Analysis

  • max time kernel
    135s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    14/06/2024, 19:54

General

  • Target

    ab32185ad55bb60657dc82a7ba3578e4_JaffaCakes118.html

  • Size

    36KB

  • MD5

    ab32185ad55bb60657dc82a7ba3578e4

  • SHA1

    1a80605e533eac2e579a2d687c561bda58f3f1ba

  • SHA256

    ee178c72ff31242f52857de44c39400cbab5c511d33e74d01aefc0330b53cd7a

  • SHA512

    d38d8f5b0b92ed0830354cd80699fe1775519b9176b9abbfaf11daeaf40921d958f69ac23ccfefade3c0a110c1628b8c36b36e358f2fed09e7fd06e280990a59

  • SSDEEP

    768:zwx/MDTHXKX888hARQZPXHE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6Tsdr6f9U56lLI:Q//bJxNVWufSM/s8oK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ab32185ad55bb60657dc82a7ba3578e4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2196
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2196 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1844

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          1KB

          MD5

          0905580629d85fb977cf48d4681e5086

          SHA1

          3c7bf678bedbaf83ca720ab00fa9e84884ba8009

          SHA256

          72fd834aa73e1523e40a415313d7766832dd6497ac0a5d4cec9d36e852b248cd

          SHA512

          db9ae7da2801083074e54d499ef7741f7120b9a8abdd87c13e2ceb35520cd7290a4f06b6cc9c0c1060f01fe2cc0bd95b8d362029e0df90a68c17f197a50b02f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

          Filesize

          724B

          MD5

          8202a1cd02e7d69597995cabbe881a12

          SHA1

          8858d9d934b7aa9330ee73de6c476acf19929ff6

          SHA256

          58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

          SHA512

          97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          410B

          MD5

          51be88697bc05afebdcb97b57e5abd72

          SHA1

          38fe22389b64496705254df379890dd55c384f38

          SHA256

          d2de9e5e5964f55d1caf712faa9f5f8386eda35544d0bd045a6c40f772edce29

          SHA512

          3953678786c70c42f2bc38b2fd7fa825f543a4d73b85a2f6a005f7c517cbb0991c0ad1110b6a50689b7481b0a4d820c3b423009d1ca31050f21c3561d0a15c14

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2f3720ac04b8f336ca546b72f5c89de0

          SHA1

          06e6d26ac8491bb73dca5d0f1f4979a2e9f8a043

          SHA256

          daf9192ab7048a3ac9c385c23e6cf03346e20575a4262073b10ca1030e56961c

          SHA512

          b7a68cbe59498cee91200ab885f75f276bca4888e869008f1896f4e4303b1ab254549a1aaf2a41dbb2e05e0a737825a3e5bce7f68ec884cfdee55f67e0c6649d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          19bb90352d4cb84ed282add58a6f2c62

          SHA1

          ab5d338a9ae10b2b04806b238e9e047d9731dd0b

          SHA256

          95ef029f323bff694819fb554e3b985dc3f7780d86dfaa1e232cd929d5ec5c10

          SHA512

          7ecf838f8bad173ce7e93725792b830abf1cba3a0a214354eca8c2a95e83dcfef333d7439535e8fa49d15c1c48136825eec2d2793fafbc07e1e642312bd38fab

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b979a41fb2315008a737b923f9a97a99

          SHA1

          74160136fb6a4667629dfae155456722c57f3474

          SHA256

          a285eaa584b98e1719916bc4f2bb249fd2608190cdc7ae0f3dfac964b90dc855

          SHA512

          9c2e80bbb6117f1c7fdd78ad1d9705bd1582db71372c28105120f07732a8faa4d1c6e7ad9a21e8d8c93efed7f071d5b7faf8815894a3181bd324ad4a0bc73911

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          006521f059381e71950533bf38d9bb7c

          SHA1

          03a968099abba3b00883599df4fdb1a97611f576

          SHA256

          8cf03e7fd7ea6dc90486bf56298b30849931c18dd4ed3b7f583066d2d650e17e

          SHA512

          a54daae9a6623e197e986a78c2806c66b9f77315a825403da7a20f4040d07e8f69534f1c78c590a1b64beecb98ae1f605bbc9469381025af34be56a5fce0c825

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2075a893be1b93cd8f16c9e1112a14ff

          SHA1

          be57f18df69704789873cc60abf786aede069e15

          SHA256

          3fbc9952957246bf884721b300a58c2ecf96ee2b436e761f78aade1aa8b697e6

          SHA512

          72082f51b6c01c020bd31d3f0b2eb4ea6a326dea2d2e346f1e2c7ee57eaa9802ea16d24b1012358aaed0547785cb20211a89904aee0d956f505e72c8c86a8745

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d8a3f439cfe6362f63602e5f3a4d0822

          SHA1

          5dbe6f8be06dd4e737ecbd9186dc700731ebf711

          SHA256

          5a51af403356b7e2ad15b1765864ac841762ff95ea2932e5cddfac42080c84d6

          SHA512

          28e65eba4c996c7402d86d6ceaac5bbedeba61b97d85b52c655bc101deb70f2a0a9f442011904508eac8897101fb10a80fee12fb56cbf25f399a237dd18e3835

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9d4329e81ed31fc9b0cf2340dcbf04bc

          SHA1

          70e5b840895a1f5fa010579bf8737c09fd5822c4

          SHA256

          f460417400bfbb7a9b96bc47bd782f3e5ee6cec2ccd28a73e14f841235c3de3f

          SHA512

          af651d8a249f8a0d248f2b506ddbfb56e33487442d1fc07a5e9d40eddb2d344c07bd94dfece5149730dda97b1287ee0dc8b75cdac4d3562c4d524ac9976c9b3d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5b7247fb78f5fc7911433e7d35d4463d

          SHA1

          55581f3caebea26ae9710ab902375c04ab7a2008

          SHA256

          8d8c469720509a1401622b4dfb06407db7563ebc2444dcf527046485f9c4d90b

          SHA512

          b2f08427dc195fe052244b95f4a6e5ef44cec1a9669f96683c39fb7ff437ae5f26de64a6317bb6c963757a66a94fdd20ce95cbd35d4eca8b728bbd10c5042e5e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          261571b7f3d853430cd468d43a0833bd

          SHA1

          6a7a1d151acc3fb6ac87232164dae02c75bf9886

          SHA256

          2762b76205d964e388f3303b66645d2db5e17be80070ee63a2aaa39bb8b2936d

          SHA512

          e3d7649bea037a2ae8ccc429c1eec0ce19de3fa4c37d91ce71975f47939023293722c5cf9ca8f2f47e2b8a204f33ad2bf79f9f05a7fa88e53654862f278d62db

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e2b7cee8fff96d920aa7311dddcc60d8

          SHA1

          36f25dc47415a4e1ed7b1007683ae261e36ffbdb

          SHA256

          b1167b406dc2fd872a6c8276eebcb2d9a4b6904e3b43ce2cc032b44ab418ff59

          SHA512

          234ddfb131dc5e93c7197f04bb05338918048227730d60e972fb74968dcb31b0c6a47e50c93274185f68deaf9bad3d2608dd8f8e664c9bcb9f8a81d2ea578742

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          59d390b7a6dc1e0684d9720115f4e976

          SHA1

          f01aae09fe6e84294f0f460078add85f8eca3375

          SHA256

          5998eb514ff814a1988e88f36b5d2049ab330c59f295042a7fe126999234d356

          SHA512

          7133766efc0e654ad1d7d484cf59171479f3144b9c61800d1d0f3e7115ca4b89b33c396a6d65a9d5fb91280c615667c81b4c118f3718f6895aa45bff8e6c32e3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7b3d30b802e2302556ea810125751de0

          SHA1

          47745f70413bbeff4f59bd656564c766066c270e

          SHA256

          79ee8309cbc08a454dcba8557b427d49f2233aae7387899bfd8459c20ca32dc2

          SHA512

          22b894bcb91894bb64dfff6ca71e1f809533bc3077b23584c097c6a27ee308f8446fad1db6b43ac74703c61d53897f10fa78070722305dd844e50945f9f2bfbc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3348db7b69ca80a9cca3f41126e69b38

          SHA1

          c2fb1bf38e2ff1c757f4f21c169d0a57454f6a15

          SHA256

          ac05f855aace76ca1a38084f110c158de482f6e56e22a9d99cf9677b0265d7ea

          SHA512

          94536fc8b914e63b097210a80804b3dec8ed790a93ca73efa9aed5d345e44db3e80b446f54d8ae730254b85f6ce93ba6e00105381324e6f37a5bd0781b7d7d88

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c1a0c5f472e209400caee34076986a9a

          SHA1

          c33d5ed05089f1f11640ca879262baf6d182b794

          SHA256

          00d6591ad5d41abc71050cd50de9e4b4fe444c0a857eda422973f2006e180a28

          SHA512

          658f520d589cb64aea64e77c4e1cdafbd1e614aeec83911a4545a4f8187209469ec22a2705ef32173baee46c79839fb5cde4814acc64404f87e8db7be7269519

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d434f562cbfcb01182dc7ae2640947bb

          SHA1

          24564d2bc7bb9da21bc9c00667a346b9761015ad

          SHA256

          5b160160ed8953cb5ceb54fc757ba5d374f7b2aab0995f546f40e37823a9b088

          SHA512

          3c0d60c77d528a50789397362e63803ebdcb76dde6482d20f6daa457ae68d6793dbd7382688c531b95e9c3016bbc1dc98efd0b889f39e75f1179c95bebe44bc2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          93c54ef875d9156e691227a367ce396e

          SHA1

          b0f209e5a190ca66de0d333d8093b4a4e4c0369d

          SHA256

          c2e33ef0d673d733bedea49b3b53ba4dc0887794aa7a83d90c104b3489695dd3

          SHA512

          5ea7bf2b24d6e2e145cf57671a3e313aa6f9385458cd512770cd2063bf38004c0919ce93d06c76e8119c16f2c7fcd3a8a4877413953052b2f424860b7e9d9084

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          84406abad842d0b32dfd7cfa14d516fb

          SHA1

          43804661c43cd48d419defb7f97a30bdd97031ac

          SHA256

          9c82d641cab5564576eae79b837d7babbe25aa1249b19249b51f0de7fb05446a

          SHA512

          777b809323bda6e73e096bf7f4712d3ad4283ec5b3e702bdc87f4199d099a8515d13bbf3d52a7982525d43b4f821e2c9c39f924350dda8138c3891aab2d0303b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2339244dcf28ad4a8573d0441c8c563f

          SHA1

          257fd41a2673ba70922783edc549b50f4cf38f3f

          SHA256

          423f2b273a9746fb3b2074ed5987cdfaecde30e520079eb404f7cdbb340e25cb

          SHA512

          911b57a76e749379660b461163e89e24d0e8b1ea86b8b611490725b30a6c464318d098cba83ad48c5a55ed7a033c629da07dc7e3d7d0da56ba1ea7ab5eb7cccc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fc06054f50d1e9690e7011298168f41b

          SHA1

          3acd2f18e7c860af174bfbaf1b34a83ec82d82a4

          SHA256

          0217555956536efcc9cf09218b2007ff8cab4966c7fc1cb84c1b4497715c0c07

          SHA512

          8e22eb41930f4831307deb03150e629c562f458832faf321c453c43a3cf0932ec7d58f5148a34fca000176e174d40d9278f6f874e0fcf7b2fdc750ccf705fd83

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6720c18b74e2925782a23f9ba35b9aa7

          SHA1

          9d3ac415bb2d65b658108cb730caf2bee5303489

          SHA256

          395b9559850654c120ba671ae387c71a435fde77e2dbc7cbf50a25dcec6dc760

          SHA512

          8549e275b1d10659f8690e83b05cb2c2f30ac1a36b3fd813c31ab301fbc06ace337c8e65c9ece644aea80c16ebd87e498d1d36289bf860f305939deeddd0a944

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          794acfd3de985d4813d6c1b26d00e3ca

          SHA1

          ae434bd5319bee4dda88381c2b84609a19b24ec4

          SHA256

          2925f1ab5e087df765553f58d60c74556c96b13fc30a659b63c8de144d9832fc

          SHA512

          01b85aa6cfbf00c5ca3e1282f4bb4cbe6c2b07c70fba38b08182bc0754fb6baf1335606c9e25459bd782e4a4b78c7e8f65aa44e478d7082f7ff41dba11045450

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1c44e5ddd560ad541ffe8afdcea6c11a

          SHA1

          636ec4cbdaefc12503f52173e07a345ed61e5f99

          SHA256

          7564c7ccc511792e3584da5a89bfc1b7bf9b62c0f0b4e8ae6326dba32cfaa4cf

          SHA512

          d3bce761de0c6ae095d66d1685b29a6d5f2135411a621669da9c63ca53ec16afb744fc0f85deb514956d562fc3e29fea5a84f418b9bc4c297da0164bc3d03714

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          85d34441ff5e32669ae11f48ca693d32

          SHA1

          9db5537a90c0b05aca444d98ae5ed3fa431252bb

          SHA256

          d22a22bc0c2c7a1045681c69d436442eccd4d1db6fa2a18f66f8cbef4687e5cd

          SHA512

          970c10eb4ef85a7144040a7613d004756be32b9a04e0ae838dea190db57e688784e379a9a9036e871a759d71124b5e4a0c6ad9c63a58c0452d004ecc7a022d74

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4f2c1d2621edf846c101874511644c11

          SHA1

          9bbe42872243bceb5802ee1e069269a101d0da31

          SHA256

          45418ba04e6891875928c6e95bf22e7d2eddb742be2e4c867c4b04aa151cb773

          SHA512

          55c0c4f19c266dcc57de8bab2283b68b0c2c6a64dd2e01d9380bf96336cd5de35e3c96ee9904551390d51cb4e4a0edcdc2c855d633e5b73e9ee7e72988fafdff

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3c8a69629cc1745df227fe37955c054b

          SHA1

          56af5330b2f7d36cfa561e3e51e878118ea3df69

          SHA256

          483615d29ea0722a307f4e084255d5241c1e3abc72216cdac68fa9d957abdb96

          SHA512

          9a0c89544cc99b2673654264cef2168d0baf43b7bacb34be4674cdad77035731784f10183cccd8d81cf9b34bb096fc40077bcc251df4b701e0b1195a1216aaa1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4bed68da08ca95cd458242128fe5827f

          SHA1

          e5c08318c09110322e8b0c1c95d89698a40db1e6

          SHA256

          4842b810623ba58f4942830f3c8778800ae0b075cbb0ccff3b07affcc68a40b8

          SHA512

          78505524b1cbec82bde87842a0ce5cc5bb994784f6b62aba7da26f9e50d1e287f6f3f9236928676b04efb72fb4508f18eb715c5827cebf491571caa31e126f18

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

          Filesize

          392B

          MD5

          b127d3fdf770819918a2045a86bfa4d7

          SHA1

          fe1e3b8e0620acedb837fa0ea451c625ee1d2498

          SHA256

          69d70b0790de275eb748edf2e07144d724e588f36b8df1f6d4ef218aff2acb9e

          SHA512

          44f590800a155fb0ceeb37ba026cf47603aba835bb6d5efec110f3ed82a999c055b743372f7d680cb2dc5c3969d1baf34d013a206f1ad4bc4505b7836ff8cab5

        • C:\Users\Admin\AppData\Local\Temp\Cab79A5.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar79A7.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b