Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    05-05-2024 12:35

General

  • Target

    17b1222e12c56f44ef988e8a443c5434_JaffaCakes118.html

  • Size

    1KB

  • MD5

    17b1222e12c56f44ef988e8a443c5434

  • SHA1

    f3775fc60d7de0f3e010e4adf52fe437bebf0dac

  • SHA256

    1703e0f8d0c487473f7c81004b07ed9feff8997a4ee447c41fb9701543cc855a

  • SHA512

    0d8bc60f09a5ebb44d1c52f1e7873ab40914337a461dac9b5377c7ad2844f71f7279b36c9cfa558aa837abe0751ea120c7bd074448afa3c85b2d479d23680d3c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\17b1222e12c56f44ef988e8a443c5434_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3012

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9526808d3221e21745a4a02a33e8d21

    SHA1

    9a3e62b5a4f06ba9c58cf89f3819559df22998fc

    SHA256

    61577cabe0ddc77388cd039e84f44d3df9fd77820ca2b04671b14736f1ac78dd

    SHA512

    564ebc49e53ca9f652ce4cbc1fd426c614efe363b0787308c89617c6f1da75f654b22242a38ae8e2cad71d43d466101c29f6fae129449fb24d4111371aa17740

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    132f13c0950c27429707620f4911b44e

    SHA1

    3935fdfb9472dad738af32e194e9324c632f0b58

    SHA256

    ed5137a66499e93ffa06baf45322e33d9bb0b156b35c1f283a904732d72108d5

    SHA512

    883ad88b0964e3e0c778aa087b292c302d179774fbfeedaf28ce9c45bf36bd58e93c3ec3a4cc65874b0b089ab2a3508a1a2a136c57a911e3fb8e2998a7f5b942

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c10c08c3673f538a6e175f60972e418

    SHA1

    ab98a1e9b9cc6d31b2e7077bd82a57e023acf6a9

    SHA256

    54f8750a027c41f856f0b15c6d3051e8806b4b1fb0054340bdbe8cdb5f7d035c

    SHA512

    f006895fdc088ab2fce79fc87f1474cc806b0783644bd9c83747e4ae7f2a3600105cc6461943bb3d567d69ced16c1c9cac63ec9c1d4ee9c85e8504ea4d8a9cc2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc29e7bab9a9a0c00efbc3f17befa0c4

    SHA1

    d81243155120f559851d657f9cc95f2afc98b6ee

    SHA256

    9a32d21e674a98c5a38b122ee1cb357671f2ad7781f7fd1bd317be6cf5ded36c

    SHA512

    a6a358c16fedd00196ff0d0f925637d8bba53adea5a3f78be8569a8f5fe8915df9abc306b93e1c40eac4f9935e571beb60dc0e57cd065c438eea2571984430a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09ca6753656737d18de044a2158f749e

    SHA1

    a3a94f254802836ac442c187b61d9c49b076402c

    SHA256

    888933e4bfd90d2a277a591a91bd598f3fcb8d359b38972ba4ae7b228eee8b1f

    SHA512

    6c6f1e42aa7381f2d2f46d79f20d9b507ef12a17296da658fac1c9352d611c86d64683b0826bf2ddf66c37fc76dced13ec38b0c0dba6270892fa0036296ef70c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    791575b489984fc644a0f99eb15fe843

    SHA1

    9f5c06cd3311c224bed65365bc25a4660b70e39a

    SHA256

    2d83bc9dcb029f4fa27696b9c9de6e09c180b7f200f6778b8de2920f5177c6a8

    SHA512

    9c9180e0c2849514701ed4de068e2c697b515a2aaffb64bb5d3924549acb8f5d5c987c3e4a9dfc36f8cbf823b79676ae4a3aa249acc22ddf9fe44e551f636aa4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebd04091378e8552d41ef97413b04d0c

    SHA1

    8adca0d3dbaacb1326884d7510861ecdfb95bc38

    SHA256

    c2ad6c956a10a9658379fa00d5ca191bad3dcad2d77c02a1964a997b1c2f78b3

    SHA512

    43029ca53abd38c27877a590605ac8e127bf28c6da730a1c1c8cf7f4976de073c3d36f7ac4b243cc73889ae7be8b98f219fea82a8bf2cfed5528618d4caa8c8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d08c229bdb6491b9f0a80eaafbc8dbe3

    SHA1

    179321afc7b1d67d6189118cb36cf653d7bb6044

    SHA256

    24b130b2636a89a1ec85c4c04c9db29759ec12c68b4dbc3127747bc8d9be58ff

    SHA512

    3fd22b57966affa9092b245cc5405e4d8d16e67a9a7d38de9844d6a8a925a33d54b550a381c75f6b3e3537842f353e6dc16ab0b3a29dd12818555d561ae365f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ab570dd5e96f0da743402235bcde2a8f

    SHA1

    ca0296cd7e6461ab2c94bb56ffced3a1b1e7ccb1

    SHA256

    59b4b92ad9f7cb56aa1df16b73eaa9c2a540cca4280060702ffc330a86894551

    SHA512

    bc687f6d827fb38cf36790e62de0dc4eb12ab7cf9acecaa994aa809f4c1874ab6dada9c2b49e58a1c6cb48046157e5bbfe62abda6b7eddd6dff84c95e3de959c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6680c0bad4b8b910ad99d121ecc898c6

    SHA1

    e1c2297a8007188c017a35f514df291099f3859b

    SHA256

    2f6c293be623142df25e8801d9505521898281b57bdd6065ae79f8ad734852e5

    SHA512

    07c6bd02cd76ce79ba455d4f28409677a364371b599d6df777793384f479a2371439dfd827515984a16ec1247a7d20e02e35fe67e0c0198da33013b3b105fea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f725798dbb202af402271850e9ae49b1

    SHA1

    6d3751df4ef90f16c72016692b6f552013d420fd

    SHA256

    620dbe247fe85fe159f3c71db5986c96030f7a9cdaaa9be4e2d90d0e30b535a6

    SHA512

    cf04d637e421c835192c75c22363b7740ed88964b1f4e8e62a7dbbd746bbc80379632b3aacc4afc361cfe756f7c66db8d046f05da9d1b97bf05b8e454dbd97e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0c21bd577981e872fcd9dc8042d9f4d

    SHA1

    54a38ee14a6c9e0c48688688314c1c38be34adda

    SHA256

    9892538d61e6ab674d065452b975a4eb13ae09f5e15341cfd650c7cf6341d8ff

    SHA512

    dfca79c43f324c69d7da4d7992e33f68a1336eae475c45ad7b6935225ee4041f3bbd91922ebed3634a50a4f79c9ea5bdc6b9918486110af1ccddf48d65171ccb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25e2f291286e90aaf896d0fe9db927de

    SHA1

    409a069519847863ae6c0682563366d7b367ca2d

    SHA256

    53f735bfb671ce70fc77dfb9586536550d3d811c9eaabd8d0c5638fbb4e1f00c

    SHA512

    006d3a727e5b3b324b37c2d5bf19a70e786feca5b133c9387f38c3c213e3b6aa41785c1f8d8b971fad49756da4355c8a8b35711ea334dce9333973cdf18e8159

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad15f4fda40d8196c880dac245f0cc10

    SHA1

    4654d49e7260669a6e83786c7fc1e488e78a520b

    SHA256

    dd9ad07667d0fafbe046e006c2fce3733290f37d1bdda6e3fe8d86e99fefcd55

    SHA512

    93f16b96c84336e9471752e1f9f986a61a1dfe3094a3ef6b022b4cea3d4eb007b62c644df6fe73f0bc234780a0eccf558098b5c1d4c90bad8afbd66661684206

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f934afc45f286564045ba694a8dba1f0

    SHA1

    a2fd9b6b9e6b875e5214bc4ff0abe2a8f686fea3

    SHA256

    ef978b2727771c6f6cc82aabd22134ee0407f6a35591a12f9f30423ac52987ca

    SHA512

    143cef3557954dccaa3299d2353d6b57647de92bcf8d7dcc150c67baf5960fee296c7c9c8e77f12ea439e2f67b532e3976026e641b5bed2c40fca3383846e044

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2d5e724723a8157600fe921bdfe73b3

    SHA1

    cd68bfd56b5dd29b67ac3234776f9f20e180c0a5

    SHA256

    1281127854d006b2faa75939b937c37ebcf8c6869df910adfe3e202309ca65d9

    SHA512

    f3912cc9c60656f826d118ea242a98b5d6c07d432c9af86f78d4b83e0fa5d0d42685fda368623eb86ba09516ea4cb12c1206f273da6ca0d69d8e7f96351febdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0328077a59ff875877e564d97145a8d3

    SHA1

    8e516c8786f0313326e98927306eae4c886d2644

    SHA256

    ff41ed66c4938fe8bfe156e31cc1e85d5fe862c7c194915551b531cae39ff68e

    SHA512

    61578793121107d2ccae7d4c239d9bcc9c8340a36fe31edf971be1aee476b51943a04143d319e5a0c368d8b11a51f110c09a98f290071d2046634e04afef2b0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89bb15a48bb3c96942bdcc7c078d90dc

    SHA1

    43bd30b1cd59d3d7a50e4d355f2519a027ef066c

    SHA256

    f670b67e461df49abb68301dbb75fe5129ebbc95fb05684b06f34b540f762fb7

    SHA512

    6b5a3239ce5b74bf2cf499806ed3bbe196b9626de24f0f31f4fa3109686c5e4d8804c19eaeeefb4fbe25b3bc2af81e334997b1c287b369b4248a8c42aca8350e

  • C:\Users\Admin\AppData\Local\Temp\Cab2F0D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar308C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a