Analysis

  • max time kernel
    1s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    05-06-2024 22:06

General

  • Target

    995ecd24a57e5a68bf111f481e5f9626_JaffaCakes118.html

  • Size

    68KB

  • MD5

    995ecd24a57e5a68bf111f481e5f9626

  • SHA1

    ec8f9982680cfcb1848a9fcf54bdfbbff764c31c

  • SHA256

    ca0f43ee6f11effc4a25c22fdcd84a9057be56260e33ff3476b8fd12d2c708b1

  • SHA512

    1cba80b1795b9d0d155504423fea61b19aaf71d1dde631b3b34b5caf2e3b7c60e3b13bf61bc404dfc51b9f50c5484600acd1aa42a6948559dd14ec1258888ebf

  • SSDEEP

    768:Jif0gcMiR3sI2PDDnX0g6hs6ZEmliumlFEoTyv1wCZkoTyMdtbBnfBgN8/lboi2h:JyvJsNAvZTcNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 24 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\995ecd24a57e5a68bf111f481e5f9626_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2036

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    07373c15cd439ad2417de621dd29930e

    SHA1

    52171db98cdd543be3b0743a0f1418f16e89409f

    SHA256

    b498614688fed921af4ce7e0c95b88f1bed487bdadbfccb7a6b452a6237e6e8f

    SHA512

    05fb9acaf43eef2829a49b251927b5fc909634ba649e2b8f39aef9e6d66bfd03c013d4f5c7da77b858859271d6a4e66918f091f5e8fbfafd96a25200e3dbda0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ed48eba0e829e8180dffe0acd597804f

    SHA1

    65e757f2f1d57985b0e533905c259aa9f2019d97

    SHA256

    ff7fc15c1d34ad3349a772d2ae18e7870d01a17c21d567dd7963f59e913d1b4b

    SHA512

    1cbc6462ce650387e872931ad0d0596921c5abc37778b4e6e034d6103c311dfc5facceb43e9a8f14692ba60fb532f985398d48b5e742c931be51f71ef55e1b9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d263a29b6f55968d6b6562bcd345afb0

    SHA1

    598d78c6447b5ca1805b38ba70e6f02e8f39cbd3

    SHA256

    7461945a4384ddcd401e15402427d0e5de66e10709b8eedba5d45a5ad0f00760

    SHA512

    d3349b67ba5a70241a47a338f13f4d4974297980e074590ff68aa6d0eb67bcda04776cac52b31b6d323acb5f31a76993b5d0bb0a9cdb00de8883ed770524ffdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    552019011a098889cd44d1db75a635f6

    SHA1

    f022924cd84bccfe1b9260c4948aee29e1291c95

    SHA256

    987c2ee9e2e36f8b0e090ba16fa4e4fd66d5f1cbdde01aa20a58c24212b64fec

    SHA512

    14431c7a4723ec6a24b74677f7a3183548b584e4bc5c9b280795c0a485327b6fbd29ef6607cdd13bafbe69443ee18bd3b3fb83cc14a2e0bd9524e4edba7bf7d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4db3446c20785a7fa5274232fc84dad

    SHA1

    12a84c428de895fa0d9b0d1b6d7084b366e2f227

    SHA256

    a76b5ae2fea0b0ba9c339c5a985b884691aebb68fd7a8a54b6c2a3a0d10fabd6

    SHA512

    e2115783b6e1a4f76dc5b6506afbd0310ff5932c8ab25f8271299c9d171cd39d79b469c6cfe2c4dc5d2a51de3c19255af0388d32d9fb6530328502103a96f64e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    395a424a9c4bdd04e39db4b113ee325e

    SHA1

    b925e970604baea3f7a45987b2d614de5234e522

    SHA256

    e1c4808c5e7eda6a2b74dee7876d8befd669d39b868fabc4d9ab7206aa17195b

    SHA512

    28a22304c05d24f309b2df49606785881968e1b029d89b3112a947b6b022de3a6a809d24d09f88d3da58c9e0c4f4ad45721eaf56a6a000989f8425a4926a5b59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6fad46606f31a403f14a5eb93ee2105e

    SHA1

    055f001f27740d516dfad3a202a51035bda499f2

    SHA256

    c6e34dbaf289baa3b1d41b1ac555bda788d93c3e2ed91562a2d35bb7a22a1881

    SHA512

    01bced497731746933e5d47e25fefba15a820f9a99f67b56c99408adad0e917e3a04859c780852a32282b6680313eea383d2b642f6058b48592683cc2c02d3c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db516749c639641c0ec377ef9c7b039a

    SHA1

    4e6c6f9d8a54d8fa5e3dc1b460913f88678f664c

    SHA256

    9e9a7a9b8696fe30a2d76ee614d7091a03485e6835e4a096e75acc00f52968c2

    SHA512

    025e2bd307145915c8de7f3f94e3ffecff7b08ed4f8812c5d0c9edf86fff5731ae4dd6dd0249f6402e07e101b15e1bed4ae2446112c72733d010ead2b54851ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    105fc3cfeb04ec49f62794316c7f3903

    SHA1

    a2a56cfdd6e2719c2631a8f2e2bf4aa7395d9e03

    SHA256

    fbbc5aba82efc71901e8dbf4611464fb3c59b437ed01440851b26cbfe735c70a

    SHA512

    04388777feac4b058022d90ebbcf3dfc66f88bb99e7940599bcaaaf0410ad5624161f1672831547bb8ff78af6434ed942fbb552ca90e96345f0913eaa592bbf3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edd6f8618bfaf47839cd3e70d85e05ac

    SHA1

    3344e979bf1712b1af5ac3cbde576dd866011a71

    SHA256

    4ae0365442e1419520e43281fd0b0cad1aa57f0a2503366fe76a14576ccca13c

    SHA512

    1fe1b246fbb981afd1519a1ac87c6fbaab0b6eb37e796ba02cadb6e12ee6ca4e46c6ade7a0dcb4a21142813a589b8ab727b6913e690cfd678be3bbb20132640e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37784a0494c462ca730a25d7de755290

    SHA1

    1bf3fd160250faed236b9b0cc26834dbdc955569

    SHA256

    40855c0320019b473fd19d9e2f405ffb4ec89ad59ae0c63e0945d971029be847

    SHA512

    eb30aded213e94ca47df9bd715827e4246b7707eb62096f0d1c6c70509ec03dc5619e5f782cfa0a0b31df294234ffb8725b2d8317aeddeeafb02101cb50cb9bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    127f89d9195b7f6179382d573da9b0aa

    SHA1

    7293c59bbff7e9d1a1df49b4f64e96f85d8a2781

    SHA256

    7d0f79d9c0dc63dd689f1027a8ea58090e3179743cd53c50a3b79b48c9495818

    SHA512

    58566f9d05dbf9c932c94702a9d99b976cddaec35c82c997453419753aceeaa6bb5470b8e55be474d9f265211dbc1951e38ecd6f8b9074eabf2ad664b5ca22ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d51990d1562aa9dec4920ce98b2afab8

    SHA1

    ab1df44197fddbd6e460f395e141d0d29f9406a8

    SHA256

    bf79aca20b2b98ae50b9a343bc6cacb230ef7f96d9234d214c90d6848ef649f1

    SHA512

    d647fd72109008951eb7f421491891cf365976814dba2f15b7820b5b72a081d7958e98aadc85aa5c045d30cae5968ae03f8aed6808c75cb8a181194d684d0890

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    724564400786be578f3912e6b4c5536c

    SHA1

    8ec71cb466222af1039c1a50df4688067e2dd374

    SHA256

    f8736caedbe3dc041b4966ff452c9d1d1e2311af974ab99529ebb47dc5c0623f

    SHA512

    54de2ef8be4c7a0ca9b896b3fd64d1288be259e8a256227a9ccea24cdd8ffee7c96409c5f091696c00215cb37d560e62380500b93b3a7e726d4fabeee503b56a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d68a7d522adb8c52330c209083fec23

    SHA1

    42e32cabf4dfb823cdf01aef887d517edc72325c

    SHA256

    e666b316e1c72359a6119b410069fd81afa5dbf3317cf849c8708a37705b7e67

    SHA512

    611586e111024779ded6215cc437379204e87d67373592bab17d48c8b52a0d132e1da8d0d106ab742f1a8212db87dbaf2e9d390c773a005e4893eed7874c185e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    682088482d2b224976f2966ddcf64ca4

    SHA1

    a15ca62edd25ab090e297564cb3ab2dabde15b52

    SHA256

    d7f51e54a14c28ef6ebacdc558e593eb8f84c195746512dab26a77d9fb107817

    SHA512

    d0bbc6d7827d13cbb7bd27b0ff4862a069f5d99ba0185501a96ec5ce8c838b9dd04038ae6c2925080f051f76edf5bdb70fa729abbc247c702d9dab7999ca2e7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b5910432ee605479073f7c24ea82c23

    SHA1

    112745e65bb365da0f495ac71df368c75053def0

    SHA256

    35de16e48d7dcecdf3dc83c8e18ddb6a9c41060f0db21ff9fdf109c64fdee18d

    SHA512

    81e9c384effd7a5146a0709e7f1a9c763e1edc0ad40f81db0faa94bec5c64ffedc6e899c5da8ad0fbf783c22b1e7f43699612c0b867e2866e32c5ad29206e7b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ef9b08ca0bd1280e8279990f7c50e67

    SHA1

    e4a3aa1ec82210022aae7065370da3899ddaf4ea

    SHA256

    8c39d1e28580c3df46c32529e6f45a8d1c8a702dcb559852e6bd052e0543bb68

    SHA512

    f70f99c9df5dbdea0c8c94c090f19a325c5212d0bb7567ce8362f1968e74b7f5872513cdce528ea96c7d41ed1bdbdb8cd54a2780c1b743ae805baa8be86310f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d982d9a60c27eb011dc9af43edf0b18

    SHA1

    6c80837139352bf94dd5594d221138812547074f

    SHA256

    f1021e6877cbfae1ecbf7b377fb1a6450c2ae0d0516dcc3168c97884c78a17e0

    SHA512

    6468ab4af9f636c2c684b554f85c6e394d7e6e22326e92d88b2c7aa6e22463dc3f31c0c24c3caf66fe6dd0d7446c6f6be3fd19060e51929ba27318f181ec5ad4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d86e91555a459e8e1c11e33430fe8b8a

    SHA1

    7ff5efdcea3c9d602d251b341934d13a907c1d1b

    SHA256

    89e324072e934dbf38e843541e1f8e23d156afffda9378f43451e126a843922e

    SHA512

    ed341404afe74248461f40fb60c979523f83084bbaaf57cb55d2635a15174d104b027446e856e96dce592aee650e35a2f58009551277693ccbb734e7c60048cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7929f1e56ac06fc620f559a0099a1c88

    SHA1

    7c796f14dacea7db47dd007bea04cf55fc35d220

    SHA256

    ae4ba162a6311eb4b0712db48973eced4d45ecc2251295f0634561e83a0a0d8d

    SHA512

    fde17fd2428d8f15f0994a236d8ca66e7bf2eb512a846727c9b16254d5fdc1f42f9d29aa37e611fad02b6659a20c078a2f48c51af4f9799775f083bec40aafcb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf96543b34ab6093d1478d663a51188f

    SHA1

    f868e7681cf9fe03c93d25fbebabcb12714a4b8b

    SHA256

    ae67da557c8cec8f0a546840ed10ed4ebdcc051921287330f7ad9a87febc09cf

    SHA512

    930ed703cb4ed99e8c47f70a5e5bca88e5196927fb0090522503ad9af0a9267fa41306f1d95c93baaf6c2ede43e2e3c7e02d481f7e881270a6b0f00d674932cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    15a33cb7ab03804394d5f69f821099ac

    SHA1

    eaab651ea4b2f35f3f215a1a4136b4ecaf09aa66

    SHA256

    45a09711716601e40cea4c8e01a5c10304525f3438f2df5bbec68ec9b6dcc099

    SHA512

    24c7cbb124860a85eac827fd5de73e3660807575a380fcce4925a9041826ccff4ed79ad493b8bb7d13d9b543189a434a4c917d80a58a8ec5f0f41b7a51f87d13

  • C:\Users\Admin\AppData\Local\Temp\Cab2C5F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2D0E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2C61.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar2D23.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b