Analysis

  • max time kernel
    121s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/05/2024, 08:46

General

  • Target

    716ea1f6dc9950db5fe25667a0855201_JaffaCakes118.html

  • Size

    941B

  • MD5

    716ea1f6dc9950db5fe25667a0855201

  • SHA1

    925d2371d4bc7d9fa2054af4c70c61b29bff3a51

  • SHA256

    532c198e3337ef0f739995f576d295fd4d318b8827928d7204f87b57cb6b17de

  • SHA512

    f00fe9b8bcc2fcacfe3463dc4e7a7b6a0b97d130c3186357909ce6259e3af75c22ed2c0d66cb150ec37ef77c1473a5d677ad5181ce62d52eeaabb3680cf5b5d4

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\716ea1f6dc9950db5fe25667a0855201_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2256
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2256 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2472

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7144e70ff3e1d97d6ac4d413d2ecebb

    SHA1

    5d7e6ed0ff6c3439b67155a451c70e32c4f3ff9f

    SHA256

    3b82e228dc31a1a8d0dc348031efdb0448e36ec4e91bfb2bebe15961f3de8785

    SHA512

    99eb84fb59112ce57ac611eb10aa4b95db674b4317a3bff4c557dbeb9294b0df07ef591435d80a809d0ac4b6b6954fc56fc4eec74fdfe6feb7eebbb601f13fe0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    00066baea53eb0c1d5cfe86fb71fdc0c

    SHA1

    1e3fe08f408cc3a99ade72132b8842b116e2106e

    SHA256

    276a15b7b6d5b65bfe9f3a0e1ce6f571441f42ee92336791911b2e47f09c1f69

    SHA512

    307a41e14e3b8c399da1f1a6781c629ece08d6c51b7babbde30b6d3445af84cb39f1b96804aeed4116229b84f5fa72b93b61b9519fb711a010a5e8496f3140e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    16dc0f4bf4578b7d93a2577e8da87c25

    SHA1

    b586654a8c846bd4c97e86c7826a50c9dc38f26a

    SHA256

    18b7fa69f7bbec008bf7702c2eafb90ab17e25af629b096f835b4c720437aa2b

    SHA512

    21738b3023388d8516942cce488de0413e43ce3865343a8c4ad0da22ca73f950cae519e8b86aa5141df18d4b0470deb4d3f8ffe880a7b518cb9abb981a18c4f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    be3d4e25eccb6fdc70d02ed61b3355e0

    SHA1

    7bec91e88c063810c835cff3a95f01709fb745d9

    SHA256

    3ee29ef68e3225a6222cbbdd33ccec7191200dd4453750dc3204fba650d31212

    SHA512

    09d5c03a7ff790a505b6275f07a96a03996f15ec1d0ed3487f44901bbb85c0044bf22c28d1b1cbfb5c2e4e476231f511872b2ff5d644dea5963392cf338d181f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    25ecb0a3a47aee07f0207b837bb19461

    SHA1

    26c0e219ce815956bffd2d20a367d23aaf597769

    SHA256

    92a14aa12ba99233f0c918e150cf963bc4c41fa2aaa13424f5b26d360cdcb738

    SHA512

    1d56a90adfc623db890cee6c0d0544f70c55cab8f0fbe15ed2e781ffe4587cb5ee0bb12fa20eec849c3bdc5c614ce3b4c0773db69a7b04e2dc07d3363daaa790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0e5ab31cebafec6cf146b150ee6c782b

    SHA1

    5aad393dd02dfb4021d3aad52c346a0755d09c3c

    SHA256

    0cbe8a5ff0ac3c7fe944984392b08b6a88d5d1dc2ced8dac0bc9a5236a3a9faf

    SHA512

    cd73e2fe4e35a5d423541a464b5001e03585bf8814e7a6c6693581cc6877e0da6b48012d7f0cb9214b285c9f51e3811785fd95216adb1f80b1a482b192b7eb69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9f62cab9b80f1685c458431e281a1881

    SHA1

    d540a99899499df0393e8c1331c08744187eec21

    SHA256

    116f88aa740e2f010a3fef9d070929da475259de05c335aba458445e81fb941f

    SHA512

    edcfca5700e01b82d068796fda2f1461f2922e3dab5be7df0bb9c8dc3d9d3c608959e85362d2e3f046208ba9f16f0d71f9cab0b596e3fa52e68d785e58b868dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffbcd4e5ca1e95c5c73380671707eb41

    SHA1

    037e27fc6402dba428b25299626c3561901965db

    SHA256

    836d62c1469f4f9d6cee9b5de161d30100209730a5aaf6f2e562a3e34fc917c0

    SHA512

    e937326f845d78b9b4e7c39894a6dbdf7543865f2d3a97441aab16cc213856a231e0551454f6f30d3833fabfcd8bcc998961d54c2959e84f5f02820ac734ae11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f67a267376adc6b000867fce46fa804

    SHA1

    c0f29951db5bb87007a28122aec01f431ac5cc0e

    SHA256

    892ec8c782fd1531a3c359fe9470195187dbc6ad840c2ba2a0df4ff60993a10c

    SHA512

    b36f3292df03ac5b54fc4f65f2ef244d5882c3b80f568a1fb55c7e0319428934db8d1f8d2e7964f52d8eaa39092026664c04842f6f207d2cbab0cf7bf6d9438b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a197297b0c6baa293cbd63e532daa882

    SHA1

    9b649bc122dc031ffd7a5d092139f104d7a85678

    SHA256

    b43923df6a3c3fc652cbf78bae436f5f88dbd56026ee7a15ce0083ebcc7a2f39

    SHA512

    5d9a79932a27dcca74c86dacb38fca7960288aae2fc9417e9451467ac543ff405e3c0948c804e11992fe0c96fd8490e317faef927e6d1df00aeab3af0c6f989b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0620064d08201585c4176cff31af3e43

    SHA1

    9e2edce38be233f28daea2032b31e3b87fc0e0bd

    SHA256

    fb3afe8f107946d17bdc99a1a456ba9b4528dd7ffc1060dc86d89b9750e37918

    SHA512

    b77c4757fb9aadfd931374ec8ba29cf8780e79b5e690a5797432e01d1a761f0c66d406b1739c203e48edfe628277b639cddd58986964c2f4c8dd4d04a6761a55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dea02020f210dbc13ae90cae56070fe

    SHA1

    32314dc56e806c4b3dd463a9e02580b8f9680661

    SHA256

    5d9b06a8759731725cc1db41143f9e15e0c09a8740cc11aa051f70fb0a933076

    SHA512

    f2de3e8dc6b3d7bb2ad405024223d3fcd0b4623c24d61f47fe401c4014510262aa78a5346dba36d1ae01b28306bbfe2f5d2ae705a0806f4a5c471c93db49d892

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a345da507ff836d84c001f03d322834

    SHA1

    87b4bcb8c9e34431b1a30b3a9578ed741e805623

    SHA256

    0f20e0c32994cd648d4c318d7e5bce7059b48f28f0fa5b40a155fcce96be127d

    SHA512

    59281bd0b6bb11e533628b615c43c20b7683dec7e19a94be26da0aaa358768091b1d2609c7e889f28417859706c7038926c5906222fa009aa79eaada8e1d0419

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    886e040a710a1a72002b3d6a1e0e0e08

    SHA1

    db13b65711987964b95c9f5998ac35069e33bafd

    SHA256

    c7d0111860768c6ba8b0243b5685d671fa44fe4c9455381948b1ade853c1c360

    SHA512

    3dcedcf9b07fecac92e57a935243b9ea7e0c14012f62c1209c37ee016766a78baa4d5133cdbb2c1832ff32ae22562429648d196d0028d58f661848e19fc5834f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39146dc6ff49f06dcb2399d7723ada55

    SHA1

    f9583b205356de47718f2db53e1823c7430815b3

    SHA256

    8befcd3b6bbd8c10991e627197724d2d483765507585d70fd4a860bcc3f15420

    SHA512

    aa328fe3c0c75509d8a8e4d25eaa430704225c6762fb4a6c31b10ba5baa376681a8c4aa8fb0267c3a96e0cd039df06ef5309837122e39e77addbc5dfc4fc2f6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43a1aa08e0826272273cbfc7e4e0bda2

    SHA1

    4361a70f1129cfc521d4d5636cf5854c05fe9824

    SHA256

    0e2d08901b2505faab2d15beaefc31cdccdde9337f1c9641775bfa907ae304c7

    SHA512

    3b62e4803ab0303b6e23d432748aee6c1649f6addcc7510efc452e70560b6b7ed24170244f07a0e363bdb612bc4b36253b11dd652aaee3cf92ff79dddd17e375

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74263256a772eabd4bf8fe8117e198cd

    SHA1

    b56ee45c6ac8e5f3f6e178a0e776d13543a48d79

    SHA256

    74b26decc99f158d033676dbc086acbf7d8e46b99dca5576a2c0cdb49d071d0f

    SHA512

    0718383e377a62b2cd51e838854f32a480bdf779acaffee1881143f9ddda358af9bef7ee6643710757534d8d78bbc2ace88cf2bdee93930409d4910d2ce0e817

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d95b3d4e582aa543f2626155f8f3219

    SHA1

    be5eac26349032799755c3e54262a987566a4ccb

    SHA256

    4ef3d2238a4b550092978c86ee3886c26a50c2572d343a5b96c1f50459bd177c

    SHA512

    1cea80f48568cb6a90336f7d485e9fb85d5888bf235630377aa4d611de354e71e3323949bc7063bea0fa8e76975b800b9e2245d1abaa27bca2471667be7cd724

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5451753035ba0e2b364846a654e07d3

    SHA1

    afc6b7bf350b27f727ae4a8bfde7e1cfca4c26da

    SHA256

    0376b61c53b55d5ec03d7fb6d3e2aba8cf520de211778c34f32b950a77dd5ace

    SHA512

    b49ced12efb62a9a6103a38ac4c3101b29a642a9ec84eee7ae75954a0322a82f61a6a43a0ec0e1aaab8cc069986f762a174ffe3871f7b574ff9b0e65da999221

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0ac43b4ebff56d6fc82c3113a781dffa

    SHA1

    f0b795a072cd8fe21019739be15a78353c14ee5f

    SHA256

    6a4c6e74595174a257f504b41d55a8842003f57432f07d72a0204f14908532f7

    SHA512

    9f2cf004f5e0545ee8ebad6c44afa85e5bc4aee99e4ef6c68ac33b8e64f613d9a88ff6999d763f56d9c2d3ff9f6da6bac37aabd151ee5cc00110ae3928832790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c248415763a79c092a3f9c0c62b9e164

    SHA1

    f6721acdfe574b830a94a24712893403ce747ccf

    SHA256

    4843021a8fcfe9d887b374e56f59d8a8656c0808923f31af8e5226b41d942aed

    SHA512

    34dd644d15a29cd2a5147cc00da281af6ecd979d52d03b7464c8aaf6ff2566b1d217b8113443f97d22a06702e61654481b5afd4e81f28c25cc652014a0a58819

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17b3f77cd8fe2c38cd287242741cf2d4

    SHA1

    9118aa03fdbe58983d66597e26c5987e47e00c4d

    SHA256

    0438e98513f103f2ac6a6d358e00ab83fc68d9095003d221ea536f089cd6fffb

    SHA512

    54a73f2983bf3c45d7a31b1302a27dec128d93e36ba3bd377db340e02cbeafb8d1e21d21d7b14d26c258d96d43652c9c6e71a936910f6f4f7882782e81b0d5ee

  • C:\Users\Admin\AppData\Local\Temp\Cab9A5E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9B6F.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a