Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 02:26

General

  • Target

    113d8b282a47ae3b567974c2ff783d84_JaffaCakes118.html

  • Size

    2KB

  • MD5

    113d8b282a47ae3b567974c2ff783d84

  • SHA1

    44daf6eee944eeb71f5c62e2d13b0b051f76daa5

  • SHA256

    a7049062fc33512948cffeff7c49f7e3681a0450e8a312a256b7f628f7a6b571

  • SHA512

    1510d8bbe3ef17e04f191eb85bb041229c5a45f38c62ab558463e0721d7f1264b37cff580a8a70327ef45448beb28c03f5150e444ebe72631770877c46aa2e3b

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\113d8b282a47ae3b567974c2ff783d84_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94fded19a786824fbc4e1066cc94a353

    SHA1

    225bbfffb0ba4e52130af93deb77a0d0829f8ed2

    SHA256

    52f535fff8978bbc7a61d1ec3f8c59c4edf53a1e0c51ba2f368857a821afdaa2

    SHA512

    3fd177aac6cbae79bf92cd39408a5474774d7c1d3cce4c9c9f68959b9ad9b39dbb37641f6e9681172f85bcf87396d8f10944a831b9f0fafe91bf5c8c03a05ab9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42e6df0bbda54305f7a0273856e4fb54

    SHA1

    3d8414e85821a2337bd6938fb41adba8c0291b2b

    SHA256

    8843abfc119aeeca1074f9ced52252a11376420a88fda65d0100d073411a4e9f

    SHA512

    953ca163a692fcb56f9f67b3054ed1b5eff26988fc64ad576ba0a3090a8139a317fee1f3f907fd23276deff0db8c5464a9c26d080ddc74cf83991ba9a80ca8e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb75f0eecf1982477dbfb197c52a0f87

    SHA1

    96cc909934966892eabebf2a67ecb2b754bfc488

    SHA256

    0ae153a458c53ab283988d95e2fee3f2d27ab9a65684f4120f0ef8b3e64651ac

    SHA512

    b0058d94776952949c5b013205aa4a5c8b678e47025cb974e97326617066cc622320ba9aff6bb270542eda6901e99ab5bbf53d16405521834a7738f486afd5a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5eb8688e8596b295450705fafa8ca5cb

    SHA1

    9c140064697c5d82a56e7783be649d0a95dc2b9c

    SHA256

    bce8ed007b09b22eb788e154a1772a9bb2bc0a19f110d839e9cd22861e50f883

    SHA512

    8c8afb0ca07a37e2877f86b5a1bf1a727e663227fd9dbf499580f52301291c30dcbf07e8f12038f7fff981cbe895557cc551b0f550b8231fe390c62caacf9227

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f0040c19db04924750827c62f82cec5

    SHA1

    50eb4c5efedb75dc6e62582dd42e10ee55a89789

    SHA256

    dd41017aac3c0598f8ceb0d8404bc370c8b3d231e9b5ef0c824ef6144bdadcf9

    SHA512

    7be627bf27e643d7d5419cfc3a5c27eef8c27d6289ca689a593ea7ff916ab91613fd77a55093768a048e7c07066c9dd85c97eb4ab051e3e9cb8b3ae2969874d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d045d65cd73572414270bb3cd3529798

    SHA1

    ab48b474c82fe3105afe10678b38a76d3924f9e2

    SHA256

    028e94b96f2e1df93b3374a2ab762fe29e669b3d6a99047de529125e61a30f52

    SHA512

    e7ccfbeb75341a967dea3c6b9d310115f93d8ed037d72fe44d210e5f1aabcb9ba01d34cdde03042d232b04253bb57f9f3fc66c4c7559452fc80c29645b465f96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1b1832e368ef719738e45fdb235995b8

    SHA1

    2690e5f8a3825ec222aaa397ee19f09c0021129a

    SHA256

    e3966760f7d859277aed06325e79551bf95ae3ea04defd77c174f2a7be2f1abf

    SHA512

    2becf0b9a3475aa5ac8f32e96649b3caf5ae6b8889fc8d99e99dc326ced8648408e7156a010eed3cff4f8f7b9a066afa416075fdefcadbdee3587130288e7234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d7eb5e435c6739d98cf7327cf3a3cbca

    SHA1

    37a74f9f6c496386557d444160ffe3ba577ce5cd

    SHA256

    3f9bcf49ab37cc0983a6958178d7b25e54affc6552f648fdae3ea711138a737b

    SHA512

    956e6163c5a2b8dd55a0330d779cf861641d80e28ab01528eabf40280b0ee906c4418297866c5b0cdc2ee1902595bf24d92e3f424544c327c357f71932d35648

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73192ab4526f23926d95bbef1f47c6a3

    SHA1

    c7dcf109646bfc2f71744ed51a28a4c34a76930a

    SHA256

    eb52976452bb5a0adb9091692fc192025075273cf02500af097c405d338598bf

    SHA512

    b21124b187e383e97c42ba1c97cf7f6766be6c40a2510a456ecad88f406f3d0ec1e8099f72fa9ab736181aed95541edb02f5fbe7e909b906fa600d3378a3ee77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e1e219dcae1209525bd8509be4e7bad8

    SHA1

    26438bd9d8ea86f7de4a3eaf6612cb67561674f6

    SHA256

    91337a0ad5a0da85b8e8dc223caa783f67a8f8975bb70c5c663f46cb9410f192

    SHA512

    4a1c8d36c1efd38b8dc18fb79543bfa3804092252e85abbba1b890197bd57d8504aea66e4216be1117b07310fac97d878df704c06f173164e65eb0eb1be898e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53cf8542ad495c6cd488819f927474ce

    SHA1

    ed3e335d573868aa89238649985816c15db1e404

    SHA256

    9a67bb38e06c466e8dc91abfa7b766886d8ad5925ede6c4da1ca4ba5abee04ab

    SHA512

    190d2e9293b8b8f47477e228849774658de6f19f72c5eb942f8646caaf02f4bd449a675e605bee1a23dd2a9cf6d0e2eb6c8d030d8592c34f2fb85d5aa845a2d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7bbb2e0ab60174a1c325e94f52612cb0

    SHA1

    06f8ff0fcdbd708bb8772442e2273fbdd1d0ded8

    SHA256

    1b3f2080ec30f983c64f08485dff0bdf7f555c05f07d9d5d9699e3f06ffcf756

    SHA512

    606a6bf906c7b12171527336e1be33ed0dedcc9752081cf72330ff7a26f9d1b43cd7b1d970572c0cefab1fc69e8a2b775fa7874a797bddbe41c6219b8cd4640b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d215b58b39bdc5b33a57725488ffbf2e

    SHA1

    aa1bfd2ccbd47c35f24dc7ccdb61f0eb767982d6

    SHA256

    49388c270e2293a22f4240a58e66879547a6f99fbe0261aa92a18fe9343a997e

    SHA512

    60cb429efcf8b3447f941e85777fa468f89b4b953ad16a45d46135b2b57722d67d690fbc0dd485cfe1631cbdcf805787d719aa0d1df04345ae921acbf68f3cad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4803e82bdf933a09228327c434bc8ef0

    SHA1

    9aff69224116d148c3962af48f811844fa719b3f

    SHA256

    62b57be776c799b3fe990d2ce2992c2f8e48809470dbb89ad83618043b171506

    SHA512

    aa127ce3e3000836b59950df81d92126ec01d45da0d7dc6752855f6e9b33207b092a19c8cb3909ce644fe258afae8adf192eb9d3d9ad3cea6a32644d9b40ba86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f14e8cfd46e9167c8d81edc19619d013

    SHA1

    b9d1220bc40b894fe331d4682087ed7e4810cbdb

    SHA256

    6e60f93d98a5537ede6360882b92fbf7224141d4bfd151467322cc86b34954da

    SHA512

    539fc59fc5b7dd4572f5700c2acb8ebc8c5873055a91cb950792eb94967b58dceafcee717faa67996fb55dbe63a23c98413c529497ead3ad3a5ea4b5a9101ae4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83adcaf7cd0f53ff8a546da555aa6896

    SHA1

    20065f7f535ffa4567591cd23865ed02d65fb8bd

    SHA256

    2e878ea0567ecc28c4bd2df329e7b176b8fa06bc7c653fd18e60a008f2ebd364

    SHA512

    6300019a8e13a9667e6b17a5ff8a01dd32a1b95048c90cbda12a0fd0c0bb16aea80aa480ae307443e1fe80b791279d0f462780505c7161ddb7a7f51215052e96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c02636d45774992785e1649f1b96a93

    SHA1

    d13ae879d0cb2a4e68d36c8991f5dad4c4ddcc40

    SHA256

    954248ac357280da998c3923b15147b1001fefbc4dae97ebbe2728685968f92b

    SHA512

    1ef096137d58922c655bdec5ab5a9502fa0b11f3583b1ffcbccae3da009544fc4a3bc8225c4d2d841a79eaaeb07c3adefef6fe3ebb4c1e93f1117537046a6423

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5da59498680fd0c689c0897d7a93748

    SHA1

    f5d1a1cd5a0594d013431d38cbd01cd5443e7858

    SHA256

    6e5d0fece6d5f6f4f09c6e29e417bd9434c73d5a0cafc8c5f4293136ea51910f

    SHA512

    03257807820aeeca94b975ddb15d900c5b525bb688bba0dfd94af9900697ab9c514243117f2ed20d348c5e14e57074ea6c31b4f699765ff4f80feed3d013879f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f1776b9d50e6dc1bf972ef146fad4dc

    SHA1

    901f22b8dc89ce51eb5e9d3bb42c65bc5c468b73

    SHA256

    b0b93360664e27338e88132fba7b8d22b969695f0e386ca1938e6a3d0ddfa7e2

    SHA512

    4e47996844ab21511bd9cac4b2444ef1e1b337bf0f7c2520a462e2224be1f3e41421e306b29504641907e8b80cb469133018edb7146b3d36a2c3dbc828013090

  • C:\Users\Admin\AppData\Local\Temp\Cab253D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab25FD.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2611.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a