Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28/06/2024, 00:59

General

  • Target

    18351e53d231fc6ad4dd36848c5531ca_JaffaCakes118.html

  • Size

    30KB

  • MD5

    18351e53d231fc6ad4dd36848c5531ca

  • SHA1

    e36617b110a908816ed1f94670727f2dc9cfcfeb

  • SHA256

    6e7fa75690c56f056fc61c5a05d44bae2fde865fe4f6736fadb8698d16170365

  • SHA512

    58abc39189a7a4d5deae15bd613cb159a7acbb9bcee544dd19005ec127f065156fda9a9708afe911f7781ff6406ca7c2058f955865eb03813fb595fbe8979164

  • SSDEEP

    768:kIRIOITIwIgIiKZgNDfIwIGI5IVJ7S/2g229u56163sWRzxM12GipyjiMbZSYc8/:kIRIOITIwIgIiKZgNDfIwIGI5IVJ7S//

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\18351e53d231fc6ad4dd36848c5531ca_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1632
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1632 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1696

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2d547dffbd2e2b44d320424cb5d7fc4b

    SHA1

    bf40a3b73e5668d49a8580076b33d1300d09152c

    SHA256

    f9f17062ab28081e6b24c445582d12c2cfe6b69c898b4b469c999d056da8d47a

    SHA512

    8dc353b3b772afa5a22db1b00d62ed5fce1a3ddeaa096b275e144eff7e0d1fe8a33654c1ed9d74a4a4ef0d79b06b9394f5635ebc81599488f836917185ab6564

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4833328248c38237fc138fd68d935c0

    SHA1

    0517976971a4a330dc82465445470ffc909cf185

    SHA256

    c957f51808db8332468bea8fd522b8575b280ed079a409cc12b799d1be84f75f

    SHA512

    eeea569e48334bfd7f30743ea63ddf0479ea5cb65a5a730da29db74fc4e5579f07a424d65aebd27931dfb3ce096a8ba8c63f79655b9f37c8d1a0d24dc5098fa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfbd658baf3d1e2796f0b5e38fc075d6

    SHA1

    7380b773e357258b274a62ae42f3236d0a7a2034

    SHA256

    575723a00e081ca3297931d46053acb5317e017d707928fa6a63b4c775ab61d5

    SHA512

    27279c193f24732b94fcc4e51b1c3bf28072486a0f5159d1c7ae9c97cc0d04fbb5326f3c075c63cd2d544b5a464ec98818ecc881209c515532d36a00b3bf8c28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5834bca5aeac7f8825da71065ba6fc5

    SHA1

    a69dfb94c18b32d74643f4b0203456bea9a54f92

    SHA256

    ffe087d2d79667f0144424ffb6c042d53a400e11380135d7ba2d41b847dc8a89

    SHA512

    1fbffa0d9b1de5e79d6ea69151f2ea8978781d41d0ee941d60eefbc53b763e16cd4ea703ec3769da664cb93ef80f2f646676c2b4d041d259a59193fc72badd46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd8d69bb48384917b40bf8f33b6b15d0

    SHA1

    765dfcc0be9db06e75cc3434951a5ffc442dcb5b

    SHA256

    d913b4ba93312ee28feda250f4b7bf80b8567445c4f2ead74d857884348eee05

    SHA512

    666f6c80b7182a5da0e943d8410acfa5091f31037f91521e0f1bfb7834d38180990cd393256de680bc993d04957a30592abd19e761e2a3a783776e7008b39afe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b606eb30f3f8a93e1975fa6310cf6a0

    SHA1

    b0c3dd33f337b43ba8bd59ef9171c9e676a4f8e2

    SHA256

    b14ce932bc050b762c82f20b8ebfbf1068848fa7ab7fddce841abdee48f77df9

    SHA512

    c49d896e20104e04087f04d3a69ac9d1bb26b35dc16f5f9c3ad7f0fcfdf6c22a1d1feddcd606d89225facaa4c81a306396864d46d0d3b2170045c8c9cbd078bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbeff94bcaef937ed9653e3cd531929a

    SHA1

    e50d52d27fc73dfb9595db554dab41f0d4fd412a

    SHA256

    0517086862d9cfd81410978d748e417f0058503cea48ad9028da122d183cda0c

    SHA512

    85d61964d47c41ad7f12b529aa19019c150f1d40f7bfd56f39e63f534299f12803dfeeb9d92acb7e931a9011ed08f1f950f1a674a8745dc2f29dd40bd14a1c73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83480941a0ab7d4d978f06f25956a8b0

    SHA1

    241c36277f5589a2bcc0ae3fb4b00bea8e4931b8

    SHA256

    a0b9770ea64c153a99ddc21dbe258a441d6635ce2abd601d4abf8e459a424631

    SHA512

    2312763899d25df7fe6f726b8cf4ce019d58eaacef794bf4dee1ab6011094c25896a9116ee4cee8fdaf0d7446e286089d3acca68f8f269710d96f3436e006a18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffdcce5f3d985db1aa245056c1912c18

    SHA1

    d98b7c3a9254f57de2a28910a1402a30b7f8aafb

    SHA256

    5538a6e45009c860ab58082c3c1a2d7b3ab0d1f9d2ad10d85d16bd3f5d58c24f

    SHA512

    86fbb86447f53a1bf7433ce0a9aefc1e2263e2e3f805b5bc5a5e457f8734e0d406cc4e90eabf22d197ad43a648edacf16acca7138b9d4f93f3791e978b401a67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3c64ab2acefb3dec329855f413c4f9f

    SHA1

    9fe1e522662bec44482cf5c297ebad967dcff319

    SHA256

    f473219937f580d493a48c8cd13bba48c058bc9fdc5823a2a3dc3474cd5347e8

    SHA512

    6e738caa4a3c9ba980759c9938b00d9f218bc5322552490512f214989f80321509fa9b8f8620f704e0c17e254514d33d1129ded4da55fe507ebdbb2d63f8506b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0cadbf2c7c80e93a5ff45704c4ce4d0

    SHA1

    13a888c4e5cdbcdf8766a93109603a5c9225e05a

    SHA256

    7f0fb4b3bbb2a473e49710a8ddd88d544462e1aa5b4b30edf822164193f3e529

    SHA512

    c0eeaebe41e667391ca63be0b97334ef1d4e6cce3c6b61d35f0b01d7d1c5714defec06b5819af837c65e9979bf02f3152e338b6fae1d93fd1da6e7dc83b45320

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    095189e3858ca27df010488adc0a02a2

    SHA1

    dbfa0dda464c47cdcac069b0e820b3866d125959

    SHA256

    13349bd344ab2db90de2911835d187c35be8c81f80b8e4a601f23698aa0d9898

    SHA512

    ca21b6e1c9a5536ff73cd60a4c1e0fd8a88548e804658088006f4c9f5128a7292516ecfecca544097d1e3a916562568ba80555bc0236cf100b3e9add25e48483

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eff9dcde500c2757615f57a2e1be9aa3

    SHA1

    29a60ea2c28f2be3795656f510f7e432a0698ac1

    SHA256

    afc01a8590800521ecdbcee2436022d0a69494ae627673c487963316bb880f3a

    SHA512

    8da45bb5084b9bcd76af9dc48d220a9d395db08495b8fc6814f8145264700da3192dbcf19da10e2f0c6e92feee5fb7bda54256e7e7b45a296591de50734f3bd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf2fcc367ac12c0b96d57f47cce612ab

    SHA1

    c4924169e2a8554824fe72ea630c7ce81c06f1c5

    SHA256

    f36df96e8b99d97228609077c42a93253e348b62cc63c6c2dbcdde984a36a48f

    SHA512

    57893a08cdbcf23211a27912b5c0a13db6f42a2a01cf87b284d5c202005dcb46b37199da2516c2613273c1e55324529051d5b4cae993c6ffb77cf6843213b1c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c392468f5e5086d68c800ca7cf7118a

    SHA1

    836b34f911fbb5da15b3c840a02cca746b08feae

    SHA256

    8932d07f8963f06982f4ff4eab32a8c99e6961ddc2238cfd6f39fab31c59ec1c

    SHA512

    c001a02c8e1be31244c8daa0b19d9ab56513190ae1a915fac037e36eccb1ff8cff241b3864575e9976125b9502439016a4c2f5d796d906d1eedc3d0dbedba274

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85d8fa2d99987e1cd3e677a28709bdc8

    SHA1

    c03dd1fc5bf00c5c0a341cc8d31f166439aa7430

    SHA256

    51c0e0370e32f2a810bbbbb22fa74fc2e1a5834aec223aad93cf31b7e5ab805d

    SHA512

    eddb63ae1fa88c2bf9d3dc32100ab1712c65cea2b06c31c1773cb4cf9f15160035f3d705223ab8bfa94113299f4bb323ee22fd8825d83435df675fb9f8aa22b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e91d452e2c8162588f53aa65929e238

    SHA1

    8f25a06168bd17473517e80a4ff78c86dd39fb25

    SHA256

    c51885b0dcaf1268e1ac677dee79942c889c5c0832de7b637512dabcb01fb81c

    SHA512

    f4854c6ff0c33994663ad7b8e1b191764359b5a90c51d9574fb1f359f5f806085acb0df06a7bebc3f6179f2555c9dbf27c04701e1b5c98f86b2ecc26589ed58f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45d92dc12d020e69305c1003f271b3cf

    SHA1

    ceea608996988ac834a20af0c4c5755e469514e2

    SHA256

    a653a88e4a0a303c8bdb276684cd4912c6457982ee029f3cea765579449724db

    SHA512

    3addb857e15d1130b1c61519c3c9de0442f9f5530df35cf6c582f1249592d2bd1fbd1807be7faa94aa33435580deea73bd6055dc0de8e37324647e5805fdfbce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40737495dff8d1993ee3a6704c6c7208

    SHA1

    b46b0a0ac7f82fcc6b2161a4e3862374079e7169

    SHA256

    88aa909ea9f9cbca47c975c963497936b81bd0c241ea14cb670e9d1f58e4b73c

    SHA512

    ca268922c8ed122c179842bfb53abdd065ccfee3ee7c09ff161ccb1c74d10cd779a7d93d522baf133e9ab24be1ab9846fa4e39ca415b33f55a7b7b175a409a89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bf9c04c54061cb537f4f49ea9afb117

    SHA1

    8be899f92b0ace4ac75fb7d0e24700b23ba8c71a

    SHA256

    2715678409cffda5893d62c1a905aa7b0b685bd455a27d10380050eee231c651

    SHA512

    dc0d682e559aa86c4f1e5754030c9b77ff9cbeb79e169ebfc679406ef9576434e1325fb047ebc9aae2db4cc0889656e4a44309c6c03f2b1dd312535cedce49c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5717868df19ce162010cd1f0723dc06

    SHA1

    8def8d496091f8f3ccff2f7b248c9ba2f3106021

    SHA256

    84aee996de0f2925bedfb295085e1613c613fc70352cb515ac8a86fda4b02331

    SHA512

    491b485a3a002ff8e7d8c4f8a06ab0a3d80916d2fbec4272ece6592e1a62393d9eb25fca5d624a298d9f2e9af457699fc4a7d8495c1c923c9c3148f375294e99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2e3b933bf1cd87223a2b71362a14cc3e

    SHA1

    4bb8b7c9518a4e0ed6cf3385b752682fb0ff9d56

    SHA256

    8f06042de76ce3ed6c8de1af09e5a5d6475b902fca3b2ca06412cf96a9d9e7c7

    SHA512

    0301192298b34251c1833a1c93d87166c94b258f5e73fa4e2b12bb5c58efacbe1eb002b4a684b2754353821886cba211e447163ada68a6ea4f3631f94df51ad9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar1F49.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b