Analysis

  • max time kernel
    148s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    03-06-2024 12:41

General

  • Target

    91d29814849b3b5249cb801fba2a14ef_JaffaCakes118.html

  • Size

    513KB

  • MD5

    91d29814849b3b5249cb801fba2a14ef

  • SHA1

    ed651610f76c7b3711841da29c6f7b891e20175e

  • SHA256

    6efce324f30675d6266bd8b854e5bf258e61c2337dba010d4c95573db7440055

  • SHA512

    4205af0b8ae37120835e6b10e1828e728154be707303cadd4a32cfb706bf54b6711e2b6a0cf23c5db9ff67c3b1321d25325f9126d614b199b84107bf2a243c55

  • SSDEEP

    3072:wm+IpBxYUVW9zfs49PwVer5AmPTmBcM2mqt1I:wm+IpBxP4trT+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\91d29814849b3b5249cb801fba2a14ef_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2896
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2896 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2824

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    13ed5e0369cedc64c8437eb9a493a981

    SHA1

    880053c91809fef7b2a3d688143f554d5a05c0bd

    SHA256

    3560614f2f62c19498d2ad6c3b9fa8f232883167479de05e924a5a3ab19a8454

    SHA512

    18b3c940a3b722b58c476af4141ab987ed9f7557c1e52f3f20548b2c209abd67c943761d22e20ed59c36d69f8cd911285aff7efdf2d20f51c35cad62932aefa0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_827A2BD464611B5891D523F77B43FEB1

    Filesize

    472B

    MD5

    3cbd995f8bc61a3669d6dccec2391d8a

    SHA1

    39e5903bb99f1d045f6b0c2429b43ea8e2d551da

    SHA256

    d302d7266945490d5d06e91e1c2557830688004c572f39343357dfd57ada50e5

    SHA512

    6335e0e9db04d46564a47818a02c3ed714ee705dbc70ecadf252f2813ef62ed14bf739ea545d69e3214d21600a2d9257013545ab3bd7eeba17fe1fb07b2a22ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    bf54565e6fe43dc8c984d71414e38da6

    SHA1

    8da44807fd62dc0f4c931a7e419b4932b3230a41

    SHA256

    3a703cf6187895dfce88ae094db6e3bb823597cd1785cac2f84298b3ce347865

    SHA512

    89658d82fb7ec148efdfe6ac332ff765398b34704a952af23969628818913d1f1e5e8e7fc38ee5968ee9f083597947403f57c266a1bc8db47aa6e2cc5cb80cf7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    7d900e751e31ff19c5563ff661b9cfd3

    SHA1

    f56ed406424c308df102780733fe0a6fa4985af5

    SHA256

    01db741086c75205a49e370a242f853fdfad06178980eeb3cc701c72a73b03ef

    SHA512

    42117f0d95b866ad3c4a172f9274432f848704fff5ef4cafa18571ba770a4aa05b70e2e00d254088e59c24c60f7bb988bed3008070ba472da630541b578e51ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3e4d62e6efb1aee77069b018a6dc09be

    SHA1

    83916032ed22baecaa1b4d2e3f2a6afd15c17499

    SHA256

    9fcc0dd8a62400f89e90d1cfc379f153dedd8af16ed69e07ba01b4209dabe66f

    SHA512

    ac187dd02be10387092d95a9574ae92597dcc94ac5ed977740aa3e1be5342cf781a240fb1ba95b993a91d8cdb8b5f256c21d0d6b6866a7c33a4a4efa0e7589cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c7c67a7fbedcd28da8e88726004cc94

    SHA1

    66c0382bb818d794989c95c485054e973df9dc55

    SHA256

    f8f9a8abb11468da1406fe438b9410e686bab04e8592f8ed4821639bd21291dc

    SHA512

    4354ec5a07de627f8cdda615a5b26002361f91bcf40af1cd0a563eacbf99731e9ea61bed74b4772230a305343cd73e0d5c750fb7691779e769ce47b38fdb9286

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca5841f2fe3d16cc3e46e40fc14b6de9

    SHA1

    864eb1ec6fa2c6268e535982fef86af03c19f0cc

    SHA256

    2cc9a919442fce1b4982b4790074f790b917420cc6d34b80dfdb029f68341a72

    SHA512

    03ee4654b5e4017b73707aadc088ca752202c5b932bbc5c016994e2663240178262ef5213f761bdd7ca8504139493a86b1a79b44db7c05636b51d59950dea033

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    50375a4db6b3764e66783701c99c3d70

    SHA1

    f304ddfa6bc38dd07cfd016dd57c262f0840cf35

    SHA256

    ebbce44e66bf8963f7ec9d8632ffe025af1c2edf20d68715a9a8d00d68cd7241

    SHA512

    f4924a1c8c1b181fc0ec54fbfde11e4cdadb3978a1d6bf4bb08506d92507e46ff15ffe6a3ff675f4c343bff094bfa54db6cb58d06e21fb76f628af1b06408d22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    198e5c15e73ed62e00572bd8d22753e1

    SHA1

    a7b21cab172d6fdeccc8bfa9eeb0bb519a90ff16

    SHA256

    1d63ff7422b05305d24b240de5e1ac1f8e543929b7b5dc07f5fa2f1a6c17a4d8

    SHA512

    f759957744879d74611a5366ca7220c38d6b6e52c586d46b00ad77dbcfbe959ed5d4ff188991062e9a1db61274637ee8705cba99960ab23eaf2064e84a0e99a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1fd32a5b3bd7f55386e2734d7c611ded

    SHA1

    dda9ba88a88dd430d022888124ed98b10b143bc7

    SHA256

    ab04857fe0077c84b91d0981ae8f1303ebd59fc46284f2c38241a7ac8f2fd026

    SHA512

    1258f20b939709bf5062090743f2842b9eb739b7f097eefe0d160e2543c665bc828fc36ab9f2aa60a865405a525ba4fc229e996beaa605c321b16772747be0e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cd1da7f356f68857eeb2879238906fb

    SHA1

    7b0d0788109e906b4b012a91368542c168c09f63

    SHA256

    79d6907dc5e39512c9560dddb9b73c925eb7c5791d558eee6a55ff5119056181

    SHA512

    6c023784bbc760359b12fb3887ae9304b6b31677b8f4ef70c7559f2fe036d35cd65054f88da9659afdfe4c3a22f7136ab15df60f7ee6cb9dbad9f458a660bca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a9c8451c755830627d1d0026ae2146a

    SHA1

    c13ee60491886b4f3243cda67ace26aef7848144

    SHA256

    a398787c9bb20e1b10efb11a8c19d7a23ca4cc8176b2482db5890d12d66fbba6

    SHA512

    f5d44267a36152a625b8eeb17649f45b98d1ac0ae15b9594bb12f3f73511b5f0365ff2283d78b6aefa6f2ca2ff83b796228c635d90d6325c333fe840a7eb7d44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c853f8cfb2b0013261e82e3a0c5f810

    SHA1

    72a1001958d78fc8eddc4f68a48e68c8056d5a92

    SHA256

    72fbafdb5d1272af31ea6e8bef419473b5d7ec75925d338c2bbe9d0fd866b3ad

    SHA512

    0617daff2ca225097c5f9d54184b9e8f1f45329ee375f7a24847a8b8b9a828092a16e9b01fbb9aca7270b33f5db382e7688f4198a9db17b7212f9df422c9cecb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea1c13e89b6a1fa2654a20bbdc0e558a

    SHA1

    3e9c7ad2f5ad17d12cb5eb188f1139e435e053c5

    SHA256

    89068c78ab8bb17897d1c2a370f60175272715893a5b68918fca8a7091d6f896

    SHA512

    821b9636bf8e33e993b558d640bdbe06f611e584c9b31be840965442a8680838bca38c23259ee42a2260ff46956e85a16c1195cae1d0e2669ff745452371daa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2a2ed77bf0eb1b8297e4d4832f32dc5

    SHA1

    bcf352c9e7001066f3d28bff4607a2d0df8bad08

    SHA256

    8ededfb9e1d4e73f6743fdfc1319ceef2b65d887a11a4b3ef6209689801f7744

    SHA512

    31f5151860d1e68ab927926170214c69c4e9b474adc1a5be2c4e825018cadd5a0ca91bf6c75e8e917aada508c73b91c0dc8a4fc52e9fb0735946e776f4e928a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d299dc69194c288cd788d37831e6c88

    SHA1

    37e5f7b8a636025673341456e5302a7579e46ee9

    SHA256

    67537393132254b73105bc94492261a636c02d544c8428eaa1db987b43b406a9

    SHA512

    582c02f5bbda1cf9b344de361224eed9111ae1c6afb2e0b5ad31dbe5f4451975d73233fadac4a5596d31967f8d424ee339b69133e7d6173a57478adfde68b06d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8473851876819acd72b4aaa9f79a9880

    SHA1

    d9bcdcecaa331ef8113bb02f370d3df3deee0945

    SHA256

    bbb298b130fc73be2d06c0b5b36b73898886a6b6690bcee378512f2e6d6ed0cb

    SHA512

    ea7c2a7326fdc61ccbd6c50bb42d9ad72927a5237f00b368b64a56ef54870f14b600f673eb56da916495691063830b60415fadbfc7d07ba9f519a348640dc0ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    478df48b58d71ff827ced416d39e6aa3

    SHA1

    4794d8d572220722b63aff9a0de5ed397a25a2ce

    SHA256

    36605aebce423e29d1d5f8fc1b6d8046b05ebb5edcc76f230a21b5c4ef1a451d

    SHA512

    22d70977251b173747c4d15e218d0a0e0408aba9906ff95ced278c35310b70148b0100486bfadbc58b1fe7491f09bb74909633941a7c9252c602cb145fdebf99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    902c32b206626c82d0374bd649720886

    SHA1

    31de7ef46f8582d7ef05dc0359dada044b67d0de

    SHA256

    14b374c14793b56c905cda4100cfef7834ae90c79898cbe42fb3db95532f9d2c

    SHA512

    7db867102a88fc5ed56781d866d4ade0b03fc57122dc199ae46af8886c35f218dd085285cf3bac987f852e3bd2c2a566c234d488808c8367c9604c52c0e11ff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_827A2BD464611B5891D523F77B43FEB1

    Filesize

    406B

    MD5

    41b9b2982d7d661f164f84fbbdb7b17a

    SHA1

    09ece737864e2aa194f49193c9cd35b1bd49ec51

    SHA256

    35abd7b145accf17f2960961ed1dcf6a57910b3f3cd4e36dbc746faf5d35726b

    SHA512

    26812efff27fbae7780ba28d6d08785990355b7d204efe6681a74659ef8e002ca3e238aa6e6e41ce4790a88302c7aef4e81150130b7154203b7590c2fe03b059

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d1ac776f1abd209e6aeefd6cad857d8b

    SHA1

    971de5213e4d20a33f225f883f015a3e245ab1e4

    SHA256

    e608afe9a6bc58545f3a2981b356b1c8ae5a1a4f1559d2b0c9d020daae112136

    SHA512

    557abe22edb77ea0aaee0e5df0857f8415eb68e97d27751be7e09751a810d692ccc47b00faf91cc83de1da20c1b3d09df9264d854866513be7a0f883cc27484f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    d0eccf0e9ec26cdaafd0a661bdc1ac8d

    SHA1

    58d23a4504cfcb461f2bafed4629e0d1d2c0a035

    SHA256

    096b5b4d0fbcbbd1b5053863e6d5ecb241749b174459dec9e5fbcd43b6e0b238

    SHA512

    c5e9c0ca38aff08676f909b7e4573a0ed7c951c4120a3ee0fd9ded919615f865dc74c986f3804a45be0aed9953868c384b598dfaec7b30dc4880d3d39889de2c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RASQO8RW\cb=gapi[1].js

    Filesize

    134KB

    MD5

    f9255a0dec7524a9a3e867a9f878a68b

    SHA1

    813943e6af4a8592f48aeb0d2ab88ead8d3b8c8b

    SHA256

    d9acfd91940f52506ac7caeffea927d5d1ce0b483471fa771a3d4d78d59fda0d

    SHA512

    d013be6bfc6bcf6da8e08ed6ff4963f6c60389baa3a33d15db97d081d3239635f48111db65e580937eb1ea9dc3b7fc6b4aecb012daeee3bf99cfebf84748177e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UCUGVL10\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    682c26af19b240f98d2cb951721fa54d

    SHA1

    18e58b652c7f82a55ab4b1910693686049e25d62

    SHA256

    96428f0f585a874c185d560538ad83ebfad0365d760fcf9fcefe80add9e3c980

    SHA512

    078aeef086271b7f9cf0f6e3a1e7908d7e38465a1a7a4de6f2a785147e9130551a2995e80600824da9341d58e5425d4505518e90eea9ffe1c64f4f41825a9660

  • C:\Users\Admin\AppData\Local\Temp\TarDF8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b