Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    30-04-2024 06:29

General

  • Target

    093d953476adbf5ad8a35bf671236825_JaffaCakes118.html

  • Size

    94KB

  • MD5

    093d953476adbf5ad8a35bf671236825

  • SHA1

    ac24055c910fa591708087913326ab4cbcb4d4fa

  • SHA256

    6c6a54ad4403cc5f8da2c76eaebc7c04665bbd30c1f7f701adb61d4a14e998ad

  • SHA512

    f7380a7ec369acafda327e2802f7db2a21b36b4559847a4c0b81c48ee341d288d925aa0ff9059779b342165b16f006dc9fe7752ceabe4bac4f2898955962e881

  • SSDEEP

    1536:WMLiNo/FLja7L7fBsrozc3o024+IAfrjyoZUrThBdkrY8mgHC+qpEyW:WAitMhBdkrY8mgHC+qpEyW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\093d953476adbf5ad8a35bf671236825_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2824
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2824 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1504

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    885103725ea54412b332ac1a72481290

    SHA1

    c054ac1da7856888e97793dc17ab519f3a66fded

    SHA256

    21abc016df08271a0e50123dc9f6cd84ac0c8a635feee46805cfd4fac22db1ee

    SHA512

    3ef20765b9119561995b8a842ab847a11a3e31d24deb2fdd66a6e93ea711a4bd406da8d79787b2742b8805977bbb27d182b28518f85856d4f11f01510ab46c86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6aaedfca132f3a280793a390f4e600d5

    SHA1

    57ce96a168f1336255351294fc7782a578b1a676

    SHA256

    91cc5da7663b54cae9bc3fe5615b779e1165cd759082c0a96974f9e0e8e75b81

    SHA512

    eb0e8276351a5227177e93bd82c9ec722f78416f41dc1f4147c52718f69d6026697da4e134276e9b43e7b5ffe91ff00510858de9f208d6a0b9e85ddc0f79d7ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23bca5ae9a5c1782a11b2db31ba92fa9

    SHA1

    1ea63b1ae527d5c8e8fb776931e34b9447ae1ea2

    SHA256

    44f5fa496b736eef1ddd8456206c8e172149c84a1499f0cad73ee12700242ad1

    SHA512

    8c62549aad5f14359ce477ff225a85c8dc4658d3e45cc2421be0e4362483b667f38c049738b194d9f0e2bdc48ba184c2e9873d5321d204a86be54a4825216168

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52f4fa3f8d6a8af9fff72b1235498109

    SHA1

    14f367be7372c8c540064999c8d4c7f79056b0b6

    SHA256

    4577793744f8d16819714f7d43154ceac0a42faf932c39263cd1bb3cb755d5c9

    SHA512

    73236f58ae1df5e382526a9620dbdb791f592053b9c6ac0f35f8e5de4c795a1c6f526c9c538d454a7434770dc63dfdae239e7f7f8eb782ac55f6b5dbd295df36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c997713d2c5c9f656206588e5102f16

    SHA1

    f335f31da58c0af914048f16d09d0431d2b235ce

    SHA256

    25fe226d30cbd23b952f320079f4226412cdc370307f281c41c0364130cde03f

    SHA512

    5981faa29d1b9129c52b546b4a92690db4ba2bcfe28ea8f41fd9b2eaef34ee8ef917401f8cf17f0b0ea750a14154408c4bae76fd24bce686f5a59dc879615703

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d95e9783331792af397f1733f27cf5d6

    SHA1

    df5ff15af154797189ec676552ec15688cd5dc45

    SHA256

    878be9f62584ab99a51dfe85a1e6810aca9a55558a052a5b06270ef20b88b879

    SHA512

    e333d1f7c163485b108a93ee22bbc8408e60491410526f10e5b17dffed587dccbb8fdd123fb7eaf71bd44e58d45c1a357d8bb792bcba520a059ec072c2b4b3ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e8ab6deca04d4fb2c85eda09448f502

    SHA1

    7b6dc59f70021388bcb496b18535ae8266bbf912

    SHA256

    083aad1991ac477ff3430b890cbfd556b3a69e3cb472091bba821235c5952821

    SHA512

    08d0b2e177cf4f3d0d68d42158c34e0614ab1fb3f29c88ec9f165f9c857803f124c9df00f2932abcb5abdea367728f7dc6426b335fe6dae319be98b05125db23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    299657f006667419e318ca713479aa82

    SHA1

    9703db88883097e4f08febdeff431e3d12aa952c

    SHA256

    f921504e199b91707b5854618e3faafa7b9581707a45063ffa8397081fbcf52f

    SHA512

    46d6ccba0f2d73eea8c8ddb0c55bf630d398e451857407b62fbe8ace7bf7b27355833f2a8c76eac21cef45e4801248ca60dc3b7d167e5e3b3c4a6d80e6529eea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1445b20a35b7fd75aded0e40cfebfe5d

    SHA1

    abc1e77acd5d827bc2637a6f176771ace5b5c5d6

    SHA256

    ae12e917c7bd70abd5e6a199bc24e2a0672d715d5f41dfd61f719b34f29304eb

    SHA512

    796255b9c4b6b8bc983bc600a2fc4f44b63be93c365014b29fd37a7075e7f36c60d5348e5a46e3c6a6c1ec8bd3b3ddf806ad3bd421e905d1c6e51827dc78ef8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21e323335746df969c5f3591ca410eef

    SHA1

    19e82cd19029d2bea91f16e5c25769604fa93b22

    SHA256

    153437d62e52d3a015af45f09565d79d28b601f01505b84c8499bad8d599ef64

    SHA512

    22f32f62d77d6fce780335347b974f0500c3f22c7d5673f0a6cc6b4bdb02ab5dccdb4628bfe4760226bdafdc53d1f20b646f0d012c0d5b78deb75285ec5bc5ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e8a1023145f26887868a6ba8322f5584

    SHA1

    9eba7dee87dcaded5cfcd029bf915c0d7ae11aaf

    SHA256

    747bd8bd8098f3b1042b0a37b683693c37e946367edd7b286d043781b4613bc6

    SHA512

    ed0da546e84c0cf88723a39e7889f4270f9c2cbf37646af41e75eb85cbaba5e8b77957ba4fca95ad9e57ee292e120032fec241067d02bec54ebd15d25398c9b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2b8e2bd7fe6d47b57edfdf2c38b3799

    SHA1

    5c100fe2a150c004f138b1c64bae79ca4a71967b

    SHA256

    e0d2bfae04a30308754d1a752e172dabd8d5d0a4308d9de0b4d66f955c46b68b

    SHA512

    838ee11c7981b71df18ffefae7905947824caddf245921605c3a325f0afede233eec496cac8d309fc0860af6a3b2b5efb4945588435b52413937a087a1b6729e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    697c3ff613cdbb6ce99efe0cb8ac3a6f

    SHA1

    e95f5f0c654f30741367e8e125403bf9d99f18d3

    SHA256

    fdbe0cdf8c1d769908de229a2fb798f2aa817b1b0a7d2e122938627f39edce13

    SHA512

    c60143e1f8c28b12b09f751862c3c144b93b8baf695cf96d2eb0b8074f42aef90279c5e680978d44b8e353531ebd7a423b62d709b3d50ba520e89be0d5266c7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d16bb769043ed3dd3b7770d166aa1a0

    SHA1

    0accfecc6f168c00ab31ad39be2f9f298e8e1a18

    SHA256

    1384ce9bcc8c96109dc0717a561f27d65ff07a70e29b70334717207530fb193a

    SHA512

    ebbd375e1e9ef8c5bcc029aad92f7f27183cc89896a33763eac31a55aa133e7b7ae5af516283fb7d9cea7e5dc380521d34cc5135b36520df1db1d003f3283eb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c447a38a474b34403f821f8f077b8100

    SHA1

    3f1cf2be544650f10def97c223a48bb7b6c314ea

    SHA256

    78803958acfb920a25843ca287ccb2cccb96aba0ad4a66fac8506989b26151ae

    SHA512

    b3b95794c7d34a93b4584d6aad6c48dc1b33dc3355c49be77fb63e9c09f2a09c913c58390b121e80a78814a59f34672970e08a1171d7b237d7d94f96cd045de6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5df1c7fd05dba6b0f65baeeb798aeb98

    SHA1

    79f70fe733e4d0a3bd35cbd43551ff0923ed6f38

    SHA256

    203b25378f41594d8cf323f5fc89a421e642e9be0e959ab14357aedfedfb946a

    SHA512

    19276c9d2cb36dcb9233ae4c0451a9bbf82e703cefc4a7d765ecddced19e15e8f6127aaa77699e2a444bba90ab1f93bc8812c607cd234e7b65d949dd449fc163

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    742360bdf1df1f89c6a8a6ec69d56ba6

    SHA1

    9baff313ee030654aad9d19899ee9dc25e9c6c5c

    SHA256

    acf4d7fe7fb3a6f1ce588c53b437a63a8d799b3ba82c2ff1eaae70fcf8bfa623

    SHA512

    b6d219212e8f8c482e84b33ea12e830cf7a30f8a13f17b55b01ebfe7c0b022840ed21846611d13ef769600a30d94b4bbe90abf719d33d15417120a30953d3b6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38903d3bee23ced2c9c454237adf3e6a

    SHA1

    a84968cc709772e1546a64f5d4a353cd82c1c110

    SHA256

    51e685206d6aa6dabc52e67ed387a423262cd13597876062fee960b1b2d3179c

    SHA512

    9e1e8ba35887658a16c86af276207c1ca90417438fd61a49a1e0d50d0840aaa7b0339baa21eace29ede5babfbe6eea06ddaffde31087caabb90f01ebe05aebe0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60198abe922d182d93e1b72e5107e993

    SHA1

    01d6f1eea86a67a07fea9d4881ab8f4bb0a2f5d8

    SHA256

    299d75252421a96301d5e7698bf40afe5d3de0beaa3790251f1fe989872ec4d9

    SHA512

    44b16d3c8f53038658be286f75208c38138091ec84845e7b8e1cbc1a79c16636136fbfe4747f389ed74a05778022684d4ee936fe3f8a67a46bc301cd65f3a4ae

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\902LKC6A\coming-soon[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab33B0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar34E0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a