Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 21:53

General

  • Target

    68c2a4b14d0239a3d7c440f3e1bdbb22_JaffaCakes118.html

  • Size

    681B

  • MD5

    68c2a4b14d0239a3d7c440f3e1bdbb22

  • SHA1

    738419ddd58841c5f1b3785886c62d0aa2027322

  • SHA256

    8a078e48ceb33829950c63e07a45d2550434e5ccd4c68957d09313c69b728f27

  • SHA512

    d0ced062788b654e8912720c1c3fb6fbc1eb2c510a7b4baeaf7957f46ca4c30d907be70d92e561a51fc26d915384aa5cc3e95d083d6f51ba0aa1f58ed65cb555

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\68c2a4b14d0239a3d7c440f3e1bdbb22_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2208
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2208 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2556

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c62335f5b18a9e819939064612a197a

    SHA1

    f806405ec1a8b6f9fdacfe07cfc6acf22781fef2

    SHA256

    8145fd00821fa6cd4c941818f04d614b28381efb068eb026426679a0f8ab4230

    SHA512

    b97f2f82c5fb3af3966e6afa3cc92fb76579e52a5ecb456af666ce26cb255a522eeddcbb7941a10c6f8948c18eb9d2685c6d561290f8433ed1824bac461fe4f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    51550ee4210b2c2b72b3cd3d2a3c31a1

    SHA1

    eba2a1cf4404209cb2f7bc19c3751587eb54a584

    SHA256

    decd2171cca4025bc66e469d26ba3186b175f3a8ee8b0ad31faa1bb017a2e5f0

    SHA512

    14ff2652696e08950f88a9d34c74742d05e9869898fe6a7111835e8dd0812bcf83b1062737f996ea4b99555eb0635d22c34ad23063b2eb865d2bcac910981fec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b920cc9f007a24377c038437828458e

    SHA1

    981575688f161fc4bad2acbdad3a5ea9cdfb02c8

    SHA256

    5f0a0e2943ac0c9546d0f5da81236b600d6e672b60c881621749f645faffd142

    SHA512

    96b0b07766b6019c321eaa805733499ce493ebfc691e406e028320462ca5f87617b15c5cf240f64da1896509983d3ee6c948bbea7f44fc5667b18bec4a545f96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4b2a64106881ff18f8448e9dabb867ae

    SHA1

    cebe7f7c6ef892d8150a30307236f1f19ddaf2f2

    SHA256

    757fb4003e7d3a634b673a05bb4d94dcfbd28728324de26e7f78980f136ee01d

    SHA512

    18862a498c8d289f91ad3137dbdfff4ebb701c57095ac462caffee32d86533438aa5d8b4a93001958f1b5589d78e0f17269226242eef6f9898ba428a9b34b6a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83eadb7445b7f678b887c7b66289c0de

    SHA1

    69dba87771b7048c260603b5d57c8228d97b0806

    SHA256

    fde078c581e0b02d7a621b7671d75e2e55fcffa24b959a15924fe75a36ddf790

    SHA512

    04f7d861fa07bd592eb0307d36e3d129c32917f9464ab7e4e7d6be12a17a3a21d8ea39c651b5dba17858adb1f0c5757acf0f596fc68a425881cac608e2c70ad7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5efc8a023684d7ce643fecff5711c4a6

    SHA1

    143a7b7a29e3d5cd0bf793e01ae514686abc27d3

    SHA256

    7021504508b5e5b371188c2cc695f8e533a9bd8b2989416c4c55abcedb066687

    SHA512

    3dad6ea7725ecb1617f0b65eedff7535036ff8a3e38fdb80b2b831d23e4cc6740342d6a29d1332eb80e85e3a9f6531eaf966ac536209f48868b44bafbaed55fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    048a4b72e4c22099e7acd2d83b9b1a5a

    SHA1

    8512a07bc805a2aed7cabd24b35b2d4008f507db

    SHA256

    a8190678e5765887ac39380ddcf2656a62c49d51958287aa34acaa9ec35387bc

    SHA512

    b9b226943bb0d48acc99df8e746233318f6de258729a137bb916ea6d39b84e0ea58ce2bf69800dca37e579d8abe28bebff19af01b975b1f9549492d5a8a0873f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1151c580fe41daf65e353f85e33cd93

    SHA1

    93d9d8674b69f680101841c19ad343c3af94b455

    SHA256

    4c7879e867919501dba4e5d5e0f001cdd08be6345e026282fa492c4af3531bec

    SHA512

    97a2d8d95a470d123434beaf14740d42da27116eaf65e18a568e153f44b555747e56f1b1e80ce2c283fdecf6555ed3ffaec1596af429342a7849783cafc83c61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25d60f2a2658f377208cb81b03cceb05

    SHA1

    925b0fdb998f548c9325104d249858af94955948

    SHA256

    7acc0a42219db205843060a87e5979b63057eeff443e221256e031408fa3b09c

    SHA512

    a3a7c71f1dc6b054870339929a97c818a207d985b2d834b41452a5e87563e08b458e817301a4f1f4aba64fa30c278312913a070caa0db951e6af0687ef6b20fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5496b5002b3dbe661c847ce1d9c802ab

    SHA1

    5d1429746931c51243c9d6dc58fe9d2f716b2ce7

    SHA256

    6aca7f9572d5b399a6e5239ef17b29a542a4a427783aa82f1ec6492fc6788276

    SHA512

    67d1f3d3d50b86b0b83bc7491a8d05a93448fe20b4ee6b6be8970ea6bc81dc6b5a4d2d3cb9da490d691aedcbd714186d525e4ab6ebd1c2cb3ea4a21fbef262c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4e01fd02c6768ea7a86553eb17d7912

    SHA1

    912cb84fecf2471dbeaa4f5213fdcfe836e45c8d

    SHA256

    47d1bbd11ec75f3f4205a212c54ccd91858554201122bf9e689c29173e070ad6

    SHA512

    71fe98b8bf3097d52248ff8e7873a47ffa877b11bc95305fd1938896839b6a2c8e76648d14e70a2eec13d56be7b03326560416b6dc1096e4eccfdad30e641835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aeee31258cc37c4a33e3cad82173a769

    SHA1

    1e35d729335c7aa7b61b6c875c68972b242d7df1

    SHA256

    e246fcc0eea6f8a798649a235589203e2113a37bfce1ff626e52d5171003edc1

    SHA512

    9a5cba0898a455dbf77e13d9946f7f44e134257c958c2965a6b3163248a870e0143d3fffd30a113cff64ac0c37a526ae14d002cf642a6907ce4d9f8a9cc1f85e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cf20fea5a26eaa2f5d4e65dcc0ce7fd1

    SHA1

    e810d096cccfe673a68292273487061164f313fb

    SHA256

    b9c65e8c867fb6b1085f0861d0d5d95b6250fba6c0729af1de995f92f229da25

    SHA512

    93d60fb919722c8d9c21d8a1cdf0d44e5ff6c26158de93a195da1bbe0eb8794b70551b1f37540cea3ce0f2b096d646ae204f560dd1d10ff92a9eb7078dcdf08d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a8cb8f8e00937e73662d8012a4cd8a4

    SHA1

    b014c1f4778db3e282d99b14b7b0baf41d7a6d5c

    SHA256

    214bc4a3bce873f9f229a81743592c25cd00fb5cbb512a8d90198590478c6dd1

    SHA512

    dc0863915635460376f09db49ff8d8e91e41d869a5c42fedd3d1c922bfbc529520243604e22f2949c918cb056771d2ddedb00fd1f1463d7072f4341bec7b4d00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28c60c7466bfab96aa47d33fccfa5f92

    SHA1

    cf8d3dc717472fbe6a444578a37107406170b1f8

    SHA256

    ee9b490737cbe287ae63f6a154d008466cd78ff7f75144bddb21e9f21e52f584

    SHA512

    13d095db130ef9298b43a743f16d1372f96422997ca4a89ec50b1b0b8c60ce3eac4427a2cdd346bcd53c93d90469f3a6aaee6075d92819b814f8281b8c862058

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30aeb17daf247c7923c071ef6bf6d8ed

    SHA1

    701840397e11683bd161e74d944df4a0c1fbc1a1

    SHA256

    ca709064d6c145993b0cae47752399f49130337de602a589481bbf2e63abc3db

    SHA512

    7c3f77a5308498cce210efac3960586f20322fd423a0ca58fcc2187c055f3aa0699cb2113afdacb5122568a5804131a166c639aefbb29876531b8eb2ff11fe01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa6debb3084b7d8ec3ca60d947b1e548

    SHA1

    bfce789ea62ef951d47e1b158ce35cbad24aafa1

    SHA256

    603e2e7de719e09b654f7c44a496750aeac8f16e2e2ad643cebe325c47949887

    SHA512

    8867d17bb081757ce4285be92cb2c8852b9456c2ec19f0b7a775354611ef847d7c8082acffca37b2f0d3988afc7b5c81a9dcf01bbc213651fd11ba38aef7269a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3510709d783a923b253ab4bd4c3ed26

    SHA1

    1cbc648f90abea0acc93e862b738b3dea8e7e4bb

    SHA256

    450f66fe3622653eea963cef8f4debd2dba49d98ed156ed8e3cdaa797337b2d6

    SHA512

    dac39f06dc771ee01833f5373d68d384efb847264ea8cbfeb36d94cce21a9f41f74b52d30169035300fdbc2682cf98c926305f7909d16f266623c320cf8e4970

  • C:\Users\Admin\AppData\Local\Temp\Cab35A4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3614.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a