Analysis

  • max time kernel
    118s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 02:49

General

  • Target

    892c4985a7358cb0cc10b77b4ca03856_JaffaCakes118.html

  • Size

    115KB

  • MD5

    892c4985a7358cb0cc10b77b4ca03856

  • SHA1

    3106dd328d5d45bed2d96519199a8304652bf1d6

  • SHA256

    61d88e2386fdf5deb57667e6410690a54b236475e9532550e7ec50b5ceca4627

  • SHA512

    400c07a95a098f987fb891e658e65052e9dc288af5f8c8ac6318a5e9f02daf2fd215669447b2d5d2d99f1acfeb2c60ce3e60bd6d4ca3f6dd52247771199ad1a4

  • SSDEEP

    3072:Sv0fw7GyD9i0yfkMY+BES09JXAnyrZalI+YQ:SAsMYod+X3oI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\892c4985a7358cb0cc10b77b4ca03856_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2684
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2684 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07c152bbe4bea335a7d8f4bddf5b8d13

    SHA1

    024d9a84a65186ee3b2552f003ba5feee4f9347c

    SHA256

    aa1e077b3cb225452086ebc0df3c5da018fa22ad1c56a3b8973c8aba86d64143

    SHA512

    f6f84b4c9a5ab85021e4a3f877b0a4db42a2d5811b02cddafb84b394b19a69791391bccccd4d88662dfc6be365fb01d4156aabc6d1048aa7ba627c205bd65d98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8fc5e4a1f88a6d6fa1c7e37c3150a63

    SHA1

    43e7ea051713f3a5e0091d0f863b1c96be8a438a

    SHA256

    6f9fffd553972f44a3edd00a53668c7805cc28b5ddf1703e2c236f8dc9f8a50a

    SHA512

    ecbbdd24d2564d841e227be3e8aee8ad9936a8df604a2be937003608e14cd22c1e0a1ee06a5f45a35c102f99cefad389486475229896caa1fc03c6b249f8ffe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c865047cf42526d53db76226cdfa0d66

    SHA1

    fa81410676638382cf64487f0262afa0eea51082

    SHA256

    ff8ed188a64e6d2745066e74cfb864661075477d3b8726b4b13bf02895bec551

    SHA512

    7acc262f1436024817730a7305f0c099a4e35c290df2f4eac61cb7cdddf700c0f4263bd297f39a897d2f41063427e6cf50d27711a8c5ffd30c6dd136c12e964d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c82ba9f465fa87b9714804e4b9c223d6

    SHA1

    6657416861f1fe07f2197c79fab99db6aa0d8d8d

    SHA256

    5204405df67b95d731617dd5e269e4764317be31a9fb198dc6910cfcc0f4c74c

    SHA512

    9f6ad8e5a8e050bb6fc8e2e8dc4561da3e96082a580a74c0556fbad6f367ee728e31ea870ebe96e3ca5a61b9099c4d8ad01c9469d865624c3f175c24833c6169

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00b970b14b5b3bc6174e63dad87ac47f

    SHA1

    3e4ca527c67611d9fecd9d82b65cb892bffb7f4c

    SHA256

    1329194f36a215cec167ffbf437f5127384096bddae7a12927d32799d119560b

    SHA512

    dfe20adabf59e77ac4bcc2068e50f5ed9e1b228b5610cc2ae0cff1db46befd42bcc0e00175917633d0ec1b87b9920bdea54833c445e782148c4a61175125f962

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    912bbc34495e4af91e4ba16fc36f3f7e

    SHA1

    b32a606ffc5c26757951125d2c3aa2c659fbd2cc

    SHA256

    759d6f4869938cc6b721f773395482510828019a5d0b63690a73480ef9e71c28

    SHA512

    4997909876da53673a8dcb8678efadeee8ac9d177c079afba6bcf63e1389f7f9c53f9b4d83b71d4121b18e7a0367dea1ad16551e94f6135959074d150df27c68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ac843e25985cd4bb846b0107e074d19

    SHA1

    68d9b739c0fe1762f50dcacd7c9e1108244235c4

    SHA256

    6c5758be1eb82cd3363aab45a7179c4e643675ed402c2ce8a7858dd5a0f0f8e6

    SHA512

    e703b10174e038dd6aa212c393f260181b5cc7ae02057989215e7af33096b2a2e516f5ddd3d7ea66827923519de4b0e2250fc70e19e05f39e352337fd8f8041f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da1244a595742dd5fdf6b8986a640560

    SHA1

    d59c70d60074aa4a331961262d465d24652df581

    SHA256

    613938473a8568aedff8c24663cc11386ae6f3d70b807352d0dbf9cf946c376b

    SHA512

    775ad235e758602a8bf24a14593fac4f380a125f1f46ec57837648503ecb9818142a7ebd9f1ea0af222ca412820466c28cef6a0734cafb19f396ca560fddb04d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    192e248dcb3e461478ea3ab8fd541829

    SHA1

    c36496a6413df9b620212f77ef92407fdb15bc79

    SHA256

    648863344ac5f49f85385b6b83d050a71197fb0d0a624415d3b2374a3067f495

    SHA512

    ab2fe12158af11e30b2064657985706ce701ef7f95f7b1b79bf62c4d0cab4e3e51d56ec91755d49027a4c2d4ae369695b8f50a2d46b1f7e476b11055561d7840

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    395b990f6632364b880b863470b54e69

    SHA1

    999b01b8d604174cab141c45c2e2515fded3cf4d

    SHA256

    1e78fce2c49957603bd9da1642d3a92a2a41d7392b1c3bcced8996434386efeb

    SHA512

    5f0bcbf07285108a77d31cf49efd70060f6f9cddf5dffa3f5d9014e049410f5202afe1d3de93813dbb7950848fc206d8023194279871414d899a1d13f73a5f23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2ac4126f10ebc961f1d076ac087603c

    SHA1

    2ab6821feef6aaf818f559bc66cb3343189a723e

    SHA256

    a70aa99b37642602236f6c50e843af389ee3b2d557e65e82f7efcda9a9336460

    SHA512

    f17ac7b07854ee27d0eb8603a88264711bcf1c882fe5038f234f21324fc0d882027770bb2b9ae4c9f75b92dc524518cf958f7e2dfcc3f0595ab6c3b3b06be3fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6384035689dea48b3ac6901546b73e48

    SHA1

    6cd17a655933ba092c3c3c04c451e2d355e2183c

    SHA256

    b01c5dfec5aece3469d63a05b20ac2ed84bf56d787171f8b6f3f60bd4ac50369

    SHA512

    b07ce8887fcdf6be28231603bbe4fb49491409112320764190b431edca6f9d286a1659cfd0af3f634286d855b5cf105a902f560fbca6de72618725eb30c67c3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32190198836d7842ed0c3ca33ab8e5a1

    SHA1

    e396cc9fd19445abefad78c817a6e57d1b293e1f

    SHA256

    10efe49419c26b8f8adbc01009ae701c106dcd34a7c17652cc65fdf2dfa22947

    SHA512

    f4cee3dde89d75608f4884c3b9e2f093a1c9940fa6f1535e77bae5edac824356f6617ba228e1e7a9f351bc47014ff7d5917c4ce3ffa48fb904cd67cbccc9040e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea49a05f8e97f3ef0638ac52d0b9612c

    SHA1

    4f6d0961fe7cc8768c5b6356e60475fffb142389

    SHA256

    e62abd641a4339e7fee5379d39e8c4a8e413c3de49f59ddfbeb2c5c7fee0188d

    SHA512

    90381bf7a57b1b452e994718621695427bdbfbd67e77c360bf1c2f9529323694dfdb63abffd51f7a327a2c5834a582d3a8947e21157460e28e8b1880f1ac9f5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80fbb26a26a931c3e0fe3d30bcad2fcb

    SHA1

    49aab89eef2deb43ea63e848a7e9df2678b02680

    SHA256

    18d3bf0330ee929540bbf33268cf71c8e78fe389a2b453d49335d99af0439dd4

    SHA512

    9d99e95c05081004782b27c027ac739e1799c8df88c47c4f6cb530bd3e1190e22b468264d2305666f55aeca72ee1cc2d27a718b1a9c0f4863d789d96f56d7a39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18c58cc550d980e8a5595648433085e4

    SHA1

    b102d1628d8587023460b5fa6c26e1068215bd57

    SHA256

    88d9baa653dafcac67580ef01552e5f8dd624af86d9113d0f4c0865060ccda18

    SHA512

    900e19af9ae8e0510ddb5c836c291d9892ccea3be1c1ebfeaabedf0f3995941e4122060fe5884061423b9db5440fb236bb80b40427420706691e6bf5b4dd1cbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed2e36163623549cdf1844031dd5c0dd

    SHA1

    a51909a56eb95d8570d01eb823e0ff214789a232

    SHA256

    64ccdb37afb04e0ba2484bb544450cac30535b80cc343b59c1e5373e0dd83a50

    SHA512

    eca9607187510816f8b98fae60f9b363fc287eeefee56866c186eed5acb1908723662fcc5da5001cbc01f416a71325ccb262d587ba168fbc5f490bcc61c0cff1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e7f8bcfd82bcbc702c510dd25304025

    SHA1

    3764d7ea4e3e3bd7b32fbede0ac90d616f564278

    SHA256

    8001a20c03f0dc17c5e70794cf29600d8b3c5e1850d67c2b3b3e57aea180a47d

    SHA512

    5e0774a418210e015811c460009747d98e938b3299930814c87f75b5ebad32bd6649a494b18bc4923bfc96864d3cb5b4b19d1b09e4f96ad96ac21e00eaa3610c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd7b4e9b949b8bb83c0a4d2a3e3c01a8

    SHA1

    cab451644fc1703dfdc061811ea2a29f488a0218

    SHA256

    757a0541a8c5d36ae5f0157d923ff5301276b8155bd14fa28448f5e9172c8cb3

    SHA512

    40aba29c0424cb1a2d6a17abd69738eb2fe1e448bcb6c59bc9bceb90402c82b142d7681823b50f916cdd6df1e399b4508eed037667b321708f6579c606c26cac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f65e652e15c078924201b6a7de1d9b50

    SHA1

    5d627adba3d4f869bd2a3142f896bb39c342913b

    SHA256

    b0af3e4393fec9c216b03273c78970f4a504ba920e2d6ffb2db98d62cf220722

    SHA512

    58911ae328277fd3d9464c16339d37f5296fc392611e3f3728131eb5d3282f37f6ff305f5c413bd667d4d13bde21aa9e5cedd3b0010c8c0bb5dcb617a093e66e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f5ee658927d87ef7e032e837d191c30

    SHA1

    357e64b6e37a2feae5f9cc34854ca72708dd95a3

    SHA256

    cbe8097219b9ea308f0725d508ea1d8502b9a258c6a5938717796366439c2c7a

    SHA512

    4020064ea5090431ebbf038cb1a73d89cde49773067102de065047e9caf40d2d689d1ebd77023f4741b4df9f07f368acd3bf572e4644c147fd30f415396e31e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9dba8aaf644d6482200f7f99cac910a9

    SHA1

    11d0aa6344e6c17bc9b35f95f96c630d57a175a8

    SHA256

    9afd05dbc2e107aba07ee1f64d93925fb8fa74a1f3870e248ffd43541139ca33

    SHA512

    ac73e9cffcf676e86910fe70f883bf42009c2eb0ebb63703fdedeae3fc30e96ffe2aa7e9ee232eb39afdb73c910ab811c3a59dff4ac5eb99305e9c6752266e90

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdabf975cd5fa945e2446949b7475655

    SHA1

    93a1ab2c0e355dec2a29ba6782e5a78201a6085e

    SHA256

    4e34b15bc4f9179e96b983f8be7ce33f754eda58598875836cbbe15091d0b043

    SHA512

    03a8adbeb12bc1aa34364b8e9130f04c2cfb5eeebbf7d982f56c59993e0641416b1ff9fdd208080c59f7a21814c55c1d63ab90bbbb518d61eead71cf8e81cdbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a03980562106c0a0e59dca3d13fd0d33

    SHA1

    0e19f60e47892c945fd9aab03c3e658418b3f523

    SHA256

    4af8a2ad20e97af3c605e1aa5ad4fb49946c46671cb40c166c380fe411ced251

    SHA512

    62860b128dee8cb1404665bb083b902866d16443f09985c45b6ef3d9c6c514e4f11f0ebe64ceebb78d11fec285d0eb5af2fd9f249438c8afeac6035adc9cba48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f005028c0f5c0de32a9c1b25b04f861

    SHA1

    650cef94920ba1a4edb15f02a45c3060a3befeef

    SHA256

    a1c8f3723ad27895c398e9cc0be01868388ee819f2ef84c6e23f9e59c0199cc3

    SHA512

    d0fb55faeb266856205eee1569eb713c11561d64e3c4526bb6d12ef0979ff84f35a0cdd7633dae38baf46f36aafdf2d2156546749d880f2c4e1638c76b6e9c36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecbc425d508ad04e25ecc7f179da2705

    SHA1

    97e863998a922ca185e3541a79f85932e7e9a6a4

    SHA256

    80393a9f21ecd4b4fa4decae1d75c47432c448d3057dcd53477adb32aaadd0a3

    SHA512

    43635563cb3c34770340b5359ebc807e87a4280e879d0239c04d6cc1e64a79aecaffb80774c0c2e83579b7bc8b823965d336eea9ef9d4b899e8e5033f10cfb8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3405f1807c6a8641fa1fe18dcea1ab1f

    SHA1

    7bec5b53af8e0e8d5391ac09e2c5bc7e261e1972

    SHA256

    9d5c6f55941efd67b28043708770f2762d04852e501ac460e96966c09dbeae7f

    SHA512

    4c6b6ad3460c036149df23a561fb0397d360c47e750d379bd64252251c78defacad499bf9ba7355ca266e756b2262b0773422a9d01894c1192a230c014cdba14

  • C:\Users\Admin\AppData\Local\Temp\Cab96F3.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab985D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar98A0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b