Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 09:49

General

  • Target

    adda9ec9c3aee17ed05e91b4f1f709a5_JaffaCakes118.html

  • Size

    86KB

  • MD5

    adda9ec9c3aee17ed05e91b4f1f709a5

  • SHA1

    c5ed2ff86b27513d4294488409efd169b20e012b

  • SHA256

    f1b290b3bb09de31fbb261ad3dcbe8cc38037d2a86580ca440ad1547faeb0e56

  • SHA512

    92d2ec86c883d596919f73cf17f47f786488fa6b68e1ddc4b09926f91a32d3c12601d9d1a0bc8f09e83d794a9932b749718983aaec73f12db6a007b0c7e72cb6

  • SSDEEP

    1536:DQsjYYP3XJcinYrq4uDFPRP9pzBb66GGMkueZkUQDTlaa3tcFdGCPLCYhsQB+pYv:V6inYsqFyGYR+Gv

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\adda9ec9c3aee17ed05e91b4f1f709a5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2960
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2960 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2212

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751

    Filesize

    192B

    MD5

    13b48a4884de2f1bbf698251491b3d7c

    SHA1

    b751fa58a76f3673fab743a655c237d2d33a9f62

    SHA256

    779fe6a388cd2d9354762c3ff88ea61dd7a7a4ec5a4d8a6837d0a8fff66ecfe5

    SHA512

    5fc9f342f4792b245e7bebb597aff100970bad5f665ce2fa3630fc3d15837f31b579e58683e3a9d6321fcb8602ed427d0ae74d3beb9216fc597ff7bd2311483f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    da32f858dbcb10d4453d202afcb244e9

    SHA1

    af53ad47b07b4491ad7c6692fbf74bd08965c270

    SHA256

    e36e0b1b09e061ae8344e51fe33c36d87bddcdd4699bfe83430782f2a416186e

    SHA512

    2295ab731cfeba544dbdd2b7b289996879fdc326d95b129a7d65b0d0bd1d7b609e6f9a865e8d141f22f7db0ff2475079ce7263517a24354a4358957281767dd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cac58699d8f94053b908cd1b7f383dfa

    SHA1

    c01636d4b53fd48fa778eb498ecc9e5a6d2b9a02

    SHA256

    febc2019d44aa4f43e34a03a0d5431ba876e7071b67af2ad4b65b4fe2c3828f7

    SHA512

    ea08eac60381f11114be6dd2a780c9a160b2ff091f761f56003be14bcd4295a9fe1fd6d660c5674df071ff0da46c58032546790517d620a4285c80e98407feb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d33425d3ccfaadf5d9a06ee9ebc45259

    SHA1

    ce39b0454fb92e230ca1efc4b9ca066494999e82

    SHA256

    2b54dfe77250329c688f4557d2e9e74f1f1a180061014816dd5a4c056277fc9b

    SHA512

    a06f3a7ad60be042a50c8056026587a803565b1c144a51a9bef3c217bc73dc51898182dda1f9709d1183061b7caba11bd9437f0c51c680fc0dc6a1fa5c0687a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5302430837d519bd833fe73632de73a2

    SHA1

    9308e3c68c8a8661898a85a6e527bc36c32da7e6

    SHA256

    a53c921c19ee9966d39de5998acc7d869ee3c647e2f628f31ad01263071e3355

    SHA512

    8ba8f09115339787d893e4c0bf44572de558bcf5081a427c9ca74f8edf84ec1659c5ae2225daa04b02d0301034a2331f514a977a49dae2459a8b94a1238396e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f9e9c1f82f12fbfded3275f5f670986

    SHA1

    8c293e47545f8690964cffa301aab326244a90f8

    SHA256

    773b28640e65eb9960f2815e299a1fa86858bd794522950cf70f8820648d8b47

    SHA512

    4c759782ab6e8d45bbebe5db15d3ee93f6cd4dd747af631a1d99d325313e0fd7291af0fae9b9ba373e2ffd6a76c9cacada153ca1c9a71f900b51bb93f607265c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f71578b95edd66f2dac12c7e675c8efe

    SHA1

    dfbc360c2705e4eb9f4266734d923b1a45fd20df

    SHA256

    8c60d30f04df54a5bf1bc7628984e6b35fdcad371dec4aca2a066df147968c80

    SHA512

    42e72a7059fb7992822f606b400672a419a9b0cef2a80079f8c9251bb458e0d6c9f4e161c5f5c4e1b731bfa7179430a90ed1d874d99dd6accb0d140d100a36a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa1fbcc7a162797ae80faa9f042f90df

    SHA1

    bdd4101f32cfea10be2271218f99193a11760028

    SHA256

    d8c65ed9ef8a3600bbe6b0d262c0feadde090d6049d9c400a256b4d6e5695930

    SHA512

    d6d7038e6baa91f4b6706fd11f8e07e2e05bdd1e7425ab5dc1110edade0966ecd14d2fe869900bf186a818cc1134a7933c3250fd0dd8eccf26933507465c75c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aeebab2ee6db3b906e4734c831765bd8

    SHA1

    81500c19dd3d70f34ee051b038049c57867cb78a

    SHA256

    e95c5070a698066a8ac8ebfec1477fa741cd6ef2a3a337dcb680fc45bb968ebf

    SHA512

    6291278c08660f0d8ec07b2bb323decc026f6679d0bf6a942a095caf1cfc5ad3b11471fbc4059202c14d9b5ad563380af54b9bd27c5a1f00a58cd4b765299bb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c14433fee8658c54e42bcbde0594d2b

    SHA1

    9e64c2dd337c8821a01cbce274d2ab18b36a9e0e

    SHA256

    f5356c5c8fd7591b2226b60e7ebbe34f2a041d120d618a878d9add0ab64f20a0

    SHA512

    c3133d22952bbc4f317f3dbe1161da4c60b8e57e43572efbe16128132d2ffc51af3ba77f5fc0547ff86e929a8121c0f82c31081c71ce5cc9f87af0348f743891

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb8cc0cb5e7df65c2b34514957792419

    SHA1

    53f2d6ec2036859c39dd799ac2d679e63b2f3711

    SHA256

    dbd1851801d747f4a90ad83213f2f03a9f90aafe25f19b346fe67119a9cef470

    SHA512

    9d239efcc56dc2d4bd0f4f63922c7175e95be721125f9e405c564f56bca02793df93e1e1520238ddb6b39196f332a7fbd1c4fb5ca0d27425d3d951397f36575c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cc4278b873c299fc9c84ca9f5912006

    SHA1

    625eac41cd630d97d49b03391be0b3888a29a905

    SHA256

    e8c4477b5017706670ba27ded1d8f5c2523cbaf379b1a84b01bf4c0a8ec7a3fb

    SHA512

    9f34c81178334748ed273bfa73baabeca841386f673124101dcd6e3cceacb741891bf24b17f8a68a678e0122bd5282dae9f7c17560591e608b32c983a8ded122

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ce7b08ccb427c83def40fbcec4bf3d5

    SHA1

    495cfea38c6bdccababc3ba4c2a4eb06fdb08cdc

    SHA256

    415da6fa3de69b38f6b47dae5fe4078c9d51ee046cf7bf4324b1c981d09f7f7c

    SHA512

    a6b309f1b570323bc1c3cc8d2493abec746a3290b340b3697477344c52dc197e03a7de12f4dd0474f238bc932d5ae7c96333775ee6882504e44afc90a8ab77e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3dfd0f1ce060c7bec7c9bd3c629568b0

    SHA1

    b226aa688b7cb79aff4644f67153d04300d27353

    SHA256

    85312e4132efb1274159150405996423da89e6fce39396c5da5fed5d0ea25416

    SHA512

    81c16e9eb192da200478df1f400c433efbf561ca3c76471e90f8c05d0613b1b0cfaba69c19cfb9769ff5cbe5745d36f241e9d9f70a7a9113cadd3d0b50c3f35c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2a8d966235a558e45fb7d321726402c

    SHA1

    fea126a3fe725f34b8e7b8ae3bbc19503be82890

    SHA256

    472f245b3d8585cca2e2b5b8fc0ee14f6f9517adf72f75f54e57ce95d749b796

    SHA512

    f976019f1b53f4a9ece900e4408088c66e8ed9dc1f6c52e297cf666e08b7f386619b55ae1b85e7aba57fdc8e31d237345897d53522c1f2a47d9fe21565b79446

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0204eeda339617ed1398f8f101e6db32

    SHA1

    5db9423184d1021063cc6aa79984959d096345e1

    SHA256

    8b8920cffb098d876dd78d3ffa688e5ebf213ab8befcf831edb56a009ab482a8

    SHA512

    32495e63769b4a876b410cc0fa1c4e5702d6b9cce9171026ecbddffa7f3627f51ed0b12927ce87783ab7e22941be5468942c17bc65f15bc70cbdd3e4360f0dc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15b2f188638877a8ca294d97cd6ae077

    SHA1

    816a8313c76b505c46925673173d236098578074

    SHA256

    d1ac49f2400a289462a50999c651ae049ce9b5408fe5624f00c07f0400b4bd5d

    SHA512

    e5443b1e087b3bd36d932efad492d7113e20e2a30fcaf93bba00a29147764fe4fb8fa04d129047a00142cad5631839ea07826c247446dcf090a8633641393730

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56b052a58c88c820a44778dcd725308b

    SHA1

    48b3f531fb2cb58a01231a34e3e4a8747f060aa4

    SHA256

    899928114365a3817de962534a789ba330e9778b43069c6669453b5102ded225

    SHA512

    96189d4e04492cf5630afab5600c604bb64f6d1cbf4c91156b69497bb953f2423e174aeb214c874f381dc5aed3718794bb74017e32681f60fac66491680092ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06978224558448bf730aebf0d908f1b8

    SHA1

    7240c896bba681668744091b4d5b7a3728dc5677

    SHA256

    2ea75984716e684d262cc6e5ae8bdb13f5cfa78cbb5b7a29b2bec5fd5cbbecc8

    SHA512

    4e2ae677ce0dbe02038400e9ca2dd811b5b9719ace73886c255b1fea276b1e8164e6a91aa3efab4dded1b4962384fe33328c0e09c6fd8c52086e91f20b074217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    849be9bc0e4ff76f09734ddaf707a411

    SHA1

    06097c7897843ffdbfd865066aae292066a86a36

    SHA256

    4403791100938bc5cab4622f26f97efd1adc601a66da67369e0250b81a7b285c

    SHA512

    7d8f1bd5949f4ed5b17381f6f9f1886175f07b540f6ec330e214697b2ada5cb58f1bdd0c5c14abedc085c3fd0dc4824a0c21e9baac7f3305f1ff7327b5f2d9d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10d2c0aa9686c4f0f3a430edf600dc31

    SHA1

    9ef2313274f3d74fc8e5b75cb20f3d5fa0ae9943

    SHA256

    c7273539d44002a0f1e6749e10e30c4d2a5e00cc683ee123ef5f37141ea75bd2

    SHA512

    ab469a4c10a08184db30718b1eaf938fdf8022221dbb41e0cbbbd76f2424064f153d804dbcb817781610c32e8227c6296262d15c7cef87ec84f21140c3bdc699

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d866bd76072828f966f54c389da479a

    SHA1

    10ed5e2eb25a4ea1e3d23a82f3b82f1243c13a27

    SHA256

    c77b0c160cd2ecdf3dccf9d8f660cc11a4d8085771094ba38fc4a2a7723c45ae

    SHA512

    b14c8a0d801971a005102da7d6a70745f6c603808fa19ce6794b516a8c842822295180bbe53854c227771bee79fcf37afcef62ed16394c407e468c6cee6f87a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e156268204255530ca3af89b518e585e

    SHA1

    f26001753626f99ea923ce2c2fef8782830d323a

    SHA256

    8dae8d09512e1fda8f2f1a680d3abc9127976de9b5cb3659e027e6eadb0d990a

    SHA512

    66dc294b0057404068034ba6764d2392a3eb4ceb6892cd7645a6f27d32677bc3baec47f300065d0f23c72ba6dfcad48019c408a8f146c3989d2d6f04d39fe47f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e880f0206ec91816b1abc5841df9a357

    SHA1

    f4cf4c2875b9073fb197a1d0e2418457d736c196

    SHA256

    45f4613cf38161159a5783b39908f31dd516b447f06aa56b5e318174c23f358e

    SHA512

    23466ad177a0971babe67804766235ea74bbb3189b315cfefd805208b3c57baf15d7b66b82fe3d644d514307cc1dcc16f678e61c8f07a317f7b0505eb5bc93b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    5d643e782706b6e1a7473aa680908a83

    SHA1

    c2cffb2ee1b86e49576bb695e4996e9d192011eb

    SHA256

    e99b70a9b6bc0c7295e332cbf497a59ed0f63661334396b0346676b19be689d9

    SHA512

    b0c53cbc671419caf9268f21d25f2376a8695a5aa36ec1c2be92e49261452c944286326ea29740371c98638ee9f58917514d5caa5c28b0b88db8de94fe767de5

  • C:\Users\Admin\AppData\Local\Temp\Cab148A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab15A5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar14A3.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar15A8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b