Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 03:58

General

  • Target

    4474502aeb12e287a3dffd404abe3534_JaffaCakes118.html

  • Size

    72KB

  • MD5

    4474502aeb12e287a3dffd404abe3534

  • SHA1

    76b8716a263fb070c04bf3efa1e7f6894672cca9

  • SHA256

    4603d685dfc58845c89262d5c025bb5209a78da65bc7447ce3e2edf34eafa490

  • SHA512

    087d53d1df16ee93ea7f0b8618e0c8493c82558aa364fcc5de3251fb3bf9f4129db4e807a49d8e07441d2879241ecda991f1ddffed211388149dda203086e56c

  • SSDEEP

    384:SwoP6zI4XfHRJR7R6R+E95fRR9ckqSq4E9aE9uE9EE9EE91E980klH/xi73k4cBf:SwBzfV675qbM73k4cBkOCUUhdiFt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4474502aeb12e287a3dffd404abe3534_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2064
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2064 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1756

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    5f2fd2b8ccc3d460bea58be29e822fa7

    SHA1

    a368852f57cc86e1c5a7f79b09145299edeaaeb3

    SHA256

    869a16065a243cbf669e23f74e3278d1912d5e571b8e2e01285f3ff5c35ed5cd

    SHA512

    0d5005a73d5b75b2a399faa5817f4bbe16db2fbe07657c8554c18718ccce3cf64f91ccb7714e378070dce06c0bd373d6453d8f0af26b980ab2ca68350b9579fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9add2cbe7c065c52e62478049b4a217

    SHA1

    03a673aadbf33f3b7c4c014ce6099bc08968d4be

    SHA256

    3675371314986012a20af283ce18524104ec1e118cc6e088e14aebdfbe10c44c

    SHA512

    48c5254a238dac4d657b0f88a33a9a2b91442550e968246984dc44342b62538ffc9fca9f90dab41b5b04140b0d141af406d3d06a8d36b452a5b2f6f1dc993cf8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01d74a4152b1576b410b9851d3e51bca

    SHA1

    4fbc7d6855dc6a9348e1e0d5158457c67bb86d1d

    SHA256

    8fcda5a4e3cf8ef4f1c93cba14b7e04734a44f2d789aeb38af0761086f525a07

    SHA512

    a60a82cd82cb1af5176533c8093698d21e7229181afdcfaf7ec135ac8058a8b2be1c488ef5af03cb52aae2f2346bae4b7264fdcd783efe5a8cd07af4bced17d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7dc84a94b7eadb58b75c3eff6944989

    SHA1

    e7f330eb46f5f7fb8a842edaac6e8992b7bcceab

    SHA256

    3ce17df537b5cb42a4226404be3b29b507a73785bf1cce2a30029c60d7bc726d

    SHA512

    f97a346ffae74386ac4b0eddbbcbd7e7364fe50e2d101740f7466a1981647c0b67de825180995ce2ad24cd5c801994f2982d53f3accfc1f5c76925d4faab9f20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ed3b1e8c111ff17a5befe8a6ab9b1af

    SHA1

    29650f56e411c4dde426573c33435d8df78763ca

    SHA256

    9fdaf128c6647171eb496e0d9f5a31dd4ce920fbe7f255659a065d507a4d1d64

    SHA512

    8382c5fd15040756790cab780880cee7cabab398fca2055d121a9368b7263602a27664d7fcd0829872bf1e464dfd14381cb753437c7363bfb85f89e02e53ef80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3d1fdf119a939bce97edbeb1ac4bdb1

    SHA1

    eeb0e30337614ebd368c38fa0fbb93755b7b154e

    SHA256

    63e562a258fecd58126d07076e94c3e67e0dbe7edc41b925dce8ca62f0553fff

    SHA512

    4fca9a153cc7780faad36dffd5a22d2c2b9a700f7684f30a52d4b33d0fb758425ea49f4b701f9c99b8cb02c3791d4a5d3134bf7bc87ac5c94ad12b872ec2b720

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    885b0a56214434187a5bb6d45529b2dd

    SHA1

    4c9ab1986a04aa22815d2f7c632c52709e9ad574

    SHA256

    76cb92be72b14b8c16cbdad50895248f90ce8d2490c0d29d0f0ff003af5a3e20

    SHA512

    be339b81032c49ba09366425e0e56edcc88baac4c7f3c5cd4e8d778a9cf52a80cda4f96509392fb1c7e319671bc3635e65218e727e3919d785627797baeac80a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42f688068de4de7a3a4ee7101a7605d3

    SHA1

    2a311a96650f8bde23b7aa7858d28cb3a1f77bcb

    SHA256

    dbb4e99fc3c0ac551edec14856a5944ab0815a34476186c220ec302b5cb36435

    SHA512

    2ae8f706fe8eb0abee271cf3be7a9b79a1f6e7bceeba018f5d1f1c65f2083a1be9d383a8a35f28f542049b62b110624986f70a4b91c1f8c17100c6729d10b647

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8418c98f5aaa727c6af8cb82d11f1b1c

    SHA1

    e10b32ac53b3e8818564f363193761dbc5c4c062

    SHA256

    e4bc5c9ad23d59445f752c3aabc70cfc0558ae0a1ea087fef7a27a8db239e117

    SHA512

    4be3f38c8142cb0884422d3964a256ee5b25d0de0bc5debf54dda9443435907929818f7deb5f58a2930e4898d37a366d9d525e0f8e794ff4a080a06f71582ac5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5dd2fd54b776d8bed5ad3057f83ddd44

    SHA1

    3e238948258a34425909fd733f42f04842e5f0ad

    SHA256

    4849ff8407856d43f02f382fe72a95b60a8e6760f540951274dbb4aa8aece48f

    SHA512

    46473fb695a6a2545877216bb94cea7eb261cc282d288ec36c9c381c6767b06b65417642ab147a93b5a0b1269187796c78d9e0d7f3893712d69df0088d2738ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a22e8f2ca032802d4980663fd5c4ee4

    SHA1

    56c22cd7f204b0620d10bda2fbbd8f8248229623

    SHA256

    f0b489b76b831a65e0a4c9e7008074ee4b3f3f0e6b16bfc3e00094db60e8e562

    SHA512

    e7f46413e79895849958f875e4d3c7a194f615cbab08b442b130858cfc94210f87f7d5e5261177bd27b50e2fc66e154b5eb910524d93237ba290f008fcddb734

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c67e5678e9599f5b3dbf6c66ec3efd12

    SHA1

    f61ec1613f7de718cf71791f061403ca877244a3

    SHA256

    e0d8adcd493fac38547fdbd05250db0ca766649ba29c09f1d9114ec6a9a691d9

    SHA512

    2b15513ecb4b3db57dd8d6715d9b74e4009a924704b16750221f087a05e898c8b0b325da17a2f13df9ca598d0b893294997693094a46d16c24403deb8f818d22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e9491ecafc50d7ab922adffa7a01f414

    SHA1

    c4cc4612233998da6390d2e48abe52ec9485d729

    SHA256

    64488872e95f7c5cd985cbe8b0fd3e0e95c8d6da585011c22e18331a59e68129

    SHA512

    b7d6d5c925329280703f99925f4aa28a0a0abb2545018803c515758a13b7963fcece5cdffbe321e6c30e9aed1d364e5a9d479dda64b236cafb2c42b969e8163b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69ea4bf0b3ba83b23900c90a6414b89e

    SHA1

    5e94c764f44db36e1158829a59b1ff5834e56ced

    SHA256

    4f51bae409597a43f3c54e128e6a67cfcd8f99a28d7e66cad0152b357560100e

    SHA512

    e1a6dab6031fcb39202081ffef30f2b15a2e1d2e4b4c7ed16a963acfbfab8d324e6b968a30934ab23fbbbc7c9b75da1bd96f3b81a2713d5ebc44f84514cb864f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9ea9bb025583f3e469f38bab2483626

    SHA1

    e7114dce566fb657ade0f190e2ddee34f204bae9

    SHA256

    3f6225efff89321ec675379e12dbfa552c324e32662bac2d466b877a83620450

    SHA512

    2b5e6ad329cd2a33894c3722c62625835d07167bcf77d0fbbfacbd2a5358fdc443ba54151aa44d6c46e600e87cece7cf47c9a6d3aac73ac708a245c90ac99184

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f07f35fdb7453bf131dbe70b7876cb4b

    SHA1

    6d8abe17b0b5e9e1eac087d644e6cd5bc52d339d

    SHA256

    04c34cd9d0c320702cb4913152cc467e07c7c75703863763c8a04ecb19aadbae

    SHA512

    8782d47cd24ca890139a42214d9af56efa6332322ca8c2b143113c074e43dc7c2c84bee98bc0d920023212c3098316797279bc41f37495278b1c1c1cdbef312b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8031827a721c10b53f3da23e43643f5e

    SHA1

    2554c810180c6c84f4f15d9aa1f701c0d59c6b65

    SHA256

    04bdcae57dc6919cc0534b79ff429ebd706ec0a6d4be3e350ce65fddc11bbc62

    SHA512

    7f4864242412b37dbf0055fd3912df5fc143718c70f361be35a17f31a0807d5273d291e208384dc64bdd5cc2875ff0f9e5c670eb79118dab711af0cc8af2b74d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    292b0c081f166ed148a8c942b98216df

    SHA1

    2a480213cd9750455106b2da4a0bc61cd53625bb

    SHA256

    2de4b5268a6eff7abeeb1775253f52ecc03a84e3e301c36fa59885741f17a8a0

    SHA512

    915c66592d2046d51773b920517ae273a75c8dee9c44de029df20bfdeecb68c9d8ee6b0bd4c9b05e42f7af2c9271234f9524f96fa9000933bfb937aa6e9cb24e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53d1111a666ca9344e12e4b2ca13ae73

    SHA1

    3455d2659fe79bd023687453b9147e8e62000d80

    SHA256

    90095d6bb2e63366d5f7aec52a55f8572936f913722bc7dc0e60ee021c2d44ba

    SHA512

    402d69d07d6b796b4a4ec2ced1b23b4eb4a1331bb8f070dc94c3abaf5b416d77490e5326b0d14d2dbd918a80bf3b73be7f129f039d2c1b8e5d23ea1dbdb7bfb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6330721b793124512777e195174a2b92

    SHA1

    8173f23b9a2b5c0358f3c54af8438c870234066e

    SHA256

    5dfbc719645d08ad089d4240557647f8810466affcaa47e641ea62c60f8d2ad5

    SHA512

    7b54904cce4f6b2bb81e3041ab5fbb960e3d108530f9da742500e22dd4d854f9c7dfffd91879fc7ed6c344f7d48d328d92cddda9822c209d025e34c9a94aa688

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45bcb00d1e0f64c94170b35e4bf83a0f

    SHA1

    442bef3a58e80b406454e073c71ec6e5918cd245

    SHA256

    f1de0cb921210b07b3ec25a9f5d6864a384d5b3f37d805a500f56c2ab315aa74

    SHA512

    ff0c229021067b669318d2e3223dac999961104e6cea56c3daa780074f6d29491370e6f574674998de5308f72a2a8ec48bdc26dd08aa39947affd97744af4ab6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a67e2d678816da7678edcf85a5a9d91a

    SHA1

    d46d6018ecb60e2ddc7b21584e8b8b61ae918e13

    SHA256

    744b0e320fdde9b1df34853fbbe7920784e50a87a24ebf8bb99ff135c63866a5

    SHA512

    e16a1ca5ab8176319312fb759423ecaff0e916d303da0a72a38a15817af1ab2c72485e2af6cf7fcfc4d63df7ee2b644ad4e14fdd7611b18bdcedf5d3350e26b6

  • C:\Users\Admin\AppData\Local\Temp\Cab25D9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarAE3B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\TarAFBA.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a