Analysis

  • max time kernel
    134s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 06:15

General

  • Target

    ad229aa1d1a2d8709c2fa97fe3f61d8d_JaffaCakes118.html

  • Size

    94KB

  • MD5

    ad229aa1d1a2d8709c2fa97fe3f61d8d

  • SHA1

    7b838bf5e237945f164c195238562e8c1dfb3a06

  • SHA256

    e12e992f82bc7b4953376a78e6d42f8e7ddeeaa3e40b15b1c9bc7f3dc5b30797

  • SHA512

    b64ed2ef4e1585f86668934eea7310bdfa6f8fb748bba8afe73e765f9b2485759b6e0094b350385cbce0d2125fbf9495daa690262d5ea41eb0521a777c1185f6

  • SSDEEP

    1536:WMLiNirGf+B7LV4ZUnf/KF03Uzy/eFLFWZcRqy+BdkrY8mgHC+qpEyW:WAiBr8BdkrY8mgHC+qpEyW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ad229aa1d1a2d8709c2fa97fe3f61d8d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1260
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1260 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2728

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a25bc9f7a178a83b4ba23a921a7f905

    SHA1

    9cfa1f7b7a9363e5a3e219e133c1f83899944e0a

    SHA256

    3638eff17be352e73d0b102f4a9ab62004ddde92dd95e6ea6b5b425d1fbb36f1

    SHA512

    70f1bc920f66c2e77c5147e592ac1f102ffd6f537e6d0bd40a4dd1cae6a5956ad9cb1881b0096de9d91a78ef513eacde059b41bdc8209b9c3844ab8b087c548f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    903ee15158834e43f6e4cc7acf65e15e

    SHA1

    c32109d6f6c6b1e9e372783734db90e7cc3f9b93

    SHA256

    b8e5a8e4b46917f631135655ab520ed43cb64931b9cc5daac820ebb182b7e632

    SHA512

    6b955d76b3d53d9c61d455ff8f0451a934e9e975319732867bc344eb3fbc3e1eca384179a34a995216dac80299a64f04069e2b216d2b6fc3abb025878b93c30f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a07e09fe1ffae37870793bf74b74faea

    SHA1

    4781c86ccb270d22d5a572bd9ac1db07c5d1fc9b

    SHA256

    4c7393cda7340064c29542bda125584c6159d1ee1a957e03162d298bc53727f8

    SHA512

    c56b529739c4dd374683d24bf062e24a809f77c12f53c5bb0f19f85a415c04b9ef6c325b83d00cef2e29c9aad940ebd24bace89d0e28a16f162da6d6970e3c5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a615f1d40c6add8eb20893416b3647fb

    SHA1

    8f1e3be6730e549d3337525e7eac34235d5c9141

    SHA256

    cb648f51304e7e996618d0707d24f6d7ec250d83f8c991eaa39a1e79b39aba6f

    SHA512

    7ac810196c606fa59fcb186fa6e0856b6e98263d3fdb76109f3eb61497b6ee9454736dbab0aa65923cb06c18bfb0d59f57ca96146cfc842fdb1da787843b4ef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    faab4ea1edb6589c362bcf8b8351d313

    SHA1

    8fb5c8c4b2d068a89ee5780859bc2cdf0d2aeee2

    SHA256

    2943451a0b3d91ce4ccff8763e3b265f8a1398d116e04448feb504ab6c3fd7b5

    SHA512

    999d7eb0887c6b09a8b8195662c63a525ddf91e35d84da612242cca24025a3a3a09da61f023d4006392c5d76c5fd0c37cba8598b91a2dfad699e660411423432

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d02e8756cee57eb55373cfb027f58190

    SHA1

    3019b7d71d5694e7b74614ab667ecfe0ef31c6f6

    SHA256

    b400e1419ccb1dd817ba4dbff1d742395c9e99bf08ef840eb1b3597b10c24f55

    SHA512

    51a129fc6d3316352ca2bf994b6b30756b68b0e1381e3dd272c8359f46a603db5e4edbabde3c270896f4e73eb4690cd20a11f4bdcf8fbe7cc3c261803f7e1317

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    016ae96877afd1abffc682947f088954

    SHA1

    72c0e84dea19fc228e72ce6217915260ced72a8a

    SHA256

    525bf06cd3f6ba57b248153d74fa41173fd0d851acd498e2ce77c7c50bee067c

    SHA512

    88c7cec5a6aca349e34ba680fe760605278778ee21b3f65223edacd2cca883f8b3a6c1fd0cc5c18429f12a13ca27608bbc593fe7fc27a98193d7849f14456a35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a676aa32fc7053bb2781f6f4c686605d

    SHA1

    231775913139419c2d292a310a5504c42e993996

    SHA256

    a2221c9b7996202b8428ccc66ffb1662c607a20c4ee35daee5dd639085a0141a

    SHA512

    7ba88d18d50a18be02361f5a1e01cc70e068c6f5edc79add10bf48dd207c5aec9f0e9acd8d076a54d7ee56aa527d291ea1040237ccbb81de4e29ffd9322d9a37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd75a0d34ecc48cae7696152fee0a014

    SHA1

    3b12061eda8f872de732e73d2dc3e55ddc921a88

    SHA256

    b0b8e325273085e3f4deab4f03e6b32e513c21bf7b486382253ced66c3944bb1

    SHA512

    d2b701d1f8d9b1ec15bcf77f140b237be951790064a3c3c2d08eade2014a809e4f048970ccd77504f85fd99ade9cfdc16dbd7dcf8f48a80d60dff803fe9934ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93b4d013d8e9197ae66dab23e8724803

    SHA1

    fac4f595d9a737f0b4e2625a3b44c5d6658fb82f

    SHA256

    68a04e9e8afa8caf87a0165d877f3ac6e5697d06071e5cbe5e4e3ed76832ab11

    SHA512

    25e5e9bf69b377d160a98c96e0f3a7f498d6ae31f92a96573368fe79ab7193e071f24d36b05a11a013f235b737df1493af3d51b7ad4eba4e4283f1501d96052a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2dedac545ca989648e56380c43101bf8

    SHA1

    2b15b45cd8bc7bd84c662033df7a48f59b82d7b3

    SHA256

    0abd1847504d44e5eca8691cfac1b4464221465c0db758c336cd7cb515d9c907

    SHA512

    f9685ac257ae0758103be8c003a8af9d71d57c834d8ea158a61e519d4860fa0911f5f3af0853c6d2e4a17aaa70ebd797a89ce4d45a5aa3eec50003e91121bd4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a02caebaa615d9b6bcc734cec601442

    SHA1

    8788449f41861f7206238aaa8d9beb1c5da36be5

    SHA256

    c07b6fa8b0d993e5879e0282b23c3ed4669d1aca1daa22f725584a3c389eb355

    SHA512

    6e3268793eca9a72ac2337c7ce2cfe7f1d30566d82eb50daee4b3eadda1250d3d8e352d7c1fe7df58e59379508c1bda7c4395a1234415999a1eeda258cec5374

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3676ac46863384c0ed8f75ea12b22c32

    SHA1

    a4d6ac97c8725e3d22c71448201507a61525c692

    SHA256

    58fab39c2733fd2c6a2e066fdefb032b6b3c7d7b58cc2388eaf2731ef740c2d3

    SHA512

    9fe43e4c705ccd66968884b3485505b6399954031dbc1768aa31a7171f55e9a6a2a6caa924c2edfe00d1f13426f5d28836acb1260b3ab023a19dbf54bb5403bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f14addba32224d22c6249433c7e63813

    SHA1

    ab42423d15374c13f622514965d3c277e1d3ff53

    SHA256

    b2291883369a5add992358620521eec7ceb7776b39f65280bb26d5f2fd5c9ca2

    SHA512

    a5f975a72550d4feb1cfb31a3ee7d9aaafd2b30618db7b40fba50b1266a2e148bcd474188bd9d0ff2fbf8face5028f97e11ad514e2ab818ee6385c7283b5f6f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a034a44498d2e51c8f9b5d318638b75

    SHA1

    79532280ceb7c177763da089de98a3a0339e5e3f

    SHA256

    3b7e1f97c22dac8d3863490caff7f47f86f91b3e3d1ab0322bf66c70c1c4d0f6

    SHA512

    6f3dcdb3c18f4945d579fe6d57cf88336b53eb28f74446ffd6dc53319c98b12f9c64eeafa6dcacf56f6faa2371d43a304948b9cd5120afd3bb7b8ecfdf1e508e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f80ff40b54901d7fb7bcc37f72019b7f

    SHA1

    1c63c95c601ea8956b15ea70027f49534d770473

    SHA256

    2fc480dff61a38f7914f21e5b415898793635b83214a5fe4837b1c2008952642

    SHA512

    63fa65ae553b306043787df5470113102ddf8816bfaa18805da5e48bc07c7d39a056ac92069a6bf75d168fee8995ad814ccae138b74845caf6ab3156d20913fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30af962963ca41cb7e13f8f0d4c58b17

    SHA1

    cc6e84d11b208edf51463ee4836f515efb15dd20

    SHA256

    27e079fc662ccf5f3cb771520a49b658433c6a88fd62f544320f24022978a80e

    SHA512

    28bdcdcd6255b1d20ef75f3030185b05c52f3197e17adfa397dcb5e554820ae4315842e37459c0ec4ac626110f25c48e3936e00faa285fe194985b8a1288a377

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7b2b5899e7063638429c29a88db5f1a

    SHA1

    20e91c71b32c525911d69248edcc4fa665787283

    SHA256

    6c7597ff8c269f03e273737bc00d37077a0b3acb67945492b6b947d68ac667de

    SHA512

    aaa7537e4eb8dc23eb75d176c7128f2d70827cc9a182534c27e6a01020202de747c62222880579ea0c21c020473a1aa82790fbff24ac9ba540bd7b94788aabcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0eee39c7ab6641204acc063ff9c81cb2

    SHA1

    e74b16103384839898bd3c5cf5c61551ea7fb761

    SHA256

    7145011bc96f368f3c8f2894eafb5c140b88f0a9f82eb8434ea383a98535b314

    SHA512

    b9846749732312be2d5df94b6ec662410d6233565e3b2405c0d4649943c62a0ae44f513a4bb472d0937b264d53bfd74faf6e45e12f165e2bd96fc88a64a58fb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab22303dfda72d22ecc4710a5b84bc97

    SHA1

    371183849b5f61cece0fbc861ded61ace8345819

    SHA256

    ff76e36896c0f916903992f5013cd428f2ceac528afce4b605a9cfc1d9ea7982

    SHA512

    ed858c3d01afeb6a2c300c5db608a9b3c08bb62ce9d57ee0ac04197e877f48561bd9e71ba66be9eaf2f6563a7845d55f3b1e794b7430511948201708991e855c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A8DU897P\075-Stadstuinbouw-Zaanstad-icon-400x300[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab9232.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9321.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b