Analysis

  • max time kernel
    137s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 14:25

General

  • Target

    aa2ab9c0c5d29b56f907b6a391870e78_JaffaCakes118.html

  • Size

    19KB

  • MD5

    aa2ab9c0c5d29b56f907b6a391870e78

  • SHA1

    7a16c61a547db4b595a57877196cef93fb1922fb

  • SHA256

    70d7577ebb446c2d8aa4342a311587769ee8ab163d44fd06a91a1f002afa21c6

  • SHA512

    715d99a7e110bf9e0ae74d29c9c8f0980e1ddb57ef8132c32354f28ff52e6af5f3e2a89b7f3327569b1069fabee29000119dbe7cca00b0ca8f2a0fb5e5dbb897

  • SSDEEP

    384:RzONxY4crKUqf6/au20/ejwKQ6Wlz35JxmzrZTCD3VW0uMVzAqjf5I:INxY4cOdf6/a702Ilz34XZTKpTf5I

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\aa2ab9c0c5d29b56f907b6a391870e78_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    cc51e4327189add76bc8dc8c1744c030

    SHA1

    1a45501a12863adf2a1c82f7501e55cfe4b0399f

    SHA256

    71b49d2f869bccd5e69766c459ba532011af3289e4b85f7e92cca67b2bdc9e9f

    SHA512

    7f0aeaa474e3fe1c6e8447662df8fff41b6036d1032d58d8041a872d8c906bc44b809e7653e010520a75744442f0c4d78c3e92365daf30029b7b78b51c8764b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37e41def5e306cb42dc52f1a3ab27497

    SHA1

    7a9dec4146f09466d7cca48237368e1e8e99baf1

    SHA256

    a727a8d99cafa973c517740e3ede9d22e0743f5253c6128ebb4bbd5f6f80597c

    SHA512

    425acd22b94f778157c2c1c149f9b0ef92ff43c14233d8be32c3ba92727368a7bb7838c02d9559355719198346386a0d766999b218dd22923ea3c5d0a31c52bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7140b60772c0a791b9ee782179cfdb49

    SHA1

    b3e9882f0e76b7551ebad98263d368ffe34d7845

    SHA256

    0633b0cff8030901436462de735e923abedf6dbe62005e21635e0a9172a8e403

    SHA512

    b172763e2712ff67b6585126dc425300c5962a42236c5a3dafd34a1ca38a438b43cac2f06eb880bc1a949b4e501724ba65ea534202384313f904a818c802a66e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50e55b9bacb1a03c6fb92e9c8d152a24

    SHA1

    c6fe78e0765d0c70fa78a08d32daf2b0185bace5

    SHA256

    81e98264db302ce8f728b169a46c483e658b0550c9fc81735266858daec4e993

    SHA512

    b458d6e0673a05af30dd1f5c8c95616745bc75cec3e818f289e66b979dcd527b2f5124f96ba4672531ea7429added51c41c0fcc891cc1ae8a9271335bb48d5fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb38dd3a77026902f50cfbb141405dac

    SHA1

    ed14f3843a5b6af95ead8585994f1e5f4dd540d5

    SHA256

    c68498c3206366485817a36a838bb1c637d9d615840cbef5b21f428da93daf55

    SHA512

    bcfa0b110b89ce14228b8f835d9962f632dde5bfbb661afc6aa1ffea262b59c2eb28e6e467515b439033bed774f59aaaeb4e3432ca619a83759b454879022ba4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23ce8a2852c9204616d87d5639b686eb

    SHA1

    e747572a8e69610bd8d0411864e5969ca24d06c1

    SHA256

    1546fed2849152530ca3541f3d2f6a506c5be5a27c6298e32400eaed521d6399

    SHA512

    7614161131a61e40ffc34f6f87dee8c5602cf12f52c621ed6e555a4d03679679e6b2a3029bd66733f998cea87af246a981f53928deba825247b6ac79c3686a3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50f9b77300b623fab1c9aedbab01dd52

    SHA1

    99cf8172eb1ac5f9f657133efaf931b63101506a

    SHA256

    2f26f651a2bc8c2d668c61b1cca35068df47d21cd85febdf0fccf87b6ae2b70f

    SHA512

    e0f2f8df86b89704b049f9bb9c2d971114f0271f037bf73ae406861b6837e42252b3c6bfd9964d3196836a58ca8c686ed8da060c19c102a0b881a1fe6d578cfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b1a1cb13ec63395d745949be90bc22b

    SHA1

    dc73b45269a259f8440cee99c904610213172f0a

    SHA256

    60c568b7085f21497d84afc9326f4223b16af583743e61ca35842fd8ddcbb1e8

    SHA512

    aa6106cc1759bf503e2b2d97362864e2e453d34ec35a59d281246f6a6f89dd497fbf8996f76e7193746dbbdc70bb776d7c266645df928048265fa5ebf7b35cbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8cc335037cba273fc2a85d01b91a6e4

    SHA1

    446f06db63711b5827a91e145efe660612e8591e

    SHA256

    6cfe37fa9574bd7902c53cd62ce4ee65b8d49c405340664b93149c902cc24f1a

    SHA512

    c743f9830e2ef98aa3f1f7d0d2956735cc368c465b57d372f9bc2abaa0bc0c2a1688d1ee55d358a0c5f67a34aa274f65c58ca27837c25aab2b30766bbfe37b32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97dabf736a5839183cbb35dd53ae5026

    SHA1

    85e5d70073a9f5bc3b648ef42fe879d3d9ac8fb4

    SHA256

    757b22425e26cf4b59d073a80b1e46a63b70a9aa1c5de9cdf74e49049859dec0

    SHA512

    969fcfb53992d8b128fa2ec05f8478c9c5ca35347d201737fd63d6a7a7757d5909c937b28a4b58f77664843474d93310e9902de75e8a376722a9fc35474678cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    430834a96666e5a7df5994f2999072fd

    SHA1

    7f5b1b7e5f39795906c9218aef08c8ffea37a363

    SHA256

    81d6bedd382b499f3384fce4a9f71d422c52b77c9fea6f408df6193eb95ce178

    SHA512

    04d61f548ec1966bb939044817e2dba5857551bb5a2e6b7884924b85b768f7547eb6c928e1c3e21f1396dc719a97da462159c1978709580f97d268c3d38424cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1424d8fad574c71c2e80457de7680ba3

    SHA1

    94b3e4d633cf68de7cc84562efcfae2e4033ea2e

    SHA256

    32d731f381a7aee29848d15654c8244fae68c0328672682312d1424eaa453bba

    SHA512

    de9e386ce91592a728a16c1817d2b5a5dcf1069a612c472b505a6859ffa05e1baf33d166fec66176b4185293fb49827a8454cd163da4606cbd8e574132a978ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d96d771b74e21f734d55d1edd46edb3

    SHA1

    7af3810137c437e4421e4611d0c80001cda1867a

    SHA256

    3e94f1a2994f5850f50595f861c26aef20c357fff3a880c88e727e05f8da87e8

    SHA512

    83cbb789b2542ae52af4f1eb2536ecf3e1dcc462bd1b556645e4af2ed3cc02f5481b76da3f31a1dcdd492d530ae16928d7f448c17b9123c75c06d736a6dc3067

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    351643f16f2082d0738edea65a0eb2b1

    SHA1

    68b7efdb3d64d9f1c7ce10cea1f17eae02b66fad

    SHA256

    ce3cdd46ca3acded367af089e41301d2eb01673f9392bbe5eeace629120d752e

    SHA512

    ff5a8dc30246ce0e88680d64f9c305d7c5270fc3035ed7f8a914a4039ed7f2eca7b935c40e2a220809c916399b78f484af5739d3e413745bcefc6e5f203d18be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b00baee345674decd4de368c064e7de9

    SHA1

    783a2178d00a9a1aeb78a56591e34d171d79eb21

    SHA256

    84e84c84c9e1167ec2296b76a2f7a6b00f99d6e1647b209e987f3a61cfde0a15

    SHA512

    8c9e888747db61504f5bac39290f25901e66cc0b984db1deeec30970b15ffec70776d946a54362181378ceed2555608bcd385abf301287a408437eb1723e8b8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d846b4037a81afb36bb9e098ee050d4c

    SHA1

    df5b0ef7a87bb7aa5c52ce89382a7537d439f3f7

    SHA256

    c63cc2f3b14cbb0465b177d7c423dcae2d18be3632f997fb7343eca83ad40a23

    SHA512

    c863d755b7bec3ca7b5ab63411353a9fcd3cdaf89b04fdacad5da7b8eaf58f06f7daf51040368a8b569def19082893d0fa772ebf3cd6124a7b6de38004f6871a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62c3f5a0e1443db912988ea55eda60c0

    SHA1

    d3e4163c22a309eb65b2fd527bd9db393d3de969

    SHA256

    0f489a93d04d724a16d3563c31143d651b8f97bceb4d6160868da72c97072901

    SHA512

    0552df30c22c539cc6a037a3a32ddbce33f576cb7ecfbddbe99a9fddc3cbc7b24b3a51ee9f73d4ccf00b051ea84509cfe4b7710217b22b08faa3e7ec62f8c474

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b184f32af408554f886e6c76c2cd4952

    SHA1

    536f348c89e2fde316ea11d47cc171f6fdfb6f46

    SHA256

    4184acddcaee63aeab0f520392268059bf24729af1d4230bc6048dadacc00194

    SHA512

    4e79c892d1477acab4180feda826106c2451e21e885184794f017e15805eee48035866773b02848215f8e17ff0618e0621832cd29663dfc369567d169d466e4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    425756b8d1631514ff996b2956a2047f

    SHA1

    3540a9ea6232cab0ced9df2a99e03a6418d5a026

    SHA256

    f4447311d3ea9c59224d9c8e649dda7d83731bdea4947f4e72ca1342ee9a85d2

    SHA512

    eb42b64f99df69ae6b27b867f8d22aab6011ad8c2a78417b123fec812309d8480e27f72c76f72e45dadc9324aa0bd8c3b5ff4d41b16e80393afd84006a49bc59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8b19ece74028a9154878b1202f2da58

    SHA1

    134304a405169cd9eca53900fd958643b8adf6d5

    SHA256

    f736b05e73aa1a87a9a86999afc914f2119464c8b40c36959b2ee0fce56c40c5

    SHA512

    eff42ef0c4606a9071a971ccaa0c95b08a1dda2e520b7bb311c8f2559840074ce829f0b8d4f1fd7fda4e066f016592390ae87bc7a3936bccb1e47da0ec95ae1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5942de904d61f3eaf565fd947202347

    SHA1

    bfff5b5adf91ea885bc88bbdd9e7771b895d1f15

    SHA256

    d5afb7b654356c0ad9819c55438993ed54af65db44abf55aec68da5eb5cae36f

    SHA512

    da9a17cb1eec7ee9fb0ed1979ba2c28065cb8dd5768f2ac46de3a4a8e1ce951dfdcb4a2149afd4ca5ba5062d4777c0d7c0250308c00d47849ee30ce85e9fe73b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b448f24a8fa79d868f5829b4ed4034db

    SHA1

    c4d62cbe53266e391fe1dc4565704ecb7c0c9f89

    SHA256

    1444d02483db6427f11f7ceae13cf65979317e4a2191f5514317a893ec59690b

    SHA512

    d0a735b66a40592be6d1488c9c46b87d9d92eb8d83da7316677964150c882711ac52c89f75b5c97dc62a512afa07fdc202ae322ad52039cb99e9aa47311affaa

  • C:\Users\Admin\AppData\Local\Temp\Cab3027.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3137.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b