Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    01/05/2024, 01:55

General

  • Target

    0adfef87cf1f6a64734beb747b80147b_JaffaCakes118.html

  • Size

    126KB

  • MD5

    0adfef87cf1f6a64734beb747b80147b

  • SHA1

    0cc6a319deb51dcc54896eaf89a7250c9cb5a9a0

  • SHA256

    973c151d16902209e5696d503e1b13de9e6d8d0f11f28c4e7500ef00b96ce30c

  • SHA512

    e23617e72f57b283b95ec611a3cdfe2c9bdee723ffe7c1a5f08af440ff85aaec59e85fc0befdcd0c30949bb1d854137e2c5018d9e036aa2f918f7245ec0e3bb1

  • SSDEEP

    3072:vhqGe3/ToXqbIrqbI5BU13G4k5QhLpOatVwrCmp3qf222HU:5u3VIIIq3G4k5QhL8atVd

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0adfef87cf1f6a64734beb747b80147b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1732 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2548

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    422a081e58bf330679ef48dc46d7a1d5

    SHA1

    2636af2dca0b8da050cceb3302ca6c76fb322ecd

    SHA256

    cdede115b447b845285b6436b9aa5e561a9711c30cf89d2be2a78a4e0dc88af7

    SHA512

    77354ea7d10f2a96d715e2f8450ca2e8322d2af29a0fb4b178e5dc3c90a20c7bb8651fb36aa83ab33616505d71c3175988d1ba959024a9e035270d2d5823ab35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    946e4e53de6be4f3edfae282fe871812

    SHA1

    19b18566f4bb8ea03e7039145bb2fcffdb3cb8bc

    SHA256

    822396dfdd585369bea4662ecc1f8059f591a30019463f9dcd6f51c28d0b4414

    SHA512

    263284867c6b74c77cfc98f8632cffc7ed39cb0323e67a15a73e28ad18e8389e7efe453fc38c94b7ec654d49cda6034d8b4449df239d7f8e769863e47b1a44ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ef5eb09280d38b6091e19a3e72937a0

    SHA1

    f5a3fe6dc5edcb9addfbe10f0e9f1366afc4304c

    SHA256

    91c06ed95421bb89cfb5592944cd563908c7bbcf2e998ea3c2f5ee04484ba85a

    SHA512

    33f34bb7cf83d8e06d435942ec84351602edf6b8caa5420c34a9dcf2a2baaf2669fbba8b21fc778cae695e974c81a6086a7139297f6edcfd598df9cba7a111e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2f6f55f5d69436d6f7319bee9295a13

    SHA1

    fcc4fd7c0013c805eaf095e2ede4291f056964a5

    SHA256

    e77d0d8d90a6ae00533afd3bd78bd1dc3ee965433382515fcc7d8316aefd6362

    SHA512

    736a848ba812e9ec9124be63e613115a776d07007bbec793f80515cfa3c106402921fdd96cc15a9054046958507ac68f0164db75a648f7b8ef179d8fbcb86e94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    661fc9a6bf9d3003877dad8fc743fb0f

    SHA1

    bc5a98132817f2bb1a15202ba9054cbb455a12c0

    SHA256

    458026eff6d5c1af745baa2393bedf8ad0ca43bc22b4d00d69eea3372944032d

    SHA512

    7a8245b4a38e0d44e3c51f65e6651382de6182b5770084a12fd9ae3430be21d0846459088fc2986b48a9f4e4452609c7d1d7f9f49613833b22f350301ba88c12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    087117b74bfbba46422c9cd7aea44538

    SHA1

    05bd9ecf062f7a36dfe4f7f59d348bd9d33a1e7c

    SHA256

    e5102b1ca3b362726a577b7bbec632872f9f43faf204f79cf110c4ee217f960b

    SHA512

    1a06a9518970e81fe4431a8e8a2aa31c271c50d6a024543f492c6b6379786c9a2ed4a854d6373dca1987f6ba9cd5a7a3fb44ae33e14dcb762594b83bdff1db0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    79e409fc7ca01386f1f54ad9b0c5d8f1

    SHA1

    73d1ac8b8d56455e730f049c0e5c8856af970800

    SHA256

    2da70a9c98f7a8f1e67341f05714237518e45f02d96942616ca817d8b78b84cd

    SHA512

    0d4f142b4d9ce49ec55dca35cf16de9b8145da5432f6ab6977ed1dab98efd8a12b41c53db644606367d43c42e0e71e07727c3ef6a3127315f4863b37eb057709

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d0fc03af1ac8e4672a8205db63231ef

    SHA1

    7ecdea4ff073bc30a26c73a3d19b4ffb7db91e66

    SHA256

    b3795f3a5a21ed0c1a15957d84c7b075eaf1463006e00aa987eecd5916ac95a3

    SHA512

    9a16569e4b89942502c1fa8b080dd9895dd895aaf1b303c6a286477c08ffc983ff26879955fcdaba5f47a25ce297962f0afc553cb7ad2cbb9d31d00b05d15929

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88ee1e95ce7bd118f42bcff78502437c

    SHA1

    991e3633d16f8ebd1c9e0769cbd91f03fd31e46a

    SHA256

    cf6d65da46b434a73f475f578ac399f0ce0cadf97d3256b8d20d30deb8e69c49

    SHA512

    fecf5f6f8892e4659bd453e5d826a8aa3feedd50d4d5385f103024eef38b05248e17dbe7c283f87620470c3b01c7eb3511a4beb7d2e79398514ef8ce0ec893ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eede12ac8c591d03c753044575106871

    SHA1

    2fc34030cfb2d9caa2c233662c7560e48bfdca91

    SHA256

    f137e6f4b8796c86edff9c28a51777611d2f8ad2551dd4b833ebf0f55baf75d0

    SHA512

    797eeec08479f7b94e75e9b087911c24c302dc8ae765aba7fb8a1441fdc306ffee3755dd39b03b1af59c022f19aa7f3f272738faa0446a3dc81fa637e5f1cd49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c10f333efebface4adab3d2d7ac516ad

    SHA1

    7d8b78eb7e5d70676d0d2caa70d6a4ecb798724c

    SHA256

    88a8148f3ec130a83804e70baceddf5a01f340e73614103b28f145ff0870c61b

    SHA512

    f93d5fd07ce2be7fbce57e03ad66e824efcf733e51d6545c7b464ed1aff8b540bb8e13ffbf42e2e74d94918c49d4378d6ac68af4ed2d519ae14d1d0852efcb40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8f497c8f1f3861566e9b503d5b3a82a

    SHA1

    2401d072c3b653ed4318688fefb94d3b457ac9af

    SHA256

    0723d4a2014ceb332f84322e2590919b7dfad08b660c95e370a89da63ef906f4

    SHA512

    dd17abd6863e7283d161b0c956dabbc4e4c2171e4b5a0161a2ee8b55c0c734e05e836dbba19569dcb4e7626e82d0084d63fb0d8f419eaf318cfab04d63976cbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    800a7a49b6b8d43e3fc663609a52c4ea

    SHA1

    abf38ba91bc62efd308cd9ac1aa800bb86823d2b

    SHA256

    c3565dc4ace4cd669599018f5079264bb61e495c312328691fbc0a3e48bdd58a

    SHA512

    72f3fb01b7284ae50b1acd87ea7360ca7d370a7f6326850a3821437b0d9593a624babd88d29a0d72c94a690f24823215da0fb265a44a539d7192834cd53ebd5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebf3df39c6ecf79eaa07ee645622069b

    SHA1

    72fca45da17957cedf30e2b82f033cf692313a8c

    SHA256

    d5cf85b0c296b32d82ee70367b5c8c6d4db51423cb52319645f0620b140fd289

    SHA512

    95886faab8b64d69d084d423aa5710fe47b9d30df5586f227f03be9afe1148d64589a25ab487128db3e038ee5bd5b0dbcd887ef229e4145c644cb1afd31f76dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9579cee097a21b32e3008cc94d25ee63

    SHA1

    c8022ada6c0282da478dc267af617a5c1ac1e11f

    SHA256

    655cfc7db37b290b941ccc7f3188b894c628b420b076550b864faba29a2eb251

    SHA512

    32ddfdb78915c2b96a183df11b4090cfd89e33f4a30b67d6c43241ae15e567fca90ea8e415190865fc4d024ce56f092af5d401f28c2a6b5915196c2ebc84b448

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97e72073af9f545a0cd72a69d5599d96

    SHA1

    b849afd8cecc068e6d4456a55f6c5daae4a076e9

    SHA256

    64b783ff0b8d0e5e76c3b1d4ef34bfdec047b473d1c9784d78178f4c639782fb

    SHA512

    96cdb9546a3f4391049cec1b4def798bfc3647d005d2d8eaab1678c420a6d4bf9311404f198f24a0d474137c79e5941559fa91865e3ff5c373e0eef380467bbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f8fc35146db7b0f0960d5cc491fffc9c

    SHA1

    2bef9f268d08187e34b0a2884e1d3eac8fd836b8

    SHA256

    f225b546853e83f7d2682c49e38e68f6da0295ed8a344d0e86f4a6f4be380a3c

    SHA512

    59e7925a491f0b16f2fe3054717777100fce20140e53d65038c33336d724a3652041e1098880439b3703f5b6fa283247f5ab5b4d300497f000354aa483b9216b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    439fb1d1dc22d47c50e776b9f0778a07

    SHA1

    abbc07fd138ded21d4c7cf55a9ed130cccf76fd7

    SHA256

    b403754c8cfc68e159b51351611b2aa61723a3491c0f67ef994e12f386689690

    SHA512

    7076e91d9c7658411fcf5341d79dca981cd0011dff6f66e295f3583021074e9b2bafceb66936a0432007f02c1e3b4c18cb0e0cbbd13b22ad0243f35745d19a9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43a7fa4f4488f389bc623ee595579d8f

    SHA1

    d3aaad77b0d33d60506650de5285348fc1389468

    SHA256

    09955babc760696aea76103c95e056e49dd45c8d906a94840c4ffb29f7375105

    SHA512

    41367bcfa0477bf1804711e1bfeacd725393fdc3eb95f303621cb2ab6ea38fe4c7626d4bff5911238749156cec5a340d5eac7b6a07b5b0a63301f07c5f263f1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ebd8f32f3003a5a33bfb855d0b25541

    SHA1

    4aa68cc0ec0b50ebe7a22ba82ceb3cb3b9b646a1

    SHA256

    61df286e5f09c4323a8dfea546514aed799323ce70a625a8d8117103b4a26d6a

    SHA512

    084fba73385e8e35d631ff3c465c6efdb9fde73a4cec73c71fbb4e3f6194aea485e94c736b1ec3ae9c9008d73331a8a541aa125a9214adf952dbe12ae61c8103

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    1775e9354b7156b64e940c692632dea0

    SHA1

    f1ef2124795205f9505629578e996dcc8356c170

    SHA256

    9184811e1f77cfc0a72d1e6b7255c816e82a65d722d9bec3f0af97acee9092e1

    SHA512

    e0ce8b8c1b08d44d1334bc1fd95a8bdc8a9783833c7c9b78ad13c8bba11af0a085e803084f0774c63d5cb12433ca374586216153cfeafc1db694f441332df4cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    0d69d7b9416d642e924d77a8676af482

    SHA1

    5f9aaab225f5dc9933ee05bcb547e11cb36debfa

    SHA256

    35c5e7119c10230b0d6c0233663e09a237a9214ac5584c74b0f918936c7f71e4

    SHA512

    d9cbc1a52cb7b44ef40246a47e695a6211202862ca46796df1841954c4f53519b233069cdbedfb1d3fe67325202764cce0f3fa408711a42e56180f7d57efa05a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\528EVS6A\cb=gapi[1].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OV51DDG5\platform[1].js

    Filesize

    54KB

    MD5

    e66acfdb2f1dfcff8c6dba736dd4ab6d

    SHA1

    36026360b6c8d750488ef2c739e04969f8c5bcd7

    SHA256

    742841b3cf614dd55ce486a7335018bd1992c4d05ef74b45a0781318075a99f3

    SHA512

    113b6e50ded2703cb7a484a66250a38d74833ab9a994dc54042abc95500fe7405f9e5f384186c15bf392c613420a19108482d279776f6e2fd00245b8bd892fbc

  • C:\Users\Admin\AppData\Local\Temp\Cab2DE5.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2DE8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a