Analysis

  • max time kernel
    147s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 02:15

General

  • Target

    2cd9d7e15706403ff851c7a574d8ad72_JaffaCakes118.html

  • Size

    64KB

  • MD5

    2cd9d7e15706403ff851c7a574d8ad72

  • SHA1

    ab9429606216db9d8bfd70f5273d558746421e88

  • SHA256

    d63981d3ec27368f3f5b8e468b740336004537c3061cfd604f0c62b6cb8a5103

  • SHA512

    23c99c1140c3fcea9d8f7a590d42f7098533e4191ef1d28019fd86c1663d2b767e024175a7fa3fa4a982849defe3ab33c5c6f17249eb864fb0ec913d07c87928

  • SSDEEP

    1536:oRL/Dkzu/OMIP2qwQ9MiHSw2ctiHEyDOGO/ONhIx96tbtxM8Pj3FElcXJsijJ6ha:o5/DkzSbIjwQ9MiHSw20iHhwhwTlSB5i

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2cd9d7e15706403ff851c7a574d8ad72_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2864
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2864 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2380

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    fe43c064674fff005b5db296cd35861f

    SHA1

    0535e4d9a2449358ea196b68ed6fffdf26515724

    SHA256

    79b5eaf7f6fc1d14bd43733e8172c705af4060425e17fd3ac76727b3df1d2f3a

    SHA512

    032355a7f193040a2a4f93777c10049ce100969aff432483d020c180672c33eff18c28f60ba6780146b25a07d5908c37f7af43ec87dc01ded9a56065874da050

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e86bce4e8c1e323343fe751c43e0a889

    SHA1

    68fe4f7f492ede205a6d0425f756314609f7449a

    SHA256

    6d4d4507236e72f21d0ec5f257b9cf114723fef94d2a6a0a3d990c01549594a3

    SHA512

    b84bd44ebed01e42f83521ae277f710e6ba75df27eb2df21bf79a571b02136674639d74815535c1c71d8ebb9edd51ee20e6af56f2428752955d618529fcceb15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    909d1a534980c0b184761580cb62244f

    SHA1

    b815427e8dce412fea5dd8d18c0ae77f144fa46e

    SHA256

    d0dba333b7b4d848d19537b47343fc50eccad7bdc2aa466a5859fe221275465a

    SHA512

    10cc19b0dca11039813221492c6ac4685695c2c247b346fd90b5b7fe5995b54654788fa9e8ae5d4c3bf9a0c19a0251c1c3bbfeba694f86320aca40514de55900

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b26e903baa785dac43f71031a1c52c9

    SHA1

    a230d0660a6aec11e58d21f83ff07b618fabeae7

    SHA256

    af4f125f7fa1fb480e48adec7620d56fbc322d41a07e22e553d968e648249f78

    SHA512

    900ad43e4ac8bfadd0d535137d8563dbb9584a4811f515bffd6595e35a739225539baf637e87e881e8a5ae15715d861ab4701d23684f509f06c736c059d11b21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3a82734f9e952233e73c5acf4d10fbe

    SHA1

    d7f566031324800e868fbe354a4e9ac70c257bfa

    SHA256

    e5cf07a3c5b1ff8868a2c090607dc50ea3a0c6045d99cdbc61af507797c8a694

    SHA512

    624d0be439d71e0e1accfba32c0fecf7a3c0dcbdc5b8c0fb2af1fddb0b460e3d4dfba3131bd86704c4f1f4ba6f06d874f3327f8850d5e477a5e458b3e06d5db0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d2d12aa087d0485650149397006d09c2

    SHA1

    8ad0196abce630de145ea491cbaa70459cd77b4f

    SHA256

    f0a05d44f59d1b566801c7e820c807f7873abef17454dccbb5400d83fe7eeb9d

    SHA512

    6c2df6e1ca4159739a97701a9d2c14bb0b10d62bf5041dc562e6abf6a238d9e8f8078a9ea27858d7f3072d98296e15c149aa75f0dc61776caa4655792322cd43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60caced49a80e0136c2e7e9bc5ebdb2f

    SHA1

    8dcaf2ce3acc364b66a7df487f01f04a30e6b605

    SHA256

    5c1624ef768a7907d43e96407c3a518c6dff53823e29b582e5c582a3d08e22ee

    SHA512

    61c1d532c627097564667b7ccaaba26d7bc15b06ded9d6f2f31cd21fa352b868534e189df44f1028731f1a75ed9d23e15ad78e6e0def4991f1b9e47c677a94db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4887238307c470e412880f9cf53de348

    SHA1

    2460cee4af896784c1188c7c834fb215c0873aec

    SHA256

    7b70b9e8894e3258e04aa608bd37ec6f89fbbc5624dff1fd09f6e9ae38d3fcf3

    SHA512

    c50020ebadea1f306e3f3a23689c1a2de6054876d5bd4f8c1b610c4e81f7da17205b399728261e4d2ceb8b4d6f4aa9f63c0fdb4713324b4f9dfab8ef39fc4135

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d386f8b8a0d37f30703841f5101c490

    SHA1

    80eb3d0752f9b65a855c5bbe442b73b75c67225f

    SHA256

    a9ab0ddcc34e279255b07abfd0d853ddfefc63edece56b6205a4005e0adb5f09

    SHA512

    3035b486c97139d518fed9fd066f0bde2bb4fd2250bad6452c0beea4511aac0571101e871460a24a29cee0a7ba5bba43c1d79787504321206019d97a2a4e384f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1ace622ab189623b3bdb42f128c35bb

    SHA1

    31beda73afda8e4158c364b85c910a35c24dc77c

    SHA256

    5fad180b8b451d8843ce9bafd76bb86259f1eb4fd6dbb0ba484a4764ee73627e

    SHA512

    9688991950f8a23c3a8137e929818e0e7dc56cfdbee4da0858aacaf8469e206178a32430d953579df5114bd2328512bda72358f276138f256dcfad63becf98ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    712e291e7303d1e826db964ee493bf11

    SHA1

    782db9878a3420e760a6d640fa1e4ed6b429b3ac

    SHA256

    537583bc143f8bbed087878dfa0c4f73b11862cf0f271d4b37fb4c3980752847

    SHA512

    eb4e1210eacc9ad2fb98e483540646ecca93496c836a00d3d13f1984229bd5d145801d7066fad0619743ddfad011a5ba45417047b1211ba8a8ba144033e88372

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5584f4261aed219ea624c59b6184fd1

    SHA1

    657bf8ee33373df91d844fa2ca6533807c15a923

    SHA256

    c21bb5128e1214ddda0c4d737f20a048282b40a0433e44adfa33dbf5aa422330

    SHA512

    093d40e0e34ede3499ddf1855296ea5687a66a139cafef595b89c5d7f7d607d78c7b277337ed1fcfca74b9c9f531f7de0dbc7b5cec4b88def7f13e747c5a4dd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    481d0f1f844767e8d8847be8b56a920d

    SHA1

    51ac75f94f2508244fb27d84a2c107b30779b47b

    SHA256

    f7da4182c4e8cd677d7e303ffc1bed52744f77e80a8856937d5c040f5deabb4e

    SHA512

    6a017094e5744599ff42310183e57da5b167f29bddd66f6cb0fd9b96c145fb545290280b7752a9e8547bdd2611fb6861a4e34b5f196a99c79a85b18f2f1f9b02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f84afd7009ba0df75df5f0b344675c7c

    SHA1

    a5c46cd00f623bc31a9e83b0875bb1b3f955368b

    SHA256

    e28b72f707358ee028a831c07289da6f45fc75d7c379a98c747da891231460ad

    SHA512

    9f888d9b43c3b4c81e6e2f1b7b07e8046df24cffcd619ad923936356f75805a73520ea5b3e894387e160439066eaac09b462ab5f19b6aa6f6291186f112c1fd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ccdfbc8778fece6466cddfcbd8240dc

    SHA1

    b1d0e397bd2dc9f0185834ded075f018a6506c7c

    SHA256

    09b03c447236ef03acfbe431266fcdcf57eceb09bed92aaaa944953c5abe9cd5

    SHA512

    49fc643f1db4c01f3f1b58f9cc55f9491b956632392b12ac45095380da10522ab9a34941c441417b2c91b22b848da59f7a2d2f3cb2f4ff6c423aef52681779be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b48b5a0116e3aa0059a1e07432cb155

    SHA1

    5d181f4748cf91339d8b02455648a59afec7167f

    SHA256

    44d5368d750a55c3056bca707cc50cdf07bd835d56b52c92078b820958e6ca5a

    SHA512

    b2b21f4ef9d77befd7afbb20f24853d80d4b1cd4bcdf5fccc3e9a8a19111f0def0ac6d8cec0b6b09e10324f9b0436885b96bf67c88d3576160b679925c211503

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bda346f739867c5951f9cf53aee194e3

    SHA1

    3807f7dcf1d7a056d2fe1929897d08fdbc85e7e7

    SHA256

    a160e97e3fb6c59395758861f8cf8a6b31caa2469de4fb537c832186547e45db

    SHA512

    70b3e32a799903915cb3bcc587950cd85144c09b309f1ad64f9074afbde539d5fee197ed66906e2dcf75d6a4ff78578d61b8ada493def8501b46f0e6e0bbe009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74d5c09d5c9c044c436b02a04aa81d80

    SHA1

    635930e521b0063880672e92386b46b5a96bbff0

    SHA256

    bda7820b0c6677e41fb2683b35e911ce8a8701aa02a03170f4bdd43923dc16e3

    SHA512

    d88b00ebcd7bb403eecf279f33f24338272bec5a83364f2bebaa2a74feaec061117981af7f9e2dad0113874a9a181674ecbe84028902d3a9103988ee17824065

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a79ea9d07d98d33bc3e02c1efc2f19ea

    SHA1

    42f44fccaa5f36adeafa1d7c17f4928b479a8b4f

    SHA256

    f601b1cef441935bba045cf36a0f364997f581494bf1f0e1b7b7bf274d76feb7

    SHA512

    2bc85468eccc070fc0529849f52db13f127cdfab38fd16642572fea032bf20eb12362176865bc03b70bc29808c093e48559117fe917e3f98a3b0c1dc1baf2d72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28414fbcd51dd27bb4338250ec5b495b

    SHA1

    5fb864e94ae5407f05fa07a6ccff791cc28896a1

    SHA256

    4ae4587291ab506655365e6d169e16915dffc303e48cade645324c1a1faad5e0

    SHA512

    13312254223bfc826b62ee59cf85c91644a04b6a03ca7e9ecc970f381633003315cfb5fcf06459e316e4a582b1639d0cdf64faa8c07e9b63d2646bb3b4c97b86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c706e576260b506c0fd619ab8b20cb3

    SHA1

    39cde91e411bd06e31e5fd88656be03771b0fde7

    SHA256

    2ec3513be3fffed27d7f3de05333ddf513c6a18dfda5fa26c0ad3dd1db6c4bc1

    SHA512

    b81862fdaead7513567d453a53e292969407adcb07eab6033413fca70101e264a52a67a459ff171a326e7fa14101f1dbf5ddf32fdb95e3301383aa3490d4deff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f42b086d18b25b7578d893450dd7a57c

    SHA1

    583459070bf289484cac21b4dfd11ccafd164745

    SHA256

    2ee374b16015dfa4ef858fd9c4c2e1741d477b794a5965d3b5eb3b712ffd9601

    SHA512

    d23267d4fbf87312cd426e5e828f544733f761bd8f184fd44feb8237d710067f389de5ca69048b82cb1e8c6caedc37c2ff3292c60f50ab8e676a21f3b47034d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    35911c3cd9b490fc122b80323a9ca443

    SHA1

    29830ceee965764cc9987c2804731cd347c73b33

    SHA256

    af5bf14b35eb14f46b4454e32b7769bb89de1b2b99b9e37230fa91bdc63bb6eb

    SHA512

    c6842fa5d04d8cf7b6252f94456f0423310a89aa8ed82047ebbca6b3f58570671f841d9697d399fe191a36714379b71885da07ab5c4c7e00340e7b2193c3114c

  • C:\Users\Admin\AppData\Local\Temp\CabD7A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarFF1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a