Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/06/2024, 02:29

General

  • Target

    97005f90e3d08b68068190d283f854b6_JaffaCakes118.html

  • Size

    65KB

  • MD5

    97005f90e3d08b68068190d283f854b6

  • SHA1

    b8eeec5b9eb7457ed4e776fc9e6059080d0c2d77

  • SHA256

    d9c5956807aa9b474e0f63a475021a1d809f23c283e38c35f1f10abcf0a964a2

  • SHA512

    b1aa0795dc23f2f67f36d6d63a637cfc959a17f82d0ece34269acfb087cbc5faad4e9f4f3d95bc836b67d9e89c016fed803388b1230302178fe3c0c6f59dd5c6

  • SSDEEP

    768:Ji+gcM0St8tN99OIs1pF6UiHJoTyrhCZkofnMdtbBnfBgN8/oycc8QFVG8sP/Ijh:JK+8wUiHeTugeo0tbrgaCcFNnzAC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\97005f90e3d08b68068190d283f854b6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2696
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2696 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2224

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    861e41a8d4acc609bcb047a7e9a86547

    SHA1

    32b37c6a1053b5366489d2c54db8bfc796e39f25

    SHA256

    cea28cfa521dcaa940f311c85cd55265b6a6820534f7df286f4b24d915b2b5c7

    SHA512

    5d1804229808c5a09b659ca2f43be902c00c0a3d3c14e6e909355ffc3f1b001eb202eadbc16b5adfb298777f69c5dd45e70e6a7bb9dc40aec5b76de9cad5a27a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    e27831542cb81cded12d08bffc9011e2

    SHA1

    3919e0b081739090580cc77cfca18e8a22503187

    SHA256

    fd411949305f6c02b0b31510e50257ef511de6fe37506d9f4c7dc693dc62f73c

    SHA512

    4a035ee7c38dfdbc27d813c87f50cf0ce81b6e6c1f66212abb0719c23b61088ac93fafd5227289c4c08817664df2d2253b755780a94c2b4e6228a2b8c151abc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    072287ad2b133f7b3e52c4a59ec6fcfd

    SHA1

    ddd674cdd1cdfa9f59195bab8c9e62f663cf1606

    SHA256

    2be19043f96431a36ca07c8a5831bb98e43657827e01ad0d9cbbdc0954a7c068

    SHA512

    08ec60d68a664309d3f4120dac2159f8c28041a6e60fe52104cb60a7af2f8780f3d16d7b49bbd099063808accfa825cff88ef133c9bf4028833089441d6bde34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bba65c4e0d4705b72c22002c5cbf9e3d

    SHA1

    458b063d18dd106d612066b10ec26be979fbc7fd

    SHA256

    cedf7ebc5cfed04684877cc4a348b436f8978d85541a99276b879c0754361b1f

    SHA512

    07b862a3df4d1d4bc1332e0743f8ce93e2ec6844eca076df7d5d8bf873aebfc192ecad021b5aea76a274b29343a929f49f6850a9a8944892c57d1a2456ae3622

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7223ea2f5f30fd5b03f296dd3a1522cc

    SHA1

    b3535f1acd3dcc4c489b77215c5d961d4934ad90

    SHA256

    0d708d206acadb9efe2e52de67f26137567a9b2e3f3bceadfd93addd70652abc

    SHA512

    2b803c78351103a4b720c13554849482407c7ef3561da0170b9b47f18f0ad7a40cde85cb24d6fd0542c42650cf6c104d39091e930325c1733c3db65a84949a4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbb83d30a22955aa31206d0e73104096

    SHA1

    29c309b3c8252454845eae7a931df974648e4eb6

    SHA256

    dc0f149bc4f432ddc517d3fe0854e4904261cb98175338c17b241e95a8aa6018

    SHA512

    e1ac4b5cca8112e2d3e6ab180e6ccf6936ac4ad57ac7c6f2c85bf94d9bc038e3139a1865806a9528adfa12786515d7d4bbed350853ba34c2ab4f659b371061fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5bc2d11e580479c9fa22675c9123cf3

    SHA1

    39415e76b1832790872dff6cf8287b68ad39d8c3

    SHA256

    142dbd51baca5d6b0766aa5fa6b0077ff08e5e569ed3b674781cbd4a9613af77

    SHA512

    8ceb8a1a4f09698fe334600cbc8270edb36a2f88fcb6ed81d8f4ec908ebd91d57440c33f971844f3cc52b1180a167a1f6337146b220b007ed2840c8d18f1df6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36c0599a3533334528719303e034d6b4

    SHA1

    8a4029e9ddf8a2616f53148657f6a89f082953ff

    SHA256

    23b5bd562425a83b246a25c9216ed2f99907534fb045e8dabe11f5e5b7e999a2

    SHA512

    bd5b3f7b684503e3684a68453f662964ccb78d538369a334c9af856da3baab22b0b0a6fe9f3a6c9610527494e11ca7c892ca5f511f5e5dabf50ebc913d33401d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2143e7f71edba040d55ab55bfd42a43e

    SHA1

    18e4a7e12a91ac532449a57c711f3a56951505dd

    SHA256

    d38eb3daa8ae28948b139f987ac4b6b316568ffa70018d55c7b99046c77991b1

    SHA512

    1790705cf72186f31f2991e63ad89b91d270372912c21350c17ac1b81db168c5e5a2746d5f9b478f62ba813bc50dca9769975c1ff6b158bb9b53ad0bbef79d1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3333ffa9375c06bf36e7bb6db4931c14

    SHA1

    212656bf037eff428959427216ffae7305243dad

    SHA256

    ad622fc143b56b0f5d89bb081b6ab1fb97a3de8c9bde29aae92332fb2f1ee3e2

    SHA512

    06484399c8e27552f758813ebe8f2aee81ab17f899c0564c6322212c9202e4f5485e55ae83315cdd197ada7643af9f82f86dc44d56156b215c8ce82b747f44ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa17122d1e90418e6c07f86fd327d6e6

    SHA1

    4675648ca1aa56cdd0942049039fd6c867a71d75

    SHA256

    9ddc86eebe0c9b05bcdec0d22f0270877524becdcb3172c807b7c8fb24f02e8f

    SHA512

    973ad8dd694988353ab0f6d2c421c9e9aa7bd943bdbf13df33424bc5e353c0caeb2c2bc5c28a357ebc24890f823cc46420dcf6bdfa57d9a1f7e4bd9d83d8bb55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8ed9a3058fa4edf2ce52cf6fccd3daf

    SHA1

    c5544ddfa4e898aa7d4f37d34750f2fa92c59f82

    SHA256

    511018226684d162e1b21e22f497a6f0c2d7955b1ffa1c20d81549ca59401ecc

    SHA512

    3d1098f8c801d6df79542cb13613cdb48913991120718b08a5aca0bc0a228c3afbe6767791549cef91f58bc6568eac0892026fd524b2dd54dcd68320f5c5d4af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa476e04b11aa5bda8311589ecec358c

    SHA1

    2283289b9ef72390ddd780a78686cf091c7604bd

    SHA256

    054ca2fda03295ecc29db8476a1e5b92bfc058d58d57ae5f2dc252cd387a6df2

    SHA512

    57e7027fae1b21849858c55fc275cb83a7f27004002983500c700b70a15e37cf855e6b186731d070f95d9afa260acf46cf3b654361c560396c44604fb5033cdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    558c07b818bc7c237690728f9ab9c7e9

    SHA1

    745f696f3963b788da2ced219702f8f881444e6f

    SHA256

    a9cfa0c10f1c3adb137382b04dbe36cee573de2cf2af76816e27d17cdd6ac2fd

    SHA512

    b8fe6f986590efea119c7f210272146dbe564c7ce491db63d2059f81e69e8a4744f1230abb055c4d8910578024dadf1c35331a437b9a55f7bcadb0fd02fbcd81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c05a6e23cb6576cdda07706f0c0a87d

    SHA1

    db80d2b27deac6e4d04f2b476a041c46d1eef647

    SHA256

    45bf3a3052247f7f701bcf5acb43acdd0e36a31e0a882fee900a6bfef1da5e39

    SHA512

    e97205da893da696aefff73c2bdd666794f997a9d38d4a458c82e5d2e08fb1f1ec9fe3b430f94b63936a3ec53f33b823ca8e8759a9392763cdba9ead0b8b6505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b645fa41af53fc3d8b388a8cf6cfd6b4

    SHA1

    a8e6f1fc372c009c1ad1f971eda60301600cba1b

    SHA256

    b2da0c33153ffe95bf6e8ab514070c945d9615c4550db34886d7135b663646bf

    SHA512

    92fb1d7604b61ebbb40df63cfbbb088298722932db39607dbc7de6708fa2ba6024a9929249c83eaa9e6d6c0189becd8d35e8216e8843b51fe78a6b3f3c93c6e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2935297247f0f049000a5cb0f4c63c3

    SHA1

    0d61879f8560a04a13b90ac6f7e4143e7d54b97e

    SHA256

    b5348e656715446520ecb7283052cb30234fea29729183518cbb3063df9a9394

    SHA512

    231a10acadb56badd5d1ba2cab4a9150bd517e961774d0f7a67fbdf351ff333a6a3ac60e3a64fcff93ec2356d63f6d7eb45b93f8efea12021ad6a9c0d324d75c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecb68ee403b405fecc815faca6bd1952

    SHA1

    c785d22b15f53dd2e8c23539f5e52fcebc2263f7

    SHA256

    197f69a2cf9a29735097bc256be97cac3b29d44848a6d42ef03e02303c339896

    SHA512

    ec54894146c37c1e9db57234d40c59b1b53f153f470593248ddb7e20b784b1994620982262ac6f8923a21c148be1e999cb6777c4e9edd6570677a9bccd942de2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e292d6019b1c4bb39a070c28f34d7f15

    SHA1

    11410b57a61323479d9cbd2b542819a49da8ca45

    SHA256

    107882867620921c1b32c9db4544ee62a7b7fe3ee5d2d58c30a71183357ad3e7

    SHA512

    364be0341ed23406e416948b826c9d174dd1a5cc183f2cdf4cb58a2ccc4d5d122b8bf150b27e87ebaca142e53c3b6cd6bfbd941dfaff0a10a758f00b3521b418

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95ae2f1663f865bfaa14481e39a81d2a

    SHA1

    0d3184aac98e5ff676c91f24a49db855724d9171

    SHA256

    6d2a5687a2690650eebe6da3057036e1f5fc25ced4647400b1e196295ae1abd5

    SHA512

    08077d60da57d4bb03429e4baaa8a82d39abe837d45f3bdea48ec501bc6e6ed991b29426f93b828125a7e25e94bc4e79c3067584a3b2d6ff5b557f544514fe1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    733b5c668c68066b17200927b49a2a7c

    SHA1

    ae70e3fdf52b6f91a2b3837c931a7dc89d8e86f4

    SHA256

    3504cf03f2b6d6c4f641c5770ac339431090131f7712de84f26613e716ccff5d

    SHA512

    109d38813c57437b8ba45533ae4d2c4a1f81974a01263f50cf344ae16abc139296dfc230523bde908c88d3644c79fbb140d957454eaf24e60ac3235d6c67b84d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5cdeb239a7d1f728fc6a26350956b80e

    SHA1

    755830069444964eaec6d8fad838de1ae9c2f0b7

    SHA256

    c5430145a6edec688c160f46e1f65ffec15ad1f26c54b89434c3344e7990d118

    SHA512

    c9e0989b1b176e0fa5b9f188953208a446cef581ff369fbc7985963fed02058972e7bf5e42c713f1a8709f88c2017161d5dcd815459095722190ae3ffdfd024c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e0ae53a200c9913a98aa3cbdce580681

    SHA1

    a2b525129c5fca7fae6650553e904dd37dc34ffa

    SHA256

    245fff2d34ea3ed6e21d77b1b8e7965e5ac5dc6c7ba9d1b57cc20ec9031456c0

    SHA512

    8e000ec0eaf7565e80471d5cbc3fea167aff31dc6d6203c567ba7324508dd2f5a90a6fdd1e2c28a1cb537c9413b54148cb96087f9e8d37a8ac041024ad4dbf81

  • C:\Users\Admin\AppData\Local\Temp\Cab3314.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3316.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar3406.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b