Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 08:30

General

  • Target

    4901139a500830b50ec1933fb5548869_JaffaCakes118.html

  • Size

    52KB

  • MD5

    4901139a500830b50ec1933fb5548869

  • SHA1

    b1921f3cc2c14725aed99b2c719a811acabb4a18

  • SHA256

    4782990071ef37df0f37d281e80cff51725b7f43d73bcba5a2e88dbfce38962e

  • SHA512

    bd5ed2d6697ba45af0a2673e5f3680804a6a57afa2b945eef3b36e914f67dd7e5009af824202878387753bbb97cbef87c5abc3760d04eb7c05c9398a060813be

  • SSDEEP

    768:4zQ5gOriWNcaSoagG/LnoXM2JkLGzxQDgwNSDha5+K2i1:4zQO/NLnR2JkLHtSDha5+0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4901139a500830b50ec1933fb5548869_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1624

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    8d1040b12a663ca4ec7277cfc1ce44f0

    SHA1

    b27fd6bbde79ebdaee158211a71493e21838756b

    SHA256

    3086094d4198a5bbd12938b0d2d5f696c4dfc77e1eae820added346a59aa8727

    SHA512

    610c72970856ef7a316152253f7025ac11635078f1aea7b84641715813792374d2447b1002f1967d62b24073ee291b3e4f3da777b71216a30488a5d7b6103ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    6196894cc37abf0b350d59450cfc7482

    SHA1

    bd907895f87d0b35921e5142f359d38a3574a831

    SHA256

    2a62c65bac4a78b52338efe5b63500abb26d5216740af635b7300f16eb521a0f

    SHA512

    eb05ce15db1dac45cd05461f320766f813218f17dfaa2c20d6cfefc64103ea9c446cd79afd88ef30b453ca4005b14ff0e42167385a7b344787640f3a0b0169c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6DA548C7E5915679F87E910D6581DEF1_4ED7285A0D9F2F14F63E84BD08C45F97

    Filesize

    472B

    MD5

    e26e13929f55a2bd7ea939926ff3d8ef

    SHA1

    23804977720ad10f4887a694c76912780bc2c7ec

    SHA256

    314e3a7f73ce1d290adf8e41c57a789b44092c74ef88f64dd66b37c8d6b6964d

    SHA512

    ed4341b5254dea6d60e741a9bacc78cad6302f3965f449db532f84ccccbd56abfedb6cdf252dc3c0f9119a6304e32559bd64ee1a42d9c63c8590558f67885f81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    24f9f15910e8a5d2bad53e18f7a491ca

    SHA1

    0bb6bb8102047a6e4b9a5f03ca8620b44734ab5f

    SHA256

    88a13d55974af5a4d3d52560e6db70c721a442ed9c117a10d1c36fb81b49ec47

    SHA512

    e0560abfbff81267c3e007770adcd9647688a0b648730734af50d1149324da6cb05c2f97d8f8850584b4d1e030add6f23aa3d99f9db692d16e44251511f483e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    18a4f34c62c17216a07a60ea515ec1c0

    SHA1

    c5877261cc495361ec512a4239dcc0839916971a

    SHA256

    63c90032fe7a441c382fd09f6eb542e2526e70893ebe0cf477fb9485d8957d5d

    SHA512

    b2b43e85386dd54d54b86aed1b299fe9b916240a5e98828b0e871954bb7d1fdb821b712abefd13d3efe38ca7920248fc4dcf897e495a6313470fc854f8ab2e0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6DA548C7E5915679F87E910D6581DEF1_4ED7285A0D9F2F14F63E84BD08C45F97

    Filesize

    402B

    MD5

    a362716d18a36b316629c041d950992a

    SHA1

    505cbeff6d271d87cb90c2852ade0ac219831935

    SHA256

    a4cfe9ef66b49daa02bcf35077499646adcc4f28e9eaa0438b1404bcb16059f4

    SHA512

    d2cf444fb5b415d38ef696ecf73f1c9d6cf646b69d37b8128a52266cfaf72c66cb4b3db844963ae0a5075098ac61db8a96a9f24db26675196747091b4470e821

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d42ef9269f75beb1ba3176192f89bebd

    SHA1

    43305325cbdcc4bc7130864ec7a72c22cbd2b509

    SHA256

    0829c4d1f5da0a465fcec55a787da6d7fed5a5d407b15836c4242d0ac2612695

    SHA512

    62641313fe2257660cc162d5bf70c744df8014fba184e6103842feb04dc06bcfdccd34eda277cd985ff969dfbecd19f103af520818793509f00db88dbc12c4fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46751033134a4765af9df7cd9da95316

    SHA1

    74f75ef1af60da6dba33a680e0b460adb83fda26

    SHA256

    28940c030897a822e690af43fd168c2efd78e7b88c0d3e588dd3ec8ca1543d27

    SHA512

    350067258ba134bcbacb184b612010a7411cf3743aff6e210a8dc33457365639eee45a9cfbf35bb98cf19324ee76f20a5772fb84488021efe523d21eaff3232f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c11908f31c1f2ec287ed2169fe8cd3e9

    SHA1

    ee45b9dcedb2639844a296fd95c7270e466d7b40

    SHA256

    a5fc203fcf0276c3bf937e1e82d3de56e2d83b3c9a11a6b893fff37fe9c2f4ab

    SHA512

    ba0a6248b9c04138b24ec5f3b4d2973797ce6a311d9acf33f13a816b8b383308ff74551cff77d7dd193b797463cad1903a812d8b158179ca3d2c9d7574f11b2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c7d7c68dc49f18012adb43e81424940

    SHA1

    12f447ccfc39c76497f93458f4b9b2dd7e76788c

    SHA256

    a3823b9cccadcd87b594323beb6069eca1c89b54d16a4a6ae8de3d3d153b8fb7

    SHA512

    55ba2ed72448c9da23da371e4703e47859a47586944b97bcebfe5e752757d4d9e106cfda4be7b1d9ce93ce46fb8315a9cf37d651a113803caccd188c03b7306c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b66ef719fe3706f733a32cd6f78ea8dd

    SHA1

    ac4dc7cecfa1d0924d9b9797b52bc1140d18db92

    SHA256

    8dd2d157043bc53c0d7fbb343a2ff0460943df5cc5b4dc6b2383474957d797c2

    SHA512

    0e656b3c6de8a1e36cf30ee80b6cb69ff9855436c1f08dafff79618b64741f82070558002cb95bc8fe4bb6da22d264b67b386283201217740654a31821beeac3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23d860dcaeea5fe9c2dd5507de77942b

    SHA1

    c1d2b3d60ef37cccb383fb273af634066724fc2e

    SHA256

    a3a33cd55d21efb17444c77dd7965d24eff54d665a08378c5ba3f341ac0c9bb5

    SHA512

    7141a0322b83c62e0a2aed800266d2bc04d92dcc60189876020cb73c9e10b6208b80abddfb2e45e0d4f945e1c42fbbec1680b402bf47202eb713f85ab44d329c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb8edef5bcea29e3f76cb0b4467adec3

    SHA1

    872ca1f97fa2bdb9aec4c30d657d69993633e535

    SHA256

    ffc2ddd83e5beaa8e566d4be5fd8ac6858ccda68c9d5b7fab285e5e2c51bc411

    SHA512

    129278387d438c284db0383f5d7fba878cbc3fc003f89cac2c09d1e00a70a72c769836be5ed917ec1b14ff8b6668d65ffd6b137899774c1a2e01f10f788503cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9475be5fd749582b2ab97bdbb21eb61d

    SHA1

    36ecc470a5d1d1fa093ef67e2b09bb27aecc8425

    SHA256

    3481cdc6c84fe39fdab500791a4a6ae19ec0e0cd42d13b9138f9ccbecabd233a

    SHA512

    8d7a7a64ea6f3f529b802718870da0082b01910daca9de6793e8aa82e1076790e09b30a5f2486002e9a2ee883fcd127bbb2e6a9addcca2e659eb956bbd8fa360

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a95b12ca90d0197d2c1c697086a5d92

    SHA1

    c51e2ddfb56a56c8ceb09f97e76621c637457d10

    SHA256

    0087da25e2236985804a400d142b1e1282e0d0b29d72b655a377f451b2f567be

    SHA512

    538d7d040db3d9149880d6942c9ad518afdb7c90c37a0f6b15cbc3452d0040286cb1a19d546368234647b75d425abb3f3d371a799d7ae5611128ff9cca857ecf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68449aa6d1e106afecde1cf951fb4006

    SHA1

    a06edbbbe8927ceef0c4a68669ac53d96e473f21

    SHA256

    a8045351d546032a18eb5ec1d6d6ff207daa3d2d9a8c498d7c4e61816d7c1f31

    SHA512

    3876d91fefa2b732b43039a56ad3bf9fc20b903ddc3024ec5def2960708542bd9653eb62ce90b431590b4f0ffd17b6b280fc64940117eb50a63a644e346d6e32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    125492f2500ef265754b1717235683c8

    SHA1

    57eb91d521353cf1b8a5e450684b0f63f0b72b4a

    SHA256

    82e44af6efcb28f772a1413a9ce87f4beeff27988418bde1a4365be34e541501

    SHA512

    8b4c8844f3e72e3db3837ede3a9d5caf06bcfda60afb4ffa35a2b66e1d9105c1e376593e4ac5ea10bdb2ac3556faa7c9637810d574d9098d1abb69b78d511787

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ed72db6162a8ebc6d48d0303d8db40b

    SHA1

    6aaf54f9d0c830fd289daa61aac84eb3bd3acc2e

    SHA256

    9b4b4d8f568aa6f76e4c666b8786e8b145a28290049fba0e746f58cf83b0df00

    SHA512

    3c500531b8251d33d3e2c9c2010877110ece048bf9feff397d9b0a877f3c8f81d93303af65a951355707ce733a7e02e658c44659981c495a2e5852d86cb75a7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3def39b59698c65235f2c79f40ebce0

    SHA1

    13c0f59421ffbf6b300622fd5bcaa204d9c40e9d

    SHA256

    6852f21d15a9c0ff159c8d6e873690a2b59e18104bdb1858dc599c470329dbf3

    SHA512

    160065cc59e5acbbe94ea10b06f53fc6c59b8d44e3b44336e39f9be3bdb5ccc028570de70beac0b668acbbef9391e02124db2126a30da71ccf359ef2f1041227

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4ca2e32905a0aa8a5310c054404809e

    SHA1

    cde0d35f3d5bb779a6c2d32c6af82af4e89a82e4

    SHA256

    b96fd41a434c8f18f97a1fa1425f3c27cc1320887f4de0801995d27db1a1f7bc

    SHA512

    d2c386e3676ff1321391b6711c20430048f0bf66b8c9ab0e9e5a065ea71a12192f31c6203d7137226a248952b24ae40a410f96a774dedf608e6fd0f9d2fd51ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4a04e2ce0afa86739e9b96c4652ebce

    SHA1

    f717a4bb78bac30ea772466cd124faf46b335dfa

    SHA256

    b6fe3fb936ad848b72c5eb38fce6affbd6c2a840e7b42723bcf69977af3979c5

    SHA512

    74d816c1c174f4391bba472e9c420df0cf2afb4cfdffca72b8f6b430054b4c61d9eb1b5c3af62af9bc86673cbd2be3a13d9ccd894876a568001038a0079ea7ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6313f7611850d5dd78a15cec1cd93d3

    SHA1

    901d9cd5ca6294676f4c6534668d3146711429ae

    SHA256

    f3ff21b76cc372c493e7d0ed7c641d020cf4d9894e649c6074fe0759843c35c4

    SHA512

    4d848b5d0381303d150f4d630e2de182e589b5640deefd6fc2bfedf1f57a222384b22f41d114b54aac2e9433632e3ff84fc393de5d89148ab78ed4900229084b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dcc33e14010f1ee9fdc6d24aefb42eba

    SHA1

    19f4be87f925153766b6c943991b474e6ed94c26

    SHA256

    2d45f54a9bc791589ec23ac9a274b475abe6783d7705a5cc1a6b49e0edcc9756

    SHA512

    5331639c12e1e8f2c4682282d7980f3f23100a92362346eae3884c5a811b3e7c50979b08d9a35b4def56aa4eec8708ee30af9df5f693a7e8419fd68159f9bc51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c256cb940b7add3a271b92532941ce1

    SHA1

    f12a165fc9f0092d675d6f3b6e0d889de044147d

    SHA256

    452d6f05ae153f5b53286bbaba25deef64cb3e71b5c0cc57fbcf4d0081b108d4

    SHA512

    06b9ea9f13b29b137c456067cf32028f49eaf4135b498ffd4a7e6ce13d76b64c524c09ad9cc2ee2b97ea51e14ce45a718138756d5b91aae596b125583c2a0014

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edf4ad6f1a3f0f7e38afa3c5b4a41a58

    SHA1

    2ae6cdb4dbc3a8a6a77c33d26b8c063b23327729

    SHA256

    627af1e91534c6db188ac265b6599bf1d90ee7da983f85c223a1478ee30b505b

    SHA512

    040bd74b98acee627cd2267797405439397cbedfbd1805f76c026a4cfba2487805c3f5d902e7e23a7df2b55664664a85b82e7c829b0326096ea8c7cad3ac423b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c0453d112d3febeddfc33bda422e122

    SHA1

    d68cd7a220ac9a731ef9592f8e7b33723589e317

    SHA256

    82e93b514fb1ad607725d8c79be3f2ff36ce348c351aca99bc42cf73069ab4b1

    SHA512

    78ba9b4fc97731c5fd8d8cf00acea114f9b456dd476a8841c35df11bcb5ee67f05bbb76f9bd480f91b51fff1fa29e2297a3acf40b4b8142abbd478abb58c44a3

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GE5J41S2\cb=gapi[1].js

    Filesize

    136KB

    MD5

    5a7616280268d3642196c89bd5a7bf00

    SHA1

    0350f9555271f57d150da785524e095a7e8eea56

    SHA256

    276ab13834ac74ad86344346135288624927cf2e8c5cdd589bd4619fcd467c44

    SHA512

    76381e69a4c24798b68e95dead45543e0f685dceda39ef73d49a65261db91d07c8aca0171b97cdb173c0f21d52aef3d6c6699ab62d511e3796dfbcda4b26bc63

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GLOK2QLQ\platform_gapi.iframes.style.common[1].js

    Filesize

    55KB

    MD5

    ebe5a485f29f7967338096e4e6878846

    SHA1

    845bc70098eb80aef57ea87da8fc7bffe5aab067

    SHA256

    29b3fe99b016598da9c20ee848f9a90e48e14b16a1393e91a7fe714738790625

    SHA512

    3a8c4f3b40a1458032be90adf0ae152c9852d7ad9573146555d983de21fdb1d538d90a56d822ce8faa85cdd4575fcfca0204648c1c6ebde3723f9d396789e90a

  • C:\Users\Admin\AppData\Local\Temp\CabE61C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4B5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b