Analysis

  • max time kernel
    117s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 08:05

General

  • Target

    910da04fafbdb45e0780da565fbc67cc_JaffaCakes118.html

  • Size

    30KB

  • MD5

    910da04fafbdb45e0780da565fbc67cc

  • SHA1

    cdcf2eb0ab5e6176e289733a787b6326ab3b2922

  • SHA256

    d8a88747d69718d71dbbd143a286af3789e662db9bd43dd80be3f5e979ebb536

  • SHA512

    0c6ab64d0503ad4f53899060e63d40d89bebd5559a63f32e01f5f7854790dfe54729fc24801cdb29a71860e76bc79bc853d63e3ac7dc5f0f8bb9f723bcdaf86d

  • SSDEEP

    768:IxAjRSICBtbzXz7zIBzH5shTSD0O9ydzjI82oRdADscPtBJEK0yJQGQttkLnvBXh:hCj/UBQI8upIhUsctvDS7yV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\910da04fafbdb45e0780da565fbc67cc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2528
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2528 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    aa26acc67c048a7e08eb9ed16097ebaf

    SHA1

    87771fb95032d20d2c5ec65f28c21ffa60d1a2a4

    SHA256

    3ea8e3f06c7b988d7924d08b69181bac53520e22c0e70d6bfee47be0918f2b0f

    SHA512

    168391d5a0bdc958d73b260a56c2bd9361b23dbb7465ad84ec7b460c71b0c0c2e512fe8d7459284eb3d504b801eab2814e169bb3867423d90624098bf95f8c93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    049eaad2f35ff9c2745c67c1e2f92c6d

    SHA1

    7ac345fde2c4dfa6f9fb9cf9c2149d5abaec069f

    SHA256

    618bdbf61a4706428b8ec21f404b3d67e5c9f4e4b56c4d448af45c2c03cad6b7

    SHA512

    cb26e2efa55b30f0f97e4e9a34716c5a47b67444d852c4295be1f75fc4a7190740852eafbf178cbac18d911363a90abb73b8d53f039578985cb399bb9bc45a7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3649e516a019b6b0d158f8c0c67718c2

    SHA1

    e65e882a491ca142189f9eaf95d53d88c136a2f3

    SHA256

    d12f0416f74907b7f51e244ae16178361434bf1c5ba3cc4b6986fd8aa46f11f4

    SHA512

    ac2e7e141e8ae4d30d45960789791400c9f02bc4d59b8958ec5aa0b1bbc912c4b77ac81b0732fbfa8c83e103a44e808c0822e90ff91f3261c8ac66af2e56a913

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42abbafc064955453160b2c54d31a692

    SHA1

    b8d19fd6692bca4e9ba441230cfe34f89013bdf5

    SHA256

    5660a0ad88e92eadea7275506f91e5fbef0e4ead9c9432c3f16bf8c68f01d907

    SHA512

    5a2cd814c435a54fba26f570a7b100a6303a2210d361d575150b9ee65b6dc829b33c2976c9e25210c05d8c7974d7ea1e4904a4eb9fdc7ed9f7fbb53ade3bc6c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d9e3fde83b3f06e15efa89e67a94532

    SHA1

    2f8959bc17e5218eab6e9a5923f08375b81d317e

    SHA256

    b1e1a9d4deaed9cc9b93e98809d84ac54e343e834e6ec17c036687db148a1c13

    SHA512

    e3a2f92f77012ab129c386708d66dee2aefd39fe472e52e637ab7a065077e2aeaab6aac8c011c4a8880081288a1d8b3e9a06453b7baa6f6f3ce876ad6a49e390

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2fe7f59be048a0d7e8c278cd9ec729d0

    SHA1

    237ae39768f0eb566497b641ea721c788cbaacce

    SHA256

    cec6e58e8c3b591e8714538755f35255e918cd8496d54b8a2c2909f10008bad7

    SHA512

    488b393f019628da20d3eda83254f45c42fb4d5f7bafac3a2e715b508976cc6055c5996783e866892c85b4d7be17997d9c07da75ebb226bb6cc036de25f057d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3afbc1c2b0cbcc3de220322552c0a4a

    SHA1

    a937a236e125b6b9b5914c46a1bef55218d12c2e

    SHA256

    d9eeaa89e080a2e2b4caf0d53f81dda2e1a985bf42d400edbc7138b70a166623

    SHA512

    748bc8b68c79feff713aca330097f0336a9fd354b94c935f3d7f51903b82fce8a4f48562bd472c9c76afe4684b70aefafaa2adf9efd7c6ce30011405abfc57f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    683a647ac51dfc0a0552ce936cf0668b

    SHA1

    6e467022f048a0868bd00a705f18a63daede433a

    SHA256

    a253d07c4dd1c612a4c4a3e931a24420c8392603b79ccb5e9d6fed8dc72de548

    SHA512

    acd1cc9e260bbf00a10c880195ee6597d3e6dee968d9c04f1c3b46f0e6a2893db1e212447e8c4ebededfaa74cdcc9d26463f503cc526face3bb09710b172e19d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2abe9239478c7ec2b64b92fc55926b68

    SHA1

    7f068e83a1192279b66a186cac3d32881da075e3

    SHA256

    e046e0428064558cd57dd5a3aef0f91617ecd77903bb705516456e8540b00052

    SHA512

    948022ca17e658c7fb58a316ad870b28565104714e0976ad7ca4f4bb84b84ce4aa698139e3f2fde64ef76cb2e08feedd1084947870e32880223ea4e530b2f146

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77c2087832cdf8e4eca3c16b0b0dd4a1

    SHA1

    d72a002e455b0760e6d9407f77be8047ee920de0

    SHA256

    1ce58a27bac54e104953702e87ca519b88f4a13bf285cde20fa53d2a98a29a23

    SHA512

    5147fa6015cccda4996a78286eaf5813d7f6b4f9c44b51b9139b3d55dc5a1e4792cb1fbbdb42097acc39d688c4793004208c77c628a5700f5730a586a32442ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06697324a5317990bf93543c5b6065d5

    SHA1

    43819f261c78a66ab91466b0517b9763f0e864ec

    SHA256

    584c191607e95e337ddf12af63629d12aef85d70af2f56c8c9a0f4928355a048

    SHA512

    2ff43fa1d0c8884756caee9f5b402ad8436c6a9d70ca4c5029ec0555c2a252cc9861daf04da90a1f210c90873306cf7a9a207e8a28c115382aacad0ba823339e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    271bd0ca50801f63ea7e2cac95b777cd

    SHA1

    b007068d76516be9f5ebf4020b82279e04ebba23

    SHA256

    14cc661840ac6fde4c34ee4ae12842c9df0f5ff96ceabd9fb60f9ff3fbb517b8

    SHA512

    c694595c90df4716f44cb7f9446cfe638d6bfce9d1fbda15163f6afa28823d6ce7c86820a773e999123592101760e8b3d5980acef3a2488ba79d5f6a26370ba7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af1b4dc2402bb49cc8af9f4a26e5d0ed

    SHA1

    344f0960b0c9475812b70e66e30c76c29f1eeca1

    SHA256

    57fbfb90329b135dd0af38b4b41fd3c2bfe6856072e72edcf27f1fdc8c81f155

    SHA512

    33bb5b7c324ca99a6c0bce519a8570674301cbd354f9f256e27c6bc2d618d0c5e236d869ee0c7eb9a2c07cf10daa4b875e6a06f69091ad1ee8daea64925ac8a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21d487c552c73bbb006e89f09923360c

    SHA1

    f8c2ffe36b01ce4f01de6443bdafa55b9e14af8a

    SHA256

    c33632ceb5e440552d23f78c5b955873593e23df4be64aa56fd4b8dd4a9dd075

    SHA512

    fe919bc38e645db81f322deae018aef578750ac4cf0ad41b74683a7f7352aa25c5eaafd06d878769affe077f515e4f5a070262f7c563735d6b2b194f390407ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0be82fd44d83f2d8a9b32b08f1869aaf

    SHA1

    9cd60fa6545e4f376830192d1e2736312013717d

    SHA256

    c1914a4d57afd7ddf8a04e8041561959c23f42c5427ccf395e60df607dd76b86

    SHA512

    0108aebfb8e4636955f34a6444a5390f70a90b06b87e55af5f43f219763611a58ecb6c27266b21c2836c2930a96450c4298b3c61f4422c6b0c5074f5e690c490

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    909b4ecec943143a42cfc03d5315c6a2

    SHA1

    e7c72ebba688e123203409c622301a2f46039f9f

    SHA256

    d8353148e01020c02436222232d09d22996f8c8c50892d874a8e26c9afdc11dc

    SHA512

    148c11fc85d1d234f2f01d01ab78653d5df061fb20138e0e3220bf620e55d6b5a04255ac6b61e90146e46055db590e4a870f7a856a61ab69b92ce04bb9bd2f99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd807946662ea2aa0df8193e5e8f51d7

    SHA1

    126dc143f88be077cc9089c4d6ad1322cc5e2a2f

    SHA256

    36eb4cbe106d0d006c4574095b4265c8d783b2252f6eb5466c11d42f8ab45083

    SHA512

    9bf00239b0fe9bb2cb95cfb474b1ddb30018044ce0cb2b185020ac9622f508ac9ee244cc7b2db4129c2851fb9ef42a1a1a6b81db81ef67ced3a4df884f746d6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1c3595af8828b6d0110b539ad76d156

    SHA1

    ab2154fbd17477ade77836897d7cdd7f0440f658

    SHA256

    1dfe5cfcd4ed21698801b0f3301b7c98bf5ccd851ae897bad73ed958e888caf5

    SHA512

    09ec51f49bcf792e8b7622f6053de598ed0476fa7a6eec4768343842e86a77475bad94bf0c203893e8c6e4314a0dadd53f377fbb4b8ad83e07c26a19ff224540

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc8cf351681cd1fee408777505dce0be

    SHA1

    509f2c1b8a5c04e9f2a18ec53f81187a2a012533

    SHA256

    43817b55c926faec7f1874c1118f1599e5321442aabc170024020fb65a1d99e8

    SHA512

    38042eb24234052afb18112a8b50de143d78f99e1cd4dbda8e02b3235a36d6627ca827acb054d3724b37f52e2fd71dfa116d7904c7e71b9da0e58e640733d1f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    24113b81ba1f0a7dd7ee8173acb18489

    SHA1

    096e48069837186eb030daacef4d504e199b665f

    SHA256

    2153ada253e1592a6e0c59ccf2efcdb7d0c5f29637b1868df7cdd698c79ee1dd

    SHA512

    f9cde25a268853602b318ca6e6ede8d0644914ed0a00455fd2faa6424bae138b40eaa0e7d94f34060fbddb4abc9942e2f855e97b5d825fce2d2c8b3636aa012a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c846d829ea72b52f3e2c36fe142d1315

    SHA1

    6b13fe7e85d2aff0291eaf8c7fd1bd5e06943efb

    SHA256

    aad2831d5e3fd07cab0cf0c672969115f0842c5294bb11e6ba841a8443296cdc

    SHA512

    e76271628bd233da0982a779730c3db07f63c06f45e5a74cb385ddb0f38c542150bdd2e6a6e1b35bb92bbac5ad37d46b60a595f9f4204ea6a105811ecd976d5b

  • C:\Users\Admin\AppData\Local\Temp\Cab44EE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar44F0.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar464E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b