Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 18:20

General

  • Target

    13eb7253cf20bc334ced06feb700fa25_JaffaCakes118.html

  • Size

    141KB

  • MD5

    13eb7253cf20bc334ced06feb700fa25

  • SHA1

    ef95697c358ff7023469e6f7755ef582026b218f

  • SHA256

    05685310411eb4da0ff284de9abd8269a543b231ab22111ee693c3acbd1624e7

  • SHA512

    c82d8d6b00d4d6ee227750df1946bc9b1c45ee36ad2e3a95ec074bbdb71def6ece7bd2725294e8fad0be951ed3c847e805e58711f65d3e0ea4b287e280616464

  • SSDEEP

    1536:sVdjeNSdCU1tUeOv99Vydz9T+Kya0dchGPNkeT00Zqg1cTO80:UJlUUPI7O6cYxzLOOd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\13eb7253cf20bc334ced06feb700fa25_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1660
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1660 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2512

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    4afba95509c44b580a9db4042c7e45a5

    SHA1

    29e76ad9abcd4f382488deefb77e881c108c1ee3

    SHA256

    59c8688ae50c0a4998283109994a4d73563aa24ff08accaa0a59baa1f83a2611

    SHA512

    8a2a9225217abce478c73a8f29776decc6005c8aae257681d8e7e16bdb750e1fe6c9cbaf4663ead17bca4b3a5f67241a85b424ce3a4587fc6cb9f30989626d5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    345b10693d83139cf2e1b415a304f874

    SHA1

    1d8e4a94f621beb81d29a32c2dd5970c9f69e070

    SHA256

    d3845a421406ecc724f46067d5e2c3486b9097efa2a9bc712ad9c9e87307c722

    SHA512

    ffb7e06547444364aa7ab6dcc14e6969cad33fc3d1208c43cfd1102471563423230d65fc53cb1e0eee8fe590ccf56fc5548cb776e18cda4879f3b343a8d175cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9623ffb5ff00a305e2a104db82cb1a50

    SHA1

    faceb0e6d56545b7376541ad43f428cba35620a8

    SHA256

    69999681773d930adf947475867cb6bfe8078636de14abb555e5a568dff01e30

    SHA512

    edd7bc4f9e4ca978f4aff07c3ea189ca10a4136883d3610c7fee3b66f356340991127e10ac08a4878e890781620aaf936037c94460b731a5af46d68192300ca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cecee36068957666cfb8830f971a088

    SHA1

    c929b1f74cb207fd4a25a3a014ff39cdacee2e81

    SHA256

    b0dc25d5395638134da6fb43939d046ac5c7ea6a6a32ff762ef25c7a8be882bf

    SHA512

    3d97180c073c042febb187c7e87a790bea71566e0b9bac3e515383a66ae5605c52791b01633ef00d982c976a4b921af07688ffa25899d70f6cc13dc9ef7f1e17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f3938c52833698de70e478a83b9c0ae

    SHA1

    9929a35c44f10b6605a971ad69ec7fd6f40015e1

    SHA256

    b65fb06e3dd65f670284266447414a65156b9abbdf6123e7ce3b07bf81a7fb37

    SHA512

    fa379e01782962b71a6d630fce057e63a33508b728c017cafd1f2615085bf177f7ad369ec2e1b2706e3fd57518f4f6f622dbed92556b2c8cb114b0ad2bd52a97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    592b81ccdb2615e634b0191060c439ea

    SHA1

    9488c6e9397d087160c750c50cb2c1fb03a04cc1

    SHA256

    352a2f0676f8b8ffe0b03cb27265d1a14329886c7b719e66eb7d1852bf8e4410

    SHA512

    f1fbd06fe95e430a51c4dd0a67977cc1355c170f7aa352cb893ab93556c6abcbb59bd358f9c53a4ec02870caaaf0a6e6c3c1daa49da547683055afd72ebbfa4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fba1627de8bfcd89c63ab5aad941564

    SHA1

    74825ffcfbcba087b07eeaf7235413186a35bb6f

    SHA256

    8b74fd1d1403f489ec92169fb45b4dcaae259bd8b0b2ca2861fd31fb67af0841

    SHA512

    02f6bf8e719128277951ba2fff8c21bc01d59c8cebb44d9d27f3da6de8b53298260ab00f324fb7f4a8022500f9b3d4c722e800ebc2f114bc69c89d479a1babee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7123d964a61377e3a5283b048db0025f

    SHA1

    26164300d935af6fa607d5f26d8236e1f702b035

    SHA256

    ef8163561ff9078d45221093e82b9182bf9b549ddc748160d9186d1389e3da16

    SHA512

    5b73c79136d6a5d73b3bc15ee3ad46fed7594900e4d81c0f02e82f023e0448ac566e0520270cc7bac03d732cb45fbd7283f95b2236542d6ff280b29456743ece

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e9dfe523cf2a2e9b70b96ddf0dce27e

    SHA1

    6271c729ad98c5efc2f06015c477e009f57b1375

    SHA256

    8d25271d6da1e52596a9351f37dfe0ba045930c5edbaa582c0d56e13d840422a

    SHA512

    90b67680d90108a1a7e53909d88f2e031882c6b0826faab0e9a64b87e49cd77f2a355acc0b2cef70d4cd444dc533a261e7c5f1eaeebd9ebfe67d579b6e595f3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c4cafd7417c9dd5e7e8f9a5cca69ba2

    SHA1

    6f9657166f9a9e56f6bda1f82cc260eb205b3765

    SHA256

    ea5d1a2bf570adad0c88cd39d390dc91047962ec919b9d6e172555fe3dc75261

    SHA512

    032a1c21d2fe77d158f1047bc3199d23129f1c1d7b78701216e465096861b7a1e5a36e5124934f52b0bbccb2001927c7f9bbcd8b789a459434e5821ee6acd146

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ea0796cc50a0abf2af5e567ffc68e68

    SHA1

    d19621811a01eb0a9d7cf5e76eb98f807fbd1357

    SHA256

    777d0e0c5aad2ebaaa476efdd65dddd1abc6c4730e20faa818b677f76ef441c5

    SHA512

    ecffde3cf56cf806cfd96fd49aa1dd5604a02f6edfac21e52835bf49e6c3fbdc391754014672bb32f52dfdb1c522d7a0c460beeb8459cecabfbaddd868ff45b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2fd784844fd08347d1f60c65545bef2

    SHA1

    287eae5ed9ede4ca12f3b59a961a2dd8ca95e424

    SHA256

    8ffac2a0068e24aae25ae8c5e082ee1c27209194b8c938429c586cedab8dc7b9

    SHA512

    7fb1a5cc0872d45f5ebdc7fc67537b64fbec4d770b55e55469b9204b2489234ea1efcd0919663dfc4c339b33251bbfc8e069d0b746222a33e3140cfce55078ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e2582b94fa34f7bfa54e93e90e90cc2

    SHA1

    d66da25fe27d3a804469268ad7b4cddb0512f2aa

    SHA256

    7d7ad0a11d4d62d61454b626b153fb72bbc2ccce3cd494247b25dd777ea1c50a

    SHA512

    d24fc6bf5a7989869d604d34643e78eff54d7d5a6fb9f3abebe7c1517e4787d29012a66d2ab02f0da89645e732b8960e06394d23ad96aeb2878f68381bf2ba54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c041db515671aab03ee573a1d10bc433

    SHA1

    5f852490ea371c7660ead1ae6f0dce47a458b4c5

    SHA256

    14009fdc342db9950b7bbd5d97118921cd7e014d59d16f95778da1f2c1ce4151

    SHA512

    3740b497627d3edcd8859a579341fc562b5c57475a8a13f2b16328357816f66651a576dd411fc95e01c03e66a293cd366ee6a15ab7d62c03906b6cbd4f43540a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fda7d9dc5f26167b62a49f5b9f87852

    SHA1

    e56ffb09d5753d4e1ea515e0f12b660c01b034b0

    SHA256

    7558af9359191751555e750a8ca90654b57cb8dc1bf76638a7b162d69a7b0a9d

    SHA512

    31bda7c2ea86a03c28e42940ee66bcfd6d8df3fa15c21459bd70a41cd7a762e2041e65b678ecfcd07990cc17ac1c8fb5371c388257da53b6fe300f9a7c58c860

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    badcc832e78bdab510d16d84d6782669

    SHA1

    6995b82a9c1427172f8ca694ab494b1440f8547b

    SHA256

    30ae234654859b13adcc6a02ba061886a202765193da093f97e7269fe0448a21

    SHA512

    b37d900a939c5959bdc39fee2adf83ffbd9e5edfc0b5b058ce4f923561070c9c00e00b633b9f598e85aacac3818a6ff54e5aedecf9e178bfdb96c8d2c9ddc49e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99b1ab46fbe726b4694d48b96e0f244c

    SHA1

    2fa561d19bfc6f625515dc6c6265ccd3801606df

    SHA256

    df3b4168e017a07b88ddae9a421bda002a2aab12e0ba1df63934655a1c8d5ea9

    SHA512

    181623d01cf275613b1f98f2e9b4e863fe68e768802a4cedbcf70e7f87cc1a487bc4d17e927ca2119d254a6651190c65a585e7aa069ca49b8e4196b5c3d24163

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02184615d73ba4224c65f27be9c8281d

    SHA1

    c1fbad15afce7efab6548aa20497773d0754ba9b

    SHA256

    edbe822a6a8317eb5fba14e78fae4c67eb1cee3889107a7c8a42ce3c5ecc20e8

    SHA512

    55447f776aed3d4dc8f30495fab5a9f411b56ae8375ce16d86cc79a37fece1ebf45b3e3e5966c0a2e4dce46ef8feb17e61bf5ce403622abeae7ee8968a4ff2f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98a776d8bdd169fbb91b661c4ba4aa0a

    SHA1

    192ec98b0f4c3a040503d2b871a32d12a7d9dcb3

    SHA256

    3937ee746f1e083efc73e9ed1c1c75746f50f6e47ec705f0f3c6fed1bf02de3d

    SHA512

    fc3d02141a0ea19db99df87872a1349ea4c97c7742c7ca478d5c449ad5a623eb8365dabd0674bb631a23cbfeaec84e0e3d38f0c7dc29cf588d4471981a8ab7f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58bc9e1d962ed6d278bc48bbae32645f

    SHA1

    ac7fa1fa08246c7bef557ecd3f62f71da9a612f7

    SHA256

    fdc8f88450cfdeb4ef02f0db167a0e85f4e5e587a564f163e7bcc8be9da8a561

    SHA512

    320f639b02647946e9d01c5f4acda74d2283d4678eeeeeb296188dd9a55b7da010b4fe1ee2a756cc17beecaea0a8dbd48c937469b7aa9b038dba42e703531448

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30aac7bb07a52f8f7e60d6e39fd1c6d5

    SHA1

    a400736fd41827f1d0d77e57838245c552bd4cf3

    SHA256

    75f0c974b993a8e2c64e1fd3b7eb9524bd9f849d48eaccf8807cec9db0aa8874

    SHA512

    6feb756d4185a95b33ee086d0e8529a66deea2d2fd2a3cdd22c2f885c50b6cb851f50d6bafb64b663fffd12e8c9f2ba56f69196c7609ace5ffdb96807f02636c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    249d830a407d2bd53dddee132965f01d

    SHA1

    6842d31173ccbca48cc730e50afb7f5fca616408

    SHA256

    e47c3eb6c6a96832fd0d8bfbaa1e5909dc629cf67965217802d6ec440c7fe7bd

    SHA512

    3039673b60b3aa7d22ada61fab01dd9627d37cdc6060225acf82265d7c407abeddd505fdf29a30a5f61ddac5c11072a3d69749e49e83565c7d981521e7d8ba0f

  • C:\Users\Admin\AppData\Local\Temp\Cab2F6B.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2F6E.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar303E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a