Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 12:15

General

  • Target

    673af32ffa43980925ce58353b928506_JaffaCakes118.html

  • Size

    40KB

  • MD5

    673af32ffa43980925ce58353b928506

  • SHA1

    9dde419eeb23e766bf1584c0677e25550a85a065

  • SHA256

    39ed475caf96e9d2ce0c55c2794ab86e9242dd5363e78d156d4f6dc41e8de126

  • SHA512

    c71e66e2bb450551b1c9b1166f56793b002accd3ced5d75577a1917f49ddbe47809c6e1f59880c66d37777294f535d0d8aed80a31d104acbfa54d0a9b62e2317

  • SSDEEP

    768:8A7Lq5GytFWzcrzmO/Ezp430lzeJRtzOg+zg/dRYdw0ch2QK3cc29KoWVW:86Lq5GytkzcrzmO/Ezp430lzeJRtzOg7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\673af32ffa43980925ce58353b928506_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    0f8e52e95bd6c3263bc20a2ae355d8b6

    SHA1

    385a856da0f2d63ab6f0e984af05433e296adee4

    SHA256

    58f33de960e7cf521080a6df7573a7f1485674d66dbbe52161b1c7158e20e7f4

    SHA512

    2de3fc1b5cf561f1957833ab96c1c1fb9c76acbd91d99ad60296009479be0ed571712aa11d42a233a0f19d95e830a55c9f4d003be58fe5f6543d6a353c5aa109

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    137b4a33628695b38996f39d0544250d

    SHA1

    2f52baa720319f7dac8d8274c13885ec5113dd77

    SHA256

    3fb334e05539c5afc0a6590729646a17abf5ffa926c9623d2faec92105608846

    SHA512

    667e540145b8eacb791d760b0015d93c38da60603c5e61e4940b2f1e4d558eceed9c97d35a2cbe03b27079ac535f4882f7f76dd82aa2f0ffbe21f63f74e3c055

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e366eb9b6ea6c2b15098bf7c46c2fc8

    SHA1

    6a5f4bc9be9a8f848f38497b356a018e92334cc7

    SHA256

    b50b2014563acbdfd1bd4243c4e6821d52a2cf4faf484b57d53f5498839a2795

    SHA512

    a1946d6240643a37e5bc18d69babda1050005302a054bc257e812d3176b71f366a018a0ff2cd775c67af6a0741c806138b5df893c16bcd83aa7372426a9c7208

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb8c942f8dd9ed61857b48f5b6521d95

    SHA1

    73a66b67d0196ec8f5d06226da84605acb2cfa3b

    SHA256

    98aa4d758f7f0e7406c9f74fd40269e41a2fc477a66c9acec704aed7905358ee

    SHA512

    9af26efdcaaca8b9939c1b64c2242ffc973ce95caa81a17f34bf1aebd874182991c075796e5877817bceb3b2c54b21b41e53f263dd8c53ebad22cd8cc9783c90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d849daf9114027932040464af88504be

    SHA1

    a402f332ce40d28409667e96598afb1c56d199cf

    SHA256

    d7d2d3ec3b36742937fd14cc026262db6c4d2d8135282053a43a9ea27fd53b4c

    SHA512

    170a3abd559ce6825e59a8087563b5bd1dcced7105bb38cf3d1b07d7f509364bd230354d9df2fda64885d6975e08a19dbe50ff041de6c2e0c0648dd41c7f6b22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    141cc592987fa5dd6973b4697ed896ad

    SHA1

    e67c27fd45f31c9ab8a035e90ebc679b32357471

    SHA256

    da3172abf8c173a594fad2d27f7785900a803ee966c4ad20ceb8263077d7d022

    SHA512

    7b85fe7505620a3f967e07b092876fe9e723a03c71e9a99da25ba8c3b167f2890730839c06c0e06e3248c76256913efd06a0911786c8dcc1142d5de20b93fc34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54e0f24e748eb03e7919f8d0d1ca1152

    SHA1

    1f62071de582fb613878c3e090f6c035eb11f7bd

    SHA256

    80e25d16a25fe8d466f5a2bb908bdd9a83f5d6a341f6698f1e33b08e57ed225a

    SHA512

    9f52491a63080abd7f5489b206fade2217b4194c156bbce4d9002a95761b0296b65fe0f9b858a558f85330008d6a3a4937f5de54e6a9c46db7d98e1efe0f0568

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75e7fd8d2f122a91b368fae626f2540a

    SHA1

    1ca9040d29c1f45ce475e291368b429f8f7e661d

    SHA256

    80a2e1a738fc95cb0554ae7322a75bb01bd0c5cdd41e8bbfc1781afc628b2c72

    SHA512

    464b4e6fcd4bc54c2c2ccddc8e3f1b02396562200ef7b8277adba0d220388c4ba3688a7736e293bf3429275384b8a7138a8533268a9fb6944b85fd92b8f3f0e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5cb6974c80607e29a1c389ff84c9f9c9

    SHA1

    39bbe3e9b36d80e113875d56b17c19e798380ae8

    SHA256

    099ceeadf03345b6e1a94187f7a9d74360f810092ccf9d1617c4e96bcbe6bc0c

    SHA512

    1ec82197c8ceee140a5a0a6cb608853bd65ed548630f08c2ae48c5d9a462b38d5c63be1e67e02c9f05a69b0c69f6b06f4be23ed9caec2a4c7d8bef843d37bea0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    181ac430f0126faf3ffd3520345868ec

    SHA1

    387e0fffc82da72d01c5b2b2c1f7b619016e0ab9

    SHA256

    1191b9e8fb2f763ac6ab3c1f96ee9ed28459c350e14abedb931270aef3d5d671

    SHA512

    7f3a77f063f1af46f69252212a427dee9755f727db110cb190d01cb635be5648f0e01f03e39a676183495c72e725beba5200911a298ecef0c90acc3e9c92c9e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5005ed4eabab044c0dd36acbaf4405d9

    SHA1

    07a060be094d57b3b043cfebb131bc5221f4872e

    SHA256

    f701ee2694ff20d3a3e4371e355a4822c7130554da127871e234146e15525252

    SHA512

    2c50caa1a03f2589a53416f596d9434819ef73a33da5adc293d8278dd8116a67718321b4314c9d3296162f5484a009b0cccf41274bf69b611f26540c7c310fc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    692acad8782d68457251c1aed894e614

    SHA1

    292717da9b719624af4fc7f598fb41a8e19b0808

    SHA256

    dba924f085f149d5e442e785ee9624a3e5610214557aeccb4dedc3a6f5d964e0

    SHA512

    9e4db2533d02a6e21a0ef872162524511da5e74b2db6529f401bdac4486e7274196cbac1a6df698398e992189a3c2899151a407db1c34bc0128a61483f3b0fc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a5fb228b97bfd51a9b274796a7dc26b

    SHA1

    69bb9fb68b7e4357e4d383772b8429f0ff1c7bbb

    SHA256

    880f887d7b44f6f35bac44700d891514f8d2a7099b57eac14c7dfa55521abcd4

    SHA512

    ab1c17270bec0161184b0102d9a0f5c8046e0df428ef29a2c13ad595f8954172d5496aae70805c58b5304d7373a308c719d6bdf4417255c0ea22ac113163e74d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dce19e651dd66601e2bc97574d736db4

    SHA1

    1ec430917e1c1bb3e98a83771d219d075527094e

    SHA256

    d30b20c9e44bb3fa8a3fab4cc1998c0b778757ff9de8648d3fcbac2228d8203c

    SHA512

    bc822fd8211fe0f2493f62aa21f993fb6b1df8b0ce5ed55aaca2cbd051fd6d2dbffc81272c92f824bdfabedcc78f41cb98314fc8b376147f6ffb4eda63c64553

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cc88e8d421c16def0eba34dfe784f9e

    SHA1

    8d2304614e51f4d9519aa34f8a36f1332101d22b

    SHA256

    b4c7c95c8c3e83fb8b8a0c59b75aa80dd4f6d6e196e3ee8b232f3c3afa41d9f3

    SHA512

    fe00da3544e95793a2fcfe7d3e16f67070fedea95f41de958a61afd0bd5e0423912bbd58c89a65ad1826461182cdcf29dfd3643f82221abf629b6bded988480b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c63cbadb7db3ea6c8417e93b1293aa00

    SHA1

    0aef783c9a59ad2bd10f8fb056b43c8c0760e55d

    SHA256

    178004257c9b023ca8b75f9cb457ee98898649695858bccb9303e28f234e8e50

    SHA512

    356f46bc82e0d49841d1f43308b55a267a4da55c9e2d9925dbf20ab52146eece96224097a0adcf39d612942b70e1c4609bbcab8244e60dc5aa8a7744a9bab91d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    063e71f429b446da069e5762c95c2a6a

    SHA1

    749a17b915e84661163caf60f35f7011962c64d8

    SHA256

    ca632809854eaf6f5ccd7ce57ffcf6200df9f0b375ec7b478549a8a32f7e3f18

    SHA512

    7c4fedc6abb687f2e16e8c3062300a35ae389ce0fe0fe32cd02e4306331f52af7ca53634c578e96d4dd0711003ca288615207b72e47dafb1907c2d90a9129a91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b5ae984b01bf3d39daa99c273d3a0a3

    SHA1

    458e9d41eeb5a219c17fc67d11eac134cacde783

    SHA256

    b066a749a3d1483278b9e89cbdcb629158673cf559bc9dd5fc9cc83607724b0d

    SHA512

    1c7490df45a2953706d72ecdd09fb867c9d1902e795f5aed45f158e5596e6f185450e04f2220007f2a55129192fd162310ce023e8954dabd66664f132d8f0350

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7060e4dbfb04b556d06174e9db5715a

    SHA1

    17c68d24cb0ee5913abda1eae8f84a97bf5844fe

    SHA256

    90ecbf21659d6e612a88f85ae4a74943fdee265b3d0c3a2ed19ba7220bb79ed1

    SHA512

    4faa9f8ede1fbeff72f5a1a98684b62154f5543a423357b99b5a6ac3e7fbd807a12724752631724d0057fbb4d48a1e4590f2916a095905dd5c3ab03db7031d88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fae35367cff8c4d8c22fa046ad5c957

    SHA1

    05dca108b1523ba053ed825c7f92e6677bf069c1

    SHA256

    49424961b0149ad98c0b57ff80bd004331a6aea71d745c505d36266deb875031

    SHA512

    767161a8deb7bb8d50604b409ab637ce4742c18695ef598424cc5e1ea27cdd6a891319d6065b4119a9acb4e60d7ece1f58b44e901c141671582d83c25d885f9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    652e8b64f2b2ef12a5058ab5d7238ac6

    SHA1

    d994a6194e0e4f6a7fe4fc7c8969219b7d1803a3

    SHA256

    6d65d891500ad4239c2089aa6ddb0cdbb88f5d12ce2a6e8c58ca3cf1f56d8351

    SHA512

    7d46de9b46619026e9fff4dc6aab96127969ab016972e3bcedf2bae73534156cb0dea42041a189d197619d67606596c64d0857f17ce713d05a00ba4990969d71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32442b7b56e32a0e48936d4b425a5ba1

    SHA1

    928b94395b623e1c6aa0739e19116dc563b21c6c

    SHA256

    85f6f6c4d42cad7a6b1054ad9b981dc5fd7ade2fd696fad0fd56d62e9b256018

    SHA512

    f4b7c5cadbb5b440892066ab33212c98002f9aa6d61d0256bf1379a8300854ee8486ac94e4d92556e2ba588413b8bbdcc0d6cfcae2f10ec997f770c8eaec3b09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c53a59f5330c00d66d57cb09ea05d4c

    SHA1

    02faa9d6b141e0873cac6bccd886c91e2aa566d0

    SHA256

    93f59eea5f10e4998d65f3b6cad5d7300c241c937ef7756cc1472be84f5fd9fa

    SHA512

    c2b476ab4acef42f3079894b6d158855c9a09e69a8dc40ea709d972556cf3e0b9c7f56bd503dcb473b1ee4c99350f9df7d8539cdffb9e506094b8c79598c9cf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57b520ceb81f27afa2dea7e6b4f244a1

    SHA1

    2b2ab8e414b394a95dbf14929d73d6d0566be650

    SHA256

    27e11a000adafa94f17c842c9f12c67f689f2f73355377f6cba0a2fc4db5f2ad

    SHA512

    e59030d5094e30ad386290bac12cc7765cf31791a7c52f5dae502eb4896f43fc93eb1c8151d94f99768bb53779bc2656c59678d4907b42d52dcced789314fa46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9c91980ad639a6e6e91be47521933c7

    SHA1

    c5a29b92648880393603e644240f14b05d76367a

    SHA256

    9098d63ab77efc575076439152902efa61eeda00fb063dfe7f3f69a42c1f0051

    SHA512

    351c11f8b5df7dd8cac6e6361302bd1b7d90917a81492e78689e4f57182256dae96f05b76260fbd43e050f074939d4f75a3b39fe063c3c9e53839c03d5fb2d3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    34bbebb6ece5ad34709f679738598bf8

    SHA1

    af38129370b342b9f0d96e5b3b61a031f4b01427

    SHA256

    b699c7435d176d77cc6e7582a6a89528ce7778e56794f6952441b89bbae6f822

    SHA512

    87b8790a480704503dc73d5a8745e73682f6d2b757e73581cf5ff10a40c12b96eb465ac8f3db9921aa49b1140709f925e4f9b1aaba635342c985722e13e8f2e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    99a0c9a48858a1b5ceb1a6e55f68028c

    SHA1

    785a37de0b52e0c6c9106010c97b5beb5dae0dac

    SHA256

    718d6252f0c463fd10b2f3e1b607155f4a9788b33e23fc3f53fa2dd5c3b8828e

    SHA512

    dc242206773e77954a02833469732f2ff39257f38e3cecef83607cd398dfc8215c9f2e95b8aa7e9cef8180f43a47143cac770bfea8110515c546015f2d18195a

  • C:\Users\Admin\AppData\Local\Temp\Cab1B70.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1B82.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1C73.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a