Analysis

  • max time kernel
    118s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    22/05/2024, 13:34

General

  • Target

    676ef72ec9b85ac322f9848739be7792_JaffaCakes118.html

  • Size

    87KB

  • MD5

    676ef72ec9b85ac322f9848739be7792

  • SHA1

    8dcdb912af5a9793cc42a5c5797aae9ee1f1922a

  • SHA256

    cbcb07f612d32f81605f181c6d601c3498582c1246f8af0bb276db5af00c1b98

  • SHA512

    4b98c3a73b028fd7c2b0b427e07f4ec1d01e2e5461e69a195f2ecc750abbe20f21513514941a2031a97973a8c33b644efd60c9a0a029e6ddf4bccf4a14f9d0f5

  • SSDEEP

    1536:FEKpfNJjhloYycMH2zI0RRYgPlsxmhh47WMZdKJjJFGvFSwVCqJiQvpKtAKi+j5x:K9hH2zISRYgPl0mhh4IOiqJiQvpKairX

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\676ef72ec9b85ac322f9848739be7792_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2908 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    1891e491ff16a293e69d0bb27595177a

    SHA1

    4b0853c7d94a25b522ef96eb3e90821a22f91f83

    SHA256

    f8aa38706f2cc9ffd0e2ec770be3450cb9e67fdb1415453f6f66026b78db4def

    SHA512

    b8194e04d8cdacadd9b695af68ef891f9ea7e6e21affcd4de2af1ddcd35522278ed3141a52adfc16d0e2d9c51eeac3b1f6cdcf2ce8862a6c39eb082e089fd87a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    651823ce433bb423047068b72dcabb12

    SHA1

    a069ca30b997a6dc262f3f0d609ee0c2ba6d1832

    SHA256

    d0fd86ff81ec40b0aa324f85847c17c304a10ab8011a0554df28ffcb041ae515

    SHA512

    0631957f18ae84feb1e3ee90d3e899df0b8c9d2f8d0e73bfedf9d500ea14d220bf49b4a372ef54d543599ab2a5e35e1c86f543ab4f81ec0d0c02e5aefcd61592

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6313a7c56f56488a0b2b324c739b6220

    SHA1

    ae7899713ddc4f5e0894d3b918d2c210f7c11435

    SHA256

    5b6a49a5bfa472093ebcdec13da75c5303a9e713921f910d7b16fdac38e08ad1

    SHA512

    a5e52438ae1df01eb2d431f166375e8ee5b16711fed3fad75ebb43a93f853e0653def0491cc06ac19807382333e940eb03cec450ccd00bfda837e16ca4c95a0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70e4ffe271dc4774cb3be403352154fa

    SHA1

    429a85beb79069ae2ff8a772fc47ad433e01f85b

    SHA256

    1c2129c5b183fbd19a0f5cd30f05664b446835c6ed613e443c26a50deeec3a0e

    SHA512

    0210ad3b785ad7cb502b02539d173d870772ab67723a6e524d0ee0fc4268770e53b26225b549863339d27331167290453bd178b90176c32407823cce3ebf2032

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5e74c1dd473342fa989e758fb5f5d29

    SHA1

    52ef98f89691a903bd20fce5e50b6d9f4687828d

    SHA256

    4c6f33362e134ff9ba95a673ae8d96b8ee0a6858ad977f631f95429be04bcc46

    SHA512

    4b16aa68204586f0b46e182879f22fb000c759d4724b3e9490ba54a87412b512acb11b19864a6036a8f48bbda626dcbbd33317edcf61f5992eaf1618d5da3217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8fd2feba2b38f2588cd7facc0a1021f

    SHA1

    b435d7cb0509f2edfcffffecc98b733a83617cd5

    SHA256

    2ac3c8808a875ec57a6b28ae117a457a919f31689639f0bd234bc52f5df4b534

    SHA512

    856ada1eac55f86230b5810d70dd5bcf99d31e647a6f740e52521e5a186e9e2d0a32f8b92ca73c0ac978d1dca888de010f66e2edb6f0e25cc2f881465c3d7148

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a33e1c87e664798d90ce363633f17f7

    SHA1

    0fb96a260937456bf84a540c226247bf9121b33d

    SHA256

    a07d31e663b652dd1fbd4f42f958a2cbfbb006fc20799c8469a8b6f459f74c2f

    SHA512

    1218f6d28e0673fca6b0b575e04623313f32a509152fae46e4b258210a1e98b67c2cae571e5c1e66423a76db59c5c2cfd975186d6dc820bc1746cec7e6cb6ace

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c72a08e6fbb966f99eb7d974d1bc631

    SHA1

    b73822379e7143d907c8d6c375a87e43282bdd76

    SHA256

    958a5a1d915f7f7b5bb8831160291bf6e97e5ed7f6773d95e839c45b89132289

    SHA512

    38bdd592169f52317c4ae63ef3180781ff25528a84f2198278eb7640352885dc823104d6512057bdc89f3d168b3d8bab155c86c77619a56777d43a87fb6bf89a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4c04fd32bf396dea58f6be852c9cb16

    SHA1

    75e825e0b1a32030e9569f19f48186330b513431

    SHA256

    7cd18307b537cfcd3b7b9b316440b9a07554d07f13bf11a38b77153f02d821c2

    SHA512

    da1c0430c2c7ef296632f0789147333d161d3206f5db217300c266a76849af58720c1aecdeaf7af320da6806601a1c337fa5be662eadd46369d6d132725f9d08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6894969e7ea99843df052a11470ddbe

    SHA1

    7cd3eb282a2081ffbe10b7735f77b0c5b3665a3e

    SHA256

    b05c2ee55f1a1f2624a98e0a470c250785ae69df9f67a85c37a1c9571a86b108

    SHA512

    e37b4aed04fff519597ad2ba1aa90f418bdd864a80e4674e178fb3241b82c9ca68ea4cd891f47a983c24b6c44d8edbd61198afefdf5ed6d500151c0ecdc7427c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fae3958ee3ebe2dc49bb70e760a655e

    SHA1

    d5e60db0e4b629121f6891c4cefa96829cd939e2

    SHA256

    1160f874d766d3a4aba7734aa94c9709785f1a524f1302d978d6c08c0da0c2d5

    SHA512

    7b8f446fbb4ca459038b7ca827be02e936546cbfa8dedd599d56395e0785c7b345bbf86e48fbeeb1eb401a55ef32a6f442782c19821d1247f16b99440237ba26

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac280d16d4aeaf7d7619a9729428fc64

    SHA1

    2e826e15684ffe0e7a9a59269d66253f43e86e2d

    SHA256

    932b863434359198fa06fec48f78cefb80a006b02723cebe6317bbfdf1c7b0e2

    SHA512

    9d85d0d5a62733e2e37b4c2457199b4232a00a8bc6db94764be8fa64f504d41106f57c0aa9f3858b85d469047e264aa2c192a0ec5317a5bd5363800c0b5d190d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    92d83f59178d076c22c5139c8c807dfd

    SHA1

    7cd5420b086ed9456996b49a0ebab8abd523f345

    SHA256

    6a16661aa472fdc74112dfd9d763f04891edb004eb8ec22b0aaee9cc4f0e8556

    SHA512

    2436e19f82d27b79e466c8cce222b8ba67fe81efefabdedeb255c6d81079ee01897709474e1100df5cffd681299fcef2a71219454e3ccc32193cb2118f7b9c1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b50c3378b0daf924d85e5afc43276a4a

    SHA1

    af02a0f93cb8d2044d6e3a726ab87869e508ef5a

    SHA256

    09d970bc8c8d1963175e39ba12da2c15ac2e27008f67c733cd187064999602c5

    SHA512

    d02854c15557bedd18db3ab82bae82c0fe7b0f3990ec9a67fbe480a5e7b28e0016749d6de23d128058724d42a463bee1592ed38fc8a7a1a396fd1186201424d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f41a575af972f9a9a993bdfecd3c9f70

    SHA1

    011860077cf46fa6b03283bf29c2e89babcce717

    SHA256

    5e9c909ac1572a94c0987b972217ba1b712e17097b98f73a4d8c5d183b376dd9

    SHA512

    0c1a7a60787f833f4cdcfa8a9ef7d826f23f288646cb43cbd323809c30e0793454319888cb333069e7f074cdf72b86c456bc13618a86c59b0696a4598fbc2b8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15d46e2b37c9bc7f09beedf7009d1b28

    SHA1

    588ad773310905a28c28624aefd30bc69585bae1

    SHA256

    aa7c110416451f6465e942998ffd44cd5902926404708356ea2bc7b7640c7b41

    SHA512

    65cc59fc54e01cc59c025e33d475cac797f94c83dfc12ece34c02c9bbd7963032888a4778d4a58ab284050548b3f0e21fd01da8bce0c1848f9da2c02c98708e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9241b85dc87dbd1e9418d80926716c33

    SHA1

    4c0d4106f7416ec22e142bf1a896ec68a5246b95

    SHA256

    cae79f68615e8cc9867e9991cc375645c0704f9d5a4e943d4dda9eccde63c41f

    SHA512

    c61c526f73b5b0febc8318b95163702217b91cf3d77541bb3a8bdd630ec441dab001178724848f11aea052e03c34b65fe3c3a9db2b30cfc8f9b1dd2b8ec813f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88d58378a348330dee2ab7131b383fea

    SHA1

    4d7ad34c3532baa8c630ee4cfb53cb15c8da96e1

    SHA256

    3192886b06e936ba0e21e72f404bb7514f3b408e129275c631cf89294439a98c

    SHA512

    dea51cd3d0bde129b91b8c04ecbc3a2339e4f3b5ef0d7bb07216a9c59707007ff01760d7b12c0d2d79f438b2247ef1e2495a7f79100911d2a3bc564dd3671527

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f365e99babe21cc57460097643e25dbc

    SHA1

    89eed21fc175540ead79c853aaeedda8eed93778

    SHA256

    23fbab6f48aa7e77fc5d778542072e8a34daaa2795cda7c93fa68d69fcce721c

    SHA512

    efb22388b6cfd3bdc055b712bf39aea652a0b27de60d823fbe3f3aa0fa2b5cc48d972afc6e70bbe78ecff7ad38b3e90b2f8727134e7c9825354e99a367dacf98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fb496befe209ec2c0a5920dbb25d0ec

    SHA1

    a058b24368077828e30c289177eb2e624abf27d0

    SHA256

    471e24e40ebb7f3b712d9940e058c149b2779bd7c75020da0b14e1c1e4e65e75

    SHA512

    41644b9072855cf3e85534eab622d3bf29560feab0eba9fb6eee8247c3a6bc52873bbcab07ed7305e2e659200a14acf496b9d2e6795a62fc019ff7e42bdd450c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    5a7c91c5f0ad57763e2eda6e604760d2

    SHA1

    3276d28f3c7ee4f5f517266bfa439ab8ad6ac828

    SHA256

    7dbbe96bc8895c8ab2f0bbcd6172a4ed2cdb1d045d624e0d416c9db2867ec24b

    SHA512

    02f3b33063b91203ca23c1332f5a534ab61f1db385be39b5cb0c25166fdd5c3a8462a19b660726044578a72cb5e1cc29737ae6190d79b9053c28a74e6d806d84

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CY2G78MW\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    7ef4bc18139bcdbdd14c5b58b0955a67

    SHA1

    afe44fd9a877f81a3c36f571c0fc934324c6cbd7

    SHA256

    192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838

    SHA512

    6c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RSAB58HZ\cb=gapi[1].js

    Filesize

    133KB

    MD5

    4d1bd282f5a3799d4e2880cf69af9269

    SHA1

    2ede61be138a7beaa7d6214aa278479dce258adb

    SHA256

    5e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693

    SHA512

    615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349

  • C:\Users\Admin\AppData\Local\Temp\Cab18DE.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1940.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar1A40.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a