Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    19/04/2024, 08:41

General

  • Target

    f9ee6e297f86e8e131d4b3ee4bf69c1e_JaffaCakes118.html

  • Size

    2KB

  • MD5

    f9ee6e297f86e8e131d4b3ee4bf69c1e

  • SHA1

    8145aa6d698d570004cf3435564a9ac6cab52c00

  • SHA256

    28a6eb97f9d3aff32b6559b35b96f323010cad31cfb3bac7c78ac0f0c283136b

  • SHA512

    8212ca67e97bd307ba00c8ed33478bdabd445c21ab02e380eea6bc45b74c971955da09817822401e2d65511911118598b91fede24f4c0327dd4fb8b5cc225e6d

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f9ee6e297f86e8e131d4b3ee4bf69c1e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    363a9fe09148669bd369f2deecc93059

    SHA1

    092b1f5399c78a726f8631b504a9052114f05454

    SHA256

    d07545379956b65ae5c423d00e70d406e69c19eb26ae078e1c2034aaa7af8f21

    SHA512

    f045ada16502057aa4dc9a65b4b960971cabeaa6349e10681b9c308b92402126d28f4d527f6ea5b2d44d51fdaf5c4d370bc54a7a82069cf9a346453aafe21a3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91849a982be096f62ec1de709c247dec

    SHA1

    71140ce808a8b78dfeae3a57ceb2ec4b89b00ffb

    SHA256

    bb7ca9c3d9b9d689157bb22466d879940b2e574097910edbc3590c6cc9cb3133

    SHA512

    b38930087bbe2aa9ac0ddd69101647f9fc36f2d6908e7c6c9bf373598b30d095a0668b761092d8463d9dbf91a8e0c3b1a144fa7f11dc16cdb5064f945fcc4d7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    487a4ce8045cfe881321e6dd44e2bb0e

    SHA1

    d86272caa30d5609756ae97ac723fa801bb24d4c

    SHA256

    22f974e1902a6c87165b7de43ef29401171f9526055969b2ff9ad323d0befc13

    SHA512

    9e269db9e254912f362d862dab2065ff483a7294ef45f3b1248aa4801431c138e1ab66ba30e3a38baad0a6ac6826f7801f70826f630d1aa038ccc4d5e97b3dec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    602a2ba8d740a56bbff1ff7f5382a4ea

    SHA1

    4d318137cba21b60ef83d88e6b5dc666b0e01269

    SHA256

    3d95bea664337d80e6e712d24e4f12c76b9d40d2c219bd12377f1383fd9c59b2

    SHA512

    23e77cf04f6a2de8abf2c2f21faf6b8f0c245e689215655411fce522dc69a6bc7277a596cb533fa5cd377c08d781a47a61b0d89f2ff79f15b50ed2005e98c547

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da7899988bcdfba7303a38eaaf02bf6a

    SHA1

    e608c0e440151475bcba72998fc1e192d51d150f

    SHA256

    665b7b9b72098e803f0b7e99984493f08c47b45431f75648bfed75106181296f

    SHA512

    3c4fa39f0454d812d247aa876c53224a989c1408793234a633ad03455f77bb852e053f62068dd97d4b51da7db961951ba346d05d6693e0c7b20d846131953de4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f01cb47fc8bf4648321c6f8a056df100

    SHA1

    749b0c6db002bca89321c06c837dfb3fad68ab18

    SHA256

    d5e386c1895bc7fa0d2b51cf0fba7cc3591660eaef96e7016fff51126eb77305

    SHA512

    f6d0c62ac6816ddaa46fcde4c5d9e7eff261902b5dd2bd1bf95b9991bd2c65266fc222a199b8af9f96a28593014212507e192ecd03873154f46973bdc6c7b1d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0c197baa58bc2b0b3278f8a34dbc938

    SHA1

    3b6c06f5267683c70db4dd3d0f4be261fc7a5a10

    SHA256

    79741b5f3ab982295bb365cc30bda42fdd851b68a6a76d3c7b2b7b5d63304ae6

    SHA512

    06877ef0fd60b04c8c489c78cf534f9cdab055a0e5b431ca7152666401722e798e767649d4568620e13ebb0dfddb01533f6d578231535898f618e61528b8cd3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4678aa293183a75444cf6acb6295987

    SHA1

    e89cc8cb168a65afe2b9072765a7caadec6ddb39

    SHA256

    0a18bc8a8ce0af6798c33100f864c71889c91601d191fc443530f3c66084b364

    SHA512

    33874c4750b5095facc85afc040506adb558e1dae2f5570ed304b4afc44f649cece250004eb7ff456eb61e92a7fd795d4d8453cf5566e88690c42c994e4dc19c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1dbe163e939e785cfd53fa403f49f9ab

    SHA1

    2c3647f96ad3823bf216c19410b4ae9ecd4a5ecf

    SHA256

    271fb28877430e84f1e2480cf1425ef27151e29df29ba657557f4ceba15a8ddf

    SHA512

    36c9dd126ee4f059b565297b89f20618278b990059afc887d920494888dda73b3f50819a44bf385b434a7a9f2f463b013ec4dc0a32cdd741cb7a52fd93db7f20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54b3afc2698be651007eab4e7acfd40d

    SHA1

    aa027b7f7ace14788593b5a6a817a4e672106d79

    SHA256

    6dd727332d12866312b8ccb6e23413d3fc5dc24984fd1a4787120601931e7e7f

    SHA512

    9ce7f351f33afe82bafbe2b3cd582a81553a76ba5419ff36506b3a39e3c86174d7c95f046527b7d29acec5b25223836405d6216074ff73b8234ebbad8a0b1ca8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b5c34dc8ec86011e82a216b7a72992a3

    SHA1

    80f7ba4ddc60adcf73580bcbad31f33d9b2c291a

    SHA256

    fc6afd834757551bd3a9bc790e79291e117fcefa3ce28bf6b1a97bbbba7a72e0

    SHA512

    a89a2877be1529367035a71dea7540a2fa31452e18663d586984b4456bd9d3f4c352b2ca8d9ba8c8cfc6960867a0cf79011f5602a789dbea28d76454832749f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d79e550a88c3fc9f693a90c7d36ffa6

    SHA1

    e89b7653cb5fb99ee31d6a1627d512a038c0f969

    SHA256

    a0bf58b76756f3ea65a959eca2e4ed3a8cb55c2665ad239f14714cd16e050b8e

    SHA512

    007120295a36174bb512d5651708da5288f4a6b5615da8b2f9fe8946cbcc68687ec023c4a314ed10be641908a8f6cc746f2bf1bae3af1e856c2f5ebea367b4b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4dee28b11c1a92221e734f759adf0f2

    SHA1

    a8119cbe4471673356e0be193bd19d7b37c5768a

    SHA256

    4fa5ba2328bcccaade7ea270c5d76b060c0f06600b11410e0847c02899fc2969

    SHA512

    c51e1f30d88401d2a1ea4fae31cbfbe703b7a9152e3da10c081d2b1d0c4585fc7d28fe56fe5b77a1252aa1bbc7bd1212244d165b4fb7167b34db715c8d366406

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e773e1a2a2e9e023b8398202e310b0a9

    SHA1

    b8ec6b9f1e0111fe420d7117568bffc29f643924

    SHA256

    70161a03534af4cc7dda8a17a0c1fd41f122225b8e0380990001e7ec17944cdb

    SHA512

    29f11631054c8b28d118424ddff5ea85cec1c39eba0996f472af60d5da1d90363eb285b79630f27f857d66b7cd7354e75928f13a2f740e95150e0a59cf178de3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b09f95ecd0a7661e937438785ce28ab

    SHA1

    e29ef7dbb845d3767a0f04820c37cef346fa2148

    SHA256

    d2885f76cd8fe2b8c6eb69104c1ba51a4f74705519e8e271aaa27cc949c2287b

    SHA512

    b4385505aa00890201ba10fc78368be680710f87be6b5cf72ae053dcbc7f5fbf89284315bbf0b7d2478d9f1a3ef5007fab484d4b8af49cecdb17152da76a533e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    96767d7358a0c7150359fc7107aab66f

    SHA1

    eb5dc7ff3f82b8d276ff47adbc70d46015ec16df

    SHA256

    08f6b50f1342fe4b64297f7b9eeff0d24c266b0ae42435fdb2e44f8ff3f39c44

    SHA512

    8bf90e13c844ba5e41ee859b45b0719ebdb56d6560a582cb0429c15f09b2233dc7eff4aeeaa6acb3862e1a77d2a1c7de2955ff833cf907f84052441ebc0c1107

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9096614b6c804c50813529aed0f310d0

    SHA1

    00193e174101b050aade0ad5682ce4edb59d2a12

    SHA256

    2559886481fdb047b05eacf2893cc4d2789275be61c116f7128282500f55364b

    SHA512

    da110cf78dacca844178a81335872ed987504647fa031dbe2c1dce8a819847c300dc05d230924d0c89dc9c78c19fb455d7a8a0db25aee4c9e0658cb5a8311dae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7bc3e195fc956c38a35b0d3cbcbe598

    SHA1

    ae3013350b30e57bd9138c132e5d694afa953e0e

    SHA256

    1bfef6d74605d408ad0b83891b9a783d3c950bc7e1b9f3c93e54c39fd5d81ef2

    SHA512

    3e048c91f764276c38d09324b2c14b9815991cc45f8d9aecc2386ec87b55d77c3b10d6b8f7a24676aec62cfbd44c1bc0bbfd3c321c6b4d25035eaee799b6bf3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4acb88f533e14d88815394c8f9a306d

    SHA1

    9c93de5918fabb7f584c08714d8bdce96dbcba13

    SHA256

    60b379cece5874d3efc455957f0d82907c8b63872eb82a63acdbfb5a90495a80

    SHA512

    1fedd7da913bf595ea8446c0ce93e0e99ad189517a451a38a3a97869469131ae1158a79a9484d234f4c82595dbda2b451062f5971995de61c0ecf0d7d8fcf770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea0d3866ba2fc2604e0b9f2fc69b7fdb

    SHA1

    f21e3de240c3c8e9eda5decb77fb23b5d808d59f

    SHA256

    a199c1e6e078c8a8d19c17850944b132982670c980e706158f37d07599abba01

    SHA512

    5ebee22f19a5863eca972d72ff8e594d2f12189fe732cf308165a284df4909337194a4638495764b35009d56166c904a06329183da94bd9c7e15d76db9d2e15c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c71db4f87763e6c9da18a622d8394977

    SHA1

    3be995d62bf1f11fa90e04502785bfc64e21abfb

    SHA256

    899b95d219bf42135f030b2b79fd36b47d90ef21018e7da3130f20f6f9d06ff2

    SHA512

    4bafa1c9762138cae076b394304d3e33a536c3669f22e6affae1db6e913915a0fdce0f5f0eb215b44342f2b47d678e313f50dfb6221cfaba009c4f4fd447ed14

  • C:\Users\Admin\AppData\Local\Temp\Cab435A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar435B.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar443B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a