Analysis

  • max time kernel
    135s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 06:42

General

  • Target

    23a76b3917c89e4d9e8951df594c6084_JaffaCakes118.html

  • Size

    303KB

  • MD5

    23a76b3917c89e4d9e8951df594c6084

  • SHA1

    a95908d45d33ab90026e670dcf5bd72f8bea8bce

  • SHA256

    6e71c531446cd0414a7f32cf99b7a2110a671279e6f4b3bf13cf15e83d3b8b4e

  • SHA512

    7739d3a4dc79cc63ca0b56d6eda7822c49637db2c1732a6b1c22b4e232571acf0c5bee7ca1a4e07ecd06a0ddeb49e88768cde2521f324aa539cc31b80933c6ce

  • SSDEEP

    3072:6Ai5nYYyghf0RqTSfhixYu0pNrhs0Q98xZjNcgOgu5d06CmBrZQ10DVqy+mQuFJv:6Ai5x2RNigunqQV6Ee6

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\23a76b3917c89e4d9e8951df594c6084_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1908 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2636

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2763a8b1082117ab5a67928b7ba52215

    SHA1

    eeb43027d8374ecc7cddce02bcd1225047e6fab1

    SHA256

    e836288a5749f550173d405002200e72c4237cae2bb96ea2c7275d1a551c41a4

    SHA512

    11f6be367a337c57b30d3d3e25ff3e9b03b0e597c988f3d6cc99b9ba7267821f7ac24cdc975b1a0c5ec086d79ec2e9a6bc5cb1a10580093f2dade5b460034e48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44872f68100a8518fd066e507c7a1efd

    SHA1

    03a9052f8ad2e7ccf3565b449e861f3fca9c2ddb

    SHA256

    8d6665c55d03b5955cf444b86319c4251c9a210a38bcbbae172fc9638fec1103

    SHA512

    536f32cf855bf99e896ff10615fcc15307cd9a601c79659c9492ac8041a5b112ad0a4eaabc8c938aa7b90c75c037c605241b6a3287220ebec6dd3e0cfe77e49d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3265a5708c8a0835d5e69567ba1c8eda

    SHA1

    0746b0d9db58fb8e8324f2685f26d6a72585cdeb

    SHA256

    3c1a5fc5d356f3ba081bebca0d4829a13421813e4fd51b86a49fc7102fe89489

    SHA512

    df29ab01f25200fbcb45a911375f22973f2ca5d5d6a164c1cb5880526e50247fe7a3d3e84ff8981a027af83f5cadb1545502efde2eb644be710f0b207f64dd60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b36ad3f0efce16a54eda584fcbae383

    SHA1

    e92ab75d0f33b00d9d895e6d5c4be0961f96f3af

    SHA256

    29031acf55cbe0334a043add37af8e416253cf85d478156d5744ba9f80be7c28

    SHA512

    40bc0cccf0bafad330c57acaf446fadeddbc1deb993690a5307c461a3b60aab9e3f53b8dfcbd74fa67ec9301551f2233e1775516cfab81a4926c119d0a032762

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d0a22583335e5d107b4913ae25faaef

    SHA1

    fc8de15b6b445805cbcea603d7d2bff7be1ca01f

    SHA256

    543f7709fa1d9bc00d86dccada3884249068375b9c369f4d0adfae1c41c06b47

    SHA512

    49583deb3bd48d0a54758ec5d07a46fd28a5c04270a0ab26b7669085890782aca37ac89b3f4d3a6d1df287560b6edc17c15c71935b2506a83cab2d523ac89e85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54fc9b9218493cd9b4a2e97d18204e11

    SHA1

    023c21a7fa47206d3040bf946d4aabb75e4e023a

    SHA256

    7917e50be5e095e4049c7504bc23a0377dd873b9eb926a9f58d37720c52fb81c

    SHA512

    7aa561e0251f884e062b6269eb5dfc533f7a6dde34ed5c9fec095f8ce3cf46b7d83e1aac2698d6591e232a5b4917e88f1305ff6e97e36cedc952de447d0eabad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4324774395346b2601f4670aec27e9ab

    SHA1

    4770975b3a874b62f86ab8145c720e4c1f4d4157

    SHA256

    64e3fe900991610e9549af115f0a1ac347ddcfcd3eadb8c6c2f69bbabc7aca51

    SHA512

    0d84f144c643f0018bcbdfe02db8c550bee803f8a78873c4038f80788856d1e9ff8757d1d80f972fccc4d0f3e4d959c990dd1c41adc47444283752355bbbcf8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13c7fbb29a1b02272682fe7fd627a490

    SHA1

    1433c3f4482658cd307ba87fc003e0df1955619d

    SHA256

    151199dd970931fbc4e17f971d19249cc60bff167f3c42e1fcf44b222f8c4daa

    SHA512

    05c0fc269b8b62c741721c58a1608053ad5ac5c5cc345b91f01048bd536c9e047f79f4a51cdb3da44a4890a69ee528ac1ed6eda3a06dfe71e71ba6296d3d9610

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9695af5e884437bffece095fc6e8ea2b

    SHA1

    20cc156b2dc771c0cb4241b5aab0f4c2824c1323

    SHA256

    bcfaa898a19ed1e54f04bf55f9098948769334735bb73f83b2924674b22b623c

    SHA512

    5272f1c27a725c23b0bec92ce861393c8d5bb654bb1c7cdaa7dad98d9fb2ceb6421570de5d86237d5ec8d66826490a440b6d086fe797baab510c216608aeab5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37dd0fc7fd23dcf9fe31a7c2701f4fd0

    SHA1

    497de5ead8e0075bd23e2052c935436bbabe3724

    SHA256

    454a038abb426cd13fb4e84dd379db9fa02da161792ebda423705cc309f8022e

    SHA512

    6b4700d641efdbcbb82540eb844b141118310414e0cc468444138fb5a8e5b23c9f7d8cc9c2e9cbcac272163b7157c68bf64d880ce2ec5e451dcf4480fe5c24b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a2132e01ef512e71526312e68d35046

    SHA1

    457ddddf7e27a8a2074009343056d0c97b2a9365

    SHA256

    ca847b0ce50c222cbb103afa6a991bb0457cdbe69069ed7c2231aa628ed3ef3d

    SHA512

    12730b9d0f75105749e2e32df9c619bb5d3348b76b83e1901312409f066cda47a85c8b49317e71cbec16db4ce6f484eb65569d3ad55e3aeda050d97d3507a6b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    354f7357ec6c8c476c7ecf18804565ed

    SHA1

    de3e4975c84061c654961bb31b45e9d680c9f9bc

    SHA256

    94166b6ce2daeadf1ce7a4d532d486780cc61a09b3e7784c942a1702b6128334

    SHA512

    639a7e01f04443fb2a3fa14c13bbd672c942ff37ebc5fd51c45be987e23c273e60746904ac5459a4b27db060da8cab9a9a77dae0fc3c4d75fe502f590f6b7448

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    993c8bd25fa881a072749f41c6bc4a44

    SHA1

    004d46bbab703a54db2af285aaa452611124fb24

    SHA256

    3b19c1e59a0b405ea6c7fb7ece7bf01dc48ebaa91e0334e481103a643eb2b841

    SHA512

    7397996f6d580a5de0c614598ff16b1dfba6bf44211b44f24b6be7f284d88cb87d1a7f2f62d23b88cff87a75944d2506ce1d19e5c096b4b7e36b956fc530ce98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff127adbc1e64cc08044e26194f48477

    SHA1

    f6d173a518dd946d094752fc6e7050c1f9ec73fe

    SHA256

    18b5540c8928efcd2fa967cac2ea8c0d9ce819c66ffca9c971b4d279efcb0515

    SHA512

    b7448adc3dfc582ad9427f3fa2e84a7a60883084183df9e91da102ede217ff797c9c123791f5fcb8ecda8509ef1ce27ba0138046ebba37d44daaf454a297011a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbb0c363cb0692b9d760d588411cc583

    SHA1

    5c06f180b868919645e334f726a592aa428cb98f

    SHA256

    f50b3b1a9a9347bdac836e1064bbcb1e01e8a53a53edc19017f152485067270e

    SHA512

    9f51bfefcae6b0ac6484bd5d2bb616ba75f7282148ba3688303ac93aa540a62b779add75a782859a6f59a04c2f3af9f3b1cc230236220663d7e7406b2a8dfbb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2bb79c1aa3ba97715dfefc7618ec0a54

    SHA1

    95b17f2b4d08c5a104ef70273fad7cab680b5c7d

    SHA256

    4ca4025284f8c5640ba7860d69a579a8b9d7baca158c9274a77350ab3f74c619

    SHA512

    62f3a59bc3d7019580a59b87bce5b6fa88444cc87d9638db5640f6cc5a2e2fbff0412c2e1005f1966cc33ee10f7daf2aef51eeeb41733b4897ba90f57c0e4dea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4708ed43b037613b1627967dc7b54030

    SHA1

    61eb3aa36b5294587db703c8a2248601b86f71a7

    SHA256

    150fa827d4383c7b0eb08d605c5a8599354023af0ce032453cdb998bf34f6a3a

    SHA512

    97485068319796f696d9f215252c6940d39bc50f8a3c3ac9c89c1f1c33acdb1eb680f1f2de7c6e1ddd1dcfb98b6b1815dce7686c416cc481b5c6822ac126cbb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    612e0bba75cfdf34eb79e7a8e92c5434

    SHA1

    410ee34fbfce67af2e419826b10257ccf403e903

    SHA256

    cc9fc51a9a4a0314b55d2a545bf59c2b5ed912ebde286574ca303d2f017f2a0c

    SHA512

    2c4176d77561fc43cc04a94a6f82376aec45b3b9c53c40bc30b9ae9775ea184a72881060aa0403d4d28a17fc9919b89b04eec5f08cdc255c8be9767084f89ca8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09cbf31cbbe1fff8f13283453d75ab0f

    SHA1

    fef8680ddfb7d4be136d21f84c5a3618ec1dc2e4

    SHA256

    2267a266e84b36043524a9e59f39cb729d0199376561e09d093a4a77a916e13f

    SHA512

    4862f3c3f0d0af77c46f39397c196d426162498d917a9042440df6a3a65b767b92494eac6e397feaab20d27f4643ed910ae735a2e5966bcc472515675a7834cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2c7d788d2407721ecfc653344ea3050

    SHA1

    7db2251f187ff5964d9f650f3c8e67ac1549fdc4

    SHA256

    bc2d885c45af533cfd416ae4c85df71718b0bdde76803b5988115abd3679ed1e

    SHA512

    478c5c12b36b8d923a8fc3ed37f85d599b95ae8ac9ac35a491d1190a671f49efdb4c04c7ce81986b93dc2104a15687ae54e641c3357ce315c341a8a2efd0e5b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9dc6a6dfdbb7f899668e840d1a8794f5

    SHA1

    2bcbc2dae9d9d2d784a39cbc5db330fedf0552cb

    SHA256

    9d68e7b405484e00fa1925cb6589cafa2d32548b96921f67e10454f1c9a856a2

    SHA512

    994a87af78abeb029970b0f702a3837ece2defdec690fdf79e5b674249204210c9db49bc5ae9f69b153c5109f54e3cd1a2cd8c60179d1901d3728cf3c8ba2bf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be4abeec42ad8332e886e38c354a4e79

    SHA1

    85acf331ad58d50db67f51bd7be5d26827576a7a

    SHA256

    abdcab4b29d257d1deec3b4120cef353b624c049e8376e39e84f994e497fc06f

    SHA512

    c91dfc26d0c3c70a2553a7af0a9b2e2d7286bd633b1631e86961128bb768a4769b1f9e29665282369ffafed9aff7647ed5dfa0512a62b51dc7d4adbb9eb67713

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    25e1dd7edb6aa83433c742372fc48928

    SHA1

    0470ad883716887355524d17f2afd94d46afbc96

    SHA256

    5eaf3d94c0f80ef10ebf1f7caaa16a04050dcef6ef277b9683b80a1d05b6c9bc

    SHA512

    fdda1fdff0afe17dc54919a87904ecd21bcbc7709f50098759b1b0205132ff0b8300e690f095efe0ef83c9a530bb6202992b5add45503c57b1095a3d15b0cc6b

  • C:\Users\Admin\AppData\Local\Temp\CabB452.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarB465.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarB565.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a