Analysis

  • max time kernel
    0s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    06-06-2024 02:16

General

  • Target

    99c9ee6ad68a074e67cfc9a7f3dfa53b_JaffaCakes118.html

  • Size

    66KB

  • MD5

    99c9ee6ad68a074e67cfc9a7f3dfa53b

  • SHA1

    9f6f888ffcefc2e171acef5e20fe4d84aabf5978

  • SHA256

    7311b350437d5db1b5bcee4bbe632808002322224f8cbcefd0c1746663418b8b

  • SHA512

    6d8973aaaaaa38a3486ca860eec5013d703a3ddbcea504cfdf012bbf05fcf0e2f9dd814e48c908d5b20720ab2eb1083a6f60c25b25c3bb2ba14e902877552ff5

  • SSDEEP

    768:JiYgcM0St8tN99OIsb67u6cMoTyOqhCZkoTnMdtbBnfBgN8/oycc8QFVG8sP/Ijh:Jk+ZZcBTIgec0tbrgaCcFNnzAC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 19 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\99c9ee6ad68a074e67cfc9a7f3dfa53b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2284
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2284 CREDAT:275457 /prefetch:2
      2⤵
        PID:2304

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

      Filesize

      1KB

      MD5

      05a7da114de79b5d8f12ecce7e04f239

      SHA1

      37556f8be82ce470929603096eae39cf57ab4a78

      SHA256

      9321dd97d25f4f0ceeec14f1db9648c544b20a6855d1f373f0c39cbd038ed125

      SHA512

      afdaef2266d6bda484e79b50a494fa00979a412324ad6cdba953a8332f3bcfdf585ee012ea2da1619edda0694da277de6fe3d4dced5fc317cb08615804b0f041

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

      Filesize

      914B

      MD5

      e4a68ac854ac5242460afd72481b2a44

      SHA1

      df3c24f9bfd666761b268073fe06d1cc8d4f82a4

      SHA256

      cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

      SHA512

      5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

      Filesize

      70KB

      MD5

      49aebf8cbd62d92ac215b2923fb1b9f5

      SHA1

      1723be06719828dda65ad804298d0431f6aff976

      SHA256

      b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

      SHA512

      bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

      Filesize

      724B

      MD5

      ac89a852c2aaa3d389b2d2dd312ad367

      SHA1

      8f421dd6493c61dbda6b839e2debb7b50a20c930

      SHA256

      0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

      SHA512

      c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

      Filesize

      1KB

      MD5

      a266bb7dcc38a562631361bbf61dd11b

      SHA1

      3b1efd3a66ea28b16697394703a72ca340a05bd5

      SHA256

      df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

      SHA512

      0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

      Filesize

      252B

      MD5

      d797396c6e159789f30c694d49add215

      SHA1

      145aa3e5ed36e6d2f79e486d2078f5b45f1a0bf1

      SHA256

      ac554c5be8daf872fd1e5e4b8daef27be2ccdd35d8668f5cfc5e80ad480bedec

      SHA512

      4fe2e74473f6c6d13b9887206374dc3e9c0d0682ea1389958e6b0987c514e5e38779553ace4d660c80c1e724fd8fa67f65535ef528996799f9defabf0bfe7a42

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      c0adf3802af45a46aa4b445fef205956

      SHA1

      3883ebf7027199d915b7fe24a9e255c512b73e0f

      SHA256

      fe7d096a860fbd58f3c748c2cceb903f29e5b7c262f09c317af43a19aa94cd1d

      SHA512

      21c583beead0ea21f751aebd9a85a11b2160c7ef10f17e24dc90d3dd069a6f3b8777a87aaba3a2efd53301f8a64e7801045ba44e219747dafad6079df12f0bcf

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      5b0875e43d5f96beb1fab3e01bfd8229

      SHA1

      06d3917ca494dc9f8044c9ab5ed721b3b2ca4f13

      SHA256

      40ab012cd4c5d51b1f808b31fcfc53fe401690054db4acd375fce971e3f54455

      SHA512

      75a1bbeff46b6f7d58e311477558cfc6f2542de0e4005a939e33e9fbf43d2ebfb11cabe94d31071afa0dd26d1155cd3e0204e08d844b1f3929ec87fcc7f71017

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      19e91086809424f6a8b0984089768734

      SHA1

      7c8b3d4d1dff48cd8a9bab200a3f08dbf4a3b1a2

      SHA256

      5993e91aadc24ba23ac70d42a67bc77d025a63715d4d48ef3653ef60c1b86d1b

      SHA512

      a33561b8ad27290a09ada4d25af05131999cea861acd16c99d6db50e71b0f0266ed659dedb71218d03882906e948721e83069702e3da9c1ad37745fd5aa4a1bc

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      b1c7c4b2fee611ff9a86b4e7fd969d3e

      SHA1

      965cca76d85ee96bb66578b16152f9e6f130654b

      SHA256

      713a8a1bba8daafe446287624c3d1ee7c6f557eda901b0d1cf8e9fc19880ac61

      SHA512

      e6a906a7aec98f2ea9d66e22e5f1cd5a800c5b898dca511e8df0aa64397c1c69d41378f19ce787026cb937ee1ceabe003c9e94b5be86b1b4f659b76fadca571f

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      ab359224778bd743f68b11db5ebb2e49

      SHA1

      b68a23d67dec8f07312eaa7c158ffdb47e87c313

      SHA256

      637d49333b8cf8a387d928d77e634abce7a1fc74639ebcd8dd3733cb6806a628

      SHA512

      c70ed6802a8a527956e83ee13c8c72ac7ab625f60ffe19df77b3650a5b6460c6b308f345d64ddd4880cd54c5182866053836beb9a8c9bd09680cac3e258dfff6

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      cd8bef1f223e81552e21dc3912eba1a8

      SHA1

      adc7f29e2079aafd28fd8d7e1f703ab055daef0d

      SHA256

      fdb4c3c7a202ff60d49d109cb0b1bd9f6b1447ee5773681e20408000007c70e6

      SHA512

      035db2bdf7eaddd684c9b4a4320d53a95dbb0d56826868f117265a8214c08342e6f6327786cbfd22226bd35c9b5b20d8c6161af72be6b8ebfae6559dc1cdf875

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      90e98e1c7de34aca4818df3ce8a10a66

      SHA1

      7993208e04f7026732fba8fa70cb60d7daeb097f

      SHA256

      3c7d333074bc1144176c5122ffc37dd51298078ab9fafe617892638393dc65a4

      SHA512

      83bcb48f999aa988133fafdcba1fc242c915259f4ef4ec70d5edae49d7b0be58beb11cf299620c4e36a16ef49d31396a0f98de68bbd0754823116225bac246f7

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      dec0e3e96ced426a3517ce84d7a12c24

      SHA1

      f484321a5d23d91301256e1debabed1557d2132b

      SHA256

      3bdf0aaa9ce24d90fa5e4b09422c534f26706ec640081819215d15f9c57c78b9

      SHA512

      e7dfd3ce51169da72d7967a4922a23247ffe61104b469f6fb88a43bfbdf26dd89d1b711373a72555d08e951aec89e8894767eae4669e68e89da175f5b37f10e4

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      2677265bb1666df9c9405afbe2fadf53

      SHA1

      377cc89ab98a2124ca4a4aa2fe90cc8dfb355f0c

      SHA256

      2468d14d50aab4f1c885e0d4515f1050a8fb7b84dc39854131017cc4f0aa5daa

      SHA512

      d90b2b51cbc5539b180f9c31ceff70bf47ee80726cb8140edc0645bc8e0b820eb3640e26eb841be0ac3c5f7709ca9baef0d0ffd284676d732e5171e6379e5594

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      9ac839d535f6a2489ef705da3986395b

      SHA1

      9d5bbab5abd2166f54a849a7db5a760cb755f82e

      SHA256

      018ec8edb53083e809a80c77d7061a3159c318ae8000611cd33bc297aa83f468

      SHA512

      7781efe1a3d4017958262ccbd4d7a8e9ffb95e1e7f800e3c08dd37a3d03bed2bf1554440d5e1d659b33d4a73c7baef6cb77625aaf01adcf36758b5003ed1b38f

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      10b52f830389f1bbc79e37f799f3ce00

      SHA1

      dd28c26ae5bcc2297026c1479cd06e7031d92eec

      SHA256

      88cef4d8ffc12f73e6879fad8ff400c70d6e192836f904c4f1b021f13ee0aaa3

      SHA512

      c33fc5614e41185215c15d8d08c48dcbef978f2e52ca3dafb5bde3f460af862a237d5a5c5887a72dd9a3a70a0ef01c8faaccff4fff27451897ed52e44763aea8

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      d217e5a46bd681007afc359621e7b14a

      SHA1

      781281bf7b8b2e9a35eca3e76f61b2ece57519ad

      SHA256

      9e7881407101d9b0e6a4fb769443731030108e2027c4ec8ade59dd2dc9ba0c3c

      SHA512

      6619b475185a1047107571109fa0eb76905e2a22d5641e207fff752920415837c81481b9f5f033abe51d97dd6fb86197d3834bf8fb8fe94704de2ddb3c90fe89

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      66e5361ca06bfad7dd6f7fc1495fff3f

      SHA1

      c1bcb54decc5adbfc10a19f3cfaac8df30714638

      SHA256

      5dbfc9aae9dcac3e047ba550772e2de0846a45fddc7f80dbeb59dff24960e259

      SHA512

      8b0c5e1adcfde4c62cd3df29567276db72331c38e808c4ea78480072e9e60dd930add7db591d15f01e8f2eba0b42f50a0f04f6ec75dcad249e07d66e64a229fb

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      344B

      MD5

      ad9cb26bbed4bda0b0d1cfa759e2a428

      SHA1

      6acaa80cd32d4b952cab36f4c1d973e8e3c9ec22

      SHA256

      60b5f48a67bda817104fe8a2c6cdad4b6b7a5524448c3b33e71c4939e448d7ac

      SHA512

      319cc2de438876695dca8e3de8d81942bf294cec48333b15aace72990658730e20af7940867ea5b0b45085c2cbcba12b27475eec6021916f4b341887c48eb172

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      e43aade95177d0173cdeab8ae9cf1a57

      SHA1

      735d637102b7766646748d5f2185f0d6e1214356

      SHA256

      e2890263cc7e06f943da74cb6d9ecfe72f758b3cc6517097fba0761f24362064

      SHA512

      6eaaf355aed0c0bad4a6070349af2da5e8ebaf1f03e83ec31d441e75ec04a9e98c797a969e902691cf0cceed968d34df9e196b90f8c6d18459c373817f9a3932

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      0a8936da6bf6d321ae271e38267e1420

      SHA1

      bf6504519c7fc3dd7c61153e482ba72ab9eefd31

      SHA256

      a474e100623698845be163f6408f3ec61e139edcff683df4dcfafbe8dce8b14d

      SHA512

      fd3c32fc478799d12acdf1848327099179f39acf391f4b7f0a3e419a5c9c2c8b243c4753ad44cc140f4140b239793272eced328e20d76c6f563232e9a90192e5

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      693fa0b4a8061a653c93030d6a2cd82f

      SHA1

      c1e15a601d67148d7480f9aad16593cbdfbf9d67

      SHA256

      3e10ca3a0b060e46d0f356f351e3a4373939236a1158f66d18632a0dda15e62f

      SHA512

      f88439b3e833a767e5a0af09f42ff7eb791588d841579f8f71adf6f59f03948cb0746e0edf5d23a90222fff523d7219635a1162532b8240ca403f7378e6184a9

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      6a99dd915ae811ce4c48ec11adf4fe4a

      SHA1

      fe32bf386a0572a48e26cc108781fa8399f31b02

      SHA256

      73bd5d2309ed77480098a7551e03480a25ba8b3bed496ab41256656489e8f748

      SHA512

      1d0f9e8bd9f59f410098a1976b6c5ad61d1d235cf163ee64bb4f5389bc92b9d1b2bd0ad4dcc2d7e74022d44fa3e8292d55d58a6f67aa629fb17b764ef5891015

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      196fb670cef7bed91b669c934c1a20d4

      SHA1

      2a5701eae30535e82d62d9d2a7b3116d888b2404

      SHA256

      06fef56d1c37c2c7d7cd416dd33a9a091143acde018bc4c134eee73e3f6847fb

      SHA512

      72d4b480db2682e37d774b2784b4c7f41f0d0bd961830d003bfee08987cdaa6cf44173194983fb02c986b74cdc340eb8bfd07b3bee9570461969f5444241c992

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      923d336e1e5684b9a5f93f552eb32341

      SHA1

      09bd016e2595db5e93f16f0a3c1f5b77274266dc

      SHA256

      d3a65706496880ed89e72c677591404e77c2df9c44b735275e9720ae068a1bdf

      SHA512

      89a982f2d81204feabb2d719a7666bd9fcdfbf6aa7146a875260900b8305c783e72e5b590920354f461202c34a0a8b12a50e875e67fc1d39f5a32b00547a7c14

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

      Filesize

      392B

      MD5

      ed446224230cf9875effb0b79690646b

      SHA1

      99288f02cc1c08c76236f8ba94ec3262769a57a0

      SHA256

      86d2c5f59e774b0848e414172231c6ba72d9c1df1e52fb129876267045791d5f

      SHA512

      5e4c97b2b14cb81c246063bc87b1b818c1d87deba74a52610fa213c37d07b3f52c557c63f518c3df0bbe635cd8a4ca634140b0e8a583706da408d052138d35f2

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

      Filesize

      242B

      MD5

      f38a5ead73f4de412a760b5678bdff45

      SHA1

      1e66dff8b35f1261e700c028c57f4df44f251cf2

      SHA256

      0ab0d24d69ff1f2401b3b52555cf4ba227f34d03e2bd448e0520d186c534748d

      SHA512

      78e1b7b3da12312cbeb0704fe2bb4c7824a301d86639283c428b1b03049a4830fb7ff5b8aaf5efbde25537be3a2ea38446d36ebc28d249d6796c97188e3d18c2

    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F2DDCD2B5F37625B82E81F4976CEE400_E37F650C7C62919AD1A050357EA5E69F

      Filesize

      402B

      MD5

      a84a3d83acc19e23f3fd2a9757637591

      SHA1

      3528a483b900d6007d2c397d63ee6240fce9efee

      SHA256

      e0566102d73d656a3037b3d0d5db1e33d5cef1cdeb1c4fa4fac512ead03bc133

      SHA512

      5fd5f56f4901c8f7e047da1a4e17a3bd256140f6f5531324f621cb2a1a74899902b75622e5c5f79c8aeeecddbf2ae0f151329c0e89dc98ed2f96f2161b872136

    • C:\Users\Admin\AppData\Local\Temp\Cab2252.tmp

      Filesize

      68KB

      MD5

      29f65ba8e88c063813cc50a4ea544e93

      SHA1

      05a7040d5c127e68c25d81cc51271ffb8bef3568

      SHA256

      1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

      SHA512

      e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

    • C:\Users\Admin\AppData\Local\Temp\Tar2253.tmp

      Filesize

      177KB

      MD5

      435a9ac180383f9fa094131b173a2f7b

      SHA1

      76944ea657a9db94f9a4bef38f88c46ed4166983

      SHA256

      67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

      SHA512

      1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

    • C:\Users\Admin\AppData\Local\Temp\Tar22D6.tmp

      Filesize

      181KB

      MD5

      4ea6026cf93ec6338144661bf1202cd1

      SHA1

      a1dec9044f750ad887935a01430bf49322fbdcb7

      SHA256

      8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

      SHA512

      6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b