Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/05/2024, 00:27

General

  • Target

    0f3f5d9f735f40a5d1369a6f53216bae_JaffaCakes118.html

  • Size

    36KB

  • MD5

    0f3f5d9f735f40a5d1369a6f53216bae

  • SHA1

    5878e08f5e66bff2ed8759d367340a361702ad4a

  • SHA256

    000b0d7b4b461565e800cb28d9c4845978bd6285608231cb8ecf336a2890b65a

  • SHA512

    ee03cc35c301d710990630ae5b1d659928bd8a97ea415f783a324191b827284a5b75cf9b7acd1e2427139a2ca7396264dd517a9f3609d354fe834c6e4e88e643

  • SSDEEP

    768:zwx/MDTHnf88hARAZPXjE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TBZOi6DJtxo6qLc:Q/HbJxNVMuxSs/I8KK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0f3f5d9f735f40a5d1369a6f53216bae_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2744

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    5f8a57d43d2c9bb4f19fac37d4a16bc7

    SHA1

    b592a28d89ca394d25ab1e92406033d468ea2ec1

    SHA256

    e19d65c0440adf6d57d81481145b5e61ff4f291c81136e610d3d0926dec85faf

    SHA512

    51c5ef2b2f2843c991107848e3739814e219676aafc1edf4be7618166912036c22487f05d64cc3c2ce85585c1b474c2e841a0d15450fd3631891e27965a58a1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    724B

    MD5

    8202a1cd02e7d69597995cabbe881a12

    SHA1

    8858d9d934b7aa9330ee73de6c476acf19929ff6

    SHA256

    58f381c3a0a0ace6321da22e40bd44a597bd98b9c9390ab9258426b5cf75a7a5

    SHA512

    97ba9fceab995d4bef706f8deef99e06862999734ebe6a05832c710104479c6337cbf0a76e1c1e0f91566a61334dc100d837dfd049e20da765fe49def684f9c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    fabc10d46e5fa676d0d6c79ed39d868f

    SHA1

    c3749d508da66a8083a969c7b403093640e9cd19

    SHA256

    df9321dbc3729d6d4f321ab4162f6febb7e658013e2f49ba86570c24bd16d22e

    SHA512

    ade43773f3c6655bbae57dff1d00563c840d7c8480f373f4bbab2a7b1073be856464c3515e6958082e4d179759e8d4953afd4b668a47a846ef072cab7c88d7a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    7d27e795c0aec29a7c7d1e8bc981c378

    SHA1

    c960e2308a73d4c747b1d104b8f028e1d9353e07

    SHA256

    a87304908c928e5a9e7140c03df10664653d589f414ed0c5fcc0f8286016c199

    SHA512

    e37c3f35ea2147157c0472e64e8c690f772f008a42ede8c4997b223b7fdc7bc4aea83bcc17ddd0369d39aef67da4c02554cc9fc1458e813bbd3916b84d2c2553

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0596a42e94cb77f40cb2222a7be2f104

    SHA1

    5cef25dc5d7612b9e06ec0fcb46f2500b693397c

    SHA256

    8acd868c0fd0bf246be48a76cd843e00e3a074d1d6623aeda974b4b02d0f7c18

    SHA512

    0c67cf09f515fd0614c4b5be9f27132a391092507ff7cddc789335c41f07758725b1072695b80b393e24a93e800e61d121dd510ada1ff946d413678b984c3045

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09bf005695be2454055886f52b004696

    SHA1

    7774922de09d317a5021683b3f8d1286d1e5ca46

    SHA256

    0933e3a0ebab9343f83f3faee3e9266689a6c40eb3a71c14d4f94fa8d662ed76

    SHA512

    af046a3e2ab67d3ac08985eb7e0a3b0e3064623c6394ee8eaf236f5dbb5901d0106539aecfc56b6417467d2e6573cf6da6bc69fc247a598d91b46bae9313ac46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c5fa424cd08a7be6748b7156465a337

    SHA1

    35fec7e42fc5d30268db7fffbce8c1e380ef8186

    SHA256

    011dc9f05d715dbb2a20080cf9eb094fa166ba6cc9f72cfa48d0d81db3a21466

    SHA512

    f2e039170e129e38429593abde8f1259002597b2cadcbd89a90dc16c0330e424f3e4f68a800733ca815b42066422111f028ac732308785b268638d6d65272bda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1cf376984d3cca2401d539788b5c24fd

    SHA1

    7fa345cc00241c947782e8b9943c17d311444a97

    SHA256

    6c59abe573c1fa291b4a5af6c2298b9f4f940d35954b376ce81cc807cf211761

    SHA512

    fc4cf34b5de8d95558b81a2f4492efdaeb45405742e6106999159e7842ca09a4499ad10efe13cef92f371b43f5bee53295aaf1bea3301fe46b375437077875e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2c64962b97853eda4708cb0716fe39c

    SHA1

    27d2ef4335df6f9047556165ec2a4cdcd4716a1a

    SHA256

    05a1ef58c7000401781ea9d8a66a10cf922e314f81ac638d3d80ea2ec61fb858

    SHA512

    6014813fb0747c7b37a1f06c2bd8367a15fc3f99c51ca2f5c630947f19d5523c94583d51dbcdc84dc8a295c5fed519b1b790b2c26cd79283679664f6f32ccbd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb36646962996297ef09de48d132e32c

    SHA1

    d40140d57b959093abf8334a44b70ada39044d4d

    SHA256

    4f0ef86972000349190e7bd9fe3ddda51a695a29b4bb2168e91f3ec5b2ab4561

    SHA512

    f9e9d1f0df53b3d674907a6fc62065392396bfe1c5bbd78666e16059de59b2e599526c746b01d05cc49b92941c49acb5c89dca29446abb81c2e5ae34adb46458

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9384b36136b8c7a6328c3bf507f19ab

    SHA1

    2d288ad320fa3f517de9305a64c97bf7f7d98624

    SHA256

    288074df4546c78871a3b62cfe0107ed4969df942e1fb609ce55d9bc32a85041

    SHA512

    db84387501514736aea562ff08a9248dd226bfed254e4309104515730a205852e45d5844856fd456680493d713479e8f2155732171a247a2f9f35ee7885fbca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7492f13021a3d98e0d0b82a7410b3ff8

    SHA1

    f191a2014d051669574c99adbfdc8c51c074c856

    SHA256

    858c902c666c600586fe49730398bbbc9107dc4b8088800531ffef7e9ea2779e

    SHA512

    aeb76235fdced700509c86e1b3ae5f5660816e871de3ee869429d581ee5df78ecd1a45c5911d954640637dd4beac46a5151a9509947636e681efcb340611e18d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d2e93a0b794bbae8aa57c48b58325c0

    SHA1

    845f0c841e5eb0e8d83538a706fb9bf8ffe0942c

    SHA256

    1f9a651ee082e92b399a6bccd661b1799d5685e2ec639f841ab1979e15edd173

    SHA512

    b3972a48123a7e959a1b95984416929704faf9d3cead474db3092555ba9dfd66be724786846b53e29a0bc03df209760fdafa9bdaaa48aa2b11e1803db878f4e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a40998700951f7cee7d03ec1e9b2901

    SHA1

    17d7b7e24739fbb380731663687be1691a5fa7bc

    SHA256

    69080a6416de1bf94f74df65c61085d10e4bf400abb6645339d32858cb31642a

    SHA512

    787a2eb712da5bb2246d049e713b62f4591b63a75df8b2ffd8d26b70476b2a2a8c7a819e0ef468676223cf275ad7af6527521992fff3be6638e9ccf544e75f95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    530432444c09952e04b60429b17a8110

    SHA1

    77396095019572f7a3a7c4fc5faa250938793ca1

    SHA256

    65b8aecc1b449fa7d54237889a1b1419e89033915b420cb2dd154a1b7a81e010

    SHA512

    242856ba124b65850a003c5b1a20d505af6723b2e973cdba6b5473150c01d5dd26a84ffeb1ce59f032384b6e424f7934116802a38a76c5ec48e44758cac65a78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba0f487c3c2d41beecbf166432b88e16

    SHA1

    98592e1b44ed103dae73317233d1b66e7f9fbe69

    SHA256

    b2fea84fe9b532c83541885d0cedc16b72e541c910b5b6a05fc8e30f525f3327

    SHA512

    93bfc83883148f55df6b1f813afaa6ebd3172c5e44e89c0704f7c02786d310e9b49fd2fa7ee63a36789b38aec760cb76c2e06eecc4186d13dc95000a50b269ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7cae6eb94b1e89ae0bec1c7d4e5a49a

    SHA1

    fc4df38157a9e60d6fc4302f0f27232722e32276

    SHA256

    f741d41fbd899785d69f8882f89b8550fe9c1ac53e4908960bd1d04c3b87f948

    SHA512

    65492ba2e4539e500cd1dcb1068e6e6c986286dd48ca118919008cbd2ebb59c8b2215dabaf0ad57e860214bdf1ac55562549be29769b73fb14baf9a9ad728e00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c33cacc02fc9d64fb889d7918b52dff

    SHA1

    759c1efce335d106883e4780a53635841c68ef5a

    SHA256

    dacaaf60fe3579b07c479c3274462bd71eb128e2abfe0a228d482910df4720b2

    SHA512

    09281688ae6cf3bcbb0a553d27b6ce5c6a504552bbae5b63aa641ab782cf2e3cdeb216d3f6f7323fbeb22a68d5a85dfaa262510428e34632ba47ae46169529d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb07c166ce23c762837c3edb2e08b582

    SHA1

    21aa140b36af8398f70c1f2cad3f4717640c813e

    SHA256

    dc5d3df10539790aa0e68873764a28108467d6ca4b751fbff97e0834c18fac0a

    SHA512

    31281c9b5d3766e3f98cde425afe7f93131e4662c8cc7de52e3901ddc1d9f720f0d3af6b9d3beecbbdd42d2e5708a391b4a4b6caaa0b15f8a28ce65b3f4692df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aff6b41c5fa4bf578e772a17288e62cc

    SHA1

    2b6941b932193c022897e084f5badd5b234154e0

    SHA256

    b68d9108e7b13913ea8ced9bbfb0465225b33c1b89a0ea0b9d5ce464c629884b

    SHA512

    b601842c3330793a40e01b6f06fa7a413d3f79a7fd5f4cd2840d0ed79e6f32afe129ce58882569679eeb1b17d1a44878e0cbccbb234161e6f575613cb1080ebc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    452cf0cdea44da97a90e67accf5c625c

    SHA1

    89744dce2c81a8627bc4bef13c57259688c42d33

    SHA256

    e40828d28c390849beaa7a95b1d423cd7dec2bd4508227deacb109d73b3dd4ea

    SHA512

    403fe3d5cabc2ac81c34f7fe8542d40aa252c878f286056613fd416d53d55d0e1d7e0a6a17faaef4d7dc119e24d9f17a0bd27e01e554dd3a938507d94d665f71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41f331d07d759559827d4b084c91e9e6

    SHA1

    7185a3473645565333995fd228e3fbe4b5e41085

    SHA256

    f3203d7d7ad07511ee95f0a7bf41b4b82682a2c7ab42026bdff7fdd4bf25cc01

    SHA512

    c88aa206e2b228d9205a5c9023acd289f7dc7697c712db1b52ce1594d2e0d141c3fb42f2891e72eab4d6a116f3f7987cf7750c5fe008e6a236b3d59a588ecc48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4644aee2c0c054135842ee71f57435d

    SHA1

    b843dcf30c9c25d972f18eac409cd2c773e76544

    SHA256

    e87860b2a216c0bc5272a11594af53fdbea13af45c09794b489102687917352e

    SHA512

    d099f54dde48fe3005dc9bb971b70f642c57f1085fc46d2d771a97adf5b47c4a64ca54d75b3b9d3dd5ce6757238fd24fdeacbdba003ec48e1e511ffb1609736f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09a89356d62e4d6da7fa8426c62bc00a

    SHA1

    749bda39fd4f6478df56738a65aa71e191ae047a

    SHA256

    f2e95f42c380d8786997533e20e0af5f1704122f60276f9a010782ca8f7e5672

    SHA512

    d79e1c2a7d95adbd82944b67060cd55278743246e7bcd3c28219e6158fefc021b28bd17f65162a66be9eb17bcf76450615f9d4dece629b0fca17c5c294f071ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_F2DAF19C1F776537105D08FC8D978464

    Filesize

    392B

    MD5

    87f13209ff97bc0004d27a6a6abcbb3c

    SHA1

    b7d2b7b3604313b4da95e780b4af2ff33c27e498

    SHA256

    62b0183f279b08ddb9ad150db584c4f4d6cd4b5a3e80c6bf138313e1d5839162

    SHA512

    57c3074c1ad50915dfc0e7cec611cfc3681e67fa8f9a420bb82bd700dcc44b35ff770dafbc7da01eb93ae68c9c04cf8385ff2fdfa105a63c255510d26ca4b201

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    de48c4b6b4868c569087e27b27a03412

    SHA1

    c0e817b1bf741b39f9fb0eec25880ca1e3c4e58a

    SHA256

    1fa60af0c41a0265aa2aed83e8bd9a8520a16086edac6644dd523ed36085ff4b

    SHA512

    ee6ec8f06ebc695cf227784e80514f8a89bb97e07e582f3acb73b750cb56edbe197ec1a5183c31c293f9e5a84ec785d67a3f87a23f4dc79e9262ea23e8ee19cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    57952def9a8f8437208e72e6ba2bb43b

    SHA1

    9f63a67f099a1679f4b48d279d7ec6e2aaa35cc9

    SHA256

    6fedef1e04db27375ae0fd283e1aa3c780961956a04a91fa81abb4778fb53a65

    SHA512

    d16abd34fea681f903232afdc3449ced7aa74360e8900eb92dfdca769e972a5a94e120655d176a769c4a0bfc240b4be5c3283aa687c4af49b4dc6c2625bf391d

  • C:\Users\Admin\AppData\Local\Temp\Cab870D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar871F.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar8854.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a