Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 20:26

General

  • Target

    47e2ee5fb19c4eebdebaf30ce195daef_JaffaCakes118.html

  • Size

    848B

  • MD5

    47e2ee5fb19c4eebdebaf30ce195daef

  • SHA1

    0dc200df574a96f2ba048689408449bb2b49790b

  • SHA256

    82e1a5fb51a4d2639a2e300685db950530e3edec7d899c13c83c264778fcecc6

  • SHA512

    3e7c77735ef52ad13bc4978684a161706dbb2bf44e4f7bc8e4baa1220c3831a49743044bc4e84fb881aa38d6079a65eda3eb13b1fdfde017398632e6c43fb5bf

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\47e2ee5fb19c4eebdebaf30ce195daef_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2852
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2852 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2172

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1591b051c3f7cc411acd19492f7f2584

    SHA1

    3bf376b13f7c8de65d239a410636dafba3006b13

    SHA256

    cb82153287e86ff35a40d0d7f9d0c3c78ad2dc56c70353570caebe1e0e428623

    SHA512

    8a74e42ae9de4fe2db9dfeead9ba8a0743ac725c5a4beb158c284ead3bf4a70428bf1b278a3d355528028c411a7b6c480c9524e9351a2e6926aa1b4d45b1a5a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f9fcbacb83a7de32538159900fcc367

    SHA1

    9ca2b529e189c8293f351684d74be2faae7ef6b2

    SHA256

    d1b44d82337bd12095797666a95d17d0848b4a85e5431f15cb02188bcfbf7e10

    SHA512

    747d83f300b24cbf8cbfc0d3b71e717f1c5da6d92e5d058aa7b9c940d9de2c1d13d84592b28d646071f70bab8f87120e5e012009260cc46045ad0fe281d8962f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7438712dff81ff575bbd91339789b7b7

    SHA1

    eab447cbd481ffe3863f4fe117af5cc2bdaa9d63

    SHA256

    1713f0e3c08f98bdf7785683dec05e79991624cedd6ed6546dd904b19a51054e

    SHA512

    4272a8426c5c847dfd857b82f91a7973d6577ebfb6d696b3613222ef3c7d51d8160218b45c7b2bf741f0b3f0b65ded2fed08c7d912c7d2592234e08b0fa3c5bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d6ec2129a76b8f6a28736f4ab831214

    SHA1

    863fe931ac9ba551b6b6db0ee739a60ba6734778

    SHA256

    bcd49f33dfebdfa200478bd66186b82363bd8e94bee5db09319303886946f88b

    SHA512

    f1c519540b8ec88972429836ca0b32dba8cff05f86f4d767116306df718c01f7bee5fb10c278bb70641b8697a8166b340b1c378cc5de59c94c8767cd08be8202

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48cb570c0fdfb479b5a4aebb2e01642f

    SHA1

    ef4e80321e44d177bc11b7e89b64ca81b40c660d

    SHA256

    3741b48a4d7194f9d2cd78eda8b7c8215e948b4d6d3ba2e3b7a8615f07177dc8

    SHA512

    fa20b09f54c4b4ad98963dc3e78ca2ff8f18c9c94aca7de27b066907d840fb9b5597a15c22ce45296aae66620b5f22146ba93f68a14531be553c10730c844c05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cfa56d9179fd419b5bf92d5981869201

    SHA1

    131907afd133014c5fab0116f0fa89cb83504f15

    SHA256

    f40469c22535f376d5d9e599276b756506f2a47cde5ada153daf26f64b33fd48

    SHA512

    c9fe4435dedb1d7b7c748738ce03451ea5ad6a52f5acc4c0b275bfa86e217452005db9cb578393040073ff968fce22090c26f38d970f41bbbdde8d7d23ec0838

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9cd48f752bf28c7f9b358751bf2b058

    SHA1

    53182d71de3c682b5612c9a5c09b84a1eeacec51

    SHA256

    35d3442375d986f53967c9eb36ef3961a69f958c8f1eb8673cf0de7102792269

    SHA512

    0a8498ab68ff53e0f44ea854a0f6d287019987c944cb62157dc7618b98aa26420c43b44032a8d0419495121559e09551e0f8c316fe7208c7cfed451e75e49d54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cdddc822094900794081d6933c6f7504

    SHA1

    7052fd09b0e4abf1a4f02d00e0d475f99dd57321

    SHA256

    91e2c2d6ba9e4818443f4f1a6b479e4fa53b2d1b5c79ee3b95122f3152db8726

    SHA512

    6ac626acb455b72b04fd46f1b899352c663a3afe52ff99ddcfd06bfeeca6d50d591169d77e6514f3055c2f05f716b10dabef6d47b1fa139e1aed177496440a5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f43568acc5cf71d3fa4f1e991db9adbf

    SHA1

    544bf68ed82eb58dee97c8fd5960e8366391bc8b

    SHA256

    21192ca65d9d21f0c6a3e575765926c9ff666d29271b48422b5ff9ec1a6126af

    SHA512

    51e9247774915395e930850114d1ff8b12fd1a34894bd9aa436857ac0aaf9ae46beeab99753996faf4f3a3af2fec2358c735da69ad1719a500862dbdb8c903f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3f0a0b01813119a9f8b139a577455b7

    SHA1

    d344997ea5d2ebab4746d31eb07446c9c73526f3

    SHA256

    56f3135e50b1d2290c6a561d3f24fae5f4f467da9290fd2a530e3779e75da053

    SHA512

    9db0ff1c32f69b04f554be6b7ea1804ecfbd48a9bdbf31dc68d162f9a72b1cb7955c20d7032aa792df59aa411a14e80f05e5096a1148498cfea17ebf30333121

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d8b8e650aac2d15a674654d19d1d312

    SHA1

    87decf3bd4bee34b6a4ebd702e779cfec93ed0f0

    SHA256

    d7e233ca4dfeb67feae8e1e2bfff3bd1fbd896ba77d1ce68958d8e3f6761f5ad

    SHA512

    4a10e2b4b744f374e5c3b145f5ba532e0512f2cebcafc8df83106f9e0d183f5c612d00cccdf4a323be142b5164096e94762341b87a47090f2b62b1f4139f8752

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b471dff367a9b18b5c941efaa8e7ddde

    SHA1

    d12a3359b7ca1105c3dad7fd23f94b4a547da445

    SHA256

    ce5d1be6ebc1fd14625ad65aee4f790708c600a8388a7cee3d7a978ebfe5449f

    SHA512

    41c5a09f7ee68cb9125c002d78c69d9264cab0947b764760066ca5d10b253b77fa409e640ecf15f686b0ad09251e8dcf0fc8935e47b4c817d28f92cff6f23c0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c6bc643db7e680b42d8f4c949845d10

    SHA1

    9203fb78f5183a1166325f0cc8e367db657b6511

    SHA256

    c73cc12315306e50d0b3cff8aee098ee5e76b9f2abc390df416a1b607a159d27

    SHA512

    e0472d46f83ebebe5b6b3d02fcf70a57d1c2f7caac887f7d065f479e5ad3e98cc58b2cdf5ae0cd4ddcdfbd31ddaba7307ddd6b526db68dc285ee812a780af8d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cdd764db06969b227190ba997259329

    SHA1

    2f60c449d2f8360c68b83334566c0fec8268bd13

    SHA256

    e407f177d63474286047444604d749d2f58c32d14d494c15b563aead23eb9868

    SHA512

    8a67ae9764f0fa58150cf955be62fd4b0c4138d93c42a4b3adc9247aab4029a6361345cda2fde72afb1707ad0e2415c60559236d1e0e7e185559a7fb42af397d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bd8030ecdb4b49343c1f1e231a808694

    SHA1

    57a479a740a000ce043ac3fdab16fe000ac07fbb

    SHA256

    6e9abe0a80c342fef867e670d55b79d2c5791f8464ed681bafc494484c9e720a

    SHA512

    7bd9aa034bac47959d5900afebff7d7cf3fed50bc1097b3a88a32665da4e9aa8e656e90df42e2b6b708f56330676b22ea27c5c392e38fdebae2e8c659fb53726

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    202b498fd66d2089a894a7305845d09b

    SHA1

    4e3cac0518d3b0e5befec7910359ecda17f3366a

    SHA256

    50d480350fee07baa19a7b2271f77f50a980997ffca3b315c5d83bcce15da61b

    SHA512

    3cf5152329715a2ffcd46ba1ce71cb45e70b01a91755ef4fc9821ea08a0bc88790aa2823631336cd8a98e9bc40cdd32b06126a3f0586afa92ee028ee5dc45cbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7083ab3114cd5200102f5a74862c7aa0

    SHA1

    ce86324442e9e859d5d6b0f242522066d82ce8f7

    SHA256

    c3eefa83eb3ab4692f40a7c4b5d9892674ec4a6a7ffea77c2dbc68d46ba95e0b

    SHA512

    d993ec4ddc0f800b0dc2b7b6ad74cbeb049c7d27c658f12b3cdf271a35c0f2294058250109d026ab5bfb3c8a78b50906111fdd95f73220a19d4de02c42475b95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2914b22fd9e5136f8cce1a347376c9f6

    SHA1

    81a346e01bbcf06fb3633521dbb2bc70c5d87b29

    SHA256

    22db2d65571b487fa2a7fa7fa7b033ee24a74be6ef9ebd5277fa1db80a403646

    SHA512

    9652df4c371da53603760fa3cd0c1e3841544ea3dd6e1204d10a48dd5baa8957c6ae12775013cc6effdbb796987685e8d6968e5f54bf2d8b31f59b8739e5e4e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40d2ed27652c3f2d00983bd7b40bedbf

    SHA1

    25d84a1f498b4fbe29064b2825eab4c5c662d8e4

    SHA256

    9269a03fd3e90657443762fe70e132a694c5264ababdffd57fab4408dc251c8a

    SHA512

    d72c018417e11c927ef9cdcc26e375ff8d0756ae0ebd77ab5b88472f9970623c280f9cd74dad20f5ccc08469573e09c8d3a967820920d015dca429720af83ac3

  • C:\Users\Admin\AppData\Local\Temp\Cab3E98.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3F6B.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a