Analysis

  • max time kernel
    139s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    29-05-2024 19:32

General

  • Target

    81a8319e58b02e8931d3168b0eeb3690_JaffaCakes118.html

  • Size

    34KB

  • MD5

    81a8319e58b02e8931d3168b0eeb3690

  • SHA1

    54bf97eb5513fae772b58cec9d8d2fefba0c1aac

  • SHA256

    cebd52475fceb87b0e4e17550b7a1b5f1ce0eecf7d32fcee86aefa651f29edde

  • SHA512

    e68130a762f4e024cd4e0740dfd0c8338cb5a09e0cded84223b6a879c884f6b59582a6ed0d13f0488b87d3e8d4fc45075f99a3aa3a09124c94ab5c698a278272

  • SSDEEP

    768:LyGN5zgMcmJZE4Au5SKlglenL9qOp3FCS+DZno7rHb9QMbEtpBYC:LXNVbAu5B6lkBCS+DZno7r79QMbEtpBT

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 8 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\81a8319e58b02e8931d3168b0eeb3690_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2220
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2220 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76dfc6dd320281cf5ac61da23369632f

    SHA1

    ed23deaed8fbb900fc8f64e44044c81343f85f7b

    SHA256

    0aa3c67bbe91ba41b538af5f91c3ca75b9df82f9de35f41d61c27f9face39dec

    SHA512

    9da5fe8478a6b8cb8ea24fc766083b629beb624d81c5ee2ed3f7a636c1bd81dab8008f25547254c5549d63b290d970b4ade020b53e6d1a30d76edc7b298a25bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e930e127eae3d3d3de439cff08d29f8a

    SHA1

    4e708bad0ddcafbf260a5ecc45e04a76ddfe8f6d

    SHA256

    f724d0a763d20a0a86cfaf2e51ca931d816e17c5b19e13459a38d026968e0893

    SHA512

    2d33893d29ea17a6a2b3275f47b66b61c1c5e682291a82c05192a14881d380d2e2ffbea5a498b765021621016a80af391f40620e3860db98236720fa740ab8f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    562d53ec3117c2072800ab6bb4629e94

    SHA1

    e3095c30e0a4ee35614019beb2de8982bd1242f3

    SHA256

    35c38dc3cffa83c60e5686a3f62861cae4995553f02d102d092fae7fc275a503

    SHA512

    ceda579ae45465c907dd07824dcb75df4b5a125925a58cd8717d1fcb5e8482e36a554fbf023398ab1aa430785ab6ff4510466a9888690b4629947787e0d70494

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    362c870981a70f056a7ca94cc405be1c

    SHA1

    0d7924e05a0d7ad1aa42ce935da1f5ea73e503b8

    SHA256

    1e2f26ffe41374e0510a4ddcaf62857f6c7704298dd9b294383e4387a347ba61

    SHA512

    7f8782ae3ce46164ec85ed5fc5e556a25e27a4a4fc21eaefbda807acea75ab9c29a6ce557cd65da53a03ec19c32f3efe32802c8540b670776824e0ade117d19b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    259845ef69c4a70a9019b0381d37dba0

    SHA1

    c5ce0449492e9fbb1b001da9e99c7f408d1ca8c5

    SHA256

    9ace7506dec9362795dba15cae1a6275c1ea67768927d76b1121673ee87de419

    SHA512

    472ef319bc2cd1410a75ecf4c6b21e70a6a4d08afd2b7d16c6db2688d2f8e2391f11554b386ff11483796011559c8ade1b58775afd3889a28e30730454603c5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51e40e8697277bddb00f51e550bd1bbe

    SHA1

    298fe83d6e66f4c274f3bf6f28e20c8c10253235

    SHA256

    2852764291ed04162e2d5ac5dd9e7513e978d1d04994f537520e4883950adb49

    SHA512

    783a128570946496262d8f05b00613f8e90072455ba2a657647ca5ec6f19df96d7be70726f62dc56dbada2b2d0c0c2b13a704269623e798f28869b7a65b4101e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9dcb2fd246b9b8cc6fa973e100970c9

    SHA1

    32a70cdaafc6dbc6798bfa6f5d9dc7089ccc2a56

    SHA256

    39ee01501f9ad24f2b93aeb3584ad61e6e8c3b6c41f452014e4d4ab83b693852

    SHA512

    28e0771dc7ddc96ce00f78ae6c3a137dda1a7b5d23fbc080802134e8ac8659fecdc3cbebfa4fc3d98be15a0e16e888b2281e7aa6ff6d20d4fe30fe398f9b2895

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6405ab56a836a66c1c99966d80ab0e8a

    SHA1

    16618de0ca7d4e079acc8427a732247e79c882cb

    SHA256

    28c3e0eff16d296bf0470a8ddf23192911b224044a2b6259aaaba1b53f99cf4c

    SHA512

    12ff2dcf7c5ebf1447f1369521256a46cbd10dde34a138ed0d550b741acf964444175aefd3aeeef3ef79c68397352494358535e7096c9f1f04bda28a65315ab5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f04746c9fbd6df924e3797a30fa274d

    SHA1

    a865423815f2a3aeab60df7d79d5c779998cf863

    SHA256

    199fc0fbabf6321b26b8c47b0d4198c4fc07c7f54d5e634850b6a44e40ae25a5

    SHA512

    fc0ee3400de83236897efd03e070c26cd7be51a7c2614ef07f6fbebaf527bfaed136ecdc9bf5686a616b5caaf025a4e3fa266fea531aa3addb524f6226307d30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c7dd8e1ce7766716fae6075e46f29d4

    SHA1

    c2a2aa767ac28519b4f1d8023ee1d2ae18082dee

    SHA256

    5f7f1febaa3aadf8a1011e36446480dd9606c873c4ce97998bf6e8fb65770f5b

    SHA512

    6b737dab46e445faf2ed4fe89d4a97d758c92a2647289c86412aa2db04d146e1301035a943a5cbe7972fc0a38eb46cbe4214b33b5a32b1d5ec8a22a6d198e761

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67bbe4155de749920e30ec9233cdcdba

    SHA1

    644daf472d380f82c1c022be87226e859ae76a3f

    SHA256

    38b9f809a84b03e162fe41e2a3fc3b6c2c005612020681bc9f8e5d56eb67ec75

    SHA512

    65d3bf0840a67234a96497508a5d04d798c83a46ccbe189d0d5eac45f3376b027341e6c050fb134c90528080216e7ff0dbcab02465dd2d88798511666b290a37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f20e6a9340e78ddc8fa3a2c738932d1e

    SHA1

    9340f9089a753bd4bce81d11f8f25c70b6d9bad4

    SHA256

    22470d9e8eab52ccc000d40dd9e41e61d9cd5620894c5b90cf2931fb3a01af05

    SHA512

    315f9c4d20207365a5bc5ef703916e88af5ef0d3c3e166205c9b7e2dd9d6d73c6308258cb9b016253cc5937ad097bba89b06fccb27527d6d1a2acb2d6434bc3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b45ce0c1bf4fc89186a120396e63b75a

    SHA1

    f72ca5f211dbd19753f76dd7dc1bd9e56250e01f

    SHA256

    b9417f2706c9e8531fad7881b9823d4cc93fec0af66b0797128e30d59ad7265c

    SHA512

    8fc084ea87cb1683c13290eec5d10f793b6b99197b549b973a16f61131268a8192a15e3b2ebfbc886bf6241d6a0de794ae1af9691ddec810fa34eea1e49175b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a10614be9c97522bc7aae08ccb80e8b

    SHA1

    cc4ab312928ff1203124f68d7a5bf452ddd602ce

    SHA256

    dd8c59f42770751cda01c14a019f4ec30da12fd3f2dcb8d223ca07a3cb5d4916

    SHA512

    b8b5b022d47f13f8dcccefda557e8e9370440b65fba4ec9c643510b2a1a64e2c95de42b902b2ef486d1ca58865f266c1d18df22f7aa25e59dec529d982bc2889

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9042036ca9e15f2b3d8ead91e815e4cc

    SHA1

    d40a492b260f3b96667f5db5015b1515eb53c13d

    SHA256

    169ee5f44ece58718fdb4e8079ae17ec230186d3652ff2a741f746dcc0a32933

    SHA512

    f45b3a118200eb63eb8114990596ba5cf3af2ada28f86719feeecbed778a231acb55fbe3bbdb259d77d809e6a67827e1fb784abc85b903fe3b9ae2469cf46ec5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b0595c5d086d9c2acbd9e92f0c3d293

    SHA1

    519de043737b1be5eef007169f105d15bcd7d45d

    SHA256

    0df6bd10a086f922bbd90906cde20016cc31209a91a215d539ffb70a6ef115ea

    SHA512

    7508615546e4c30ef6fbb569f20563f9d291260478e39e6adfca28a95b3b1f5dfd0d9c07a3a29f3ed0f32c63b7633de9835139e22880a823fd361084e4311193

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8adfd8f22996b7cc74512ec7864b5d9

    SHA1

    f214773b591562d3514b442570a1d4977ae332a0

    SHA256

    a9a444f265fbce534ffae31ace8310a295249d1b9e45083d5322759b4dc6dbcb

    SHA512

    ef9b13a7721df64cc12292f232332f9743dbc67e54bd2b0ad3d3acc77c573140e4be7c53c71f144484e3ba64ff575579676714e859d3c54a1dfe2e41fa58afea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32bf71b182d9bc2c6a9d126662b4d622

    SHA1

    d8304e66b9edf821e510d5fa5c7a66186d137866

    SHA256

    dae7c9ab8bb53be55db446c0e00d1736ca9fc699a2dc2495f715d97d15c9feb8

    SHA512

    eb61659ba39bd762a7b9dd82b10a9090a6a9b6d9666ed5ccf456dc85bf7d7847d9ebf23a0cf9732bdb57f7d9d9f4aa744febc52156b72aa2f43ebbeed1a2ec96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c988130ebdcb3f89f3c5adec1dafa95a

    SHA1

    595b1ad152e81110e61535a8f6950e5797024b95

    SHA256

    7cd16dba4ff1c9ffbc25a24c04c2f7c12ebb126b1e7ab6af0f2c56e2e0e386d1

    SHA512

    6d2ceeb6f36e79dfb33ad9d2c979a9e97104508619bf9fae2623c039c148740117d09f5b8bd71241c586afbc2578afde5a4c97287b7683a664811cf7541cabd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9913ce5a74b665a8bb8b69260b3922df

    SHA1

    cdc66879d6fa2825b4a85da76606ff1fb02f83b2

    SHA256

    249629b39073c6028075ae5eeab44f30f22fa27407f9614b47750df046bb1ecf

    SHA512

    e52017153d5c86c6602c0ae9f8c9ad2b7bc3783025335a83bad63f91747664a013beff709a6b11c39ee68f6330c04beeb6e5a189c291dc6589fd6da68bf56036

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\wp-emoji-release.min[1].js

    Filesize

    18KB

    MD5

    4cc444663c1e69cb8ac7b909e7192bca

    SHA1

    d00ddc5b9526193fa99bc3995a6d05f995452ea1

    SHA256

    4f79a89d16a5f717110fe080c0bf90b7e05ff95a4c4983f64d33110bf5f9c230

    SHA512

    ae37d08d11aa4337650cbec0d0f1205a5505cb3e82373873e82cba093019521cd2b93cfe2dbe4840ce098717287e1f732e9330c90063b122f1c6358664f1b8ee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\ajax[1].js

    Filesize

    19KB

    MD5

    6777db64de90bc8972c28723e2375787

    SHA1

    b3b4054e87d60221f16b82b388a3fefc27eba69d

    SHA256

    58105338456dffbf7f0e6e55833d521b5e5381e11bf010ca7fa55c6be99a095b

    SHA512

    1dd5c92eb499ece850157c0c30f6d1f179e286b90f72aa76bf35a80ba659d381bafd72609a7aacee70f335de3ccf61b6e8c74e14cd75e7b5807aa1d0701cea24

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\jquery.prettyPhoto[2].js

    Filesize

    21KB

    MD5

    5df86df658da4f013d00decd415c0422

    SHA1

    c73229d56f4d4f53f9d450b6d2211fba666520b7

    SHA256

    4a25cc950cf5cf61988c290271bc9ba75fd4abcc100384430fcb3c8bf62868e9

    SHA512

    9c25e55b354cc8d9ac4558e4b5ec1f098334bf5188c77a9f9a0cf8d146c1111c51498963597640bc1907b938c030e9437d2b9bba05b6c744bee2286885e15831

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H09CVCL3\page-scroll-to-id.min[1].js

    Filesize

    25KB

    MD5

    a16497dbdf081c2bffe0645b52275fa4

    SHA1

    589d0bd2ea7ee7e2a5b0968a3bae300fc345423d

    SHA256

    683194a1ccdbff2ccb1d049dbead875f871f0916266d3cb01e92023303aba203

    SHA512

    f600e51dcc3857edf2247c36953c9c05ad59db836e2513fcf88daba4b02e74070412ff571d417e7a8355252ee4568de3f3b6f359a94f0e55d6bb16d4cc543d51

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVDR4C1U\owl.carousel.min[1].js

    Filesize

    42KB

    MD5

    f921bf0a212c707f5d3a2f2eb9cf94c3

    SHA1

    a1c1016e73348bbca9e4ebcb8946cc4bb93a857a

    SHA256

    6d695b5a1e633301a535945f98518e21773573923bac7cdc28a09a0a062b7f2e

    SHA512

    c36be9a8b41419759cc56adef9b2f6261738fe01907c2ccd6268536992cb8097dc712252a8d0afde17a1d297d3edbfbb0a0c39205a5b7d3a3b73a7360dda6641

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVDR4C1U\parallax[2].js

    Filesize

    1KB

    MD5

    c22cecdad8df8599a6a4c53cd61d1c6c

    SHA1

    482ecf53a69b824e7311d2e3d4f72d918af9647e

    SHA256

    ecdfde12a32ec3f4e3a1d65f5e886f5f1a88202e6caf195a960e1286765b2c4e

    SHA512

    fdb7745aef7ec69e4c499ea466294c7ad9d85d7fb34ffe7723ebd5dbb9a1bb5e1f595509c4dca0a08ee170bcbabf80010e2b847c58bd810a59e81ed5ab126e59

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVDR4C1U\sticky[1].js

    Filesize

    852B

    MD5

    6dfc76758ae45d36fd2a60d10f9c10c0

    SHA1

    c673bf9a3f0d4a1a4c8ba78a72572882d4c22df0

    SHA256

    ee0cdef9cabd8c081e8973546b390bfc008023f05c3acd3ab69683f4ba9c4762

    SHA512

    1e7dc8094bb48d9f4761463e9268e0ddcc33b9823becc9bcfb15d61b28729909b0b0861174522d22a31a57e7b7b2f4aa9a63354ca6e939046110706bfc746c33

  • C:\Users\Admin\AppData\Local\Temp\Cab30F0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3123.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar4A92.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b