Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 04:15

General

  • Target

    2d4a5322cac0a4718a7e38ba69c92a40_JaffaCakes118.html

  • Size

    415KB

  • MD5

    2d4a5322cac0a4718a7e38ba69c92a40

  • SHA1

    2f4d3e8c6dc224af39e3f0638db8025bb9c19fbe

  • SHA256

    374c322d0ccc2c280261e9ab2ad60d9229ce9565ca5933fbd247d41809f520da

  • SHA512

    1b05aaea0f62c33977d0f07629ea893d153e8db548f720ab1aa9d828ddaa64516a5d51c5dde0e94c47d71fb1c4a4922d7c74c9e8f0477f5823d44abe0b53a8a5

  • SSDEEP

    3072:/r+IpBxqEcHvArtTb9zGDlHAZfyytoCG9Nc:/r+IpBx1ZGKp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2d4a5322cac0a4718a7e38ba69c92a40_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2284
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2284 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2304

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    b6e71adf7324685d8f60c97bdb99f892

    SHA1

    ac45dd58c3dfb5d68ffdbc27817f1e5ad5720830

    SHA256

    40a181e9a8b85b862afc89a604eb290be3b5cd68937feb9ccfc467d3589e8e5c

    SHA512

    f864a712e300632059c0678ff5f54412fc7f7a1db02e469bcdc77be452886b55cd3d08ff51076278d1a21b091b2fc459e30c53b0d8e8855dbfefa59f0ee4cea9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    472B

    MD5

    172831834ea62b24f27ae09586544041

    SHA1

    1bb2f6eb9c319fe96051c9a7db6cc4b882912471

    SHA256

    c88fedc9c4ce58c474cbda40048f9c60ea139d81438401ca3f9f38de59e57319

    SHA512

    ab2e156cf49e575074aabec3dc76df497408755944acb34ea9a67f85eb75bfd1fc4eb898b445cab38d6cfb799288668ca6ca9338422de9d774264dffcda4de44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    2811ded8891c24433e16e718a68801df

    SHA1

    a84d555b348ea217d1e2913f49a14692d753eb53

    SHA256

    477651fbd2e7e05e268a144adda2dfb5adce4b183987bd42b7d031edbd0ccbb1

    SHA512

    53fa2570e58b78ccab772612ef0a52ad346dc622e73070a6a1c88fd2aa5aba930e00d5a59a4a2fffe0bb590014feabde35583b2271202fe6fb3596c8f4d21f5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    a18271409e1d27f6432e44a83aab9bab

    SHA1

    1f267f7031cc3a1b3e8e2b8d860599eb89a0d327

    SHA256

    2d3be4282300074c4f40462a35cf4f1b21dacad56496949dd6d4c92bc1466a4f

    SHA512

    284a79fe5180baa577344af42724a2c2f534b6d2b945d7791bdfd26573658ea0be05c39baef4dff290c8d6311e28539ca5cabccba6f14e8ea556efd262e1bc53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    0e6cc669bbda11f3742326b9cd3dc313

    SHA1

    a71ecb9c28180db3a8b5542c3ecfac3361705d79

    SHA256

    00552945b8a1366b8a0ed87d04375b48ab3441bb9434726a621ab19d3c523bbb

    SHA512

    3c665ce38997ef2a47b72a366ccb67508cb2cc787c3c63a1320d458464b036314ce09f57e99bda25a5ee2879242a77cc6aa49de570f123c782962c4b8cdcf3a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    946e549b84674a2c6ded98759ce52ccc

    SHA1

    a5c9275446bc95e5b68ab4fbdc36cd0feae7443a

    SHA256

    1fb0ff8f092d61257c1f8e3117558660cfb8e3efff10bd7b497616a39729b42b

    SHA512

    19880f2f7d7540084f8b26a4f0f9d982be1d8284be3814bc878915740af83473d261a7e037214462ee1016da3bd1c092098d5d31ea4180d4c313e091c898a4d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    893039a235a1afdc07bb5450d949e32c

    SHA1

    d4ec4717e3174ba94f825c1fce46a4bc6da6a800

    SHA256

    9e6707f0bac2fc40251278bb9553a103e3fac132b1557e01abb8b4f82204fcfe

    SHA512

    e3d9f62bc2102935a762747f576707adc534c5a3e3c3bc6b98c6a6d401935fdcf40ae7c33b8c9f79a3348f5ede777b134bbe09f0a57a388db87af153bfbd6228

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c49c75d9372f4ecacf7da4a5654b1acf

    SHA1

    8e2b345f461602ec53c12a630f6c8f55be5b74d1

    SHA256

    ec8d6befc3af37e7856e50d98ea847ed4e8b5e6e736416cd66947e7dcb8bf703

    SHA512

    9656d3a026510827b379f4c7c83019e572f3d8d113cda22f1f5c671cb87e4361dbfedcddcdfde47c83e7c4dfd8312e14fd17ad036e4ae490fa08f849f59036c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24222dc44afa8e440de38870a9c00373

    SHA1

    6b4a99192dd06417a2c352f5d32c72dda29274d5

    SHA256

    8af3427e8de714755ba60a1d5d5183c8ef2d3942dca6344e62f015a0be65bf87

    SHA512

    c7588afa135f185836ffb9ef275125d51ccdd4ede7da3c8d1f512c0b4363f0b47d66f4685142fd370707a702c92a6ca25b2424323a264bf2661b8bfa53f1b3b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c30f4b44fae93845d349535a6a16db5

    SHA1

    b43270b5d49777129ef5da19fef885ef7f25f077

    SHA256

    dd3cdcc9f2224bbe991920951b137acd2f86847e48d957e9ba89873652365506

    SHA512

    71bd881ef2eba9966fd66f7e4e96bb39b503e21d35cbd894cad62eb04078c886b32ec97cecbd92dea76b16b1d7e68e7e1079a175dc2c47ef58b49b8b3976d3a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a60baa424f0d013f2c82220db05fafe

    SHA1

    fc2877f076a5fe6d9e5397927a2411fa59897c13

    SHA256

    8fac8ddf163d0d5cfa9c252e768def0ced06ee092f4835a5aebc4bc6f01e6a1e

    SHA512

    d21669ceea6aaad9054c2beeefd252c2143f8dd6a58524f437d801f51fa65f8b005b5a1cc9ad089f6c924a2f42b8ad5331688b541a1b8db9a08419bf208288f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d9172930b6365fca3232000f031c446

    SHA1

    d6759d50992ccde658fb2f22d92ad499f3d9b64e

    SHA256

    563e81f37983e931eb4631a270de6514292a0c3219a6f5070c360e024884461b

    SHA512

    c88a1e9c830b4f682a6fc5a9127551f5b275dfe0172f1337cebd8e9eec79203655c7534ff6aa2b1fcdcefe30f1026f84c032a7a6bdab089e877ae8cf2791fd0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28be5bd15a4886313255fd670a1df0c9

    SHA1

    17863014b8fce40edf0985294f31b515b50d030f

    SHA256

    bab8f3a2413e659d55b9ab22fb9658b7febc9365b224bd543dc98567fcd1c66b

    SHA512

    1e1b880d603758df76e49c9911ce1beb3fe17ba8d5e2ecad0cc28fc2a76f1aeac6ec892a2027fd5c00806db6889ce23aad0e84eb86dfbbe1bff03a9c072eaeda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8fff6c9bb13396d0f7ab70b20110037

    SHA1

    8550a930bd611f702f4523426e07b88ac651e45d

    SHA256

    c3f54b4594b2f8d38a322a9c43c8e55b8ed84b5dc1e8ea7e1c81eb9106d10c9d

    SHA512

    09d2c3ee8ded5c1c8334915655ff487c07f5485b8e900d9b10c2a6f1a9265ef41842c9d0090a75868fe3ad9ce1cfc5d94638b8225b77ecffc12b89ebd020cf3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4874998f6e9b794b629de31b3e9746b1

    SHA1

    ad2a5ade0b22317f48b92ec43a126d860cf55e7d

    SHA256

    ed17f70ed057e39e3d886449e6ca302f7eb900ae5c43aa0b7821cd56304eda38

    SHA512

    ee621472bff77531aecae3ed26f8784a6ed85b1470010bbca2fc70f1b54cddcf9b3e9e21428c73de9e3776baab642d258b008164d0843337ed8015e2771cdfea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13af32568df7d625a20751c965e1a71b

    SHA1

    101901957d253b399bfe497cad699b1a87ae0293

    SHA256

    87fc327a07f8530f0992a15bbb364c250d8ed437d0477e155736ac2e91680c4a

    SHA512

    86941beb9ce20b30da2ba68b991da0450655a149473ed2c843fd687f794c1e53a5e164d080c08cebc2b3591b3b87cd679f1341d551845c1bf145940047c254ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c01044c9841789d629b87a7abf80c333

    SHA1

    04f61e2b1824513af3fb528643078d705fc00560

    SHA256

    381a06d1b69874ddbdd7b586c47ae46107eaa9fec14d6f5bfe426e05e6cea67e

    SHA512

    d93f7116ae81f9eaab7edc906f739487dca7b59fc3b7dd0029d5c9b5f6a5e405d41318e902a4b2f0ee083ca282f0d5911e84a5d380c6e07008427c65faeeb8ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8a432175dcaeffe6cc8fedfa4221270

    SHA1

    b431f54c7a9a1922c689af51a3348ed2a7bae37b

    SHA256

    89206e758bba7dca510c5f67c78f7ab000786f1df890f50999d776ba7cb0c629

    SHA512

    5ce606354812ce2ab6035b43536018cce04d2eaf3b1f73b0f15b1033e13c72f8061b3997d803f0fb94fe68e0dd16f9287f4e8932703e4c07299c6ea07d9f4316

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c00e4037977f74ccc336ed5f7b3f2f4c

    SHA1

    8605e705d76b9b06c904732862d47822e283e7ab

    SHA256

    248e26b9ff04d24eb8d5ba1c5c8001129e196e70b49ef061bf7d4a1b69d05730

    SHA512

    d4b4f969e62290986bf46c14ebbb820c5ea70028c47dc76c2f3e73ee5297437d5f3f0d275623492c6a297591d5f0b204be6c10cf9e4c103938efd9aefd2c45ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cec6ce20fed143bc20e1c0c9e56db506

    SHA1

    48009fae8e26c13fbfc5c97153d9db9ad04c5d87

    SHA256

    b0dade85748c2ceb9f138b8e214386bb2b8387b02b61135c84c0fccaeb51504c

    SHA512

    29cb00931ea232948fcb4aa2ea47f0a902cfc0c5429fd03eb50ce1c166a127283abcbc89bada0025ed1eaf761c4cd04f882468f519584f2d0b6397e06ee81d1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    d6d5625c55fde35acc7db0a26ea0d795

    SHA1

    8a725b9825249ff38dff338f37cb9288acb621f6

    SHA256

    d310da140e021ffae2677dc36beecb3e07ce451f13e2341c308ac0fc39d30118

    SHA512

    2ee0bbc94376984dfa53bc659cc77ccdcef55d342cc93ee1a635f7c93fb4eab6d76adb205d5687150a525e54f22aee4a601aecdc85bd29a1ae9b4f7109e9b9e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    db6cf14f16120bfd98a64000ade998d3

    SHA1

    a68dbe14552bc9b80af444d60aa5aa65c6eda07a

    SHA256

    a6184857b0c9f1e669c59aed8fccdda4df2030ecc8cac65eb5f4728d58f21a6c

    SHA512

    d826b7101bc27c4f70216a3542fcf5724b6aafd17cf5689a73929bf61a0d464af1fe1b7286e922b87cc7db9846d097a0489ab438143a6946334e864a85fede61

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO0LJX84\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\cb=gapi[1].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Temp\CabBF2.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\TarC55.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a