Analysis

  • max time kernel
    150s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 13:40

General

  • Target

    950adf202cf9a1c10c6f2a5f8c3e1123_JaffaCakes118.html

  • Size

    74KB

  • MD5

    950adf202cf9a1c10c6f2a5f8c3e1123

  • SHA1

    b17dea50486beab17b20d82a75299072e56e5562

  • SHA256

    e676b40128084219366427e386877028c7522f6e0bf75a04abac9bdf4f9a3463

  • SHA512

    8001ba6de0cfa492a0f4d8b9dc5688c96f19f55fdec36b9abdc52c5e4f8552e37acfabf60720cb8449d472ce0f76ca2df6a84c231ed19abd23b1ff72bdbf91bf

  • SSDEEP

    768:BVzpVvW0vDM6KJ7iM1pBVJZEjDCh1zvh1ytc8o33iHEn5PK2Slc:BVlVvW0vOJ7iM1pBVJZEjDCPh1gkn5P9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\950adf202cf9a1c10c6f2a5f8c3e1123_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1688
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1688 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2788

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          1KB

          MD5

          9d8707c27d9b05496afddff2c4dd6d36

          SHA1

          f9aaa337482e1ece0726ce1e6a7f57605fd169a8

          SHA256

          c00ee48e40b4adc34a7c67750ba49bf6c99ed4f523374b86279af64f40368ab1

          SHA512

          c7379834e07776d0188f45b6d20d795f559fc6521c8d2a1aa8e22741391fbf34f2d8173ae34dd84526e960d4fdcc7f8715f67210327cd92814ae10ba9add8edb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          914B

          MD5

          e4a68ac854ac5242460afd72481b2a44

          SHA1

          df3c24f9bfd666761b268073fe06d1cc8d4f82a4

          SHA256

          cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

          SHA512

          5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

          Filesize

          724B

          MD5

          ac89a852c2aaa3d389b2d2dd312ad367

          SHA1

          8f421dd6493c61dbda6b839e2debb7b50a20c930

          SHA256

          0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

          SHA512

          c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_827A2BD464611B5891D523F77B43FEB1

          Filesize

          472B

          MD5

          28545ea4f2df73b20ff82257052bf0f1

          SHA1

          60d3de7f8f0fe4dbe4f4d07ca578e992631e5de1

          SHA256

          9f7d45b8b46f09215225dd56732c75f72f926a14282ec05806d314eecc71dbed

          SHA512

          6d8ee8037bf369a56af295fb6c18eb4fe8feddd868013cfe6c248a66d08bc769c0487b62cfd6c07e307bef20f96ab85f211e527f14f0065a3a5883380b2cff2b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          1KB

          MD5

          a266bb7dcc38a562631361bbf61dd11b

          SHA1

          3b1efd3a66ea28b16697394703a72ca340a05bd5

          SHA256

          df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

          SHA512

          0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          410B

          MD5

          ffbeed32d44044d773fe045e60f6c7c7

          SHA1

          c686864be67c2b89b4d82e2d7667fbe0d72794d2

          SHA256

          a6649eff6cebd31a6b9a2fb44d55d28b6b7371942b35d45449cf64a997763d1c

          SHA512

          6a3446fe7ac5fd09de02be663658789c7e839f29a3c7b12589dcbff40cda75b89eaba64d384002294ea84e4223f7cbb184250cc747e0b4b10213d98f01c545b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

          Filesize

          410B

          MD5

          e24d91d2948e5253de1aeeeaad2ca639

          SHA1

          defc3b9e068ad60a83e1c7a048b9cadc0a92af20

          SHA256

          94436964e325ee1a377ca536ee141d48fe757c755403de07d2071c3dc0ee0197

          SHA512

          b193e2abf5ca092b32c157ba094fb673473f4c7c659109b23b269c994885a6b32ba5365b0c79e7f35390ce74ec9431db10df522200939c58c9167e4ea8bb4755

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

          Filesize

          252B

          MD5

          25ea6967c273181ce61cee959bca318b

          SHA1

          ac9db1a654fdc739d4acb19c81a343d7288995e1

          SHA256

          45180b5d30b412dda1496c1bf4adef09f820ee65394e8207bb89fc0e03299182

          SHA512

          31a440a714e2111c5caad5631e9ba14da2219bc7875b0ac1f13407aa3c030c0f5bd2b0031c7abc5c8f2d3ce25105f7801f2b30d5b0070f946d18df8c6ee0198c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          18db7ef0b8132d685820c27624c3bf7d

          SHA1

          f98521969d2f96df6452d800ebf28a69470f3fa9

          SHA256

          ff9773bfca05e9914e88ef9c2969712c0deb2570b621b91104f0a1bfe0a0c7b5

          SHA512

          4f6b6d4af6440a3f40f4be359ec417d2e89698bfcfa56b52b9cac12dce5351c5b5f26b26787d61abeaab8be4a359b4ff3d6460c9b4c1c0c1344576f2bc773607

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8ad81e4c24c654d78272851f7848e2be

          SHA1

          f0db6b824afeceec2c5f8ac991dc60700eb98f54

          SHA256

          b314657171107a6fcf7295d43e4000f9e643dcf88a1e93415d3dc24225222c51

          SHA512

          79d7e52c0a4fc01f013be28049234b842235cec365b328a950662250651596fcc50f169aff79c95cae3b277dd76d0776933c3d7f28d87c08450b75c3aa63f466

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2584b5342080bea758e1fac80106c199

          SHA1

          777d45e530d5b2a905d78c6d52a1dea861dd436d

          SHA256

          6b8507235b50bb541f18a42ca5958601c07762227ef873c351803af2cf3dd211

          SHA512

          3106bd7a65a56ee2e16c51c2345e2daf550717ab8c2216915b4ede29d401d4414053d75f53f84133adbc3c9a8d7609f83a06c3eb9778cc1316a8f9260f873e90

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6b2f2fd976d873db45f369f19350744c

          SHA1

          a203e38f5ef41d6974633048cebb566b271dfa5a

          SHA256

          726909c41ad44960af90f3b8b4e4e75077ef820ede9cb4980ac52f4964d0ff54

          SHA512

          3b3824955a704c50b35810b31b4cfaf2ee291b57e54973fd943e8719c5f3b55e8207a7073ea48d78b153373e451c1929a36f0a9f48d0fa0b32a8fa73f0706374

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          34ebc8796e31decb2487f29b08e83ca7

          SHA1

          67f02dcbd8533509a0996c978de75e896c8f5fd4

          SHA256

          fe768272ffe77fcff0a49a102957bf16ef7f5b351f9d0f38d8da726e88acd2da

          SHA512

          b348cb561c8b38d50fac9402b5d0aff59fc22d71a58ece8bf9cbb02ae76e3a1d87a1797b9c5b02c9668fc472c1ebe9e5d7362e34de9b54f0109d7d2911f62808

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          18d8c51b3851acad843c4415a014c71d

          SHA1

          d82a96542e80f32841dddf85830f0570c76b3b9b

          SHA256

          a01ca52f8c25531fcc2a64f65e30b699ed0acd989b8ffa9b467b93838a6972c9

          SHA512

          53d4fe782c564bfd0753f56ca5af9d8d6d16831f836d1779a095d20d98990981aa51e0cb6e4ce7745ccafc5d834a6edf0c51a029eef31b2a3c7246797c69d861

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3c00db687202119c6b40b51c62b2a48b

          SHA1

          8c3a1bfdb8f2eb682c5b994d2ebd36036884586f

          SHA256

          f24401f7833448940c05e8fa08ccf3f6ff612b15721019f779ed18b87481db25

          SHA512

          9c417fb9f13fdf8fd0c1e4fef86ae5e9fe2ec2602392b8c925e31063758f1f02e5333832b1b2bcd2827ea22f5ae27398822d2f262d3524c4831341abb397f4f5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e02c6f2f76874c78a413050b979908ea

          SHA1

          2b03b172af0a1979134b9a1cc61dc662178146bc

          SHA256

          e84f2d1a0549877e706f0996d1d819f43a42053efc23e9374706432e94d1da55

          SHA512

          54f5a483a238b1006ce24c095b44de3c367dec1237ce5cbe86db4a26dea44e955bedd255c2bac18e0e9f32f31581a88fbba3326a707fe6a40d505f07242458d6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          1c217921c5da6600aeb5f7176041bae3

          SHA1

          1920fe29900d561726047a2436167a3ccc0a89b0

          SHA256

          8123cfe7eaff79adf15ea8ca42fbb75f644c43d2d7192b15d7403239b3252d1b

          SHA512

          4215dae3886ddd3929cb22fdfb4161d448f2e247d5cdf96dbecede9ed90e28b969a1511aeee164dcfa23c47bd2d0808be57f033d1d48a595953dad63131a26d3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2444ba0d7efb26d29f2f25f3591cd85d

          SHA1

          09ae2b0ee95f540a2033804e0e58a45ec7b78672

          SHA256

          ff5e5c6b7ccf2fec5b276d0d6b90594b0d70d93617e3e1a94919f3ae8d398a6c

          SHA512

          fd5bc951b8e8ad43374ede1ca682fb8e49bd56f3b8caf5931bca0991208bf350a23f5461b97326d0383668d5eda6911405765361ee128de54959e7e6b0b17602

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0cd7b0f8c3a62f75be79ef61e2645fe9

          SHA1

          7a095e3e4d7142552ea1727cf6a56d17acc7bdc2

          SHA256

          48a21bb469d45bb5175aa43a8edb8fca9894b8f7b48bd3b220628f82fe87a681

          SHA512

          2128faefe06b5f36120faf9b0ce322c34c6462d9db5d82ad04c23d88a1734b4b64c481e9e60ed1660e40668b596ee7df159a9a063c662f918edf832d66921ff0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

          Filesize

          392B

          MD5

          8576201ec74fdaf4cf6fe4dbd0580faa

          SHA1

          9cd3343639e57a1300116afebccee4c8d1807040

          SHA256

          61437ef9bdc86dece6d70f828399a03066256af8d33ad316338502c280fc2ab9

          SHA512

          27d0c137e73c14751e7f8a260b9478b6e4a217ade0908ebb82c87ddaab6a863cbaf76e7af17bd7b18cdf5218e95ffe80c259cb5a618588732f054a0673d9c5bd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_827A2BD464611B5891D523F77B43FEB1

          Filesize

          406B

          MD5

          0eb7ba1b2e35e60b9a055458763b8bdf

          SHA1

          0bae2603c3ce34b8be41122aaea4ef25b4567865

          SHA256

          07fdc9aa44efbbe4b56f89f83c888a5f1df8f0e2ff84d47439ed6c4fce1d6094

          SHA512

          7a00c9fa027d54f47494415ddf76153b69a0221ec963727db1dbfeeca5c1ea92ca4df41ebe5b863b8376cf45df20909f542db706993d68306157743b02d1c8d1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

          Filesize

          242B

          MD5

          1152d9298ed9720daa8513d610bd093c

          SHA1

          d7fe405a4f61842adfae21e0c241084205ad86e3

          SHA256

          5c90325f7f5ba20307f41f8eb1550293ef76a21c0f8257db84486d1b2bc6c7c4

          SHA512

          ff79cda15cb1e760eb2b1d158f64eafb32a0a576d2b7d4cdca7dbb6fb0500e474117e7b28c7aa431693985b5f67d697de9c03dbb442a169395cad0c610636a46

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\platform_gapi.iframes.style.common[1].js

          Filesize

          54KB

          MD5

          682c26af19b240f98d2cb951721fa54d

          SHA1

          18e58b652c7f82a55ab4b1910693686049e25d62

          SHA256

          96428f0f585a874c185d560538ad83ebfad0365d760fcf9fcefe80add9e3c980

          SHA512

          078aeef086271b7f9cf0f6e3a1e7908d7e38465a1a7a4de6f2a785147e9130551a2995e80600824da9341d58e5425d4505518e90eea9ffe1c64f4f41825a9660

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\cb=gapi[1].js

          Filesize

          134KB

          MD5

          f9255a0dec7524a9a3e867a9f878a68b

          SHA1

          813943e6af4a8592f48aeb0d2ab88ead8d3b8c8b

          SHA256

          d9acfd91940f52506ac7caeffea927d5d1ce0b483471fa771a3d4d78d59fda0d

          SHA512

          d013be6bfc6bcf6da8e08ed6ff4963f6c60389baa3a33d15db97d081d3239635f48111db65e580937eb1ea9dc3b7fc6b4aecb012daeee3bf99cfebf84748177e

        • C:\Users\Admin\AppData\Local\Temp\Cab91C6.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar9363.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b