Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    13-05-2024 06:55

General

  • Target

    3e3ef702edd9cf7ea3ab3064b851c7fe_JaffaCakes118.html

  • Size

    49KB

  • MD5

    3e3ef702edd9cf7ea3ab3064b851c7fe

  • SHA1

    d7cb00b28778cd46cf9a08f1fedf941bd6af4a8f

  • SHA256

    241638c227ec92646f6c1f7559d1bfab1e66d222f0b7be34837c0fc5c1e794d4

  • SHA512

    d89db37fb7b79480f204357422f1b3ecaeff4247d57bbb8de0aa48cbd53c01c3a66caa45a7a6249a2097805b92d465870f04ef3098b5a24af2cf266c21d0ee61

  • SSDEEP

    1536:iiz0FpuFum44tVobZTVobv32VVobLvVobal884orPhVs:7umvkQFOal14orPhVs

Score
6/10

Malware Config

Signatures

  • Program crash 1 IoCs
  • Modifies Internet Explorer settings 1 TTPs 27 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3e3ef702edd9cf7ea3ab3064b851c7fe_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2004 CREDAT:340994 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2892
      • C:\Windows\SysWOW64\WerFault.exe
        C:\Windows\SysWOW64\WerFault.exe -u -p 2892 -s 1864
        3⤵
        • Program crash
        PID:972

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    3e549b5389bc9c0837d865f0fd5e6f76

    SHA1

    bc0f0274e364e20e9a5a99fb539caba991ab1fd3

    SHA256

    fff9d6642902e0e72199831f2efa86def70cc12c3647dc7907a1f10f07f37e01

    SHA512

    ae68cf24670a2e519333d4a38fe903cd174da1c5e1a76aee5405a09ffad74394c873336dc63e87d7104e9e24fb1cc17f213eb75a830f40e0d6f69bfae08e92ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    472B

    MD5

    63360e266c16765ef03b054c04535902

    SHA1

    7ef99a2ea760e3bb3e7c0b52867861f47ba7a513

    SHA256

    b9b9a313297ee06e014ed4290e583c80d22e00cf0970509d85d2c164fe797c55

    SHA512

    b9790736c90073d43a010d4945027cfda19dcd56090e28a3b95966bf8ce9fa03d5e8bef8f357b6da5e89da7ac3744ed2c681cab5e9816879f844748cadbdaebe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    40b0f453dcdc2b2bf3ac886adad5d467

    SHA1

    7b6e1c5bb9247c1723772c782b54878a6f44ff07

    SHA256

    e2ced5466a0967565bc77c81f8435990145814fcd158224aacdf2b745e7c0936

    SHA512

    91ce9961d7e0d7e10d070e043c8d71f588d1c924de225ea96129c82b13105eac4730949e36543141ac19ed2abe343feb85be13a2185db898ef1de6e54575e99f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3db23b37babb70adde9ca8bb7e6f47aa

    SHA1

    71140e04907c236a8f8c895ebed92f5458a0e541

    SHA256

    57e095f87070ea601cfdd1c6fb42a153780214f0b4072434b671717623a4b9ec

    SHA512

    2f4d0889da6c340fa219b65195f104052a3848fdf86e4a403e2f66cb011bab4a6137a5840406f1a216f463bf375abad3031df4e895119989792f3287048de134

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6c00f942ede673d0b24d43e459f507c

    SHA1

    dac5d548bda871408e1287465eba87463504c788

    SHA256

    83c68e892e18366755efe58ad333b51cef92e400b6b2b348227e3b97d876af89

    SHA512

    a330e3457870694667dac19d8a3e902f276295fcd4ea05fcae34415d0f6d23b15c693205cc7d92c5e044f3452b6d9b2c0b7c3e64630a4298c012f0021cf0d5fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a695ef5cf8b3757a97bd23e6d4ee99c

    SHA1

    376329dd3635fbe81edf565a9fb10a53447e5ed9

    SHA256

    52440653cefa2b9bbbde2d47d505754b8c097c838b6bf3ebaa8c9416954cc80a

    SHA512

    96a15ed125e388c132282c482bc54c14da992e9b5e0cd2160ed9af09003aaebcb6de5ffe3316050be65b98d43d57f05dd47426a4902df3803e42f9129256252d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b3d4d68b46e10209d06a214ee9e35b2

    SHA1

    1718cfe665c9d02ca26145129e19c01e4cf65c9c

    SHA256

    1bb6b0cefc263163dee336cc7cdf0852a4c0f47704821c938ac5671771f20a4d

    SHA512

    b7f1992a65bf919b15a4e2512da33735ca4380c1877fd19f64afc0cd18d18276195150f7f15acc9a81ae1642de765eca56635a94367a091668dcd66bb70c9538

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa0584ffee3f5e7b123bf5a3b55a7b46

    SHA1

    0b8edffa346a5ff13357637a19a26da9e2a133c1

    SHA256

    b8fb26ab955931f8933060c2463a3163b7c3a3471a6408e65a5d5f0a3919cb53

    SHA512

    5d1dcf7597277e6f0a725326298ab8345ae49e9e5b925249e2895081dde6105b9fac4540e45e1a82dd11d7d51879dda57500c426ccb321e8f5096cf8c58e1ebb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1fbd1d799b1ff6d3df740772d4ec9ce

    SHA1

    266994ce8dda0063ffad7681d51476873617b18b

    SHA256

    032ad89d7608aa097e619c28f171a67d3a9df3be109936f96f5f36d2fc223b26

    SHA512

    174f9668b20b0086fb9e56d7ed5e0ac6a25406808c6475e32f0a47da10631205429dbab5ab1e3ed0110752b6dd0d057d7d3857bc7161ed8eacc86c4ec4174cfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    946457ce00daa57fbeae9e1bee5ec2b9

    SHA1

    02d49c36b4fcdf1b809dfbfa85eb77ee9d5c1d51

    SHA256

    c094a9b70c3a63e0c02691c1715b60d1aabd1d4b1a6ac013401eda6e4ff2df25

    SHA512

    8160883f07287624263e1a1f199fb313300b410867b661a827a0c11914f3574a624d84437048c5afe9b52afecb54ad92fc1b6fd380061364d6d0fe881b052671

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40fdfe0645b137460cf253144052784b

    SHA1

    ef49e41eff4039aca4025da100b805f707cb2677

    SHA256

    605a5646cf36b3a1ea25b3482f91059c7c04e437bde35e992d21590a512e38ca

    SHA512

    9bdc8a3a383c5355b3300dac6c327acaf98838775f784530e1634fd86397713c12425c645a92f8a03d0f18741d4f256230ec1d985a7c2eb4e111a44bb2a9b17c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e6114c34e5c65a5795ff9060e4cfead

    SHA1

    f6f5b78a01c8082d7b61192e6b10dd16bcc33c80

    SHA256

    cc66472a655099c92a45f2fbc30549b93d48f521526cd727e249856fe537fa92

    SHA512

    23a94d99e86f5e115a340d44f9e25c6e911b30cdc3d2f70ac915879dc2c36933af7555abc64b89418654e02d363e269add56d82eb15ee2499240bf3a35cd0cd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1283cd07d6991e692593cde9c3ed3648

    SHA1

    f1e4cb68c0405f7f246d85931535d6bbe306d50d

    SHA256

    626e33383ea5d0e8dea695868e70022ca248cde69ea22a0edc5da2bae400e6e1

    SHA512

    1200284bf40272d46460441db4a999f5b89120548ccdf079c1b43d387ea53d6ad0f73d117d69fad9969c6b82b78029416aaf5431d281f196144a0e97ab69d6bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76fecff834669b478f37b77427ffa354

    SHA1

    c310af603909da2911ef07bc7e7c08383840fe37

    SHA256

    79cbc95270eebf542085785a98ac79cb8a57c9057e5d38cc796e7d4ecc2a59be

    SHA512

    667adfb4edceca87a2cce7f67a0e789b7e6a0845482c59936735c31e1955119a817bc45931a8223aea4292b0362968d06f9c5c33921e074b189455ada0faaa26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    406B

    MD5

    b8031c6f726193ae0d0f6a82e2f26f84

    SHA1

    6de036b7ed38c25c9276ff56e0584dd9d8f94865

    SHA256

    65879cbbcc9ab6050aa1e27bba8621c0a9a55b11740ecb782cdfaf0fbd6a416b

    SHA512

    4decfc91500808a412a391fd176436bd09f6c07b7959727f82d8a556fabf7df1fb4cdfcb8522c5a9e21f0e06c22987f1a27b684e112f755ffc0869dbcdff3613

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    ffa27d514d073b412b61481cae516e28

    SHA1

    4a9be317c9bddcf7700b43873b369873a475a616

    SHA256

    6acb5c305d4415eda5ebce270a3496dbfa708de784c7c7d08fffcda92c6ba734

    SHA512

    44bd6c8f96bddaa20b7c1df710f9fa7d20829cd2684fdba564c440d78519b49a9615fa6f3ed0df90152b75dc0154206d2dc64487cf2bbe8116cc43ec7710643b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    64cd1448b8af956fd9eb450c6458654b

    SHA1

    bc9d17bff3a30640400448ab8397399ddcca1ea0

    SHA256

    a1ad97e937da9ed2c108bda2f87a59a88fc6e55f5ba3b8324bd93d78b2076832

    SHA512

    f88ee0ee93b1917efd3633e20a3c26c82fccd65e66d63404aad2e73ec084055cc1cbe7b8e7ff40cd66007c49554db8a20f0ee08de403a17e73a13914916c43eb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4A3GDWT8\4144282483-widgets[1].js

    Filesize

    132KB

    MD5

    b4d147d88402a29399ce4c874ea032a8

    SHA1

    b18c1ffd0e3a312565bd4abd46b04df1fffb2775

    SHA256

    c7b11f8b7b21baf8afcba3aca4cff16acce404ce26e84bb86efd9b553c018dbc

    SHA512

    116749a3340b14c63e007046dfc7814e30327ec8ec7225a07478825f9c659b5e13fe704d4c66ca7b8dee117ca451b68665d0be0bcf4ff000de805939ead3e1d1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4VWAGJQL\css[1].css

    Filesize

    1KB

    MD5

    7b0ca4cd7ee18f222bdfd238f40d5b9a

    SHA1

    5f41b254de35f594123503a87dc0c9ee304e1527

    SHA256

    98a1a8818b3b650bf2b88c2328dc0941503bb510e366722081c5a58d9a92f61e

    SHA512

    50b408f0c8802edc1cc5006ff29d09143ef66f72e567bf67a975f2c78e24f8a131b3742cd173f5ccaee3f2705504fdc6549c193a48cf7155cf92a8563cef6d44

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4VWAGJQL\jquery.min[1].js

    Filesize

    83KB

    MD5

    e85aed5c30d734f1e30646e030d7a817

    SHA1

    b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad

    SHA256

    8f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a

    SHA512

    a5b7c4911b530b4b550838f50ceda9d9382d86aad7cb4ff13c897c269bc7ff350ccf01487534882f294749bc19f3398f0b338e1d8b03af3dba1ef382168ecc9e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4VWAGJQL\jquery.min[2].js

    Filesize

    91KB

    MD5

    ddb84c1587287b2df08966081ef063bf

    SHA1

    9eb9ac595e9b5544e2dc79fff7cd2d0b4b5ef71f

    SHA256

    88171413fc76dda23ab32baa17b11e4fff89141c633ece737852445f1ba6c1bd

    SHA512

    0640605a22f437f10521b2d96064e06e4b0a1b96d2e8fb709d6bd593781c72ff8a86d2bfe3090bc4244687e91e94a897c7b132e237d369b2e0dc01083c2ec434

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OWMPOI0H\pagenavigation.txt[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XDSWMM6X\14020288-widget_css_bundle[1].css

    Filesize

    30KB

    MD5

    5ec495a540668499224a6ecc03a0e90f

    SHA1

    56c4b560dec53b4c20b94d14579c398ed9fcdaf4

    SHA256

    cab30da88a231117c2a5ec535b0c4caec1c1f86a680f3077b272ea7265b33cb0

    SHA512

    ed6a0629dc6f947ac190ba6c83b15704bde9669b8d7c033bbcfb61b98872778d06cbcf25e1294eb73821869fbd8b8b1d22ce4a5fa8edc234cf8e49a8a700ce5a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XDSWMM6X\icon18_wrench_allbkg[1].png

    Filesize

    475B

    MD5

    f617effe6d96c15acfea8b2e8aae551f

    SHA1

    6d676af11ad2e84b620cce4d5992b657cb2d8ab6

    SHA256

    d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b

    SHA512

    3189a6281ad065848afc700a47bea885cd3905dae11ccb28b88c81d3b28f73f4dfa2d5d1883bb9325dc7729a32aa29b7d1181ae5752df00f6931624b50571986

  • C:\Users\Admin\AppData\Local\Temp\Tar191F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a