Analysis

  • max time kernel
    120s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    11/04/2024, 15:02

General

  • Target

    edb325b6f4c4a1ee4c3d126a24971822_JaffaCakes118.html

  • Size

    14KB

  • MD5

    edb325b6f4c4a1ee4c3d126a24971822

  • SHA1

    7142922102ab2f22bd4e742a69fc1c4cca1fc30d

  • SHA256

    e22dd1dd5242f0c57b51cb42ca57e5d82aefdac86fae1e82dae772e893ba1cf6

  • SHA512

    5a92044b19f5094a10afb68c2758a602d98a8ec4e241f8239c9deab945461473d92ca33179b2687195906aa17f92e112c02814f06ed96fc03fc4ba6763e0d44f

  • SSDEEP

    384:ln8uqnGDnW0qVaKcYe/VhNfuhvopAlMF6C1eGXZeiGY3yGoC2JJ4Egnad9y/YtJl:ln8vGDnHIQrEOmRW8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\edb325b6f4c4a1ee4c3d126a24971822_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3048

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    052ef573337bfe6121e20fa5be4d718c

    SHA1

    3000811279a431614811a4864a692f30c4422e48

    SHA256

    0b3cd3f90de4012295368ac751f4bb9154ed9b10f19acd20b68043ab3b20fe07

    SHA512

    3de0d582afb007e22dbe13b07ec95c69aa96011733f3c2586e15455b0ba5e28259afcd073826fe8a34310d81d68420db6ce4dd34e0c9820a005bc8119d4d64ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bb0c492c364ad324c7d5b2e5b7b3a78

    SHA1

    ad2397c5748d49cbaa747c1da470806c792089f2

    SHA256

    580fe2f89a26ffed5d496fa91563b8bf9c41acdc645b902e4e592c35340390f9

    SHA512

    033289ec8919fb6d61cd64f99faca27f241429d07418fe0b02199f28ded400aef604852f731be4aedd4d1ef309bd73719403fc25e5d730618258a156a81eb807

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b89c6c0a5079bfcc87d1f0c6a2efcbdd

    SHA1

    02b6593c1e8eec644267505f371b96f6b1989a16

    SHA256

    5855d65695979f7bb0e95c43a725e59b00fcc1dfc60d8a9ddce63ed5183577b5

    SHA512

    e3259df985c52836f05e97d01ca214cb20c6eb9e97e269a5fdb92e0901baafcc4647a3104a1e55b23bea43eb108c348b633e84e57b4dd537f283128d99d836be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5fb77b9b813068373f8d6e1acbe598b7

    SHA1

    d410e46cfb91f233f581297be98cb0d6e1e719b4

    SHA256

    29083b0ce09c2f3c01f9945505f95fefbfc0cf6383ce1f31110b1936246611aa

    SHA512

    b1b3d5168393579c53661252a9f9c2b2b87f579ba29bdf13eaa265110403d79db4c1a058a31a4d3fc0199031b0332b00075f4bd20e0dfe647a193511970926eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41bfb5ebd4888cbcf8d5ab60fff4b65a

    SHA1

    6eb7f62fd7b2fe384d87b6ab7ebef2c4c0ab24dc

    SHA256

    2f8d8332e6c8a1d353c71374332b0ed5514e4f8ffaf47e7bf41c1af15dda8207

    SHA512

    f902ca8dc24c0451cb42bec8178c22ea6f7789082e546845e7aa95d566b0b80774b9e670f1963c6a416642e49c73d3579835ce935aa859a4200263fcb3be1ff3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cbab862d3001fc2a9e17ecf6553a380

    SHA1

    c681c2ba99aa582159cc12463a37aeb1c17abb30

    SHA256

    5c1314aa2c66eff1b11d14669a966aa6281d679609bb47c152549e12c4368e69

    SHA512

    44b27b2eb5e432319151ebe9d3912563b6286b4eb8342881f457c08b10fecbc41cb7dcf17c72bfc2ee87ec0f90cc41b071e2bc25f2b95782972088151babe8d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4ec710118e76124f47862ae5ae24e26d

    SHA1

    54e46912df9f4e944003c92998538cce424c63c7

    SHA256

    f5f440354106b5051a1f8b535877b421b1cdcf1245dbf0f3b39e2f2cb25b5604

    SHA512

    5bea09aad10f7b7036785ffcd9c508f45e1bfecfd8e8d45a2541d0a867cd56f9b2d6ca5140394d5bcf4e352346be7e76fad2fbe82a85c7498aef253d922ffc77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    90a5298499b4605e7d0b15db5b6fb1a5

    SHA1

    5c2a84c1e4fcbefa65b8ffa8d595e66363ea6880

    SHA256

    2827d38f5439b72cceeb351b40d70f1f48c7fb7ef239660478ac779e06a0459d

    SHA512

    ed855d2fc1eaa89b8f2da71ee75df7a4300745b24b7e459dce493c722381589764fecabb9a11c5de0e299c6f0e59f737a9a3ffc913e1ca243546e35275ffa518

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51dff7ffba406c3e6e5becedc24a700a

    SHA1

    6db32efcbc627188ac60e0c0aa67eaa8281c9641

    SHA256

    377b3cc3cf01dc1027aa0c605b6b9cd655241fdab213b2c05e7918d5c67d3e79

    SHA512

    4f1c87bb69e06aa8600c914d50eb72954e1e714ce90c3c5d04d2e787be27003a26b3afe8bd50d96092b57181b7b03817f584a5dabfe81b9a5e0e0bde0619ecf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3447a1a3e64b76fd9ffec664093f6e20

    SHA1

    92ed99e7ae9da0dba95b3bd0387341fe8ed1c757

    SHA256

    20c4d76c220238f051c48074ab1e7003fdaa9e4ba4a6775145495053459943c5

    SHA512

    74f07376c7d8f1f3dfed306e6fe111945f38d7f9b6f9108c7e754ffb8fe83584ba38d250966db3f19fddb076f7af34741380978d679119ff6c18a110538a1230

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    119b7bc4902c866150e24320fac8595f

    SHA1

    a9b4e2c24f59d41c57172b8abc399d2886a3817b

    SHA256

    22fada5334411395e00595b4ec978f927530e361d2008bf229f47da0a1eb32e2

    SHA512

    bac6a64ddaa35cb4ce61726fe4d6ed9ce3a6e9d7ffb7f7dfa2a6c8c0bc5c08d99c640eb16518e9eb5e9de14533cb429140ee1bcb09783a6af542ae25afebdaa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77516d0dc1f0fef9f9edaeb3951577dc

    SHA1

    3ab91703274b6057d01f96655e80e556e590dc60

    SHA256

    80abae16b4f4c7f82f4c3b3d8951ae9e217c116ee951855890c2eb5fee3bd926

    SHA512

    a56727a70bb65ae762992ae1ed0603048015195b3aa2ea6811bed019618259de7601d8c8ed37c3c7d808b94191544922f2be5497b6a00ddcb25abbfc77c7b823

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76223fa5e658fea0d4748a4dd31d4f9f

    SHA1

    59d1965a7f2ca5d35b12cefb82f94fc83e6be109

    SHA256

    596460e76c0f7eea44d42f8d1d0e10c45b1347787b68102bdef0f39aa311ed00

    SHA512

    293c44a08c92eca4a059bf9f3c46220afac363e2866aa5f2b6f87467b299f23b9397f777ad9ebfc4f76cf4426e79b2ee6ba829f6ade8c43eaede1a41098fbbdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33dd8ac73066348aa28d149c219daccb

    SHA1

    fdb4d78f06f4751de5689d8340b3ee8e09364789

    SHA256

    ae1561a0f80868ad5b3840e2d96df935600b5719ae664d0131eea70a6e2d060f

    SHA512

    82d82af6ac217f0a46c3904b93f955f9a100aba8e169c68151ed9af7252fa3d1086439f99d33417803b5da44139d4d7e812fed2e300748e2011971a217038989

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1af479c61e6534913f167ad2f163eebd

    SHA1

    1526c8e6be0e67aedb58932efcee44ae4859de01

    SHA256

    ac54ac647691112f1c7f86fe73d94e60af425267e34ee9d4a9ec37e2099388c3

    SHA512

    89a2ba3084a35d60c39849f54288a1a4ee82bb2641f17fdd1ee5dc15e8cc69b3b96e3d4eb99464deba4aa29581bf2f68e2025c09dcdf437851ed507ac86c3ad8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13f6083c1797d04f5d0f7bdd35fc4743

    SHA1

    152a07898c0719b6acdfe7933fa84283d9fdd981

    SHA256

    99a3b1e94ca38dda9d2fb7c57b9b1b71f0a71ca9638bb0ceefaf36ca2d1f9088

    SHA512

    4092626902bc863f4a4added3784195bfbf1f13feafdc1f07bd08cc25adbe188bf7c1e957210578d06985b3eba83943e1ab2b46fbfe674830be2dbe47069c291

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95479911e59d808b2ef384de56d7799c

    SHA1

    1b69571ce267b781f408a18523203cb47a6531b5

    SHA256

    69766b1679f32eea742c5efd6cda884995d3f61bb9ffb494d157f800e2f465ca

    SHA512

    60ae591bfb95ffe9a7adb47e6f31bcf65d2dbb38a63be49ecfc242fdc9e46a39e0beef2881d63b56bcde6dab045deb2e03430c7c8774cf35ed592904d3b54d92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    283e5c59e16b36d1aa879cff62b639af

    SHA1

    383791319aceb7c220d85865636852bbc9e3ee29

    SHA256

    de3b3394a6698fa79a4712e747fcc6b60e6394a05f7e4eab26e27b36245685ca

    SHA512

    a3bffa7c8da6fdaf84ee8aa88dc7b9dc609db37d14be53da0813c23337eb3e8d53242d15c3b547cfb7c04a6c2caae6b15124a57778ce8e8a629a9b23dcf02f76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86db1b3cf4dd82b588080c6dd80bd3f9

    SHA1

    65b00cc47b0a8d45ce8a21e9eeb1f82231838c88

    SHA256

    7225cde5860bd87dec83a8e65a74b123c13fc3e59e9989f54c39120563999f52

    SHA512

    dbc8a0d118c71238365cf224c0760af1286ed429f92a2291398a1bf88c1d88521b260d0a95bc20c808aea4ef01986d862d5087b54c51f281efd0900e96d57a47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c3f963554952fc4fca2236851fcad3aa

    SHA1

    c564c34eac9700b75279fe571a198b30dc12d355

    SHA256

    0fad8a02982564f06c8f151bd1d133481ef23b98e9172a2d8fab7b0acf8b201d

    SHA512

    c96ea58b8a6719b2664e1e928db19aefdd4af1acb9ee848e7f32d1ce80839916f0555c9a4baa634e38f760de24d23fd0110afcd1c6688ed4d4a0af02d39831b0

  • C:\Users\Admin\AppData\Local\Temp\Cab5B79.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab5C48.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar5B8C.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar5C6C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a