Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    11/05/2024, 23:08

General

  • Target

    3708473647d7f756ad365b82f04d6060_JaffaCakes118.html

  • Size

    48KB

  • MD5

    3708473647d7f756ad365b82f04d6060

  • SHA1

    38d4cb2b03e2b125a7a4788c1cd58b69c56c4747

  • SHA256

    cd696d9631036f24db429a610e66c87b521e7aef85e99d969fbaec3d338cc9e3

  • SHA512

    425f2b206c017ec2ebaaa2defad9a37ebe6aea0fb0a45a5a0dd6872cf795a1eae106c3b154c0f901279389ffab569a741558cf732eac9e7824ca3825d3996d65

  • SSDEEP

    1536:6OREe0xWEta5NHl72WfmRQXBzZtWRRM0Ss:6cGWEQF72FRQxzZt8Ss

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3708473647d7f756ad365b82f04d6060_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1776
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1776 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3040

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    fe2f6d4ac18e2518d4e7b0eff689aba9

    SHA1

    9029ca3136223a6023970761743ef6e8d70e7395

    SHA256

    c55ade89e989ba6ca26dd21c4bbef73cf3fe071c39d9eba12f153a09e9ccd7ed

    SHA512

    3c96a243ccb80ee62a1ed7f6c1890cdf190e9124909eae9cd713c247702ba4a150b0bce684150e4916121681dfad6f9d9e9e9788cacc7efa7cbe4e33cebf223a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea933d78679ae91b48b60e14a0d2aedc

    SHA1

    119f791d95cc6192ce623576ca4868a509e08c04

    SHA256

    68c4c5cc381f465b8e943aeb1baa130205030d3b2d0f254a5801d2cb3b15b5e1

    SHA512

    e1026583678a538b8a77d64dcbc9a4ab00305588959d3b2ad38968803edb6de3e1dcb42412ee470a62bee67de432cdf9324f1848d9879c7d843198bad8f449ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33d451e189a3a76e955262512adb56a7

    SHA1

    c2bfd999f18448b1cfd6d00a8c0a40ed20ae3598

    SHA256

    0a2d5fe52806f4203bbfc1c48421a1481c032ee618a044505f8959223f2dd168

    SHA512

    a5da188ae22b016309a0eddb22d40888c550dddad34082cc0b24739ad291ed51d2b032506320271fc494678bd4e021052f078538b9798bc7503bb483e2e1f6d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6daeb08a0a1b60a6647097769b4bce83

    SHA1

    c911f9d3950392102ac856b7cb5856c250f6626f

    SHA256

    6c6ce370d027e20472fbb8375ad24302242de27a2575c4f13c5f4dd6ad01ae2c

    SHA512

    7d2e1cd0d84e9c26f66dfafcdb2a1711d5ad8d1d46f848f451fb2160396073204abf50ad504cc2a36ada03a32b652fd5ee1f8b4141cb8c28a4c29e6dcb5696c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f6cce6062a89bb1e38b1e09c035a8ca2

    SHA1

    0a9e0e3acd8524e1010c178b9f7c7351f63815da

    SHA256

    0b1302c03acca4d68fcf37c44517b4bd9e2de740dd77481b222e4bd063bcf7d9

    SHA512

    201757706ef18abd0d9bcaaed93eb1c64642ce66e1da6a58d06d1083dc4de94e96e1f9790d28f168a6d077d5a56d4ee75b50d8580b72cfc4da8c549322cfc7a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce159ed7a8724afd10b6da7dfbd5086f

    SHA1

    b0df38bd82ea7f7451d35772455cd96c3c8af039

    SHA256

    a79b34f4cc4eaadd21a2ef2af54a1ce5795fa69836db47ad2bd24d496c6c70b5

    SHA512

    74dfd8402c26bf4bfbe536549ab06180ffdde0fbc8afe7aa1c5f78ebcfa40a8e291c5f74d993711390832b6dac6cca5d97be97d03cabe8daacf6df4950d71353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45085bdb47c257363448d99a6aaa08ab

    SHA1

    912080a222a1486aba8ca6e18c0b344bc9c0e591

    SHA256

    7fa350dbe2e70409bfea7aba401b30fd181b5a98813da045f6f9ec1f064fce35

    SHA512

    1ceda00455ab65a1724ad3a5bbc12d49b3dd204ce1ed81c97aa2b9550cd8c4a9fca39fe743829aa456e9f37b240d291e5d55f9765fa516d2059bd03e40216afa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    58535dba4209c8c48be4c6568dd441e8

    SHA1

    328f3d878172da8242f6a15295af66478d926caa

    SHA256

    abc49c834ae55b1f44d6d3f0a9f748f0a98a8044813923724ba91e715a1a5929

    SHA512

    ae1ae6073070a7763b141349dc8e5983db03e8a77d1db03d0b60f7cd8a034ec835a54c7bbc4ffeadcd2082f4fb7c07a37e92f83ab83fc9c291cb51779249ff20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    32ef08778c19ebaa005eb795e1b1dcc5

    SHA1

    33c5a30208e913e8886931ce7c8141167fd6d0cb

    SHA256

    6e54cacd250c1b13d8e8bb8aae5001fc4325fba583bd206d27065a27682c2961

    SHA512

    c57c964e4030fa29b99e1ced4a4885ea1b74dca31ba36833d08796bb0a698a5bc38be3350bdab351ffe4c7e9924e8ba5ae18c97d0850807a567ab5e14a594461

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21693a361b67fb237610f472a94dffcb

    SHA1

    ad751f487c59cc7af949bd324faaf79ebc9183bb

    SHA256

    ebc4782a9f23c9e4bc99a88803ce8e7c9e42656f0d094b4d10e1f6302dd2e6b9

    SHA512

    84374fccb05b9cc2438588293b9dd1640ac13abe68cf4dcd4b1d98fce0ca4185f54de487247bf2f73b4893d6baba3ae03b7b72af638092fac2fb5d553297cb53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66a0a8ecb78c9eae1e54d8f9bcb60b16

    SHA1

    61522c9aeac64b711d3d02e4293af2c9808c9b7b

    SHA256

    5d52b899f84ef891f3a97679b6e3571fcb3c416b20d2d4fa49c4c22203876b3c

    SHA512

    a8449abf6ae351d6c1ebbbf032dd6324857e58df5358fd7ce8ede150fa1ca79cdd52da711ed9f0f00a2d1972040b9c127192e615cba691bbc26c7fb12b4b5b03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c3cc668c9ce5bac570808a8f391f0cc

    SHA1

    c726420b2d714e40e5cfe196344641acca846963

    SHA256

    27a83c9ecb943800d82c5b94b334fedf36a08ef9221d1b2b6e2970296917a297

    SHA512

    e44e45a83f50e6d8f3e23fa1b523e575884846b9e89f9655cd7a81d7fb3398d25bd561cacf69340b1654b6d93b67611bf5bbbe934b795bfcbd5adf091a6a39d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a1de0534ae8284af541b7bfe7d1939b

    SHA1

    1c925bb83c761164dcd844cd7a2eb68253f67537

    SHA256

    25ea85d8f4c6bb6fc5b36d327ec544cc50f76847b774dee6a407c5887ae12352

    SHA512

    97e051d8580a764cf2790eb18874d922ef51ff5d921b8144740a2006eb026f3ec60352a9199a7afc14c6014cda2d82d7ba5a1e26ffff13aa9f565a9fde56cb8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76b49add728570859824f699ef8b30d1

    SHA1

    af87e7480da8ed714906c36235d9f68bfed74bf4

    SHA256

    71c3c11eea3167499c2b00a3d146b8a611373c0a3eb71afc500ce190df75cf5f

    SHA512

    67514c0c0fef162661eb2e5a34f67a9afd715f65cf29ea302eae547b6af3b063c4ea8c1aab39c59e50619d639ef6869a00cd73682785bce9153f574a424eeafa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9110ad86c6617ca80fb33d1b0e2dda9

    SHA1

    45dbe5d2de7f080dee23e67bcb0da1c8717aadb7

    SHA256

    8f6451f66440e73c3cd89d7496e4fbbd11838c6d6a5a75ea24de34bd6e35ec48

    SHA512

    459f96cc402b646bf49c105267008e49d28473b87f8877458719c5a1d3034247269282718aa0c61569c5a90774691375120913675a7cffcaa282016a90aa5e06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    904250967ebb2e75539e42c9beecfa14

    SHA1

    e2812f24a16913993e2a21554844fd58681e1d88

    SHA256

    58f6b51af34abd53a921e4c8601bf0c9aa25f3db0688310875f239473a1b0cdd

    SHA512

    641b3b8ebc7bf61f394ebfb4474c844880c8c3df397525d4b78e3112aaa6518a4c9cc82fcf5b9b5e2bb2015c148bad8a9ddc600a057994ff7c0e684514fe1e2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53cdd0d865034855634a0301edbbc031

    SHA1

    906f2bda69362260a1e772d0b73935aebfc9bccb

    SHA256

    9823fe304fcf437ffa64ec1f637fa835b2c9232ad1790aab151602cdc36f7e2a

    SHA512

    aeaad637385a0864b26e05fce2ecafd581dde8695bc3e43b64566db60b2ea20d78cd50b45fc37f2dcbc3df9115d13420a49b525ce04eeacd8815b83a6ca271fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a5a3301a0b49f7a3dae3a6defbb9990

    SHA1

    31e1b8a3ae0f2d27518040303d401c986f4e2cfc

    SHA256

    feb14edd4c49024114e5a383f1b00d6dd02522754d29cb165b70dcdf2465a54a

    SHA512

    5c61961622b5799875835921d0afc146214f5c6ab9287dfd281c6f03ad5bf0a29c6ed10d74c987a4126fee9daff98468d9cd57c9c48d39aab0881cc89297a690

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cadb0e8a95a6101bfd75dbd86cb8a5c1

    SHA1

    1632ae26c8296eabc5b7f7175707a9be9599fa67

    SHA256

    e7ffb35db17abfdbbec640282d6857e339adc789875c1406f8d22656d354dbb3

    SHA512

    a1fe54212616a7e6489c045eba9f1cbbde02fa6b4fc433f48a18771f333abbdcd309a551aa740c1e0ac58ef8cee1233a13128b4e25367beb3b4b41159f1ca1ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92826263feb8724f1c827639976b7793

    SHA1

    cb1c096fb2f4cdc379fb77f403e595554a813ae6

    SHA256

    1ea31a4e4e860149f8ed3e989b72c788e908c74dff53548502a50ca5373f1e18

    SHA512

    c8dc0e0c823c4067d645c717f84c887dd813c11889e6b809c11b1f48af0ae746229119086ed61a68d7fb3ac8b37472c7a008ae759967f98ba68888d00ac5e5a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4b1a43c7aa2e682d633bfa7195833c1

    SHA1

    65d07b7c1f3e1b21f35cdb58ea1062847961812e

    SHA256

    24bc6539a174e20b78efd6303a1c86a8ccc31f89868b630499a788fa5741b69d

    SHA512

    4ddc7249762339044f433622b5018f48bdba8a529e85e458824fe7e79047a5c988360a1a7c4a6e2f9eec6f7b6f4c3cb2035e32a91725407147f7a9642e182f86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    00a9e2c88702a9ebd2980101a0bb08fe

    SHA1

    9e83b113554e843a8c6f071ddf23cae956938fd6

    SHA256

    d07aeef4e54257346a509e71aacaeae3318b2f7caec8794837ece2990246511d

    SHA512

    50fc2238f20b1b406d5648958b7ecb2d7e5a1a63b4a0beb7b46d3f1ff288c2056ebdfa3ae0ba046594c346926e57b66c5e43c722d5938d86494c4fd251ffeeac

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\673IEUYT\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\673IEUYT\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IFGNZ1XG\cb=gapi[3].js

    Filesize

    64KB

    MD5

    63e5a0b45632b3dde3694ffcaf0e3f7a

    SHA1

    923736d0cdc308331d5cfaa0ea159bfedc83d53f

    SHA256

    889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

    SHA512

    5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

  • C:\Users\Admin\AppData\Local\Temp\Cab14EA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1648.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a