Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13-06-2024 06:24

General

  • Target

    a4302eb34e789c8b0b86cd95c401717e_JaffaCakes118.html

  • Size

    4KB

  • MD5

    a4302eb34e789c8b0b86cd95c401717e

  • SHA1

    787184a8666d5701e467d4f9e904c3a6fc61e477

  • SHA256

    3a637d36787886bfdbe555b6979e45fbfa075b07b4be0b69fb6482a9e113bafc

  • SHA512

    d99eb3bafcfdae3193f5e06186ee714d14ceddbfa89279eaf7c07e5e758643c3059075e63712cf3e72a62d2587b45cc64cbb9e742f3bbdb407a897ad71578343

  • SSDEEP

    96:Pk7hJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oLd:Pk7hY1aEFHVKtF37sNjtXATIQFM93pDW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a4302eb34e789c8b0b86cd95c401717e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2968
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2968 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    74a376b667f28b240661929dd2a20467

    SHA1

    204d21fb35b3fd6da43cfb250c74e23c9699731f

    SHA256

    a605e633ef4a5b17f851dad7f18396a0be9393002e120da01e78814e95f5fccf

    SHA512

    5bcbdba0979f8d68d6725d9359aba725e941ca5ca5e50dea75c696c37dead1c0e1f6e606807f1ee61194154aa9f9350158ced33861a3d9f5bf73e7b200858118

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eed2a82b4978bcc0cfc554e53db36ca0

    SHA1

    8a6d2fb90f87cf68e75f68767e31d5491aae69c8

    SHA256

    b0af2ba4f5898e3f1c3078563ac7c62216ac2eb57425ce0dc981b2d65dce5dab

    SHA512

    688c9f03899677a712dafd289272c7f5a7e27fe5732b6cf5ee6f1ca6f9649f8f81584407131d6b9d614237659182c556bb158768fcfd0322e1bb66a46015ca47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4cdd00307991fff7e26896a4f6ab26d

    SHA1

    1b807e6af4ab4095fc1044272fa98358ddb1cb39

    SHA256

    cdc6a3c241834040f2f2b3846d8430859e1d0338257902a737de57a27d695856

    SHA512

    ce6e2ed1f71644ee9bc4e82ac4163c87969a6be32986691769968a693a97b7b2f370522f56248c384b367a101e181c0cfbc1f0123bf3dc1b7c7ef59cda083837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ebb08f3443645871a5ce5c933a6111b

    SHA1

    05be0c7fe37857ad75bc2437efc8058b7add8c12

    SHA256

    77dae2513406e9b0b58565310019f2b05af7028a2b2b04422da0ed116d40700c

    SHA512

    311f718bcefed5e3871b423b430566640965059ce6caabfeeab87ddfcef09950b8d04871239165d7df91f8c4e220dcc98ba933ff75f3848cf3c4717fa1fd7e96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf099a268595c139d0e3f414daded16f

    SHA1

    3dfe00f04ae23be8fed70fae0b5074092c8e0d6e

    SHA256

    3b829243a9a685dee9f274a710767e002731d073385f1dc2da3dde556bf6eef5

    SHA512

    6aa33338f760ca984d3389845f724552661079fec492978444fa095f2e53c11aa8928141d4d658e798fc8eb7759e455773b21349ea67930d2731fdcbba865466

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e07d7219b080a61f66decf8a288b3caf

    SHA1

    ade47f8d9f4cd2aa66d420d88730ddf17788db5d

    SHA256

    01a185a0eb1e74994a7e290e38c689433fa131ed3e2f66b28574a055a2d7b344

    SHA512

    4b67cea7b2fd7e0e1c6623f7f1765f6be9214069886d6a65e794f1b757c63ebba1720f8efd75a490052b921143ffdf02cf8f2c88580f04058d34529175cd8a02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdcd5f6d0098401d7a22d0da226e9d43

    SHA1

    e121bfbc55a22482c7636f91ee748b4fa5bdb20b

    SHA256

    01a4ab06a54adffb0beb44bab09a2e6a8de5de22d65ddb34fbf4b5510f473a65

    SHA512

    410e0d1a337950de51eaea7de7145fbec7cf5909d327d6d11eaf30f15e70786fdac7f496d7466f1ed4ae86df24240330ab52e3140f9505a38cef69738907bd3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    507b3e91fa519f4d550ac7263eee1367

    SHA1

    4944cf04b74d1a147a86aa3c93a2d42b8913638a

    SHA256

    48abe023470db16a59b9f594bd72f2a4e4193aeaaa4fb025b817e913891c512f

    SHA512

    8e583531da0f736fdbf411de31ee91cc6abcd0cdeb58078d1b4d73c18871fdd86b38ac4dc1a3034b4ae36925bf77ba14a66e15ca760d3c0de023cc01a12a262b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d70a420d9c95b0c008fb3f13fc758c4a

    SHA1

    e344825f0715ba10b30115f9afae5cf4fb410df9

    SHA256

    ddd41f8024889aef0e39fa26c66fcaa0a1cc4cf3e0cb3881fe7931e53ede6ccb

    SHA512

    5decaf983fcc3ee2cabea1433bc60ea3143bd64ddd74d09677b2753d75a1a32f37bd3b1139f2adbac9c5f1b392a673386ab98272fd0c332da8ba398437e0015c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a4ae3725affcb6674a9d24c96bc6245

    SHA1

    0a76eff0d72f736acc768378869f726f93dc28bb

    SHA256

    537e6c9fc0f062aeaf64a1f689a1201aafb8cc47c1e803e6f0abe256b46929a5

    SHA512

    d465f3f80c3fc887fcfca4cefe656970dda6d111c9697d1811ddee469925707421f48411ecd5944714c1ddcd65cfea269e63e8cb88b7e843305646a42fc01317

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d21a69f56b2fa76c1f7f046dad9340c7

    SHA1

    d9e3b103d119f181b14825db28ebd553b528b263

    SHA256

    b0aa1d89322bf75a9806a2179fca7b8f1a33695db0c5a25b194f7fe36c932285

    SHA512

    62a4b5e444047ec4387d8d68be73a7c184c3c55601dde2ecce8c53709392e73d3e41ff8c0a7ef73067ed90dec86af33baa28b19fd9355b1584e6b8f09a25f16f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    576be4a1d068e296ada7d09d7b1e1656

    SHA1

    e1b2e3d2dded8d5471ba7d305d9cb45da1b504c9

    SHA256

    f9c77201bb028ab52a1bab430d0efe5ebe2cc8ab2048d07a9469553d843226a6

    SHA512

    1acda5707e4c0fc0514cda0a22fd8b8ceb0a9378e55e939c41ab386d26fcd5f3296ca0ab84d37e430768e0321f8f22c9ea60a855b664a3a78038b76ae6b0d98a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac2470a0106f50a2be92740cc2b3dec0

    SHA1

    bf0be1220b67b3185dfa78e6a60255dc9040bb03

    SHA256

    4c89f6d31c3ebfc580952eb2fc4a2d49ad99ea42d23da9c0ff15e1e87f3bca75

    SHA512

    8aa1a806a93466cc423816f93938429e2cf693b8a7d33c6473ce795254e0c5259f4b8c80e2227617aefc7e2223d15e8950a2cd12896057d61f3db022fdcc3472

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22a06ca84adace50cc5dbcc1330c05de

    SHA1

    232313cd9c3c58a7ce048a41c1f79f3905694959

    SHA256

    7c322a3603a42835747fb4f625149445710eef5651f7384489a7ad8e087b7eaf

    SHA512

    5493738a7e38c50dbf2dca3b4eb4238b8ae4c797b6c3ac0262be36a468f7d6748f72166edd886bb89592af5a3b50a57bc0c1f3f001a3d7aaa2388e0a04269e68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4d46ac01c67a543b98f7419cbd1f851

    SHA1

    f5419ab615f4e263b1578d5198ca2ebf610dfddd

    SHA256

    fb6bcc0efb87d845f9f85e668240d077ed0dd2026c814ce26145b5261d211034

    SHA512

    3ecec58fb9dd517bc61fe89ab635f0cd9b08550492fe00bd4e559be43c20c97a91cb61dd8772b18b5a1bb071f68dbfefae90fa526eb1227bb115d14af2a24eb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c98662b02906d4d13a214687959b538

    SHA1

    ef1f675b437619e942488c31f63fbdd6ffe63ef6

    SHA256

    c07d4bfa9c7ca03e066d2af059ef34bbfdfc205b64d918e4b16763f3f08e40f3

    SHA512

    9a5bbba288013784ba2076792a498996c747691bc46ea2b2e891e056241ea066cb89be4ea0c0718bef252a5b57e5e622d9632bad92d186659a58e0eaad6f71bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8f7ae71f026cc13ca594610b241c298

    SHA1

    a50189c7dd8042c07d75a439f41da35c02cf16cb

    SHA256

    827e902deeec1965af65831abfbc0b28b23ec560092d8917be8c5a6f9323ade0

    SHA512

    d4e1eeb9860e973df6530b8c842e28299567133b5ffd234b517b1a6b5a1a390e1989fa7dd6b2f59e784a27a239d8d942d2f02d3f4f1bb5cae6ed35680682901f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e70787398f11de0155cc38ed30e7a8f

    SHA1

    a0fb9a72596ab0093316fd643f2f8b618e889b45

    SHA256

    2d6a340375eee8c00387b5f7f64d3b4161a64650e1e432afff8192fde46bd011

    SHA512

    6a08a232f1ef330fa5ff2e708137639e2e2754b6a25641163d04b54d475c394d8bfabbf28e6675ddc11ca4aa103b04fac7e3decaabac657bff4c888b3573da67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7665b7cfb06e364de35d6d3862130cba

    SHA1

    3265b1c4d7b9446a9a84ce49b8329a20f2485d25

    SHA256

    3192cda483ac11d1e380d1f789926ade42e8d5deb7b978ece931eb8e215ea2e3

    SHA512

    04626927ca5c2a8f5aca36ead842e083d2c4de253c71b0cc622941d30f6f77ec2c022c01aa03b9ec2b927537504048a1d7089055a89cf730bd0bb14926aadf36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ad3b3855d043c71e2795cb1969ff9a2

    SHA1

    710dfe761f66607f6557fd0f5399f28ddd9b7d19

    SHA256

    3437fd835682fe0e6343291c505acceec80f39852e6d9a7548ad4ab350a1dcfd

    SHA512

    2e8bca8ba2669740e845f419416ebac56b7fad6bf2a0699dd1b46b2052f5efa1870bb2e40cf92aa471abb7a5e8d2d66c89fa8f3e5c13765322f3ba44c6d50e78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b85299d73a635ef884c738b9d14444c5

    SHA1

    17909b347b0336d8e4afa7d82310a24617f0109b

    SHA256

    c27b4c994e282d72451212fcd4b018e81a939a38e19a21dc82d3c6266634c8bc

    SHA512

    8040ed8ee2392fd50b0ac54ef89b06ee87dbebe08a6c65b0211bb556da88ce7094fb259dbe4ce0ac4db803c653626830f7c580b0904c11490b3dce8825a3e123

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab31AC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3318.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b