Analysis

  • max time kernel
    144s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03-06-2024 12:03

General

  • Target

    91b70155face15b5039016d28c5393e2_JaffaCakes118.html

  • Size

    79KB

  • MD5

    91b70155face15b5039016d28c5393e2

  • SHA1

    7b31995314b008e21fa04d12ada4c84530279a71

  • SHA256

    b2ce915681e5bef2128f4d20af9df6e161c5f2050cd38d4347fe7eb157db7bbb

  • SHA512

    04de062a2ef32ab008024fbdfc14bff2828573178291b76626d4cdee793ee05e9f323da5b5a5b1aab988546980b5231f34f64adf4487e6b52230be1c50aa0206

  • SSDEEP

    1536:pnipje0tIqhRTgh/zW/HYEvkOzatgpZz7tzvZlm/:pnipjezqh5gh/zW/HYEvkOWtgpZz7tzY

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\91b70155face15b5039016d28c5393e2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2156
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2156 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2092

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    13ed5e0369cedc64c8437eb9a493a981

    SHA1

    880053c91809fef7b2a3d688143f554d5a05c0bd

    SHA256

    3560614f2f62c19498d2ad6c3b9fa8f232883167479de05e924a5a3ab19a8454

    SHA512

    18b3c940a3b722b58c476af4141ab987ed9f7557c1e52f3f20548b2c209abd67c943761d22e20ed59c36d69f8cd911285aff7efdf2d20f51c35cad62932aefa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_827A2BD464611B5891D523F77B43FEB1

    Filesize

    472B

    MD5

    3cbd995f8bc61a3669d6dccec2391d8a

    SHA1

    39e5903bb99f1d045f6b0c2429b43ea8e2d551da

    SHA256

    d302d7266945490d5d06e91e1c2557830688004c572f39343357dfd57ada50e5

    SHA512

    6335e0e9db04d46564a47818a02c3ed714ee705dbc70ecadf252f2813ef62ed14bf739ea545d69e3214d21600a2d9257013545ab3bd7eeba17fe1fb07b2a22ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    e4cfe490bfcb4f275723ecb0170555ed

    SHA1

    d53c322888771b7609a01e9c4d2241d523c42f39

    SHA256

    ccec7b3b27541541fdd3691400e1d82435f474fc3d37a9952938104580f15cbd

    SHA512

    51bdedfedd3f043fbd745f5f83500e60a6fca1a7aef657ce8be3559914a01aefc51790b57fd848b5df3c60b3b9e52f36834b18ccb3b77526ecfd564b0e643533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84ba4211aa024901e36e7ecc145ffb61

    SHA1

    f2bc44b7d98bf8446a48a792f1e682f55ecb5309

    SHA256

    22e557c3c6505cde1b8eaa5fadb07429758d72f3b61ae513c1b3a72526096672

    SHA512

    53805aa5100070716f7952a5d331922e86af97c46039455407c47d84b9be7ab616290d8c0bb9c0ce346483956775ef4ae14531c44ec0454eb8239781bd5a3d95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee9c5b14b20af013c0798259cd0d922b

    SHA1

    2ec33b496e2d07e107f1179c796918e967ee2e0e

    SHA256

    a2cac93f9ca760eefb20f3565e31041d8f6948e42f010a80e634402134fe0d15

    SHA512

    b817c15ffd198ad7dd2aaf64fd5e0329834567c912c38b97ec42df1d839cf35592553379a085d54d1cba321484c67c07f8bfd80deabc5838b87187c72da41109

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24e01b1e2c1fe9e2466c055da58f3ef6

    SHA1

    358d02b68ffbb531af83283ed5ac5c70504d1748

    SHA256

    86ce27264e271b2b4d1713f0a11a38a4299565f9ff7f5655c3075d79ac22882d

    SHA512

    4cdb8982eb40377a94086b5de4e28d2e72d7ab7e695920a2c25523ea1ce648b58dab8e9ac6b3203c3c9dc28ef3a911e5c5802cfe09c736af76d5086f7379630f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c4529adf01d09d1264d143115530787

    SHA1

    410436e350d2ad256b0764b02fe6e092ec31f7b2

    SHA256

    f59c884654eafe6ed6f76b32ef80c4483ca4eb3d8e378b8a7f8416c9a1428b8a

    SHA512

    14b0d67f4d868f1376295b80e25296983b6ad45d774efbe462553f36434a0453006c1753ff91627ae92681f1efba2737e19bc3aacc38547e2920018baa89aef7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5fa681bc363c5e79414dc44c943512e2

    SHA1

    bf99f1f70d8497f368ebd101ee64fe884ca0d289

    SHA256

    3d0a9685bb710f5eacdf2cb7d737f8e4b758d5c8a69c623eb4b388bdc9fc4a5c

    SHA512

    37fcdf712babbe5d077b3c5e3c54c887b467d69b0e02ec94d517ddfa7ef18d30e9ef3d040617d512138bc21e2bfc276749a88c18fa4467e79b9f5d6aec9097de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0539c090194b36dd359aab4c72ebaf43

    SHA1

    cea4de0ccb84b8cdeec7c24ab17bf7b59c17fe10

    SHA256

    f750cfcdb9da47af6f1205bdd5bb4e74d98765ce98985cee2e44546f6a9d6be6

    SHA512

    1a9ed0d548e20210775df5a834ed3c56f313f583b8468c101edede8c59473cad5af135141f0c9ea56652a27079e34c0d63b2c121a9b56f814abbd2dc99eb353d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6d51fb945827dcd9041a191e80c3085

    SHA1

    530824ccaef11407aa1b0fb6b01021a2615c9e6d

    SHA256

    552462dccdbeabccdf0373b3bb3d035a0e579705b41c4a5424025a20bfbb442d

    SHA512

    92498620f7d701b16912eefc0f75d15774c3372cc2cc8d128c9dee9581c574e766a0c26e59ccc839edd12e8442116750919962038872886984eff6522c0af8b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20ba59c0ea7bb4b60a5766dea38edeaf

    SHA1

    a6db5d96b33b0f4d5a9e5a43738d7e30ea86c02f

    SHA256

    03affdd8df3494cd457aa08ddf7feef6bbc288f041270178efc71f9b49cbcfda

    SHA512

    7333336164d229afbbb020e218384260bfe2d093c7f4193f49199429677cdea3e0a64dbfcb2b8034b01faf2011e6e650f386c0fdacebb4cd0b26e01a5d065af3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cc32df0c7af76e58dbf09a953004f30

    SHA1

    cfdfb93588f2e7045acd0346ccf78a0488a3cee6

    SHA256

    8c19948ae43d2ad7779177a52b00585df7170d528c819fa246cb33bb13332d20

    SHA512

    1969d1c41d3e76ad96d8a377423db627bd4a16a66f99843df4ba609f90acdfcf19198c5350f9dce88faae4b9c75f0572bc516766ffc9e1316b77e6c1b4a948ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b02b24a25f8e1d98c4991eaaed7e5583

    SHA1

    619b5461e2e2a88e706b6eaa258aed13cc31a587

    SHA256

    e36357963569f9d7fe180837b3d21aa098b6eac125c42285a3377309f4565698

    SHA512

    2a138dfd3dea63e36856d961ef880ae6ed9c5c159fdf920816bf845fe903f962eebc7b7ab3623211fc0d535238d44fb9eb87b0bcfaba5c4f335efb8f6c25f9ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    959942a5bcc8fe39c3f53014201329a4

    SHA1

    fd23e1828921a257c6e8c881dcce55b3bcb4e013

    SHA256

    5f94d24df496433e3d71e7f503b0b418ebe9fef9e2c63c52795eca7c3e23343f

    SHA512

    85a85d1443be19338215e73055540e6060295a36f8ac31dbec09c70660f1ad58e6ae67e1d914c27bb2e02539cb13cb5336124f99b2717d09ee94053931fb25d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d23a4d1a09542f7a359fa2cc109991fe

    SHA1

    e03f09bcfe7f426ffefd443ffc490d1d724bbea2

    SHA256

    fe95ce8d6b3f4783d58e9adc4ddffe1388c8b0d588d9b3ed971f8511c6dddcd1

    SHA512

    8b93c5519cb54077ae9e6a40e5b2574faf93401e2d731e91cf513f09a3ce3315c42483bbfebf75f162aff6e05923575ac71480e860c15cd1118b5eba9b3e3eb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e352ca566b394b42f4706783ee7eb6cf

    SHA1

    72653bb8e5c4e9368b851043b9de036b265b1212

    SHA256

    4613d5bd5647ed3ad6bc175e84f6d6ee4920bb4360506307ac56b6570a919b04

    SHA512

    12ef500b5b1c242751cc3beef36aac755276f7d7372c00d7c716167ed7b87df507fc331aa318e2ca5b8ab8a458509573c5f84a55f3a90ce1e0f1bd01546abea8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ad8db9f0427fe3411e405b816b4f6d9

    SHA1

    1879afa3d5d32a594d6aaf1e5fc45cba7994d61d

    SHA256

    4666dad2aeeb06854d77065f2caca54dc5eeea781ce8558f1ec98beeafbba5c0

    SHA512

    43cd4330a33f302ed3854297bc14b014c9097ff209e4984957ba250c11a6213e073308afe224dc60ddaebd887351ec96f3728825b3b5a04d6638c4f6413bcc75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aea2e337e2441209b52c241972d5164c

    SHA1

    59704c5a52e48c9b95f1923efa959d330b338a9d

    SHA256

    1ea1f18b74df9b86245b46fd6311a033ce3226dcd1c790a42281456d8c0bcc38

    SHA512

    5b5c37a14348de225c08c3e3bb2173b3a25bb23b4e14064129060286c28ee7a4498c64fc34dcd177b0a39a2bd4e437f3b256748b21d617d75a53ba91aa43e369

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bd26f52c951aa0c0c4b575d90216755

    SHA1

    f838f3fafa297b525c315ff9aec737dc9e29d4b2

    SHA256

    c096f1d9af94805d0e226856568a01aa76a160ce5de86a2e784fdab0c6612b9d

    SHA512

    cd5e4b5797e5def61312dfb1c19a0c41958336c1db3c9dd8886828b2440bf5b250dbb7f9fc02970c78903dbaed19a7bd35b4330bd0400412373203444580212f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be9a2403afa3ead2d9aa194c1ef165b5

    SHA1

    355a8ccc13b196f3539dd0d7837c9b0d9d502b38

    SHA256

    9377a9137450f710a0d11f1be51bfa31acc3bba908e8f4d882b46c8bf23c025f

    SHA512

    84e4f0ce9f66b43f696f3f93e1c9d6aa50980c9ac75d1b28db45354b856697780ad3a81062f20290fe73c1a6ef201dd2d99b4e6d72ab1bc31eea1987f28b7824

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c4900528f953e21732275297e5c333e

    SHA1

    080c79685ee2557e8abbfc536cb2ef6fab3e2c8f

    SHA256

    44c30755d100be9f6f3263692da783eeada0f7013d4132559e0df9b88e46088b

    SHA512

    02a1e209bd8c0add8d6db7a32c5978e7ed2124f256800d3d756a681fc13cedd63c1d108d6df83424ace088fbbeccd6c51845e0b6871e25a3896b7bcaa2edcdcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    b54fbd44dd6da7296caacdf17e1bd4d0

    SHA1

    4db08405c0da7c398d436881c003f6ac01fd1c0e

    SHA256

    9b27badbf28922890626d8744de49cacaf5b2fd655949b7014886260e1f7c13b

    SHA512

    20453c95101c41b563ad6a78df7a67a0e2e384f10f47b3fcb2190d1f9aad5fd895f64193478154558a9fbd4af359631cf0380cf5d22939b172eadfaa181df821

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_827A2BD464611B5891D523F77B43FEB1

    Filesize

    406B

    MD5

    c51241510a9d42978be1208462f69ed4

    SHA1

    0432d52705234ba73a1d7a5f5247c4ad88819a7b

    SHA256

    8f59e29a9ae2ef78a10cd5cce0a54a7f8576af189a77570b46816702637bc72a

    SHA512

    34bc156ed40fbb306b535fcdfd63ca555e582d6d68ca937815b93dcadc3c27395077ef41e0b6a0b3a078ff9ebab35892d272d230b7e527af8b6d55068dae0d50

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\52G8PVLC\platform[1].js

    Filesize

    54KB

    MD5

    ca058c47f91fde91fe2689ab8e0b8a5c

    SHA1

    f49a88830ab0aedec26386d901232aba544e57d5

    SHA256

    376d19623973dd693148671943ac4e30194fc816761688e08ddfe9dc8553719a

    SHA512

    8bc32d1ea3217b651c9842f222612361c129ec5397f176d9724ea154012ffe774818d58292e6eea22deea5b466ae9667a878b5c1bbbf386070d74ed9764f2ab8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\cb=gapi[1].js

    Filesize

    181KB

    MD5

    bc9ced769206f4c3a7fa4a45a3bde4ab

    SHA1

    d98f42d7ebf2422f38fceb549643b44196a3499c

    SHA256

    5195cb1baf306ba306ec62513e4a5936001c6d4a86e2e99c2cfed7648af84684

    SHA512

    b408c4e27196def6e55664f9b470f4a6fc3bf48a7a7e75088b663ffaa4ad73439ee2b2e6f610e255cb73851d2323104ea7c469db3792e96477570ea5e65d334c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SVBQZB4R\55013136-widget_css_bundle[1].css

    Filesize

    29KB

    MD5

    e3f09df1bc175f411d1ec3dfb5afb17b

    SHA1

    3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9

    SHA256

    1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617

    SHA512

    16164d66d452d7d343b1902fe5b864ffdee42811ee90952cbfe9efa9847c58c0403f944c8e29db2bc2384ccd516b629cb8765e5e51de37da6efd75962cf82530

  • C:\Users\Admin\AppData\Local\Temp\Cab621F.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar6251.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • C:\Users\Admin\AppData\Local\Temp\Tar6EA6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b