Analysis

  • max time kernel
    146s
  • max time network
    147s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12-06-2024 18:33

General

  • Target

    a1c379dc3d85d6d4108a345fd2694e82_JaffaCakes118.html

  • Size

    101KB

  • MD5

    a1c379dc3d85d6d4108a345fd2694e82

  • SHA1

    194677fd4e06fb5c7c3e20261742874a6dcc6177

  • SHA256

    4e6d250fe2aecb5a4fc1e09bb252b5f2007a56da7ca2242966c64142b575b98e

  • SHA512

    da30681c6a2be2a50a9683504b5eb9f1487e95162eb1afcdff6696acff94f6ff69bbed45a9013cfb00ea81d0b3419921c8a61f9ef65f4962105971c6bb481e89

  • SSDEEP

    1536:htoOgKA4iGgh+y2ksJhUfRAC5T+g5FUaGgb7ryrkD2wuCWMsgDOWVJmkEwgtkxaK:AeBCyGH/wgX4u2wDWMsAAfM5KMt0I

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a1c379dc3d85d6d4108a345fd2694e82_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1932
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1932 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2696

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    660b6e28b38ebe7e521064e60113fffc

    SHA1

    f2c25e9f931876bf6834191ec5b409f47f869129

    SHA256

    3e203426c4aa1403e940966905320c612ce4006cc87e03eb64058eaf6d402433

    SHA512

    96868e652d5e0c25b4d0f0ada20d345115f0c6fda26d3cab724c0c1867386d2dcedc408c51f776b7e019ce2e22755017d99bf663cdd9fd0d88b26182c6434bcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    0a3ff0c6495b663244f43b55756ed5ad

    SHA1

    a749a21e83e3778b00dce1e17d7944ab45942a3c

    SHA256

    c5b2ce43e342e8308e17af407b97f8215c9fb256dfca05101e61be700ceb9330

    SHA512

    cf7de992476460f607fd852ecbb7f7f5385b0725dfdd857efe043f7b49b693536df85f5aa143bd7d16a6058ac5751f00f31fd16efc52f7f3bbc8d846cfa7a2f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    d9f57ccc9139469b4577a9780520324f

    SHA1

    0fcb30e71486a6c673c8b7dcd8874342536cc86b

    SHA256

    2d8fc68063928b6746fb2eae9bf71f9ea31fdbb0fdde447adc32f8829f71ee8b

    SHA512

    3281e540fcabc695137cb4d89255e0ee6cf84fb720acd5b385e569925a644fd0911f6ad4bf6b92e4d0e62132ea708ffa966eba2986e8ad17627b805122747690

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbd590934976acb8951554c5b6bc5c5c

    SHA1

    450e8b69c7edc126bc372591aba1935e0a60090e

    SHA256

    98bd015d9083e2e7ff8cef55f024e2fbac5ef07f69cff95fd14cc053fdc6a56e

    SHA512

    37e60c7699c19f67a414dff60f555a4d8be47e3acf8d56be8c0fcbc25c2986bc0e4c3b92d9f6fc5667283f1a9c167558c7820a3529d0ce59d74628582ad44498

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c2aa317cd92b0188937b1587382a99a

    SHA1

    9ff606f488b49afae81335a1cade016722e5b004

    SHA256

    78ec8426dcdc46c3a058db3bccd8dcdca058de479be1c8b54b7dc554690d3587

    SHA512

    b06dc37cc1d965728c79d7ab7b8eb1bd6f21bd4f789eafcc04e9ee7a0f56aefc2dddcc67f64141e5ee031d4fa37dc43c1dd4705d90ed4458ae6c231ac29d3c09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3dff640e0431bc6b4f3b7f25442c455

    SHA1

    da8f63e032b7fef43fe7f00d31884683d3f47883

    SHA256

    d7bf407c9907a06a7c0c500178278bd25958d9c4c999d67f7e3d1ece109f63d6

    SHA512

    4f9172d4ac5f52cacba0e94ac08552bb19577f70bd40425c81bad2b5563381ef6787541352c5e5cf69b90d7d02cb7b0f6a13d6b956f4b051d9156f242057e79a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0fc67fafd2ff4be24df694e2e8e9524c

    SHA1

    3d55bcf6b07d40bd099f4feede1cd2e5ed4b695a

    SHA256

    7eb7d35c8bca45a0a8e20f91bba560ab8ffd8eeee265e043399d4e0066c6ad14

    SHA512

    1b181c172cf7747fcfdaf2fa6145920a92a8309aa0858f2778d9cd7bdd20185c0e55c14529a80150fcc4faafaf2327536a0f6084ca2dac09ed07fd03373eceae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1472e729e5a64106f3b5da5994101ea9

    SHA1

    b17a62df76f5a9c48a5b9db56eefd9eff2817f78

    SHA256

    86ea247a0a36d27bc3c62e9f3a7089ab05d81edd4ee0b6e7c79edb2194df726b

    SHA512

    bca6b46e0730e0b5b5fde95eee92a18bb9b4b27a55ca5f53c51c67ac31043e78a20b7452d3d96f68ec406169edab5c75c1e85f01ac0f152018ddf3ff5e42180a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf8d96962fe241340d34b88e2f80ccbd

    SHA1

    bfd8de796318d135c10c2672e834f1ce373c91d0

    SHA256

    075fa3a669c0cf8816ce7fc276996e0358df5cb2777d117bbe4b5f4457bcca79

    SHA512

    3544902fcbd5a36e16e5e51f5cfad0dab69a7ff4c58bddff4afddbaa0af2515b7008402b229d5b4dff8d5744ae480a8007eb10abfb40966438d6cc10e3abf90b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    707fce4b0bfbc1d2218e04bee6edea07

    SHA1

    2a2cf7bfac167c37644b036cfac3b9d7b8c54c54

    SHA256

    818c7b9a741833597168aa86361f72962b9979ea723824867ffebf212a18da3d

    SHA512

    39dbd6a4a38d85ba90806d9fef0765ac1462a2d1a4d13ccbc6fcf04804f0b9fd9daa1751b54ee3932d309130a290f2fdff25280746b4967ec573fc0b07f7e40d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e03369f2e811a18b6437603abba836e7

    SHA1

    c2f8ef022ada9457c265cc9d5f7b66b94da67621

    SHA256

    68b0141f23c545aba6641a955759a867bc94358a9f86f9f7fe2ab4ae41a08837

    SHA512

    c9ee8f6a9046d2613389022d614d93272ddd55555984a077c87eb5efbf9fc2123df688564581d089da77d65d307c02f722cea9f2f25086a721d3896cea759676

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52727f04244577b9edb0230407b76e88

    SHA1

    d89323dd392c07d4c1de565e7391b314689e4373

    SHA256

    68b0473c7012dae45d4bb8f2d55da333dac869cd7fb262fb1fb0635bf45a487b

    SHA512

    e4f76940953a2c50c82869eb628e43942603fd3d6fe7c40d146076949dd9ef1cc2292b6115100bd6d63ac64ad728d7092092594c4eef850777cdafd60a39062b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    168dfd53097ec7537132287388ed6019

    SHA1

    e152c634d1e8d7eafac8e951bffd770193a0b5f6

    SHA256

    f430bfc50a0f1e04a573b3991e212fd209d53378996deefb099f75f1fd97a92b

    SHA512

    c1cc78346d81fa199c5b234679c6b11e3a40d0ac316a17222f51a07637f369cf02d2bb9298b6ab650c710f99eadec3c5ecc8bbb64c0bbfe16752a5144fd8344e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff627e9bdbbed8d025053a7be4f96bd9

    SHA1

    b53ed1c425f0a7a4194e6b23485ecfa04b6a6ed4

    SHA256

    ee14b025772dd722779dbb08d669b90e8b54c91f552851367da39fa4f0eaf5f8

    SHA512

    4ff9669920bc0b9561cd8173951bb2b39dff097501e61ee9566fd5114070c174264790e3b16ae1f6f49d59ad880905ffeed6cb909d2b532210b4f08c2f0fc6b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9daf78db8e1cd3079854326689b42d1a

    SHA1

    965b140276de499e45dfb9a0d0c208a6dadd5712

    SHA256

    4277c66807a5f215ea3d810e7ddd57446a34802654bd5f1198327dc8b3591909

    SHA512

    9d3577afb0bda48802e880eacf0505593eb006c56d1cdf85162d120541136ad105c0150a1852bed0066d8e7bfa95e9261207f22bb36ea74027983c9b98577e0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4faf2544e3a6f166e75d0d22d00fa653

    SHA1

    1ca809bd633458e7ac9ca424c0daf886e19d15c0

    SHA256

    89269940946cfc4c19b1511fc3a2c19ca62c6549ccc9d66f8ef0b56f1eea6f78

    SHA512

    904f19064496936a00c7ac81fa445c64f97fc3bcfccab19251247960a034b51dfcaf26c63c51e79f6c3d7a9e47b4d4b2a219c713c8e117fa89a9b3ad259612a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a716fdc5d52742fba0f696a0b5ce2f5

    SHA1

    56ec905e67c825852c2dcb119d57902887635cf1

    SHA256

    fe8fbf58870db797f62d02b89e84825fbccf44e76305b5d9c3688dc1b42c02db

    SHA512

    872262fdcb2b734c4fac9f9c7e2440d2164432d39f6a2694ec220670e8921e84f7eb5ffab30cf73d97b1bb01640ff6131affb6e692bd4fed204e48a4a9d0d8e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c429ca819c449bcda11d1f191dcac1d2

    SHA1

    e604b1b5959ae4d3b08f7b9e46cde2306cd6f55b

    SHA256

    94ca77ec05886bf97152690066cefc1a6f1d2bb69283d2df4fe08299ec26415a

    SHA512

    e58e537fdc5b96e2edefb5bd7fc097c0412517a109d28500c208650722a6fe3442c40213aa55dc7e62417bfe7812e09244aa5f19cb6a1f9e9e9f07da893bec93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ab368ccc193b6857b84f2581b953ff01

    SHA1

    962120ef0fc5d84b3b7503d8a500522829efb296

    SHA256

    bfd62c24cc12dca140eaf3aee3d1ac4dc4688c536b7c8b472b4ff5dcbf68631a

    SHA512

    8fa02cd31a54d2d859c7811a85335a5822ad99529e178361f5a3525cfff7660c06b6e03b59190038d7d83084f84ee6c25cc796f2e631358bf466d82b08847a34

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HWTP8BNA\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    682c26af19b240f98d2cb951721fa54d

    SHA1

    18e58b652c7f82a55ab4b1910693686049e25d62

    SHA256

    96428f0f585a874c185d560538ad83ebfad0365d760fcf9fcefe80add9e3c980

    SHA512

    078aeef086271b7f9cf0f6e3a1e7908d7e38465a1a7a4de6f2a785147e9130551a2995e80600824da9341d58e5425d4505518e90eea9ffe1c64f4f41825a9660

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Z5LT06Y3\cb=gapi[1].js

    Filesize

    134KB

    MD5

    f9255a0dec7524a9a3e867a9f878a68b

    SHA1

    813943e6af4a8592f48aeb0d2ab88ead8d3b8c8b

    SHA256

    d9acfd91940f52506ac7caeffea927d5d1ce0b483471fa771a3d4d78d59fda0d

    SHA512

    d013be6bfc6bcf6da8e08ed6ff4963f6c60389baa3a33d15db97d081d3239635f48111db65e580937eb1ea9dc3b7fc6b4aecb012daeee3bf99cfebf84748177e

  • C:\Users\Admin\AppData\Local\Temp\Cab7D1E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8A1C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b