Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    21-07-2024 13:22

General

  • Target

    60a6a24fef25aa13ffdf956c59a20b52_JaffaCakes118.html

  • Size

    66KB

  • MD5

    60a6a24fef25aa13ffdf956c59a20b52

  • SHA1

    36c6c28ca77413eb387c8c7c5207b12ab1cec1f6

  • SHA256

    e57ce9b4fd8b5c271997b67852f664adc3e1a2e4ac42573240c7884f90f3b2f0

  • SHA512

    ee859fc3cd3121c3b52fd53df0931d6ff166ac3fd59398cc0695586b62349705a57ae12723516f50fc0a6a7ef7766c8f084cce51db0e22362883d175b5f8cc8d

  • SSDEEP

    1536:KPkcldAOATEJU+L+AzpR63JVapdo8bKoFAcd:qkclqOSEpZOJVaLo8OoFAA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\60a6a24fef25aa13ffdf956c59a20b52_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2460
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2460 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1600

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    8d1040b12a663ca4ec7277cfc1ce44f0

    SHA1

    b27fd6bbde79ebdaee158211a71493e21838756b

    SHA256

    3086094d4198a5bbd12938b0d2d5f696c4dfc77e1eae820added346a59aa8727

    SHA512

    610c72970856ef7a316152253f7025ac11635078f1aea7b84641715813792374d2447b1002f1967d62b24073ee291b3e4f3da777b71216a30488a5d7b6103ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6B2043001D270792DFFD725518EAFE2C

    Filesize

    579B

    MD5

    f55da450a5fb287e1e0f0dcc965756ca

    SHA1

    7e04de896a3e666d00e687d33ffad93be83d349e

    SHA256

    31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0

    SHA512

    19bd9a319dfdaad7c13a6b085e51c67c0f9cb1eb4babc4c2b5cdf921c13002ca324e62dfa05f344e340d0d100aa4d6fac0683552162ccc7c0321a8d146da0630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A076F1E564CC55CC50C90DE55DC44E15

    Filesize

    472B

    MD5

    ab65f0d3a96d472eb5e8690667ba22ec

    SHA1

    ab5dcb93b8c8b3ddcb702dea52d2459ba3fce5e5

    SHA256

    e132e44e50e5f3b10a49214a4677a60e6f6855949343833e3abbc91452fead97

    SHA512

    12d837239931be41e174784c3578add8bcb693cd1a748221542ee69a3673fbb8cd2a27ed31c3a7ceaebdffae41dfc9aa18799406228a6991e6122435c5597633

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D

    Filesize

    488B

    MD5

    aba49b79110713a27ce06dcc3c9ed63a

    SHA1

    ea43b0bd7c6bbf28aaf60eb10bb9219091578cfc

    SHA256

    ef0bb993e730bde600b5b180b9224c4363d8229bfea6491ef7b90c28b97c3847

    SHA512

    e0b881fac6d619da53519f265fe8905365e3b6eaa3f3255fa3bbcfaf1a3caf024a02b80202d60c67536e7a25a4b0aa0e1a95cd863fa7e786465b2ad33b047147

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6B2043001D270792DFFD725518EAFE2C

    Filesize

    252B

    MD5

    07883bdbb4cf40577807a89fe2fc7560

    SHA1

    4e6ab407722249241801b9a3428814c66601563b

    SHA256

    72d2603552fb594c789a0681c67f6097b0abd81cd9b72f0ba8b1defef94e03d6

    SHA512

    3990a7fb4fadb43b173f2fce315adc4711f76232a5e01513e80fd69a33db5da594d8fe3879a93ab79bf6fb29679ce09d65c215fd41b1fe7e9c95594452c303f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    872e95d183870a831449fad5de5b7d2e

    SHA1

    20d67fe78090f3294efdfaaaa9d35a7dd17c6a56

    SHA256

    1e02bc4eb0068473811065d73d5710f01635efc3eecc079ed0b272ab852cfd16

    SHA512

    491587213b045f15a22147d8964485123e42512fcbdd2f4af9e38561cd224df7bad73d8b0f17fbb2c29afcee354a82508048b962c9b31438e84ed8e4a81b6fd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    38859b97c6d25f9f48f1beb61453d155

    SHA1

    9749622609c8033faf09822289acd227c44225d2

    SHA256

    fde7e79410dbb9cdd793c9e0170d462b27bc8a8f1fd8d5de500aed629cec6cfa

    SHA512

    d5ea837c238926e37fc74297ab4e6058f411b6edb03c9b8ed4869d6be16b8be7c3ee7bfeae1034b87556a77a09985a7c6109593ac5a39504e710ffd286fa0c9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    37b007b2a2d55971ff6ec7a6be4cf5a8

    SHA1

    5a6be0fac87cfdcdfd09d70762a6c9e4e427be95

    SHA256

    b06f7450d309c2f9af7024b40b37b56fdf0e5467680f4b8cc5f9a4fdcf2d19d8

    SHA512

    cb7bc7b83490cc001e3c3c8b71822fffa857a6fc2cf4f0a9eb200a499bf934f2112bd32ad5e9ad246b475db1bf6a71c9850e4e80e372064b2d6eb63baa19475e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7b71df8e852d655ed963129ac1b249d3

    SHA1

    95eeb15311a6b16f332dba44afd5649e833d1642

    SHA256

    46c7562b9e5d12bda322f93161e2b2531de855e559133bb64c936a9e7f6521e6

    SHA512

    d4791fd81480f2e8491ece9d4e646900085665a753af2736e5ea9050be9381f8a530125a19afde3f439aed8788dcc27a38ac4a749e829d55847ee923b84034bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    85c452f947bb938cfe57658fdf2ae0ef

    SHA1

    5a503e327d958e3d098c811d7d91830e90ece500

    SHA256

    74bd12540c03f981e55812db554802be3eec8f6869ba3a5c236911d4833aa8a7

    SHA512

    122d69a16751598bad0626d448beba5571442b8c1ffbee7acbf0d48ebbe7a2d4c0df5e55c54864934f1ae7de2cd6e1da22fde3675a46e24b9068011e749bf3fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5084c86414255d0bab1fddd783017099

    SHA1

    7aec1428524e97b2e1ca89ccb8e8703c8ff8aee8

    SHA256

    2e3488305b308066446b71ce15c3155d4bf964b3f8381f7a342ff70187552e0e

    SHA512

    e5e503c7208bea1a29846b516829ad055b8261ef777cdc680e605667b9ef9528915cc1389d32c1cbcc3eee72ad50de66c4c6b1ddc00cb7c6b3f8b17f3ac3a80f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    484a6db17c71e11ec66712e482a12ece

    SHA1

    97fc289583a7679bb7217c9c7b8762f47a8bc44c

    SHA256

    417562584e6fd806f01b5ba8cf1e92ba823e66b7d30ea79d209c301163cac884

    SHA512

    ff633a0d68277efe8a7082f3b424067a7ad66870a71521cf7ff335d506a2847d2764d7de3f50d29f97eae4ab635e87d39ea3a5dbe0827619c795a7a45c9a46bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1635a5ca16b71cd33131cad14658b4b0

    SHA1

    1472aa488692d205d7ddb19d139b16ebc00f6e2e

    SHA256

    5f6c6723d96c80592fc1b10b7cfdbb335e6a2908b23a4cd60cb6538997527b79

    SHA512

    b774961ffece0692e214be69094c4f9c996100941c0654ecc2b15de2dfe954e04b1bbf54a4823bde056ab23f41949789fe33c230f5ced03dd4bb6e02b04aaa08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b66503ec19caef3b67324be344d6ab56

    SHA1

    b5abddea16969dadbc034207cbf16b259fd6979f

    SHA256

    a1a7869915e09303d6089e5c3f0b14f85695face98f0a838b58ccc991d2bf7f9

    SHA512

    f7ecc3d8ad9c0256828efa2c68c34fca72108fa9d7964a8af56f058f62431025efeefca48dbb624d77f0073cbe87e25758daee96347a44c7c63f10e88caa3559

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ce858aad5cfd1efc5e930dcec59792c7

    SHA1

    f3bb8ace02748bd45da2e746436940624d7f5525

    SHA256

    1badc3de1481e8be050b1e2d94b3bb08110c3500480c2b2e641c27f007b4a73e

    SHA512

    7d80a9b64eccf395f4f836d3ecd382ed8615b0a3e13be3c665283f3ed875d0398b0f7e354decf9918851ef03f9ead6f525721fb1857f24c2dd2f3bc93896ab0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    172b4d09acefb0e6c01a6703b2af1485

    SHA1

    4f4dd3b17d08ad4e7777b4b20484f27e480a9c2b

    SHA256

    ebedb98696a6e840ae0c69ae25af021396c8b2ed7c09729bdabb7edf961dd5ba

    SHA512

    c109a5f86a5170f65cc2b54c2afae06fd0c7795c5b5c9c4b39f07cea49d742112151d3c985d0bfb1099840232aafa28547e7d58f17e22247fe77aff9fff0af9d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8f9e0410b5a6cebbe19c32f975ee8ade

    SHA1

    ee64c0130e38db7259eabdf1df6401c9702a63a5

    SHA256

    ab7c4f31a14885839d5fcd5f77caa1799b8bfd49b36e963cd32f139a1d01639a

    SHA512

    7f2779d4ecff4f2bc4199792e9482785a07366698eeb9688ccb82d1dcac4b86e64e72210232417776ba066bb15b0d60cd890b9d3346832137704af9ed12d2856

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    af638f5e4bdaaef73a91666ce6b41918

    SHA1

    d5e4797dda05eabdcaaab7ee523a0ba93d3d1ac5

    SHA256

    ba561cce195e58efb8e8945488393e3d9cc765b52e66f3f4ddd7db9ed8bcac80

    SHA512

    6d79f1a0babd8d73ec701a9543c694807329a176de7c924efcd144a81f76a56a077a7d643b0e5438f498f1f057a9959429e5ae03f5f1ca48ef9706f748e99a91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2b3fda1e76f6d6edf815ba4cf9adfb1f

    SHA1

    0f46ae0365410674edc9d5e07eac2f0eea60b1a1

    SHA256

    927a14e88d1b3305d4c6921670a3ef6a320c768c07abe8c5f21883f91f24b4b1

    SHA512

    26f32b8b0b7b8d1958d9e67d2c9e35960297bd205f753bd9ad41fa1c073eebb8fcdf04d37be59941c291841dfd7e6d7148282537cbc1029e2c8e47eab1d135dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    39cfde0803322364241c2948f63d711d

    SHA1

    75bfdec1b6a4ac2ad25f6930b948ff8d86a61e63

    SHA256

    6587f65b64581eb99714b2a4601eec0087f96e94d17bfcf9b2fd549d292de4a6

    SHA512

    8867ee49905f336a2e0253bdace2c86457144e72d48c25611817c49c573f17e624f4d94a1cb4cace247ad9d4dce87a17300bf43cf82c09142757ee2fae831efe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    16365fd55067329efed6ed7980a62fba

    SHA1

    a8e9d8c64615ae2739783d1eb4b04d2e79512ba4

    SHA256

    5c031b77f357a874524b434e405d6a03edb5399e6918d0909b35310c91516f02

    SHA512

    b8022738e045bc89bcce828860fe78ca45062c60327b1412d1d74ae5d13fab5220f97bccd060b44dcc8597475a65ef3ebca31f475a62e969556434db247f4bda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d2cd0c01dc51644f7fd2ef46f0722839

    SHA1

    e8208286044a3224b2656ba482714b637f0773ce

    SHA256

    1999820a5cd898fc2591a72c831509d50d47ee018807a8251b6a85c436a6dd4a

    SHA512

    7e474298af03fdb978cb78557b66f60153dacf31731b71fdc7aedda2b25c37130f5aff0b1cae324af9bc06ffd477d7e47861338eb7a63522026e63a6a1e2efe0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    38f29130fd5b175a130331755c8e2762

    SHA1

    f5c00b1723bbc487e9ce8abed36e4f782020dd50

    SHA256

    d7aff49fcf54f4a74121d7c710a6ba6a24083e9a57022b20b9db64a33a32e266

    SHA512

    741c1d7955cb06bc7d69a6cd19275194898a85e92fac6bd88e7e858b27021a1f43384f1273cd1eb616b0374cbea079cbb0fdb0f80b9771a26f4d49faa24ec80f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    966d3b95629606f2176c4d56b0dfa4c3

    SHA1

    fd4ceba744cdb5bdd41e146d340a8cd1203f8271

    SHA256

    a3a478c14d36edd2b1408df2502bc9db8eb76e3e7fa2d7c362034b30884d4f33

    SHA512

    1791206bca6b7d198b74091e6bf3451ed129596a1f987513fe9fd8884c300ccf321d278ec1de8477405e9fc71ff170137edcf79557c6c6b34e4029bceff92891

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9e00ec47730ce4b3c67850a03146b8de

    SHA1

    2b05f4e35eda0faeee302c3e1b3ed574444aade0

    SHA256

    589ed53d280bae2a835960c6e6cb33919d6f1235b173c8723c0bf9e7fd07f471

    SHA512

    dba064eef03cf41afa2085e652b4aa0a598796458d143d7ce5ca7b2dfd2a76090a15842f05cccef0fdacbb5e3312c023e1fc7ae3aef7cd8661e52c199222f1f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    f533edc6a97589b8a0592a79089ad8d0

    SHA1

    d8a4131a8636dfb2c41c26aa3561401d03daf796

    SHA256

    71a357bebe212dbacd57b5a510043903fd7aa600c9814b8777151a90d9b94be2

    SHA512

    f4d68b0cd0adc167a9fc13cde47c3be86d54cc602b465a98be5c4bf2d08bfe605477149116a1857a7d10dae416339b73b9305139c2860b5fd79a7ff34a8f9681

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    429e147c6780181b2fcf925845742e1c

    SHA1

    f7e8e32de921caa79a28587bae693bd802d3c887

    SHA256

    6992cfa2d74d624c81190e94e67917dc8999c1effe46eae32d53f9e8ceb78b10

    SHA512

    de396ef3433da381d1429753d2f20fa338c73128713ca985aa75a806a53f1398a2b32d06ba9f580a626aa21d718097ce4e7b028b156616bd7d0afa8566055c22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    524e5d10d15289d9fa95748f7a100eb2

    SHA1

    0efa382bbcebe93a789e83cb190b764c3c159c35

    SHA256

    409e920990da4d169ab098b3bd163edb95e066e78474fd1f47f524c83b204eac

    SHA512

    cd44b14add4570967a3904db29c0b1a970fb2c1fa28ad1ad350135728f4b159b04b6840525516ce49a0fee6503b81bf401e587b30db2cd9cf7df8bb8d6aa87a0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4MP1SLKR\cb=gapi[1].js

    Filesize

    135KB

    MD5

    cb98a2420cd89f7b7b25807f75543061

    SHA1

    b9bc2a7430debbe52bce03aa3c7916bedfd12e44

    SHA256

    bea369fc5bdd5b9b473441583c46b9939232bf1f98c1cedf6bc2241c4f5068d4

    SHA512

    49ccede4596d1e5640a9c8e8be333f9c18812d58f02b2b15adb54172df1387439e9dc5afc4ccd9d8f0f75f092318bed68d3cd577338e88ef4f9373de8a07c44e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\69P6875H\platform_gapi.iframes.style.common[1].js

    Filesize

    55KB

    MD5

    881eb3704191d887333d08190e37b9c3

    SHA1

    fb5f7a2259c6e2d0a986f1df7da0017f6f4bc198

    SHA256

    03759f99c9adbff1efc85f512a97546207efcf91894a08b131bf59c2e2b95206

    SHA512

    860ce2d7e2ee0a1eea2701af9d0e01659508e26bcbd2b4456bc926fbada737a067fb5281085c00d136f6294964cc2a6764ce2c12cf3fd32a0f130c117a6e3191

  • C:\Users\Admin\AppData\Local\Temp\CabEEA5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF29E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b