Analysis

  • max time kernel
    145s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 09:47

General

  • Target

    915463a457749489a8df137470344a81_JaffaCakes118.html

  • Size

    123KB

  • MD5

    915463a457749489a8df137470344a81

  • SHA1

    db22ae545285978ddc52a9903898878504bd7ff5

  • SHA256

    23c3eee43795c70a46f7502d5f772c89b707a763b9dc7a661d2a6c18b174f017

  • SHA512

    172042c491b0bee731e3b00892bdb2bb0017af103bac9b8f4de1e925e31d0a8053836cbf7a87ae29c1af4d073b11fd499569745f3a05cdf1e1bd7c9b191dab9d

  • SSDEEP

    1536:fKVBZ/3KXsaSc0NcY1iMbETZcZip81rUc+q9naOPLxoQjxT8mFsdi:kNcY1iMYZcZip8aE5a8L+QjxT8mFsdi

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\915463a457749489a8df137470344a81_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2400
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2400 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2956

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    2a267c8371f84045236028d9d98b0988

    SHA1

    689e34bfc1f5b0d068c4ee62baca3e32f2a8e2f8

    SHA256

    3e6148f5d2f700962e4ca856d369cf61329d27095aab4081997a69c337194f4a

    SHA512

    7da74e5c2144e31887d70c62f623a0271b33153f0be825828f006ecec9fcb7d1f006249171b2b6746953cec27ce3ef159f980919e2b7ac996ae64d2519938e5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    2fca914f94c4c3c3307f592ba19eaf16

    SHA1

    529505f203cc559c2ee550b00b74a42fc4b5bd3e

    SHA256

    82e84f6b14d0be5f01c2044a2e55c699a5a30a6d37cbd0ebe08e59bc8f74245b

    SHA512

    dd22e59d87b5bb0f5efecc781d82e423f19d37ab9dd75bc0a70bc318c0814d4948866fa4006abaa1f4ac9c8ed90e59b8903015a13387d0d03048d86d84bbc310

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72404a90701232066aff90a6ff9dec14

    SHA1

    01d4f07b3d6509b14ad0a9bb06e9441decc89fc5

    SHA256

    76c5ac7ca5df045fb630a517ce797fe4447ac2a0c06141bb0487fbe92372ea56

    SHA512

    85216303ced49d419bbae63e965af5340e526764b7a4f492a088bd78b3002ee7d22d8ebcd76c67eb7a3c807997b5fd5a684221450644bd9fe40e0afd8da7367f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7e0ef841edaf1cf0de79d082def3a76a

    SHA1

    99b765293c97a3dff7a8ff2dbcefac2c0a634263

    SHA256

    2cd5f46080db99ca7b9de215dc32dcf6cc64d20f35e7ca4cb9a7c6d431928d01

    SHA512

    d29a4b44dd926dc897cb4ce93c9424bfb53ee3c6a4af161b3ed4d0742143e7287178eed9439c20ce1f95170cf5bd2545a3e4a9c9f3966e75059cf1fa9bd04626

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f617da102c4c17af2174270ef338f25b

    SHA1

    1252bf128377023102f1c20cb79c2d74f7139c19

    SHA256

    08b78d40c2bdcad4b2667c44190d97518f563e33ae9d79e21c36b7dfa9fed452

    SHA512

    a49734936eca857e136ef1c04c49c9dc5c8cbd96cf587559652eaee6939d51d825b5799d0a22219c03e237096ac65311545ba6bc37e60e5824aab81d6cdc2fa3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2414229dac5e681f4ab7d2bc3fd77ca0

    SHA1

    49b0193157489b1173e345cfcc7ad8a2d050d97b

    SHA256

    499d729be1d5859ed206a0e1559a885bd5bcef2a481c0c5935ec53e10d965e0e

    SHA512

    5ba06ec4cae377f636dbf301ddd7e1342204a38b8d36c786aed0c1c4fa5cf87b3af505b92c3bdbf814f2946f2706d9299f2a4f37f467eef892b28767480e6805

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ae0488255b2b268c5fb4e8b616a9dd1

    SHA1

    c8e256f1601485983757e4e7628da15833b421f8

    SHA256

    d39fdcdbe0baa6ae91ecf389d1c8c7dfb40b548e558674e875ad07a364f7355c

    SHA512

    1fcfdce2a569cbcfb7faaff3eee880fde8d6cd5b2d925152558e77031c7239cfb94ec9acf711f38877099676fbc241b2bd5a5f9003bd196312c71dac41d0f526

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4fe042f43997045f5678dadb0dede50

    SHA1

    9d1b0004df1e84c4de8a11a9d2a31c8c0436c609

    SHA256

    41ca792b8634446ffb9fbdf04a75f0a82494d77f843c81a0d1d89a494005705b

    SHA512

    60e4437a564b303a75a0148fab49eb7e29099aa267ca99a07bb9382df5322b8680bd3ef816794971b88563e7c62b84bcfa13cc002f4487a0243c0e02295cf726

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a647c8d572e4b5ee7bd34d9ca61fb8a

    SHA1

    1f0d4100bf50d60e52f67ba9270905814aceaa51

    SHA256

    97de87e3f9703df298372f03a235bb36c61600558f8f263c679d27b4b77b6d43

    SHA512

    63c4714728dbf60560cb33c6cb2797c847bc4b17403d54d1b33f8b73cf7ffcc896c3294703edfb8c834381f2e695017669fce89fd55b035fcde7d29be87557aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3bfbe056a4b444a231ae55f5d7ec516e

    SHA1

    daec5a9fed933fcec865a031d9f841a3e25dd064

    SHA256

    bf81f4650fc668e82aaccb8c0ef5f0bb58ccf4df000ea8ceac64a7b0315804d7

    SHA512

    187fb016b81bc3e67fef6653fd4ba38ef9fbf1f84e1e1a00a94add3644466be723a0fec9fe19ccd0048b30883df3d3cc986878fb9c1c889620bf9cd9f2a127ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    21631a829f322ffeebc55be7fb97ef1b

    SHA1

    f7d799f3b7d30be4eb9126e28ddf278329526e55

    SHA256

    abb266cf30fba863ed9e3203bbe36ec0be0750efa47edb35e42d4a95ca501295

    SHA512

    28a0b41ef5bcb08a1c8966df5cd697a1b917042b11758185814b83455297b01fbf1d59d25f63bb75d941edad40d9d482194f334a0c642a0836661780d4e980a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a1600538ccc8c6a10cf4085ee3e81cd

    SHA1

    28f24cf56a32cc1cb3939c6a47c078f9959fe2be

    SHA256

    0c772a21d417a5b951e52e6e751a102b97704ef090cd4dc0ec532e65b3dda413

    SHA512

    54aff268f324fdd4bdf1b970d97644e6c741dc705cc8a5555d8210cc702a37860d0fc27a33d47bdac503ab16a5ece42af85842c1d1eb06faff3f259020427321

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51fe569c447d779b5f540b6939b09222

    SHA1

    c7cda234d5546265f15b14ec2d34815f50648332

    SHA256

    5fcaaf348db6cda7f8c9d337445cbbbf64b07f32cbbcc6d2c02481596cf91c04

    SHA512

    7c1221cbef87110ee872b0bbfea2d9228576da271a490ce58ba8a611022fc78403b34a8584a6146bb2e6a10119560862abdceca9f8e1822bcfbe9c008c7e17f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc61ec06000f12566a583b9abccf009e

    SHA1

    6e6b2f54e8ffa4fab6da7d60d23cf18999164837

    SHA256

    95e2abc58744676470eae59fe069a72d3dc110354903a2560b709f10e408845d

    SHA512

    a01492b620c9d8fdf90f056799908697fd93ab9842cc0f20ae3f881f6f7add8eb815ac6926373ded3b38c0ab523be5e81757ed7050e6a3ea136b4b97d26f88e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52b70cc3ebe992eb1b40c9a462277d7f

    SHA1

    594296b7360c881b05c49eb4e6afad98f614b5c6

    SHA256

    f27d12af6abc7c81cf71b251d4a4fc37786f8dd9f191bd74147367b89d6a46a8

    SHA512

    323adc17d8f2350002270ad9cfa9b5531d06c6ec75d781e1789db5dc94d29d85ff41fc949c6f64498c4891937b1bf1053a88d10a5b7bda4c43fb4921eab53489

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed3c8d79c41a59858227c8bc2776edc7

    SHA1

    090ef02b4223bf273b8d6ca2126b1c038fb3d9f9

    SHA256

    22cecaa24bcee5f03047cbcdf5981a063f6c67e1275be82ca87fc00192c3c693

    SHA512

    ab47f694d8dd3e0710db5511ed41027ce71d1194e23bc443a70860e3b07e8cd987a638db499a712c80723fb47fd4ae484fd9786eaaa237c4a1542d8a40746ec4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    720006c585766e90e72cb8880a135883

    SHA1

    ffd526fce338e1d16b21596d6a5f56471e51e8bb

    SHA256

    a851fdf1db25b02760b064126e4b45ced7f9f3d3461c36026f4fc84e6ab673fd

    SHA512

    1b3dcc62178a17f921a0867c7e0a57d6bf1ac2e5d58ab3aed7d94eef255b3bad1b04fb6d0fde4376ac523f8ccb52a2ee692bc603a4b7d62ca345609ad87c192c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    d3961dc3d891d3bb1080d705b6c883f5

    SHA1

    d416acf0b61b9fe4c505a9050a6df67f60c2b444

    SHA256

    0fa4316f3fb5a7c5421d3fe74da442cd509c230b170a7e75d3be05fed50c23b4

    SHA512

    ea3d52fc3b886462a3013f97502ebf359a9c59e20aab724f0acb6282fcf0e6ca597b2da694c3040586e3df85744009b76bda32bbd190bf7281b6d4231cff19fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_827A2BD464611B5891D523F77B43FEB1

    Filesize

    406B

    MD5

    a238d68db006a75f615facd61baf9b48

    SHA1

    8cd62616a0bbdda9913eaec31ac294e99c6c2645

    SHA256

    28bcbc47dc1b822d6250d8ab3b405981378ce8df1fdaf8d76b69c07e49385200

    SHA512

    58dd257d3b121eec2b33ed6bd355227b55128435803720ca80dc8517b5d5f9e1aced3d6b4cba65e0f05e30e8863bb28e6d9aec7736625220b3b568ed67c8c680

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52G8PVLC\jquery.easing[1].htm

    Filesize

    114B

    MD5

    e89f75f918dbdcee28604d4e09dd71d7

    SHA1

    f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

    SHA256

    6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

    SHA512

    8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52G8PVLC\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    682c26af19b240f98d2cb951721fa54d

    SHA1

    18e58b652c7f82a55ab4b1910693686049e25d62

    SHA256

    96428f0f585a874c185d560538ad83ebfad0365d760fcf9fcefe80add9e3c980

    SHA512

    078aeef086271b7f9cf0f6e3a1e7908d7e38465a1a7a4de6f2a785147e9130551a2995e80600824da9341d58e5425d4505518e90eea9ffe1c64f4f41825a9660

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\cb=gapi[1].js

    Filesize

    134KB

    MD5

    f9255a0dec7524a9a3e867a9f878a68b

    SHA1

    813943e6af4a8592f48aeb0d2ab88ead8d3b8c8b

    SHA256

    d9acfd91940f52506ac7caeffea927d5d1ce0b483471fa771a3d4d78d59fda0d

    SHA512

    d013be6bfc6bcf6da8e08ed6ff4963f6c60389baa3a33d15db97d081d3239635f48111db65e580937eb1ea9dc3b7fc6b4aecb012daeee3bf99cfebf84748177e

  • C:\Users\Admin\AppData\Local\Temp\Cab2909.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Cab4178.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2907.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar418D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b