Analysis

  • max time kernel
    121s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    14-05-2024 13:04

General

  • Target

    4198285629938fe534d6979a3e1cd10f_JaffaCakes118.html

  • Size

    332B

  • MD5

    4198285629938fe534d6979a3e1cd10f

  • SHA1

    e8374403b5ee03444de26109b569882f57768163

  • SHA256

    10eee989d9e8009fbfc6c77178294481e535630e6ce70c6b5357f615642a57f0

  • SHA512

    718384d950242c2e915ff6df280c48df848fb0290af54224355a1ad9116ed55b1cb85bb1c7c26246ab91561feff7ede42ca8c0d7ee614f8a06980b8a94b98506

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4198285629938fe534d6979a3e1cd10f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2200

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    350954266988ab14a034ed5641c38a3e

    SHA1

    8a85a5120692f0082370e9dbe7eb26ff2a14413c

    SHA256

    47cc1b0de0fb69c86f2bdc422e63ca7a0588954e983206b62f22b8744ea5e9ad

    SHA512

    ce6b530acf25436e22270cc43104f2a6ec4705eefa55ee27a31dfd7abd075798c010156a99e66f46ff271c9853406570bbee66da2744b0bdc3ae66daaa768fd0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a84c051f12bc01473ee1f7aa4d933bab

    SHA1

    2f93518aa91bf6d90e997954bf48434baecb600b

    SHA256

    5189d7b1635c5468d95a0fb510ca77e1b4b9308b49c38deea53269e3ded1dbd5

    SHA512

    4670f10e292d8101479d2cc8e0763389f9b10b2e90a52a683a9753b885d0a790ccfe92def6e474d8baac04c720f17cfa31167498dbd334690cfd8557eaf1a7a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39589fde26df134bcd8bf4bbb941ec86

    SHA1

    60abbd9ec84d6a57c4d765bbaa2210abe306915a

    SHA256

    9b2aaa7b0bbb47e9b75fc717322f1e32d4d0810678950fb43d80ec7347c81163

    SHA512

    12717db30d7bd1918a432dafdfd507ec759df5314db60602f47da9f22fee45433b1a8712c93de1b40260a0dfe38a6634f464a5a0ad43e7f5073e2507b029fa5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b4412904b735f0c01a0f4a15060efa44

    SHA1

    7722be9bf6bdfa8ea65a934c3dc0c86dcd153eb6

    SHA256

    96512dea46fae7de6d980963841fc34c5fd0145feaee35cd8dc0254b41192cbc

    SHA512

    e98bd2c38255231e6206faca9f58896e1412d9d36c51e86dd17e311c856fcaad99643f1ae25adf302df077a478b268bfc888e087ade0da81de619465907388d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b2ad8281432a0bbe30f9436a25be187

    SHA1

    ec067900cadc6862df149b39b763630e5645f890

    SHA256

    7ff0c4b42b62fe3822190b8d4e80b51e80bd0947120d19a953b305347535e4f6

    SHA512

    94223367f12ebfc3e6d7b74147f8b8a4aba74e3c7fce75904c3bdc972cf4a928717c3d18aa0b17672f7a89a6949b630984136bbb88b9f7950ff90ca1755eb19a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c62acdf70eaf805dde93c2c61a9a56a2

    SHA1

    4fdd05caba6f0f63c506580bcb4a56594d6d05a9

    SHA256

    8acf81e7e81b3a9d8dfe5fa5c67591563f8f2db715ff42da3cc0d5221d7e2990

    SHA512

    5fed4d449c066534a5f9c4d1c9bbbccc757715b4ab02028b7324baf55923cbff3b9a9fca4899c98b8f927de7729923b6e87200014adc1db257a09c52ba4d6fec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37a8146b03f0133d7e271bb6f2d61b92

    SHA1

    4c539e2402e856ef1cb3ed95d0b33256b11f4d29

    SHA256

    bf495d113305ca9749de2fd3780f7a0d8c345d2abeef0e2c9be08e3b4ea30451

    SHA512

    4da77f4afb32bde774f4e4a0fffc345e14e570cc7a018b0063d97fdb07167715413149ce3ea521da9adcdd474ec6de07659ef69160e56de11ce609470688c567

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8125eb5234eb06559e04e6ab31ebfbbb

    SHA1

    7c074680d4545fcac435bd1cec426a701fb2c216

    SHA256

    1d17a884f6d8ed4509e35a36445d8706f6ffbde98f49958e70abd964c4edcb80

    SHA512

    069a4f0f322275ff7e34760bc7a7844cf62c80b46f1ac1f8b79f7ae78f41baf6f71e15e1d012132bd796b54a06dfa904ca5a9669b93770896360fcdf3fd1f99e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    015943007a28fb306fc3fb97dd3ef138

    SHA1

    342f3ff61a5d8571e1d53183905e7d56f1806a67

    SHA256

    1b27112d4a08e0cf97e11fddfae8c1cd9ba316a7aadc8d516de64c320fa12f1e

    SHA512

    95f0db82d44594f94f55ba0ab8c11ea17ed5e01dcce83b256cac14be1203558e05c86f17cacffa2c65cc794b7109c695aebf35975486cb810ab855ef51833ffd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f07dfe8bad58b8f58e3c472270bbe559

    SHA1

    c9c183d98eb33bbb89179f3c439912b46509eb57

    SHA256

    da028b25306f34b81e12cd82828f3ab6018fe0af0464c2ae449cb219fbc33114

    SHA512

    2800c4c0c09eca204b1fb8f0c5f153b3116ff97327051e5e398cde75acfa6e576fd87c93bb103dc75e86ffd35210e1b9dc4c0886fbc0e1b7a2a3c3c05995b6ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1a0b7209e70285310cd575c6f1252f75

    SHA1

    e24825e94f0c911f954854b02ec5a0b5e1fbd5d5

    SHA256

    781db675e115057de35615dd6a4146657a3405ed1707b0a8a6c04733316dc65c

    SHA512

    b31fac860e213758da3ba755e6a5293b19499077241fc1997978ad40c35e4543372fedec6a488bf3e3b3130e0eb50fe7d2ccebf7e4d23e07c6b2596b7bbac878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f00f7c96f2f5fc427d1aa02d6ab911fa

    SHA1

    a5ca8a4317fae222af1bff6dde0101a63981756b

    SHA256

    def0eb71f7048a8e4f93025ab52c54e7668ed184cc2026e3a75b3663ad4943ac

    SHA512

    ca90177952b49434dd779be9d11d8aafee7338a95b836040280338b8127b753ba2b898a198d99833bd11cd9ac609bf46bf9123af0ada19268678f150962b3d7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b9345bb5d49d474713a6c3651c653b1

    SHA1

    df47404c444498e98d27e43952fa2dc66dc333ef

    SHA256

    cd6a16cb479f4cb4b5e30c1d2d7cd966b8888fd5bf0c3d4876786c60fae09d35

    SHA512

    c37034ecf9180df8a81b143412f045baa2d61bc259546b5ac49d30f420e96627144d2ee92cd74123e1ca42cca1d72e044e429b76ed37b22a6b077fb243d22962

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c18db6a1c70afde05477d85a35252db

    SHA1

    6e66cc9d7edc3537d6e7782cb2f31d4780d0249d

    SHA256

    39953c7193c988d670ec75bd5acbf60fc9919d98732a0fa53e45d9469493135d

    SHA512

    b2b0f8950e941defa05853e079cccd651202f4eace104e4797c04d61657c78b2b234e19a2df45584285b10be17d383e5747823e660f5610a14428998520adc51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7a6f6e350010073d92ddbf3e2b80d3f

    SHA1

    6a20eeef672215e064c3c898af852c487eb0bf79

    SHA256

    737c2906cdfb7c3e97bd9c21dea2380cb5ffb3561b03c5b386745571ec5d2c9b

    SHA512

    834696926b63a4b4ba2a6a264c5e18828a540f2d829e088910ea1b61a35c28ede4773da012a71d1fb20706e81903d4d22228caf23be238fdec7e6fb599662809

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b882991b8942daf6fa13ce7520b89107

    SHA1

    eee68f4d6bc94f875f82800efa4cc6766d65e397

    SHA256

    6b75409f86cb7486bba5f6068316a432fcdc88d9f9ff3a55c4dcb3ef6036b163

    SHA512

    61d31b7fb1c31641b5ee2276800e803e7b706ed38dceb3532f2d958fc0dea752ef4c777b4af6b55e481854f8a0e7e71b6539218326f8144e731802a6b409f95e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fb4c2d80d8a8b6e701e9c280834d4472

    SHA1

    e2ec91f66fe5e7cd41a8bf37dbb8d13d1c6e8f03

    SHA256

    d549feb91e0b9704c16f90bd34ef2f021ee183462b272f4ddde95f555d437a0c

    SHA512

    663b230c1e0572adcfd31ebdd7003fe91c11df431c2ec61ab1d317caf972d938a7fa9aca4824ffd0d457753694297bf4e99f51a5212cf2ab602edb86c4337667

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6711c553e1bc9406f6d46b6152e6d049

    SHA1

    adcd11cc4c958c87d430fb2693cd7246bfad1ac8

    SHA256

    9178da3eb41f18049184d54a02b0ce68047c36b81d88e60ed315193b87dfe494

    SHA512

    e1cb94e7d341a68e963745ed65fa70afe5ec9b6d6cc3ea140c7a3fa050ae367307b08ca5f250bfab4a29c6c87c906fe7b91d4f7360ff46cc3cb034c7fb745ab1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24416f333875ec3fb17e36523e0ffeda

    SHA1

    5a6faeee50a18413d30cb66d4a546e4f3e0a276d

    SHA256

    a2f06e29118e92655a4b0b158df47e7cbcb956e0993defe061552a64bd3f92a4

    SHA512

    d524aa2009a2303b7adda882e88df25d6c4fc74913de1fe931c2c1e01a11147cb1703b214a5468f93268d214aa0348fd12c91717708974754944d795c9c624c1

  • C:\Users\Admin\AppData\Local\Temp\Cab397A.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3AC9.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a