Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27-04-2024 08:13

General

  • Target

    02cdb16f62c35e68fea5600b92b5808c_JaffaCakes118.html

  • Size

    353B

  • MD5

    02cdb16f62c35e68fea5600b92b5808c

  • SHA1

    2af0c0e2e484dadd15a57ce359c952cf2d946691

  • SHA256

    39cfb222b5834a175c9187f2ffa943c02123dbd1ea61cdda3ed8b1dff7977f07

  • SHA512

    74aa87dcc16918b4e55a146e21a3dd24aa4f25edacd916f000176cb0c28a44737cbaa0466cb1fc5b3bac5f3ae88d02a24980dea33e469ed53064404db74a38cc

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\02cdb16f62c35e68fea5600b92b5808c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2880
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2880 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2300

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e16b9c58606fbed89e44b3c91ab3136

    SHA1

    58fc6df4f3e571d44a355f4a90a89ca2bfc72613

    SHA256

    8b3838fbf997fa49736b27de8245bda19c1a2f68b4664b9a9a0b5bc5c20b5a04

    SHA512

    0a659bc099ff23667feae2cf45eb46d70246a2c86cc6e557acadd261422ce79b2de4b9124fa00c9c9d3d61c01d8214f078c910f3e76ddfede335d5f563886fb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2224b23d8866b9d930ff7b5dc517ad5c

    SHA1

    3846da592720e13720db124232af85b0fdc2ba02

    SHA256

    8ca19d2d30cc34d21b1b91a3bdeec72be0b7d775f40dfd50241f6385cfb6af4b

    SHA512

    f614fa6a5638a40535fcc1b89ac47774a1ddcd993a23377d57bb4c0d2d94c21a3e95b9bf8316b112cfee3885e7f9c8da76fbfbec9ac93cd2a8c4138476c178b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0aa835d7ba67f662b28ae946bb2ea8a

    SHA1

    a781d52519f9f8c9598d4c37922697e9d6653758

    SHA256

    8070f8c818d4c8e53503c9a5ffe42a4379bc983cbf4247d4df965fd3e90aca9b

    SHA512

    630fb46cb0522b4ed13de217894b3af1c489d77270f10aaf8d664ce385241cdc2c1bc96247ababcb546b208ac5d4aa63ef9e71aa9a2a9dd3dd81bbf85d9cc176

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8632b5e8a88f3b2dd6a1ee8f98c149ed

    SHA1

    3a2dddd0b2266edbbcf445a786690753b03e4fb5

    SHA256

    2f2ad04e10a645887f409b3d58089fe5bbaf4bdb9bd1f46839e2221667ab28e9

    SHA512

    eb8a4d012b8be1d1ca195f44beb25dc9d133c6c321f2ffcf3655ec64300b3168b9c3f37ede95d1a3c5be992db8faa30f9989902e1d3aba7bf27fc1b91f4f729a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1d25be6116d0071f71ee40bf3cb7851b

    SHA1

    817372b57b7c85638d988e74699bce0ff3be6517

    SHA256

    74bef5efccc37862b4de2bd9dc5d364d01d99614277dd6a155a02200bf410423

    SHA512

    f799f4a404b58bd0678afa59d5d4929c247e9d3390ff36537a367fe374c84800dbbc38e29fb5a412d237366b4bc849baedbc3d5ec661e9d1c61d65156bda862e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5e5526c26f2e875611259f7a6327e1f

    SHA1

    6149104c4dcc7f755896e4028822debbad2c72c4

    SHA256

    f0fcd94faa6f28272051e06ddb2b9d61b4a7f5d7a3021fb17b75195e25f6ee08

    SHA512

    a3ebc2bf9d18e3fc1d635044187fd5627923e2bab11af85189ac9a2e893f37e3f012bc8f2f215dde270dc1a488d0d25a84eb5a40903d41940ca46d7b8baff18b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d8fed83162b1c55c36e3d2961db4aec

    SHA1

    f76e953053179ff602ef00c437e60d30a2786d82

    SHA256

    96ed11151a6c44261cabf3654a519a6d5d92cf8ae5903414bb085597a37b470f

    SHA512

    92a287bb9ebde14835e54aec0140ba98d7310d6657007d2c04a2fb9f90cf970dc8c434517b650d67e440f76a34fe7f3a0407c1d9ec933fa969012f91452c20b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4cd10e09cfd85fcbb2f16dccebfc8d8a

    SHA1

    de45b57de41892fef2d832865134ef388c3340bf

    SHA256

    1ed49bf30e5c3236fcf8d10216f1d0fa54b10e1ce7aa96ec92fa52e3d4e6dbc1

    SHA512

    1ee7ec71bf61fe6d8e13429171df3e28d5070800d5766f3c3c0a8b1b726da54b36ff3a177ff162c66b2028877ac6c4fc136827851fb9338f5381f715503431ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21033748b94d689cc6413d03516197cc

    SHA1

    c2e89a70eb4be8a0fd7773046230181e8db935bd

    SHA256

    37540fa88bda3664f75ad34d085f243be812a168fbae63f6f1303b74bee6ff79

    SHA512

    12f8a8c0d00919e8d213f8db00a02d2032a8f106a32e4f7355e425bd09827e2f6b2e04e8258bbe81472f85bce68571db4663f24acd4a01dab4208ea322d6b916

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f54fe8fe17c31e62b9138cfed7b71320

    SHA1

    a0c3ba7e3b6d277c012977e574abf2a97d3ced78

    SHA256

    e54adb4a5ec814937b05182ed2e73709984387e887df916e8f93b0b79dd15c23

    SHA512

    8a9fdd238b5d1438d26d253f064977346de3cd55279b8e452a4110fd065772a89e0683e19990129a5122142a5fa3c235db522a4945769ea7db7ae786a0d55ac0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fc6e41c078fd728533833137aea0b81

    SHA1

    74c5ad0622a908c8b071285f8d2343bb1223e998

    SHA256

    050a893d1e02147a432d57f65724099556a30749f0fece6a80592f85fafe0a9f

    SHA512

    a804459966cc79173075d8cb3bb819a2c03512e02fd090a56ea49bcdaff9c5c377e79f0466a4df86ed916d14986ed145eeef842dd3b0b279acd629cf63ed255e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fe29cc19f8be1d9cda49c19308d0d43

    SHA1

    c33bc308f8b6516d0223ebf1fd4fc1d7046ce78b

    SHA256

    e11caff2501edeeefb535b11639c08c5bcb2d88d20def4441a97535d887f244e

    SHA512

    f8397dc2b8accec8b89dc8aa5766920a3514c76f2f8f2cef18739e29837deb8872bd598618aa71c9740aaa02d7cccc47fab667c66f29930b440b8a8b9a255df6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5c3fca2f07cccc99da2cf3c38e90b172

    SHA1

    26fab3772561c091c75183ec0d7b7e5c0ede8d07

    SHA256

    243cf0a97dd6528c6ac0163b4e49b8620feecbd1034643a01181370144b55c83

    SHA512

    bcac2d84b60cd12baa6c038fefc28ac7b71a57d214380bd82ca65b4d85f9791c94576c6646d4101f144c2c309e764545021f30ec18deb98bff939642e41e298f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a22c665973ea9fd8a5d9f420eea920e4

    SHA1

    8251bb8ec30df2ccf63080f2ba5cac134a27e535

    SHA256

    3b0f98c36509443b7a8ef362f9b0340723696e2b5c76e725e08e1a7d4b93af69

    SHA512

    a0cd4c4f0daf9bf4fdd2533c6633d10e01edb10f2e22709b86d1480c126c54c4cfabac7b4dcc1e64a4a30cf2c9c7b97e9978f8cb1e5b5c559ac81dca23801105

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07f37c074660ebc1499558a218688bbf

    SHA1

    4f5c5e20a8da1fe34e86a90b486809e9fd0f9713

    SHA256

    c5db784c9f2ebbc8bb114983e0e0304c85db394c5b181289e325a175ecbf1dc0

    SHA512

    016b71cf3218f9415859207820e764b86d46093d5f4554d89b6a54f6abdef68206855350c82342d36384fcf996f3475cf95259453352cac989f42bc578e50639

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78dc27ed94c57dc6c284b5fcac128f95

    SHA1

    5792a90e94314d993399f27e4bf31d95599569bd

    SHA256

    2f4735fcb503357d9e4201939db1a19570d8c529bec48d83b16c54e7f7cda20a

    SHA512

    71baac02730b3a342126cf03913f63974676c732db1e7149eb4e69416d6fdc5ec7fbe1cd7e8d214771755a44dcd1004193d2517ee0d29ffc26a27e37ce1826a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8346994d4ec9aeebb80f80fece2e0e1b

    SHA1

    595fec2d045fa8911474e20eb5b0d8fef5638774

    SHA256

    29f49815e417296a410f2af0135117b640ad56d1c5ab60dc62e3a10754e58910

    SHA512

    7b7ed1a8195db77c1605d2c9ccb761c6a10a47beba36497b6f71d4e454dd14dcba9d04adaf76f0abd63588a6a7f5c20fdd1f1a72ed2be88ab99b8c82197aa130

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fc7818bb63fef472b52426dfcdac898

    SHA1

    c0491fc32c75b12a25558524e07ef8cdb7aafc97

    SHA256

    8e54f0ade64ad198389aa4f9b946097fa4431e42662e3c6d1895dadb57bf3f7f

    SHA512

    87c9a989a43399c95504b9ca73deaf7ac8f2c924108dee3e7da83bda5af398c15141da00726382a060d324712f42e333d149e6b3c5a57368739bb3bcef766003

  • C:\Users\Admin\AppData\Local\Temp\Cab2993.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2A55.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a