Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    27/04/2024, 01:33

General

  • Target

    021c540c7a4f47af57b6adde85af260e_JaffaCakes118.html

  • Size

    22KB

  • MD5

    021c540c7a4f47af57b6adde85af260e

  • SHA1

    bf0ec4790969ca6b3a4170ef7016ebcb10a7492e

  • SHA256

    0ffe16c7a87d0674ae075732ad02cac7e448f247ad9bf39a11bd19f72669b936

  • SHA512

    b1b5e0e247cfb2af0023fb787de0bc7ff3c0d5699cb9d3494e7ba45d937b196d5a9d78e9e7497cfc19805e5f7301c415b41f0c912554408966007aaa4b9ad7c6

  • SSDEEP

    384:7SIaKHgf6jIBZqoLsE2+CETlPpmZJA5h+SiJrEuw:7SsHPjIeakOpuJMh+SiJrEx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\021c540c7a4f47af57b6adde85af260e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2268
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2268 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    8cef5ac02af712f76f6cee715ae099a4

    SHA1

    c83de97cb5794ed261e57eaf6cf05342e3682340

    SHA256

    67db6043f82b99f576e0a9c4903838579550be6e7372e442870dde9e47e8a83d

    SHA512

    de3204107cb6c2815d6f460e0f91a8795a678127b8a3744f73b5f82e10921d51dac7df0199ee22f02f9c844d1caece6b73593faec0f13b4dcaed60d347844192

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d0ef2e764ecd49632ae02c860beae06

    SHA1

    3c807ba6eee735fe9e32bb2016460792dc179213

    SHA256

    17445476548d9f55dbe55f6d3b706b2cf04f93818fcc677fba169c3ec8a51790

    SHA512

    e02db1855b74e6f5fea202ed10e89835ed844ee3a36a12f4f468b93ec04287ac7f1db5c24a36f69ca5d9741ab11b168bc0600ac1464a333534f515dc8420a0b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8daa923f18610bac21d8a27a173a422b

    SHA1

    cfb56a86436373a85900c87437a74ed9f9e3e036

    SHA256

    2fa1fbc8b5c29d1ce04e0f2b23857344fd1bde092a30d3f4753d7da08d186d18

    SHA512

    7a4b4bdf42c443996596c149608c5632669c6315db597f769fc79f946ebe5ba8fc14121022c00049b647582cfa304dfff744d4af725957cfca543b963ef02c7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e1275f7da36b1bad656204e7a4fbf36

    SHA1

    a59ae1d50f8e69ad1ea25b419205331ec10fbc95

    SHA256

    dd04d8a2c3478e538cbe76c553bc4a96c9873be8dbc350819977876a7444c193

    SHA512

    d856a6e3a7a022a6672f23fe1a95e966404b900757f504f92dbb35f42b0d48f86cb1eebf9374c08d5296f226f0c3e6470461e7b3f84806997259a4c068f0828e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0bd76c07a0cc53754609a4fd6343c40e

    SHA1

    a2b9fb243a4a66a7041a6b7bb13ca9c773b342da

    SHA256

    ed00bdf8ccca1c647e7529116e7ce44c35cd4545a68c373de8f4e7b40db6e4e5

    SHA512

    4963c19af0ee775df3340c423d1411e3cd48c4e821e62084be586a054e0f7af8480155c7baad7e459b88b5007d5e9a0af6020715e2302eaad6940c133ae252b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a07057ec843927a1cd3cd6dc9a5456c

    SHA1

    5658f6eaa0c3cbbaac119b3789382903ba4c173d

    SHA256

    6a973d8a82a526f1eba341952053294a3d11ffbdcf3706c43f87e3ea26f18b88

    SHA512

    8eb86d69519ba357ac06f8e18f022c8ea80389ec7ecdc0597fa270da62051ccd6326793ae0e67294364b0991b4cd95db8d7685f6815fa496a53b9a67467986a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d246ebdeee1d1e930699ff5c567ff0ca

    SHA1

    30b871ddb397a434d4660e89107758bab2cd65d5

    SHA256

    d92a091590aec350e2dc55aed655812c95afafe4953bdeb565668bbef3d1365d

    SHA512

    ab12b1933ddbab97286c1fa1186041de4deee4016e777b54c2dd671f083a1ef2c0f9ff643d39af99e08e9daf19529286208141eec9280fa1ddf130ac3bd6238b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d10377e6ccd6fed6f07462ceda7b2745

    SHA1

    4fb3d259f5edff011ab2d969072ef35419a52a40

    SHA256

    65f9179e1552b8696c2a483a8614dc64429f87cbc05b501fde9b5d7eb8c37dc9

    SHA512

    2905d3bac9b1b73d128de394e7ac5a11d971ecfd11edc0435be66b7d02bc55dda8101fa00434e9b608e0b6690725b56cdfbf38f936bc89b8ee11b85b2cf3b65b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8617a043c7b5d41a5df1343e19c970a

    SHA1

    36f86884c0bf768fc82bdde6d9a427b43134e1e8

    SHA256

    cd44e33024c19b865a9966d9e8f1073f347782bd2856c2d69de04f274a6e756a

    SHA512

    9b09a3478415175db1aa5b859f38513563757575424416e146a223e40d330947474ecae872af851a4ecfe65a0e5c5381366bbc01e0efb4fa8425995eecce33b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efcb01bb1c628765cfdd812e1eaeb53b

    SHA1

    7152cede91164830e9a68e0576206e507497c5b8

    SHA256

    51e77fa7a1f4ad8168595200b0763d2f82673d9ef93ea070ec0e2d30d7043e84

    SHA512

    cdf9e285e2dca5a012a080b4c96430609678ee12dea9d6e5a7517acac5c43efd11e8cd9b35281fb5654b20e7cabd63684f0fc9815154af85011fb681fb7a4ae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bfdda02343e0aaa9bb86776587fd3e7b

    SHA1

    d1ecc55e9d97ecee39f9e858a8df757865f6e2ff

    SHA256

    0cd95388e681785d25bf7227aaf5c7d8d9429c821fc390d7eef0d31fd21656cb

    SHA512

    637fc367c07c9c866329bfb71e85e94e1063bca71984ac69530d31a596ff772bf3b63c84c441657f937e28759e2dcc8b1efc0d8640f1cd7d0fc96a4000dc4304

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4970fa6a35d5d211d8174e5df3e6cbc0

    SHA1

    f4f53eefa84625f37e29a295051b71bc406aecc2

    SHA256

    eab7aab29d3b36ef43294828f020d5a3c5c2b78fc4752d74bc39ee596eb79d0a

    SHA512

    12feb6773f3d70bd6438638df2dfc882e3f532586dad516f579f74450220e3f059a3ade424ce0296307f9483fe84d84cb355ac52fa48ce0bf65798ebefcade21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ab9c3d5794cfaa96129e9b95d2b6c7b

    SHA1

    77f1e78bdf38acff18ee4055c0999c137ab4ca54

    SHA256

    e6629359c52a76c6055ec49b933f8d2e5f93bafb76a314fcf3d246c756c766d3

    SHA512

    9736f1d067977c5acc5966a6e01aeffee1d0c6892c9bcffba291da562886b495bc6d9c077f74898b4e39a610ce906745522f184141656adfbf24a1b205811fef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1d42ea538b172a61a18a76ef333ac6b

    SHA1

    205ba07622301fcc641c21d86034a9e43184b8da

    SHA256

    2fd3cd5d5b37dd39ffe554782b80bec442136f4b79417e0a249fa9e1ef5230e0

    SHA512

    9940a739fe06d722176afd7a95aa7e355f0b40abe68099991b431cc7abd8c96516e0564b90f5dbb24cdab6099e5bb5e1422f8461339a105b0c51f1738b125398

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1bc3b132f937262b6b5e5649768cd1b

    SHA1

    3b6b8d2a0af34dbe24661a2f083b0efbca937a23

    SHA256

    edca9fc74fbe513447369b132eddad5340cccafe5b4b448db73062fb675838c4

    SHA512

    1a06e73bd3f087ca9db0575e33f71317eb688fefe5c4180ed2ba8f9ef832b2bd19294970c31075f0dfb21f0ef6d2cb517b8b527d62fcd7a328b399d31945979a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3ea2a41bdd4eb6413bccf98c7c68e13

    SHA1

    562b8b3e3ba707a178aff7e9fc2cbf8b2da01a35

    SHA256

    d3fe118de0ee3014d3cbe53f8131c57cf060023a23a3a9e05f5328c132c9781c

    SHA512

    90ebe12036a12ebc3c58bc0a1424cc811ccb402de88e9e73008fca558cc8d83469fe2196ad4add5f8f883c6043947c25e93c2b41f0d7aa521287cdd2b7cbdd69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea39b1e967faca544003c4fd4290e390

    SHA1

    f6ef51d6e23f7804ae48db738b7e261e62ce3d42

    SHA256

    2053832bc489cee84c203506584634b21c9a764eb13d9c059f0382647657d08a

    SHA512

    99dc693a66845cff6e4ce2580d26166cbef269c4ff219f1eed4453933331af717ecb432e7d74fa7310cae4266e24e2b92d1e98465acdbb696907f84c18c7058d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bda71c5b6178c50930c5340162a5c75

    SHA1

    df87818c13b52fe6fdead83abb0ee9a8657d777f

    SHA256

    a7f9d9da5fb4564789353afaa1a43557a9ec8b2a7c675de402fe3123031a0b18

    SHA512

    7aea1bbdb5500d15719a69adc2dbdb77892b2faf0bee0320ab975965a931563855e8dd40684c42ce2ef2ec6e4331a56a952196e6ac99e6dcc38ce81ad98ca9ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e4e58d28e84685309c52bfe0dfab05b

    SHA1

    5bd92e8a5991a96e61b9b6f9139cb9705ecb673e

    SHA256

    d7a9a9fb5f2237ee056c80af60a3c0bee800ce6d318b035e94c6be3f30fb20fb

    SHA512

    c3169fb3422c4f7da238db636000194ae9c165a625de25e89cbdff5e1e2ba25b1cb41edd62d67fb48352fbf1359ec754ea072e10f71efc2dcdd69fac05223c4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8f9dee8d34790abdae84e468a42db01

    SHA1

    aa044c936d580a0687e206869267f61144816199

    SHA256

    45bdd925d1ebda57ec6bb216729287677bbc67d9778f1f63df8f5708c072ed8a

    SHA512

    07597fe54edc159cc242b4e10dfffc0bc628ba7d7909887b329f4ed64c00429bf29feee7fc7ff22685cc74466331d582a90ef967647942b60cb0ad97dc5199db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8adaa457a0cebddff83be4edce4e6a1a

    SHA1

    c334ea11660bb49c12e7a0228b6b0473e825764d

    SHA256

    af853b343e56cefd33580662bca1c63413f26d6316f276239d57d6c433f5931a

    SHA512

    7c6598ec8cda71baea033292834847ab6d6a0b59d79759ff0d4960223a0c310934181fb9253b1efaa21ce0a239d6ba880c273b6dcdddea9dce2d11232bdf0a68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    5406c1e526985565b7b51fc3ed3c2632

    SHA1

    24e6197fcc87361179bbadee598d73168e9a7e51

    SHA256

    dc433a17628c4216bdca0e48deac87746b68a40897c79596a58f3da041012d7f

    SHA512

    0b6d310a84d5fc03b58f4edd0462a8cc25ed61d87865429db93ea0de76e7e619697e0c299e405ad731ef036beb1299099f0f6159075ea61340238f5b49b723a4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OOWQLMJV\jquery.min[1].js

    Filesize

    89KB

    MD5

    219073097031d9c1a95a1291d66f3a10

    SHA1

    2b7996b01d90b7f424f2a2e6063947461db4b2b2

    SHA256

    232066e3f6f1351afdaee1acb70c409766641fd5669e0b55ce7c77fac0a857ef

    SHA512

    9ad2745f96cf79a4d59393cc3fbb3958b244013f6798c12abe41e37fca80df3c7cedab4b47cbd197645c86b31077388ec8f01ea8d67c5feacbef95b1ae7582b5

  • C:\Users\Admin\AppData\Local\Temp\CabE45.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\CabFAE.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarE56.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarFC3.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a