Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 10:36

General

  • Target

    39ac5005cd7d45a1adce8056c119623d_JaffaCakes118.html

  • Size

    3KB

  • MD5

    39ac5005cd7d45a1adce8056c119623d

  • SHA1

    8c88d4f6c9c72176bfad64ed55cfab8d84ab9371

  • SHA256

    528e04f551ac8c6e14043fb2b509eda98586e3e07219c0687366788a8b926476

  • SHA512

    d39d4c0a41e3e48eaf9777af96555c84a9f62916d3d873f407573b46b88e05acf85e0684e177e0be42f6e6886b3e9f127a9edd09038e1a6d217023f4acf1f203

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\39ac5005cd7d45a1adce8056c119623d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1768
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1768 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2172

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73055f980f841f6bd39a61da06af4df6

    SHA1

    acbcd2ced5826fb1f18c51951f1b156a4142b4c2

    SHA256

    c5307a619a9b1239486cf8e8e3e9a3aae6d2dc97a7238d39abfbc1cf30272568

    SHA512

    59e9407bd73527886d2a939853deeeab98ff0016616b84085e804b669c0ff3a1b83b4de5235957e81e512b52cbf343a47f4e759fc35d68441231cbe968cdcddd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d76c261e6ca584e265cf9a168a8f4f2

    SHA1

    e6fa89c98872108107ff9a1a6d8ee6f9499646f1

    SHA256

    8c5e619eedb3532291ec875771ed285b8d1a4aeac808f5471408c35dacab622d

    SHA512

    398ecad320d60414ad8ab1eda4163972bba43cbb97adb085fccc1020a5446a4a850f1a5087d68e09485aaccb030ead653b0f267638ce0b67c905f19edc0913f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07460af78ba32b1b77af83493b6592c8

    SHA1

    7fa583aaa5cacd8c0cde6df5104ee73614497766

    SHA256

    c164e510877dc205cdeb7efcd52e39d55aac456dd1eb516802f88d22f3376699

    SHA512

    3d2bf22a3f210d2d211a15da567dc9d65d725f07874e5a68986eb1523e070b195b7d98292b3752442e03479f0ba2867a493894f8be00c41a4fd8fa709fa8d483

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa09ee5e738059aa1d32e8376424b1f6

    SHA1

    647ed088e3ad96c511431cc7c8b1f5b4cd9f1aa8

    SHA256

    7aa10e243bdca6bdeb3a7d172803451f1190659d427283f6a47d285d6bb83ada

    SHA512

    eaadcc5b409ca808b373442cf18fa068e3e9ecf210677aed9abdea0ff42e27b22c1623a827995b53829b5e1c545e9bdf08ba565202ea5f43dfe591e63933b6e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b09ae751f2fc6ae92b15bac718da3fb

    SHA1

    73dea9f9d7e4c58efe9a1e6f3d91c9b2d0d0a08b

    SHA256

    a13a241792707398bd64f3344b503045b2aa48bea5d2cde41dd946f335f0b9c9

    SHA512

    dd8f6d9c3b3d8730d94990584fbe45c70a9e5cada6f0c832dd8a71a6dd04633f131de2ac905c94d6d7ca4bb5e275bbebe05750d417014703be54b90faf9af58e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f170991a007a688a6a5fe52bdda75358

    SHA1

    28f3b6cd7d5ae3819673ffa5c7e9bb0b70ee5e93

    SHA256

    91e0e060b9ca7d49aa589128ef28918a94d0cc32ce1992ebd6fb2e4c97f05940

    SHA512

    215ddfa970c3b294ad5bdd7823fae4742cf86a8b90aa6b0d7464d881beebfe391accbc3c990fa5e71bbf397869ffdaa0a24b8875905bacdb6d4dff029d11b6d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    702c987e314750b0a0958241776c6338

    SHA1

    f6497dcdc71efcb9c0652b30138ac880bbdb5e2f

    SHA256

    1f72d88cabcf87bc922c50026c1313c559ffd63ec00572ce64a988363fdab466

    SHA512

    e490ce5f3a0a2232fd0c57503399ceaa871136a9b2074e3b8c4d502e1408108c9080c17492cc96e3f4f84d55390bd3d893140899ec35ab5842535baa1e9db0e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e4eb534d99547578f76d45fcb9350129

    SHA1

    e5f1a13e276ba600d28a0c2695561af0803136c0

    SHA256

    bff9e8147b283ef96dffec090857ce5627de57869f317ac56219e5f297856c44

    SHA512

    6cf1825cfed770f27447eda8b40a9a425aec45850ac5a790bcd85b2ce73a4cdb0855214d935fccfe98489bee9d13ab4062c2fdd6648099bb5b5cacddc6fe767c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    051c71133af64413b991d27bd07bcde4

    SHA1

    2275fa7519eebe8a8daf1b4a1880bff02b93fc73

    SHA256

    e1b3aa304156d4dc241a780ad11921f6896f0ad4bdb656d86ae09dab06f7f2f5

    SHA512

    0085ba5002be54c3e5b3917a8b419be69e07e014e66ac79cf697dfd48c0eaca86df5dd0bb4bff9a214ba14e48fed765f651505bf83561232290f859ca722790a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cb56b18b41dfb593e953c0bbf8dfa43

    SHA1

    e7d41a0939d8ecce5349462e247aaede209297fa

    SHA256

    f6b35abc4bfd0fc2866de5137e30f27a1b954199361a10f3a0474a8e39d89ab5

    SHA512

    1c3254eafc50456c2fa0d19368bc1d7ae1c453c265224271bce7436de913edb4d676267fe341cc0d5e9f1e7a1ad6fab3e3c3979a8b70f60f3cd76f1514c086dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea683eefa38032be79dc641fbacda51c

    SHA1

    caa1f7f88d73c5589ebb3c6322fa252f78aa2305

    SHA256

    f10b6981c9b5028d02f69386101fd35e04dac67b8932bd5b009a152dd0db8b26

    SHA512

    bf489e6ecd8ad27d77adfe59f4b41790b3a54cd8e19fbd9822a02fe26ca0bac10549dae76fc4ba3eeb447095e5b9fb5423cf60f0d20640daa9af69f493bd4aa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0d6ff6729edb6c63491665051bb1843

    SHA1

    dac61ab679c0a7b22ddc0cf276616fc5e41cbcf5

    SHA256

    49cc7b9c8306dc32a31ddd0f369df05d91152afb9a4fc581308ddfca1efbcde5

    SHA512

    338765f435c564bda6d11741f8ba484319f52cab60a471e5ee9598e14a3c8c5850184edc07b0d75605e3fc440edc86739be966d690b509622f69041860903f05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24c2954290f85071101651484a5d9019

    SHA1

    a94b92bdbb7aef97111af2958f5f7bb4fee1dda3

    SHA256

    c543678d996f63e3aa8a542fb30723c699471a9ea09c26e4274df95c9550de50

    SHA512

    4030d2dce81cb66c481109b465ba9e1f35bb4398f4778793205b7f5e19e6b385c3d334f34070e1bff37cefb407016db069389bf051c3edcc812d7d50d3f535ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4a419bc345c2ca0cd7f0ad23d77268f0

    SHA1

    34dfd360d1350763aa3b71a3c6b6e965ec6f757b

    SHA256

    787e3253bcaface40577bf2b494fa75a240db5b0f515d0e485e61b042b8d87fd

    SHA512

    d8fceccd8acb730c367db2f13346dffa8a21ac5384d58846760672f1f1a4f03d17c30a4bfefb38df4f6d4a1ac08e50d3bfdc6bebc872291383c0993de7e8e8ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d4e970436b9c1cd2c8718889ee09828

    SHA1

    900c1aff7657ad05e12497a018e83d9c49d8c9e4

    SHA256

    34c3324c8ef53de98edb937649dd2f4814425e97373bfbecee026d23d6bcc404

    SHA512

    3bcb3516484eea3ecfdc86979239bbc64bd71cca4d97b415ec2fb431e49dc5376479e0978480fd91550aad193cf8f861bb0c2bea31ea1dbbf8e9ffd7b457493a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dca1f5b732ca7ec6c9d752f8e87e0b70

    SHA1

    06242f25e3bf42760428f7eb268cf532b3fd9a9f

    SHA256

    00a1d3cc22d63b9863f755bc1620bff82a2f67c71ca43ab382dc639ce0022858

    SHA512

    cfb89c122c55c6c28d9157606c689c194b8fda69b5dec968b654eec3281cd7836272460d72eee8ce30c902bb20f8535e78e37ce1c4c69fc9765f60eb6e2bde38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be697645c0104cb672024f41f03948d9

    SHA1

    0777bd093106f3cd822930d5581affd8034eefbf

    SHA256

    8e8b437328bdc768652a363c3e1bfd35577201153e9cff7f6b2bbb6fbce09143

    SHA512

    f681e666684e6e740517f755a027330d5f79a6ba1eec5eed8cf7ac6204b60d75878d00ab7a86c453924c442837c6fb0687c89641203b98e83b9c75c237d8952e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f5dd59e4c6ef4108a0f283ad4b3b2f30

    SHA1

    47c3f0628aae39757ad5a6d9890a98d8dd7bfbb9

    SHA256

    f8c595574a51f43e52aa566d2cff8c21d672e94c51bdc66a16fc4e7fe473e115

    SHA512

    1704f8c3ee0f36cd0a15458047003bc7a3720e6c1683638bb905a5a9605309fca7a74fd4569f31985e822723ff5ed4d4f445e9adf25b32e44c9986b0e2cd0543

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f70bac5a3fb9d138610da292d1f1de9f

    SHA1

    304cdee0c3594c54fbba2604ccd3fce7a4a61699

    SHA256

    eb738b35fd0641313d8f17f75249e1485883832403b29afe8aee76740f16c424

    SHA512

    e81ad6032144bc41e8dfb4a66d52defd60d6f493011c1b82e48fdd92646de032eb68872d1da9a588c712676c3d0e73dc9927f1d3ac5303893030f6c345d73827

  • C:\Users\Admin\AppData\Local\Temp\Cab2ED0.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar2F22.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a