Analysis

  • max time kernel
    142s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    29-05-2024 22:03

General

  • Target

    8216adcad32c3c889a0e9e7eaf00cb53_JaffaCakes118.html

  • Size

    88KB

  • MD5

    8216adcad32c3c889a0e9e7eaf00cb53

  • SHA1

    13ca9719e2d96dc80f78987a6db5a51b9ba88c0f

  • SHA256

    2fbdae401eff685b8905e26689d2a56a7fbda94425a71ca3c1e6a2f7827a8d2c

  • SHA512

    b4ab81d10932133d70806b969e9677859bcacec7888fa14203a0c506d2adebbb28c74d43220dd9b58e55c70b134b03b886514466e98f459babf8e6243e84c562

  • SSDEEP

    1536:WSrwMe3nRUUcTwx4bwo41dVDJ1Gae3Yj0grfZtRrZrar:WHLRUUci4bmAanj0grfZtRrZrar

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8216adcad32c3c889a0e9e7eaf00cb53_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2980
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2980 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2584

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d924e8b74345c5b21d64a0c401edaca2

    SHA1

    ecf17f264e668d119339370f1a66be48ee863c18

    SHA256

    c09d0f47d55194e16a268541cd66ddd1289aa0964924838e247c2dd7297cdb9d

    SHA512

    d9720b82b30720b241aa33e64c534b499ca301b33716256f522a0f31387f064d6ed7290f2e6acc024cfd86ce6f1bccbc6862b1d01eab81d7d1aa2ea6aa043c03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19b0a2139dddb0ea74761330854174a9

    SHA1

    eb0b4dd04a14c882c0e3d64c6c966823f6706c37

    SHA256

    640d3e137d01b7f90b679c0a88bcca54a85477cdd0a5212561db115cb1745e21

    SHA512

    8214d7a4a1bf6653c7c75627969fdc1841b3bf0545238769ba1e1a96b22fc8a2d398149b17cc3393b1f682e70831599e2c9cef52c8edf8b5628c1312f23c385e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1e3146bb233da1962605c4547974c44

    SHA1

    e435c0252c5b8d16f05ba235dd913cef9a2a3ed9

    SHA256

    0c7d0f943db2cc5fe93b8d35b8775d2ba8fed2d772de68f6aea56b780a34175b

    SHA512

    64bb6ef0da917d41aa97e06791a2e6b54d8f42efbda9c29fdb28ddb82ee0a83a9eba0d6f674f31305a0db0b70bc0f638c364ad0d856ddc7d2dd0bc72c83a57f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    818c61001bed52049c83746b5cefc667

    SHA1

    5a2eae262541abe1018f0f5b04d88c974d1f2b7a

    SHA256

    ea1ab099273eea5b04fa81c1d24268a8c93dde98d4ed93758abac5ded037da66

    SHA512

    8857a1c28aa1dfc9fb5181f6d0adbe59926213b5f48c5bdd5a398769af20d4324e206769814eeef95fd34c006b702214951fb7adb7cf7faf7f95baac714a8e19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0cd919510fe31058b5271d288ceb514

    SHA1

    96f4b420124653f124663ea3a54ee060039c550c

    SHA256

    a738e2d8f484ca58f63846157743074a557b13dae98220d3480e20b9c4a81754

    SHA512

    70233c5a0475d4d9d061dc448c66cdb712249961498d1ed62824ad100ca8e127cd6e72844039a00748892d79adc3c3bb251930c5eb0075803f0bd6e16ba27759

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e47690259220278bf887cc54395586b5

    SHA1

    ceee225742ab0daade391856a1e578ebe5faa8fd

    SHA256

    16c7bf85ce624a5fd7aeb488e038cdb9dd23a1ef5f384de38ff40371937c5629

    SHA512

    dcbee7d19b66365f1945604ce23e0bc2692fba5861d6fa30785526525188785a0782e0a9c1444bb929725f1329598d6229ba84ce18d38fbbe61fc472c7424d4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2676f6843c83eb15412ac081f235a6a1

    SHA1

    e79a591fca4a8f96df9f8622584b0874e0c5d8ba

    SHA256

    4354b0ceb1192fbb6b3b6e9116d602d46b1c0464d7e5b49320d88ed83d73beb0

    SHA512

    1c9add3e2b3bcb4b8705b5c2d254337882383b3473283a2e93c67b63f7625df9a60ff54a44bb66766a710f07c8c9da554d35c146fdb6f146bf1e74c5fc1828c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f983d072ad304e70c3294dc7a8b4383

    SHA1

    9e97c37abdc4e2ba7a62c034fe133cab5253d7b4

    SHA256

    6013acbf4d96e737b5e06d383d26d6a2cf4b66bff1307e4831afd86e4f3a6859

    SHA512

    c06bac12a82908c16f67ac9099da3c6416bf3970b9d3467d84bcaf4bcfcf404fed921a39c22aa5dcdf420832db81435fe8b5f343e461469f97bc6d9615b3396a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00f7fd7954d395da3cdc7139e50c9d91

    SHA1

    87067dd053c42229f4787b87ded2446b05ecc46c

    SHA256

    04cb0c169a0f0d2251e9e9e5073849b78a35d3373f6e6db44f10b70be5def4c9

    SHA512

    cef77973fab940e7e53a04e54bdccc7ddb91f6d88101f3c2452b58bfda9e1651a803e4435cf767005c22782fa38ac4c1c73a52e2b8cf88ae0a53be04637f00dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdac34745b472a067ab301a488709762

    SHA1

    f9f7986a03039e21b166305288a629450c152978

    SHA256

    b9a33dbd3537d1f7a97ef41e5a53c90bb59713178b42b5f68b505d8a9f4e82ee

    SHA512

    e3a72d82c8da2523c39b90c8276fe827fdce03a2834269bcfe25ac7c14c679ea7c632e6ba76e7d732771cf4fe70e6f07c7b85adf5276173e46f226e097d5db5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    deaf3de3ad25fe1122c1d1d1a6d0c7c0

    SHA1

    1a0c40482c1d13f74af85caa22cb2f3c7f988837

    SHA256

    0a1c2e9f28c422efaf8a4fa2175507d466e5ae23ee12fbf5b50db412c011d613

    SHA512

    bc8f2c2f2c18353c44fbbdc7a5c7eec9f698632c197246bbe56730d0356ccd3604037dc1852ebc0976c810497d0aceb407d38db246b1eb197a9a91c558b5d9cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4c3116e637b6d1fb16bc838713fbb95

    SHA1

    6cd6e4cd3e5f4e9eba913d7637ede0d7b551c774

    SHA256

    233d2eb7a29c63f19d9c8f2b12faeefcef4cbd5dc6f16e92d1e17213ac8921f9

    SHA512

    75df008f809254bddf1433181edaae0153a8607ae4e3c9f26ab9a3dd360c7303d46fc21c32782880a474545c8407f6688f4bb31977a85251cb2da0c836615664

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5d10756f52c5ecea88f45b9ae796399

    SHA1

    3ca3e2a6458b07327720414747d36d41cea57fe7

    SHA256

    721fb5a35658d465e16728912a2ba19ae291ce84f466d92f8815ed07bb19408a

    SHA512

    e1e34a9c1e2456bb53b54d14f3f132e74de3e99368a4fa057f6456e49b34b7629de3c8dc930a1f906e2c8f9b8db7ca4bf4dd38e684eb947bcf5ca156889c74aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec76433db8432181082632cd93f3400c

    SHA1

    c821019e806fb412869f81d7fcd19d5c9ca5e887

    SHA256

    93b238bccf56aef4e30c0cccdd1766a5cb0fd4bf18b8a30d070516825511a533

    SHA512

    8216f2846ffce54a3102570de351008b9bdd7c8e456bcc80b896d74f051392be083d10dd74d946e3215e9a086f4a9990fa7dbfbede7eef8de01eec98c9cb03eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ab03be33ee61f0732a3de2afafc7c73

    SHA1

    9730f507422aa117a326febd9a0acbb107a065b5

    SHA256

    d72a8d7651ef2fd41439cef5b7958843f17beb8ecafa80a278eb1a490287a224

    SHA512

    d8159e7f9f71b4bdc0966de5f1c33fc72244c7b23070e3220bec541e617c99c44ab4d764d9f096daf2e0ded0766bbeece0f8a637eed4ecfee33602d3d8c53676

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ae428ec9133ecbec19c09b24e132787

    SHA1

    a8850b2f5315589587be51b4e9532354d4bd5fca

    SHA256

    8bf983c36c339d37ff23a2a0ec0cede9e2d4e88e34cc7366bb9c0bf95dd6bfc0

    SHA512

    a7e9f72443e16323fb44c524feb7944699e586d0d51b4f33977bd97317a85880071c993a5185ae59eac07e5fc4864444fdac8c4f9bb3d14cf6b96d1319c56ad7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2578f3757a7808ee5d17a8149408dc68

    SHA1

    0c694010eb631386f24346342c9321e56af2e540

    SHA256

    c79ebeaae479da5d6863d081012b9dcc5c0affe8971f3e1aaad862b9c87ee157

    SHA512

    238672e72c2d9aca69a0e415b7053926bcb7f70b7fc9c3da953d22ee725eabe6669a2c648a79afb7c176b5a0ad13433638637d998cc02c61067bca63245e9f5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b09aff2e7ba7fa844e0b601cad05d16f

    SHA1

    7bedf30db2a4f2ac3f9d671c1812a3867a083dfe

    SHA256

    db1a83fa936143254293c36e9ecc8606375385688f8ec2b0165b2f45247dae24

    SHA512

    896a6e9c468078fa86e7840bb0dc3c2cde5dc50ce2c9c12f5b41729fa88e5b5704200c337270c45982e90dce4618030f089ee0c33834bf88fe3a1c1d2b416523

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b56d9a7e1c49d4f629c12779076e4cbe

    SHA1

    14e608957ec36af520329407edaace64268eebe9

    SHA256

    b35f0cdf2d83f081403c404ce5574c3af9bf91bced85ad0ed85babe3af54467e

    SHA512

    61ee662805b264fa5a16e68c6ab2a910cc33dd6ae4d9b92894e243f810cab1d10607d0ed39d90df1febabbd54d94ec4ba55d93d5a0319f6affdd80cadec8e1ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fb1931ece2abdc892e86e41036eda3f

    SHA1

    56621fd8dcaab50cf7192f1d6aa2fc47f79b3c5f

    SHA256

    8578c6624f1d2acc302465e10323e69e2a2bba15ed45347f959b047e6a8a52b6

    SHA512

    85cf36642acdea3336e8db6627683e4cd7bb8e60642088c016f6a13c6672196f12c4ea169e747a180b707facd2d093a8e8aebb12bf73cfc7f06e34768edc60a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c3edf418daf611a43b2dcdc969c7eb5

    SHA1

    97aff72e550e9298d11edb1aa337380bf9023927

    SHA256

    51b6447dc2c72e339e8b1f133fa56d982495f3bc4377aacf3c5f8f42c07cdb34

    SHA512

    ba27cd4bcd57158589fc647f77b33c1069e6d34b3301b9151510befb0d035678b666965e3264fa7a7d109ed3293c8690b4c5fb9dbe64d7970188f203c54d5dc4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    99da9eb1740d29d1d1af31137dbf93dd

    SHA1

    f9d3f7db6bc3e9daf14793e388088c8978e13c18

    SHA256

    b7eb5dfbc129b1e71ce6eed8d7a0757a9a8d7163f80261960fa459f34a894e98

    SHA512

    e8596dff6cad72ec3fab64a2177dfac90030c537e64368f4cc1811dbc9581986842d988deff8a5e70c151d4ec4fde8be95156bc167aa548eafe9794a3967cfc3

  • C:\Users\Admin\AppData\Local\Temp\Cab12A8.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1426.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b