Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 08:01

General

  • Target

    04bb55679bd51f3e44b08549b6482964_JaffaCakes118.html

  • Size

    855B

  • MD5

    04bb55679bd51f3e44b08549b6482964

  • SHA1

    4d11f92cc75c6364bb13131551e2b0f225a1b19b

  • SHA256

    030ca5f524ed0ca589f07d4e91b46f684ba5ea326fe2046426213a6bb5d74927

  • SHA512

    6eb04fb871d2d6238a9ca31ec6925cd90475ba96b9fc48f295056ef32a9963a29aa1ef514fff3cd5856844e825071dba7d1aa6685019496061ded1cb7c1c5465

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\04bb55679bd51f3e44b08549b6482964_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    541f3fabddac69d101a8ebd9fb4856c2

    SHA1

    a4f546bcb7479ec93ff52d8486b8873ffaf65ead

    SHA256

    36de2cc7177719e8432db808881002198a4be0de801f2eefba595939768be198

    SHA512

    bc49c74d9a8b080da7f170a8ef260bead669c196a4931e05f20212fbf7b512ca4cc867b7f5ff2139a9cf85fa9baebb1bf5facc902e14f35e97c0ea7d59f15f1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    85cd06d8eed57b2a7ab01a56fde059e8

    SHA1

    a1d07b5e93e20fb2a270555b990151e6a4552bdb

    SHA256

    80836a6d4e5b143e128b974e6b438f0690abe6c411e4fb49f3ddd945f7779c56

    SHA512

    87d450714ae2d2d128e9b174eeb1490feea9e0d9730d84991d02177ee1362eb94abe53753163d7fb55d4b82c66889854436349d056b4405e077c3fa265e49fc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f97827267032f63690b02b7febd0245

    SHA1

    dc05a6eccd237d6784c151bc0d94e589f7113b78

    SHA256

    527d7b4b963e0bfc7f1c5802e85ab9e2100e78de98ef585c8b9854778e3b4e0b

    SHA512

    e55d66d0e90a88c3dd265173df7c54e4a3549d7a4cacfb35bd644f41e6420ee299408aca13b9247e17f33e4f1e180eee75380895d60f53a7e66eb174057dd271

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69cf5cbe3ad781b636311e0ed03626e2

    SHA1

    b8fdc0774dc8c7b92c5f4d1597ec528b247f9f46

    SHA256

    1e325a5572263f7ff9f17e692cb79e9c80fa2c3906e8b65673625810e8b60429

    SHA512

    88876362f58b8995284d4a11d1b3192b246cdf936c606728f58b0415fa2b310ae6a540f334032e6b047fe4ee5546898f6c04cc3bcc344fb64e254cd2eb29fc81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    201e579b5d0ec5a202fb655a732e595b

    SHA1

    7c17464112fec53238467e753b8b1d5bd9096756

    SHA256

    04afe79744094da9a7d905d5c3ad0bd308911a6b572008edad0e1a1097e68319

    SHA512

    bbb7c0b405284773c503d4b819357b15b162db4dd50f33be264edfd789d9f21dd6c44898ecb403a47e36d28b034f3483ad204def6c5d65a6fe11b72b424855fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2b1e3d9f6d84de02e2b94e60df15d76

    SHA1

    b9ef1be379099799066f677f092a5857ee4e35ed

    SHA256

    8fccf0b95823374c8c8f737619dd0263280e5cd4b7142568d48d6009423ed7c0

    SHA512

    586fc53fd0b5bd62ba837916defaeba9e0421d3d35e74c8496b7edfef9e6b393681f83d4c8a456edf98a9ee8b6ed722c30073343337a3f932313e2e5a261d53a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4bdea58bff4ef2d5cb26929d47d8e1d3

    SHA1

    8faa1d2d86b020b9145106b3605a27d0c9e12e82

    SHA256

    153a8ec252f73c0898828007a940f9189e3deea1e5ed96a52682519025ae4bcb

    SHA512

    564445b7d369cb6255363507d89ae92c4fef57f3e3505a23b49066adbd506e1a92cb0da83a35e1a7241bf81466f5904bd39d32f58ba834bc85dd59ab80c439b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d056bf3f18fc49604f8b647a5242801d

    SHA1

    0d9a4d28e0e9ddc92fdfa64781f98939dc5f09da

    SHA256

    af98e18e8fa6d5f0fd2b27f82f3f2d99f838fa16190a543ca003193f59824d93

    SHA512

    4b79d51ffed9cda24db71419e4eb79cc9e97e0427896ed995d52d00145af492a11e6cfa152c38b0cb48929989bcc25e27b8e97afb7a121196b59a41ea7b8d210

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa0ad74b661586a0a6ec039a6fe69b46

    SHA1

    1e6326dff38ee5662de9f7f97fcf5968dc4a2542

    SHA256

    25e34705b2e0540c97733bc8344695bd4d92a9506483d32175b9b9099c437a90

    SHA512

    a4f5dde5df955a775b7110b994a0f654d1b0c63dabb71fb3a89c74116acd66b2a8a5bfeb44b05a5508c7379df7513bd54f079a54c9f14c483a6d95633b2400df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7b6d163137a052d291d1d04a27856cce

    SHA1

    7820ddec3401ff9390c062aca789e531b4cd0e04

    SHA256

    15862199da233510f7035c1a16ede934d4590fc408252968af8571848be19e4d

    SHA512

    a7072068fd2689dd8700fc901f29f967b0a263554979cd196404cd012a1ff092ce0bdf2b0040a6f25eeee8f02264e1727570626c25343c30ac83f09f9d521187

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b118951227cd5540f5ebe2f6b525942

    SHA1

    9a9fa986367579e889fc7a6478f171de50faa28e

    SHA256

    c99b6c1d618a12de5fa8a54248521113d3ae7a0bbda3152f51cdaff71da24b97

    SHA512

    93163ff69ed6740f3d6fabf1d530bf629f03bf415b94a4785c3b6c60a1e9967f519067c948fa75bccfc3a71b88df9d281045ed4ee80c3dfa2a528eb4c8bc7ca2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4d9e3567e9271219525a2fda23ae07e

    SHA1

    5a7e9f039570ad60f4708179b8e99b34476bdf9d

    SHA256

    8b1e4f3be1f28510c431979bbabccbc3088fb3c2a91daf90c993dbfad5f4c32d

    SHA512

    8c9f32928e3ea15909c9eb448484eb8b9163537eee9b53bdc7b7fdaf4bcef73434257d86d991c5005c80eb545cbae867931e19dede2f8d2ddf71237c5bfae0bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f72e93a58140d24b716aedcfd52a5d4d

    SHA1

    532288b5e91ca5cbc0d5c711706d0f9f2b4e21d7

    SHA256

    fe1adff492f1e8621cd92d97419a3dd16d3acf88a9881098c0a70c6feb2f32bb

    SHA512

    0d7e8b830cdbe90252c02394ab609b1ec942ff7b8dafa9702a367fcfe6606f1efec4563dcc72c04311d628171cab66e12b2948ded6649ee2a1a2039a93b208a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a1fd33e58beeb4761650fc2764aac88

    SHA1

    68db2360a0031c4ca3ebe0694b99b6fc334625bb

    SHA256

    5fc82d7d81568566664e003162a3ef41accb40be057dc3f70d51373e47e86b04

    SHA512

    be5ce4e852d0977c5a02d48d0dd7aa12c83472393da3e637164c49118c9ecfd2584059d1b16bb8cddb49edbac250698a9be1b266f41c285d78ddd399b1e7e800

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c86d92751cabfbd805496618129a60d

    SHA1

    1a7eb45c6da56686080c8be824ee3799411f4660

    SHA256

    956c582cd1427fcc4464d58ee1ebfff3b8df91281443432f7821771dcdbf49cf

    SHA512

    dee2f1a6a50975f662b1d3a88a7f3764556164fef96038d369aeebdf8259d451771d8c31ef21d3cd1620f79e077e211f8ef87d466e76aea26cfa69d79163a125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b4df125fbbe8d79d28d842c51c0556b

    SHA1

    55ca44ab79686aae27f14ea461c9aa0939f08e39

    SHA256

    6d95058053a1107b767e00030718ef1518dc2f1a3e4f1fd8d380a874b1320b68

    SHA512

    ff8044e32f747f820269c721587775f16ca196b3cd7693f0e5c7b5bb49d71bd3db40fa4480d58c114864573d31be5da7aec47fa91874928ba712fd340ae22b43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0381f753d66959ed37ef69808ffa5a6d

    SHA1

    84ab60ecb6627e578f7a03c4ba6612bbaeb2dcb0

    SHA256

    f4442922056f05db813b9d33d8c027a23abc321b9a74963a0f94286518c78d44

    SHA512

    429466a501ae2febb98ebe1b7eca261c757f11522a7ea64f4411b4008e3644d2e77d15a00a1922360d17d0d6abd537d0bcdf31d152b9ff858da973416a43131f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2bcef2328fb20d73ffda4b95219013d

    SHA1

    1b872fc7661e6a72c0c2317be6f89b7a29216b7e

    SHA256

    41aaf2a74b471788577ec4ec854c2885438e823f8c1923c3d0c78d76eacd1061

    SHA512

    2db5ead9c7a3fb3b18f65dfb7f14295d430546f75a57a909fdaaf87999b3796e3bf070baab37c4f68fab31d2ddbb3ec4320486420d82e9658ac7711a1a321b6c

  • C:\Users\Admin\AppData\Local\Temp\Cab2494.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2575.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a