Analysis

  • max time kernel
    121s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 15:03

General

  • Target

    46b5cfbae044e4a2d5f06c66739edf85_JaffaCakes118.html

  • Size

    160KB

  • MD5

    46b5cfbae044e4a2d5f06c66739edf85

  • SHA1

    4f0571eaa769b1680b6606690a1bcbea23e6dcd9

  • SHA256

    d16d5b80820da3228dad2e2f25d5f3e7ca42f6bcfcf72847598c11f293614642

  • SHA512

    e49380a87bfa981511c444459940906b7240816ad6795eaadb83b98c4ead0be60000de011d0bed081114c97bf4764cfe33c0344229c1f8732bfba3d7ca976bbc

  • SSDEEP

    3072:lBq50H2YkkkCtPipoSL78Ea0u84DSAilYDEfGvzi+jbqMtc:m50H2YkkkhhYo

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\46b5cfbae044e4a2d5f06c66739edf85_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1928
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1928 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2168

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    e1d58242c1275bd113e82476dbf42114

    SHA1

    e3e1f643a54633f5fa969cca3ddaa5ad584342d8

    SHA256

    15a9fa0a1fa1b7c97e2d08f934f980ac5b67a94cbbfac7a06ac995fe853fb031

    SHA512

    8c5b3820d3a5547a9c01b2963de2add0c3b79706e8cb4c5955d7ece286f9b831bf58d6f22b88f1b824d917c3cb44d84161cbeff104ea6f346d9506cca8862829

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    472B

    MD5

    bd5c8e332f97ac0ab9af520076d9c96d

    SHA1

    c4edada74021495cee9011998ac3c7b2f4fb54e1

    SHA256

    2947283c10244706c2ee62c23b39965b63e3e9cebbe3a513f55111e4a0b1167a

    SHA512

    a6c861f88e4056fa428671c23cce4dd8d910af292324facff20394a554568b2158f5a4a3cb0513d49f8d80b6eb273d96e06be12e0cc09c75cfd4acd2753313eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    a0109961bf31337c399eb0917d2168ea

    SHA1

    cce4e18d0f1e073229f85b8bc55996ba3a4afae5

    SHA256

    bf56683aaf031b791db1f609d8415d0669433baef9921004e6853887bdd4194f

    SHA512

    f2576a994b0ac8cf1ae9d534a3576d740761f304c6d698bfae95122bfbae74e4ef359d10c65e7fad9ef3917caf8608d4a3a248a5ebb15be935cf85ad913330cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7e34b884007f8231081a65223b99bb3b

    SHA1

    7a1a1a1679eb3877cfe491b2f2df8680be0c9a56

    SHA256

    43e84f6da11240246edfcf4165db843f6e0b59fba8a3d6235d39e24f8d1a54a7

    SHA512

    cddab956c867efd3636729627cc05829796fa2b17f9e6c48210cf48cdf3d1d9743cb63b9af6d58427bb5e751f003b52334550219e9cefdf052d3a5c4214210e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1636d8440c19fc0814b09e7de36c538f

    SHA1

    1ef1a2b17ef4573310916d754becd883ab0ff1c4

    SHA256

    77548534aa9921b0fb18d3aa8f75436e1a8665a28812e697f90052ed1a809e5f

    SHA512

    86c50986ed30bec589d6e31af2b2ba3691139667aa6c0c44a54f91e25e3590144f93506879b18f1ed571cd063d61f655f60bdcb160e6824c01f049dc23debbc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    356f7007b0bc11de13bf75d17e4ec75d

    SHA1

    7a4d467da08802ea2e019477d6b351bc94d757ea

    SHA256

    3bad8536c580c107e2e453b0d8032a17b94dcb1cd0308811828a81ae939a81e1

    SHA512

    701dff1b6a4f7bf86efbd81ef9a381758ea6a2946cb5000555fc11fdcaebfd647582c126fa4a764a0623a43bf3a8558f9d15f1c6b24dc8dfb98bb3200b7946d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07337aa85821f90a950622609250739d

    SHA1

    ec1c5dff299e7519b22faa2f299f4b99d70c175f

    SHA256

    b56f20c888ca802e12736913710aa293f2402844c9f478fafa5d1988801917a3

    SHA512

    6085a59ad50f17f7bad33d1a7bbbe7572be21d3009ba3f3e3d1b4bbbd736c9053325eacdde28a47663d0f99ab5ce631f93952fc981c77e9fd66ccf282fc96249

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6072e0d8789a181fadfc8c5ce6128eb5

    SHA1

    24b50954780515747c4d15797d3c347b1b118c84

    SHA256

    3185c9c711a780b4bed45856e0fbe33283eb53e4c391efd3cde0ed211008216a

    SHA512

    059818d5b4e4acebd4133c07b875466905d935ab37c04f6f4519c100f2dddb06d35d98c8f0c121f20fa5d3cb0abf3109bf8423e1686bc5bc4df4b0053583c1e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68f6343dc4a0d76614c2f7772d13377e

    SHA1

    b2029e55d4ff9929990a56d53b9112179c401930

    SHA256

    9482d7710fedbf427b4185d5de0af4341e882be392ba2bbdc02013a62e3e9caf

    SHA512

    8094d776e600b35539429e5f9bcc59a3f2f45d63413e5abeb454251f035c9e45b5c5bdf186ead3628022ddeee80b3de3e9202268fc43c38bfe5b77fa5deddd6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbb87ecaf961d200675bace9d75ee193

    SHA1

    fe4cb8376d8b09cbdc7c8323a52bc7f88cbed024

    SHA256

    bd37fad36ed2b16f6c38748d87b5f76aa98f1f9f228f0f62c518802376d79f46

    SHA512

    899bd0997ec1c41405da74fe83d9be1dcc57a1df2447e4ff91c183ef3fd5f61bb86a8b8a122fde3cf8230a87788af302a5c993ac5c2778cddf7c39412d2eb8ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69f29d7ab23de6636d3d254b573fa98d

    SHA1

    d4a596341d2cdc98157f97cf8a60d299bb40712b

    SHA256

    3d3db1fd8ff4901917e030578c1ad75393ecff57a44255d1ab132c6956d5173b

    SHA512

    67ef7df94c1fc7746ef4baddcd82359d26f11e53401988da272e3d852a85fdc4e704a2d8825d6cd785450e7617d9226b71711f90318c29dc770ddd200b9b4882

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e19f4caf2993155e06e82a649d941d24

    SHA1

    26ed0cdeca29e7af7b792dd77168471fc45bb552

    SHA256

    be2e767929e982ae6fbd05a09fe0d8f3017994f7a810b86a5eee1f3012d31a48

    SHA512

    cd1644b4404c2abd17525e01231148a0a9899b4b8b5b2c46e1c7bf52ddb4c2f556e9c5e24ab13ea1f97aeead1560793b64918779fee5f4860a870ceb99757a74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    980930cd1a788c99eda505c731353b02

    SHA1

    8bdf74840569adf30c211882e4be77dcd9172365

    SHA256

    1d2a6aadecd3964edcafaaa0ab65b3aa98316a16f5ba79f065a1ba038a9afbd5

    SHA512

    00ce2af30e3a2a7aba14db3c803afcab77405f58b593de8acceb442e047bc9ca4d087632c0487cee664bed4c591e466d1ba727f36aac6686dc34fbc316fd7f7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fc0e4f35be1929399ef7e0efd1cc94f

    SHA1

    5b5fa354c5e0cc7b713419acd64432dc766308a8

    SHA256

    fca1ed14a52b3267e841da0b032f6a82c85161b83e0a19f6e0270d02755649a6

    SHA512

    d0ebcb4953cdcb2daa09801a828e3446a4680881b439fb6e52f2750baa84e33088b339d0ca9d06597eb29fd8b32e07ff68984786bab121c01c52ae9cfd5dd744

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b25a0168f497853959635e5c09e03ea

    SHA1

    eebe5e10c19262c9b45873d2f9756f52c06c0a78

    SHA256

    72ec58a69825d5d201de56481a7db21131c79a6bc9eae83e4b82e737dde610cb

    SHA512

    d6f57cdd0d3cf0ea58bb4a0caf0edae430ba1d09397d603accffad210c0e96e2d2a338acf250bec2481c87ec8514ccd598c575fa49838b6ee16b68f15c49202e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a394ea8741b810978a72198d8577a53

    SHA1

    6918c7935a6ad3414d785112e235ae2706b8e008

    SHA256

    7e24192301d004561ac3775bf0ac43b03cbf07690e24a0d7241ac10059201f92

    SHA512

    97feb450ab04b5d4e67993f697ae688c50188159576d18c355843cc090e2539fd22fecf087f9e3928d0cdcb89d7d54dde1bcfe313629d08b7bc5fbd7d229ca95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c7e7d45cbc1c7c5b9d8ecb72464d1a3

    SHA1

    0d371484e8588ff930731959b62a6d0c05928079

    SHA256

    b78135bfdc10b3d662df7184efd520625dfdd8465576ebae55f443503af5c234

    SHA512

    cb2ad4d668998ed89d11ce5ec0a736d292acf7a223fc573b3aa24cfa69ea51f3011910a118bba28775278952e424a219cbf0d1b2cd75286ad81c18c47101281b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94c24662b6574aec6b929ba74b108e14

    SHA1

    d1dacb9e574612433221a33c2fba90f161d2ff85

    SHA256

    8bfe03f80e281b301062143c61a33353be28c5a69ab403e42ba9f5f2dcff1655

    SHA512

    54888a8cc766ae34e3c735d96099c9cd422631025ed98c8ad148aa52da52e21729828da6638fe9bad488b10cc771cfd540a04ba99df8abd0c23a22c17a6d28ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3057238730e9dfe820c68ced4d765aaa

    SHA1

    f68f791678391c7b944be4aea7d82f96579f212f

    SHA256

    31c596652411b8226de549993d854c335ce49001a053b142772591c6c90efebb

    SHA512

    5be598c77e4d5a007045b17766d0cc4162b30d3996cdf31dc12918859a3d07b3c3e1977eaf13fd2cb87d9fd507863000b06368ae444be5c4b3aee0d6a8adfa63

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cc2cc9dd58d0f3a9ebf8ca7a4a7b210

    SHA1

    00a94e4df2a7892ce3d587f9a12f208224c563ac

    SHA256

    ca04d5144b3e6c48d4cb14168c86e34b2ad2b997a74872ec97f4d3dfe574ea42

    SHA512

    06a2b8eee1a0daae631f73f497606accaa46b272b85b009f8d2c4ad681ffd843b59f7ee0299238dcb34ba85d2e4ee8fe6cd45c868bb603add6879f3a2c378e27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ac1656b8273f5f2e4eb666ace3238ad

    SHA1

    51a8fb1b63f7cf51b203bd529cfdaeb457c90434

    SHA256

    e3fe4a19af7874e9cbade45ba2d040cd5ab7daf76ea98dd703d041c3b103e7ef

    SHA512

    673b567bb902a552a39c994a0b377de7b1c678e37a4ea5dfe9668fb8ae2d62e99542c9feef7769a6554d0e4582bbdc30708e17d497de2bbaf54d27fd58dbab08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    059debd2cfd04d66b8ee935aa7cfebfb

    SHA1

    e3ddf5333d5f38d359ac3d98e6f4da02e47e6d0e

    SHA256

    43471c8efe626f120adb561cade7e6f1f3fb664b59f3a1bd6f4fd6be8f4d0c51

    SHA512

    43f3e29278e548aff1d08326971c0b90ce9e08fb706ce49cd48582d78f3228ea987d7221334eaa7ff9e20089b5b69c8a2d00a1434f184fb89bc611b8768879de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    37d04ff5c9ff8cbda880685f93db959e

    SHA1

    031db1b83b97f347fa78ef93572a729fc1b10bef

    SHA256

    6600c3dd8c8ea5819e7556714e55c8e922e322c326c00d23249eeab9aec35282

    SHA512

    62aeea30c79d0f3ad84d4ea9f8ecc36931ff1af24986595b1f7685a1e7d35ae8a84513b58c1466c8bd401a9d5e08a0a3f08d95dbd8d5e6dd572f82f81734ed39

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IW68H88T\wojosimplecart-idr[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Temp\Cab1C68.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1C8B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a