Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 05:54

General

  • Target

    44c900e628994e0f89a2b3aed2c4dbf6_JaffaCakes118.html

  • Size

    3KB

  • MD5

    44c900e628994e0f89a2b3aed2c4dbf6

  • SHA1

    1da3a80b7fefb83dd2d1b8b4cf2b43a263ec15a5

  • SHA256

    7659a9975766fbcef817f79b72696811d59024c4632fb32dc2660ac755bb824f

  • SHA512

    629e976f600f6877205a3242f16fee79418c810c93d0a4db232f25f1040bc6c34a22697ee6cbcb8ec9e32f291a7ce7bf4f77ed201894cc22bd176c7d19aab112

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\44c900e628994e0f89a2b3aed2c4dbf6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1904
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1904 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2564

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf99f37255ad7ced670aaffe284e87b9

    SHA1

    f33db2f3d7d44fd91aa9ba147c5fff09477dac22

    SHA256

    ba8a649adb03ba17f208ea6ada58816f092cd9c3ab701d6dba22c62a01963d94

    SHA512

    22216ae321e08b468872925023458d4b40bf9aa2aea02010cfbc76e0a75cd70e0bb2fe1163310d0654a88e9011eb541b24b923cc3e34b6ed253bbc6296df4916

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    780ac19ef500315bed45645d3b7b4d36

    SHA1

    a93d9cfd3ccc79ecf4f1779be8284d23c35a4d5d

    SHA256

    6d3d5027af1fdc667582641fb069e1ef0136a897590946ac33c78409f5a069aa

    SHA512

    152a2a57dd8e29f58ae2bb808802cab93442e99a12ead620033dbf664615906241daeddab52ff2b79c947330b41ca0c877ca876471b4e12c1bb2618b0c5511b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ad1e48c10b19e24a1fa1a6e0e73b933

    SHA1

    e0dece36b70a41ca42eaf3577e32cbc86f17f609

    SHA256

    b91c5c6e13f85d70fa0bdfadd8294118480d81d5e68820bbd1039330a1e7e99f

    SHA512

    3d340e3a4d250ff49a715cd83f6252db0fd02ad0a494772944474189dc954e1ebb4ffa2b50323d48c97538ed365a3143894d3b23383682f9f751753213bc0c3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa44f97bd6c906a873852473efd617ef

    SHA1

    eb76f49278e722d33c9b1f7386f1a5bdc176d851

    SHA256

    846f9a7c1a88cb654939ffaf7a58db5b69de9748f42804312790ea9c5c4e35ef

    SHA512

    18fcd94f8c794f89e01bce4cb2997ad85057b1b31da8ca0b7f014c85fffdaa3f728c83244222c32a3bc279881a3cf27622c6375f66b7e8571397b1ded8dc8139

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c3b4695c26e0e51d626163e6129be1f

    SHA1

    eb06d231df34d9af126560819115711cdb3681cd

    SHA256

    79d2a214439054d2f667db34f3b4e1a8c505f39367365a8241789b61a8fff553

    SHA512

    3cda2973ade9a79a024e9872d3690869ab1c5035d9668cd815a76e73884737e786a228fedeccf9ebee93e646fc1c89d8357b4b5ff69b12c59e9e3ceb0e3a8563

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c30db4d326ea3f4168cc079acd4517c6

    SHA1

    43b1a04bc7ac8d2464f4306f9dcb07b61aa7ef78

    SHA256

    dadb9c8cc1842a66d9e5b526d0388a988b61f2ac284210646111922bb49ab895

    SHA512

    a4f868dc6252b24c47eae43e534a232c3dd5e483f9565d20a06c4adb4597268ee284a21c75ada6f4c863a82534c748f288feeb17d428697ab5b5f26257ec3060

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41b2f0a90ac16b2a2d1fba08f741f7d3

    SHA1

    23f48fe7ad07b9440cbac44361b220b07f643491

    SHA256

    606f4751b4d3c7727006d68d24c84e2216f2b10e5159f1ea384804d61cc196ba

    SHA512

    98a5600e71d57a0a03d62580858b7e9733673e19b4fe9f12960fae0fb755080ba32943992b129ca18821d72e0a09cb75d6049dc8a2f0e92eb38afd6e267fac02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89bca73d8e4e74bb061996e3ee6fd582

    SHA1

    2bee5c669ded59318bf53a49a1ddf8369f0a7906

    SHA256

    1c5093fd4f8d79b4f915cb1fe4ca572f11eea9ea1f125880df6b8e43641cc8cb

    SHA512

    4489d9faa1002c4304eb9dd5e1e5556b121706c1adb97105c53dfc0fcac1eb775b63a13e350dd3e90e0900e83e9f988392c3ff08fff14e15f90edd3c08bd429f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e759fabae51f75b2d859bb57192cfdb5

    SHA1

    2e10241ec7ad2622dda059039bfc00017b5e765f

    SHA256

    07833afb6345dc80206f3e0f9453036b5350dae4b38a9655b58870f0b094c979

    SHA512

    ab792282754cfa46f76843dc7bc28314f4145d7b40d186e29d659783666f6c5e46a1185862557d52e2be4ca205ecbaf7200c05b9b650fc8508d4a92c4371c965

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    10010408c9ce3b6413f9fa09ba7c76b3

    SHA1

    e8e6352d9190b3f9b916f4fa2fb7faaaa34bc455

    SHA256

    2532b05727bf9fb6b7c82681b1f94d4e8d0ca054c1ec6f16fdf8afafde4c15e9

    SHA512

    00e17b7fe0dbe39e884f42e8b8242f56cdbffad9532bcc17dc968a99e4f8b26eaf2c2736d9686789025aa886d67cb61e43232777c9a3b6ed93802559124e4f49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0a1e111bd5d9e2813753a282de0c919

    SHA1

    9f53eb23c48c07703065dfe8c193052762c34cf3

    SHA256

    70648107e7443960d723b04fbe0263871506c373e60f24ae17d4afca8f6e7365

    SHA512

    1fb9e90fb9f0d766bb96b68568dd6582fb24fcb86b3f0a4a1e82829e47ce1b73b704ec1e405459a153dac95bd65f312c1d9ddcba113831c19ce96ba8f000ed33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29c12f936072bf9e6a647dfe182ed355

    SHA1

    8aff56e700de6ca9e8216005123a6cd738fc46f1

    SHA256

    ccaafe5f7ce4c20d93693f1306b765fb73c7aea5b2dc96f3c34e0515d7055042

    SHA512

    0983a2a9f7b7d44feccf5dddd3a493f6e4401734b804c082e31ba1ce2a1e37bba3892a406b123d1d069e2fed93bad701581a0b71bdf4259f554c27140550e543

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a33d7713b5ac05fabcc28b11cf1c3d67

    SHA1

    eab691bf8152239896ec5e1101bde5a7c916bde8

    SHA256

    6b7911ab9c386bf964d4f59fc7e70370e8a318daf299a3a692b16b0253ab7c76

    SHA512

    980ef25d8ce870201fbf3357f45bd223a725f71eeeaa477c9e7c9d25d391d40c0bb4b7d8f16a0f6f78b61db390d5737ff28b17b6304a77d6dfdc9d83c93f9e0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35c58c9df111474dce1afaf5c38ef9d7

    SHA1

    4e29a5b8c7be764a36a18e009336e16a8996c8d9

    SHA256

    2aab9d084e05e3dff78999de1dfb88444a0b1db9bd7179345108333bbe664e9d

    SHA512

    dd0f938bd8874de2a6bf1b26a44f059d578c2442cd8075261963f93eb81498e7ae15425b1e2e2311e5402f582be1c43b0777b7a03776ae193410267fe0de2f02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7421bf7f0924e38ea68ea88993186555

    SHA1

    c9a45d6404e8c7cd236f6b86379eebd18749671f

    SHA256

    4592c5d6973f2086ad05f7c4ebcd45ec8ee654391d589fbeab3eb40ebe596b0b

    SHA512

    d4ae961b51596a50bba12258fcdeab15d0496c4a6c5a6c699fc01ca874352f0c0eaad7ad9923a73e3ed15814d4653f02e853e8503b242e3953fe543e3c233208

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76d673a9e2f45be0f74a2fd415cc7823

    SHA1

    1dbaba1acf2e8f3ee469434c714f121b19e23502

    SHA256

    f20f72b1ff181da572d39927bd0485603ccb165fffece1cad618a338957d5ca0

    SHA512

    746cc13e1cb739a15873f9173885c8c1417aa947fd4b99263ba0bfd4f54ebfd52f3ec8fc548bd8d4222a198578e1c8f544f3c531408e9c5c6c58d089a98f4812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3892770300c7048695822cc0d528a7cd

    SHA1

    4653b7a0e615a928af17ed501c1729d75480691b

    SHA256

    b155480878789d3cd9827413ce87ba598d1be3c3218b14430bdccb048807e7e5

    SHA512

    07f0fb841a20e975467ffec858f683b69f076000d3243d3c818949522b42a3c0efe1fcccd201df28078140fa1dcc1b623706992e0a1a88627720e4ac6c9c2538

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a31e831ea27dbe4a3fee0ee70177799

    SHA1

    abbb2a1ddf08e02feead53f94d4749a025561f41

    SHA256

    dc80765ad8c8a3226c5256cd927dfcd5767776fe9e189d64f7c11b8521b2bea3

    SHA512

    d66d3d47a0df0318add164ce39523dc6b67448110a42feff6f2f1d2571e61e2e83e4263a0fe15c9a3aa6180fbcb4ee747f9d23b884f01595c9d50972b256e3e8

  • C:\Users\Admin\AppData\Local\Temp\Cab365F.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar36B0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a