Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    06-04-2024 05:30

General

  • Target

    dc70b9e03d22d473d947354499fe4f64_JaffaCakes118.html

  • Size

    1KB

  • MD5

    dc70b9e03d22d473d947354499fe4f64

  • SHA1

    24b0fe13ccb3dd4439912f2dbd5a3e64f17c0c6c

  • SHA256

    76004c42fc5e907d9263a3d33270e4d3e78671439f21ac3e6e85b2dbab5cbfe0

  • SHA512

    c2638c8ca8106d8f0ecfc97e81ee44a126161d0147189d4b9afc63084b14780f8501ce1ed6d59f0a5d9bc611e47c3b4b752c75932f5d334cd764b94f339cc771

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dc70b9e03d22d473d947354499fe4f64_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3393d4f8a85f917b15f25864cd674665

    SHA1

    98ee2bedba3ab1fea4e5bc260615a22380f977db

    SHA256

    3dd259b5b8ab3c6df02c9adc96336504f70c48067754a2d932e96b7e8306c122

    SHA512

    52b2f2179ab46fa8aaa78e04e33d722bd720f0deaf4f692ca3c4d06e23b3eef810e1d71c63336b13205f0c860579974ed26b1177c0eb54033f648be34cfb2660

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8afd121510732913628f6fd6abd3d1af

    SHA1

    94f918d9af07e2cd02e13b20f3d0aa12df8735ce

    SHA256

    ff554e118081a6ac8ff1ed311d32f6235bbf1bdb4d652a629726b1a3f6010f25

    SHA512

    ba3a8d9d63ef06c0d18e376c12a95d13375be34158d31dfb8b85443a856f0104060f8aab2ae26482f82e196538f0a1efb2f116349044d50c7fae40d891bdcc53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7af896713991d38c1dea0928d44fa944

    SHA1

    50f27764e5dcc39919f2209379280319f1dd9487

    SHA256

    69af26b25f31bb3e5b30452806fce0cf62e300301ec42e38ed827dc20a70cafb

    SHA512

    b6d85a8ec971d12d6cfbab6f55ee15804443765752c8b93777690c20118567593f6abb4cf2fdcf06539aefd0d2b86aa94167d04c0358883d9b482f9ca3714d57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84ffe01ba9db88648c7ea18ea9dd87c3

    SHA1

    381b91a2ff27e2ae921467b0484d77eae64903ca

    SHA256

    fc088cd10cd7c32eefdc8b4743af17aee13cb660f246dadb044a7afd6f2e72a1

    SHA512

    a6f44db97d1b046a6e924c7daef5fbf2022d7383dea977ea7546516deb1bc2e2a8a244b2e802cded3b4b03f911f8b1d518f598b26bec91a9dbb1d74e82264b86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb89d9e3b79c37c1c231ee5cfca8f0fd

    SHA1

    60abff46bfa26c4c96cce63118dc721e415fc7af

    SHA256

    0302c9366b5f791e1ea7b0a0c17e19140bf2785c301d2b426c32122aca752c52

    SHA512

    fc7e4afced6451a9b5de19f8603ef4868c2ee2f81b3b5a655fe078c98a2e10bef426766e8068872f67d54745b84def0fe54b2debe98cde2b32e82bab79e42946

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a2fe2cc837efa8df819e21a374c73e6

    SHA1

    e57f2187d9acc1b1f880f047b265528e55e899f2

    SHA256

    41d478ff52ec6feab74791a0ab3ffd9b86afcc105585eb9eef118f751d83ac5f

    SHA512

    fea576b76eb897acdc128ec5992d85e97fedb8d5b9fc58fb08ab2b79f17a827270552c4d36025c8437fbd43c406d97c958667476b0d8eb6e8aa1157a4695daca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e37b4febb16695798ead570061767b2a

    SHA1

    c6be8676456463c2299da2e71546988bb0e44429

    SHA256

    d7dd5cf64574ad62607d2280e435481c0dc8bb3e68a659963871bd3f9d1f9945

    SHA512

    8804e1d86a53e42a941f13de8cb3d7c8917d55474aeb13c167a436b05ad4851dc1086a46034b11cb24c5705d6f72238bfd83d3e189f72cbb5b5d6bcfbef4a166

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9a951256f71b9c7ca492da88fc343245

    SHA1

    8d71abf24a7436b69f430eb670fb32169baaa1da

    SHA256

    fa5832747555b9279d462cf2d03742c47f51c43ca8a8edf2e68e3dea59b92dbf

    SHA512

    c24cff34dbf5a18ba178da82130e3407af823aba17ac14605f6d4907bd7a108da86bdcb780a1a278a78943aa307202be0cddce68f5170bb84a1182bad7abdc9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    889e3559c75f1eb1400d5ec3ef9a7e78

    SHA1

    0a687c03c240fe4f3d635761bd0674e74a63a9d3

    SHA256

    162d28cb60c0a7f12746daee0c3f023f3111b8a48c4f7d0efeb01fcb001c91a7

    SHA512

    fe4f3eca57290c1e9812c9950f3ec7562641de67eb7c455d8b71032df727f1c9f4352b877221fb756920877ffe457b5a4074958d6a2b313ad4fbfcd9526b3393

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d54a1e41d0757ffd61c6bced0178464d

    SHA1

    3bba151ed6cb2c81a2588d5114ef76da79aa2e79

    SHA256

    d858f14e755708e55e420e2c13df24181006c50d4c9677eefbad8342323fc4d0

    SHA512

    65e170c3d95ecc25c416eed13d498c5dc7eaad9b44a8de944b3fbd23a1023d9adf478abbf185c1b49c7cbfc91cd3e3180ffb4cb15b2137da6f27e13030766494

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbccfec571ba66c90688176d16e8ad32

    SHA1

    58b1c57786db871619beb50c950f68f4827a713c

    SHA256

    5d734332834eee9a47d26dd77982670180d10e243238fa712a763daeffa6948e

    SHA512

    eb5e5f5ac793d38ae440fa1a9d0774301a3cd8a72432f9a9c3d12df3af617192a98f13031be1ce91061216d1ea26280de29115c3140b63742420ec3e1afad19a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e2751f13e03a131b961c60a40cdeec6

    SHA1

    6dcb55da9c7356bbaa57f7bd32e72ecdf5ec4f94

    SHA256

    f7c6adc15ce07de4d72acf39eec6cb540a66c48c484b81f3db6a24233ab70a05

    SHA512

    6d146f2badc919a6a5a730a41ac10e9bbccabc789873caabd79d88c470710776d7a66dd8b8e8915e7ca4165ff47f693ec8ae4147d2a5db535c8d77284e709ab6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    293886aa45c77e12693937c328bfdbbd

    SHA1

    a13d8b8f468eccfbc6bc368720590423b7b37d28

    SHA256

    c2b8ca3f1f46e289cc940fe186b00813ae4baa90a7bb8f26b37e3b104c19ffab

    SHA512

    40d7b9ef79594a7b3ad8f4cffd782c54113ead2e6cc3b02c23f8c7b5dc584558e1fdca7e661f17b02a27bdacc5c2c40d2dd7a64e5c5400659c6a617f660a0bc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8100bcf72c3a3179255b520d4da6ce37

    SHA1

    20a6a8a5c89808b35f492f0f5ff625f7744256fe

    SHA256

    8f1dc1176eb84dbace6a62f27b79e5d1d7dd36a598af183b99d5ed240320ccbe

    SHA512

    2b5df7c5d331779d88f29b90bd9f44390b7d9b0dc94946c9ea7c5d90665aeb481c7eb56fbb11086cf2b8de5f3582b463a198064eb1ee13b457a1a116ca812e5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b0cfb0eed0bad178451a7a25068d24c

    SHA1

    b12e023576f7152ee8ae99c654cab4d8510e2645

    SHA256

    dbe2cfda0fb5c14c5075d3478c8909218122280c74baaf948904f008136c0486

    SHA512

    1e8600f3a6e2d3ffb7c38d7460e6b7d1fc80f13fc28b89b659dae37ad581f1e5693b489ac3bc5b4e3889296456a78aeded6cd016a73795a9240a6707b24d0ccd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21d14a6659d810b81382e88f3578eacf

    SHA1

    b468f653800e54120acf1b00b32a10519e32b122

    SHA256

    03fda6131a286a3b83f5cd905fba69a2231b8f0f1b2a785f07016c43f4e2cbd2

    SHA512

    499a33ef80793173a7f5a396622637bd7d6b020662f5c679d9c9dfbb40bb2bfd66bd86513fd5c92fe97b3d977224bc7fa07aabdfc035a828c2bdc7baaca83261

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52933ea8861586062a569ce62ca2558a

    SHA1

    07edbac0c042ce6824a82472359d7daa91cb1296

    SHA256

    f6c476affc2c9da822cf11e881be3933b1a1ccc8a53341b88400c1e48e6f6415

    SHA512

    3585dc9fb5b313de5274afccc541633ea635ba05cf4d98c9372a074ac8e8b285272322aec7fe9c270398309b8a3833d96b8197c545817aa347e1a93fa6870672

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efdad04d3b5198f92e4de97b595cd634

    SHA1

    b78b810bb186e295f81f97297245ff53ab53390b

    SHA256

    805d19016d2c1cf997fd5ce753d5945c7ef842168f25b65043b12de320903911

    SHA512

    a5f8511a5bc09f3315b527461a653d213dbf807a61dbd4d990e3e9fb029bf492a620deaf4e409976868fe0efe02d8c4dd25cb615338fb27260577c3ce7d62576

  • C:\Users\Admin\AppData\Local\Temp\Cab3C37.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3D2A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a