Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    19-04-2024 14:03

General

  • Target

    fa752014138291bb0a91e831f73b8d48_JaffaCakes118.html

  • Size

    504B

  • MD5

    fa752014138291bb0a91e831f73b8d48

  • SHA1

    faa9be9dda0ecb86df1009cf39dd4e10320a17f4

  • SHA256

    d06bcf3a5b119bbd8af3586703c046e6c306c2589a7e69feb75b83f9b6deb008

  • SHA512

    635d0d8bc44926369e64a33a2e98957ec590fbfeb1fda5d1ac66ccd315106429864d179607a8d56319f5af26ba7d44dc6ce01fb9be8c8a709374efc2d593dad7

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fa752014138291bb0a91e831f73b8d48_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1728
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1728 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2908

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d938beb7ce1bcd05292d1fe3c041a566

    SHA1

    d28cc1c4ed206078014f247d4238111c1a204072

    SHA256

    23afa00f33452280adf71c581cf0f0dd12cc08847020e4d4905a52ed336a78b1

    SHA512

    6d256e78ec9fc68ac470f66ca5dc817185cd3c0be9626e28e92082808f672e1a9360ffed169b3dd71429155e9d9ee599b4ee0949755bdb4ea5ca4d9be4d48958

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07925d0c7f6eb2cff5766d89938077df

    SHA1

    4352f1db63a5785f335c8f07f047d39a80e1efb3

    SHA256

    16b4b19a99116f48229cf78dd8e6ddaeec8d136cd3afb56dde29c4aeefeca3a0

    SHA512

    c3cc2765d8f17f0432a2f1c54b85dc6086d1aa2f8f87583909f89d5b5e111a989e67ee1b5c645de68bdd8b12877006df791a57718bc40ee2e344a627f49028f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bffdf9e211246c5f864cf0ae0b033a13

    SHA1

    ef54039cdca8ec93cd34067df10008da55f32fca

    SHA256

    4cfa0c2a5ba7f40cb2e3c489ca84993fa9438f2629d13097295ab65b6194e636

    SHA512

    1a936bc4274f21ec31e5ddf74104cfb2c4fae398c7566936863e48ffadf8d11747b922cd8ff1167a23bab19122ace41061666885a9a7e87d955d69a16ccd6385

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61c186b54233665bce80591dbf0f7cb8

    SHA1

    972c4a4c4a6e67f66c2b80753baa6b54ebc22804

    SHA256

    4496290df42d0aac88dfda841b3bf67a2bf36c993aa636ac6e24f70d7440414d

    SHA512

    7363062a46c07754aa55e32baf5943ba7474ca317e45e9a9e59407db49b83c5d35505581c7782566749d6df935e56981ac0a0d3568327f70d5bcfb1a39930d3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ed4d9944e6eedd5beb21f4bcbb227b6

    SHA1

    cbcd9042b9077a9e5864256a273a50b9c48eba45

    SHA256

    ee806e32b9f3b48a93f99db958eb55427dea6a66fd2746e6c34faa054dffbafa

    SHA512

    1f8ebe5b5d57541cead1fae2a2e0f8ac9aee0af1a41028013a0d40df917b0a90260ab56cb7959c3108ca88a4cc70d892715f5c0f6d91dc8b32bf969028e5f91a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9002eb074c56e6acb291b75186cea3b

    SHA1

    f191fddc601eac561efb8a939697a2fae72c9f58

    SHA256

    0f923c5ea0ce6cd37c6578354a237559c8b3f14354bef9df53d544a1e2465e9c

    SHA512

    6877070b67111f773552ce4c3e2596efd8571b6af04af3316cf482c9c9b1ed5e193b51594f9d8df083c48e5fa514144237c76bc0613276fe571d7e91087ca760

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac9c71759af800f1a9e0e0666f1b739f

    SHA1

    c67a1a070e0227ecbfe6cbba0dd11583b248b205

    SHA256

    fd8c0bf74e71faec09f133cfe025ab514b326aa4d997754f9c422ebd4606f48e

    SHA512

    a4a9c66e7c1c832a5a640c7dfa4fff7555900719dcbbde6d464a86cb3853e103e8f862011f94bf6db4bc6112c4f7eb846d3c538a58390de69bae070b07ed7d4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a4ffc82601106d68d3e517b5ac4419c1

    SHA1

    3f1d771897528229a06635f9b0472f70f1ca897b

    SHA256

    90ff8316795a920c4e8f27ece43310da82ce8a4c4bf896e83031ca9ca351a19f

    SHA512

    e5eb74a538e42a84811a9b47e1563b7e4e5a267fea27eef0a4f5f7e8efe817ea2e9d473f03bc745f21bbda7765b18bbda55441cbb9224afc81de849f5c5efd09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    117d02ccd23cb0dd885854d5b951121e

    SHA1

    fea32695046487362b2b56c5ee927789eb5d72bd

    SHA256

    75d7df2b8de839c6e88133ee8dc3de34a4c15c60568e6e3b2c66135c678cebc6

    SHA512

    5b4686680294ffc52ecf87ed39076a5afc2804db1b84c2ddb79da7f1c8fb1a0cd4d929a59d7a7f8031d59308a51e86bc4415493e2a509237ad17b826100e711b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a37a968d241faa196d4cc471f6b01817

    SHA1

    baa5b8d6657e1dcad664a4bf7f3c4a70d543946c

    SHA256

    6e3dd8e4c5fc4842014f7ea94acaf2f543d139eeb74981c3461879650e4d066f

    SHA512

    4b78af1a361ff493e5c4d539d6d2102b892fc4ae5140cb3bcfa711499b8b9dd47268398c21c7ca56471bc7b0b63625918b1912a659b40c6a7ba5bc79e09fd257

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17f7440a17548addaa11982a9da99bde

    SHA1

    eafe2f4901fd9415d0b8daf0f082295e7e4e3dfe

    SHA256

    0978ccdb566b380d5a070f49e288f37234e206f3e4eb5da8c25ef1e8bf516ef5

    SHA512

    167b84f474f0bf1366969b6e7897c44648c45cbb09c442cea66f847c64d068162330e534435e61f1d5a4c84c39f20b1861eae8fa226e78b864460f47c94eac11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35be20dfa5941e019522930709762cd6

    SHA1

    319ffca5bdf970ef8fe550db8e72032dc969c472

    SHA256

    4c0c18bc85a8e84db5022b84d6fe3a63aa07f7ebacc083b59c26719d350171c4

    SHA512

    02b347b7d3318a1e3e8be9328661496aad58b1436c6284f75342281035e51420ea34b873b4910a8673e9a9052e8ce71cf971dff106688f6eefe2a9ecc658a64d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf04f569d9fce5ce8f830c0f7df8abc4

    SHA1

    7325b557c8e1d35b7ee785882d77319d84649511

    SHA256

    6c2da3ba8d2cd7ebe2c36e9dafe82d29ff8a7f81536d0c87fe22e1fd8b52b036

    SHA512

    ae9c445cd575c0a968c5402e395b5a2524267b0bab0ab6e36cb2452384cf5c0948aa086141138a55ac4d49f22356138ca2e7eef63a560611b412a5e2e51d4d3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    46206e1086b23cd13e8ae812c2bc5962

    SHA1

    bff591747c46a78398e5b9c87b936ac8b3bf8ba8

    SHA256

    7fc39d2885f772300963dc25c01a3d28c7f42c0ba9723eb72f8bf298a403e3f5

    SHA512

    dd64bd0df19275d9ef0b8a18ad3ec3ae9814ff37deafe3885af088a7a910c448e37a2170a465f2c7bba3979a03852f0fd368fbfbd1f9c12a11a318ef0fb14728

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    97b360fd9d6c8a2f8fde4083a89aadc5

    SHA1

    ace5227ac7dc767c79e8c48c341bd936ba5cd2eb

    SHA256

    a3d98a0c907decacc7d6147f68ceba2d63f4ebe87c16be42e60b6e52450aa4ff

    SHA512

    432b68d05b045e2cc0e8f3683f7ad963691c7547ad006f284b4139c43b28e956593ea1b9a74b12bcbeb6429e0586e48a8ef1b3dda22ad142f5ab7ba56c3b1d67

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fddddff468852b4a434c2079025ce1ee

    SHA1

    15404bfcedbef5909f69d40f0100c71a08990bec

    SHA256

    dedb3fdd441ed03ac4cb249d887605af65c6f33cd00276befca6c41700482294

    SHA512

    2a81545f7c1b6cbddcc6ff8c1d1cbab865662b4022225d959d9a41428b7793b3154e25a70ccebaf37e8f0048c590f3dc8692d26e7f23800d5642a2eb3ceb79f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d987c017db2943f2e4b1ba92580b920

    SHA1

    66a46c6d570fefe7746a7ec1a8daf676c50a4c71

    SHA256

    fef4dc112aa55c196979d16c9789ef848bd1c38119b09c6370a09dea6ef10f1d

    SHA512

    abdeb5888b6588a4f419e9bcfc55a343b7a07c67ca02ab18c840b192699a7909a200cfd69e33cf6a38b77865c16480b62392b41dd4d403f996a966a40d1f5d4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea92640d8df7922a210da0559b31f187

    SHA1

    8ceacf5a5c644420db488eebdd85ce0341ac1e2c

    SHA256

    bcf98598bb1028960fbd6da1845a520bc8c47623f6c302f54bc17d42c8b7d0e1

    SHA512

    1b3bd3067e6d515d124b061333b3de4d09deebe631ce68e2a0b17cd2e3c0a0bc5a94120ea0764290b8c20c686f49cb978ea47728819a7cf716f0daadc5367ab2

  • C:\Users\Admin\AppData\Local\Temp\Cab2C13.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2D13.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a