Analysis

  • max time kernel
    120s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2024 15:32

General

  • Target

    3ad2fa4d4ec8a26f9857a42ba0f2c8ba_JaffaCakes118.html

  • Size

    254B

  • MD5

    3ad2fa4d4ec8a26f9857a42ba0f2c8ba

  • SHA1

    204f58f30255394c10c2e6584a0f32b535954732

  • SHA256

    c98a597d7601dc885b4b6ac4495a47ae9991572ab480366591eb52a44781b872

  • SHA512

    823f63e741b5c68f7b38c695ede034063d11cdb1882fd0cb0b69108de3f4d00841e10f3e34ce83a68969dfbc7084ca9bce141427a8935cf7120b573f671c7d8e

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3ad2fa4d4ec8a26f9857a42ba0f2c8ba_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2744
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2744 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3016

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0f07d9b2eb00f5ff61ec3e3c6339b24

    SHA1

    3a9cb26728887748c5515b3cf477415408071e03

    SHA256

    ace26a9ca5999ccb29f4a70efeed1efff24eb747e09a3c1ab4f996aee6f0c676

    SHA512

    72f72c5e6c298297af69c0513f46f8b249a3376848ff28728f88f693ccbafb0ab0044c391203197beaa2f8e98f7aecc4793f4550776d6a3ddbad5c889723b239

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a09019c029409e2e174152a67d5d35b3

    SHA1

    ea320f9f09c3d7a65490f34b840aba162a78a9a3

    SHA256

    4d99b2f8bf7ec4dbae39ea4304082d483c5541f6975b21e333fcf68e0e381c04

    SHA512

    813070dae315a6559c5555c49726747235fde62a33f0dffd244973218bdf42eac9f7abde245e6b89b7fb13c8320e2693f7aaf1e9db7b6aab13f630fd04a1f618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7d0178743c08ee8a8055b96f18433b6

    SHA1

    305b25b540bc92dbc0a7aa708de77729053ce134

    SHA256

    914b3f33a62a116e4dd54ca8aec1344295418c6118a3b271f620a1a31330424e

    SHA512

    3a1dc96d5cb9855ab5cdb6cb7504112435c1a74d74e6aafe64e2965c75a18e2ef82d2f8d3c88c10c55c6f0f1265c91729b5d66d435c9eb1a613e129282b15dae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d63c4a478f1b71cdb03aae32b8fe41bb

    SHA1

    7729b828c366856774228e309bbcb50cc4255c14

    SHA256

    74aeac08eb593d945e2916478216352c7b90b84e3532f3b283342a04ef862aca

    SHA512

    2ac99a275a7d908998ba77314180d2702676b5b5572395f1bfc7469ab973808af8082de0456c32c5341d6d315b8f7f3534ebb6001756a180a17ff261d5354a5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da7b17723ba27edeb4e5b6f65af47b68

    SHA1

    3fe2ec9981df3fb871341141230e615f94abe2a0

    SHA256

    dd41aa727a975694f10e13969be0383372d49811c54114dd2d308e96e3c1caea

    SHA512

    9f4041a637ade0146521a07716f7c2b4f2644be7e56364924e48cb0add3e9d77e8477acd4d32a8f07eff3b7cf0741dd2b3f871932c6aa9bfed22a8a62d24438c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    01eb51aa95a8ad8c7186188bbf9c89f4

    SHA1

    796bcc5d1c9f7584f50908db38bfe9c81e22430a

    SHA256

    2cbd6c4595906cd47c027a74d40675959c628e071e336400b053d125ace46a80

    SHA512

    deb1fd66a9ef75456cd541900fbae9e769ca94c5564beae8482c202f981582d532575f6d2e9c749275d7c76598d9c2ebbe893dbfc98967b85b5937365d0ad3ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e2773bd0e9fac618ee6910cc67ab455c

    SHA1

    ed7317766653021ae77582e86eeecae00b0b37e5

    SHA256

    4eb9b665a9d4d2cbcbdb8d73465865a4dc6de14ae46a5a34f93a80465cd33e08

    SHA512

    47ceab90a6721cfdd34324cd8580014d0ada2bdadbffbd4f4754f63d99a16617bdf94cbb343d7c9facc46a488fbaef1fae4ed567d3767ba51da0207e4d1d50db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ed030c53cdf503da8881e2ada3955793

    SHA1

    6d39c6fba9c2d2b813568977b21435f259fac6a7

    SHA256

    cb50f04d14af3a28bc1303dfce2cfec29c55ea8fc8dca41faecc754204584758

    SHA512

    799f19a7522c9a7091d317e6930361b4839e8d8df9e174eb6fe5decba8919008d46bff02f03135e2b339e68001572858f0e27112725a66e75eb8db72e261fad1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b2d5176e708f59f9a5b74ebd1ab62aea

    SHA1

    fbf2ad8e7453d3f4e9f21b09d619c9c097976ad1

    SHA256

    24e593ec5f750044261e80c65b08b6df489e3cadd536ae751eb53db7befa6288

    SHA512

    509fe934d5272ba9af6cf83cfd1718098932be07044eb66322dbaf94636964909322fdd2d6789e8d5df3a6ebeb2beddc7745c9b08f9007aba3d317214c2e4cea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8db924989c65ce1603df64d136953d2

    SHA1

    f5b3cafd2207ac92e6c5e3b8bf1458c28dadf23f

    SHA256

    574e5e7158d0e4924df55cb71c73b5f719f84b37b31a4056930a24001e078727

    SHA512

    8955601b56dc5da2b43a6f69ef37f72fea83f045764564a73f3a084a31e735cd4c8adc3dd21afde63068a705406bebcfc1ba045177a3583ca5534d09b1c47976

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    521d5b1db3579e1f5b3a6f7a5cf77822

    SHA1

    54ad8c046bda0351a171f78d16ecd505f3bbb866

    SHA256

    3c16ddedcedb9c346610592958f6406308f9b57b8cad562b57988ac830ecd2e0

    SHA512

    d81051ee0e8dbcd2fca3fdffa5e374155c0cd9b646fd84309a575ddfe30f46d8eefbe466a5b23eaf2a1c3b3922edc873319c1bdffd6b08e05e6af876ba2ef383

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be64aa54f6e78d27214e0cdf08302d59

    SHA1

    a58b38bdfc2d642247787c8c2259a3b88ce9ac12

    SHA256

    c7031deca979439c7a73a0303179e134b2ca1c2f628c68e141f9259cfc3d5454

    SHA512

    be0e183a14e6d49e56cc9082233ef1d351804631db7661897f4482739dfa57273ab49e6a32d5ea90c26b99dc1092b1ee9f1265d0a0e6fe2d8721ac4f9b9c85c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c727b590ca7782c622f36d3532e4b2ac

    SHA1

    54c6e4f2e046a507763210ac1749f62dac0a9650

    SHA256

    2977568636a2886e78d572cb0bd5758f25e3ce523c8fa2fb663f71bf324f6c1b

    SHA512

    7e97115a14da24a7e2b67ce7a1c20810e6a4076673a0aa087b03033cde7251d1363ada951d6e216ae99260484db1cada22e19a7b73bdc12d9adba1892d06190f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2361e252b914472671d0eb1c9822079b

    SHA1

    11b8b17d32bd883ff74648444dfba15f21026e8e

    SHA256

    52817c5d394b37fe5b415591db34feaf7af5a2c5332728a33f4a924e68b79d6d

    SHA512

    e41a380f3e25a91b71526ba7fadcb7fe616ca5fe150c3d6d2763fd2dae4b3bc2a5ac153007c06eeb06e5139242569356689946a8abde876f10ad1faac7f799b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e51e182f813c8e5a9c26b99c1a634b9b

    SHA1

    3799774bf0a781b27aff5b8b4da820c19f67359d

    SHA256

    e66fad8ea1674793fa4cd00412d4f8941d7dba6b6e0c8b857ba9693a130f174a

    SHA512

    c44bce69545f0ff6ecbc634b54f24c462c853f539950d85e2fbab2a73e111ba450f29a8fcba7c63c0a1e216ac5d4607714bb66d8bde0d175a2fa81125c40e129

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    552e40fb8afeb0c9d4bad000e3e27321

    SHA1

    ce01e8f821e0c6f4069a31d5e021f6d5d2e127c1

    SHA256

    f98c407e51016d8e980dc765c66f7ff8f304702832075dcd83d9b01b5ba9974c

    SHA512

    8de3dceebd7ea9f1ffc0381bf7e52c88289bd726524e83e19001c85676ce9b6533a259f2ad7b61120fea3f5a299cec950c6a6a56929996c520a9e89baaa19ae3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    12fa42d1d0a9cb33c3a45fedbe623db7

    SHA1

    79caa2908dc8b9ce0971bf67c01362328e50a503

    SHA256

    25a9416b135b526c42ca8bfccc8b78ffa4ab15aff91068453f8a7d5f4bdd0f97

    SHA512

    0c63f105c1bd59120fb3125275bdcf777eafa3f93382720a8029f501a8946a908a6d9b19be8b8987b6895f1276d5e5158412a3e563b9d9e477c0a542b89291c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbac3406e192ea115640d00c37b21025

    SHA1

    ff1163960feb5c1daaebabe7e11ad60fad3a23b1

    SHA256

    a4c1b69198154b172a66811cfe251e0ca66ea7036d5c45d8aa21e9951f24deb5

    SHA512

    cfc29eedc640fc9f6215a2503cf6a52af7c1fc99ae0efd40acc1e7981fbee22e4d1a3b1a93217b759cad4e1e5609c373d6047b6578bc4645c3b1160dfeb79a93

  • C:\Users\Admin\AppData\Local\Temp\Cab9177.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar92A9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a