Analysis

  • max time kernel
    140s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 23:29

General

  • Target

    8fcf72a15a8af6bd562ece6f5d70fd38_JaffaCakes118.html

  • Size

    20KB

  • MD5

    8fcf72a15a8af6bd562ece6f5d70fd38

  • SHA1

    1cd9d9203e375826020d3c55304c1993b985327f

  • SHA256

    ac78dd3ed43ad24f760a6c24b530b1b04c5e6ec39637686a78218e0ed08fa07c

  • SHA512

    9505f84b244253454a540d356beaae2f6c7fd1c89bb4319a12afc25cf143eaa86b25dd258bc50bc29b2ce7c85dd7e0d16e5995958f7fc9a1178d2ab31c6b1aa7

  • SSDEEP

    384:CanlVBbjPqoV+zji0Ft0LOzTQTzT+TCTGmvTG8LYqnJTydoBEbUj3:nlVBbjik+zxPKPg0GmrGEJTydoSbU7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8fcf72a15a8af6bd562ece6f5d70fd38_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2264
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2264 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1668

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    37f00e77e0358614cd66a6dea34b6cf7

    SHA1

    d410a985dacaa448ffd8fa3f49cb6126b36638c4

    SHA256

    db8723465b64caf1de665bfdcc48c354d60b4a39f0fab1cd2e4656ac10f26747

    SHA512

    1d4ae104372c7e157dd6e67ad14b4e511be3ce8728eb2b5c99d4a47f6d8bb554cd5927c9fac4b1a1abf0d63561792dea6d3a96efc87b2c72408e65126404badf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b597fa30ba4ab5decfc12509c6bf37f

    SHA1

    1a21609a6f5b709942c9a8fd5fc07e31341b33a7

    SHA256

    efd2a1e29b96573fcb7fecfb7ee2f1bed8bb6fe643a2bf68b02900abfb60cca7

    SHA512

    cf217d34820caf1a4f34d8638b7206f372a3fb624d7346b011ce7ff2aa1d8d8aeb616c84531c50e764fc6711087b3e9686aee8598f002ecd8db3e138b551b2ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4411c470047bd897861b203603fae43

    SHA1

    591ce96a909ea1a3323c6a2d505669b786be1687

    SHA256

    072a83a61d2ab8df87b657cc784f10009b7b8b9cc61b286a5f81e1b39d72b641

    SHA512

    e76bbfcb7efeff30b3e1b71b520b5d8dedeb5ee5fb483137cdfe4cc92cfa1ee76ef305d560aada2f676d33185bdbdd03013cdcc635e4f54b899b915906b8ae53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a234f5255b5e0720bbed8097f1e7d0a

    SHA1

    f052447e5e4659002ddf24621abbf38a2f91e7fa

    SHA256

    8f4943364405135e572f5bf9f3764d6e5019c3de085b1f3c9a755cf077886d2d

    SHA512

    d6f9c4762a389a366304410eed27fc09db05bfd5e1c22f21f5dd48240a0cf7c9dd72316e96133bc518732370de45e584af9fd860ad7400437564d1c629742cd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    646d4ff0eed77faedbabee1a349d2162

    SHA1

    901c076935849e3f51c6215f59f4dee60cf24066

    SHA256

    ad8fed6d90afc0ef4fc126894ad055b7e0320a0aaeb45f8d9dc3167d37f8c9c5

    SHA512

    3c8378ff9b1b79801107e686fc7b0206357fa0714472e3503be9b07c8d053e3bfc2dc27d48daab24a6c7c8453dda3889a235cdce75d55ba5b176ad1720e96a0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f69c8f6094705b101c245c0fbde3736

    SHA1

    ab81c718ad83832253160cc6383be1c80d8ff506

    SHA256

    83c16634a32f5c57bb543c1efb04be5ee83afbdf511a6eb968f3aef6d12c3571

    SHA512

    015eec22f81144733a89fcf067618e21eab146f5d159a13e4cc6ff43473d84fef034ed112d8af80499b0fd4c3a3c4e952561df0dcd065d0bcca73eefb95ab8c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    986561582d80f1820e8f6850653cb987

    SHA1

    1a2efe19c36f83a8fea8f0f18af5d698c45767e0

    SHA256

    12670abfa82c49937b5efac0af3253ead4b7185f55a7593dab7ccb5406b5f0ac

    SHA512

    c5e3929084f71b27dea38e782fbb208ce5ce7f41dae2e4f536330680ed1eca6ce7091bc95fa6aca703c78538cbf53d879aae75eee6a340ad9a5b0a548f7220cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3321863be8b528daa3a4afe45d83eaa8

    SHA1

    08691075df06e2d0d6d67f74d40129c73eae19c2

    SHA256

    8911c3f7c3cd4a59a7fa2249e30e7002cef05aebb0d0ef22715344c9319594e1

    SHA512

    140b858ccceae19d11c82a5caab368bf5f6e3d2a094129db6142700f024c65f6a9f1dd6e63156048f7428f2f0b4904ad9e75ed63a52936d7c8e6bc6570b2668a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    950b9b5ca4edece6e41300627ab9a29f

    SHA1

    55b31a1acfbbde965fc96b73e54446485f88b496

    SHA256

    2d4f964f0b994c74aa8b9c2cae457948c2ecbc476ba368f2fa62e7106deeb1d6

    SHA512

    0ff518864d5235800b6b3fae0006d81f8d6fafb5df19c6a07f6d5dfd71581f80092aaa36793ce6eda345753f0546e3b8cde14e4e4d4924f5c07bd9ae104181b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5790b69a77ee45b40469326057a723c

    SHA1

    b21beb6f1e4b3cffc7489ee4c831d0c1743f4ebf

    SHA256

    0396b3676f4e762f4c52d601ca6e8047544e53a83445e9315dfd92f9e1848481

    SHA512

    8c8e75c158531bcd81fff34cdca6904f48dd39b6fb75a87695e855098beb18d05c614e6afee4a6d07f4fe86875b01f424f7f57d160a60ab8d1099997c7b3de59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e116d8f60fb977016e81558c91b75c7

    SHA1

    f51dd49f4889517d11335750137d7c8412f4d293

    SHA256

    f64290dddbd60d7c7511736c53dbdf88023b7b53617b668f34937234bc823724

    SHA512

    9f5c29db7d847a2cc7da220fa9b1bba1b77936fc14d1e350f5c045a5203809f306b12b068b75744df16daff6e4b5ee996f73227f12adaabc94d494c6f48b1aa4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e28e33a0493af8bad3d1cff280e26516

    SHA1

    67c48cb810666680b002c14f6f126cf6c6ea0935

    SHA256

    2b18f469f06df713b8ca7b74765237bf54416ad24b24b4429cee7bc7e6c5b185

    SHA512

    fa5551f901a21cf76b122992234213d847dd9a5eabadad7af9c6a75039cec101e334b8f39aee3c1c36baeac5970e924078ad5ce4575b21103b187b1360ab0239

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff00aa150ab7df1132e413e37f787af9

    SHA1

    68eb1bdd87bd94552018a9366a902a95155268c4

    SHA256

    51ece1a622d0c6c088d8ea9a0ae9fbc37f5e1ef238f08c305fbd6b4fd9c5affb

    SHA512

    2f310c822c54580ed18877eebd49be8d4cf26f3fbbf008b08a7a37339debd202a4e74fa4ef9f5ca4ea2963bc0061ed138bc492ad1dd7bf463d95d3dd6970aff4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6c089370796deb2e6f0f45fb65f3a8f

    SHA1

    46c3ae6e8902d35e3a557db834a12ea8189fac6d

    SHA256

    29c84dff3c5d5a31316957bb0676dc33e308d61bef1595363383b321664e2703

    SHA512

    e225fc004b89874d0d066f02676ec829ab97ef2ef5bb52d1b332046f35286c82cc78196cb9cc3e8d1e282e4ee280b4af3b8befe183eb30c3280a74dad56f7e29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fad893e18a3aac408bce36e3f8aea72

    SHA1

    b4cec089c16183890edfe12f3b5c2a5e885a060b

    SHA256

    fb33645f523a3f9edb8025ba01999b2e02c4bc62771ed517dab41cba45ed7822

    SHA512

    9343ea33c755bfded6488ecbf63e5d099cf19a985aed91f263af1a14b923ccacd73b82c0fcccc380d6c84e2e65aa455b4d5cae3f620a676529ea763705ca0663

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b8fa709fc7f61e4c2006d7b61973436

    SHA1

    820e9640a15cfbe4ce8c000bc3b6f5a91ee7cd44

    SHA256

    19377b877e9ccd46493b2d3f51020174559a0666291ab07d40d84dde73837de2

    SHA512

    7fcdeace7985b9130cd11c4090ab95a417ef6d5f9a7eba9f01769b77fd4e5a3163c633ec09517fb406600922a3225f4e09f0a0f560558b41808e9a515e7cb1b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d2684dd1565329a89a0e0f4b1926899

    SHA1

    9d2bc052f681e0758948a77be1609b187adaad77

    SHA256

    3a35a63bf6c4bbd15a41c2cb013f7ac86bd16f019052c775080d40471f42690e

    SHA512

    03039d89cab39f35ad4ab479b20997ce3977a8499168b854ff1f19a9d0bb6ba8d9882050c63b2a913ea8d2c9e6dbbbb44fff6c96cdcf991fb081392d44b69138

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4834a7359721e9c7531d0e6aebbe7222

    SHA1

    bb6729facc448de7ad9b02fd5f6d21053781f136

    SHA256

    c28aa078abbc4f159eaad9f639ec1b55d8da1e796e006e64f206bce23d739730

    SHA512

    1565ad0dc7cecf42787e2180f0b363e258902b7ad87a77d16a121ddded9447a9c25e97d231ad57d7979b799976be0b36045e1bde5252aa7e813257b0a9b44e3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12476fadbd9c72583e3fe58b54611ea1

    SHA1

    fc8904cd817567bad071d3f8e5fdc9329683a961

    SHA256

    0a17ea85a3c8fcdfa8505f01ac200f312ba618b6741ef0d772313c38a61de197

    SHA512

    4a842f4476494a8c338de98f129ad3318581b7bf65379b7c20aabc5bf706ae7cbf6456b0ffdf33d1f07e1f796b7ea1dfa66b0bd1f7f58a3250a3201609ba7afa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e8b9c2182c5ca4a7c77219122304db3

    SHA1

    0e7df1d499e4703dee0bf1a5d0fe3bbfaad7285d

    SHA256

    bc3fe234fdf9cff4458708143bc735c837e559da53abe806fd04715c626b5550

    SHA512

    72094b3d2b1e3fff4af5f4a85c869322c6288087351936186d0ca5e34163c912eab05dbfddd66af52bbe2180bfeaa9aeafe821724624751e8aab1c5f54db2242

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45480f15da56fd34c6de425f22c01fb6

    SHA1

    a096811be8b7badf2ede7238c35db9aca3df56f9

    SHA256

    599510a191b0bb1b7bd5f24b6004d187ff0c786151d87bd7919ab458511b2dcf

    SHA512

    c738204878317469ff70bf21b1001d081843fae6b8d3ad9b57015770c9026b2fa50083cea180d92e626db871659c16e5aad7ca3112bcf2e1df79337de1b807af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d35e3ac8b70406cda9504bcdcee2d6cb

    SHA1

    2f20ce3755914b05851e6d1d8d57e06eab8970f2

    SHA256

    a7144dfcb1b388606111486c610a0c7d4903502589320e6ac93c9c121179756a

    SHA512

    552826e1f718a6e7927935c7a0e3a5284705a134bd0427460d0e7b34e48e2d9e18766cdc66c9aab6f93835802dbb3acd6c1f1e98555389c7c1e3d1f10e655de1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ccd89f4bb06314981a6e666110a7cf1

    SHA1

    be3e9be21301851f6082a76de55818f3840261e9

    SHA256

    08045060e3a35584bd1b7374fcc5de078c228731c34eaea166a394740a5e224c

    SHA512

    faf8251b11197a7afaf04bd099d2014abd34081d0beb021b11ea4b8e5c9c806501776a7162bc48fe4667ac45dc183b356cde5c8599f73be7262e77d991614e87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1121cb96ae86e25f5097f168a1a9507a

    SHA1

    97a13fcc6565a3b956d3e2c28f0753e657de132a

    SHA256

    d7055adc92bbe6c824fab56b1df746bda4704f8d1cb704b519b5eaf2d448cf64

    SHA512

    7033a167c61dbc766908df43e8690ba6d18f3fd3f8209bc73d6317fd03214d9e20860244835fc3c1721fe2c82140dfffe5b973690a4f80c972983b4ec97ac7af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9d677f05b4ef10a5a88c54e230d71792

    SHA1

    f4a6c5867d37f367bf747eb1af623ed6662e87af

    SHA256

    14785a1f319df630e4bf26d656bc5182daf12146e5d2efa3bb5caeafc20584da

    SHA512

    04f65baf90351ca2d6b78edb729157bbd25e93b673000005d5a1f0156e92d5859505b6498beef9f99bf5344cffa2d3aaf04cb872d715b426755f046195b39a76

  • C:\Users\Admin\AppData\Local\Temp\Cab13E0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar14D1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b