Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 07:07

General

  • Target

    feb94201ff057f1182754adcda04ca12_JaffaCakes118.html

  • Size

    2.0MB

  • MD5

    feb94201ff057f1182754adcda04ca12

  • SHA1

    ee866d671fc0d4f9464ec9f8f162e927502809e3

  • SHA256

    46b066dff2b774172f3ab67702f5b005498fc6d0b035bf54e19ae44570813b7d

  • SHA512

    b83f86b01c203c8a24470daedadd1f3df3122d17ad4027661af48804ef2a3675915cffe2c5f496c286d1ba5fad2d18c25ec5eb8294bba4feb88b68fb034125bd

  • SSDEEP

    12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfd:ovpjte4tT6Nd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\feb94201ff057f1182754adcda04ca12_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2136

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ffae1b8db465b3957ee5350d420e2114

    SHA1

    89ce6396c1fbc0b8f5d3608484be23e18fa7a79e

    SHA256

    1b73bf253dbf4e3bce09b4e88ba202546dc4e422e0ad9fe05daf20aae2be086b

    SHA512

    9d3763b1e1228da32c5bfc961dbde0c7288de53615cb17a87ee3f915ef988a96c7ee199490211f99f6d0bfdb033d7201f461b74630e61b17c20132853476ad0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e0b49e05f37e5075d6f14e00857f3ec

    SHA1

    2165050e9c2bff1652ea193bc797932d6add949d

    SHA256

    8eb4def34fa186611d094299bbce8c38c7cbe0ba3bf1c55f01a28cd676b70514

    SHA512

    f5180f50d2d349702999a49f26c83894c4ebfb62491c8b135db6cec77b61bbb1bf807223433d1fcb573d7bcb5410178f9a3de173edfffce0c3a2a40986dd05ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b6324cbf6abe03982266361e3d7cb7f

    SHA1

    36df16e77e5d049c96322d57d783d70e0f8deca4

    SHA256

    8b574fe197f9d1cd985e9e8b387e684f43a7feb4353703912ef2770b7492c74f

    SHA512

    e3043a9cf321acb352ad92d06d86ba2dbdc8f1742d6791e05adf6ddad76ad4587170e84d20e3345a1e15f21ea1afca349a2290bb123066d67c2b55842bd1eb9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04aaea45b2edbff80cba06d9709d8b1d

    SHA1

    31a18079e2968a1a40c7d9a28a7d80c8f96ecde8

    SHA256

    2b302db141aa03d0383be9d320fc94a278492352f27c7bb9a315084ab181ee9a

    SHA512

    417a3eb95b46fd7ed40e5eb20abaca8f47cc34fc9e8ef4c45f426d3d9731067c9b3fc48763a396b2910ffe42a545a937b3f6160358fdb4cd43fb376e5f97bb27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edd7ea4c6608bed3681386f32b5ba5f1

    SHA1

    0d29b697e75481b08c87130d0732d7b2d372022b

    SHA256

    1fb5c7a26ce896331ce3d96f625ff7be7deff45f5146b77e17e572748a20d7e0

    SHA512

    af2c5dc782484d4304e6212d078d3b8bf5b16b18d31ff56c8ef3e809ceb4efe5d0edf01e34b38a8d720086d5e585d39b9ee628cfc0c2c2244f31b1f5bcbb8809

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d87d771c3ae2f74fb144c69341f4c00c

    SHA1

    f10faedee56fbcc1d4232261db66109546ddcd03

    SHA256

    e5c796fbee66f66e40a3aa8760c8f1598043c209351a5b76da424280c9037995

    SHA512

    d20ac21599cd1c04e29560c26584e1b96c77351f6c483bdbd607dab062930115fc159b6a6bac82bd50fddc301098ecf6a415a4c17b700e63f5ee4ac9ccd2b4f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e2d0914922dc48d11913b6b358f85e2

    SHA1

    fbe913424077cc8b0f76a74906c15872a2d27c13

    SHA256

    7c5978e7a5885177f84fadaf8c3aee6cfb47d64cfdeb32ea6e3332ffef6f0251

    SHA512

    d6ad2236fd67c4a84468d4737a4ad75c370fde54beea97c063409eb25e209be9fc8f13db161251b1e014b1a1e7a50915482c9f58ce998e0f091ae828b65fe602

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f618a285d105569d7fbf3bbf59cee3c

    SHA1

    8c338003e4f6b154291ef741a0fc22c605a1aefb

    SHA256

    a540753d4c54a7bf3a70cff950e0dc7c4feeca8302198d0db4ad6898d8a51297

    SHA512

    f57a3a82ceb6f62ad1acf41ddef670c4852e3dedb1404acbd107d265e7c6edcb2bdc3c48a90e9fb15e0d20a152ba6785acdb2d9262acb718ce916fdc55277691

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    651553dcd8451c0a26b3cef2f86e8e8b

    SHA1

    4c309ee68a2ef80474d4dd8b89b8411972323f37

    SHA256

    cd570a6cc0201270b6456a963f52c63117e53918019cbcc378788d8d4ef3160f

    SHA512

    779578b3f34bbf524d5a597d2826b299ed11640e11bedecbea7c49cf6b46eb9d6c9876e911f499286fe7d7bb83c92da6b37d69385546950d181a5c12b5f70fe2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c57f7a1be70cfed7f97d039d0c951282

    SHA1

    b70c44cb4f06b255f615d27b1aee823b33e4193f

    SHA256

    b04dfd4266f285874aec90bf81ce59d5f975a5c054819ad71603878076cfe7bd

    SHA512

    15a96734f9ded6f86794aa6a2c122e86a6df59dba464093bc5b897e24546d4ba6f1182bc22e31b7ba2472b901c8df93f50e338e5a7ffd060ceba608dbf12ee44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e30c1b233c98d64e65893c5b932feb9e

    SHA1

    bb0632326eb3160b801a0ecc635040ecee6d5f87

    SHA256

    85f520c7c72b0a91f6ac11b22642157c6cc197dec77a95d1347dc4f8deb3a4d6

    SHA512

    f2aa62914cd9fdf0b912b66266330e140ed67e6820079dbe7b56a906493e79230182b11fc02f2bb33ce926adc3e13a27ad090ce2a3bc84727ec902169afd2a5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d46dd1ec6af35ea2e7b7292aa9ed882

    SHA1

    bc941f196570ab906ee90766fb6cf5114321e78b

    SHA256

    4b9feda833b477b93c50384f7396e0402ac1f3931ab0db18b6070f17e02c5360

    SHA512

    7fad85c13be04a5a595cc637d6af715eadbd1a44e14c9cd078e22480aaef82fcab60cc80d3da971a02754ede5734097a472d9a37fe59b76fe3ff7b3a24b75e95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eec23ac4f8d1d1845f0c84c730c60306

    SHA1

    ddc157f8597c7a5b1afeedd4881b65c0fcc89305

    SHA256

    a51da0cffb8c89f31d35cecc74e5cc61a3ffb8b7dc0a5c5fd2ca9a2e2941ff96

    SHA512

    2b6c8d97a7250c8d0c37004b94c6a36413f845fc4c4e9002addae044eb00000b7c807e7b3714af075b3e5acb077ad44ffd71db82320fa4acf01ad2c4b8148634

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfa9d6c01d0cff06aa176614b9f53aed

    SHA1

    e593a1afb189ed5acd38dd0d007c31544be4027b

    SHA256

    139351b4f55a79c180f76ea12d6f287c4709e8fe46a9e8c19bbec51a5b695ba8

    SHA512

    720c682f0114c10c38d9a0119468a6613fe76d78be86afa124234091f8a6b762d541a783019cdb6507b52951f614ea0a44437917ce4d0cfcef191e86d6882344

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d46c53721beaf50c9181de96ab08b5cf

    SHA1

    6bdb9c3b1272fd439850c6535276f492c5934b69

    SHA256

    b0b4afc56b64f7e499a80db8d66599784dd11567f1f87e85796f61892b111d9f

    SHA512

    9ab07f44c79d149cb6f9fb70b400d78aece180d50c7e2bee338804147d79c73b9aa482d701294def52dafa5de5388813c7bd403da74ed63135964cff7866b6e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    526668a84ba8b8a34549b4e113587d5a

    SHA1

    4f339967f3db3bf3ac8fae51cc55c20d8c43b2af

    SHA256

    5ca952437a4a1ff01e3d3e0cecf39878215f7edc35f551c8172319d40cdd3dfa

    SHA512

    2a78170ae9852ba0aac8dd0eff8778bfafb1117671b07c3fbe91372eb46f519625c27e0b5106fe0372d831222908b916f72e10fc0046a8913544c933d53964fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b77148b9d568973978e3107669b27b4

    SHA1

    0a448e9976b6beed88de0c3c6cbba83788e1a85c

    SHA256

    93b07c79c77458502e44f23dabb80d9337408fe6d28f20120b8b3cc705c8d8ef

    SHA512

    ca2dce910522f43072063049abd78b2795a2d9de25589e271852f21021cd6fd2dbac83a966918019923c6ab0bbcf40ebe09ecc4d6d94db7ddf3f7a3e137085ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60e35c8cad7923fa3ae04706cfbd9fba

    SHA1

    a3813adb0cb04fcf3d8da39f9bf9af1737903a6a

    SHA256

    f0d46fbf800921766f36d23784cfd2537cb0f4dcde0f452229775e427aa10feb

    SHA512

    3b5149e06cf90666741dcd6a1e831d03167d66e867638bec3a00d9183b5f22a2d3c13457bb070d8119ce7a7e1d04f508c340f9ee35994b735776e8ec48e31f83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c775b195258de453890e10e760cc2a60

    SHA1

    036c40c1c10f244acbbd4f57bcfadfcb138c1a2b

    SHA256

    d369efcfd0f422dd94921841133d9dfe13253e99366ef54d79d99b5fdfa19df9

    SHA512

    348578486e69f0a5b02d1582b5bb2cf283c462e59adc7243b099f39d97df1c7cc8154115a3aa06f2b76d22cae35ebf5f438dee7c36a9225321166af84e059982

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0e162f18bff1bf2b089a80f1a82c712

    SHA1

    09447d9260c9aa43ccc87020dfa0a731db420aca

    SHA256

    0426f2750311e3ce7b3e6fed7efa991c332330d650b29d10782374c2207288f2

    SHA512

    d076796cf29104cabaeaba464c928fc594d4ca8591d77786d6f2113b2a8d0ff12b6c1f745c05f195456228b329aa55312a9de5cc32b4590dc0d4af6982fbac48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b30d65be08decda864ea6e8680485cf1

    SHA1

    35bbe7d9fe1bb0da3ea160a0d27aa7837263d3d6

    SHA256

    1f4c0716d82f131c7d7ff518c5f05ca2290e1d5ea21e1d038976f085f997df22

    SHA512

    6f671c6b5eb24c6fffd4995e2bc54e7ce62305fc4f22ab414a3513ebd56b3a195dab2892f327b3292b3abcda1b38307923bf634bae1c32fa95f6d50c457adc58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d32e7e08565468105c1b3e60edd62232

    SHA1

    1a8e30a700d43a9ae39e2798883ecd31e516c845

    SHA256

    73175429e7f7d9e3e76449bcf728e1ba7ae4352d8e5068dcc3135bb6eca80efb

    SHA512

    0362f77d0c4759a3b6acaa027e1c33fcf52cb98854d34bc168afc71055d4c396d65e1069326382a291d2556eac4e2c35d2241517f9ac9943f197ac3ef1c8bf24

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\902LKC6A\jquery-3.1.1.min[1].js

    Filesize

    84KB

    MD5

    e071abda8fe61194711cfc2ab99fe104

    SHA1

    f647a6d37dc4ca055ced3cf64bbc1f490070acba

    SHA256

    85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf

    SHA512

    53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OOWQLMJV\jquery.min[1].js

    Filesize

    83KB

    MD5

    2f6b11a7e914718e0290410e85366fe9

    SHA1

    69bb69e25ca7d5ef0935317584e6153f3fd9a88c

    SHA256

    05b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e

    SHA512

    0d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db

  • C:\Users\Admin\AppData\Local\Temp\Cab1C3C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1C3B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1DE8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a