Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 10:31

General

  • Target

    45c12c963dc2dac942ad2d9ec52760fb_JaffaCakes118.html

  • Size

    3KB

  • MD5

    45c12c963dc2dac942ad2d9ec52760fb

  • SHA1

    26f5331f95c61ab9a4b5ef42dc66a43021b42511

  • SHA256

    dc3c35ad752787f4e585ced2413811e0df331e3c77c3837fc5cc235c71a4e396

  • SHA512

    442554239905aba3e17cf035830796ea7bf4a171fa6cc414bf3d16b0a1191f90dfe9377c3a7aadb12d12ed4ca2d6a3590ac5760b2df8a2755bc64faad1516b9b

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45c12c963dc2dac942ad2d9ec52760fb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29e7b76f493e9785391ba3cc19908427

    SHA1

    65fe8ca47e2dc4808d4d026629f920b9348276ee

    SHA256

    5e176c84fb77b1cd020b47d3f123368ae0c82621a197fc3a741b98c1234170b9

    SHA512

    14d7f2e0bab5de22f4ef4c1428903b3062bcf00cde0b37d160db23b3475db95ea5c2ea084211f9ff5b95c172c1191e93cc9b35872bcd5f68b5164f886d3a9ce8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e0c66b426a6ceb74b8c45cae056779b

    SHA1

    85d8f85591c8c35f4ae4570566ed6ad90dd18f09

    SHA256

    60704a3be5b3bc009d84032fa26f9e5b7f0a55e7221b5d891510a33ea3158ee4

    SHA512

    e68d5842bcc047c620eda8c727480416ab5e7bb47a42ad4bcd1dda67fe7f520ebaa376fe484cc853654fb9717a6243fe8a0c31934cc880f444662fe5ba7b72c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7ed135fd34fd61875a07dd842104e70

    SHA1

    d5cd58eb87b8178ca80f2131fcacd82ebfa14925

    SHA256

    d9b37ea8295047366d59fd181af8db6280e40c2b111f7bb046163332a52bc96e

    SHA512

    180a05ce6e9e00971f73e241c878cf4c8d96c40ebb55fcbc8f5f86fdead203ecd0f2c0266baf1b12fc5c9c79697f4100913b0b0cb46ba53ddc051221e5bba948

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d755af166179a759ca4c52264eac7b2

    SHA1

    f22be00b64841ae4ac7276c3ef5cce36611d31f9

    SHA256

    3afeffc31ef9ec7b9cbc40930772944daeb66dcf15d199b550864a64394557b6

    SHA512

    98330a80d5b8283e6c2e9ddb0d520cec92c8563a4eff6f01207d54f1b19e82bc4791459da79a6a640376a8c6cd990859f5a6ac6d33b5b5ef7df3ced0e1794a4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a1afaa0c517ff5c2fbc12e1bef6921c

    SHA1

    da5ecaf3170d4aa8d34ed9fb3c330e6c170a671d

    SHA256

    207d07c7e0be7e22489bb05bdf187c3ca1b9dc92005c7ee81ef5528f575f1a17

    SHA512

    c63ca71b66ce6ff30385e90e2c7523595eccd5b805ad6bef003c773829281eba3de2385cb0517499f53b5371ae324e969379a2cb55ad74e8624b046990aabe2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c55d225953b09ab4e4167f4d5645126

    SHA1

    1dda1dbf4b5be296d3d50be84b6f9b0958563f15

    SHA256

    a7efc62e1f866d40a0df43b12c8a7e90dc33ed1ab526e7201a7bf934e2533381

    SHA512

    6ef4ca0f878ebbec0add0a5e8ad9c4c9c8da600db2eb0df3bac141dcf5571c263d0c616e61a0a358664036e8ab6be70bf98734ab093fee47992e17e5726bd27b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6157ad08d05e6558e9e7f68d90ba45c9

    SHA1

    29be253675bdd9594024c2ef8fd81e397d2444e5

    SHA256

    286a18c3ecf18b33cc6725996c3ded0133d7565f46acd80fcfb87ed24b06f837

    SHA512

    27341028c9d00b01265f2f75d91ec10560cf91059594c444919e0e5677a1c63935458489a9de8f6e7bd282bf3726f1ce5a7efee44aca0dc1130a13e76778e0e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ee947f06cc20e451938517aa7e22ffc

    SHA1

    9793485d9cc923550cea77f9cc5f9f62af054ff5

    SHA256

    cc133adaa1b0565015dc4b39155745757ba22c3dd775b243897cd4105e3f9dbc

    SHA512

    f9598cd6ad3554301ac4b57bdfdc5c60e667efbcf1f3ba3f34b9e603fc5c5af73ec5f2ba327410f2982d201f6a6ec4a8680e27c18244372415c7e2f55e37f320

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fe7df704766cffdd813ffd53d04c218

    SHA1

    766b718608605b9e325fc7efa03e30ade610be14

    SHA256

    e49d832b615e926090a3dede2795614fa762821f74f67821b1e52d0c296cd23a

    SHA512

    3e6c639e6e898d0586aac2957593c9b4527126cf6cdb7827362944245ad3fb268f5c9365cbb5d5079a6a0a1ba1c0c348df4e38babf6162b6442c197630c39466

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    263b0aa90f01f713b64c2b3524e4ab7f

    SHA1

    d83c5cfc0420213605640a7e544efd8f20e73014

    SHA256

    3b38dc43ecfe0c430be314fa5e1a7ae9392dc781cc51579eadb827e94518b8ab

    SHA512

    17b5c9402db77f8170a14949011c483813605111dfea2937ec35d3e7a3016492d1d5c51df90d2a8c8e81582a6507e83f1438c9d8462bfb7edc2198d6d47da740

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a98a422657aee7d6472eaed820958205

    SHA1

    173ddf1a91f93a30039706c52379d9ecc83356ca

    SHA256

    904c98d60b8ce9ae4973a5f4d546c3b644bc2992852263c834a925d2e4b916cc

    SHA512

    69a069f4509f5cb5697a697140b78e5449bc174cddc408c0e9f44432056bce505246b5050e40c3873eb8524dd722093f7f4bd54df8d3f44fa3ddce7374c74353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d3e8fe01afbaf7289bda8d14f343c7ff

    SHA1

    d1d7193cd76058fcbd4b7141a0651dcaad3a415b

    SHA256

    02fc1043504a47200143205a42ecf5d7aba087e564adcbced8dc3ef4a63bc828

    SHA512

    073fea1e513a217f55da0c7a133221728ab15e2dcb2e303bdf9a15b63cdb9f74978cb077e32481b4c47cd6f3c3e5190c8647619c3130978b4a6cc9ff534a064e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a43bb2e36d5ff3de8a6e9d8407f516b

    SHA1

    a323110da9c9879899a49bb8649eb5cf4018c661

    SHA256

    f83632088feffb77e4b7c9c48d3c6e37ec50c978edf8d8e1bc254e561d090a23

    SHA512

    5f15eaa92f940cfdd78e6c9343a12fbdedd0a007cf3bdd0f74370d404305941ea38b80c4224a2737e043f7eb8d5570e9e8a6b8758078b7d5d04ffc7b4b11e675

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    acfa109d6110b19d40521b83ac8e7ae6

    SHA1

    1e97866fe056d2ffc5faca599f99a579b47e7b04

    SHA256

    50c625f7b05bd0811ad1d9c4b766543f8ed80175775cc534a2aae702e08dc0b0

    SHA512

    535cdbfd0f869be237b488d0f333e6e7a8e726e6bca67950da1810d35c043dc09d2445050971e8022f267dba38070b0c4fa55c89e75c9d2c9c9b3f4ccec6effd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    077c0069b236dc73846c410622607a3b

    SHA1

    176e8908883947bfb3cb904e1e0cfc809f085a59

    SHA256

    93edb33ed879ac06bc9d0a44188e2e2147c42657d301c82cea7fdb0a62a1ebff

    SHA512

    125793b3b984a7c721835c6d94feb1e1b6a8eef0d26e2a2a53b51265e6951fae3dfad0d47cb6336515c313292d5c1eeb212b72388bc7cbb8a5e2d7d0c1983abd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87f3c67ec3609dd97dcb8ee01d9db765

    SHA1

    a30147f09b359f7d611a8a1837c2cc6b308f7ac7

    SHA256

    1ce10b47d04252e9b1a292ba52c5227f5928510fdbb7100ec761578af35ad591

    SHA512

    30ad9dbb19ff4caeac5ab8b0cbecdcaccfd901494da30746921e656c1fca37f9373567c98619774cd91ff4e638532f22b66e17b35bbd288c1537a87d25603d55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aad662744cdd123c7352f11e1b929b59

    SHA1

    b2ba394322b9dcb54ead4a2e8f18ae65e52c1794

    SHA256

    11104b4d2fa4bec1465ab631b3d2e0647b218eede95279f6496110a9224048fa

    SHA512

    e79dd3993b81a56e037a2a8694b4a55d17d98b0e6f0804f67a755b57ebb3493a06d059ae4e2e0a5976e128f6e6d71f0906a9bf523dcdf264370e896501516f37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65200d23e44c4c26cd7617bbae155da5

    SHA1

    dddb9a2e48df0ab6b635f5c2c751e81b6d89243f

    SHA256

    5aac09e8c80b845325f6579056f147e82db1d837960c7af644e11d62281faeb4

    SHA512

    3d2b249748c7be266a996165a13bc8d49dfdf3720b2f3e00684ad21ca91223a9b35a57cb36d89e6b9e5ef68bee985235c61cede7ac807f55960d59da9f500485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b33334bdb114c08e5b3371b369d01f8

    SHA1

    26504bd55fa6e43c7f8fe5bca4dec93ce7cdb748

    SHA256

    2250bf2848b2f3089c579cf5c2bfea1ae918e9370b2dfd787fc9ca960482a501

    SHA512

    e66af2f2b67ff1c6f1a55ba914d146fd0cee497d063c2ac9f051ced1a5a5ff950d8bbf939e96000ffa7dcf3d36d8b251d8f5cb120b6116a2b34f3f6b2b5b0946

  • C:\Users\Admin\AppData\Local\Temp\Cab3527.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3588.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a