Analysis

  • max time kernel
    130s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 20:25

General

  • Target

    3bec45f5b4870a092b4c6eb595dd8b0a_JaffaCakes118.html

  • Size

    43KB

  • MD5

    3bec45f5b4870a092b4c6eb595dd8b0a

  • SHA1

    32ca0f3a5367c26fef6fc6b4f3d71f459a75fe83

  • SHA256

    ff9e5322383ad0a7f070dfa9ce371491a570d4cf3d3a4827d0f671afd1655d02

  • SHA512

    c1fdb9523e5b70982aa998aae73c00b1560ece24fe6ade2b0b44a4a4a9493580faa3fd989499ac30681d78585e6397ccde1ae9a0b41e17b26171adcb22be548d

  • SSDEEP

    768:k5MMlgmZmxf5hiAO5Sb/odVhiCBh41oYeVeRevevoEWMOwjAmRrtdrVmvGyibPBJ:k5MMlgmZmxf5NmA/oLhiCBh4aPgUWvoW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3bec45f5b4870a092b4c6eb595dd8b0a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1784
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1784 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    0cab375b3534754cad0d3ad29383b2fc

    SHA1

    f850dffd3652355f3758a658b7f0de244ed6c20d

    SHA256

    cf612e40a4494479cbb41192ef3e9d72c3f096e2123bb50795bb919957303917

    SHA512

    da831e9b28d1a55ac053fc33bc644cd0a3c8eb995e395b85f3994eee983462f0341735ad6ae2a1beee1d31693d3e3afdbe52c275a0c1526038484ec821083f02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe7efc2c59db372d4a1b6f09102a647a

    SHA1

    745a67bba34bd8577d8cc59c601639a751011ae3

    SHA256

    413f272ad8a606f9d10a03aee25e2b4b8a56d94da13679dd5c756e8b8c9958e8

    SHA512

    c56d99a400e2079d3b65bc284d04dbbb9602ba79d5004b8d990e7f1371090d7591e8193d931d4ba873e8eb1961d1722579bacbe23a28a9e5d2646d51dec59a4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f8ce46e55a55167edf161d8bf0d334f

    SHA1

    2e050665f584ea4bef13edfcf1a8ff99f470c062

    SHA256

    52f2a7c187b069941fd6e31e8754dff363b8052acf7f1b874f47bbde50e2d799

    SHA512

    d7292a7915894315b59b3f440cff7f18c714b7bcfb41f9bb812971207afebe8af7087e3d1a178de5c2cfc2e288f1fadd5613e159f3c26f187db0d2f3082a502a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a6097ca929efc71ece637d26952d835

    SHA1

    a59dedd3517addc20b1973108babca2f5094a142

    SHA256

    ed28a05caeafaf6afa59075a84ed93a21802d397cf246707b82327938296e54a

    SHA512

    0f198b7a2209ffb5e8042d5cf93896860385034b87050fbcdf1ad2671c11097931b4c423c1eca317a42c6e07313be04150ffdb714447ebffd0f1ac40aa0a541d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea0995a81135b954771ebf5e47e49690

    SHA1

    ea3469c86081147de74fbf0b20d488b794d7f700

    SHA256

    8de0679a5909a14c0f28682bc592983e63e7811397339d40429f0657f6104295

    SHA512

    9f91125313477d165434e1b9f07da4a5242f3df8596e5761b65397e7efb43ae0aef715d10b080a7894c4f58092508c1ef436d830e6107d412a58f4233096ff1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12f156e83f8702d65a50d34206a2393d

    SHA1

    a59948a5d47c44afbf87397fef71fd22b9532940

    SHA256

    b4a76a52944475687f6bbc8b10eae9b738c8b0d552555e3546c6050b89f9711e

    SHA512

    d9fc6c7c58ff8ac3f0291d20bce012519f4bb610ff9c25183cf25af3e81d1b231c6ed4463cedc5904652a4d73d276a71ddb137fe2dcd7cbdc2a213ce3ec2371f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57ab635004ceaed376471a4f603442f6

    SHA1

    70d2726c68cb03609ca208b0e96ddd3d90bb24fd

    SHA256

    e030a52bde656b2c4a8de4d5a910e4fa7508b5e732c72063f40b0595a8fb1674

    SHA512

    ed1101a105895483835fded83a2eac28f4fd0db7a4f60484efe624ef2832f4a08c1788abd7f6e5509679ea40ad8eba75d67cf70cb65669fafb77bcc47ed795e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4df172faaddd87f221cab57fd8f7ac5c

    SHA1

    f2b75a5b5b923cd74c2795bd6e05cce5ae8c5f21

    SHA256

    73b2652e17452fea9345b459772988463ff1f4fc538110f78ac0c53e6d198375

    SHA512

    20d49e8ac4eb10e000d18ea4c16b457fcec092cd5ee3e28f21de7a293e477c2ff526dc2bd51767a76bd80b2a5550286b4edfc178c2177262a9fc222d4468a482

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3bb3a1823e3e06b7eacb8d1f6142b91e

    SHA1

    606591c6f359e56faeeba3b6f5ada8ff9ada4558

    SHA256

    b0df08a29f29213e93e6d9cb09941a1ba402be7f3041324084e19a1c79baa639

    SHA512

    5eed71feb66a7eb49eba6a6a8b61ae0ac431cc9996fee17bcf402e6bc3956b501d4bd1b8e32a53dd5c9a7e47ac6052dbbfb08c9f7cc0e54f7cff61fffa0043e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01c34e7b73f9aafad8d274c4d9ee0e63

    SHA1

    f7005a95544e7200071ee154aa05c0f590a67a2f

    SHA256

    5042286cc904665adddcfd6fbdce308c605e30a7986e9237716203812eb68055

    SHA512

    29f7299a8d3a2c1874185edf8ef88da4a085beef787a2090593b1d67dbec8be56fcf92cdebc816c3360ab189eaff3f9e8ec51a404846d2490ea13002971f732b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17ba3c1616085cd7d22e3f4f7ee3c27f

    SHA1

    8a5a86646930d6f0f1f2c586bdabcfc194af9f50

    SHA256

    411bec271ba3b3d248a03ba5992f489856d40a824d6ce873c4e7154903d8f9e8

    SHA512

    a2932047d652a0a8b5b26c889819d2ccf7d3e7d5ab28a8992e57124c3f0c066b38ae5204b740186af32400519f9d758dc1cc55ccf63e5b2a728166aba449e053

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c01ca715e900a51e2fc65989725bcaaf

    SHA1

    c6ce0f04a01e317069f1ff05de62c35422fce5c6

    SHA256

    b323b0ddc59c053919ec5507f29e5df09a24fa930ff09ceb0b5600ecbb0e428d

    SHA512

    3aeedcbc80e6eaaefbecc7b0435ed5889e9eaf45cf2bd3a232bcb9be1f387f50caf019e2e8f55ae4556637767a8c1794dd53f13d8cb433f3859f0a9776388621

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6223be767e411f828e96ff5a360b97ee

    SHA1

    3e0f8aa4afb77ab3f106a5f6c7b285512ef9a222

    SHA256

    37a5665998492221a4a6fc94582b6257cffa3850a359cd65a22ef2eb1e4489c8

    SHA512

    820a9b2b93f23e5cf7bbb36b692c5f0977a830cd98c3ad05b6b60c0bb685d80a0a6dbfc3d7e9770fd674b67c89d2b385d235ac43b9a3a549c74309dd78a4bec8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    749d8f73e6a42a3e90dfa432dfb0d4ee

    SHA1

    b4a65d54ac86b45b5d21ac256987bb9eb19df5da

    SHA256

    d436ec2a6f2723fe121fcbf85c232c59ca2718a48703eb5bdc6c918ceb659f6d

    SHA512

    42b73f300ae79a73767ad5dbde8c7c116ed701ad32852d668e855eabdbd4256246f6f5a92299e15901b1b661892e00c86ab27c8a03dd523269ce713583b6aeba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10b94addcdb60205d89c53855b9e6b44

    SHA1

    b62846a8f6ce2ab1bc1d523e38dd7b6f5415808e

    SHA256

    1942b88f8bccf96934d2792aaf990b42aa114f44a80603cce6777f6b43b64f30

    SHA512

    f58edf6393bae9978a27e91bec31a1bd4633d326a513bc3355b19d477d9d32422c5f53a1ba72e0975b281cdc9331d09a43ad7a4bf48bf527b052f20c2e16e37e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c615699309c8575b5f307b6f33b1dc6

    SHA1

    22d3498e7b3143fbbc84ace068f022220e5ed444

    SHA256

    4aab114dc92a0a30791d192db7d9367034dc5f5211e07a85cc1cb00dbf2e137d

    SHA512

    15392260caa9252e2cbc031cd88f5ab0a86843895245e4993711f6c6d3d07d1619a971bffa3bf10efa279289138e09091dae6b9a52af54b47a22096f80fb53d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30705d02d354a51e527da927f7596ae7

    SHA1

    38a4f86ac071c76374196c7a10bb3044681525c8

    SHA256

    1821f301e8ea8f67f12971ae537bbe87f0b8c27f45111ebf5f066aca907beb33

    SHA512

    8fef368efc2de61219685a97caf7fa8a50ab4bfa5a77ada01c0c87347d738caa845b1860a3e4fda4ddb2a5b60245951f53bf78e8e14edd87dfb7c74907b7293a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54f31ae40144c9f450af8b745f42b3e6

    SHA1

    6c93ca11962cadd832b66e8d231870d70f457109

    SHA256

    0d13c2e34325cd40099ff9142b18926c7b5fb19d10e752b6a5cadc514e2fe74f

    SHA512

    1602ac89d2e2e0f3e4b02b269994b069297d06310d1f56c187ad3112847c5a4b4e5459b35bc82c07898739db3c0a5fe4371f60a2c8072686b780d83ba5d9fa77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d78a364855bda200350abfb61f6afe92

    SHA1

    85383ebd2afef59fc87f14c3b305ac421ddbe604

    SHA256

    ea512ae2ff1afc178df077e732475383411852acf649ea2257fa5d8b7c92efeb

    SHA512

    d65b1c3dafac845759b2ba3832d4b83e893b65a8aae408f920a730815f15c969037c319e53d7a8cd9eb5ce33f023f92b3c07e05db23671ca282f61fe535a7505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    62be1fd1ec6818ca9c3305e6b0e2182f

    SHA1

    204f76065d44550a831d5e98d397ea55ccbbb17e

    SHA256

    609f0ed8c9096320870dae32d8c1a452ae207dceebb448150f1e2970a66a246c

    SHA512

    a5e4e171d03f2e4922ddd18867d6101c52f6377d723197d1b12e569ba42e3ea908080271459f7be70d6ee945760e5d213d829687441b571f25ed1259dc21813f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b084cbe30e36db2815e073a35d788136

    SHA1

    59c48765647fb4d1f66111d8583a49c01af65b55

    SHA256

    6d98aa09a35ff55bd1300434db0e30dd270d7fbf8069ac348ecf291d713fce46

    SHA512

    286013cbf2270b91227a9aaf27e818eb167f04c89bd2bcf96827bc76e70bb7adfc4d6a0593f417cf460a5c871233d7bfbd4242fdb14d952f14b6316129bfbaec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    794c4e99dd54b1133f816ea3096da006

    SHA1

    64d3e8d077624370986ba24c016793da30d2d65c

    SHA256

    65766875c10f76d9156259b3b38e1fa5e9b847251f3fb0d4636bda9c28ae5156

    SHA512

    6ecb37e85455ac35a3d7cef8c99e4f7e8c8edfeeb38fdb0b17b92d4a6f9648094da1aeac3ac6b9a21753a60a12f0c66afe937e436aa0e4d28223616dcd895350

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9M0HR0P6\cb=gapi[1].js

    Filesize

    64KB

    MD5

    63e5a0b45632b3dde3694ffcaf0e3f7a

    SHA1

    923736d0cdc308331d5cfaa0ea159bfedc83d53f

    SHA256

    889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

    SHA512

    5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    23a7ab8d8ba33d255e61be9fc36b1d16

    SHA1

    042d8431d552c81f4e504644ac88adce7bf2b76f

    SHA256

    127ffe5850ed564a98f7ac65c81f0d71c163ea45df74f130841f78d4ac5afad5

    SHA512

    e7c5314731e0b8a54ab1459d7199b36fc25cd0367bc146f5287d3850bd9fe67ba60017d79c97ea8d9a91cd639f2bc2253096ce826277e7088f8abfe6f0534b63

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\3604799710-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    40aaadf2a7451d276b940cddefb2d0ed

    SHA1

    b2fc8129a4f5e5a0c8cb631218f40a4230444d9e

    SHA256

    4b515a19e688085b55f51f1eda7bc3e51404e8f59b64652e094994baf7be28f2

    SHA512

    6f66544481257ff36cda85da81960a848ebcf86c2eb7bbe685c9b6a0e91bca9fc9879c4844315c90afd9158f1d54398f0f1d650d50204e77692e48b39a038d50

  • C:\Users\Admin\AppData\Local\Temp\Tar6C61.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a