Analysis

  • max time kernel
    133s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 01:13

General

  • Target

    69408c99725d83caf7bdbbb1d63cddb7_JaffaCakes118.html

  • Size

    911B

  • MD5

    69408c99725d83caf7bdbbb1d63cddb7

  • SHA1

    bda61b9a1827d73c045a1dbc4789abac3197a9e5

  • SHA256

    9c31bc7f1281dd9a8a82878da03167cc63368433ab834cd22b22c2dad7dcd882

  • SHA512

    ddf83802cc9abc42296b75bba41e1b5da50e5729b7fb6a2002106427277e01e54edb7a09c6ee0e98670e45dfba460d2ecfc743a9b3fdf181a4c998d56512e3be

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\69408c99725d83caf7bdbbb1d63cddb7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8dc8c52fcdedc0bd5fffbd2ae4ee0371

    SHA1

    b1b7395ddf4036f9f0c5ea7f485d632d065b4cfa

    SHA256

    abd4088387ec7a861f7fdeeeb4845fa3c590abae6293780a69a0ab68c0f67538

    SHA512

    0ab86f9577c9e8d1c4d076149ded3d84a58276c33076fd986c3abcc89026907cb01a18e8a1c55dd13708f4db87d86badf3ca3031fa01a8e8cec9de65801b6205

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7c813b2d358fb7c76e19ccfaa9259a3

    SHA1

    a8b6df52a44c9f8c51a245dd6b5cd31ccb0bcf01

    SHA256

    81ffd0ca0aa61c3ee4149a4d1712b466c6ec9afedd6b9a97ac9d456fb4e11769

    SHA512

    b73c4562e92de2987863d6322a08467ef14d48ef0e01573acf2fe6934a9f997de82fb99419b01e7e5f90cb7a0e795cdb22d525ac9c1d090575afd84d066b0ac6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c86d28173f9524035044b1d2327bb359

    SHA1

    c59604a0bc66a4856057e3a61404d2f5f2e8bfd9

    SHA256

    a4ab583a5dcb06eb3185348fa51d5a826ed4ab9cbd52167012639e411c5203ee

    SHA512

    22c329c1ac8f1ea90d4b045311098de74374f7a70055aebf44ec0a7132e78a693515af6bb6e936ccc5fc16e79d65521560fc8fe7a40ef8eac2fc4889e44f591c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    af18f3c1e5436326b316e175d78bf9ee

    SHA1

    f1db2fc6be78443886d90b203242b0e204e1f76a

    SHA256

    4d1d28f1f681cbd3dd89c79213bc5e14f62f88fd3b4050e344e93a664dc114b8

    SHA512

    cf6301b8a1e0faba719c4a993a2589382befc477131e58f2a8d1e4177e34fbb6730e5e5184a2039ce10087f7ecb5964f6117eddf5c1d0303e060c4bd4c0b6955

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe3e8597416ffc5c41fd41aacc5e75f1

    SHA1

    adb897ef6b292c55fe0294fff087912276196ab6

    SHA256

    ef74cc579e9fa1f0f9baa44514ca4c505d07c339a89d138061bbcdaa2b944091

    SHA512

    c0abfdcc90788f48f5aa72e22b2226d3a2cbf0b27043ecbe47924edc8697ef2e216848dc862218cb6a8120d78ceb565a388831d7bb114b316cb61584bc19c823

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e5ecf4471f875208a062906759aefd8

    SHA1

    6a15ddfbf70bff44907884fa09fbb0b67cdcc7b5

    SHA256

    e36bee279e9758ee3dc3c6d76c2af865c4913f3baeb469bfed646b580a1c5bec

    SHA512

    fc8e8f22513a3e9ca5b79e9be3880b4d2b86a16fb1feb2edb26673bbba3eb5c6821a7250a36a139bee279ad0aebd9645db8f87f5599daae6b9965f814a7c52a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    deec15271e759ef76a17ebaf80541fdf

    SHA1

    877c8ff2858cdb9300e1130fe2ddb84171be3271

    SHA256

    9426a1a237e698dcfffd9c3107cde388eee9d238c250a4c8da11bef991792cde

    SHA512

    701214e34cc9d06927bcba9051fb860252a01d1464474a37afff184627147a6aff6ee99baf8efdc94b93d911345b9b1856d0339ea8acf301e71610a006240371

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3765f39b0c7248f251a96c3715ff54b4

    SHA1

    4c5b204b744631502e85ca1b3a0a828118dc57e2

    SHA256

    e00953f5d33916852accef80adf968e2af13dd7862c21f4cf2a1c4cbbfa8623b

    SHA512

    5e9374449b8bb2d14c558905af0f6994479207ee2f0a0f8fd10c33a0295bda9831289e5895d4a492fde9e162ef5a81acccb8ec7544e540cb3773707e1f7e0a1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99a7bb8caa11b2e66969c67a6ac73744

    SHA1

    c776bd3f447b67d02b695180b1d886237d237d22

    SHA256

    d7c1e5c8e8d56302fd09f2332e21245d832d081d39bf7b73f348651cc9ba7b5b

    SHA512

    ad10de18046cef073eb0ac7edc39aca940e4ca6f2f019ac898f90a58a7153e4aeab49fcb92a204f2fadf7358a83ca353d7d1687dcd8c85e2eb6de3b4d79e994b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    082536cf95108d6c5abc6096bd85a3a1

    SHA1

    40781bac2873b2514c92d23935e776d97dc95d8d

    SHA256

    87cbbf394eec5b830a4ea71fcc159e4c26a4f8132ab5686ebbba270e11d8983d

    SHA512

    91b3f4faafc55f4d3ea5053dffb24127b36b21f2789ffaa4301c1e241b395975a4be25d96db5a3c0bcdaaf68f692286d95c291b2032b5dc786a25a820ed03848

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8a2b9e7f832ccdfad876ca91a142275

    SHA1

    f8f6f1d007f3a9a35f846cf6d7ee564b287c0bed

    SHA256

    870f9e1e99ba5a70ea067613738057fdcc5149a23cb5e3a95ee258da6c58fbd6

    SHA512

    8d1071b097958f00bc180e93e75d52c543b4db96457056b3af295eeecf9bbd10eeaffb96befbe5c12214fbfd77ea07ea32720d0d2a3c7abb57ee5e44dee8ad6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    26ca7d07e84ca73dd75a1307fd42401a

    SHA1

    80853dbf30486803f8d0950d33425479c9fdb9a9

    SHA256

    486f811fdcddd75505dc0a02103ac817b964c5d6f4ce1cfb73b50c6f16b52f30

    SHA512

    1a7e354673c3a781d5587e83029cb6579ce84f95a3013fb320567601403a6c76000b58c72b416cab43c158d603fad5de9b52fd195a40fc69f1a3adde6e9c635a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31ae462002887e2ae1d89c901aa328fe

    SHA1

    5aca8b1610deffe7d5b9cdca85d94c314e00bd9a

    SHA256

    c2c9e7de6b19e50719478503413b0f3b5a30a00c67090dbf02d54fc634c31834

    SHA512

    eb4cb56bedba3f9ad7f4629144e0e16bbb807711c45ce04ba490bf68bece663871471c7771220648153d8191ab891e1934e14ae9bc762990c25946369e3b3de3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    95212d5569553cc0f5319668529eb93f

    SHA1

    04a72de4a18a53127be015d6204a21543f621baf

    SHA256

    fe5b3a6a1a268610b4edb057763ffdee35cce9a0ced09a6704bad5b631447e7f

    SHA512

    b73d0fbd7b72701d25f6d3708acf114601a23b89958e2db5160dcc0c20fb9ff7719ff34833a5be9e9f6a20db31514d4f7882d2a1342e1f1376fa208464fdde83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7f25280349e65b64c317b74ef64bc771

    SHA1

    dffa40fa47fd67fbc9763b2d9c61832806a80124

    SHA256

    f4e51d0526190e89f58025d6a09fc606c68d704ae2aea52f216315fc7154c56e

    SHA512

    a21bbb24cef1c0d9c2a9a03f7a81a51a48c6e9d9968ba8419b867ac80caf966de1524895f857f9f50dd4d938c568b1403baa69d777e86084d2dee9397d44e4da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93cb8a1fa593e8cab105289f8b0ee635

    SHA1

    05137b9e543fbafbbc8e4cbed6815500c822442d

    SHA256

    7fbbfde89bbc378281f3e8b8b4c2272214dfaf22d9ad688a24730d240dccd521

    SHA512

    2fd8ea38184e317c4eddd371951a17a2ba390036ca196b9407067923309c6fd3b2347cdae0a5711e1fa00b58108c7814927cbcc3ec840a31a38f4317c6343ea5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4a905ede59c6e31ee2bad757436e9eb

    SHA1

    889e9f5759c12e7f8a53aa29514a5818ff75cd34

    SHA256

    b77f3a2a8840ad5940323d581e69a8c8526cf1e4fd06acbae527be60eccd3921

    SHA512

    9860715d35582c1830cd5e9b62f7bc40aeee5501b7cba884d62896e84b7139e088541531249be4c83f4f521aab66c6c73ad5a67852c48cc343ac965c90f37b07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5e44f20c7b4d939a651033d1d7575be

    SHA1

    8cf3b22add1e573df067e2c951f3a52b10186c2c

    SHA256

    403d9f941bbd5927d0115bfc5de0fa96cac0dffca4c1550776b0969cf0ddb657

    SHA512

    0a77a1b5ff2db31b6b6b0ceb006785bed3ab69b5d8d53671637edeb8decdbedff65eae0d99606e7aa6214e111822f03274c8f12d2f5c3c660b5afec5fb5c3481

  • C:\Users\Admin\AppData\Local\Temp\Cab2B66.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2C68.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a