Analysis

  • max time kernel
    121s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 06:30

General

  • Target

    90d4b831be797b825569df8a34d85b25_JaffaCakes118.html

  • Size

    32KB

  • MD5

    90d4b831be797b825569df8a34d85b25

  • SHA1

    1e6ad5bdc1b0217c3d39ee5073835e7f64eb0228

  • SHA256

    e31ee73daf30269727656bed8acf9641ed9b80743b063e271555d62d8123c4a3

  • SHA512

    950f33cce2d986f135bed701ff2df227c5243df2b141751bdf1afbe64c8a9444f1c4404c439e04c1f77ffbef0fbbd5eb069da474bc75ec7dae98e7466f498c75

  • SSDEEP

    384:Hb0uuJMSwlKHSaqoZ7xiGp0lTF/+8jua7xiAWH6CKycVBOQJMWGZyIlayIqrj0:7dcH37j0lhnbJYZamrj0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\90d4b831be797b825569df8a34d85b25_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2600
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2600 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\EDC238BFF48A31D55A97E1E93892934B_C31B2498754E340573F1336DE607D619

    Filesize

    471B

    MD5

    297bbf9571b986b201620a71c7aa53a1

    SHA1

    6b224a16ffc7d99efa3dc83d28b92c975c7af3c5

    SHA256

    03c6d555022ad8797fb9a94bc43d666c83fd91708cc4ce2d7708cd64933d8bcf

    SHA512

    de3b9a169e7166489034aae772cf7b2a1a30728b2fecaf2abc4838aea392ccd079a246529ac67b59e40129b2736ba31f11e89754316051466366519e5a24ea37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffd0da2312b028e6badbcc1f4506377d

    SHA1

    5da64469ef57fff43fc65cd9c4175b99a67aa671

    SHA256

    4396e2673f36b7c15f9d127b2c5bff9fd776734aed670aaf6c321561a7c1ed4c

    SHA512

    3ca612d84f8931abdfc1cc00d01c34e8a739304d930598d2712f277bf71ddd00c98ab14f09e0c756218219beefa88f2b3124564677c7625c43d72c4f073ea0e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd6375670fc5dcb41488b77854dc735a

    SHA1

    e83ac843778ef2a096f911b1860fdcb1a2c2b9c9

    SHA256

    d494023b0d5e45913e65ee3c263a20ac192c9e4527055c616d2e2d2ac40695df

    SHA512

    2130d4ce535dfd4b37ba7253a2254ea027ac7f219ae427a8ee9773137bd967d93b6f08c92a7f64ed005bf9c2dc10927d180419508daff29deef62a76adeee971

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34a5f9e7d06c7c981ca9f6bbc53057ed

    SHA1

    83a043ee240281d5cb70b5181c47ac36e69e794a

    SHA256

    e724b78dda122e8b420b2d0bf825cb2193de01808d2824f1f16a7d03d7b5887f

    SHA512

    4536d7536d2bba392c1cf375b0418a1ab2ccb7f30e20348310d2f35689b661906db9b7052c04c6b61d2d41b7ebc9d3208a5d7f05647314b574be31fcad120f61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    caded1764c86d556bea76e9d6ec29011

    SHA1

    f4021f5d8ec74276f9ee4b02a7a7cb53fa747c15

    SHA256

    a488d497b6a8bded5b14e65985fb38dda25536c51939f61ca55a0c253f4ad61d

    SHA512

    d5ecf4cee95d2952023d4370302332679ebb00d53f1cff9da23f438b4e89b9ee9639d4902a8c2c19706c1fe1a062a917ce9b9c765d939e2744c1485ce5a7f650

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9568c6fbae7e352b34bc3b5766536dee

    SHA1

    0e0ecf4770997b281db5c896b4dffb7cf8c150fd

    SHA256

    5f297c187e5f80ef2682fc8b77109bf5809f6d96d72b5fcd24056e5e568a5885

    SHA512

    cc8354b0e40f666f35a644f1da5c68530b135848942f5b384b6dc8f4b3aa4d38b2708760e751e16ddc35c37c3ef3257402f2063c1bb434a97d35178f80d2b6c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76590e40943fc75cebc993d3a07a97af

    SHA1

    f2550f066a6a857706f3ea4cb2eb09fc35cf4562

    SHA256

    86119fffe151779725d326be028d8e54d05a6e948ba48912cd39084aafca518a

    SHA512

    546e5a0e782a27b59551f75059f4495e76af419f2f6bc5ea969ffa9f1170f550a1a4bb7c7781f0f7d833623ac63dafc4de6842a3d47c2639479b5f9085cfb2bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc6086380b176af766c130070573d0c4

    SHA1

    2a0a730aeae45702f06518e02ed0cba55ff918e5

    SHA256

    d84e00b349072b1e6c6271b2da332c77f3c8d03d3893e234507cdb4ba0d28b79

    SHA512

    0483a4fa1b516a4ccc40a50ab3d59686c230f76d3da5a24d79451af9152d0e40162a16e796ed05020ab4e541ff13f62d7a3e3556d9e05aaf63985f50d5c65d28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fb156a5cee497f07f029c8118983e44

    SHA1

    3b1a0462e8fdb5489c18b1380f7f5c7dfe8117c7

    SHA256

    1e9f2649ecf680af3fbf80334106a6c51bf2201b97bbd2e42ce06213b9b6b300

    SHA512

    730d48b984d23bce3d17557b24318ddc42561796901d49317383cda9a368ef9f039beba278ce4f46d5f427bdd6847570cb9623379288a83dab18bc7ff3243109

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f9e55a4d1ab8f13f94edd2a9bd9db49

    SHA1

    0fffe8ec24551c4f40a6cfc6a00ac7d15a6f5dba

    SHA256

    3d4cc21e04b3c4826935035de88a10b587e96efb377f35c6b09c96dfcab3177f

    SHA512

    dd2c30ece66a97618a14763a83878b35686c0d582e36d8c69e9ce185dda5ce30bc4685124efba4ea5fa0f25657f38337db8532ceec68ff4042467c7196843257

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04ced3b577859a932ea496632fa30b2b

    SHA1

    17557e4bc7d111ffd2ad163c859a7667a95ba8da

    SHA256

    40321bb84f8da4295b59778c703ebaa106e5c83d3e26013154437b99e4ac977a

    SHA512

    a6e513052f0c0f40f574f2532dd8f2adf6e4a4fb7ca252307183a45b89f2a44c1c3ea6a3e7beaa7a3763d41cb0117f6a03682794eb2e173080177534c38d6496

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd3007c5c56b7aaae2e910f7b13216b6

    SHA1

    8f4ab98e2f99d8d0814ef867e916aab72a2c3fcd

    SHA256

    4abd3fb512ff08666554623fc53102138104279f9230bf91df190a3405431843

    SHA512

    bf94375106af111933a6c14bb6e04d3cbf22a30a5b9b1418601a89b79f5b68471e980607c09338682d395d3dfebc1c1398132ff7e9d3ec41945bc1c0b65152e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7206bcd0230bb10b0f4f92164d42ee5d

    SHA1

    26c98a9108dc1676e24a3dc2e40b70ecb8563667

    SHA256

    7200533ac7db7962dc36bab7f0df7ea4f8cba286e36717b908bf1c8ef0c44cf2

    SHA512

    cc56386d234ee654b2dac5c453e76bb06a6c26bd113a4668775738e2c2452e40e809eb7745e58a626a6e3041deb67760729faf77a98538a69cb3f42f4fa9adeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9db67768e13a24c5776bb1a1809e096

    SHA1

    82bf1ad5f2b503d8aac35607e95f7d4686fa1e00

    SHA256

    b9fb0cdb72f8680fc66b1f644986f80371bc2c70ad2e9db66be9da93829287cd

    SHA512

    597657b15edc9f373eb705c9331625f24418f5d960f60a4bd3d60e342b1f4635787fb92f28f9be0300f31ac30aeac08941c07941a7d6878d8c40dea7d6f6de0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac47d346306f9115e421a6fa19acdcd2

    SHA1

    04945c9ea303a0f40c9becf852af779a2b5f3a9f

    SHA256

    57fdedb8449ef21426903a4c5230bc6c3b3e5b761144a791639b1cc28f27ffde

    SHA512

    b55248e37a8a86ab3dfbf6c8cac4afb99ac59b0ef2d2cf8108b5cc915dee3ca2a9802e87921734c0fc9908f0c26a1b932af160d1f269b00a1cc788178bc135ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5c7835bec2e23e79bba29a3f2c94e42

    SHA1

    30ec9a874df29a19d843ea7e864bc4ccc712bf20

    SHA256

    8052f4fcdbdfba096ddbd7a1b11349ab84ad647a6e3c0c07fac44a30eb99b8ad

    SHA512

    e88480f4c95eaecdd23b352bad1ec3124ca3df0d2f3657b334d75e5f28f3f739a0bd3881c6e14111a5a98ade7e11f7e46eb6a5515d4af8c282c9e95ffab941eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e6d76527a767c1c816a47bd21514442

    SHA1

    5f806b1c3327e63ed39806de9bb47d02b8bc20ad

    SHA256

    8674028abf307f280df704a610120539e41bbc0a1d5f30b9d18d9e94d7b08980

    SHA512

    2256535bf6864ec5b4bf3dd832acdadd7d19e85235e90529fcbb69867e2a3ce414bd00243a6f80aec5794af3248424181156b0fe851ffda75e267ee1f410c3ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1edd45a42fb3077b208ca5fb4488bc15

    SHA1

    c693764bb4f3faa1fda051fbf3ec9cce5ed9ca36

    SHA256

    0e871ea8ec009cd30fbfc5e09f8c7ef910f0679ec903442bf9a2d760a1749a29

    SHA512

    5011788c964c697351a87db2d56ace48832e037e04642c9717b33443bf3e241906bbea70d51a5daa4f78e1e2f7be10b8fc04fff60c51846888f94a7d3f571717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b88e415a60d9badc56a188fc846b5e2c

    SHA1

    ca9018e2eb5884255c29ae2d028ad6211204beed

    SHA256

    8679411aa780480d8b51eb73ff693217506df8104fdf849e1c14c230103c79a7

    SHA512

    de39450245af23787647b1d506754fbc73ec1693432ef818f907ce0a4f282cce3dbc3edde22c3b3cce7e061270f4bffba9b7265f165f3389c5b33a41f646e216

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d18c80721abefffb32f2ba045e88941

    SHA1

    20a1a7faf8afb0aa03e8f27041101456c0af5527

    SHA256

    659ea132093ecf82dc13b53ec9d5ebfa06a862de869d5854061ad76a2242c7bb

    SHA512

    bc11448c99ff588eb1d1d885bc222f3ad52f7ccf439a88796b25a51ac89150eed1b4f6bd4dea6b83caaaaf8a00b6aeeaf6e47c3024158c19f0a1f53f5b7fbf3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2f872eb9e9ca5bbe986ba7601d03883

    SHA1

    fa4daf4602c4ed23cce85a41ecf30b035d55f2d3

    SHA256

    ba281568be6921d6b1138a01a4de1ff812f5efea6652fa4c0f2a3ac7cb055568

    SHA512

    8fe904530fc38721f7524b552a5c4ba292207a8f6a9e6d789db07a002936975a775c45b5cc723aeb1cf6bff7837f668ed6e8e105212a95b929fdb6b56c3e7bb6

  • C:\Users\Admin\AppData\Local\Temp\Cab1F5A.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab200B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1F5C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar201F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b