Analysis

  • max time kernel
    122s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 06:54

General

  • Target

    38d17a47e983802623bc8a2ff6a341a2_JaffaCakes118.html

  • Size

    2KB

  • MD5

    38d17a47e983802623bc8a2ff6a341a2

  • SHA1

    3b0b13053f060a0c71fc092dc2b9e3dc5afe911e

  • SHA256

    9f3416705997bc182f050f39da678d85836107a8b537af36ad818e8d11cda43e

  • SHA512

    d0b385204013b8543c480934314540e0921e0d3994ba1524728b8f55b7270b3763f707273232143bd6d47c57c4e4138e97bf4578dfeea0707bf094e7cd3478a9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\38d17a47e983802623bc8a2ff6a341a2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2792
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2792 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2796

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d6c40e6309773eabc6a38e08abf9816

    SHA1

    88b15dd95aba3868f18a39571df4f9ac51ab807c

    SHA256

    04065f3287006b7b30eb61acd7b610a07713b233e9c022f3c16e75b042c92b34

    SHA512

    aa4055969a70831ed964c3556a0a1820f4b6beba74583a7eb86a30a6c00c1ffd2c86fcf947e8f4b7a922ef94b165be098f4a1da9adc1a213da6cb9f9bdc2bd66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5c71fc3c50346cabf4137713730e531

    SHA1

    4302f7c7518066bd446517d4f3410652ec009df2

    SHA256

    40feac48673bc439e92ce2062d84020b4f6430b1829cd5db60dc606db2e18be2

    SHA512

    6db1fd5b3c0c99b0bb239badb2dabc647bf7b7168fb9df272fa7410eb2b73dd14041b7834f4882cf5a111ef8293b0247220456779c4d8743fee86c785b36f564

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cd490bb8614dee83365756a5b9eb2bd5

    SHA1

    a20e8600fa128dddfeb70bc2706dd9241f80d715

    SHA256

    c2fbad63a3df78ca67cc606ec3ea4a4c64720185fcdb2a8db4f2dd547a52153f

    SHA512

    8572ade4ea70ce32e3dbf4325353d640355ead1a9935ebcc7d3d56f98696d76d69c6b6f3dfb2d7589640a18cfeffcf867ecca990425af87214479de7825baafd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb65bf5707e84bdbceccdd67557e9468

    SHA1

    6cfb9db3db90a5b4758d26ae59f519906a9fcdfb

    SHA256

    b57f0a3c12a14e427c1e53526e7fea2e429ccb4323c79dfd10a0f1d16d4804a8

    SHA512

    c57a06111dec322e09ea0f6411b23e270260f4c18a00e6f39dac7036dc3de6e469447783249dc61573209fce4accfcad81b77b76a48daaaea695a0292d3720c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c748bde23567b6ab125625ccaf501bc3

    SHA1

    58e673157adf209cabf80b051c886c7a85a6e8ba

    SHA256

    8167fc7c1ac825cd2932a11ccf612916bfcaf2ddf3c21086b5a0017ff3ccfa7f

    SHA512

    423210231cfeacf0d91b7a62ec5087169a810759f686c7c91098eb08aa2801b88743d4b96e30b6469b705bce67c87f66982dd07348c47cfed02b5568a79abfc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d685134e4c603f332d2d919fb3c5132

    SHA1

    6f225c341152072d294b10dd3865e1d30433673d

    SHA256

    397976e55caf11bc76b7e1404a1d9afcf6b4c586c8b67cc7d30c1818c6f5edcc

    SHA512

    df99647e1e2c2b9c95c9dbc377d933f8ccb05c149ee8b5a3a7e6cd33c692334d015c0a57580fa3d318bcd87376c8933a6c46deed39812bf7f0266ca1cbcac23a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4274f8097c1373962ff17a09cf1df55

    SHA1

    fd767e1dc197830a999fb556062e1864aaf88059

    SHA256

    347db759ed5adda1a4d6bbcefd784d99789777ab658f7813d3bfceac77c56a63

    SHA512

    7114fb7f6916c7cfc3b57abaa78868467c457b0faf484ca136e7adf70a7b9781f3b79c3262ef11f122210b5b74f7bd5aa43cf195b5bc9b562c70c921e6f0c1c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01a774f3e9900d441e83f26ea0b84d9a

    SHA1

    1fc8817cf8889093ea657d2fe1d034d57abed423

    SHA256

    325ec13c5d613f1428fae07ff65f5191b9d1a081d13e6fb68d966800d162bd8e

    SHA512

    9b89c8cb97beab64a847b6700ceae051d2b2eacd2410a2881c009907e566bf43dd2776cf8a1befa3354ea9e9c678fbf8b15b1cc8742b1c74815cc7b31bff9a32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55e3c32de25246192171cb5dac1ba8f4

    SHA1

    3213581db3c81ae3549ee59f545bf30f93f093dd

    SHA256

    0c08c4fababf205db4d0a5a55898cb04316a6caeab3a7dcdfe4cb7b1d95cbb6f

    SHA512

    88b7dbb5239ba7a720215afeed9d01c508abda1a4c7d37ccc8a7e5bc94aa54a75cb0bcfe45ef7422cb9cad6535a3449bcfac425e0df017d32611dbea29b58cb9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dff0559b13dda01be4008c456c69f3c

    SHA1

    16788268676320dbeff7268c9e0488f6d40424ec

    SHA256

    0002c15a36d6ecbd3c8e01addbc0c8b153cc2bf8dd0563655877dde578739ea1

    SHA512

    a933b14b3b2d8f20fee664a39dfb6127fae40ef0e0eae6590785db9f57eeb787cebc158ade86e85a9873546b240ea02fd4b95bf9c6559e712f3ac75026493a43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2956251bd846d236d188267e74c7a941

    SHA1

    2e0d29d07794fbc290e0ec32e56abe0928489e76

    SHA256

    262ba755007132e3876466ba0b0cdaa7c0fd216d38c8cd2d371c7aaf5044aa51

    SHA512

    71e855b1ea759fc4d911cace21f2fa72b85347e3198d97e47758d7f06225f208abc954f1f7bf178943f09e0253748f13068b20fc6342095904b63c42bfab5911

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    50d329e8bf63274a7b64d3a814347481

    SHA1

    b271798afa446acbcdd2cd06643efd0d96103b13

    SHA256

    d72f59e1767ee0a365fe65f598a2ba87b74cc043dbfec11bef9067e161166538

    SHA512

    e3f7b694dfaa2f23f6ca2a9f80b7ee2fd9446cb5cb0b8be7f8cec99ae241c33040e738711c311bd29711c27c78777560a6cf72bca3a02be92edc864d5b3d4a46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37755200c096223e393daa4a033595bd

    SHA1

    d4488035b087f9f38022ebd9fa286a037d11a578

    SHA256

    9174911f54412da44b86e91740ae7cc2a005c1e8111fc4b5ba87f4f858914787

    SHA512

    d0e1ef252984ef907c036d0a03d3fce99acb2345f238f2a9198b78cd5b6b0c934e067f3ffd4d39fd54819bc379734d96fdaea479fbb4d9befbecb5252610efcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6dd964f4a487a6b029948e55919a688b

    SHA1

    b1881cec0d595e84b8c24d217af6494176b7c454

    SHA256

    5aa9abe13b3e3476fed0033690b8942e48fd11fa308720db0d0234af139d1df4

    SHA512

    5e75549bbe375a0224baed4322d2a8d151ae37185c8d481f7d089054781543d818a1c051c41faa47ca5c5797180845102bf741802a0d402a88d034fae282b4a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11fb74da20d8e106e0a40b1170dd4f67

    SHA1

    a9637ba1dc7d5ab14d0760bece96a86705ea9244

    SHA256

    6090117a98e82f40dd4456cb35cf3df9a7db7958addd23235e95c7f888639912

    SHA512

    36c4eeac099b1ced96522a14242e6eb5409d8feab394b7787d8179f037de771d786248286e8253351672ea305c1e073f886ee3bb9349752cdd88e815ccb1842a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b17981774bd1af3e1dc9e8efb6bacc6e

    SHA1

    03d3b6dd6696efbc5c17f654b52ef1a3b3c01f79

    SHA256

    5ea23044785a7504ccf9b62736f268057250910cf1202a91ed3089f35209f387

    SHA512

    764a8bee4ca8a6d0107ae9c96c716154f5556dea14b2194afaa6eb838ddf2b462f9721a0b188a851dd135ab831b3b828e0848ba99ba0d042b3b2df87000b3add

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    619dee5522f4e2437c5ee47d9179abcd

    SHA1

    5dd946e31b135a287d44d7fd0ac15748496d4a3c

    SHA256

    66f5d1eb34ceadb83b3359357dcf6b6e5c0a041ebad001c67b6dd320dd3b9508

    SHA512

    6e9db32bcf786038270c90a731ddc69de6206b3161f65335e037c71b1ef57f0725537b76b859a3a3a10da24e77fdc7b5375d828739a14c712a2434a3006bc9ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce5c372621660ab371468abfc0b26dbd

    SHA1

    0ea0e67715b4554cc833450b6aecb59c32497d63

    SHA256

    5b489e4d9cdc26eb83fb97a4ec5ee7c3f06e9259248c023158c95514f4a9f568

    SHA512

    3ebab2d31ef0eb2b24199fef5cc5420d6a9be3ec8dbc60c418b4e10294f84b20563121bf4a50f51258466cf08c2a2c0fd49fadbd12795009b0ad9fc65e598613

  • C:\Users\Admin\AppData\Local\Temp\Cab2899.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar296B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a