Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 10:38

General

  • Target

    12599ec56b1d33dd2b44b8e66f497523_JaffaCakes118.html

  • Size

    3KB

  • MD5

    12599ec56b1d33dd2b44b8e66f497523

  • SHA1

    1ae0f4fb34f58c10e5a3a827f675eca3f4937fb6

  • SHA256

    3fe53f74552a5b92ccecad06253ee45451425215454f848b269ce2a0978aa0b7

  • SHA512

    a0f6952761b59d8c1e5ce7b4cb1ae92399d0085b3df94a981102b676f7e94c7fb86a2b5fc694deb034e2f75536ba29fa83fdd538a1821fea250b0f3217326fba

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\12599ec56b1d33dd2b44b8e66f497523_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1940

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    6004259f0dd4bcfe9d0e37c823608df6

    SHA1

    5147effd68096837343686858d61c99e3c788b78

    SHA256

    b546fc8ee6a47ea55e6318d78df2ccdb6837bc6af6fdbb4b0063fcecb5fc5d26

    SHA512

    3428bd3cb19b3d43b4ad79dad1ed8357e9ca770d58091931174cb58bd857f3792620523c9ba9acfe8cf8fc2123296154a660622948ee3a708c08cc715595b594

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8215efb3963ffbd4eadfa4dfa7501e37

    SHA1

    18e2a27a7a9eb7d69c896db1da13f63d1ba35c8c

    SHA256

    9dd0cb4415118c14a66bcde39a281ef903e1ea39b357b2196d80178de3ea1b11

    SHA512

    3cbd420ec8134b4ef866a84640a8dcd919f38d3e6f7bcac25d26b5af8e522d068c5947c6deb82fc6a52fa59e30c9c78c8e7f4846f144246db2be7b0453fdd355

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    898722c640f2a7b76d7ba582a950aedb

    SHA1

    3da857feb83dc7448db84f31d0fb0a2ade424c0e

    SHA256

    a25cb7ef08150ac99fcb46ddbaf6d9a237dcf0d9aaca8d38648880f9c0cc3219

    SHA512

    1e0cd1c1df618a38f621076a0e90e9ba27c6a6d538a2bd665f89a4f1fe3fb77e671a3d1d557446dd86a08591ec46a22bffdf9cf6bb9382df0388f3741c12dbe6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e17e470563afdcfafdb54f38814812b2

    SHA1

    c46fce99021c3188bdb6c81c5d207bcbba5dfadd

    SHA256

    920efc437eeafd131331084273cb4708906f85ff9b3e19d6c3630334ffb79e2d

    SHA512

    320d3a2a7e4614383d59b91a86dd6136364b45aa7b5009855103381ec58fd683d0239bff19768c43533a43aa1fee5a53796ce73790dbae4dcbb33feafa597d35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a21b61f1035c0bb14b05712a1e529960

    SHA1

    f88708ed5d322dd8625155350d2b68141e41b0db

    SHA256

    3a4615f35c42fa037bfe0d35b74f6efda0ee9187c68b0c2045bbf4de59b25d7f

    SHA512

    304136fd6f7d1db7cc89a3258af1c411e274d292ac4ae2c9abb121c7ecb21bb384743b9bbfec77767315e703bc31dd9bdfc21ae305d613bee7c70f1c924005fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53bde4578fe98382d66bfaf5d229c0ed

    SHA1

    ec3bf20729538d14a59b5e4dc6fb0b0fd41ed3a8

    SHA256

    9e7bd23f270167997d5dd6eff94596b104ede3db778303c1a99380ac83a778db

    SHA512

    9d17143cba13377b7d9b6f8a6cc0e2d75dfc0e27f009a8eaa86ee1db6f7685845e8e5b3e8c9a3b5f5f3211a0e401da3fe31a650ef5e5d36f4a90d0eeb0d2b6de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50a3b24e1ba351df21bef760db3a770e

    SHA1

    4ddc29f97362c73df9ec5efe80bd6cf0b34f3ccc

    SHA256

    55bb214ea109c7827bad3d305e2ea4653d7b7262dae2a17e713fa595e41410bf

    SHA512

    5ce46d4099ea9b19b0b76774f32068453e6d31f4cb31a2a93318e2547309ce323d361701b01ddf91e9db5650cb29fffeb630c91a60f6f752618ed38d211d6938

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    21a9403318d4370242b367287d2d4a6e

    SHA1

    62b9b00518d76863f309f3aa5b89983ec0a6243e

    SHA256

    7060c6825fa36e6385bd4ce8f93ad1aed598d937e6145af1685815c297191722

    SHA512

    7909cc7178a6ea28f0f6ee20dd4f790c686a47bbfb13b37390cd2b0c82406900663aa05d2f263d4e52a29e938fd84f248413f219362dd6ee22e123daa13a4679

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02813f1186661cf70bea3b4f14b8d016

    SHA1

    2b6de315cfd8a189feb5ee4aab7c17b9dc313872

    SHA256

    227788b1a5f6a171e47a378ac20467c6b5864f225cf045fd7db87e0f18bb23e7

    SHA512

    ff5c07bb65b196ea68514505218ecec3c4dcbd37b78ba9e064fc5c96809c4fbe926ce81fb6a25a3b96758b3ad3141b80837e93dbf02f030213518e1ad0c55414

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65edd1e193cba5f634da063affeb6b12

    SHA1

    3774d51a049e2e94030a5bd8be3752d459dcc697

    SHA256

    8e44649b15855f355708c8b42340ecdb8a3a37c920b404a3f7b9f61cf82be2c9

    SHA512

    a4e775eb5843b8df76a8382b5644fabd399797a5226a7383363c47b2ad283247f83d78444cb7b4e77aa1d79fc82a73cd4e0e7d31dbefd35b4b154b9219fa69ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a99c1dc8905c918159d3cd3e54bf635

    SHA1

    8d44476392d20d146dfd47675ae37908dcc925d4

    SHA256

    3fa657560478490d087c63d93ef232ad145a1bf112ebd82acb95b7b34a8713e3

    SHA512

    9b85f52273c2b545b528489673e6ed5cf50b55c9204717948a34fb01c4fa862ec02ffc5ea309df3cd04f52d01bcc27c218e7bf2a4c6f27545594065f3f189e2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fcc73b312449da738e6e4eda8081bd3b

    SHA1

    a72879f9ffaababb46aa3180d30067680824e900

    SHA256

    39e738b672bc4873285bac251f316b38e7dc5a22a9009bc1bef5580eb1ec1514

    SHA512

    90aa7208d07b7460c1355031bcf4e115151ef608f7fb130ee94be76b0ed78081479c487f30964b4dbf5efa7a2e9cdf3ac11e064d70f0abf3303d65294bc11d5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fbce5e10fe6dcb51388acaf48aa68744

    SHA1

    057b026cf755d46d26b1fb5cf3594350035360f3

    SHA256

    7ec630c49319f4f0e6666000d13d540c90ef14f20a4a8601a41f3bcf8e9e1b67

    SHA512

    869c33a0447ce2e491aa19a6e2079c6298f7ffe50535b28ce13962eee8d1b65877ab62df990d96297308c63111958cef9b3be00ca6ac1a99f81f4ebff76d54f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    140535959da1d859aac706414f0eb967

    SHA1

    31048669c5e2c196c29bdb5cad6b38857d8fc902

    SHA256

    668002d4bb1253a7cec8d6a25fb6b833d8c404eba707cfb6a70961c4aa1fcf44

    SHA512

    845b36fa3890a9cb5786a6dbce12128fe597f1fd49bc2e22549f481864f63243797d7f38935b812c7bb9b3ac7f15f0671305cc480e3063e09b17d9bd59bf5e8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c21d383cf151aaa4baae06c3697ae774

    SHA1

    8fa2b100785da9033228f0b3a9f47229e67106ba

    SHA256

    c90de43aa2917f77d2b3a49823980f388ca4231ec9289e85f27ae53c967a8a21

    SHA512

    6376858b705025ec5b5a940d5ba2ff9a6dc8c3f563c460f6ac10b82eaec69faad2bb07d48372cab35bde8f025d6c63c2f9455caf318e6b0d4be0badd69a39cde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ca690b74b3dd348db063f8307831a412

    SHA1

    7cdc138729ab5dde81e2617ad8fb50a82088b015

    SHA256

    f684fbc3e28d00ffaa2c159c6bb0e7732fbc8c0c80b9e67f488c3274ff754413

    SHA512

    8f892569766ebaf46c94d0dc4bd46aaba362a4d9f3c7fed9eb6a103e2a0e6b7628a043dd02c4e33548abb18855c3d7385d8eda2b775facfa641701d63fa2ea13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    274195ea7dc214b67e30c123a19b3adf

    SHA1

    62f81f05acf2a9f3d7b2c05b55c38602f9c92fe6

    SHA256

    e9a1a416b506bb8f476870313146d19447cee3b650ebe1860182fd39a7bda803

    SHA512

    53a3beb83fb9fac0ecadcde1f57d12712e83a48c9070e68ff2f56a1982e00ee5f1a1e76abc911b192a07dd63b1d600cf289e18ee90c55421b5a763b21711fe4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    746f59266c6ac20280d1f91151bfc90a

    SHA1

    a2670600e00e8cb9a13c6e28c60bd3a770260f1a

    SHA256

    2db80c5dadc0df9a07a6e0fdf203f2d20a4b91fe2fdf1f02965fa270f185e7cd

    SHA512

    8a48e5d9acdf8a92f6faa506f7a876380c6b5259072a12a46a23a1227f3fdc4112fbf3b7db8697b74b10a637f92b7e8e63ec91a1c90cdb1ef832d959b1bfd7cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    664b6b9ee91b7923af9d24268c1549f9

    SHA1

    33267523a54f54dc9234a859b0b4e7d183f08537

    SHA256

    31a5958de41dbde7fd39cb059887cbd9928200e246c10f3c6a96a3f153d681b8

    SHA512

    a6c1ae5fc1f1c393eb296b7b3e4fc515e427ae1c111bd9affc8900bfe98f825dd6f9a5c1341f6717dc895eb382b377cb2b0bec1231deed76f50a429c25133e10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Tar2C54.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a