Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2024, 11:47

General

  • Target

    9a8df347f9e6db36dc0a01b6624ddbe6_JaffaCakes118.html

  • Size

    94KB

  • MD5

    9a8df347f9e6db36dc0a01b6624ddbe6

  • SHA1

    87d4214b36e44f1d8560ffa4c037f650b07bc7aa

  • SHA256

    71413ccb9faf5dafebca69d9451e7cf71f4b5cf448a3e45cd851823f27c53757

  • SHA512

    0aa0345c8446de23806b0eea48485dc24e47372b37f7bc74728631bcce8631531be9147156e27dacdffe9b966a01b8bb9cc61150ff8bfb69a53f1564b0eb06c3

  • SSDEEP

    1536:lqece1G8Gup3+EkamxUxhqC1Gj7fKT162Db:lq2Gup3+EkamxKl1GjE162Db

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 28 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9a8df347f9e6db36dc0a01b6624ddbe6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1916
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1916 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1704

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    5563b3a80c29851fdc23ac15a51f4465

    SHA1

    c396ab4b7021d35191755a236058bea7eca8dc6b

    SHA256

    da725244df230f451bb9e10e719b618a618245474a9fd9907303c6a1b4306283

    SHA512

    61893b080c2f677ac700eb4a1ae8d4200a413ef57045261a4192ad1908bff8d4ec6d7cd6e3faeca0e7bf1fe28c9348081653b56d2d31bc8aa747bdea9d4ddf18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    7589931a4f0ef7c884a59120a0906fb5

    SHA1

    b042b974850ecc4c132ddb1697f9b844ee7c4401

    SHA256

    bfad5dbbe0fa6216fe7cc7609ee44b38e21d7d84d15f0d028017cebcf7d1369c

    SHA512

    e7cd030f0104768ddb19c15ea8714749c9ca45ef89e1f1a5b7055293fc014433e040ee816e845cde3924105f1581ee1ec80d1d77f71a42c86e8c40fcb2839b97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    d582ff589d217e264d1f4f2f4fed4a5f

    SHA1

    9514e0bc8e3b198c43db2ed96deef43411549ff0

    SHA256

    6f31aef91e8e6e6d3f31e32185f69543f6f7e2b2eb6a4096cfd48741a96c83e4

    SHA512

    59900510e4b5b932403e1b079dcdb4d1ebe8fe46cacb782af0b9d6e6d1473003687193b2bd72e5467f70df9edf15ddffafcff8050dba34d6e1abe9056d94546b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    351830d980e2943fad3ad920d6eafcbe

    SHA1

    d7497b2b14662c88cf12f896a5d7d3a03cd8738e

    SHA256

    1db507f2afba894c3f6e2e7583736707c8637e98d22f1cb1f5ecda6281836f58

    SHA512

    7ae5ae4de29b1feb988911730b4906ed3d81a7ede6150722c84ce643e68b510b717190bd494137f76422f3b91d7e663747f5fff2cfaf4b632c384a464cb6a551

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c12fa1ae371855e20520b7721e40ed72

    SHA1

    dc27852ce17140ec27491a987280dcdd8650532a

    SHA256

    21ec7d509c95c8667da3181b50989b77894bc924971360c7bc6a1a02e7123d31

    SHA512

    1b3f60272cb29b622379d89364af9f97c29cf8d25162bd4373ddcd40369409da24ef134f270872ba43afc9badca9a8e243fb73c2addfd2230586cafc2df17a5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb72f7dd5a5402392811ef78725c6e4d

    SHA1

    41fd522fabd747905895c8f69f5d98f5d9b43251

    SHA256

    15a1a0c34d142a2c525a140b94fde0b23cf3539e7dc65fc2256ad22bd943837f

    SHA512

    e39ada597e17a1c8539c81739f7fd18e52e54f9ed0bc9f955d2d058fdb5d0a5baa5f8a9f61ede1d6ad3130bc7e5d6cf231522f6b16bde329570960053783d5d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    532b2ec83a9096760423ce8620786b0c

    SHA1

    5ee00f304d04120c1f53d187c54a72eead2f95d3

    SHA256

    2f2ad9080777b2e044f073005fb68ea9bdfe40b8e53f1d90650dfac41c8b69b0

    SHA512

    8d80bce94f32ea246ded6faee248162074206fe22352e25c7d8a8fc714e9a025c36ee0e156675fe211ba0a2a46634b1ee6bed63839aaa3c04616b391d931773f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f7881c24d60848e4df02ba6e27b5ac8

    SHA1

    21c7fa06ef6c913c11160b470cab49108fd1dc6a

    SHA256

    2f01174711905986f37aca19a7b3263201cebde5108a6e1fc4ebc8b7c31f36c7

    SHA512

    5aa2eb8d5017d9072a9494217dc62f0f1a9756d217def8fd1c39fb047a1ea8717dcc85cb742e0a336d4eb59ec838b99642662c06029f4705cda6016aa8507b4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5a2ba1d1eb974286a81bba5b8b49cb8

    SHA1

    8034bd061a12e30d3166b9369fd392868b7c7d41

    SHA256

    89994819fbb65e1f491a0b02e05b3162cc4f4eac1060562f50e9130bc618bd4e

    SHA512

    638ccb71ad2d3d6257a22d89e0fbf6c30b5e302c646b9d40c8ecebabf83e65f9e29a8e06d6d191a1b586787e958fb831c5e3c576ea5dac41696023d9b441c780

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23f0c7d4aa0e6dd0fdf22e0ca257a275

    SHA1

    1ca1925cda4d3ef9a807d8bbdd979cab19ba9a9e

    SHA256

    a26380b7f577a3a3098b3216d92b3b9c0c746b2da5507fbab80cd02fd152ef29

    SHA512

    afcea37b3981ccb3814618ce0beabb8941ee57be50e1ad66d595d44c171c7df49328996f6c55380ac09de2ae0a099e7c28a12b90fa5aa7715f2cacc3990d6724

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbb0c396bcbe99dc0268880ed78b09bd

    SHA1

    377b9ea4732ea3a62b8471e34732f2fd5b419bbf

    SHA256

    c72187b4b54cc7b8c49a8fa10d334865af63f87998a43048550dc9b1d0e39b10

    SHA512

    af187885e178a85aa1c5a530bb7086e92a562a9ddfbbef588121b2ec8d68eb24768e88726612ee446e63bea0a8db2cfb54dafdd1bc09e24c221079a007dade62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a66a1981f13f761382e3cc61d29e5734

    SHA1

    d59300beae9214cebbe274539762b7eb21b8743b

    SHA256

    be1aa6649f83fc8d46ea277ce39d9d1b498c2e18a10240fef891d2ea983c1748

    SHA512

    a0359a1382157cb26f1e430702eb709007890260169d6fae74d6652f364a64aced4e0b1bb99cf007b7f4a5ea5ba58352f24660ba6de700d7b4bd085b340721f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f9943aa3f443904a5803a5beb442fad

    SHA1

    bd7ae31f7f25a14e0059bd931585417263f977eb

    SHA256

    c27bdefce36b2af1ff4509de8aa830c8adbeae19f36659aba9e2df9e63378b39

    SHA512

    348ef78ec5070279633ec27f9ddb43f72832b6f4f672bb1cf7aa44e1f698b0fecb08a99c6014fe5b7a27ff4eb23b3b9248b43909a3618a5d92e0485d29c17808

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5a10e46e979733fe0e03e3275605c32

    SHA1

    9e5d8c9488c6f3c0e59d7177cff0e96e64c32734

    SHA256

    578a46c4ebb4ba52e7475bdc9ba633fe5ec9a5987001546f1f10bfe9b7b46d43

    SHA512

    302570d004ed6db742a40a4da3e8f832d41e64c967a64162b24cbc9de92d08ac72dcbd1c42b6e2a271ca505bea920e0041c5a4d3ca25956523a91a083d4c9c20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b0b2bee1284da13c8baced88d41bbb5b

    SHA1

    1fa668a9943eaf58e318d5a54c9068040c0ddda8

    SHA256

    344b6007d72bb92ae24c82f0c04dff55f96bc5a7d79ad602d1502e463f05233a

    SHA512

    442cf1010b8ef69527ea6d7242d456bff5729691bc0e5159a6779ac3f768bf60ccf4c2a2da17b71bd2222e3ef55b9ea7aec514e2830ab47ad80ddaa633c7e9da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    698e459029511ae09aa5d44c8880e3a0

    SHA1

    fc69a2693233ae6a439c2eef2d4da935508e98e0

    SHA256

    6d56514ba81df108f60e24f744f7adc8b6adfd5c4826d5503f66546d77eaee38

    SHA512

    d087efa65cd2a9774960ff4b5fad617d8d858c35c8068e04ec32235d17d976f873cccfba6806f907ecc6db1718da9864796623246520dc62d234401c9eb27b42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91f39168fc89c97c0d142452ef2d5694

    SHA1

    b3d09e163228227b9c31b64125bab9d22b32fb4e

    SHA256

    0f677ad07345390f91423c19537123a3d9643d9d9b3f8b2e15708682b02f797e

    SHA512

    f5a2d7f7a7ee64fdac2f45617a0b5f82336f1f4a13f07b8cb941eaff89ca4183dc79835ed459a34c82b9013818057060466eaef348524403cd5585bbc458a9dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c61ca99af62faf1edd049190f059b960

    SHA1

    d23643e2f3914ebb2cc13f88c6ef50eaf47c8159

    SHA256

    50754bdf436b6f56127f9eafca8c97021922950844cacb0f381b6abb8a5361e0

    SHA512

    cdf7eb11553cfe1cce3f2c7ad4d8e733382daa2caa88f02b3771a2b2a04b2e54565f474166e3fbfb2f7f126cc38e63fc0cebc72502267f41ddabf70ec189bdac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60ff2da49327f06e94e02b56b73261f6

    SHA1

    46f18bfa29bf757b79f3f179edc75e3f5fe48440

    SHA256

    2d375273ec2e2f8f367ff6b8df83b595fda2d569ff98a074327a911f47a0a61b

    SHA512

    a2de320197da06dcd51140b5db5e1cb157a14c036a64ffc8c294df5a23e879310197056f7e1e2b4bfb048be64924bce99d4edfc03d3944cadd1bd4935f254d4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a8b4a6e6e27ea1f3c41697af32d3dbde

    SHA1

    4154a392adb64199d962612ee6cf6c72562e73c0

    SHA256

    2aab35d8de741a133ad3e5904fefc44a21913790951083ce90bd25f280a6d6ff

    SHA512

    ca1dceceecc5856c58f83fcb18af798ad14cbe0c87d08382c366c2482b5db396f94515be9514bb47b31f180672d53200e24d161593db6b44266792623053ad50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5262a16087134b538eaba993a4f6834d

    SHA1

    eda358c78efafc402d8af377cd51ed1e6c44dc4f

    SHA256

    a68c928eb45fc236227d1661d37362eff36c6f802a73d6c30006f57b1a06676b

    SHA512

    8574b76a872c66ef5d8a042300a9e209ee1e2870f2fd2041d22adb49c25c0cafe2f3e703e91c57db6c0c916c93e725d538dd3e1bd3caff286192af81dabf1001

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1718a9a6310d982acfb6d0c668c2eac5

    SHA1

    632947a8e9937bdb91e24dfb7701beb0df7af2e3

    SHA256

    adabe30d3bf44191bc6c779dd9df69c4b01919946eeb0b0ad3e371f67e05347a

    SHA512

    f9b994181025c9cafb83853e6bbc721891563605dcf395e5ec7d70a25a46c3b18038462e865bbc197bec4c78575f340ce0469f2f72a2ece9f5abfe72fe29e57c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be62480f1ce0f4237f68bb7658a529ec

    SHA1

    617bd21b5250dcb5eef20cbec66a682c2b47b808

    SHA256

    9fe8967aba1b2c564939d304802d03b15d7e989650b05317bc13f900bbf31f6b

    SHA512

    161595c8f0f097b9f9e88ecb7b86a5e74b31368067776c72d2bea04b1c4fa2d40f2ce0306e13c6050beed8942db03e1813cc621e06854e785ce8a04cf1675b20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    894b3b05ebc414575d731a47c7a3c9b1

    SHA1

    66c6e7fea333faa8513d6329bc73d463940b684b

    SHA256

    820afe1dacc241187ac23d8b3342a653e4cfe07880eeb4d0014647098a50386f

    SHA512

    e07f7af8fd8ef6e6f56db0d1295d8b3924b2d64922aaa8af8fc3cddda7ff7d52d8131f9f463c6d4f814a2b9e97d6580639e08e8f29dc7ae05a5c3958d3dd3509

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    262277a2546c09265e1e1153403a49a2

    SHA1

    b30c46b360af0c327166ceca017e41096922a4e0

    SHA256

    c593898d8c0ae1e6f583946a37ac1f7e98bc72873f69768f4acbf3c022809198

    SHA512

    f2cdc7e2d14345b2446beafb9392701945e63ab18a9219e19e4582ad21bb900c64c8e397fea8c41d070dbbd06099dedb1ff4359129cd37db57b37bae85baacd3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\jquery.pngFix[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Temp\Cab2F2C.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2F2F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar2FB2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b