Analysis

  • max time kernel
    133s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 01:12

General

  • Target

    2c9d9b6e2167e5f5f49dcb9359a74210_JaffaCakes118.html

  • Size

    916B

  • MD5

    2c9d9b6e2167e5f5f49dcb9359a74210

  • SHA1

    cbbb828d8f40d13868e97a584df47a299859c6da

  • SHA256

    10a600e21c2f4bc279772b1dfce956d7a3aaab4da874d544301edc85c51137ec

  • SHA512

    e095304c2d833d58bf0ec46f7683259357365cb6c9f7c8ca8e7426cb67c6aafc1f34cb58942a5c363c429f00e336d4efadea0b4de5064d74a363b231fdf6e675

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c9d9b6e2167e5f5f49dcb9359a74210_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2288

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26572f8d4bf65c8f380e4ea1b60e2eb3

    SHA1

    2d9b997dfb846a83b5811940fcad8b4a9cc459fa

    SHA256

    e53719c24309a45a1b71953157425ce17c52f457cbb0dfd6f9da031f5aeb379c

    SHA512

    d4b1bf2df538f0671e0c3a1a30b72bfc571392c68b825f78020ee5c867b1485b6c7fdc1f96bcdf6356f70fe9728e7d48819c6cb93f68f45e2c9f9e5bc025998d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a7c3ce15376149af8bd699c4ff7429ef

    SHA1

    65adebf1ff20534fb1bd4680531843ee205f5138

    SHA256

    744a2089f83428474251e5d97ad7f3b39ee86e3f6cef002e5a8f22ba4d412b56

    SHA512

    e9f11dd75ef1bf1341b8c2f409797a555cf5384ab346eb27385256e861404fd2da5856638d1edbe3d46ca61aa1b29980ebc2b0cf42e34ced109d31da837d568e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd6571d5ddc53768e291d201b9a255b8

    SHA1

    13f577ced0f4b55a91c3c38b9d18a1519e579eb8

    SHA256

    2f0df1a198afdd1fc6abc24d56284a06ce34624cfe3f60e7062aa0400a214c2c

    SHA512

    ee1ed25ef82b144bdefcc09bd89e6bf2d201291ea55a22fd2614c048d2f63b891db5a0676a732c806e3b9579066c3747ab6233e9d24c984a33c0422e8f0020f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38bb6741374d8e500269d2b30f2efd96

    SHA1

    fef7b96177284e9924b1029c8781015aa77192b7

    SHA256

    8270adb6f23edd0ab0b8f01f1f70ba470c059a5ec832bd709bf009eae60ae0d5

    SHA512

    2f977f4fb8ef7ed1c1379610dcf353259fb2d8d853b220994d6accfa50d688bf7af133498ea781d029f9ea7a3c9b37e6113bcd4e3f541c0387826bcc69046574

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    824f2c22c719619a08378938a1f09580

    SHA1

    9580d35e80855bd10e47f1664bab4381261f0267

    SHA256

    fe9f47766c976ef98078104cec614054b9b761101601c9bd13c63a5800aa31e9

    SHA512

    8560f9239e5e625bbcecdf672a737c0990174a834a93fa45be97e69bf3132b215734e3f51f1accf3047cd8e17909f319894b44a3459c83bdd625dc44acc06140

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a8db93cab8034b68fbad0ec6ec6dde1

    SHA1

    9e8f6b20a21136ba77fd6db2e327904a6acb1c84

    SHA256

    df1f642621df66572ddf4b17ee81825fb54567ba6550ea48c0742b56480783f9

    SHA512

    143ac427c7026fb8c48a4ca77248325676aa85fbcb1bf9b5475409101b68967cea56ec8bb9a482af4dac88310e11cf5e5ee0517bc1abd3930664cb1d7edabde9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b9f3c8bf958bc0542412de43b22e2cc

    SHA1

    5f91ee69ce46379a0a4c9a3d62c568290cce835d

    SHA256

    9bc59b714f2f8183952aae76556cb58e97d41a1f58f1786efbabc73b63219ee6

    SHA512

    cc346544c7062447b45310a90da8045fad7068946f688374e9cfad3a3e7d840d4325342030c44aabc12385f2a9c6add4ea09c64e439f1558e0314c9bcffe6bef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    428f92e24905ba80e614de67d42b50f0

    SHA1

    6c9c215e047d79c8b92546ea2c4d3bb72bf46600

    SHA256

    4ca2ad2be5e4b42602f54bcfe68223bfdcf49823c29298699cb147ff0d4d50c6

    SHA512

    f709ee60de551639cde52947b420250b2e58e66f46b6ab95f2bfedbce749e768e731dcf7f4aaff82602cb5dfc86246429f14e3232cfd9aab609a491963f1e540

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8f729e36f3dec1b6d845c5d13225038

    SHA1

    05d3b9a04d58062339968ee2a0c0275195b07d50

    SHA256

    76159772e7f84c708bdf1239a517500c304e534bd2ae007e90a904b8b97a5902

    SHA512

    ab91908df2d58118743855d92824f55a1e19186dcff4cc4d13c8fbeca51255a78b6a395c36e6785437b26c36a745db7e088973f87dc066b7a38234623af76c04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    172b827661ea0a0ca1578bd2a08fc1eb

    SHA1

    e3d4a6374314a642d042504ca8881581f6553ce6

    SHA256

    62fcc57d6882f9d9115e909c55582bbfb0823cb9133a7df86de435c24e6d1018

    SHA512

    9a7c69ca7c5c5293faa27976a3a711a4358c5c7935a555ce29a9ea74d77d9451a8413f498639d6ce6b3905219cfc065e12625cf4ee33fa7f3a32ed16e6b13149

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7afb1f4cdaa75dc4f352e4dd08d98abc

    SHA1

    e89e7029d905a5e2c108625ec391a16a216544e5

    SHA256

    1b39066daa8e8cd385f6dcebd27e1cbe750fe539aefc02c4740bc4bb96c92f26

    SHA512

    a72bca1c31375942e7d49bccceacffca6684e2c1d1fdae735ddd61d2637281b4e3c3fd0eaa7c51bd7032addc29bb6400104ee1095b72bea01983b7f94ae81960

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9fed678c9a6edce8b2f50fb649a2c77f

    SHA1

    e99e78271f132fc9b3844be66d128c9f076a937f

    SHA256

    bc5d799fb88e06d40a612c20bf1c46e15c3f3c0144628ddfa477426665c2d454

    SHA512

    29e28649602f36e024b872644bf3fe8c663a6ddabcc6cf2631ed03ce5c696086fc03660a37a1bf91fd255d35c409135c8b8cadf9e7cbd7c28625fc64b283f7b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4841e87b24711099c6acdc36402b974d

    SHA1

    d4bdaa7985902e8d2ba697fc67bec24b7cd40696

    SHA256

    2acbf5201deaa8cff17ffc012016425a6a2e07ecbb0c4dc735e56053d9108300

    SHA512

    8884e0107374f827938566b94dbc5203c2c951712dc40f5a4d07e3cf12ca5edba470874d7b0310bbd887f5207e9d45b2e6a3c6bbfd699861a74e8bda94bd1bef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5764575f1874f330140dd7ef128971a

    SHA1

    49388d414d6daacdf609346fac5fdb9c0b8c8fe1

    SHA256

    855727a4bd6fbd033ad22e365f26aa77bde88671c5aaa57c2c2e3c9539344211

    SHA512

    5660d938997d43a1d903c51b871dde84587e4e3bbf4def28b4900960c1ed612c80214a0b09754f193fe2c050182dd14c39896e9c2a5758d203bb8b9dde79a745

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12b7476d6f025e70b9a0fa00ddb08637

    SHA1

    a8c5bdf0691401f699b1875bdc9fe6618e95d7c2

    SHA256

    050701e67cc82249da64eed0c99b82f40a868e6067595b8daa27b4121962327d

    SHA512

    a19dcc5ac06cf85ec9eb230925dffadbe958205c236a0640261bc87fc55e392868c61bd6f09c113a52ff421124332b8a4c714ab503d7a9db85766de6a1830304

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0764b44da639a6233cac8c89b3e17a1

    SHA1

    d289bd5ae706eb784b175007a0b3d3ec8c85ccdc

    SHA256

    fa72137a098b6db244fe1c6149d8fad7cc8b5237ef834cbac871d6ac3623f8c8

    SHA512

    5b226f27b83bf26cad99c1bc760ba0b5efd7ab7b238e68e7d10493e37b0300174078d2ce82045516aeb7cde50604600869e5f538be2e2f857e25d71b589ad0ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aba21c930fa977221cfb7325a5023fdf

    SHA1

    1cefe88d0f279793c828cdeb2863fc9883fa37d5

    SHA256

    577b5cd335012e9350ac95b91f075de8bc49082adc5365f710362c1608978a53

    SHA512

    6ae217bbeb3ec551fc6165ca4e2f8630b99fbfaede81b044c64cf8b7721c1545189b1f8ce54d097845dbb104b4d9f5d17c3e9953d9edf48a48d41e5b74f109e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91e8419fdae5be198b1de183718e8fbc

    SHA1

    9d18c0e3b45a92d08df52fd9f2216b215766ef63

    SHA256

    fadd52079b4e5bcea512d0541ca81cbc16b7071b22eacd2e94fab8f8e4ee4c4b

    SHA512

    a550140370371854c37bf2b53c18a927d9c5365b333e4e8299661b25efc1c44cf770d39c00160c8b9e95d26a5eefefaae33b275564de9fe3bd88039ea3ad5952

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    80bc3cb7f1412cc313c40a5c395c5ca8

    SHA1

    d4f779e01811df2c1d7fe6f4ae1b2bb8b34b360c

    SHA256

    99e2818bbc07148e48623d5fe62c64da6e2bfab6f926861cfddbdea45bbd3c3f

    SHA512

    aba6765a80334f208b37222fc53c95e586d0ad63abebf5a415d5d7251a1b208b4a3cee03b5dcae8d16b88889cb628134054be3486ceeb8b509d94bec79ae5731

  • C:\Users\Admin\AppData\Local\Temp\Cab2369.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar244D.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a