Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04-05-2024 23:44

General

  • Target

    1502f5fe7b22038f36c20a08c94d4a28_JaffaCakes118.html

  • Size

    3KB

  • MD5

    1502f5fe7b22038f36c20a08c94d4a28

  • SHA1

    ba0c4ab0590e17960ece14c3121035fccff8ee34

  • SHA256

    ba03f24378803b9b64ba05fd122790263096f926b0364f036df86ede57ef8208

  • SHA512

    11666d67902963e8df3bdabbafb10ddbe4530c6395df073f918fde728d22af42ac0eb56576db1bffeb440849ce2c6c6836d161e8ea48bc2354d607a9ee7dd6e5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1502f5fe7b22038f36c20a08c94d4a28_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    52e343d2c008b8e9fb662f227de3e65f

    SHA1

    64665740986e243e0ca388d0ce22fa4045ea28f7

    SHA256

    ee300c8085da1745b3483b334ca928b260b02137beb66ea846c9f8c7a43952c1

    SHA512

    36ab16319895c9c43b23107c055af67c3725f117d884faed16ce985426c9d52e57a95f0db8d4ed741257111a82231390ab307adf10f209c7d68ff79d9bf67479

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    442085e2fe3c35d9a9a622f98aae4ee5

    SHA1

    71c7abc653b3c39ddb9bd46506fba35a9d5cd353

    SHA256

    f330ddeacbc689f9b9342d4f395121d374fc55efb9400d6a22d4ff3511241ba1

    SHA512

    157fc2e7486ae8f7f8a2eb54cd4d67535d2c9d376485ad1c0b88e1e7b7b54484e45d17ebb11fcce56f2417d87ee7a8a5bc8aa26dc0a0c35a8d4e7244c2d5e366

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbc3c63d1f89ae3e61f8bdf90b34320c

    SHA1

    e38867a4b1fa7570c9b5da7a25ed7930e23ec213

    SHA256

    957d59b23870692eaf50296fa73172c3da28677595f7ed74801fbef54c0e6845

    SHA512

    49d9ac92ffcc3a7815ffcc632901ac58244ed116f581b876c78c0d33854d8e85f3707e3a9c97d45d3a7a0675341cde066e3fe9db0cb6b0a401a97edc7928455f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e98bcaa6880b8dd1c483e32d51e33fac

    SHA1

    482ae2822b739821126f5b30f259bc4b50c83dd4

    SHA256

    64ca92a98368b15ae6e1e22dfb07c7309bc219a460b74b44e9e1f496179747bd

    SHA512

    c14291762ce16509a44809c63842f7de798a321e7c08cce2eb8bf0288bd525acca21d2545f7863a14725c6defd2b5e206bb8c9f60341991f66b746be4b85a50f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2939edc2d4eb9511874acd199b75d7e

    SHA1

    05fbc41a6267c3634b3598dbfc31a017653d96bb

    SHA256

    2a5c7c12d2071f8d9a8003dad56d76935d448a06cbf7552c91f95b49421802c7

    SHA512

    73e048acf6136d593aa8639656b9a5871a7581ef9cd4b77b52f7b2ef0b44ea6c2cd45d0510015140e08c3bda409d3b91e159ef806369162b93a372720ad48858

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bcc27a7b914d0217701e61d8059b6357

    SHA1

    fa29680852087c2053a23e35b3159eb7f4cc79ea

    SHA256

    215a8af22b91278fcb6a02aa75aabbe4d0517627e4e3f25f51dc7b4db4931b7b

    SHA512

    c35899d01bca4910f5c7aecf7cbdaa58052eee29cbec428b513b148b31e3dbdd5d3c51292a24b889c7cb8a2847fdf73613ae91889a2b969888d79cc0b15c1a0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1db9b4acf53f7ff47b45f2b97e10aea0

    SHA1

    f8a734ca8aaadbdd88f66a0a6738eefac4827a4b

    SHA256

    63a9184ef358cb1ee7d637bcfb4d63c777e370776f048709cfcf169bc25caaaa

    SHA512

    f3c094192ba1807ca6d6ae3e75e34c6987bed961915ad4e5d4eda3c7d1ad7bfb8f4b3f4f5457a2b4dcfedc986501d58771067fd3c20bcf41152129e07eb96766

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cea1cb5dbc9e98074f76a770a232502f

    SHA1

    521fc006b0620275bfd800fbfbbda46e96f7a3de

    SHA256

    79f0c66f9299d9fb8bb99e1ffe9efb31a894d8375b1cf653f4856de55184282c

    SHA512

    8ee16ed22a28f3f9dd1f21daf58bbe0904d2c5d77c776d4648111309eef86d5ed2777e37811bf5a1e569768a59ac7a27ff89a6bca8b226cf57b0f865fba4bd07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9980245561f173c4655daf256d3575fc

    SHA1

    28cedeea8515831fea123b9f2de685f8a0218bd4

    SHA256

    8668f9f28b90efbb9ff67ac7a5f767fa5ba46f429f79c037bba2dc0951dc841f

    SHA512

    8ca96e38f6904017c7664f9fa1abae8c76c4109bea59ef80070f38a72c1af06b935c03137a60f6c61a897948c310e3c809c9bb99d86c9947f5b071914df3baac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac59162cef1df1d4787dda385a5879bf

    SHA1

    dde095b9a7d8c1ac96263d4df537271177ae8a61

    SHA256

    a4ade8eccfc6cfa7d2f718f656ddc68a7b043aea8b9fdf26628a3a253cdfd4b7

    SHA512

    e2b72dec98e9f1d2c99a0a1e2931dafc9b855d32cc7afb23cb82f25c4b5fc2a2e15b5ada6b9b72e278fae2101be952f5b3840413590b46b2e2e7f08e549c982b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee067d30c3ce08f80c17f98174f1e9ef

    SHA1

    7ce24a2255ae70464fc00592d764b65d223b77ee

    SHA256

    c0801b681f22c445ddcdfbb3e8d4f48381cb59c55839e51d1061d2fb405dee4c

    SHA512

    cc5612bd3f8b8603f840fd117edbdb5225ee6823445fe6f2aa112ec9585cc3eebe7c639b3998cdb4bfcab6d853b477e6068e840dfbe0ad6aecf6383ec4327e6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ddabacdf2da8d2b96c998f6f47ba4ba

    SHA1

    c5ae75f9587638b9fe75f42b878e4b5060f22fd1

    SHA256

    5119d3f77ba6dce355776918464cfbd4145b39d909120e33d50840db2a0b48f2

    SHA512

    8ef725851d96f3b4095440d79798980e16fb937a379720d1c04b24339da6b3c3c779ebf278d54ab2172cfb161c5f32342ce5ff80af88534b8301ff19381eb7e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b2d88ee709d0630f0ea506aeffda758

    SHA1

    15434333fd286da6c2cdb8bef066494c94bb96b9

    SHA256

    f19023514fc41738547604a5c05fef6e0bb485d1e5a7eb9e1e69bada87b1632c

    SHA512

    b49f2285de21e0c50d7be070db85ed374d4a109a5eda8e035bae6503b19cd9a0bc916992d1af4e0c38b4a3aeaf1a4c992def24f6cf5d9d10ffb9d724b8c6f3db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84d50b78ccade06b20aa7951b4305157

    SHA1

    8730ced2399d4768f326ed5790642ec60e1c512c

    SHA256

    7ddc6c02b038a0babdd595114297b4e83c035d552aa6cc37d1b8ba2efc9dc47a

    SHA512

    0b258da8e3b381eed2562a4d5eea719cbfce7234dc0ea61b2a651762cb7856d954065a85a0994f29a485b2a18f711d5b98239e0a36bd3edf9bc4b2c247407eda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa65db543a000f3ce39931da08e554b1

    SHA1

    99e88c64d10346f3580e531b51e8dec91846ffb6

    SHA256

    f3a132103e8adc6a0480b3ddf0ad4ee1c50a3ab1b32bc21f03386b29cf364854

    SHA512

    81309e288f1925b45b8074d33cbb7ca248992e409f6385776e02f8682a6c79efa6513033b9816fdf051390341c057d7380abe87de44c2151ef8259a68b04fa60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c5bca18cf34dc44f64f921d6545c4ae

    SHA1

    69081d8e39cef595b3a1dfb16af539dcc665e2a7

    SHA256

    c8d9ce2cda8a01857d25f2f791366d80d6781947e1d44c0ebac1ffe01ecc5ad9

    SHA512

    d6a4ca1076cd7d859d8a7385f926ed710d7fee7545d3de0aaf8d7d2e1c710155783a6ec7487fa457ef6326f191f10995dd9a4320b822e2599897430324eb2043

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ddb7b280a46c77da29bc3a52e4cac7f9

    SHA1

    19770a0da300efb3b6326d1954aeb07dfe6dc8da

    SHA256

    02715e4debe257526498a2abd1bcdb3c9477593ca72e653301b47a0d8ea27fcc

    SHA512

    f907679cd8e9c85f2c9f3c7cb4c0e036d3f1aa8f77f09aa2811344cecab8512e490d27ab8a3b6ae45c590827e94ac96e77fe9b687775db012df63782b68408e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68b6d1ec9552228a8fe3b3162af948ba

    SHA1

    4b859bdb3a3e4b97e13bde0fd064a11142c7e1e2

    SHA256

    2d44d3adbcd9fb93f9b32c201ee1afa18c12ddf77e327334b008d6fd0d782d5c

    SHA512

    7132929c7c104dd549192579a4f942ff919ca2eb6e80745ab6bee8fbe0346f14ccf934226398b666dbce39dbc59b812f087a3f9c2bed3443d04c9605049de7e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    914ab74c72d7ef1101637db1d5f0e532

    SHA1

    7f206a841c551fcb8fe303e2c5174b2ecf6291fc

    SHA256

    9a5a2d63cb914ae6281578f702d8c327b8949288928400d3fc4ed8a68245e66b

    SHA512

    0d45459cf67ad22f687217a867fc21e898ad07b524ac22b7859b2a11b6e7763328eae030e5c8899e1428535eb280e0c9606f328116e74dedd38b86594d61ea62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01ac9b3949dfece0b7b71a31a0573c77

    SHA1

    f2cc83fb3b53a67a29e9032c3fac2f89c0cb37d4

    SHA256

    28e50f9329113f884e45ae3370edf1c39f29d3115ba750feec4d1de448cd3f65

    SHA512

    aa569dbf256d26c92fd3cc00a5199da13e42b4458337f32fbc17abc086272b2ece7ed43cbb72bb33af4b71454ed09a1ecd83cdeb51ac57445c9d03dcfb5da8d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8db6616a250953b51fabbbaa9347415c

    SHA1

    7a1668cab4fb11176e33816d8593cba5ffc04dcf

    SHA256

    bc8ea3948bfc3517774f466a033f82d8d16c8806d95b90a4201bdfb70a98d01f

    SHA512

    13170462b936cddfae3a283092e2c98583f3531d466a9789605940d767102450a3228ee7e7c534ef71b346b6a02077440b1dadcebcda7b1932687c7acdec9f30

  • C:\Users\Admin\AppData\Local\Temp\Cab41D4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar42B5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a