Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 10:40

General

  • Target

    917a1149ebe0632e14da57942ff71606_JaffaCakes118.html

  • Size

    27KB

  • MD5

    917a1149ebe0632e14da57942ff71606

  • SHA1

    9039a912f69d66e4ec1cf155d76cac0f2707447d

  • SHA256

    1bead143c4831ad2376b34ed7809be43a6fe5e6b471bfe0df5f49b2fe2f60c32

  • SHA512

    692788c5b4449f0767fcebdca26d48a101ddbda49e386c80975fee0601519a38eea87bbcb93c9ba44fcbe18e2a262bd0843209d7e3a014ba7ed2a6bb31dc9f90

  • SSDEEP

    768:x1hpKVAqnd+qi9q7B2EA9ilaXVG2S1//s:x17KVhnd+LAB7A9ilaXVr

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\917a1149ebe0632e14da57942ff71606_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2188
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2188 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    afd422c0e5f1b16231da5bc85cffd498

    SHA1

    746c37b942e0a07b1680d62cf95260ff65167aec

    SHA256

    c9f4b46dca91504287b5e21c2ff5305a466de59545945232f9b90d71ff3da27e

    SHA512

    60ec8efa7e3a144112f2d8bdf71cf63cab36f5c6197ae23e5bb5591c3e46229f1557f8a3aa625e24ae3176d44a8bb81a26b4f18d5e53a7e8af183919fd7e9f0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a33ac433e9e738289b111709b96c51b

    SHA1

    9a6a537f36467a22d6ea7413f828d8508acc889d

    SHA256

    2cd7be10ac3c7a43bfd70a428321d0319c560aa0c741df4b31ae0f6229ae96da

    SHA512

    05aa7cf4949c0c60c05fee43bcba91ed9258f453cd61a428aaea03e96a561d0013ea54beb724aff977b34dc17a0950e1e37aa2c38972d9a9885ec30182602653

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    326f5981ad591983a13bccd84a558f3f

    SHA1

    46736e3f6681b29b61a2664b2dad3c1790874673

    SHA256

    5773b993e5092be6bf2402e8ee45ab60e76f6b5630f2ac53868e2257746068c4

    SHA512

    6823de98c41a1b598cfc3f5af3bd1f87de49bf120af123da01eeb3f451761a135b8ff0a0a247f46774d2fceadfd8bb96c7e1a3c9cd6efa4ed3234ae397a09080

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8726619e6b7a003187eba35d10f94dc6

    SHA1

    ab463c99e1fc98652f2932879aab37c07c45da6a

    SHA256

    44410c188560060155c5f1a3bb645ce3e66a6886d28c9e9dc58bd3d408697e08

    SHA512

    8cc994c590f0f60d3a918fec4934da3a2621b915f00335c312fd214881557b9be726f300a7f04f759a514a77c414e5da4f222aa1ae28ac8836c9337dcbb65d54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffe2632094492d65f7243391a6ed66e3

    SHA1

    c3aa0c26aa2fc5993e1fe9bb125964b9374e1262

    SHA256

    6782eb0d13235be0b98726360ed55c227374987936bada899f105661803306cc

    SHA512

    6fdebeac4bbda1d0862f5f01b684ad116a8c10873051fc2d75bcf24aa124fc072dc73c7dfcecb2b437684eb58743b9245923adbfbfbf204ab3158a1821c9b091

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    980ab5b359061250bb29272bc2d3aaf2

    SHA1

    28bd312342fa8057136e89e4748e92b97c668cd3

    SHA256

    8d58d0cc6fb7b08ae8a14742d0371191cd213f672571fbc3aefc3f19279b09e3

    SHA512

    f621b54371d70bebbaf64c8fc81b8b0ae62f168d14830b1fec06bd966664cf85c2a83dd8e20602fb188b43767e60583b89620c2b4a1b5915929a6afd0c4ebc14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    df2322a7cff1a057ad4246c31b1e5515

    SHA1

    3591a86778025a1a1bb36ae314990b0bec1decb9

    SHA256

    37ff21463187966a5bc4c2a451f5d0e0a3e85d4e539b686e4977b207d0344adc

    SHA512

    6d4b4f12df8d47e57ae6f587f3027d34df1ba3872475404c8bfc3baf9ffa9c1c144bd122f375fc3690bd0a4207dc853962e2df49f72ab7904b155198bff99c5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ab861592de5c92b5362174e83893821

    SHA1

    fb4851b9370c35a49323accfaf06ed87fbd95393

    SHA256

    6f53d796f3bae577dc7940b032305ec31007556e3f408c7d2797a067758b03e2

    SHA512

    21e0903035e591a4d988c98f6ad7f008e98a9d87e0a940e193d0b157c0d5f0f50307bfda32d9f888bb17e82b668dd5285b02275631c5e62b93ee376c4c55ea6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac04d14cc70cf18144d284bba16cb0b9

    SHA1

    daa03254ad52adb8a9a07f71a297239c659b7a3d

    SHA256

    a454d62a18c7be9bba8e8a37378d339bdcca2c2fb52fbb124371200abcd3d75e

    SHA512

    8aa0b6592baf287ac47892de8a3ca5f0fea7d3d0ab84774b369132f4b63948872d6b4a264f857cac91486eb6b3ce7c65104b3438239c0f2b0178bb27ff33fb5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6017a1db79f8a21426e6415ec5f11ad5

    SHA1

    36815ff5a1c7ba67371abd6ee2d723b893a7e235

    SHA256

    2200b950ee937207e46508dc4222d31ba658184469ad8971aa600a6de0d518ec

    SHA512

    3b6219da3bb44bfb362cc59527dee40e5a3d21037603ce46d3f592969e0ac1ba78f190c51a65a73a74fccf3f29efec2dfbd53dedfca79b7b027b74ad0111a74c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3766a1fbc5b77d477c10859bd1ee7c72

    SHA1

    9295852308975d9b19912de396fa824405668466

    SHA256

    716453aa902143c4777a0460b92ee11e341371523776ee6d864ddc789273b49f

    SHA512

    a1042d41771675ebcf2b9b90aa1a9193db54281dbbb98f8a64ae037030c1f1125a2075887ea1ad99765aab49aa1301c76d23a0cd0056099245302d5e05d38cbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7501b992e50587a218c2cefcac82d47a

    SHA1

    4986a701c1f709820caebb4024fcc14cb2e27e50

    SHA256

    9b38de567ce2c4f1d40b9995077f83e01852f50e807e7ea2d97456d71a952e20

    SHA512

    a09ae19dc4920105439ccc5217ef7c864647e83db235429827d7c233b9fa8ffd4a191adc8d200ca6372b6de65fb5fdd9e7f8cd8034571def8b6e80a448ab652e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9042cfadedb13619c3343beaee1528a6

    SHA1

    890bd48b95b2f67236de0c4ce49308b534507550

    SHA256

    1a395082c00aced8907d56f4dd2681286439d873b4de5be2455c7c4d93312e66

    SHA512

    7e08945b1ec6d82ce179a5f09c5438b3c858c5e0caad601d6a77e3889b679750f49c6c2c3acc7d52605a152aa2961b95e35d8893a99b6d85aa7bf1d446ce6b01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fc23e44522301f0cfec42e8828e64bb

    SHA1

    ac29c80e7fb9b161aeb022fbf004088fd3d471b8

    SHA256

    ced7c317a522b20042a3a6570fa7321a76f14a7332dd3c44d4e1fbe8d47cb1c3

    SHA512

    032b8af728d80ded1ffdd44eaaaa015eb6f7f28b56cf006468bcc952760fdd727629e593adacc050fdf9f715b50b4071c9f8d8bbb7fed0b69bd613d0cb44d902

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f21327207140d58cbda2901d56192ed

    SHA1

    01af668e463b098e862f148d8ed8bd611beb5bef

    SHA256

    d7c4922a555aca97c3873c03bd5ecb2fe79987a024e98136f82a1c6a808f9da3

    SHA512

    05af82e2eb3c78f16e8178539e64689f72e9e10e043cc09a62b0f4ffa8d0405c8e6716a286baaedb8976b87bd17bbb86ba1cdbc466aa15adce897ea66b3ace32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48247c62d102c3f602139e05be9f1c83

    SHA1

    c54478b6e3b80fc93e855957b395d6e5a1b42076

    SHA256

    15bfe9669a2a7a60de566668f91758a9ec7861c4f8a07c8b4ea0de33e3c77b05

    SHA512

    a203ef85db686747a032aa3cf6ed77e6c7e56cb60cbfa854be709b3e059aad2371ad17d87d3b07a3e0ef66532d7e9ab5a302d7f3d3e56d56d464a35d870a1167

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    742d1e586e54dd444213fad3451ac8dc

    SHA1

    947ea9ada71cbf9ee0ba73fad94a0574dfdc5fa3

    SHA256

    2c5f14c64b92eab8f1d1e96e5a1913776178ecfd99a462e95147345abe072481

    SHA512

    167099a6b7afc76b5ef87f1dceba1321c4ff4d0653c81f73c38cd801d5600d4f9fb6a7b7af7ba1ba586db326f628a8d29a0106391762a892fdec0738f090830b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    2c5e6bd7970a545698fe5681016b5b34

    SHA1

    4fac13f6c1f363142bbaeebdd01b70973fbf3f41

    SHA256

    eb70f89779e420554a79f6e92f8ba06a2e145f5d6c2d1a748aea413f84670b84

    SHA512

    b22e3aefe7554a544fc4242f400cc27bf5f697e7c707d8c756879f9c963ec16e3957b9fb88f8758ab4bf34cd318b5838e6e94cd44ef538832f641cf2f7ae9218

  • C:\Users\Admin\AppData\Local\Temp\Cab1F54.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1F57.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar2038.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b