Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    07/05/2024, 10:43

General

  • Target

    205949d73753a62af1d6489a7087e73a_JaffaCakes118.html

  • Size

    40KB

  • MD5

    205949d73753a62af1d6489a7087e73a

  • SHA1

    62b84f9af436cf617cac96f8ddd95c6c7a5b9ead

  • SHA256

    79430d97ca84e6d59ed10a01c150c67624cb2ee4827072ac8e723e1d33abaff9

  • SHA512

    957104ab98e99c58b9876d185450fa3c944c1eb228edacb038c23be088bfee5ae1fdca3fc5f2b099723dd6779055fee7089acb25b5ad260e521c53d623c50846

  • SSDEEP

    768:DayHHvPWlJXbHFJMjui98raxC/HzBlkjHYlEupSn:D3HH2lJXbHFJMai98rp0Yle

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\205949d73753a62af1d6489a7087e73a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1320
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1320 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    648c85839e7254a2fbc93f592bb7447f

    SHA1

    55cdd89cd957f4fd1969358ea24f6d68623faa36

    SHA256

    20b6e820f80d6e85ed693c25d89059dce8eca4be24fbb2393c5c7c2fc409ab74

    SHA512

    426874318871dc8f1011739836380ccc9fed292cffc4688a9eed74d2a3c6e0265c148c093db31945f8e73ebe8aed43ab2b0f936d3ed2bf76adcdae17e8c716e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    472B

    MD5

    b909cb34371efa5205a8265edb2f6561

    SHA1

    5b764039bfebbaa50a89dbb69aa3099821c7cf8e

    SHA256

    358996eea4ffbbfc391f606dcc4c0e679f3cfacc0d8690f401aea8afd345e9ac

    SHA512

    d29bb7ef151e1dc05257041853cbb006275a9d672583748fc9b58f4d09acd4ff61c045e784a6937931a759542f5e05a01f74b5005c8dfe56271c2e392da5eb25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    8d787668e926f479ca94f9b8504b09be

    SHA1

    9f8d27820aa3a3a1274a3ad436cb107f62219875

    SHA256

    8cbcc8960b341e7b87cbb1ac3ed44c954db1ab15c2d0180be51f129ffed9e700

    SHA512

    6df2f474afe17c7c906cc8528b55373ef3ef44c213dbaca286e6293aadd1d2912f4849c376f7b47b8f3abc3735217bc1ff480e9c8674b6d6ece0647e77b80a0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89d01d6d9b4cec7bf95776dfa97e1c93

    SHA1

    b2c43d27903681bb3c595c7bcf8f427c032e8dd3

    SHA256

    3b7fadb548d40f6f50b59369f9f5a99a233ec0f69ab30bbc967cd9408e5203a9

    SHA512

    7a8b7866b9fc39acf0705806825ebf72d2e6402052f418a9f6a55d06407847162ff6dbd86c3525f28cd82533b16e2e99bdbcfd3de673cbdeef6b9069deaf7978

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08f7a9af699870f6f84e4b96b6b509a6

    SHA1

    567ef322245faaa11138293428fb33c7e53ae2c2

    SHA256

    e0fefcdfa7c2ef66be7a0bf985ece0840be15969c7ba8093395e21551b4e1897

    SHA512

    392b38895b23977c40504e5b15d5251d94601d585e4233c12c9b289cfc3b4f5637b680ceaf1681f4d2597e5b17308034180c434e7d6e7094a342aa693a72cb47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7aa2f1887b1e6a590a0d4ce998833091

    SHA1

    1b03c12bc84e1a20afba2419b86c4b09c8c08d45

    SHA256

    89eedcdca5b6bd83631c4e53e4e7b442e4d0a374abd4bf842c75e197d53fbe6a

    SHA512

    f31f2857ad30dc56438b480bc8b586156f2e628f558fcd722d754fee16a3c729d70952eb29310d4f5cfdc18890b7b835fca0a85252bc989d395293f4bfdebc5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43142329146b6a0dc1b4362839d99f39

    SHA1

    c900f810d90d7fcd3b23e47db168aef0696e3e29

    SHA256

    cee80a591d394f852b8076bdf99a69a3af0f8e9e21dac485c772e6f1b13639f6

    SHA512

    2186b636ddfc116e30309ba68631b6b0025b82402c42f6cc51654a3048d3e11f5efe34db288c3da1af4e1e457b8bb7273c723e7c52b52f9731a6cff685522ecc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e7a394db478a2b3c4edc5fa09d752f3

    SHA1

    035469d40b6d085ca29667ff5af7181f34b0f4f1

    SHA256

    8a89c11b62273aff967ba20673a9ab05966f94eec93a2a586babd1e0ae97b882

    SHA512

    047d53874e73b528d75fcc0694690824274451b5754b32d589cae10b965d7ebc87ae378ecf305e9058ff9e770e7413581ceb6dca2f7e7216aaca467abf441971

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    605ac96e0d7a734c3bf138d9b5003422

    SHA1

    be7bb687c33469b9c30b013b040100bc7c321d3b

    SHA256

    04c44bc517e06432bd7b0e7b5a3e30dac4551ac941ed99d7223a74d3f45ab811

    SHA512

    623ca8d557f0a9881ad4ab6de4006bb36a7f315337459327755dffd78f7f6258daee9e1b333603462b67175b88c41a36cdea93db6df43ca5dc6cec943f96922c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cc1f72113f5e5708efab2adc801c924d

    SHA1

    17821fc3ff11e32a332fa7b79dd8e1b3e07b3728

    SHA256

    a3f8169e693b133b57f0f46ce763458f8bec139f1862e922ad50c7aa3cd97e90

    SHA512

    90cab2497f475de451add51c0549d29f7c52c79e73e1f18003b5e613095e56a3813c8db28b0870a9d1e481cbb7c2bbd5e28cff1aab48fe7b7c3c78a252bfdfe8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f5182c8b8676ce702fcbeb603831c5d

    SHA1

    a271eb9df06e4c23b8e0d3ee4a16a7a4b6266a0d

    SHA256

    6eae138fcbc013414938ed51e5ac19843132cf97f8d17882b970dcb0f726e2ec

    SHA512

    b8431cc12bdf986f63621242f31968c65a7cd3e30ad47e2389d291aca9169c1c38d8a8731b8e7b7e9e536efe30f5246addd81e3735cde4a391cd81deb3776392

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5bcf4a6222b3d1627518bad5de5b3aa

    SHA1

    455ecc605d67e6ccdac5006c09c3ab1a548352a7

    SHA256

    847fe8c21c89d7ce282b4ea22a420cce58aef9090ddc048ba0fde5a942af2386

    SHA512

    4db655066972f8f84650e96ea8c956e0e8d403e803e8f56cd0ea83c3f4ed186c7fe26ad4b6a77df4fe7154a2a82e497902f3cfcdea7be646465563831d27a871

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ed3c2358751c2a77c9c859f4a731cc4

    SHA1

    aa80569de519bf54f9064402ef8f7463b4265cfd

    SHA256

    7ee468a53394b4ed6459c9a1d19372d45cc658fc46eb0263e0097c947d74ceae

    SHA512

    4e7e06b6a1db5a5a6dbcfeee9b7c99f9cff396100b392b8559f35afbab81bbbc8ba89ede8c6550a0bd70112ccf9e1dfff99e5ca46c7e598527ff284ee895a95a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f14c92e4b4bba9d298a32855e7311b6d

    SHA1

    ee32efcd4e18944a71ba798a00abc9920e5e30b0

    SHA256

    492e624b3d8446626e188f4adeeeaac212fe1c3c899fb6edd1975395f199d20a

    SHA512

    342987ca5150719559a0aaa83de951e9f16761f1334021b256ec9ffc37dcdf01927c45edb47270d18e9be779fdb83b03c38aba01ff18638ffb95ed3ab0d03c57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    910c7df9c0192af2be6278d9a211d2cf

    SHA1

    a2dc3e0951f43ad312b70587b666d213a65d1d8a

    SHA256

    a63adaac1603de963db2ab0a3ce5701392f9d8608ed652770244236a79ee81cb

    SHA512

    5cd487b7b2cdc7c1d1e228bc8cf54e88d96fbb258d6a8025b4aaafaa00de4715e3f2ccfa7086cb1a0e0baf57729a4b752aee41e7c2f56ede0e1c8892c465896d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72e4daf5276bf8095204da5aac2b7a8c

    SHA1

    54bf532d5f35bac077381829f63661834bafd2bc

    SHA256

    48fcbc0f50d7a78d7cae7aa88e08c966ad236ff47ce75c4f3a2630e3c50d3640

    SHA512

    29781795b0e51ce71fdf1b729979d330e7f1f4737cfcea9fe42d08bc86fb7d132677a95f8be4ed769550f9e755f3104ef7d72b404a06eaf09de188643831c281

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b58b34bdc91c23b5bf5f2fa92d5a9ba1

    SHA1

    82cbd5d637a9e2d1030cc431e444fd4b81ef8e1f

    SHA256

    9680762cb0feb8d3ccf9b892c7eeafdfe109c3255fb7ec74e485ef617b4c7450

    SHA512

    fefdd55df003db5713275cb3cf0fa72355f6f45f471c5669e9ed0da06a9bd15cac8da699801cc8e7113a5887a18c17843af23f32315a329890f12c37f0863b15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e49fb9820a27024cbf42af7802569db

    SHA1

    0f89c5f2c2d472ead83bc43e640a9769e220fcbf

    SHA256

    d618271fe50545a7b468dd05eb116e40b70991a909d4cfd4c3da41c418ae0a99

    SHA512

    b2b755732add94fcec3fe8dde81809fcd1d927e123de8db97864d584f1d8c1433545bb93b1eece8ef4e3b773ea16809aa24aa449da0fbfb50673cc76da46a4e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eb2e0cb93b9412e2ece211836d75cd5d

    SHA1

    6862aa94ce42e6a7544c8765796fd1b2161f4445

    SHA256

    f0b933882c1dbbc2ef134cae81ab7a6e49a2450e840efa0ceec310b18da8fb96

    SHA512

    b8fbba46b13f101079cf2a202a255eda58f9f5fb762e04d497346b08ab9d53d0f20a13ece4441dd4d01fdf2f3d8f4154b6634581c61209d7e31ba44eee142fea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5974a07f94ac637d640e29e192059e9c

    SHA1

    3db1c41f5a3e5b14769bfe8af916f17e78f1f478

    SHA256

    bf3263ffdf2722a284133bb99e291d711b78da2404b57f2b3beb46723eb47151

    SHA512

    16465b599105f3e7b4e9704db00278ab0382c3f4ad7b85c7ed16621b432b1327afc8dcfc4698cf7c79e72f07d720f31f1b1a73f2e77250245e01bd83b144fcf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    b0871176240737bf71e7d04921deb9a7

    SHA1

    eb58c6bcf8b388194ad73502ac2e7879946ee39f

    SHA256

    ebc5e724256de686b23dadd53c3cbe2d14fd4d15b84b274b0c98c91f632b69ba

    SHA512

    2afed2dea87230c3fb8f9786a986c1da5211d687ddbe3268fb530f6b4a5f3221507ca7731d22acc6af966cd830f8dc8c04d76e5e60552d07c0219f57168223ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    8c3791f620127ae3cbe79cd52b99dd56

    SHA1

    125263c5c2030d1f619a388d47a54b7426a20447

    SHA256

    f06579a89f6c5ba075e8be5eaa97049430cb90142879fc7cb33b2e3b4f248855

    SHA512

    535c8c6422f1a60c3fb79bae9b20e6268ff81f8e931e1eafb93072be765db9ac532b7b5428a4262684bb8e7258a17422d952dee638f02c3c5cf8aca8362c39f2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OV51DDG5\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PH7CXNA3\cb=gapi[1].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Temp\Cab203F.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar20BF.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a