Analysis

  • max time kernel
    143s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 18:25

General

  • Target

    8b5b19641036be2585bab7fba94bd131_JaffaCakes118.html

  • Size

    50KB

  • MD5

    8b5b19641036be2585bab7fba94bd131

  • SHA1

    82344ddf1d48560651008716a6841ceba27d7e2d

  • SHA256

    e4ad54b72b7cd9dde257f458030d8106764a2db0a44872077c3a71ea02db4a6c

  • SHA512

    f16e882a8870f03f53e84c82665ec32168e69c3ea4464370da59b0f2e16e7b49b7c62723bd91a4bc83b993bf517137107e64a13c1d1085cd8db79a2753ea3de0

  • SSDEEP

    768:eX8Jrpje0DnLmCQHNeTCINdFRYp1ZsDkDCoYNyL+qD4FE0B3obddD7L0:eipje0tIqdFRYNCjc0B3obdW

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b5b19641036be2585bab7fba94bd131_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2428
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2428 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    367be39f0f0bd10ee528276085ebdf48

    SHA1

    bd2d8f3b91e3d0e5dcca4c0734f27ca4b0f257ce

    SHA256

    6568d4a4c638ae3fec4d5bef16d7f5378195466005a7d7de3667b501878e566c

    SHA512

    1e33cbeabbf89c1d5f5320be70459a27b2b4fdbbb4e5bd8fdcd4f4dea5b5b7761e49ca4cc72dd0a33423e4ce15353495eeef01472c7cb005c9d9dd4ea9d4a606

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b8a9a5e4033051f633d9f60ad978749

    SHA1

    8ed874e54da2195ed51c8f3822f730f47af11dc7

    SHA256

    7691484e491719eac50c8b4d730eb2b71fa866c76319f60769d41f6eff4d749f

    SHA512

    ff47653965bdef934c1544f9da88440298bc6430e5cef58c77065ddd6edf2721b06d782108a5024000346b674d0d5126b35b9002dc2e1ece19dd0497f753fa9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f6982a5f623ca2074d18b754334c98f

    SHA1

    1b810f71e7e0a7c51ef7bebd29cf1361b14945ce

    SHA256

    45ceb17f98ee3b172a08b03d83759b1219e57aeb6eecb0096239f93563f73ddc

    SHA512

    7f8b9f5df39ea01afdd9458d885edb82a94576ba1cb74305130d828df17921a17d310105f95d5cf95bcd4ae61e971833c0d486b8b540ff3755d997eacde5d940

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    393a3d4c5272020aaf078f008c117770

    SHA1

    237c0802d8451d8d3f7b2adba6436ec239c7a5df

    SHA256

    0644e702ee15e8cd64d8c823a5f0df78c870ac0ab3227df64b075346f6b4e24b

    SHA512

    fbcb5ed3962b660fc2c128fc3b62578db3c720980337ede91940bc06956e58c3668a3b655fc203f382985fa206eff159a630488ee9f56384e33583906cc83d5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0aa316448124cd4b9b058e455206e0f

    SHA1

    5d74dbf7f17976c3bff8f928db3c26678bd64bd5

    SHA256

    f10ab529ea5c7b2dd22c060e8c0ecb09c48350c0f8b0683a56ffd1eecb01f65c

    SHA512

    f973df6834f65c9a2d08869bf48d5dc659cf3f601ede32d70a62fc79dca174f0a7ab6de3b325198f45c019d942a80c25552e01e672fbf616c18cc9256ed3e8f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fec4ce019ad0be9cf451a2248d63d67b

    SHA1

    e3cfd856c74287736e4abcc04526bf66eabb5ff2

    SHA256

    36750df1f2d0e6918e5ce46611f872e2a72ceda8e84fccbd205d9b9d1c09e3a1

    SHA512

    b178d4ef427ad755d52a9cea165c4dbfccbb082e7ccc7cd8f77b2f4ba59692629ff8d93c79f23a31d2970c4ac26c035c941463a78fdecf1bdea39b381817bd20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4df593bd71b543ab3e2f29a3492aa2e2

    SHA1

    aa154fbe00221cc9e62cdc882152c89f56ff3be7

    SHA256

    c85c39049f3d4ed3d98186c670f66dfa2c094c8c2d0707901faaa749a8a28a6b

    SHA512

    29af5b68dbe302e2d6e32759f104405ac7ed869d15857a9e53ca0b885a254e261b7fa3ae8b8155460a9340dc24ad2db918eab8453cba03c7eff850085c62b813

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8281228edf0a896bc283ee1f10b839c

    SHA1

    eb8bc41542a58a578138146d054b2d3dfb4868af

    SHA256

    85cdf4a603bd6aaba54251a0355ce4e2b6d1e443ab6dd4096a498ab62fa57a93

    SHA512

    f6aee418094e5c13eb8abbedf904805e0ff5b94030cd53f52a0790d4d2d14800f4df688a0d03f6fb5e50864ac086b8d98aec2365a43aa734132da328e23caeaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57783cca274f5f57af3415994b014de4

    SHA1

    adb5866eca4ee186940c4efc4d27beff94a7da18

    SHA256

    e06131dca7eb3a90e63152c76e1fd19d9f7add243107f9b67682684ea8b75bcd

    SHA512

    d5bb11eb632fd8c3a6c1c8fc11be24d575bdd69c4b1f867263647d875896a7eabe0f2dbb2b48be5547d363182325827960b9837cc9ecf41783ddee9cd427d845

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49bc2284d899fdefac06b1c045e9c089

    SHA1

    d03fbaf29101ea7d0768aa9f54e2dbca946f8533

    SHA256

    8416e790ca61a59e62b0219dfe17493df6e5a80368d91c0cd9c3bc97c957970d

    SHA512

    fc9c7a1ae1676bec5fd821658383f9151fa7661455334c965cedc500ef9028c1adc9d29027c7efe77a5d844b34a90a3cf3e35c4c4a3bf1d16365824b053bd94c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a90af0b73a37bbf99983e0c2aa34fb1

    SHA1

    671e2d00a6a574ed873135f7e1257df3f22aedf5

    SHA256

    9ce5fe504ea78d3be2c7cae09f2c3175269633f71313cd602437217b249cfffd

    SHA512

    528568cbeaf57ce1c7d0ea84208142d2bbfb04aacf7cca773c10da90dc8e1809b0639e734ea8a77f063e4033a333ccac61b03140a82eb73c6007f2b36bdb0d37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bc382ed297d370fa6ebc80a9b5b31a1

    SHA1

    75edb189fef69304efb69263fa73131f94d07ee5

    SHA256

    5f976c9e570e863a207d9128fb0f6f649c1b7de30d034e7bd2f7ec23849dbd0a

    SHA512

    e36094216dbc41730a633cd5eae0caddf7cb549753499d0b02f7b58c5106a9f40cb34afb01eeb39910461291f6c2c38a7eba9b62667e6de6381b4d5eb995dfaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5316439e823245c8833488b8a6b3760b

    SHA1

    0d1abfffe8adf4b3fd830e7882f29cd76b891395

    SHA256

    cdce0b99a6370c96f43b338478fdbbcc99d87232b864ebd836df35e05f9c9c50

    SHA512

    c040b2eea2fc94fa9555c0bb8e19e75211f53dfbd3446ef448154ef1e3f8cf1a94c19bdb6dc72ac6a2617a9c9ebf049a0be1bfc5293daa6a412a48096451477e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d46d20d64b49b05e3d017f503bdc1ca

    SHA1

    1618af37db490b65ded5a3ec7843148c051655db

    SHA256

    4f5546665876934b9f7ebcce1533828fc0d5f0ef0b78904e37ef9cbcaf7ffc1d

    SHA512

    c14ca0c65655730a1556c97cce623c9ca8c3365784dfbb5fc7f65a03c6fca34325986d6988983c5ea1be66729c9dd86cc99bba94e51e9d664ceb2e74926165fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ace55bba9de8edc2bf1b638df63a53f

    SHA1

    9e1ca948937d2d0e3605c7100c3be230498fd54c

    SHA256

    328f6770d84e53ca5ecb579d2e26f5ad09328f6d47e7f8eaebc9f3f4581de3f9

    SHA512

    952b0d574c3487eb6b111c8ce6cc00dd6de5af8b0087d5825d719ece003ba5d74727fb4b1edba6d407e2277973e5676e0b0f151ad89bc97eaa75b718444df527

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c10b73116008477748c569b94e7c54d5

    SHA1

    e9f85fee71eea4dd3b5aea6e1bb8bdc3aac73d7f

    SHA256

    5902e4e69e88840d325dee8fb8655f435ff568a01d01097da62686921e8477d6

    SHA512

    d170b9228ba4a49eda37ee3993944c79f4902776e8f335377d802751468f008de88513055788b4da045d63cb5fbe7c2b35d51b0de3bd3fe582da31fd9a4fab7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2b36412c296915c8b81b4e6226c0478

    SHA1

    1875ea9934ddab4554632cef3bfac4754c5e98f4

    SHA256

    c693797cb1607ca3c40a1e92559be54b9cd1962c939bcca165bce605ad370f9a

    SHA512

    9fe4f17866320cbc3b497e43dcf9d35b691188e3bf4b76ad13e0297e5fff5e1b9ae2011c9a6498191881039dffd175dc10d4497d7aa6414fdb8cb9e7c70d56af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d769661fa6ae69d842595954dea22cf2

    SHA1

    e0f19e6c704c78651c2bcde507cafb4d7c70632c

    SHA256

    7ec0b3cd4b6619738f15906b9cba0bd0838adcd5abc0344d6fd367415a948e73

    SHA512

    61cde06817b231624f909d9151e4e289bb36e2da2f2f608d999035a8aa0e1630675896115da1ed9c8836b31fbd3579fde078d4decc0d4b3c84ffbf692f58e08c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d079c90a770f572e859d8c31f4c17256

    SHA1

    a58299ecfda76fe4e6cdb8457b08bf50b15a7992

    SHA256

    c5fc7ffecb94518f7c937b717238d34a328dc6b5ce9a1949f69c7351508a11d5

    SHA512

    7f587a97ea888e1bef18882aee9c9110618e00c1be8b0bbe6127cda48e8633131e83bdf4a4936beec467d63ecdd01e98d3519dab008b12e7c955cce7f1a52f61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    550d6e713a9535f0507d60ae4d2105df

    SHA1

    e60aafe04d9689178dfe7d7875bb6db3ef652dca

    SHA256

    fad11b4b8bcdc2be9657bc579f5a07edbe73543d8cad4fd45a7efbc73b144376

    SHA512

    dcf1338504edbdf3a6f475d3e9b8c4c38056f73b6508c2500383854b259fb322d4f5f3261b19835f89bae75a992875c827ddccfdeecc6d0ca2e3b2276a934767

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94a2e33cf709a94163ff25832d705934

    SHA1

    79b4c6b7ae57d789a851ea812939dde2fa3e1330

    SHA256

    ca9063ed73c8f810a237c25961dca3e513314a6d826a111662c3b4f1aa9e72ec

    SHA512

    49cddf70525241d5cecf520d76fc5a71d71bf0f22a3a11dea1696ba1fe4a393e8c5ba9512cb2190fd1ca271889dc1726106180035a781a982db17deef59cafe3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_827A2BD464611B5891D523F77B43FEB1

    Filesize

    406B

    MD5

    e443cefaf04d864e850685a57b11175d

    SHA1

    5fd4e18e552eb88aaa1782a47840d34635a734b3

    SHA256

    3fdeb5436ff48d3e6a82120548c8d6c2530b078f3c49f8e64c821bcc29f50994

    SHA512

    3f7ba6bdde8aff17783d01d6fb50308c370273862bbcbc8e0ae9c9ea3c89342c009e1b3967edcd2b82a1d222d49d768999d25240775920344eb5b0e006ac41c5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2XHJXO3H\platform[1].js

    Filesize

    54KB

    MD5

    ca058c47f91fde91fe2689ab8e0b8a5c

    SHA1

    f49a88830ab0aedec26386d901232aba544e57d5

    SHA256

    376d19623973dd693148671943ac4e30194fc816761688e08ddfe9dc8553719a

    SHA512

    8bc32d1ea3217b651c9842f222612361c129ec5397f176d9724ea154012ffe774818d58292e6eea22deea5b466ae9667a878b5c1bbbf386070d74ed9764f2ab8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IW68H88T\55013136-widget_css_bundle[1].css

    Filesize

    29KB

    MD5

    e3f09df1bc175f411d1ec3dfb5afb17b

    SHA1

    3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9

    SHA256

    1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617

    SHA512

    16164d66d452d7d343b1902fe5b864ffdee42811ee90952cbfe9efa9847c58c0403f944c8e29db2bc2384ccd516b629cb8765e5e51de37da6efd75962cf82530

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NVDR4C1U\cb=gapi[1].js

    Filesize

    134KB

    MD5

    f9255a0dec7524a9a3e867a9f878a68b

    SHA1

    813943e6af4a8592f48aeb0d2ab88ead8d3b8c8b

    SHA256

    d9acfd91940f52506ac7caeffea927d5d1ce0b483471fa771a3d4d78d59fda0d

    SHA512

    d013be6bfc6bcf6da8e08ed6ff4963f6c60389baa3a33d15db97d081d3239635f48111db65e580937eb1ea9dc3b7fc6b4aecb012daeee3bf99cfebf84748177e

  • C:\Users\Admin\AppData\Local\Temp\Cab64A0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab652E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar64A1.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar6543.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b