Analysis

  • max time kernel
    137s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 06:25

General

  • Target

    90d1b04b1fce031c27fa7d852bb30ab3_JaffaCakes118.html

  • Size

    62KB

  • MD5

    90d1b04b1fce031c27fa7d852bb30ab3

  • SHA1

    b781ab58452d0dc2e6e30b6d649257ca8be3157b

  • SHA256

    7512985c98458888c6f675ddd55bc5f86c03bbba7b8d7bc7eafda97a61c4b9fe

  • SHA512

    5563ff68c81964055ba01b655f390aea417ec97c3d3d0e698d8ab54f49eeb0dab670d63db57293b0edfea2ca767390f39109adf22ac1209225d33d1b05eee4c2

  • SSDEEP

    1536:OytK+CSpBNP7L16gejzPQ1x16Le91pp9yw:FK+CSpBN3eXQ4Qppcw

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\90d1b04b1fce031c27fa7d852bb30ab3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2172
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2156

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f5f0cd865bf281101208526d2f61297e

    SHA1

    b3d7aeb82c50615dfb6abe588c277e6fed01b941

    SHA256

    9738c7e63c5262ad2c3e61ea0205ac980b4e4c7c830ce11fbbe1b33d5ec3c82e

    SHA512

    c41015052bfa540044c639ff69924ff769b92866b530761f7777a4f9082b8eec1d1ddafa22b4392fafdc024c8a80eb747cd374cd398a848c6075fa91da1c2901

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    080ab6575e421dcf75a4b5c22a326457

    SHA1

    0ec2b256399db783389a2c000ec6d8f3dd57fe4a

    SHA256

    bb5fa98ea3a30327171a4623630c0a118f1782c4698090f41de4993415b34ad2

    SHA512

    eda4d22723035c887273c644773a372bab54482724a0dc22fb477dc8a754796ea9434675d13087d7dd16237d2874bbbc8948e28b828b3ca608bfba318f2d621d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2dbb3d5159d257ff03613cece23f494d

    SHA1

    d59bf6d6e9d1d74773e18aef36d1c8aeaa164b89

    SHA256

    91106364fd7b64b47cba88f716cc0269e47136ecd1bb4f2effb61960357725c0

    SHA512

    b852f98696fc2fce82ec3851290a21f851b0b5efd22cb2883525eb830a9543d5b318e5650fce6afdf9dc0085b33f401de067e16fe7f88e59f311c81a9ec6a130

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66b716c011f66ccaf98183533bb7df7e

    SHA1

    c3c342e1c64786d0acde0984d003781ea7b15569

    SHA256

    50abe3f1e899b0d922296e5ed5e3ebda81c9414440f4187f8252378cd4aafd22

    SHA512

    5e09434338b5dcbbde210a680235dab49ae9e0b17b8b3e315f7e2f4a21d5943e7db3111bc05bc5d9a8bea5f9802df05e7527c65a40766940fb691267b3a54622

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    efd9b0ba97508d67e6f824facabef3a4

    SHA1

    f684e40be9019c3fff48c1dab68c1701ceb6dad4

    SHA256

    2bcefb0f71a9d4b24b75362f72e3ae8ef0efde4edc19f4097da3f764258119d4

    SHA512

    0f86a088c237d785e3f6295f23558b0359e6c7e4dacbe69ad9d0d79190a7beda4bd7e3d3ac8a2cb143d72602ff2b415d31e2ecca812e144d63b459b4f8086ae4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bb58713bc4b025e1ddb4f71c644085a

    SHA1

    f0ae5790830bb1604c82b198c57e143c3eb76d94

    SHA256

    804e9a5c1888b476e1ae5ce5fad7245e06860821dfed03fb0e955df8e2044d8d

    SHA512

    a966bc63b4a88ceebd32b592f10f6de0b95ae5479ae67ef7a13d45b16fc67fc3a2be2df11684a98c01e8ee3f0dfa0314babb55c59374516ac754ed99f8e7a8f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba73d3cb0f8f1fbcf2ae83942437bd17

    SHA1

    aa2c4a023177293d17e1f2520a9384d76fe96efe

    SHA256

    2ef9fd6f1325b33a0f2a3e096617ee2c4bffe949b27933246e23f1adba5321c7

    SHA512

    b117284d52d0097e8f880096d4e8c65e05d54917510472c18a229eb63e92942f29d4adcc4883612b58537e5991f1f4bfa467a30caf02264a41e3c15da46c8d91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bac6ff693692d0a3911a7b700d2d2e0b

    SHA1

    2a8335298a0978a5f5e008c3514ad7e244578044

    SHA256

    bd3b2428d0a526e8d8e19f8a18fddef5748a0e59c87ef124ce77e6d915da86e4

    SHA512

    f09a1067b8be20c84bf3e043a51880e064d2c782f665f9041983579a7cda2af3a184c58053d331aa2398b59cfeaf1c211357b74d4d6cc46d2bdc7617b2fa7a03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f9d57fdf8e8b1693079c9b2a8ffeebd

    SHA1

    c5250c905d4192a6020e3830985d24e3ae69b8c6

    SHA256

    238790410f6ccc7a414afaa5b1f73ef7e35876b99d0c2224bfa042c74109d83b

    SHA512

    157d2efca882efd1fef6c6802dad668b961d9fb13e35be7d9802dec950522d19bcbe657f7f96943eb707494ace05abd555adcfc82be8b69ca43c04c6a4973504

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c768fdc92da049c76951094f3ba19e9c

    SHA1

    cb8f5956db74ad7fc3c51cfd783ae18815a2d402

    SHA256

    a1279a3a725b2fc63ab1dbb86e41401af51b850750f1228f014ad0b3d6d80eef

    SHA512

    f5535bf8f75a7a8d2a5c1729f95693aeefba484b120de4949f4e49af478fae1f08d099deb8de228c5dd4057d7f172595fc313c635a4c0ca0f3ef72e79fc6fd44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5618fd7e5d157993282dbf869a859b94

    SHA1

    686a633235f793d37882188769747c8d0a447d12

    SHA256

    c7ce155fe7bdcc8626a67e747899817a6d14085214cf70b0ebe35bea7aeeac31

    SHA512

    95f2f18c1764ef44f5bcd9794fd57aed52a14a3bebde4fc64ba1a2cbe21cf22eae00a05e5dab06153986d01bdf097458220531d313ac9edf3c1f8b6b6ae93280

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8afb11513218da0463a0f263fe0dee64

    SHA1

    6c73079b0e567baea049a9f9739b4efbbe3cd612

    SHA256

    8eb2e35ee83d95d2954668b6902a81189bf80eab5a960a07a0a2000b6057f44e

    SHA512

    0380c063fd70283d451ccf5601aee9e76cfd06f7c409e098f00bc4d4a96a653e7d6a5afbfdadfd62b50b49eac8ca2e062fc67018ac0656fb2fd1fe573488c52e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2af24a4562f7c9cc68f196d9ad6a136

    SHA1

    fec6505a7021bc5c643787db9782a01dfe88eff4

    SHA256

    bbcade0a052ff51a99582c4d175c6b7f3bc5ba9ce39f4dedd93c151048fba37b

    SHA512

    0babf97c732cf9fe25d29d9f598672f368357583c2a562640ada3499417c849edc3441ada504d43036975b08964892eeadffef165304816e8822297b406aab55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d98c8545884d368129eb76cb49354a59

    SHA1

    233ce0d30b70951fc89d3726c3c81e74f7bce0a1

    SHA256

    88348d6a83d914d73fef53418573d44d684d2ec7f7d9bb3899a0035ba650f2f5

    SHA512

    64824e16cea93b7fe3ed0e86a12d74cc132c09d5f9dc0df956d954ac39ed2c9f009131fbe77e8ec62e4c0de190d3e5a446b1ee86248836de58a2bf720ea94451

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eebca56a6868ec18f41f029882e45c63

    SHA1

    d7eb87c576b697764cbacc17ef7824601671e9e0

    SHA256

    294799106d4cc154a6775637a45ff98f4a15016894ea0b797efa989dba6c4295

    SHA512

    86faad4398d24e0e845a7f96c65d93a1c0c35866e1100a84921fe3324a14e5120d437b9bfb68592c03321287f199b9d03a5352798c8dec9bd22396d36ca44ec3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e82e7a86df3ae16fa4fcb54bc5514fd4

    SHA1

    b3ace3ab451e4cc2c7963e7d2f919983d2ec607e

    SHA256

    2e8443fd7a8225ce64d1afe6015fa7b95a0284d6783c8409d6eb7cae5d429c9e

    SHA512

    a89f5bee0c180dad504c85a2f4d5683cc7f59569887e6f0700f5983e4aabd3844eaf4d0f856e1624bb8ffd2104a63e10c8d0a763827c45ad66a788e7dbe60638

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d2bd4b8cc2eec64a9afd6d94a08413e

    SHA1

    6fd8d72332665af7063fca24b06c8de352e6e21c

    SHA256

    68b30e85d228907db529bf93c09337d969f4ffbfd8024ea2c6af4cee5c164542

    SHA512

    79b034f258f8cdb27d544e80b54f49de1f5377d8426eee187ab45031f43291e8c7a5229491ae316b3696d49bceb5200f11b6103d998011921c68f89993a2a2be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d7dee0230f1ab5c64b4c2198fb7c1d7

    SHA1

    bb1f298632abb4f95739bedf52cdd3f014fbaf18

    SHA256

    045ff07d973c11be99a9de38734ad3a207e111ab7f36a728b37f460c12c407ba

    SHA512

    033233fa6e1cfc3b6cb82ca7db0eb6adab0693c23fb69ac81f31850d73217f276ada54b17a9577f32b7e207708e57444f5a14f3f8ac36db128eba661dc8f7734

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec92120e3640dd9604aec39faa9dd0e9

    SHA1

    29fecc898a39eaf626756ddc23a6f70ad2399680

    SHA256

    b83c4e1a5e71b86e99efcb39bedf2f2e77ce6db94945515d5df5c9e033d0be65

    SHA512

    e06f1261bf4d5090ec6bcbba7cb000ffd9d01cb02d5e425649f64b9e519c1f1f0357a4bf9e10b867f405cd7c5937a5f423df8954308a320a4f3c02a140173fc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09c5ce3655236261b3db179656a5cf65

    SHA1

    468c2db87e6cfa78addcbd988cc78ba81cff2a0f

    SHA256

    41742e7b5545b01401b52fc5d577287afb6efd279da19ec0bafcd90e3b468c1a

    SHA512

    f21f5f66903e9204e86ab7ae4014774fb95c863ee4855134f32831dc851bd32ec9024b64e9f6113f1dd34f13a487b11eb5ad4d75c2456a8f955403b92a6794f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    499e33d8aed8d06e1b120039a2f29439

    SHA1

    ef9fbc73b917ebad5ede900a485fa18df06d1905

    SHA256

    a5f53ed23ce9f83808a13ffbf0c89d07e478ca1ca70f7c137e07126588c4d790

    SHA512

    0cbe0a9256329f71a1b8d08a414cd57dd8fb5e56cce60ff096405e6db48334e0601c8b9ba4afaf73544ff7a0aae0eab0da5fc5c190abcd34e5fb607ff8b58105

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    005f5b5f877f9f60146d2c71c9ba620f

    SHA1

    9b042d701aa6ea6441c9c16781f179081150dc2e

    SHA256

    5bc51a091cb89b7d895d1007d7715518f8eab7517af0d2b0c7b1035779e6e79d

    SHA512

    6a5b7370cf3ccd77797e3ae26b5d0f78388841220a98ef22dd2414d18f3e2feae34eb7ab6acc84814bf43e730ff38460f33a0b2828427075492787980f1c42a6

  • C:\Users\Admin\AppData\Local\Temp\Cab42BC.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar42BF.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar43AF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b