Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 08:34

General

  • Target

    b7ac9a64a31842324ed14204ea65b84c_JaffaCakes118.html

  • Size

    12KB

  • MD5

    b7ac9a64a31842324ed14204ea65b84c

  • SHA1

    2a44ed594cf57677cd2dc23303e477a236076f25

  • SHA256

    a6f97657da957c6d5d0d171eb52a050814324d9720568be75814519a25aca17f

  • SHA512

    d04e6c0b631fca72441e3f2b18dccfd8af9df15739a128fff8ff8494ae0a03833508f87f6642471b1ec6ac2cfb108566449a4081a655a04ff0f63c4cdade456c

  • SSDEEP

    192:K4wuYyDv5yW/+U/L40xV4D4VClrpGgi/b8wFaOW42j/0Lre4X/UIe4q/UMDe487k:lw+lxGQfe

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b7ac9a64a31842324ed14204ea65b84c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2860 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    5d8e48c8715592383e57a89535d676ef

    SHA1

    428b66a2e4afe3f975ff7eadf20bdf3000ea6217

    SHA256

    964544d4e6b7968bafebec59352d68457bc40fcec5a82408493e811def873f0b

    SHA512

    1537a23e3b288db26974c2c76894d46d5fcfa4efcb908213e4e22915052eea1a3a9fc8db5976eb27008080447478339e58ebf7a998b436e6f8fa9fe2d40fbdbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7d0f97e0e765024a12133ead95d75e1

    SHA1

    c3d631bff2b5a956aa712cfc8f27da3e3a652508

    SHA256

    d35e9332df19f1d30a5c061f301ce2112ac9e267aa08773585656390309424a9

    SHA512

    5265b2897313d2c969f5673e1c1e5901dbcf6c71c14a8ac0d5851ae63dfb17a9917fad543a448f5f870bf7afd1d2bd95facb5afb04dc41490fe1e2b7fad707f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bcc9dcb23ca2c3c8acafa0f5fcd98b5

    SHA1

    6677ab7e2e0a823e92ba1061dafd5228983030a3

    SHA256

    d132ba3cf4ddf9c3fbad14457834cce868a453c19ae867e2465972da0fc51ee5

    SHA512

    cf347d2d626c5eb3e99d891cd907d88a85852fdf3b32c6d88c287feb5550ca0f3b5cbcd13a9d0248b9da4e319ae0e6a31dea140180a54aebb9eb7333bb143d05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ce76e878301e012f0eef32478cf27ab

    SHA1

    8fbf98ba63f6bb2fe0b45a8bc844429310e017c2

    SHA256

    94f7855fc004795f4aeee5091f9109895b7f4883b3dcd286cd5c95559dbdb8aa

    SHA512

    dfbc631c00349b71bd33e7cd543968c9215cd067274a76067adb06931acce084ea184805950307b6f0274962d80a0842472d823570ad86ffa03dd21bba1c053f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f555cb35f55b73374957b3bcc67be8e

    SHA1

    bf38c236350c80969b95b6d1b356fd9484e340e6

    SHA256

    2495f3eeb67047636913a5aae9c227fb0f7e8818a52a0687d6ca89402164d0cb

    SHA512

    8a1f83f2f4ad632f574221746cb02cd2066f403ad0b9e2e981676971abb984408f019e018c0382c3e32b68d869e94b37d665bb3fd3f505830499607e66161a28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c895e300d183d68d2909f24ed81f42e1

    SHA1

    fac546b6ac9610ded352f507605a4bf2494f3597

    SHA256

    c4c0dc449ddbe79ca47b25ec0ed6afb1cc36555bbe2e4833916748da137a5e35

    SHA512

    4422d26715484eae90ac2b6a19cdd70b14d1d4012b480a17dac3464205587ef5706c26603a3f8c7d96c2517654b8bfb16c48fe782e160130a628ca5dafc0991a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb5e8ad5ffd983d9e1361edc5b423112

    SHA1

    cc728997a8487c94faf120fa196556990d1dddb0

    SHA256

    70906d4a5735b1ab3d42a62a2c5e3f0cfe3c4ac608a7dca8f7245bf0c3bef44c

    SHA512

    dc123a23593ad93ccb16edbb6a43e0c497aacb8afa50f8c60ba568b08b8a90faa9169a7c9e3823adb8a5d0f39e772bdbf490bf4dd588466d6b6e802d04aa4b8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    732cfba274dd04eb1ea482497d819f94

    SHA1

    d1740331724ff6efe5af16a3abde76500880e622

    SHA256

    3d841b0d23fae6e39560d9083b61e922e05dd5ef7241724b0dfac03b09779a9d

    SHA512

    258db1e5a89eec0aaa80ec2ae549a333218a0b359657c5247f8713ee75d241d0fc1d311b711fbd422a3f9eaef5300e70c53eef4f063a5971246d224ee3de4524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4160c5160a310a4e145fd1b56546c6da

    SHA1

    4b5b5f120fe2616eae873a1cc972dfbe40cec962

    SHA256

    ab22cb6efe46bea33a94516a74d85368bf3de1e034a42e650c0c1cd38a19af30

    SHA512

    4ac33a3d86a1622a2a0c850146a94b644b75c346ed8d40ae5d97ddc21ee13e639889e2dd66eac6b47a7418cb39bff67728c4757a79528aa2ddde3e944bb35412

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa56225542a2b5c809bd42555737c4fc

    SHA1

    436f41fa06a927a6e4e2ba839816dfef0492e0e8

    SHA256

    4d6155f2ffa000db3106143b300d564657acc0fb89afbe3bd4f7736920180861

    SHA512

    a22bd8fbabce398640516a555d92590a5b9b7064e2c82a418e448b010a5650ca094a22e1a277925ec171023dfaaebbd294a4de3bb3617110730507fbee61afad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76bab86e5e6f628ed49b49b521d29e99

    SHA1

    6e5834f88fb4bb4d43fc08f7885f0fd373eb0525

    SHA256

    d96a9952996d113a04e8a85acbb0a64ed5f1c1e63085a7abe1301645b30b8779

    SHA512

    2e0645850efe8443bee2b6af365e74394bd9adb8d8b989e1b9f195263f5cc525a6902a89a1b6a36ec49707f0789f238afaeaaa9c0376c287404ec2cc220a7e95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db5587c43d625a1c48529becf9248705

    SHA1

    986050809f5040b55a7cbf00a4bf0c3538cbc12c

    SHA256

    6e9f8ec07064fdf9fafc6093ff0f4b09ac6527bfb1a57b58fbf64703fe1c8f49

    SHA512

    dad57782a44d19fa9ddd13f69613c47fcae55db5607057b65dee02e650a6eca822d7c674eeb986d973b2c7b57ce520a5c2f07c0fa5c023146f322b51898c7320

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76a2e11579090b89effcd838a7801279

    SHA1

    11513d33a9b5b18310cd026ed033c052238b2fce

    SHA256

    f3fd3dabe43c62888d7f9492659027ecfa6554387d1069f94bbc0422abe8d71f

    SHA512

    253a6ae94302d3eaf099c489e70fd6159d08e2e2776bfe6bd72e2cabe33c4c5363291beacdc957058bfb6c390a9946b5ff688c59f47e25bf5cf71a137b88dbab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30a9b26211e345fd916f09dfd444f346

    SHA1

    3d2d13f3c1f849e00c98a256613cebbccee3d69f

    SHA256

    bd73a15119ef285c787ee5e1fd3a2158ee8d795d05559595ee401cc090b96c4a

    SHA512

    78061422f048122ebe47eff2e95e777dfb26adcc66f2487dc84fc43cefc6531dac75bf6b84a1929806114cd9b1793c18346d96844fb36e1181d4c216b79870f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef9579234a67f2396badd0e0d746233f

    SHA1

    40fa114490bc2197538dbb7547e511d67a48dc93

    SHA256

    0f1b0ec97dddc08bbb737f18af03f95c18c267b64d9fd3d517b97f2d49c845aa

    SHA512

    29b3871975f3cfb3310c47741b2aeda43a869bcba2092836ec5a182b2becf28f42e06d41d8e8d8f34a77c8315927407b25e9c8c7aa757ff3bb8082a0a0c16f05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e98d24b5c9a8215ac463c3982aea1a48

    SHA1

    3492ada901a6ed22bb25cb0898ab8245d69688f8

    SHA256

    9ebb511fe9791e44ed713b8965a1c5b3b736793b41cf858048956729d4affa6d

    SHA512

    f981e23201de1ae544329305f01b58edebf3546fc8d02dbde288b4972a4611c8b2fc29d32daa66949a39e10fc073c6c77e8fb9b64b4898866d4659b8639ac2d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ae98c6d23d6608f9eee9c61020de60c

    SHA1

    5f424fa5b5eb90faadcfe9d522129c769d4e8423

    SHA256

    4987d41bb7b98fc2cacc4236f6335cce9938a1dbcf77671e7ddddcd1a0a4179a

    SHA512

    2cdd3dc87b078197d606c152e53f8d0fe4fea7cb4ea800475a955b1ad5eb363136e3037f89c526e256524396b8670000c7ba9a37cdabd1c95cadffb787a78e14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af2c09c97ac7889f5c7750125a81de26

    SHA1

    d90ea71d5fe30ae9e025eb6f1e6c771595e0f2b3

    SHA256

    606c38c41cf0e7a863c563601f56a0316e8898e9da5cae104c2c8d3618d85f70

    SHA512

    aef6dd5d595c459c3c49c49072a995ef7c6ab9166e03a3ae3beb1977cff6faca58e6bbee8b85c5ae8dbc47962852adaa7de6713e179276be499f0133aedb460a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9820356521e3de4a0b3b8417ec0a3bcc

    SHA1

    35b58e0537b9e635225532eb72635f72de558912

    SHA256

    8e9f3e58227ddbd4a9d846c4b52f1168a831ee0ee03329a38a0d8415fe75d8b2

    SHA512

    56f50f1faad8b6098e5e32e996d935b05a5c34a4a83ab8a4ed99cb62952ffaeca231f892319f329239683b869a0fa7f7c83ffb0acf70f247d3cf1ee72aba749f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    097d5460daf4706be88b37a3147c7927

    SHA1

    d23e7f6ea6f711bad60c1c39d1f56e1c6ce01ba8

    SHA256

    0014336635eb66910eeba129351f8719b6350faaae6c77a56857c1be3d5eba3d

    SHA512

    dafff54f8d950dd2424cfc68ee9748095d199ccd26d4c65e6ef12cb50aeef1df09f2dd27dc784f38bb6a266cad16fe5ddb23bd85a9cfe7049861d9bd72f00b42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b3b7ad14ed5024d1b740d608b503e9d

    SHA1

    b75c4917e253f915158082a62cb1cc1cbb80b5d0

    SHA256

    df2c1d6d693287c118d826a501638495f230c2bab28e548341af861e9d6c6f71

    SHA512

    58ac3ccd46dee736e3e59334489c1a1d59514d0b2b77310e76198b141da3970628b706c3c0c9c2024009f373d86a262ec36bdd524773e0915f8648452882e980

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db499195354b9bfbb2869351f4527e2f

    SHA1

    0e8b50c80e9c34709d06173d141252f1f45cbb89

    SHA256

    7d4f2ed3c843104b75c77da7b71d56d70b34d59568d8f26930a449909e0d6192

    SHA512

    71e84b17a080ee5a3ac43212b7dd409423bae9d2db64509eaad48980be16a87b1ca07b6775a5eed111cb1d23170ec9f8792811b99a3e41f2ced3f3bac715ce1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f77b7382f5b80a0011f0a3d3a2cb50e7

    SHA1

    bd4468dfabf57d9b2f0b7f1203206394e1a64187

    SHA256

    2460370c921816ff2c6e8119422c6c2bf00b0db8b80fbd6cafed07eece3c7deb

    SHA512

    841c429449de35eb320d60f7d89e4100910a1be638b763332ef44a4b056753105ff46157d7716c1e7cb1f9461b09a31d97b095560710a9ec49f521ee3eaeb592

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fdd722fbcaa5d958e005c0a7be56562

    SHA1

    441d17142c1b534fd38221759cfe41037f974ea0

    SHA256

    988098994cf47b0c4de3f32ea7ef4ad86c6408062ebe024c6c0e5c94d95143e1

    SHA512

    0f8139c2576e3424c2799f8e6ba68060c4eeb95bc7571c835b4abf54ffa64fb7ec4d664312d8e8f3f79690997a26f9be2267ad26390744503901ae658b57b477

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fc0b56acea5960227a8a759f4fcde92

    SHA1

    61a4725522e5c790dfc13c76b7147e198279bfff

    SHA256

    5bcc90c2356c3a7d6a240b85dfccb126cdffa5ca06caa294dbc3b5f0dcae5126

    SHA512

    2cd3fbf9b2b365fe580e342b67512c9a6b6d0b42c1e0cb371818d0dbabc2a134d8d47ab36142ce1f511b9b00d94a2bc6fb4cc7ef421ca11e592eb78245fbea0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    4245aaa56379bca41122762ab4059121

    SHA1

    f004dec88003ca388e34209d5b1279abc666e82c

    SHA256

    4e2f338c1ad4db3604ab2b14572f2379c71417a0182b8756e0328253786351a3

    SHA512

    a60d9586b2e9e5cdd0636608f6962b33d89b73755fe9f8507d358b6cccd81c1cedd15ae9663554f635887af0108c5602289c8212d885beb4d231583ee2d5dda3

  • C:\Users\Admin\AppData\Local\Temp\Cab15D2.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar16D4.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b