Analysis

  • max time kernel
    146s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 03:29

General

  • Target

    a3adc18c9291ff64f58bcc053df9b695_JaffaCakes118.html

  • Size

    50KB

  • MD5

    a3adc18c9291ff64f58bcc053df9b695

  • SHA1

    619c31f12f22c6e6be6da41d09fd223d01f0805e

  • SHA256

    fc62471114194d92548f2eb5061312913d0276ae132f67b6af0aba7cd9177dcc

  • SHA512

    0c5e504e52a5cbf75273eec4e4b7ff01599b71a2b108546aedd9fd8d851a47d632e602b01b3138ce2bf1254b2d1d0d4350fdcac025a3a190a176fb8197ee9ca5

  • SSDEEP

    384:zbNcCt0TnYaS6bsFYejFE3tHaK65IULPWb55ICKVzb04JAIBCCEakFNnI9ottUT6:uVEQpepE3tH1Q4JwAYEoxiB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a3adc18c9291ff64f58bcc053df9b695_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2376

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1801A0BFF52C676E5F51CA71C5350277

    Filesize

    947B

    MD5

    79e4a9840d7d3a96d7c04fe2434c892e

    SHA1

    a8985d3a65e5e5c4b2d7d66d40c6dd2fb19c5436

    SHA256

    4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161

    SHA512

    53b444e565183201a61eeb461209b2dc30895eeca487238d15a026735f229a819e5b19cbd7e2fa2768ab2a64f6ebcd9d1e721341c9ed5dd09fc0d5e43d68bca7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1801A0BFF52C676E5F51CA71C5350277

    Filesize

    252B

    MD5

    5b08d41246469efdc562d47eb10a833a

    SHA1

    184bcca17919df7eb4635c7ef67bdbe56f2e5c0e

    SHA256

    53edf5815bfa578e732463dc7ab149da2c6fa3825ff974a0d39521189ce39ab4

    SHA512

    13f1fefa677ac5ac5d0d3855284d1ba2575249ea91b87f578b2b9027247d19ced1630249ba2b8b2ddffedfd11e20c2acc50fb594fdcade58b6eac99ec4eded2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    68858c28e0e6b21f48881f40616f9cb8

    SHA1

    aa5f2980798964603ae9a19ba4c1c4a5fea973e8

    SHA256

    93ad4fc8737edc109a196a9573759df47b679fe7033d849896be6537c623f1ee

    SHA512

    eb2623c503dddc9f9b214e814f1aed4f33c88012828f4ef0d64d3797cdb134cad5d378b9ad1766efe3a0e456f27005c80713165e6821bab18c75e23c297e6071

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dddfe86340a139aab2037f02c24908ce

    SHA1

    e25563ec8f6e3e58bfad3526f66b5cada511a11f

    SHA256

    e68f369300712dd739b764ed601a1bc5698f8a8b6eadeba27f05af2657ba45d0

    SHA512

    4e1cecf4170fe6123fa50ebf47821563ee0756f6b5a3b15c0f97dacf5359a8e45e03598d9c77e783f83f2cd7fc17cbb36f4adc9c4a57a31bed02284918abecc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ebd262950a0b12250c2b6be88635c0d

    SHA1

    9953bff8166acfa23752f3ade75ce60de4e26295

    SHA256

    48b0b9c312ec8153ffee18cf1e40d7e136de1cee1c5a4abc1ce9f6da16ed3019

    SHA512

    fdde24fb1bf27e510c5992f3c41daa35daee05e92f94ab14eacd75e112bf56d7f52eb06ea4d41c4a8ec256a7fb1b796497dc0062a730b8230ec7e9ae3e3c83a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8dec1870f2140fb90fc524a719d0d1c8

    SHA1

    ee3575ea1d0d8ebc80d752e626f3e33716ee8247

    SHA256

    1c7e524bd03080316d9e664353122ebb4c0e2d6930bf2ee4ffb10a5427304885

    SHA512

    4409d371b46aa03a0fff9ad925cb919c10ac8fbd1ee47b9620c69e5264adde39426183288b39b4df604127ff746b6b67a98f381a51390fac19600549a1f3b63b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd8d0216c41cb0d7898d1e5f65282839

    SHA1

    bfa3207a20c9c48b1b3e83f62d97066a92eb61e1

    SHA256

    7a9f70a17ec11bb498b5f38bbbbe442a41a217c260e1948903ae30a117856b4a

    SHA512

    fc1b52fdf633b740275e34787b98d09724c9cf7f76505aced5745140f1184387a0a5de58a5578baa3fb1c5cbd6e3bef58ad54097df1cfb4e215e939863c9b0c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    449f61a5c2c28cd772717f1f24cfa93a

    SHA1

    b75036fcb000b8ecd42a6720c5ed8efc6f051481

    SHA256

    69d6d1d7bcb114fa85f04a407523d20ecd05e9c59ca7612510670aaaeb6412b4

    SHA512

    c89c865fcaa650c49a32d0a64ea88bc0b320494f6b08270b4edea9646cc88fa2e8757400637a7c7d39ee78da4428017911825bb3e340f5d31a23b795509311f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82679d705decf098635737b4dba25111

    SHA1

    76342a00156cbc81689c760c641a2aa873cee167

    SHA256

    6b9aaa10fddb0e6b43c0f045c85745b1712c9e6a8069ebe38075677f330c6786

    SHA512

    467cb9658acbaf9186507100ab433749d550c26140d99b6abc1fedd91799d2ea7d59baec53aa45bafefd5c8bcce93fbb97655f543ab3f974d5fdae74f910facc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44f488c97430e08df9dbf41c57c1e8d6

    SHA1

    91b40df1b0a8d3b27e565e04bf8348ecd25b19d6

    SHA256

    5580454bb2e241beba0ed0c95c76b0a80cd33d953902ead4b4fe0d0b859ee181

    SHA512

    22181cc951564240c97135dbe464a740555e832cc9a1c47fbbb490bf0c575b0a2aff063549e8e2548d4369490b43db8136c35fa5cb20ff692c8f25aad5146923

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05fe63d265527442408adc45dc90781a

    SHA1

    9fbda86041faccaf91840e64660be102b7d71b55

    SHA256

    975ade15b55489c6ed24078c2ca2c82c203060920bb7e132028d8b729a5e4bcb

    SHA512

    e2a346c7d6b22045c8ccbf538e57414bc6e6e4fab9b23a43f9e9d0af402847e2bb316d1e222b1c657ae9b9b94785c5f2a19d4d0eea583500be7850b8dd39e153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b8324a66f4806adcbdf4f3c9a5e57b4

    SHA1

    c07770e12d27f9ddcd53faaec71e45a8ce0d9c27

    SHA256

    3387176a4722387d546d69eb665b24eaed809ee6b06ed88c60e288a3e657e8f7

    SHA512

    c0d6cc102a8d1c65e088f00b477fc2b46611214b31a5961a37c91d574fa52b1b9916a24f45f15daac7b17309050aa7c4c735a0ba2b91e1667f13a7959a712153

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    383e0f379f3ae739993c426e256c6add

    SHA1

    e7766e892e7c98d78a2cff7ee3ecb455dc68ae90

    SHA256

    184e74a99fdae67734726a2b99730812a8716510f661fab661cee06ca0f46fee

    SHA512

    110a91ffe4638cb2bf08741b52c3a101d6e34f01e037adcd525bbe385834faf420a58b6e65bc5899ed21c4b5bba1f3a02ab1686ec749aa0a86df07211d464519

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68085a12bdd614c46b3bfc1f135d07f1

    SHA1

    aa1e1633def2f8ff147a86cacf85934ec3d32980

    SHA256

    453cac20a2fd9328e559a026022d954c967a27fec06395300fe9458b74804107

    SHA512

    2f7cd9c7a8a6dcc354449e2f0b22f0c2542c8eda3d2657af6963286cc962b29ed5c220acf93b5a6b7b70829e25bd58210525fd9109e3e5c58727e15bbff7422e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8f1e190dbc701b246cac5f85cd73b45

    SHA1

    9ba13b0c7fe0c35a209b9a56610c228025277388

    SHA256

    ea4c19ba6ddacd54872c3aefa13af826e733fc04319f87bc66e5a29b289c1c90

    SHA512

    f7f4622763174ad2075d39be416f6a03771446c8a77dcbedab8809520b034315488c88f761d4a6f36c886c69e3869c154db3a6cd8d9c2305bc49f3f0fbc26a63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    477e2c05e4b151bb29d23db515102774

    SHA1

    ee140b56262f0bf9e8821f14def3f27dd34d6458

    SHA256

    2ff8844711bd57eff5e22eaa4fec8e2c27d8f45a86f08a8f9e97613bcf6ba100

    SHA512

    4a231c8bf5771c9ce2afd873769a0013b5f25283b4c379e562a7233d276a5ecdb1f5499b391a29db772a34e77ecc266888d8507e8ceff0f4c864efbd72fc77fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d1a8d13b43c346d2adc867bda21b670

    SHA1

    2491fcceebca4ec53b6f5ec13f93830a1435e444

    SHA256

    fcc4864b298530908c21b487685ede799c5ff33e9ae6eafc087f696f8e4ebb29

    SHA512

    6092b1beba87f97d1dd182a384e453256bae82233607109d70128344e6148c3c1c5d71b4c68fdce3900030eed250b46d23f52703fcbcf19759ed0aa925760b54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81d886d9b6fb9ca4b4a97c8b2e32ec60

    SHA1

    93db88620401a324325cfe5691693022ad5183ce

    SHA256

    5c93d35ba7773718f6b13550ac62a28cf5860db717d05a358f44fa6f79f50cec

    SHA512

    ece8a39ac8971914ae2b125698853c113083c6843eb12930373ff56ed25b08f3e7e51c3156e6900909f5270054cae1e5786ed2d788e28687496cb353c018680e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac621c83e37d6b4c4f9ad06ab033b4ce

    SHA1

    e58c8571aefaaa09ab69da78320f3b92d4c9b088

    SHA256

    48599cc534d4ffd5ad61140a79f1e67963661bb3b9aac9f1a8ae44cc341ece43

    SHA512

    5318fb7664f0875ef844104ac6223a4e7fe1a6fd55fc167006ae2079fe29ac2c18be7a39bb86c543aa563bddc7347ac08d99910b1bb7bd5e3437549442679c0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7f4caa89ad285567db71f3459e6cb3b

    SHA1

    15a3c9856403814b7226eec740b9494f7bca7259

    SHA256

    f69c544955cfd60d62faa50ffed857a4148a349d0d7544b4206e373022c53e45

    SHA512

    0986a4342edbfcdd999e42e512ca1a74fc3849cb729913980cc3d5bdd8d1693126f2b502b5f5a365308f222fe852526b07da51eed1113c11e3d91f8168b84786

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ab259d6cc5899305111cec2b2cd3b71

    SHA1

    ea0483ea3213f97bf906a93cc40961b672ed6822

    SHA256

    4bbe7fcb58c784358212565c978d9ca2420ee673cf744ed416812b67deb58963

    SHA512

    b58fe8c22b228af82b40c76d72b282a78a797a87ec83210bd4da15757f0f59d40ac956a3b6c0d8af00ece1d891190c42fcbd0743702d5347d6b16bb4711ab6cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3442b44a7a00401fb6cc45609804be6

    SHA1

    350faad548a904ab8bda4d7d293a8152cf23a0bf

    SHA256

    bd390ed3779c7c25114d12878948db4620157011ad448c598931d03a1820040b

    SHA512

    52493a0d3e24b32c0abcf02918f58aa13ad6dbede1df21b6c71796289d1b6220200398aca3c1ad5f2e96681466e68d2eecd9f037c673806d883b68d9045c55e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d309fc71655e6c6f4dd83b4b2a918473

    SHA1

    be1049985c796416095524bab3251eddd2a92f0b

    SHA256

    a2e16be88e9f23fdd0fc4f9b6274d8756d065f82fcc610bac3467a09d97b8382

    SHA512

    1c6f0a4d82d166697ea8072f24c04dfa5703ee16b33f61b8b1e70421a5134a7c21ea3092af6ef824e6ab55c9768f4a3d9c7b251181c2269574eb7e2f3676c68d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a52b775599459b52a41e71704b82c04

    SHA1

    7cddb223a33173dfc6312f96bca8a2731236b6c6

    SHA256

    f1b09e072c3ab2a9f3ce82d04d38e65cac056cc29990a74689d1f8071685b019

    SHA512

    273b05748a5077475bc1b53f0d77d1d8d8da97a91e5e1f2f8006b28550c353ccf4889db1c52ea529dddd0fc1849551b2a08e207c6382db306ec12724b1300bd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd51a2ef8413103e2ec1d60308d0dff0

    SHA1

    abdf9302d9d9d2feb3c94b946fde53c4c4f626c1

    SHA256

    65c6576dd288169cdcba71ca2266117ba4aeee70826da0c3495a94bef54b7d14

    SHA512

    430d5bb5053a053f712ede9c01c4c967450f97a22f6fef0de5d060bc0d1a519659c74db4695c54e5d8a574dcf33da4ff30b8b034dffe670c500e6a7716d90634

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ac77495ceca012c08e42a6549562b1c

    SHA1

    f22f5d6b13322543fd40c882edd0faeee1fb23b2

    SHA256

    67674a5673cd822837f1ac610fbc3c8ee270ceec28b5079bedc193dc09ec4a9b

    SHA512

    37ed2e153b4536443c851efff74c5a915855c071fcc55e45e3f3ee6d4d3407f598822dce5cd63e3c5b5b59cbc047f52f7fce76e247f05cfdfeb0af2e4b09a51b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75d28ea8eccdc1f2a2b203dead61b879

    SHA1

    27969632e6883b21918430af8ff998ad71dca87c

    SHA256

    d85860616f6ee17d341dbac4141968f46fa8369844c2271f23bfe8bcf7473aec

    SHA512

    7940000aafcaae3666e388b9ca87bda5b0f125386d3368e23a7f9b6de7f62f76bd02ac544900ba3385f7a1046f220cfa4da300f53b58e9b0374bbd7e39297f86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    6c41cceca2d2bd85daee309f3eb3556a

    SHA1

    bee20d62788a702cb53ad85d8e7352d10e1a52f9

    SHA256

    ea1635202ea6da211fa23869ecd67fadc05b81ad5d5f26fdaa73efbb300a6b9c

    SHA512

    bfce593b9cfe479bcfd6c8c3a25be64d7fdf1db0506e362b5fea1b041e3d7118eb02dc3dc30ca6b3a25f5f2a1c535784455ab0fa2400fd50f2c485a498a1f57b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab115F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1183.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b