Analysis

  • max time kernel
    150s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 12:07

General

  • Target

    5efc0429781a9e3614cfa4e848fae730_JaffaCakes118.html

  • Size

    32KB

  • MD5

    5efc0429781a9e3614cfa4e848fae730

  • SHA1

    18b2001564924ff643f5b1caf7d27867354ad905

  • SHA256

    6298918749b18ffedd06b16514c089e3a9a3325791c7efec4d4826863762d89f

  • SHA512

    61e0e69124ac508c66aa664677a49252684cbeaa5027158a5f5f898ccaca58ed76e4ae08fa17e0946bf1fd78504571bed786973fdc904650a6e48453f35e035a

  • SSDEEP

    384:VSIddZ20f6jIBAqoLsE2KK65Pj1xLfxRxhxNxIx+xbxnUAxEEIN+xMP5h+DfiJrK:VSqZ4jIjav5PjvhYDhh+DfiJrEx

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 52 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5efc0429781a9e3614cfa4e848fae730_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2332

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    1141358cc84bbce77914e25df116f2dc

    SHA1

    14c1d62c2972831a7e8c7eb01792fdda642e909e

    SHA256

    39e7d1e5c03d56813166fce60290677105b20d911a030a22def89540e398be36

    SHA512

    b294dee3fe8639b5700156348efe2be74878c19af512ed395d7647d6498de97f22210b85d71bbd524ee2715709f77f3568f9891ea476dabd454e0d1bbf5ca139

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6084d7c1bf63202d6cbe66e49c6f031b

    SHA1

    0ed666ab1694b39ca9653e9760a5130510e1f232

    SHA256

    ac01aee1f0e92b70cd2a3ade5ae19a8b3a063c619da31ff495db89b79c3d3d52

    SHA512

    398880a7f88b06539fb387b15481aee740a6dbed667435253428d9b430e133aed0630ac1f68a624e6d276a7e21ee63bb59cd47d820721de0d815815f060f08d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    04ac6dc65b9269ea02796a63a0edc058

    SHA1

    3411e60d7f8f307a1baa44ed40aaa9c4bd43301e

    SHA256

    938b769abead7d9e2555505ad2aadea8d34f94efef777bc40e26d65efb45d9d8

    SHA512

    c49970a754f1ceeb49446bdc77d8d50dca7a112c738413e06d627ac5d410334f8dabe644a6762b82d4aa9b6b05f27748bd45884f0d293b944430ff0d618cf0dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    611cd5b2315c4b51d80f1f096513ac8b

    SHA1

    26a9f0c8f96cc32f58c06fbb9e8c772797bf783b

    SHA256

    082e496bedf1c9d85a5823cce2d3446e66800d8617c6159f7e2d4947c71bf86e

    SHA512

    bbc3d1792b1a245d784c7c77023e36eba6991f8b3bf1c09a0879c80dd078a0387e0ac7ba3c5ea9ba699da6feede531feb4f970caaabb71555423045efc6e928c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d78ee7dfe868897803d038d339188ad

    SHA1

    9f1ecc35314e96a3b1cbb15557f07bf110ba8225

    SHA256

    db073aa9ce740559f76d434535b2d12672bbb45a9cbe08a73f55c14608eddd28

    SHA512

    30e3e210672b13f4733b6c036524f563b01e24c1269a9c90c2ab4f4a9808d48fe029d329b0c7b22a48e5457deb801577ffe86978854eb9f64cda45f74cdd972c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d750ead0b9d2d6d0442a2d51b31e1c17

    SHA1

    50f4dcbec73a86b89ffb93c8edcb49d80e88ec24

    SHA256

    d8203f781f4554de1deb4e5e57bd16ba19ad000c478ae5fdf713c7f77e6e61c2

    SHA512

    aba49982284a3e64506d8f6bcc65fcd72db7607026d413ce4cf24ba7bfa0beab9c4f82ecb227407c98232ffa913ecb38b5e9bd64404dc29f49a8f90368c18900

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d213487f69f4ca4ed9eb80ec3e07da5

    SHA1

    091f4ed943bb03948830574cc62015e14da7f1e6

    SHA256

    f4d93743dd8277fb4f1d413c841f45d310d6f31c06419c2baf9487f686e0b582

    SHA512

    d6ed9be198d33c0f652957ff2091d3b9d29b1d5da3c9c7cfa8b813d94b46cedb713b6b35761c8aa49f20da04856bab5e53b7100409ba3830b311b48f869db3b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6f6699dba1b7e76b96a126b4c05abbca

    SHA1

    468f8e2e2065c7092f0f9550415e5852bb0a8a29

    SHA256

    cc93292477f9b642ee34a037e030936c2382b9096eb5d94fab950020c16c9ef8

    SHA512

    7d62a2ba4d117b3baf4fada8edef1ce13f089ffc9dcea59ae7674569353c709d6b32a1d2341293675b9b6affc09f78213e22b46d653728de6d98bb6f4346b555

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b1500b0f1d063c0a6e6ab2778d7cbdbc

    SHA1

    77a57e04bf16ce23b1d8dadc8b4bfb8d7078fc0a

    SHA256

    ff1fef6e5bfaf8c56444516a9b14cded86e68469642021f5b73f2cc0fa333478

    SHA512

    bbaa30b0693c111cea77cffb5e22e142c43179fd6014ad563ad441cac6dcec3c9bda78178739f082b97431f65b25829a5fc4dc8343f67a331922e1b432d86c55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0791591da1304510972f0de7cb55e8b4

    SHA1

    2a9f690455c68744bbde8c50d037c6564985609f

    SHA256

    4d3b2808b2a990f51048132035af6698846a32391b5a02647ff175d8dad54419

    SHA512

    0ac558d57d02621af955a6ffb74a557fbf8b4d79bfcd5b35b9de9f41050c3f241c04cf67040b55eae33ed0ffcfc380e10363865729d85c07e97b8747e62cc51b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f21e7a401127a61a0f73f6a83d5a72d

    SHA1

    dd2a0eec744daf1e5824df48bc4467dfb1cde65d

    SHA256

    638954c899415b83c71d94ca8a316bfd4e59245a6be7733582674cbc268c886c

    SHA512

    df1270a1e8f8eda80bd5a976b921a4a3c9d4d3b5afd309f9d02ea2ee011a0282dc123378ce01a51a4b838d5279c54c359d0d435d1367963277a20ea7bb0677c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33354b7c71c14fa26de590ff86c82dcf

    SHA1

    0a812f6b65e85354bd5a99306d311169fe066334

    SHA256

    21e97910c8040a7c47f99451f8c46bc83dd6cfcb777943428b1c7d3827f60f3f

    SHA512

    1839bcfc3a92f6509a92e1081759072cf942188609c7faf95e3ec2f536102084c5fb9c08b702013a1cce54dbfb84ad5251304b401bff3c524ebd95260c3ac98b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d947e788d08443353cc22ae70228bdcd

    SHA1

    30f04c6c608576be97a9c21571f7810907cc941b

    SHA256

    6649604f8a0e32c1390bc97d5c89ddaa5232756e917a80aedea2fec14d8490d6

    SHA512

    d2b0c084aaa198ba7b08f9fc0792f58cd9c0a1d10e7583d89b31b6bea8199c9692e420d73a1f9be5833f0e458e0706d420a7427b198ecfd14465454f1dc3dff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11d37fc43cd12ba26e51a461786a2748

    SHA1

    313ff5d4b469a7b4a7afa4c028bf11cc0d86da7a

    SHA256

    bf073c6ca040acce317dea70f0ddf5c88d3d4fb655953aa743c234ebe6a3ed6b

    SHA512

    5fbafec3c4b9bd55ac1dffbde6a865a38f79c6d5e7e8c274c9aa5c886cef35899356718c991038bcfbbe9b4e8a687ad16c69b0a3840425bddea34ae97c3c5658

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    366307bdbd275e6b13bebe51b22326ba

    SHA1

    44db6dfdd8d3f688908647325af77584d8782b18

    SHA256

    8df6c35a5cf9d0aaca0c72e90b97a850773351d462e87c60bfe0e422b95f9641

    SHA512

    0f8abb419c13e2946ce306a080553827bf37213c29e31d0616951ab76ac2e88a29f66d2591d0440ddd806f526c191d009151e7db572e7ac36b2a3e76a589234a

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\54VG8Z63\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\54VG8Z63\www.youtube[1].xml

    Filesize

    229B

    MD5

    0ac7ba0490bab3a67600b6e6015d62c0

    SHA1

    e618e3a5ecc10958f4bc898e709f4405ea16ff97

    SHA256

    b32ec720d426431200bfb623ec9c24768d098cc1f5d8edd04b3c3cc4f910b36b

    SHA512

    6515e1b32d60702465c72518fff16e776c3ec221f4a1d4482fa6f73cdccedddafcb40cdb74edc5941e13132c1985311c8ff1843dc33015e31022d4028d125569

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\54VG8Z63\www.youtube[1].xml

    Filesize

    402B

    MD5

    cc8541702c75cfdf777c3d755c6a0e65

    SHA1

    8a540bd1240573898a00e4e0cdb743b21ba7fe9b

    SHA256

    c7c803b47f7f9d8a27ed56c88a68018d2cc4635d2fe19586bdb24733b92b64db

    SHA512

    51f356c5072f2a0c1c48b4bc9333700158398d023ab76fc6c876493ccd70b8036cf2c78555a5166ad4120ac55bc9a8f7711b9ef9a03accfb0507364b7858f563

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\54VG8Z63\www.youtube[1].xml

    Filesize

    16KB

    MD5

    994d13bc81b971d6173689111e8d4fe8

    SHA1

    f4471ed4bf3c9cd6b16b36f8208ed306e79e25dc

    SHA256

    2292f23c8bd11038383f6c745600e830f813cfd234d0fea554b921c52f6720b8

    SHA512

    6ced57b8a499c05151098555a3bbe97022ea48a533ca99e0650f52816b50a32e9176854dd4dc0c2260110d735690eab07d15203a1e1664983fdf10b95f8e50b0

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\54VG8Z63\www.youtube[1].xml

    Filesize

    578B

    MD5

    5fc15876fd5a17f1b0ea63456814ed50

    SHA1

    ec833b1e6d3a56cbd404390dda4e6100ace51a36

    SHA256

    635328ef5046ae76900a8c63b68875fda35f1688498ccb2e6bfd4a3756d98c02

    SHA512

    8bf4eb06275031cf6730e7fe3eef49289ec2ebbc52de38038b01595f64d5808a27d047bb1ae1f2d1e5c4b71ee26123ea716e563ccaa4a739a6c782fd2548ce8e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\54VG8Z63\www.youtube[1].xml

    Filesize

    578B

    MD5

    f7e36e51142ccc0ca6a24e2b987f4152

    SHA1

    3d8262d9f0aeac71529d3d72e0fe371bba7645c0

    SHA256

    534d218d074860026fb4e7d6c18ccf13653154a9639d8b549774c11bfdfb6df2

    SHA512

    7fa65c472e4b21535067808524431b5001c6eeaac285f791c8aac1c659a9cdea7f12f05e20ee68a9a08c469ba5e8b27c426170da7197bb95b570b522c04e7eb2

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\54VG8Z63\www.youtube[1].xml

    Filesize

    578B

    MD5

    305185378083c50ec869aedf4128044e

    SHA1

    83d31a97270d089d3e030a7eb3227e3b008910ef

    SHA256

    3c14468d6ec81ec95a78645a5076d81d8b9b22135527c23d60139e458203c6e8

    SHA512

    2315c28b9a05bb8b03858e1ecb866c59e79acbaf34cdceb17f091da2b295f3f0cc5c79f3c26fb97c2e5f58101b637855d9dc71b6338b48c9b4553bf3474e4996

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\54VG8Z63\www.youtube[1].xml

    Filesize

    578B

    MD5

    76b073bcc63ff79eefe3f2402abefd07

    SHA1

    564e988bd045c253187f3d62e60c234cd1e6ad30

    SHA256

    3b864a578d30ce1b85e393de997b11a57a19a56c780e8de0be11245586e1bbb2

    SHA512

    f8391c150cdcce7bfc499b05f221f6bea4c9c77ef6b0462164261e28dbc375408732ec3770683e4a41795c087395736cd640c36b9024b70b067fea7046687852

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\54VG8Z63\www.youtube[1].xml

    Filesize

    578B

    MD5

    8b1c8ddba1dbb7dd1a458a6c425ee28f

    SHA1

    442ad4d17f5e030b2688819f16bca5d1bf2a47ca

    SHA256

    f23456935baa66c1bafb0586234c40e5afe5948debcc5d340c4327a979bfd45e

    SHA512

    4d45db29de01bc2b31bdd22c1a4b80b9b66d559986b5117d8a16566f95363b926c2146b23a36d348d5809509dc17589e4ba74fbc198a67a68fb5482b8f57f0c0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EDQW9R5V\jquery.min[2].js

    Filesize

    89KB

    MD5

    219073097031d9c1a95a1291d66f3a10

    SHA1

    2b7996b01d90b7f424f2a2e6063947461db4b2b2

    SHA256

    232066e3f6f1351afdaee1acb70c409766641fd5669e0b55ce7c77fac0a857ef

    SHA512

    9ad2745f96cf79a4d59393cc3fbb3958b244013f6798c12abe41e37fca80df3c7cedab4b47cbd197645c86b31077388ec8f01ea8d67c5feacbef95b1ae7582b5

  • C:\Users\Admin\AppData\Local\Temp\Cab14F7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab1672.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1519.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1686.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a