Analysis

  • max time kernel
    143s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    14/07/2024, 07:12

General

  • Target

    44d29a79ae63c5a266b09cf33d71a3a8_JaffaCakes118.html

  • Size

    108KB

  • MD5

    44d29a79ae63c5a266b09cf33d71a3a8

  • SHA1

    4c4bc9ab5b8657031a2bf2f5bee6907b91eb338f

  • SHA256

    c316302bc6d1e0b4fd5d1df98d4b128038e49e9b30822d41175a1ea7847aaa5b

  • SHA512

    02a6fb160d236818b7f26b0a4fb7d7cf694c697b915c59ba3c2ef84a050be1d68b62cfef7d75e008179afff1ad47da751712f725a91e5ea10b15e6b19f228cd1

  • SSDEEP

    1536:t9uAjX+btKO/Hy4EO9odUhfwf6ocWni1rq:NjX+btKOP9odUhfo6ocWi1rq

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\44d29a79ae63c5a266b09cf33d71a3a8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2256
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2256 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2564

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

          Filesize

          1KB

          MD5

          55540a230bdab55187a841cfe1aa1545

          SHA1

          363e4734f757bdeb89868efe94907774a327695e

          SHA256

          d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

          SHA512

          c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

          Filesize

          230B

          MD5

          d81d1fa2e6db790bc48f0fa311a58376

          SHA1

          b61d73e92c2d100f52b6d2ada7303b4885b148e0

          SHA256

          9003bdc3356fe00bf63466ec2034d41d498a26b5b8214b021524f735fae7d044

          SHA512

          7a1ef50bc6ea81d2787590afaf046bbb2ff5afd271c365ce99ebb11759875c3a76deaf0905d5af491ef4fd34fab33a203b81097551d9c8ac353b38259d8621cd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          79ea8d043019cb5b327e67ac43ca3dc5

          SHA1

          556aaf9fcda605813fd3946e2cfcd2e1dc460891

          SHA256

          a87d0f18e073c554fce1d7533c232150dcc48e7b9815f493e5e7a36573b64e95

          SHA512

          8b80c9f374e66a49a7a8d0cace8a65c247eab7b626bf45227719bdaec3a24728ffd9a2ae63e858a95fa37cb56dbcbf0eb2484e696b7b1916672e9437052afa8f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          270d220fa56e285be48032b7df076528

          SHA1

          931da8a1f49178d656f0ebbe6163ff7ef01c10a8

          SHA256

          04de947285b99afb31abe75406d10476265f67be1427a70e6b2ab66d6689368b

          SHA512

          65bcbfe88e9aa17c9047d8d9948f1ed9d6c342050361c394cb9e35b55bf570f1dd024d6418c844fea5214a55bc330d9c005908b2bd10c9b33834e61ae4fa8f10

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          884114ba7793f73bbd1682a294858dad

          SHA1

          0c079f385bdc02b2a384d28ab5d8153668027718

          SHA256

          48b7298320b484cb38ed80f9bf2223f0074a2227dd319825f7b4b54cad3220bd

          SHA512

          a26b2dc88fc0403da76e716b7358a382c4f2c052b895ab8d3a346e9f013c4b1e000c13f6024e50c97044b9d6e3e3d7a4b9659dd559ee6efc2c991322056cb872

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d60eb78d1be6692048380f70f6577398

          SHA1

          c3099f47312e2a77925e96354eb9d95209cd0b83

          SHA256

          3a3b77811420f89a461f042c5ea21998bb8d65a4db47c92589d5c67d524a2a69

          SHA512

          4bfe77b21576cd395512037e7afa6ee75afae2031437b8380577e908e159e3377e67fa76f8bc6fc7bd059cb54bb4eb3fa4ad923552102341c6d32b74baf7ddd2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e5103c3884bd7c5066c16a300f384e26

          SHA1

          c8f38ffe91684f744b875196c180aabb77b270f3

          SHA256

          ab31556517da467137deec252231513ef3b6ea64a325ee4cf06abaea2666caf8

          SHA512

          aa424f271cf2eb613ac4e44ef82fc3790c44f43b63c4efe72d7c2aed07b6568425e68c19e2575ee7b870f6d4a3531c59c2ddbe56196cbbd37da48e83107eaf8e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4377291c6bb0648a2067eab7a8eeff44

          SHA1

          1f0edbd8427ab4a50f37cb692a24bf803be4358e

          SHA256

          3648c2c79600192d7f58bcc5ec608e8857296ec6d267ccaf97576cea90ec6ddd

          SHA512

          3a614866b88a26852d49e43ca5e95c2dac151fd0074e16c6fbea2d8148af7feae4aa42a8a21f81eb978184122d9ce9105d24e963ee3bf13ffd62db96c59d43a5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d6cf81d10430db461437831fe649a06e

          SHA1

          07b36f94c552a5c7402b3cda389786a4b3ccb751

          SHA256

          8663f94e861244042d5f04e05e3eb9979370285a1729d311e64cef9f5a6bf158

          SHA512

          c9d8d87da85cf946350737f3d39c4a779e9b38602916b254a24719eb7de4d5bebe93d8da5285d2f6a7f4067de3a61d7687dcc3b7818e5c959be2bb0d20f8e60c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          929f960e09e910a9f28edca17bca5c61

          SHA1

          b2a3b1017822ba29fb0a43127e42b9f8f7ec85da

          SHA256

          82a8ca4bbd8779eabf04ae93a6e30d27fc825902bba8c47239d519f8d082fce6

          SHA512

          4ba2c45fcc964e1974f18f97b4e0e4515e0f26b593f4906ee0f1854b47becc0d45ef2ce0a6abc75d7ad65d6e4415bfde46207f9c7ae7eb76bb0cbe4ad16aa8a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          23d24fea367382b795d35539ef105a54

          SHA1

          1a62fdfb4bcca0f01f97c2c7e0cf0fe881066b70

          SHA256

          ca1edf19bca1b326525ff2110c59fe84433e5c9c6eb8e863a7602eb5e812e256

          SHA512

          58a133526fa96ba6c95762bdd1e0e6936e5389eec0cada6173025e9eb977daff84493d6b2a1768fb75f69801868fbe014e1a3f739c2c7ed4e1383917d1c6a9df

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ea508af8e376e9b3d7db68b60c89060d

          SHA1

          3ae334ac1a7f89835564675a4796f6de135e0d29

          SHA256

          81c4727cad3517349a935e2b385a1016a0223f673ac383f1c998fcb263266443

          SHA512

          379bcbf13912808395132d1de97f4133accd06860b52d5b7e0c27cb583377910894a212159c425b36e5b3735bac077e5e6562e4527a598b81179fc13009bb9ea

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e80ae0ba036abef4721c60b0d4c03a0a

          SHA1

          0cb777c5c62e40169c2c5632e4058700cb567d51

          SHA256

          dfdbb51fa943f6e99d85b91c2297c96f0f01dc981a8b3d7ed298061047b0a1c6

          SHA512

          f2754cc70fc44e236d1fb1649cd09fa96824b09efe821bd0c7569fb43a597487fc34b93336d905f495206ecce1d87b3c90f438b9a668f897e5afe0048fb39a7f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e7f51fbfa42b85994f5e87ad5cc0b8a4

          SHA1

          9aeec8edf9e03b7f2061ab8616d8161796d9b58c

          SHA256

          cb22c46b5e89d76e7e00daafad5d7c300fcd0811e8ffd760a3dd223feea4a70b

          SHA512

          a9aff1df1873353f657e2d68f576c6f029d67993514f80c3ca4f013c94a31f91368509ba24e6c5962b3e4e1b5aaf257ebef711b225e11de80bb8fe121bd7f611

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6799c43cfd9289384689fd22b77b7564

          SHA1

          c0c7de1ba730c640dda335398780d9e7d8127760

          SHA256

          f42101df412b69dadff36bd4731847d59590990f88d2d76178ae15dc0eea6de5

          SHA512

          f10bfc67a4cdf328325daebb988ffdef6d777e94769f19bab03edd204315ae80b00291feb9539cbc2d89d26321644760244ba7b8195c3d8f15edcc2705b1e38b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cfea707a9abd35fe654704c5b27bcf60

          SHA1

          af09df965d9195c1fe54385c72fbd460c7a1d11d

          SHA256

          3ecc7a5be358fee2e7d8ebe944a8cf39d10283450eed642e72533a3d63d63645

          SHA512

          e4d326f84d93bfe656149b6ce573737e70e029fca9f95e031fd07393e750594cc609cfc8e1b96a330b69d1fecda9ce4e66300ad3189bd71ef414313e3bb303fb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          30afed0989298251830a0c44506c444a

          SHA1

          3f648adf339f0a14357b1b420b703fd385fd1210

          SHA256

          0c96b0078ba3e49046da229386d912021265c8bddff03a0ffa2446e052059782

          SHA512

          24157b461e58cf0c989233fb9c84326433f7c888b1980b85e2dd4dd011fad4ec65545e9d9c0608720744306e7532a690d0e93c15449d159ce70d5be73b60c4c7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5048098a32cca76a53d435675b1497e4

          SHA1

          900bb4fde120333d9907b8f4af9f7877a908fe23

          SHA256

          64e82b8bae460d62589d94b68e7b9b1b8ea12244f3c08dfe5bded82402db12e2

          SHA512

          6ea3eb85ea0858e565c2c7e64a9a4830abaec44f4cdd64eab851f97c64f61555e7fb75a9d5948ef1ee13467a71f7bf9c81b1a290d3789b331290fdd50fc4838d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a11bf0a8f4ded883de18097b753620bd

          SHA1

          9d2b7393762001665e655fae96621c8ef918d5a0

          SHA256

          9c9e67a2d11f95a65b804709c0c00af934f9db1b27805097507661d85972fc30

          SHA512

          ba2ac97ea22d7e38c1fa56a6b87623ec24c9ea1f8cb1ce584145f9c13be9e19faf0fe03a08a92eb86533e1eaa508962c4cea2efe2d019f38cf4438ac7bcc6d80

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          51194048a964b1ca731e05cbf54ed1a5

          SHA1

          b7a456bb79c4f070aaa33aee728088ea733c9cd5

          SHA256

          4c72a355aac40b506ddd91b9852031dce9ff529f3cf2271bef39a6c02757759b

          SHA512

          698158f3c8b0e4858089a5dcc2d4d70d6d89b36b29fb26b836477db26f968d839a8a8000ac4e9862fda4f39508ceb9fb65d566151f41efeb94635d61e7ba8da4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b0c5d476d3be217d74fe9b8e9c1da13b

          SHA1

          819b9f3d94dfb3a18c10fd1c81c6ae70fab01075

          SHA256

          5acda0845eb6131b42eec3a9022d1ef6a8ecde9ee9fb8d3e42cb4083e5ee817f

          SHA512

          eb588a26550ec8bde165db848b38cab6a70c4ad30c900cdc28b262ddd632ac267c57aadc79ac4dc686f245eb01a92ff79482237cfeecaeec94efc62260ab1b96

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          39ab4e8f43a49f96aee13dfa4bb5cccc

          SHA1

          b06094d122c718a41d67490bac37b178dd134974

          SHA256

          318c5e500161c4fab03b46193018287ee913a5524633395bf4b909d2ccd21abf

          SHA512

          0d0e2d7dc979fa017ac12b06101862771e9bd0c736888ed3cb6bd3f6ad39746229bbceed83f23ac7f2e81c1218318da1797f1ca6b648dd81a374b50a7ed23462

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5d5c4bea7c3a30b6d8a972ac5f07ae11

          SHA1

          02b374679b0f5d8e90e52a9cca6298b4b135f7f9

          SHA256

          38acc45a3e590d5402d3f8ace114a8f8a65cf5bcfa202398f9a470cb7735b624

          SHA512

          534bbbe46a11e1dddc868442cd276c28798b66448b9ea6cf927e55ce0f59fbaca76f508ed302597d0208c8784a7cf66401d3e34e65c2077b3228441c22c5c3b6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0b7134e263d08512fe2620fcdc326b15

          SHA1

          c3a0ef4b7c93395c2a9296f702479a4c8b4190d7

          SHA256

          6cad6f4d0291554d5de87a676993bdb25477ed79aa3ec47f3c29990d11b687e6

          SHA512

          91a8e333ec0425436073bafbe1b6d02559f1cd7471e9ada03226e578d9c4652e21e88805527498c78989826633018d33a0e58ba6021b07ec7601a86fbd348359

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dbca19add933ae2b8d789f6607f23d94

          SHA1

          496265eced606723152809c62f0840c2158b633c

          SHA256

          e29c1e34f4ffdd2a66896ddfd3b53e0240815855d0fb3b39aa37a09665be22fc

          SHA512

          f0d33c7b61756252135c32f8a380f60033b3a690f885f8b2c564997f6832b216b4475922eb90152d9971e9f260ee9ecab28aa0cbc6253b9eac1e63d3dc6c530b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b79033b5ced2c0d3b56e3655786423a0

          SHA1

          d3cdaf4cc4a7c581447393f5eabcfadb8a05ec7d

          SHA256

          ec3cb4c964eb6f8ba01b16c7f004769cf3c5f9c1bb200af40afdd4fd78704533

          SHA512

          1d056265cc457411ca5f2dec8b01c9c684491271ed7dd3678a59ac6f0415ca8b8cd22a40929427bb246dfe8c96918d35173656f22524f331295d77a95a0bd3be

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d1d3bbb489fdaee1634d8d47274b1b7a

          SHA1

          a9c4202402fc6743ad05a47987d27cda79574e9a

          SHA256

          358c659d97d5b1cae6432660f33ed4f7d4a3a5420a56f6326da2305bf9a94fbb

          SHA512

          5097ccf093a1a0a024be840cc32a7876ea3ac0eea50af8fc6086bc2dde54688de58eefb134cb91907ad19eedb8583d0b08029a30e633d445ddb5dc24544bb676

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bac5c5e27ebc0e2294c5bc45cc6e0ec2

          SHA1

          60d57d080acef6e33579d594ec41da03e616e030

          SHA256

          3225eb30a42738111f703a4972917a0badb1e91877ff64b4900b39f5b374fc96

          SHA512

          c07b030a9acde88c8fc4a201dd7651a291faf489fb119b39a87bee4d683550dc97459b517ca4aa18f0fbcdc2d80b0cadd8b3dbc9d2e17cb65c0e30376fffab3a

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NFAY0EOS\css[2].css

          Filesize

          243B

          MD5

          0604e55a2a74c5bc3652a4142bf436c4

          SHA1

          7dcc3f6b737eabbd106090cd5244bef47053fb69

          SHA256

          7b055126e7b0f565c32f1ea9c96a450c6de0d038787aaebe4682c3825950e922

          SHA512

          1e59f9dcdece28cf3f488c4b1a8aafabbb28e38416d8e08d6adff4a1d9ad9d9c790f64cfe743497d14549147938ffa6c4e3f2485363c73d9a08bf5a3caf1dcd5

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\Tracer[2].js

          Filesize

          53KB

          MD5

          bac2273d16208ffdad1193a65e69f7a4

          SHA1

          7d19065116ed7622a762f53d5469b5dc7c21b933

          SHA256

          b09e7f97b4d28cbb8aecdd36823014cbeb127ce4973f3c17408519741ebf8932

          SHA512

          bc069b5d96bf269dc9b422b96b3ca964d191d29f9ba3faf50e668855eb3a5a4e1f019c776f4134f2e39ac697d778b55f32a519a63200b51c3ed7cf2eadf21d1f

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z7V06J7Q\maia[1].css

          Filesize

          42KB

          MD5

          9e914fd11c5238c50eba741a873f0896

          SHA1

          950316ffef900ceecca4cf847c9a8c14231271da

          SHA256

          8684a32d1a10d050a26fc33192edf427a5f0c6874c590a68d77ae6e0d186bd8a

          SHA512

          362b96b27d3286396f53ece74b1685fa915fc9a73e83f28e782b3f6a2b9f851ba9e37d79d93bd97ab7b3dc3c2d9b66b5e8f81151c8b65a17f4483e1484428e5f

        • C:\Users\Admin\AppData\Local\Temp\Cab5AE.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar63D.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b