ec4882a0b554876ba78f0ace8d0d1ec2059e36f7c63328b759d6a7442fd6c57f3ccd1a70eef4f194e0929e007b3241dda056239724

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f24a962e4c978e4ac45bd4b85aa640e6

    SHA1

    d96719e337015714602e2390c2e7a0b4e24d79c4

    SHA256

    2f2dc9c8ebc6684621da42a609283e5543e8cd604acc0375c7f6a28c9454a8e1

    SHA512

    c28446f3ffd59b746c19beefd663cb9cdd47f0dcad54b5196a181c755c59423eaed587f2dd58748ce379299bef7a9ed3a28a440b480539aaa10b8fcc41035de5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6106bb063419540cd670007196738a0f

    SHA1

    aa3d1516d0b046eb42171128ce0a2b4e175adbbb

    SHA256

    ae28bab9ad2103efe424ae446ec1e70f8cbea74b6a3ffcacb9d50f101d37330f

    SHA512

    0b6d2ae6290b90d1632da4fda73db6f749d135a2cfd2cafe109ce3f66f4bf26ed2723e890f208a477de1964b02ab947b0985d3c75efb2fa9ae0e06261ba83016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c3e96cbef50827811714e62ff93f887

    SHA1

    57f77550234c3461beedc35ba06d0cab45d76b49

    SHA256

    e8b394e302d3a48bf829afa3534a6bdb9f850b7b62fc952e3e9507f4c4cfaaec

    SHA512

    12cbf668e67e6c48a1c0789564a8f13d0dd0f92417ee88d5348f9a91d3c36a0ce147096a1477a09a1ce1d7f3a2f547b4347badba8487f2dd13a5262f75a769da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da480bb3299f396878d17bea480c1f19

    SHA1

    fb8fd731f4567398c9cc43b76866bd3c69c15aeb

    SHA256

    7ec2041035cb50193998aea9ffea428bd7ccebb8c2942fbc96c6c9826c6ab755

    SHA512

    65a6f7517eecb7e97bb727b2f9ab22d65e7950739dfa35a57c2973318342fc5edb2dff13aeef96607240c9e1f75d1a03d58fb3aff650660602a70692652eb48c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d038169aaf181136d1f42067ab56e5e6

    SHA1

    1a670a78c681c08b8093cf928f957d6c1d6d6152

    SHA256

    784a255106417dd62e36b8ad4f7de42140d5afa55fd675c4c4c28d15ef961065

    SHA512

    26417b0e4674f4242bf015ca99b891ce444e4be823e32de571b1ba4d19a9fe449268ff5b80efb4308edc8277be9e5194edaca6916009f8a025470700b7468242

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b38d24549a75faa382b92c27f02c3f6d

    SHA1

    f52a94da08d92c8b773dabd81949e40efe8a6404

    SHA256

    c8eed6d2b1c908d9bf305b30e6b892f7c4ffc208db8b26450a49e4217618dc06

    SHA512

    801dd8950b56f3653ae841e203ea78b531c7879f63707a1f9bfde7a756dd45e654e1ea9f45d6e26f81d0b083e2f82ba085d8eb0b530b10597f8d49be422b8faf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61f24306db66e23a23b9b8c4289bb5b4

    SHA1

    eca8a35ed9431cdbd6880f7b8e882f4ce685d938

    SHA256

    4b7acf35c1ae85ed6b878056215da03f6c651e80cf3c4b8a3d9f4b4ffc16dd02

    SHA512

    27988a879de5d3d76ea4fbda96dc9c3f74a3b19e2a14ed28ce88f900572d3e96d9424cc9ea8ad5694f694e14146e20572ed3cffe8654336af64bd2a8be0edf8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    29cea9cb5f27eee96a6ed72562e1fe15

    SHA1

    f98d38bcb4d1879ab76223e6f35b65c35b4f2751

    SHA256

    318e8d0015356e18618502175e19b35d23f7b7e802b555ab91faa94dae829201

    SHA512

    42022fe9e8bb19ae5166b71a92ebfe441b7a7740a3b9d91a568ad6fb4371a4d35a85a0dc2c5afffbbdf87d2d9ca7ced96396a4ecfdbb414242fcc3ed4bae82a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7662153a423af468270d96bf78f9c770

    SHA1

    b2a7749d79d20df36937e9971f57f1195435fd17

    SHA256

    332a79b655d69733940efb9b3324d3e0d1e8e68a2ca4478acc354b390c311084

    SHA512

    c2f048986eac0f1a64a29fb25f051fd76fef093a583df16cc4b58a49d062e88a2270859301708669a66bf70cc0c733c126b34b5cd5a4e189967a9e57e1a297b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5MK8RSJO\stats[1].htm

    Filesize

    506B

    MD5

    023a6b42adde31d4c6bdd07b0419eb44

    SHA1

    273ed1141a88a5c3d5e6df223850bb587a571bb6

    SHA256

    61dacf8b561d397f5884b675aee037bb1446338a7a7e70eac6d24c16bca6d18f

    SHA512

    65a1d8a56cb227922bf99cef4af502d058b9bc4a90190ecec0c4fd0dbf19e7f8d639714f7ddc9d685de2de19d78b6eac50f58e4f50c3dd26ab247e0cc8dec84e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZADZOIQN\scripts[1].js

    Filesize

    4KB

    MD5

    9843a52c0d0aa74fc3932786da1c08e4

    SHA1

    53eb1eb4d6ea1ddb99b7c70cf2cc1c9d6840fe8a

    SHA256

    e5e9461e9b011f638acf9005de291211e659038c03678ee90d768eb7a2c798cc

    SHA512

    b85852b366e3b4f33aea529bdfdb1fb208beb8499508617539de900160a7229d06c0a3182a546afa79211f7b5b3d3e221ff92bfb5b7b1a82047b3a3f8679696c

  • C:\Users\Admin\AppData\Local\Temp\Cab1CC4.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1D94.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b