Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    23-05-2024 21:13

General

  • Target

    6c4689edd1845af94366a570bf7675c7_JaffaCakes118.html

  • Size

    3KB

  • MD5

    6c4689edd1845af94366a570bf7675c7

  • SHA1

    e5ebef429ba58dfd2db157277eaeba05475d92c5

  • SHA256

    e0fa481fb62d3b4d1033111edab893b539160c8947f603882a58b7ca38af981a

  • SHA512

    6d9a034a39ae34b5eb645bd33f673d05c472d4b656146c833e0aaf96b744c142ddab90a89d2e036a21a51c8b2eee3ef23bc2448327cb51a7a359778b4d35436c

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6c4689edd1845af94366a570bf7675c7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2336 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2164

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dc48b67540b55113323978a3eb008885

    SHA1

    d366c088b5585506e84e20f71432de66ae61cb97

    SHA256

    52cf9a670aff225959fc5d840a42a0d6e8de33370c45133124c16cba332260c8

    SHA512

    c13b24dcaa5f5a3d9d90e6532b7fb385428bbc6b4b17b9ba083ceb272337a8fcedc6e0575b867bb684dbad4754b5400ed3f035035db5abddfa5e574ba438b140

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dbdb0ca8c0df4ee492af2163c209fc9a

    SHA1

    dca42c14b2688ead26b61abc83a712c033babd95

    SHA256

    25a405c93b058d325ad75b69e24c20d091f5ec7b671da80f0bd4781f2a7db6fc

    SHA512

    54ba1cf63aa4d7fafff58f421429ee3d2ab30235b09db0aa554379e6276c51643613e79cdd1f417f8f2b284d3371b5caa7a39503325b2da80d8dd89c1e8f48a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c543b2b0c2d54d65072eb05c4b074e72

    SHA1

    a1fc98522ea64a5b99d44ac7365c81bc66b95bfc

    SHA256

    c618e36b36b0219566a586ea5d3bd19e1f8838b591c69825653d0acf0b821474

    SHA512

    758abf47148add0f08fe94bdffd890cf1f7e66eff7d83366f124d3345522dc5653be8778e871077194946772ba5aa6added029e61b515d904e3489a02811b5d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    712c0d85bd5d48daf6b95a0f76444515

    SHA1

    44ecb41310dc08213644ce143b19210e5af2780f

    SHA256

    65daaa83ead63e04fdf79c3314e253f502283b471b96fc825b13d05d86996361

    SHA512

    cf1d8eb7b16a1696e1de7ebf5d4b370e05fbee4318666fca5198561e5f2dd3d40a26b80fdcb73526e39dc8cf7f5d6c44621dbc7320398ca70811399530c9e4bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41853031f7b7247906570147bdc330f4

    SHA1

    d295a5de6b26d0668d2adec82db3337887bc6aff

    SHA256

    b2b994e2a18862d71ba2fff217df85fe223a935ae8bb085e8f3ada57e7d85d40

    SHA512

    242d955fb9ef0944c38787be23b989d193476faf75879c3cc4da30b9d9b1f20eee60f4b13034e48177d6cafba3648401315ad2330f8bfe04235f1307b8bf4ff9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55ff6b16507d1343bb8b6e9f3d6760cd

    SHA1

    67dad6d151c131df5927b3abbb4b8c14b7555c48

    SHA256

    28cf0730628e6070319210215e74b54a802135397e3ee82d3a17e010b29f2e8c

    SHA512

    153706aea8d098bfecb9d939d59f12c342a992e2b42bcc7abbbf743b46f0b98d7b9a0940c585c769ed6fca71ebef5db3a78fa602ddce8f6f13611d959cb330c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8283627ceb282ab0f0f5b3b4391334f6

    SHA1

    b78c4ee056c372558e6bce52ab91c8f528f66871

    SHA256

    98c8c53c98a705bff73e5461a0dd4c57f294ccdacda3a1b53302fed34418e025

    SHA512

    4bccfc7bb67aa8cf31030569da723df64cf726e37fc39632dfaa55d84b7b6eef531a8a5919fe2b752801ed60f3b03736735171f8db28cfa67122bd1d47a0aeea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a2bb10fd1af667c0bc68259c4e59482b

    SHA1

    c8c7ea6d04eb6fdd8a5782ed2d28a1c126b012b9

    SHA256

    23640c4ff58ec27d7932722ddbe26d3e5a691d1b417f077b95f625dbe546707d

    SHA512

    1866e54e4295d8555df63b26718fe56785b851b6e02f73dae0a9138871e47f370d081e93c1f2f4b1a59d864cfab65bbca4d715f4cbfc7add5a5085ab72b808dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd69fbb068fa5c8dbbc895b75613c1ba

    SHA1

    5c02e40dbbcd08cd55d08212f25f7d2b610b768d

    SHA256

    1583af55c86ff53d6be062d031998fd49fc944a50561b641f1c985b19e2d1077

    SHA512

    c459a1b8f1704ea7d0c4e7d87927676f7bf445c5c47cce92af65f4d86c27dec7b08f8411c2f83295c2eb18bb929d6dd14c53198a67bfbfd4da7c502511734733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5d5b9885572a6f1d57a915345f5ccfd

    SHA1

    fa629582db92c699e1a43bb40228039819c7c434

    SHA256

    7945802f776af03c84fde9f78869b5604631da8a687ec2f56b43b08643cf2141

    SHA512

    f70f7f1b5511581c3dd175feb02a6fd127980b588de0bf23244558f9542d9429f98a65394da7ffaa84e90b98acc1d85126661f7beba185d24732b49c7dfa573b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    952fc2c1ac80697613b6084bae242e59

    SHA1

    bd776da97ae28b267cb13a837a236968b7cd5b33

    SHA256

    66787fb55a9401dc7074ae9ab2888d1fabd62a0d185be3eb67ae98d826f95db6

    SHA512

    986c14d99d2122df31c94a1d742acf04ecbf7dcc7fbacaadd5a2375100821a7f0ab7d118361d155e6b7eead94130b74ed1620814d8f638bb44e2a962922b44b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    250a10dcb07cdf0fa426039390aa6a7e

    SHA1

    7dd155cdfb6bc62e3c130854731aa356b6bcb893

    SHA256

    ce52b33fe7a48ceb07c9acc1c1e9589f4c1ff5ef53a3bdc56fc7e2035040a4d3

    SHA512

    88cc5934b1fdab506db4ecdd6a7c26d6f3e81a1e8dc2a25808d2a3d06566e072c8648582ce8922dcfab1b84365faf45ccc64a8e1828a5a006f804d052cacfd10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b47bf4cece06d1a6aa80b7714260bafb

    SHA1

    ff05d9cfaf122d0e7a44ac603f2a4c2281146f4a

    SHA256

    09ec07a419820c1c68a68378d54266534bf4be926f2a889bb1b99732d8352092

    SHA512

    7f822189fcef065c00b2dad1bf6f12c954b931879e844cc2813b525a33cc385bc7e218e4b08f53cc8f0402e829a8fe83e58eba94846c45d6e49848c1e54bff52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c241f39eb9d2bf1ba09f17968c686878

    SHA1

    b9758892bb810da4ba46f097cc9f03885ad3934f

    SHA256

    d8f4b17322ec1841aa8c84cb38b7f547f70e56d08e833e75973693200f7154d2

    SHA512

    5c3e0bcd67c237c828c73c552b32c31c616642d20892b352f80e2476b256b664c42dcd0191d8be961e7da42c821152a18a826e5753c1d1f8a6351c8ffc8a77e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0cf8f47d10a28c5560ca1cc93021c77d

    SHA1

    96927aa67882f655e51efc36d37c392e07e73524

    SHA256

    21a142321a9f8e947ec69addd677b6632bb9e552773c333c3891477c0daa1883

    SHA512

    41fe930bcfad598b5290cef0d19243354911c8c5adce2bcb45245233e843108b887bc2ffd52aa467b45005acabcd1df2782e8b96a4390a0402330a196fd313fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3856ebbbd1c738596df460038340ae0

    SHA1

    21cb631892049ca045fc04d7dcc33ff33f3b5cef

    SHA256

    36275576924e3d45248898ac9b93cee015831c943c278bf11c9c6585bb18a763

    SHA512

    3c542a23b802cac9fbe17d32d9055dafcf4748c061b9d3ac253d98d5096c01428be5219b47aad7d76f72889d2a4725f5bba29ccd462d226c6e816e84801839f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93eb73f29c30bed27609b44d3f2bdcc0

    SHA1

    7021fc425f62a58ab35e51ff527d78a40dddd739

    SHA256

    5e106daf65cd5dfd15c5c59930fbcc81eb433a939b66b40a475741fddd81f701

    SHA512

    e0e5586b7cf336edf6d0224db81a1a39d2a36a2ee43050fe35bb309a70d6f108da1b4e8a49617a68cf7476750c0a778dc9f11caf9a80f8f6f9be722d09d95f9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3efbd18a65c530587e0a3b64b5295c9

    SHA1

    07ab91d5c23bbbbcac8e7c34941f599cb6be1eab

    SHA256

    de49f37677be8647204050b705a47d4ea3fef28bab148a01fdfb706415c349d3

    SHA512

    4f8f3364ab1359188149dbdb9d85bed172a8f920b07b4566edf84cbc3ea824a5511e308318f92aba6400194b2c110e24a92d9be77e0a34baca9a3878fddafeb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    63bee88fc31fe0efb7a20fe99b714bdd

    SHA1

    74948b60a21549361e8fe2db9bba1522226beb4b

    SHA256

    b048f9546204e2736778d8102496deee5ba500e80217afa8feba34b2f5a8a186

    SHA512

    7835d05ce16367d2366b83a2cc9fd3cdc4fe4343f06c5b1c7c112cf6ff761ef4316c2f962e3841d69efd86efaabe77b2b15d0beae40353b17330e8508ab1c5dd

  • C:\Users\Admin\AppData\Local\Temp\Cab3738.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar384A.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a