Analysis

  • max time kernel
    117s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 02:25

General

  • Target

    042bd59a2658d7542fa9292921f27cbb_JaffaCakes118.html

  • Size

    189KB

  • MD5

    042bd59a2658d7542fa9292921f27cbb

  • SHA1

    06334db55abb16370a424cd7208b41c339e93eb7

  • SHA256

    780e8a99a354776cf37fb2b8e4eaf4ce5bd722498c734864e953482215c70cd0

  • SHA512

    b95b29ee1d0b40b37938270d1fb0d4a6f067dd9ccd6e6eb829d061ff9e05e5f8ae92be5cb2355f5be531ac575ba941e4446132e7c21fd1c00fd98cd5e4a8d036

  • SSDEEP

    1536:dEmNGZqnIYnyRZWS5ogpuz4fQpp1dVWHGZ4srV2ERZTxAHMLcZ3xt3VSmFgN:1FkyZ0KNjLcZ3xt3VSmFc

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\042bd59a2658d7542fa9292921f27cbb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2816
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2816 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1384

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    61def4c7119e4a430f76418d85ecfbd4

    SHA1

    cd6dbb6ffa56ee2a4c182c282c1048c2242e464f

    SHA256

    712e9cee0054f29f5198ef23dc824da97528c1f3ee2c9e6eb9700e53bcf352c0

    SHA512

    6d9a18f3ab8fc5016d362e071d00049e31aa4fe18ae33fa5627b53deabae96f6a2f3a3b7852085f0ace927055d9010276e43d109ea14a2dca51039567e625e46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20031450b1718f7fc7d1ee72962be2b2

    SHA1

    9fc15b291b5607a0455dfdb2dd7bfaaf1734641f

    SHA256

    99c48bd47e9a709e2b681e76f17bb9e509d2a4d1a64d04c7e96d944f68917ada

    SHA512

    f8d92f21ec720a656c920c3342b501e7cbd218d5c41f87053529c881639f0f2679db0f174475b9ef1235559aebe6fd629686de2b6ff52fe8563a2e4318e1c793

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31f43b7b422dc8acbba85f66fb0101b5

    SHA1

    b7b1834eeec4df9e1b358a3be3c48c253822edaa

    SHA256

    f94b6dac5ddf088a129e2d87525647286e3056591fcc1275d6427fd682688ab7

    SHA512

    065c8d021385474a9d49f6578fc75de81f305d00c358542f54a7001c3746f64ec06e882e6e0d972275800e8920bd0260ea0fb2f30bd154af3aa68158e973374a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    845de2435a9e513a77b3ed7b069942ac

    SHA1

    960265a49136ecc1b6d65adacdecd325d841c8ac

    SHA256

    6b286e3f5b6c230c7e3a93fd17c44c149c9c8cdff89de5d2c1c6db4c87b4f0d1

    SHA512

    82a629b373135d9dc9958b7faa53d0514e6c6cb1b67f25581f3a706beb48b2e1f0c63e30c4a1c5f092d3ccf662e91aed1b91ece5c496fd4933c2ea765b477351

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c22821e788c4b2cb9a61cd43211258b

    SHA1

    a855cc16fd906601090f2c5c3db1e6f2cab7bab9

    SHA256

    516236ad431ab69dd6a53e8c8d8b420bdb02d575a236181626926f285674a3fd

    SHA512

    1d73198995e2b1f10d4d98fac846e6d6ce437c3fd0bf5a06aace008c14ca0823087b78b818d012711f9960284aaca02d012579a20f7e7475a82a72d9e790cf4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    569bfa932b394a0de20e6f1f602bb7fe

    SHA1

    64b160cca7cef4f6f1df87029e991e0caeaea9df

    SHA256

    a817a8a790f714bd47d2cabc6c5973b5702e34f69968d38a81dbcc16bb25b274

    SHA512

    f883e323e4e17a2687776effbb74c2312f94f7366e4ce2dabcc35f9eca70236a72686e08bd0065c79be40e21cca30571f24d2687471f7c044333379ac6f0395e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbc2633422963685667d5abbda00b383

    SHA1

    a120117da04c612bac45ff1b58f023de55e981b0

    SHA256

    0c7c320bd6744862efef4a8ae208b48645edb7da8512b13b8bdfb53fcea7aee4

    SHA512

    686b2c3d89e921122eaaeaaae52e36d0633be111fe70ee05a14e0a5fab96a822bb8bc59d4d79846d1cd064323eab1fad0e68be200125ea856ac574a53e597579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2d844b1636bfff24a91427884844a32

    SHA1

    e243efd74203951bad2f749a9ccd28a919ee7db2

    SHA256

    bab53af7ebc32954590e550eb7ffb5dbf8813a46e04e1c29241da1bec34721e1

    SHA512

    8a1f79044a5776206108c67f13f84cbb24526d8cb6586ef91ec82a700d8b4b63703332b570b9ada30e730cfc31236e550743a8932a6e279b23215737c8731baa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    82a145a7f0214c392aa136a22d95c4ea

    SHA1

    b85db993803ba802bdce174c5513a7353468b0d5

    SHA256

    b034613da1d2dd636d4bb01b47882bb3b7b0750e7523755cf0ed55357e4ec808

    SHA512

    417f18db6119d4d5c40afdcf332ce780c15e923a6ad3fc3acf69555039b3f1ec7f99aa8559ef73d130347829699b6f27f8e56e47bfbd63173116d409d13d4b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ffe31ad1481a714e5d034b088bb46eb

    SHA1

    e6081f539f6416dea4d62e1b2a958fafd163be92

    SHA256

    1db8c843bdf32382c00a843d042d30b86a60e3d9e15b66795694caa86d0123c5

    SHA512

    6f4baae4ab76ec2b0e96c640d17e82798d5329e851b59a4432df00b76255928cd6cc2c61443ac8b4c4581c50d232b21d7102e1d08f31d8b7a095d29ca2dfaec2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7606e4acb1d73ead888a03772b8fe342

    SHA1

    b4ad7e8945a182e69ecdb73e9a22a4db52b7c0c7

    SHA256

    f23c738cd5c81662a24e72750b56b86a3463d6770191f3f11231d003b0f31085

    SHA512

    d94007aa77a64abec96944d5aaa370ec872834ea5b07136894e04d59310e19f78bd3f38ddb14be0e76f2b19cfdefd7b8ea85dc818aa6461a60b55a3d01712fc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8aa64de827eef7e3684208eeb0aec6b1

    SHA1

    1818764f5ab2bb646700cbcc18ccbab1c38ca655

    SHA256

    96c7608af2d7aa027be9af2a9e25c092cb29a55ba2fb0252b3d4854c9c7ef14c

    SHA512

    73d065675311a1768aaecfee50c39247cebad2b7e1bbfcdcbb5f283aaad058368ae4128c318e2e5a6171401aa4ce1d4900290606b28ae0a8c7962daeac11498d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1f73f75115beee113147b9d4778b2e9

    SHA1

    6a9039ee483e7b185cf51c3a6bb9f2648e01ea00

    SHA256

    cb6772b9e2804924a5cb6169425fc0acacb80ce1c234358a023d437d24e83fab

    SHA512

    d6cfd626fea2476505d106006fd7ce4e6df86fd557c0f04be53352985960cae5a077ff5160e0815e92e1766c3e642b117771098ec870dd814ab61874ad650204

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a2de9243972c52bd05a697c65a196f6

    SHA1

    31cdafee9a0cf6a4bfff91b6387a614b6db9cf98

    SHA256

    c77de9c4ec86f993c5bc03fd14c69ba051e9ad1443f8553b629bf54c04818e9d

    SHA512

    1ae0fac4495e259a0c4b253b4fd8c24a20fac72ad4799b8bfae0fccfd7d70bf05707093962dd825395df1933238e2479e407b43c0798ca12d78b742deaa1da4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48312b88e0a2156d1087d366589ddb6b

    SHA1

    e947c6b8fe1f879cc0c6fc0b9d6bfc07d9667fb1

    SHA256

    8111f107a6ea3ab5f6df0d616460e70873f6f9227d7e9e59adecd21ddda0a543

    SHA512

    a884b571213dc23221f0b1036ed9003529f50f99d70d1ffc34b9c4b6a33da32c26f8120ed98ed6dc52d8ee9a6007fa5af1cb386a84fbd19e7baf00d38469b0d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1e6a1bb2d8adfde388cfbcb14f584d0

    SHA1

    143bdbc98ac26c0f7c41cb49756fd1784bf40464

    SHA256

    59e35729b574b3acec2966e8f97aa6734b2cc6e299fc71cf29c27ed1ff9cbdd9

    SHA512

    059ad5c5c3e49742cdb2265a05eb228e770440e063e87fbb725540931c2b688b949890522ae61ed92e52eac060ad05ce91b21046571548713e130be416da4542

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    994d08c8ce5ba5e135beeb36edd5aad0

    SHA1

    0d244c957e8f6a3f440ce94e056a0d9af0d93a27

    SHA256

    c9ba195d45b97661b167f19cb92fc723c26fc21e68764e06df18cbbe5318defb

    SHA512

    2679b0048de0ac5a18d5f5035e4545784a7f2adb6e37cbcd7b84969fb933909b694100aea98bf2daebc2fadbd7ec50b67ae32a15bb6d5ef69798c6f8ff12b35e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebd5c75dd695a329a892c34e9f210e36

    SHA1

    a0e2c236fd2b9aa284c37a64b5709119eea6f6a6

    SHA256

    8e29a317d5e00d9cfbb5f55a63b1c18600303d126d91769b75aa6705d927e5b5

    SHA512

    7b82ae50dc335a6a600742130ea0d52b8bb92291efd1fcf57cbd7628d632c2bc2a86d873ce3560ba203759f1ba76f822102da8c1e01f8ebbb58ebd2eb40fc567

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eeca53adb0246903e2da1bb91761b217

    SHA1

    6e02167f416e0838f093823358836b46dfd2ab3d

    SHA256

    029192ed768991cfd9adfdfc95d0fc2fe2dba04cdac209248250a39cede2e371

    SHA512

    c44945336a9c800d6e9cd38db340b0ffc4f6656b7ac2fcabee8d640b3b1c1c8d2251cdb0e7a005451d3c12e8b1f1ac25f0a91238bea1507c502474963f9c46ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    0e11b2410ce020819aaed6dd3e439bff

    SHA1

    9d8aee95ec63229eae3f2f29d577db6634c709a0

    SHA256

    8461bedee9359e3e0044324fec9dd29ce10da3fe36457fa2d022ffa3ef9fd2e9

    SHA512

    e1646340e549e25b03455884b30641d94d847068a964574ce02706d07c6207494493be15f4cb07cc52aec82041580c35a061e5c69227c862a7db7db1e96edd8e

  • C:\Users\Admin\AppData\Local\Temp\Cab1F73.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1095.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1252.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a