Analysis

  • max time kernel
    144s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    09/07/2024, 12:31

General

  • Target

    306259b8a6e4662b17547a8211577804_JaffaCakes118.html

  • Size

    55KB

  • MD5

    306259b8a6e4662b17547a8211577804

  • SHA1

    305e702510bf0dd5ca6f5f9b0e622ed32a44f8ae

  • SHA256

    4a57ccf396dadfd216c88bb81ca3685cb4881ef4c8ebc237b698e435c3a4700f

  • SHA512

    45219db3a2842f648b32d01e57f1fe2811aac8a81374ec4f36246d2bbfe344f03a467f3a57cbd5ba7d02c03553adb31f5d1075c5e5f9b8903a809f1a9bd09ded

  • SSDEEP

    768:2rXpHvvCIooZi/hCvMMi2D4mmUov2B+7XRVlxM/:2dHv7o0i/442D4mmUovs+7BVlxS

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\306259b8a6e4662b17547a8211577804_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2028
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2028 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:840

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    8d1040b12a663ca4ec7277cfc1ce44f0

    SHA1

    b27fd6bbde79ebdaee158211a71493e21838756b

    SHA256

    3086094d4198a5bbd12938b0d2d5f696c4dfc77e1eae820added346a59aa8727

    SHA512

    610c72970856ef7a316152253f7025ac11635078f1aea7b84641715813792374d2447b1002f1967d62b24073ee291b3e4f3da777b71216a30488a5d7b6103ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    cd82fc2ad6505bfce4cb3773079e02de

    SHA1

    cec031927b1e4fa22d1d268d36ed147aa14bb579

    SHA256

    7a15227dc18bdde7b1ba1ccb42e1cdc3ef5fe2ce866eb2ccf64972fdb6775c48

    SHA512

    de88f2ce7874e3dd259981a3f9d62deb67f8ffab69d4fe8b32067a6aab87428d63554a037aff0b2fe853b4661a8b2cb3aed28e2e56d196b60989a194da710384

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4FA45AE1010E09657982D8D28B3BD38E_FFF72355A275D807A915CB4B42724776

    Filesize

    472B

    MD5

    30935121e6fd74a63761011d661b324b

    SHA1

    b62a274453acb525b830a12a8a11920a958ffbb3

    SHA256

    50843f7448986c8885dcb55f5f7a6a865301d898205d0881daf4a7468e3f5fea

    SHA512

    ad325e9f9e246427af2e5e9fd4a41cd281fbc4904ed15b1a66a434a0fc8bacae40b3a84b637cdee8c10d7ef237617d7db40c0047a4bb42de2b397e8b1a6edced

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    151f74e1d0a7571217ba8bc345d3b9ff

    SHA1

    f570566564b46c731af5cbe35e77f2114b10cefd

    SHA256

    58499c9b47dc7c7e2038b455c83f1f8af86b057ed0af07563ffc555042550400

    SHA512

    110b71966e58c872619dc584a1a29fe0647b8e58cb4a2da6c52ea2d4dd352aae96fc5f6141ef2759eb8ba4891808967da22fc7826bc141b74a721b5f00877e34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    c17cd3d8d58d7f435eb110b18a637c06

    SHA1

    023c7993847f9336266afcac593b54bbbc494175

    SHA256

    d6c0648ccb91baec90635aa758d2645f2feeca5da57dcb367439b621afd62376

    SHA512

    08e98e18d65a12b48d4816c0b6466d84c9ee54cdea7efeb259469a1aaff9aea5a401ddbc3177cd37081a59a70498c48cbaee78a8afed59b369d8f90c61293476

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    0728ab1f4b77c325c566428231545b95

    SHA1

    b26508e10c73d45a32a4621c63745a2f2f534333

    SHA256

    31d9632f18b4e63529c7efb72aed2fc7412d74bcf5a28b792e78333bcca9684d

    SHA512

    4eb48a3d1e7bc4f528ed77c7bee05f3e33107a3dd6255a5b2eb18f34b4e193903e9e20298d9a627fc54c806f695c7ac1cbe531876d34533b97dd5c31a8567bda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4FA45AE1010E09657982D8D28B3BD38E_FFF72355A275D807A915CB4B42724776

    Filesize

    398B

    MD5

    97179047d2b55fb28a334e227976b69f

    SHA1

    b0b9f7b1431a2cb77d3ceead6d0ca015deefe574

    SHA256

    71e694a72467a79938e210fe2d3e2e8bd6c9d2a85d29afb9a7f2e5f689d4fe0d

    SHA512

    b0a70d1e43b9a84558e22cab2987273076ad62ad2cca4601356796f9306b5d04deb36b87395b571fc6bc98733aa7d95a06e90cde1c2fee2d1484205bed17e254

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c0e35c6323c9dceeeb5871fef28c70a

    SHA1

    c9a2c9585c69d3a4c94e98d5678743274d8ff3c9

    SHA256

    07892b64216274a1f7bc757427782a4eb9aedb63ac54de12eb9d0862579d8a83

    SHA512

    cf141a864559b2633db0388fa458d1e09ff410053a063a32890a84ee18ff4702c77e3b4848c4b18e7a4d445dfa23ed43658da209e0e8cf13d5693168c63665fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0725cf4591c1d531ff4a880c72ac5e0

    SHA1

    8cba8c47423ab9b9b19d25955ae05cddbd68f3bf

    SHA256

    8765762bfb7efecb303687e2182936661682f31adea792a5cf65c6a4bc812f92

    SHA512

    459e502cf71899227a660a6e4222cce855b3bcc31ede6876bf97cd3b378751796849b8021d94d3d2c91580192bcfe02502c760d7a57643c9a377c4505be3c7a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6e1d54d9acf81b62f941b1e697021b2

    SHA1

    08ee1210b09bc77688260d3a41edc8b65c89cdaf

    SHA256

    fb6773f09782ebb895547b8996a46b7ba6967459915b1398bc9c39f553c3ecad

    SHA512

    2012468a6d41311a6603eb7f1562cad9dfb9547ea7fd555ce3247955ab9485d265abe135043bff8deb6b69a76852043a3bddbcca0666009f59199eece8891ae4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de9261a3d6fafaa35b7d6619668920b0

    SHA1

    522fa49bc31595d87007c1617cf42b3699b03b00

    SHA256

    a8d5a1805b5ddfc412bab3062ffc56d71095df722b6d96525274918ffbf10d5a

    SHA512

    4d9799c7ecd0102fc989b9474865954cdef429cad18fd4d9ceb21b108f54f490a01a6a4a1e2d994eb5c7f8546edeba408d8cb9f404208d5d6d64cc8345027e7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fce6453ecaafed855eb063830d3abf2e

    SHA1

    ee5f29c40491f6b166c72df24f6f8e9932c379b1

    SHA256

    bff507ac60dc4d80e52ab8c47d0032afaea84d4af5a5129a613b542d7f4065fd

    SHA512

    512c5c9eb1551da3f66f657b7425873bb90d04e75def904c85ff525cc93f5ddcac6f749c19f870d27eba17740de166365ed3e249b768dc7583c004e386140479

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72941ebdfc6c4c3668ced98fa28dd40c

    SHA1

    3cc3d0a684afbd96999d4295503091e5130be324

    SHA256

    14b9f5364c7ba85629c2b487938b7c4031cb662275d64753956f0398720c32f5

    SHA512

    dcb191103c73ec1d13b5ec488fb637a41e6a667bf4aef2a9284674dc0a7cc16d8b195c4d58496a6f1ab098b30a5223b851917fa40d6216a1656c5d13696e96a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38a67cd6fc3e62e1bcb4ab6e5651e45b

    SHA1

    ac1e2adbc1957a94e3b89bf9a2496ab27329fc43

    SHA256

    49f7808d848bffb6d859bdde0c9de590fadf43f72b8171ab3382e1d06e5f6b8e

    SHA512

    30f8849e1a4f14230b673c6c40ce2384b2b83421af9ba1c7781db7c9f59e1aec4cc1457381720391493ad0993ce67b3b1f788d727fd57b6a3bafaa2f7a8dfff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2403e5daab6328f591bb77927e1cc38

    SHA1

    7bd26268fa81dc4d3377c7ca908b4937e9fb9556

    SHA256

    d2c5435d8c295a61114529aa4d981b6ee847269c28030740bdf357944a36679b

    SHA512

    89901099278a7edd60beaff77ab85f9ce0f6dd262641446144efdb9f6f253e6895c53cc86f977e8493fc1933e82507ddb5e8d2dfe35c2b10db94f77c22982308

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2e2bd979ee640e83ff9e8d4a568149f

    SHA1

    0542a1ff1260bcae0b729ab530b4b96534d0870a

    SHA256

    cba00a99f0967c6dfa357a0274b4404ddabf0daa8277b74e498d7c0709ac9360

    SHA512

    01128c1fd55b8191bdf333cb5a8c6e7e2f1c85018a4daa4a9a0b5ca3bbba276b97b47efb7a013f9e36826f415ead873ebd09e0056d24e436ebe965211ba42ed0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d7f3c0e3ac06f9a3471b9d9c4677703

    SHA1

    14074290e0082a99eba4b05f4c5ffdad556d6778

    SHA256

    3f03187b896ee209d4a3bc6f314e29139f669cc029c8b986c9dbb4be94dfb0bf

    SHA512

    ac174812ed170c3969857a49e8ef73837193cf5621379bd345ecfa3932cfd69d0311ed620726fe7d6ceb0c856d99ee590afc5d36424dd4ca27edd6c98fe5c6f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1619fbeb414a6a2e54fa7823e8c02f42

    SHA1

    cdfd939ed9a58b9c8eec4a189c1b5f6180642c20

    SHA256

    8e598ec3b99cb2ffb98e3bb02d49e6ebe699d71f2616ac080773b4bdac2c2004

    SHA512

    497bcd00f21a4d1d9f2cf4e7b26c9091ccfb50575539c43647e65b2e22f9cc71b7e3b80a57dbeec4c2cb40a1f6187f7d840370b59a917e81c60713c81688aa58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    298e745976a24426152b5bcbf0fd31d8

    SHA1

    e6b98feef0db56ee571371b437a41f52f6773d0c

    SHA256

    93e5468943108a40c91bffc1835423089afea759741c466d990672b586e990ee

    SHA512

    78c6b79a237004bda8d290ddbc4350dd6514aa9ab37259e5dd77c289f10478ddf3ad6989e7db3071229d79f9dd0b60f4ce10560ad21f19c6fbe501b9d900425f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e3d2d889e36c5f46ea971d9455f2eb0

    SHA1

    fa094b122c34e92cde274f387c446eda0673e637

    SHA256

    d294b5c9075ecfeb920a9bf829fc46137b468857a7d038ad405eaaff6d00cebb

    SHA512

    6a5fe95e16f9b3495517927af590a36ff4cc6d4fbd2cfb9c3a948d2da90baa21a81d10e6425f0ffe9077c8e40eb975b14932ed50bde1041bb7b2556fc56bb753

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b91e8d302a0986a69edd7e44ff77520

    SHA1

    e59bbd75fe46283b2f6727be2afc14c1c9acfc8f

    SHA256

    d0c40c637403d1d76ea1385a4d48d1c27a004139674e0618823c9c1a02951d22

    SHA512

    25890d7042640f694b2a78801f95de627cd4dc1e977771cb22cea9e39f95183716dac973b44444fa7878989172864c9c3159e8febaf9bf15590be3319af22807

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8cfd3946fb313dec4299b391c0bc12f7

    SHA1

    71a951771b3ecb61c021347d2a37f2f04f37fb23

    SHA256

    3a382c52a3e866214edffe00248e5a67540424bdce87058b5aed757bc88c5c9d

    SHA512

    71c0fbc01d0764558e795f222930aee47f08f648aebd2c052e2e85501c337934accc47092ef7b0ca946cf5eda43466e5b2d4af46e5b92c925054f3c06aa23c7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c545f6845cd32f6c59672952f862a59

    SHA1

    93fd7c77b28a4ba77b05ab454e5b00aad8435b72

    SHA256

    dc40c70bff916626e1262d7e3da7751982f470877c47c5b32803fdb5955842b9

    SHA512

    b526c3b0acf170347af1100ca24b50b3c2330703f6949db856081822aea8a6708811381cd4521c031bd9ffb50ba40462deb255a999b2f52249243e174684c2bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    777146e5c4311cc2e91c36ba5a12275f

    SHA1

    e975b1a66e079f54ad83fe579e2effa66c15ad71

    SHA256

    38db814377098c47fe29cda3c00be4dd1edf6d69fe11d533e379b5f804a92296

    SHA512

    5ba5257f736bed9beb4c9e811ffac0a0ff0114cca0a7646492b7aa89d1efb2bacd9f6f497a36d40a27d1727c76469f87b203e31210a62114145b5e35332195bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9296968cdeb42df3349cf5fa8ac3b5d

    SHA1

    9726f1b196072ab00a19881907e8ab5e440a6d6b

    SHA256

    0863ea17786a3bf89d154689b14b3ea9d757e711e582b88d1ea083383bf017fe

    SHA512

    2531bfdbd3489a811c8f3d11d56f0278c365ad4a858154f4f8d264cfd92dc3f3b46ab991b6e0ebb181041ef41180b8662712289f6023ea267281117b2f016db3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5320e163cdec77ebc6fc9ced69b606a1

    SHA1

    d1b72fa54a13146d8b4f517034f9cf62b1a050cf

    SHA256

    b2514e838dadde5d223637012d17367497a61dfa8b505d32674318af16f686bf

    SHA512

    824beb47a80c73c1ab9a88f0f004d0ad37b20c11f93148943143f1cb7b4905f9942dd5fe895cea8d08eb1c17a1483f4bc801497b806fa889409b6f4c9939e53f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83c1241c305e21c5cf4c4ddcdb196cf9

    SHA1

    782829bcbd1040e49464b3305503aad7482ca951

    SHA256

    8df384c03cf98c2be6e1f7c1f3e0e2fe7abd534e9d67325d74fc1ae3e9cc673d

    SHA512

    7af64578bfbf9405ee43801fd641d33d770bce525a955cf95d5305fde2858a4a147b6b813dcf668b80c80fe712617c5a1646b40283136a4cc13a3f6d3854ea08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d35459f53f40e9f9c40f80b1dcabda7

    SHA1

    3ddd780ecc5f649efe35ee56d056e0bafe0d2129

    SHA256

    6842511090547a342521c8ef98b093b72baf1b8915c446be8ef675e6ce1b0ed2

    SHA512

    87924d8102afd0390f4040f7c7d8215add53b42acd81b34be26faefbef7a9f9368b98499ccb7626eade975dd80a870e2e46e8a4d1c86026eaa8f03a852b50a62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8589734947da76f1c045d571c5b2a79a

    SHA1

    2b558b47031abbe81f604c55b2cc7e926dee987b

    SHA256

    257c518797ec21888e7d10033ebe6750f19e0e3b0fde15d428fe72cf8e392be4

    SHA512

    7eaf332989f5b61795afa8e2a0905b3928439b96f5e970b2fac6f5c1520329297fdcd582bbaafcbd8b6a3001e7caaae1646f44df88961d150d0800ce4684d678

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NFAY0EOS\cb=gapi[1].js

    Filesize

    136KB

    MD5

    5a7616280268d3642196c89bd5a7bf00

    SHA1

    0350f9555271f57d150da785524e095a7e8eea56

    SHA256

    276ab13834ac74ad86344346135288624927cf2e8c5cdd589bd4619fcd467c44

    SHA512

    76381e69a4c24798b68e95dead45543e0f685dceda39ef73d49a65261db91d07c8aca0171b97cdb173c0f21d52aef3d6c6699ab62d511e3796dfbcda4b26bc63

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XWMUP5AI\platform_gapi.iframes.style.common[1].js

    Filesize

    55KB

    MD5

    ebe5a485f29f7967338096e4e6878846

    SHA1

    845bc70098eb80aef57ea87da8fc7bffe5aab067

    SHA256

    29b3fe99b016598da9c20ee848f9a90e48e14b16a1393e91a7fe714738790625

    SHA512

    3a8c4f3b40a1458032be90adf0ae152c9852d7ad9573146555d983de21fdb1d538d90a56d822ce8faa85cdd4575fcfca0204648c1c6ebde3723f9d396789e90a

  • C:\Users\Admin\AppData\Local\Temp\Cab236A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar23CB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b