Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 04:33

General

  • Target

    15fe99b64cb3b169d18dd0c870d3f08c_JaffaCakes118.html

  • Size

    1KB

  • MD5

    15fe99b64cb3b169d18dd0c870d3f08c

  • SHA1

    258669cd13dcf4b26cbe08bee19c988a92b3b9c8

  • SHA256

    b0cbf06bf581b49928d0946a2ee973a9cf2a31c8fe8028f3b6e1c6f26561ee37

  • SHA512

    39dc66ce3aa61165c289c98005a0eda38447f92f2f3ecfc2e0be3a3ef06a3b9713e3e4e76f8f805d398a8a6fcdb4f6c47d672855c3a5973375d10ffb8ecf40c4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\15fe99b64cb3b169d18dd0c870d3f08c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1996
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1996 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2908

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    bad20d0ea067471b2a0c419d9b9e280a

    SHA1

    ef9396658c058ea052d9a70e73c279d4aac421da

    SHA256

    5e801447a9116510f0fae5933493c5d82e188d017fbc0ac96b13aac12fb1a001

    SHA512

    11681445623918ea6a3b3b98f711a0e63d410250168b6cc6fd760f24a0d11e6f588b1ccd057f06eb796d683b5c070d859ac3ca8ee7cdbb22433796d1bd033f94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc044e7c5449c7eb0616e08f118a3064

    SHA1

    2bee87f3cb7d11a4a58e6f1c52ecb6a164ef4605

    SHA256

    1338db7c53dbc1f11002a6d48a669f3f2c25a1222b5e4054cfcec3f18f13a2bc

    SHA512

    7de1ba6ffb75f1f9cd93edcfe7b2f61a1cd37fd613c913a08520ca63c1b2a0b98cc1fb8f58f7c6e650ccfd5153d9f25617094c6ef4680efcc38fb882f7f3554f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d681336f49631c27d3aef894b9d8c80

    SHA1

    491b03a9b9f6bc79a2beed94b30914ea67bc76b2

    SHA256

    07d259198b8df8c52daceade28a238dbc61e912afb7db129c9138cfe48b1980f

    SHA512

    2f49a508e7365a6fc72571b20f1bba5ff789eb26092f9e737d84a182b196d1742b213b4c619796304aaea212cab6c109133bb29370e280d5ffd4c7a4095ef167

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6fb9e2b9b5e815536675cc7a82ac698b

    SHA1

    951656e0f54ad0c2c1754f2f86d3f87d866998d6

    SHA256

    adc93330cb56219a795c5d6d729fb69dac66bd64f149eaa3e0b5bee4f8bd783c

    SHA512

    f33b117bd15605e91cf3952478c37cc0c3c8c9216bf4ee8cb336a903d1574ec95c78113462e8668beddd235f3370baa042e860fc1360926d049689603d3c13a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fcf66e50947513bcf7b58e40d4fa7e4b

    SHA1

    8521c0bfd53f2b083b2e47bfaac19f85f7769824

    SHA256

    3235f2a8ccf9aa627936b1d39828387d9be4e8d0e8119cff66bdf4167f069414

    SHA512

    1bf4b116902f9cde2664c435dce9f96cbca5c1704699927464c74f2321982e858ea4aafc9197c9213ed16750fdd2b310979c8d798e90b93eacac14c9192ead01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd8012e3e45b3f89890718d35f4b5406

    SHA1

    860be920c83b2c6ad6e2f40a8229d23e09a8e048

    SHA256

    1769b7949bcb3077c09f911723959847658d6e74c569c1169b36acf971189c4e

    SHA512

    6b2905c656c68d1b42bb1dea3f6f3c152da5cd37f1280a0bcd1610e0d5bbf5371e16af885fb3df4ef70533b4d036af582107bb5cd0ff78f8e4d25ed65e550cde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9d3e24f525057ad50e9aef99fcab4ab

    SHA1

    5b0ed7d31927100fc58d117d09d8531de545aca7

    SHA256

    ca445bf6ea163a474c7c712147d5142935bf8e552d7b00f922f21d7dd175b875

    SHA512

    f5de0cfdc8ae6941f588232d9960f00df86e4e7b05d244f11a38baab1a14834ccbb189c9ad0390680af9c8c729cf27f37bea2a92947085af5b43f2f69a254df1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df8c82373fe37744eb2b51efeef0766a

    SHA1

    41eb4cbd03b3b7dffb4a6799f21b5d0a01c7bd04

    SHA256

    48671c090e0916f645ec960b7de43c980e11269a8b135de486cb4c19d87e4b8e

    SHA512

    097934be1ae678260ed4da1ba4a636571f96a26ad30d75d2b35ab3fbedc8f8d5e0acb2f0599be3b14b78de2c03baad6c3f504b751ebafc71ee01a0914116eb47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11e145d4df1248e5463303e9319590f2

    SHA1

    4b2a0f53ce243747f3726f8c23f7b7285a03e106

    SHA256

    33ccb496af5d465fafe570f65151ebaef80114c6d8a491c5cd168a15c626dcef

    SHA512

    29f88ae13f913f28873b8a9d14be3ed7ac410faeccfd35ab43db85b5ce3228ce5785babdda3f096c7902c20cd126ef01084c5908fe736c95493baa83e8641603

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2d2df1634938cd0e321c9ea74c08e93

    SHA1

    46bfec2ef6b7ea0ee65763ec0b63d38970ae21fc

    SHA256

    e6c47a35d02dd5bfa27a161e29c7a16be77d009aaddf6aa9a899f65bf2924b01

    SHA512

    929bb7dc198eebab66527b6e23ff9e351a6636132dcb13e87e17fda353f3f7ffe39cd94ea0b7f0b5d6347189095e91902f91b1d315497526f63b3bd92cd9a968

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2df4c7435bb1c04ab8350a81521d76a1

    SHA1

    c3b3961f9b2029aafa98f63c231e3c076106d2e9

    SHA256

    0c73ee06fa362243a0fe0346ca8fe015042ed553f289887e1b4f1fb4748f9a95

    SHA512

    ee05d3caa65c4fd2f80a24da13f7744d0661ca92985d39d07142a5b928cdf95b05c4f82bac3905632ed681a03fcd8aff8465deb89ace98ae53b1e49a2cd78de8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    478218acb78e8f3a1bf24576f468a819

    SHA1

    0079fb3424521b304e4f08aeb94277738664233d

    SHA256

    0f49cd7b786e010724f07956e573424e8fc8e1d11efad627303cf03829729ed8

    SHA512

    4f256eb8958565bd1547c586a29e1c928fbb10d5aad3677d10e2bb5d2ea52e4d27c5d9472077fc6bbdf9f1fd4d70a72d1cd4b41bc793f6fd6761f25bc13cbb6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a7c001dd00a296c94d6e5146b815d3c

    SHA1

    d7bb37f2b96612ceb1c6c1eaf38474415e309a9f

    SHA256

    07f9b509d3b801341382398a7f7b38b475ca771ff369fa3e3d75f7ca5a5ebf96

    SHA512

    7eba0a119c8dce23da5a91403ffb1b8e79060b4f2d21a9233d9efa1ee5b808acac6b1049f83bdd18c510a0ded1401acfd7474fc0fdcb9cb5f1e4009869f45f2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66a7db7296f82bef3173a2fa680104fa

    SHA1

    da73026c8160d28ed22d732a5392cc7ca01a27b3

    SHA256

    93ed8a046540aa3e264b0dae2a3575ac3b76d650f5b643621c1a7334dc060e25

    SHA512

    4a703b38859f35bbd51561b9c039815302f6be9320a5860118548999cd28458a0722cd973bc59579e1ec33197fe34a93a66113db73ebf46c2d11b8c73951c435

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d34e674022e09b50d7a8cff41e029fc8

    SHA1

    1f3e9475806e25fec33ce3005ef65e2b96ef516f

    SHA256

    ff929ea41ac76d52487418ce55a4e86b495951dc6ab030e99c212818dc34f0da

    SHA512

    9681aad3d642b37981566074b04fa7b2a20a24d1adbfefb4f55bf91bd29e3ac6f71b52093980ad250b92d2ddc10ffd599d347e18d53015f83be059cdf8cbc4f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aee46c6044ea914839db126aa415e03c

    SHA1

    e1f4a301b3b9f4e43982ae6a1ea34e7209a2d19b

    SHA256

    9935a59d088cf2609c86b946494d0321cf8c5ed84df4d55fa2d62fb68308e20e

    SHA512

    192c2507f8cb8db5e782d205d4f5cd49ce9d323aefc3ce46ba218149e8a1b80508be61fbf66f29c0adfd553736bad426497cb93afb1ba0d7fdec6b712527324d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c08943358e4a51f45625031b6db16daa

    SHA1

    bee1e5c3b8df7109d83753566f75de77f889af5a

    SHA256

    0481d36963a28617a411a5c932663df234158283f283c77569d86e88cbafa15d

    SHA512

    b01740c087f1a971487e4c808775a8d8db3357172994485957cfdd8370a41b5c447b1e3a6e562101c727652d8cc537dff5ca36612f9c2535e89b19d405487b5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12cf27ce012db1253de86a85c1d566e3

    SHA1

    74c3a9a5b5ef79fdb2c44b3793badf6f5e2b6b3f

    SHA256

    1b4b80ce81b39bd9e83714af38a6b365cbcf41aa120830811c6adc81104e6a27

    SHA512

    363e4d329dc45f4a7dffbddda9a1c4abc92eb855076f1a89ad42850dee9a19bdcf9f41fa25beb9c394900b1dc7df89ebe8520ff653580cce6bc29d505c0a5447

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f52f8b5e03023f39ca308819972e65b

    SHA1

    bb4e8a031e34ec39221646cbdde9bdb166336fee

    SHA256

    f528dc5028e2df5d4c58b36d1d653b62dc290c99bda5fe60e019d57ab312ea41

    SHA512

    5ca3bda9d19d1bde550fdd7bcc4154d64d012efc56299993d3cad59d69b55a8e5697c0f51c2d4b141ea10c1d050b1bea728318f022724e0e69d48504b1f853b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34137f98766880f1e3200c0beadc051e

    SHA1

    6b9dfff5264454ccddce53be5ead0fb3de0472e2

    SHA256

    3de8593ccfd101e9c5117d6543c85c29ed3691635cc429bf2aa774aa681e193d

    SHA512

    b8719ec582cc3860b4db0eec7a597c59f86f5f0a0e8ee71262b6d69da4254a5c7ff56da5cb0cd94d4d3d08e3dcc2e3e193189cc13398b8f855419e8930fc7a5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    de2dda05ff0f207c7fd70a20ff826d0f

    SHA1

    3bcbac22a16a20155ba1b6946945b1221c5b967e

    SHA256

    381852304ad193b8760ea2e84a65187e657dab6e5511814e50af0045b8eb5fd3

    SHA512

    14c1a6ae64c9aff854e32117264ca5055484cb17b858540e469b90ed103e95ffed8d2248b1b06489bcacb2304cb5a3d9482c5aced270cde61fe52edc581de5ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e215a4a473d699d5903c0b769993d56f

    SHA1

    7edc0593cf6d8deb3194ab0cad316f2bc18eb5d9

    SHA256

    3e86ff5ae121a141c8eff5f570a315cfc040d045fd34ce4610e6da20f5073216

    SHA512

    c2e795ed1f01175476c890b5090b587cd8c48ffcf15e1d671e7845e8396fcee5427f8798ee19a6205e71962c1b9c6655b5178b195bab8d0c3656826f714d7b99

  • C:\Users\Admin\AppData\Local\Temp\Cab283C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2909.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar283D.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar291D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a