Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    26-05-2024 02:04

General

  • Target

    7400c4414e54d65e7678fbb8f449cdad_JaffaCakes118.html

  • Size

    26KB

  • MD5

    7400c4414e54d65e7678fbb8f449cdad

  • SHA1

    5011e504dd385059d2a3b17e66c138e0780462c9

  • SHA256

    544fd0bec223bb747083d52c9e9f3f73b06ca4bca2b61df7d09973eb2b179bae

  • SHA512

    a80d06257c9f1a8ac9e59ba02a9826cff4e7663fd08143c1915e6fe849f88c27f3224566b7cefdb4a4d283c147e1491f3dc1124e7dcd990acb3ce4ecb1ffaba4

  • SSDEEP

    384:a4tiOTdLhLb+qDLp1XT7dn4iEozCsKJfN5IDy4pzkpBd4DZfpR5goMXOu:dxJb+qfL13zCsM6DjuZuZn5goMXV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7400c4414e54d65e7678fbb8f449cdad_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1300

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c51d4851c0225b49d19448392f1eac4d

    SHA1

    389b34946cf15e4fbe3e30b0066a86e1328352db

    SHA256

    606490a57e8aab7cee4d2b6bbe208ca41d702a324dcf7fa4a8154e837ab1e402

    SHA512

    f2e734bca617d329a0617fff09d2537a7fcc92e6a826bb58513f3c6a995088935d14da619de4bce127f2f2371336cd36efba79933c2c1b06b0b43960c9c5a440

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6cc3585a0bbc56355c8897567b77fb58

    SHA1

    82e70ebbbf168813051c52c21cd2a7af75ebf238

    SHA256

    70598a07fd3568e01db11ea7fcb0ce9ec6f0a1e8a50b9169822eb7a84ce11203

    SHA512

    0a17ee64da88790c3d88ec413aa267b50e97d2d2dd634b3e6762c07d8d720ece20fa93a33c04f4597c332d852fc3e221f1f2d36b38d136380ad8d286de07e132

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a80c55a6382decd349391a8059f5d2a

    SHA1

    b5b89223a66950ced7812da26b95ca8dcb2cef2f

    SHA256

    c287ec63dc829ce069e67199ebfc259278157eca18e8e430a52e0e65a7f6fcc9

    SHA512

    6d7b600bc3ebc0987f5878e5d5752bb2c5bcc7ed0fd1f02dc79f42436f4b7eee96435bd77cd25f848f6055b90db9d061bc9437be4df43f291d9493ef4831d131

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e96abf44d41ae4e894ad31ee5e196d1

    SHA1

    1b8bb57e3ed4d75e65a5b5b432374871104f6002

    SHA256

    8d5fbd81999f9b281e0fa547ed828baf5326a37b19570c61e8ce4e5ded0a84e2

    SHA512

    ced8e0bc8b95bb1f7a2e1294b7dd51bb25879d33582a74d049f6515bc947ec61c25f959ca9756bd06337ffe965dabdf499174d5342753c58b542744514b0198d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64f4e2f9cc436c285b7d55b6c9816da5

    SHA1

    1662d6cbc44d2419fde2cd826d938cf10457e3ba

    SHA256

    fe3d008ec10180b5cdf3ac2c28873721237fb057da60dde93b1ba6a004982d8d

    SHA512

    0cbaa2e92b0cb81d333d6ed2ca47629664a2e3eaf58ddd34fe487cabb48e587bf41d19639b42556557c088710eda86c996cc8cbd0f535d3f604af49789362985

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91cff675930349b8699f907d64084d51

    SHA1

    30ba7215edb5a23699140c0bca77eb8d5f218d39

    SHA256

    71add77be0fbf6b074c1286084ffbfe0476b0ee8ed659a25b28a7af83aae1201

    SHA512

    08e73d6b541843fe35735883d2b5ce568fed8769f8ce7e79f649c3a2804787d95726f47790ed96c874a126d93fcde0baa8a54a59f346fcef9aa5ef5b46abc800

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56da2ea642a1816cb23deb64add642d7

    SHA1

    d0463716880f299d127f7def4152c9c66445811e

    SHA256

    448eed8b14ae9ec4fe6514e1e0a3d9d793974261011f2f327b7c1f53f302b00d

    SHA512

    2650f0781d0330ddb7676fda71be75a76afd2dbcef0f44bf63afacf6c5e00c7c6527831a9aabee60f0309835c27b865ed0215e86df651db04c3397fd2434d833

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72a63b596dfd4ce29f2ad536c66069ba

    SHA1

    261d5ec1b2b1acf8e206932bdf71e5a86c83602e

    SHA256

    4954cde1f5d884a6f96f0700558b65012ef54e2df6693a11e338bf4968d262d8

    SHA512

    118de05f7ecc3a5c2120fa68cbafa958cf6e1f5adbe716a6a493f90c40707972a8e2d3814d0be21bb0317dfd3adce52c1a4c5306844d300b6b695ddb8c93d543

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d380f155c8d9bad5a17afc97539cbffe

    SHA1

    64ad659ad95f5c658a3f2c33fdd08b2541f2b307

    SHA256

    61503cffb756de5b7aa85272fdf35cd234869f47ae751d8628e49795a6e3a9f7

    SHA512

    4bcc5ff5a28a4a76908d293594bd9c1848a70c5798fbd16c2f27036e8e3ddeaab186b651164d1bcaa622bd13670738dc1aee4983deaec4862e883259584a9aa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    032ed7230545edfa9ba7b3b47e072896

    SHA1

    a6e7170d092891cdf1e85cc9474b711ab7c92f96

    SHA256

    343a6d78ef17891abd7781435bff1865ba3a494fa79008f2b553b7b5dbad7366

    SHA512

    108bfed2a2422d816a6eff78c08d7c84662a50c7cea03544e5ce661f524243a3c56fe3c958254951880da0b2b92e7bee58d8a9eb9e6bc0b4f78fcc5b87a15bd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b1be4a6ae609344256e7b10bb090963

    SHA1

    0f0883653ecd38510d459253004e2af1ea5fe9bc

    SHA256

    17ae4607a23af83c140a72db2aa7bf6bb49367ae0d6b26ade821e14183fa66d4

    SHA512

    bec7626e12cc060e05a0222800819827aa38a03f92e0b11ec932ba979bd2fca7d5d4bbd741ac1c001200fcce2bcd42c013e124f551112fcbde12ecafe3a8ad62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c7372ac31e29504f417758d42927eb2

    SHA1

    e4feeb1c1ae647c2fb1fb5d7141d120cfa6e2491

    SHA256

    dffc3c37b1a8469881c6fdd2fccc23032dddc2be9854742076363e6f7465bfee

    SHA512

    ad2c291d8c00cb2d4ae8d1effabe76a71f4736d516d4dcb7241b25914d3c10b4c8cb8470ecc6c03e247596d7831eda675a2e1c9cddb17f11940eafead092c9cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7b90309de70da1744620fe532e3d376

    SHA1

    04de2480ec97d6438607833bf79f2dc0b8db4a1f

    SHA256

    106453cc4bfc2cbaea3ee4f92e6bc2a4644f14df5f8dba990d2c9bae079d043d

    SHA512

    63e801a7f80cd072bad5e2c197ba1b5696d3256b3815ca2a94a7926004fe99fbfbe828b664a476257b37078ee14b7b937a48a460f08199454348799ef8987b79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25f7bdc4771c7945d7902c606fca26b2

    SHA1

    e0f59da2bab49912d96f6e16657457feb3ba193d

    SHA256

    5ef526b3122a677d5ad41f7832feed8b6d4a3ab463e8300503eda4e6b8b19669

    SHA512

    75ae8de93ce96fca3ecfcbfb022773dfc864fb1eeb82c32d2dfe92bce31386549e3b70cd0496774250940ac3f97134c7b3c665e7d4094c2605f934270da94aa6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c3b92c3caf6f4dbcbf4c43378372a13

    SHA1

    d0f4c7547152a8bc86f1747dcd612d41b41c6a62

    SHA256

    72d52e2e7a8f6ccea808736a27b28cbf690130eab55b5996f7a464cb98e192e6

    SHA512

    092206d377d1d7e4fd6a7e94436088f3ff1db9774818ad73f905e1a15249e734049611818db1b815b2bf840de409743eba9995835ea0552fab24c66b4bbb1bcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    123f55feb61d1411538a9a3b48673738

    SHA1

    2408e85c1387ef8499ec87ab637b9a81774b64f1

    SHA256

    735a59bcf6059067855f467c03e662bcaa551460a7aad329703627d4dc0d9660

    SHA512

    f956dd181107b7f06c23be69ca4503c97d28cf27319eb9b091dca74602e5f53f251266a9830c1a16aa5637a83e22824f768ead2a4dae8f7a58824c412ccc549a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    928ec4a2545f860a61bc3b12a105600f

    SHA1

    61b5b09fbfa82a068bc44acbcb0526f6bc9503e2

    SHA256

    4bb15f3d5d41e5259d30058801a156e350cabeb9eabcbce2bbc67a89ca54c48a

    SHA512

    a6e2841d77353613c4c4617a8fb4d06b0ddeeb4f238e4d51d89e2b8b722ddc9c0d55252028a0fa895fb6c747e03b4c8cea3c514ae13f09db983cfe569b5e4dc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc45c941f037844eb44e84ed2fd0b2b2

    SHA1

    0e35d11fe1825d95f9507603193e83989989c9a8

    SHA256

    c217d63054fbbfb53a891f2489f36490f8b40d56aae40b2005ef2b8c9c54737b

    SHA512

    448790dbe2f0b4caeaf0cae764eb220df87732840826e78a6c5439fd13e31d8534fc7184ede7854c97bfaf50bca5a37f769bc436dad6e47c1ff355d7d3a3f713

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    173ae4d2d015d04314a4b99f5532e251

    SHA1

    9cace5df88e9287dfa650f68307ec05ab16ad9f5

    SHA256

    25f0e3caec63a1d5b766e01b4e73b6df5086035ad3b95868c42aa390475c2762

    SHA512

    8bffbb9662a3ece451559b54dd7525a59034bdc036a41db2f232f50a07b1568b54014c37968757fb6fee4415cbc2dd3b4009ab89a85a02ddb8cc01e1174b9498

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\902LKC6A\jquery[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IFGNZ1XG\skip-link-focus-fix.min[1].htm

    Filesize

    124B

    MD5

    762cac139974bd13cd54bf357d3a9b7a

    SHA1

    4592a72535b148c2432cba43ce4bfce5260b25bf

    SHA256

    3377ad03785afd9ee0d37803f26a63ccc443f2a8741f8a7984a6dbcd387e68cc

    SHA512

    9bbfbd7ce4a8ad4f0a7b4f546c1f1f052a12f40e9b62bfbbb4f2d72e04769b02efafe172b3770068ac132b4e7eda45e1dac06bcdd8a445e90284d1c341c62821

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OOWQLMJV\wp-emoji-release.min[1].htm

    Filesize

    124B

    MD5

    adab46bdbf73730671aa08a0d8fd95a9

    SHA1

    35d32e481d96b95b94a133730d3e5bf963ac47e8

    SHA256

    773221981c5ef30f0f5b1ac627b6f39d00b539e8012909041f955700ce2787b1

    SHA512

    33cdedc5f438d38e007c158ded575802ed1ea47ce833eed115a5613b0bf8a1426dd58d690dbe8caad0636139c87902807f08c798e9ba5f38c25bf4fb253869e3

  • C:\Users\Admin\AppData\Local\Temp\Cab256D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar265F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a