Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 12:18

General

  • Target

    91c1f4c7620e7cd523ee95a130bda158_JaffaCakes118.html

  • Size

    133KB

  • MD5

    91c1f4c7620e7cd523ee95a130bda158

  • SHA1

    1400dabfdc7331964aa762206eb78b6a70e8a239

  • SHA256

    6a8704415c01f4bd69a57dda30e93ab85a0e433ae2a230cf11bb2e0069d0b16e

  • SHA512

    e6cee40062f7e36855b88c17474239acf7ece3646116412c0736f9527a1da4e5c9ae1f4e5bca0422d0df0ecc7c40ac4e3e0190fa973f8829c5fb4d682f78997d

  • SSDEEP

    3072:dklcWklcaklc7uG/bI+3SkcXklcPEijZeqhREijZeqLWLbzUML3cUTraGZ5wuV3f:dklcWklcaklc7uG/bI+3SkcXklcPEijU

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\91c1f4c7620e7cd523ee95a130bda158_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1872
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1872 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2768

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    13ed5e0369cedc64c8437eb9a493a981

    SHA1

    880053c91809fef7b2a3d688143f554d5a05c0bd

    SHA256

    3560614f2f62c19498d2ad6c3b9fa8f232883167479de05e924a5a3ab19a8454

    SHA512

    18b3c940a3b722b58c476af4141ab987ed9f7557c1e52f3f20548b2c209abd67c943761d22e20ed59c36d69f8cd911285aff7efdf2d20f51c35cad62932aefa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E87CE99F124623F95572A696C80EFCAF_6B69C29B30EAF4FCF9E240B3D6A77FC9

    Filesize

    472B

    MD5

    d15af181df28a93d3dd0ec8748e1fd4a

    SHA1

    a3f4ca80c6c94c21fba95801b8171186374fe808

    SHA256

    897c589d175c21601455adee18069f1ff0b0701b57d11a3f3fc1b13c2f9bea6a

    SHA512

    5dd966491348ba2d0095e208233340e0638421f0314363534e8e97dc1688dfef943c6185b47e52133d83ef7f23a4a624c0cffb89d6ecee6d57fcd4400e708bb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1B1495DD322A24490E2BF2FAABAE1C61

    Filesize

    192B

    MD5

    2c094a2179651ce7af30e50e5d1e983c

    SHA1

    0e801f13e19e746efffebb7ffdd043a077afb96b

    SHA256

    8de3ef35cdb1c148171f6ea254d74ffc7e6add4dd5410cb003670177d3ab1aa8

    SHA512

    286b6c309e5f3688514d990d09b982430543329cda198738d8782fc74f3907c935db36ee3f881d2230ed0c493641e6e16724c9b30f2faa67947ab2a5d17e8760

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    cf9d307a55a69bedac67ad7d50a12a8b

    SHA1

    d1553b6863a07dd35a25f61098e2e06458b61b36

    SHA256

    cf8283278cba6151a56cc57510afe6805e7307a138d567ebe9805bfb40662972

    SHA512

    03a9263342d4cee260f3ff1f0045e8690f94b7bc2648aa6b65d679b4e5b984a75c25333f874877b377527b49d684b78b27ff97184f1bb06bb862b7720db449a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cf597ab6f9f458508ebcaa3ce41fb35

    SHA1

    5bd0e8be88f0dc0878024eafa0748b81e906fed6

    SHA256

    07076751c8fe9e8ade2b61911b6e5519c89f3394cbc684bc97b9793012cf7b8d

    SHA512

    817da1dc00de82d4de5cf4ce5043caad1379775e70e370b84532576e3a5fb07058ba714a85c29f6440eb94ceb3165a207b1971ee5ab5eda043661bc93a1eb71f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24e5e8d1c2b318d7b113df7d475e9ccd

    SHA1

    257b4e24dec6c96f73be7d4a4b4d5a838d525650

    SHA256

    34147d080c1cc9cca5847b2c2e6576ca580765257d060df177fe08a6afcda969

    SHA512

    fbff8a2de102215c99e833a8984dc8efb70bbe8e82c2b291c01b6d704da8e87a81819d6564266ceab07bee9ecfcd690bef2e0de9e7eb86eed0943a151149b84b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0f329649eef9467c495bbe6e2a1fcbf

    SHA1

    71218f6ad02c6f19b8dfa109ce7f8236294775cc

    SHA256

    60942d4c2357a2607ca2507e3f3afbfef2c28ec67963149ec5e79c03bdce17eb

    SHA512

    20baafcf46c5394785a82c206ee6216d8aebfe0c7b4fcc916a0d5daf2426756cf9b7c1cd9e683d7ca25337da714c979f9e1916807a7c80fe01b58edf31c3414c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    086dc9ff7bebdc9d5d999d6c83f69268

    SHA1

    93febba19b70c8d8279a0d8a6f4748f4c886702d

    SHA256

    c33af20285554f0e3572f25ae4d4007817c406846a5380998ae551c37d4b95db

    SHA512

    af9546099bb263268fe69b5be0b39cd4b8fb49bc1fea20cd4123a8d08b0b52d0db7f004b641b265c8addfa35f5fb730ac98caf764a38aa1430d89c19a60d3e4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a794b1441b0f535ab5b289a3527bea38

    SHA1

    04b8981c7b04c16b83da2b30895ba655027ddf5f

    SHA256

    91eb6f6cd92a0fa3a381c021ee817f896a092a0bd638761fdfcbb959d92d5258

    SHA512

    b3bef231706ce2c08ca9178f628f0c517f2e3e0be2f3bd5c90bc628758469c6442c5cf998b7f97424fb9d7b627f51c52213f5f8d2f6ccf17728611a47e7453ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85ffe63ccf3ce44e48a2c0c4137bf826

    SHA1

    ca1d5e8986399c8707904b373a85b36d18cb6742

    SHA256

    f7898bc01f57eec3a6cccfdcde0cf1e2852b1f64ccbbaac4df0efd55cec2d9a9

    SHA512

    92c37b919e4b80959858a2df3b8125d498be27e38fe0f15acfeea36e67d0b038a8ab81c2a3df64da21bf8ab6edf58b1766e7a12c22c2e5a13feca1d8bc9aa936

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a20014d4b42d20d60b1478994d79169

    SHA1

    f902ce2392f48c3064761b4908d31f6ac4f443ae

    SHA256

    dad64993d95ef875a5fb2d8d0d498528241c46812537e695ffd7ae0887260ed7

    SHA512

    047ed90cc4d38c4901efd834248f13427f87661a245a63c4ac1402702c0a54c9dcae6f9e5c62bed8c4019e13153cb58f686a36d3caff3b0afdcf146acf7d897e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    651c50cfe67b9c304fd2d283a94d80a8

    SHA1

    5665dbd4df6d4742bbe57e9ca23e0244ed978074

    SHA256

    175554f845aaa8e79d43c19e4627f100cb6d2000bd04226b69f4dfc457051443

    SHA512

    ba7c858986ea47bb5726fecfbd036045d702125bbacde859a64f06a9eee6d0e5bc0a7259524c99fb1f974f1efd670f18bedcbd781e367d2f4c1085430b69a9ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    078d76edf5e354eba0261de4e4c48f64

    SHA1

    4927a7967f79192468f76802e0e18b4e83de12d6

    SHA256

    9c9ae007f0a9c6147d812e8772da20aa7062e7096ae7185047b2f8a74e6dd264

    SHA512

    ff97f4395c41b90fbfdb9533e2977d3917f771bb44fbd517c4843c8a27f042904d64771b6798f1fb8f79234e0840d24ce97dea394fbf92083cafc75e87d408cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82ffc394f89ce9517d6f9e39ef5e153e

    SHA1

    8bd1c662a0ea105646ec9e3848991413f204a268

    SHA256

    e0927084b0a2a4d023ac016d4aeba6fc7ed8b086301e062d5edd117ebcf21040

    SHA512

    03a6f2626537cc50491708961cd7cfa8112f3e1ecfeacd6c87f1ee392c6bb2c6f0188f78b49de81755f24c811888a270f455bec5e4b35c5d9ab952eeb97451b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f3e4fe8752a483caee8b55b7e9e5fc9

    SHA1

    630d060f2921f875a04d8ee6d3cc48fa488bed7f

    SHA256

    51c8dd0950c64e0403689f74ce0e5b595a64bec92c1e8b53b469e9c7fb8cfa27

    SHA512

    956cd19f319a61723c89d0602a9a2f845fd0aee4118d79d88fdea6532c2253c11d909fbf7d3fc872f017ea59d82248ae83e0862470e1a7ca8f70ec5de337fcd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    707b6fb350794fd4f50fc7d96a75e14c

    SHA1

    e5fe3db04f4acb65c771d9e9b8a39688c203b1da

    SHA256

    91e813850549e5ae886f0b27f4e7c92f96c94c6946452bf5484368e704791edb

    SHA512

    b075f6949342a794bfca20cf216d941898a73dfa3f0e8f1dffcf8d7a9762e5fb04a3080feac22f30b78d213e209db35f4bae4162bee0ce27e281e0c9926bc128

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a677a74fb7937624cb299616667d5ade

    SHA1

    d0aef6d6a9b2ce73f4dbe69f6e6d1c931003c076

    SHA256

    008856faa9a57d9ab98aeca836eabb77e6ab862885e391579c3262e2a7fa1ca4

    SHA512

    2aa95170ba64df10dd925959a7e5bf88ecf0bd34c8c4e7577cb93523f0c76f3a993c45a461a232da589a3ab433242340d211b8acd45aeeaf4d2dea013c15f20c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76c3f863ff553f74504040d4a31ca349

    SHA1

    460508b6793eacb0c7582ae9dfebf7441c37a3cb

    SHA256

    8164423990ca26cb70cb1a592b68e74549998cfae0efc0a1fd34b8d1ef46dc3b

    SHA512

    49c964dc8a96a236b95b41bade3c82d67f109f1ff79f93df5e61e74426b4f34022d3468d3400980f8aab09281370bfe1cf2573f18c9b6df723ce2637fd47e9e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e03edf936df0a5029a1f79611e5244ca

    SHA1

    01436994bd170d1c244e84b87c482f858a688dfd

    SHA256

    5223493b84f9650f2de1de94594baaa407c84b1e3785784477bc00688829b3ac

    SHA512

    c9454a4947893444ad91a7011fd1de17e6879f02d38c7105d591697ab393fdeff135bac03a99a1ccee158fe2f80113127fd609da277a761c96c1237e6bbcb395

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eaba4df371505470fab4ab81b03a54b9

    SHA1

    53ad1bf0e72b38cc3915eabd2ce93443c24336d4

    SHA256

    ed9b3bc928f2969feabcc32533bd8973d1da87ba276e1edfa615ee60e0c7db2a

    SHA512

    e32d51426ee6020182ae532ba776896a8f98cf0d66c372cd950c24eba9f8bc62daf61cae29e3644a4e726cfcbd969fc145c0c65922dea79d0ed4fdd958441628

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96dcb80ca643b79ea3db9cd31ba33769

    SHA1

    238d919fb858e351ee964cf36134189721569f20

    SHA256

    eb5b52602c4df45eccc6cfcffa66c57d56851eabf6e30608830e5ab86a3ac08e

    SHA512

    164b582338998829fbacea8eeac9a26b2fdf40a27be951ccbb4e1f00bd55a4c75eca0c0e485459c743be27517ad837027b9ccbcfd8a2b14b9cf8c307aa19e012

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7ab2bc3fdd84681f518c333b5559b6e

    SHA1

    73a9ae39cac3ab474bbaf918a2aa28a161278620

    SHA256

    77c385f7c2870e918e7ee953e94a9e1a995c5a3e6c4dafa318a2c1ee35da244e

    SHA512

    04536221d09c9549e49a36663854d7d54ce49dcc882920b5ff4451bd87d7436ed98b28d69e12aebceb1edb8c763821ff2d30f9f6cdb16dbfcc1b6359763da2f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_D727CFA7BCFAF501CEA426110263B756

    Filesize

    406B

    MD5

    0fb426bc040bcaeb22df502ff538a440

    SHA1

    f0d09656d322a4fa26aaae23dfde6e910fb998a5

    SHA256

    58e4d781ca16a60677cf37687fd254634e874b927c0c916b34772c44fb45d087

    SHA512

    c92c9bc491169a1c85eaaac86991ec9ff2b77d91ee4957164cd697849a3aac104f8611e26a869a501be1a80a1c157ffb7b2ac8859ea6eccd24b97f42394eacc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    fde9fbbbaf56ae34c81e09ea0797df43

    SHA1

    15d1198f92a4fdc60ea4abd725f69fdd61aa3467

    SHA256

    4bf3665a73e1af716d22d4a9621eab7a1be682edc237a649b5a8f5c6d17fe196

    SHA512

    ac75d45785ed144dd748966b4b4a45a24009986506c7ff3b1d1d50b6e02569962035538060ea53b8d39f9b9bbb4c01c63b4f66cd38f578f1d115a70e2d0cb6d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    df75ddb6f22faa52ffec901a1c4a843b

    SHA1

    0e249872644355b9a83cc0b737759dc8534fd04d

    SHA256

    ee2ecf6a96c0e8f979f4cedf9d27e274654fdf5101cf3d2a898eee2a8c83c011

    SHA512

    1f8bb074b9ff348dead2046446491282fd4c84522a91577e6fe4f19b778c8f90fc303ec866a7198b9c16ed40e2d031aad00bb5f0e88729c5c4ec96fefe1775db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E87CE99F124623F95572A696C80EFCAF_6B69C29B30EAF4FCF9E240B3D6A77FC9

    Filesize

    402B

    MD5

    17ba13a35cdea5325496a9fecf50a610

    SHA1

    a08d3d94f3514ae0e93971cca0d737d24956e2d1

    SHA256

    324c48bab3aee6fcdb545dcc9141d74a8c175150153f799a1b07c9cbb088c7e8

    SHA512

    f8d31b97ec3c1dfe11f748999a6e563d5d65b4098d3d597178acb8ad26e81233f123989a8f8cfc5ccdc9734106b29a38653e70a1570b3cda47fbb3979c6e500a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IO0LJX84\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    682c26af19b240f98d2cb951721fa54d

    SHA1

    18e58b652c7f82a55ab4b1910693686049e25d62

    SHA256

    96428f0f585a874c185d560538ad83ebfad0365d760fcf9fcefe80add9e3c980

    SHA512

    078aeef086271b7f9cf0f6e3a1e7908d7e38465a1a7a4de6f2a785147e9130551a2995e80600824da9341d58e5425d4505518e90eea9ffe1c64f4f41825a9660

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\cb=gapi[3].js

    Filesize

    134KB

    MD5

    f9255a0dec7524a9a3e867a9f878a68b

    SHA1

    813943e6af4a8592f48aeb0d2ab88ead8d3b8c8b

    SHA256

    d9acfd91940f52506ac7caeffea927d5d1ce0b483471fa771a3d4d78d59fda0d

    SHA512

    d013be6bfc6bcf6da8e08ed6ff4963f6c60389baa3a33d15db97d081d3239635f48111db65e580937eb1ea9dc3b7fc6b4aecb012daeee3bf99cfebf84748177e

  • C:\Users\Admin\AppData\Local\Temp\Cab191E.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar19F0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b