Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    26/05/2024, 23:20

General

  • Target

    7725780d2e92c1bc6b80848d32c0a4ad_JaffaCakes118.html

  • Size

    3KB

  • MD5

    7725780d2e92c1bc6b80848d32c0a4ad

  • SHA1

    6a38a5f6d1fa7e3f374de09e3ba5aa10b9ce3fab

  • SHA256

    7d4c9f37124d05db84746075e94b871418ce9706aa0279b439318f83944a34b1

  • SHA512

    3c6ecc07d86ff3df1c345c64009d4cf9cd738ef632172cd7ce17a803f0facbb6fbc6202582e3aa816f368d4beb648de66a69bcff0969b862e471fb03b3d6b3ae

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7725780d2e92c1bc6b80848d32c0a4ad_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2412 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:292

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c544bd999b90343a280f96ad770459f4

    SHA1

    e88cba09696bef8b58ad307a4ef7a0fa70022285

    SHA256

    8735250286fa0ec918bce16ef6c9a6e3da6afc238f715404c86d132ea3ed9284

    SHA512

    f022590c104648b180457047751b0ad57c66b27b98b63235e2375e2637cfb3325d21c143c6d4b647989848264047ed699ef133562286f6ccb1a9517242603bff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7a602ed513165e2a4d211206d3f5188e

    SHA1

    76ecf0c470bbcbc2bbdac8d1f46ddff47082a251

    SHA256

    77b733b807a25f3edac6a4e0a9d1f47747408efd8a2df40362e74f37c7d1e6c3

    SHA512

    d14e0a794f878c4688e7c2f7e6fe205a2c10e57dd44f8b6f4807539a26935918d40465d8703de6026857396b3a5709b0287167ebc5c4c79b5be447bfc1649afc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ccf0e2174a91c42da4b0c694421e107

    SHA1

    012b69e9e43c0bc4da75ac5e13c9991546aeef35

    SHA256

    aa162de81f011eafb879788831b5c951bf6a6a9f7e49c5d222bf5886f90b463e

    SHA512

    481304dcdb9fd9e5f7a182bc001e476629b1110c278bc2a9707b4e5ea002c33dd752e1093db9573f8b85af3c397a10c476f11cb4f6fe2507e710fddfb3905c5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    705b6b924c7837f1382768abc5c0cc27

    SHA1

    1121729671c7b268a77a93d37b9998d005370dfd

    SHA256

    1f90d34a34d7e1217d21fd092a4ed5494dab1998e13519a9d99149fdfed2027f

    SHA512

    e52ecda56e52fb364d9c36ceaa043d474a50764653b15a4f88c9cf8c8f64c5e8990b63aeda4cbd22b247cd2bbdb277d0bf881a238d4bb6a1bbf717580c54d04f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29992b345213206a08032f2b256af514

    SHA1

    2063a9c3dcca2240aabd925a46a7d27a4397d2ca

    SHA256

    3a0a59c6c9571c0f8063823d6172c1b3a8ab7ae82db16283b80e7e5ea0577f1b

    SHA512

    8f22cafe8d614b18dab52fef20fcae4c4670468039e99e2cf3adffad1dacbaf707bb58762f055d0d78d58f2133b4f703479210258d418fdcb72457818a424010

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b6b209e8716dc02ca09bac867ca954e

    SHA1

    e057cd2a1abd84ba99e447cf04716c14993b333b

    SHA256

    ec0954f4a46108c54f7468cf7c16d54ce3a6ccadf648fb48baf9186842b3b2e3

    SHA512

    7288e6b0e72f71e4a839c443158ddafec438462a5ea06bdcc4dbef7b60956bd194d50b0c391bfe6d80f088c071e4752f7cd2f80bf0ed3ef264b77fd1fcfd797f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a104187264f94deea875864317799a4c

    SHA1

    ae45b19859d67db99e1f2de711c62435c0dd744f

    SHA256

    15f702bd2cee6cd2ff6038b536be4558bfa42012f84b5c58d94ce06d6b5da43d

    SHA512

    1c07ac70dba23b209b7a8a5d6ae132b0307a19cf397696c1557fb775c245e5168623d09c15869ea5a2e1ac03162361cbf57a49bc21903345d437d9e1ec823910

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    963b024c99637ea07135d7869021deb7

    SHA1

    0faae9a4ffa25ffef617a8cf876322869e8ab5eb

    SHA256

    69f670829e9af9f4ea2471288c2c16e17cc1e6d45467342448ac6464d142abb2

    SHA512

    f62b9cd7180f9015d53a303bcd111c4a61f7a8fa48ede0d178958211eaeea6ac5d0d75a8142ab44774ae52e68450f4ad326883e0a8851337b92c1b8d3cee4085

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bbcdd79ded42364a9159328c34e2edf8

    SHA1

    4b3d7bf6a40b6d189c28dfe5acafb311ab527ea3

    SHA256

    5e0f957167cbc9a704d022351b3477a4a5eb37bf13d51c837ef3c976be53441d

    SHA512

    39c1c10ae6e4b5f5827b4c5fe66dc207d1a30c74cf60942b924ad823c741acdfd969814ad1fb181a9f7cae5ca977f73b80a0ed6cc6eaaad946d1efb37d255929

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c22ea4dc2da6d4458ece34c26e10b082

    SHA1

    537ed23a62ac25b716984c20c7ce1bd80524c9cc

    SHA256

    9c3212a55e11e59ef2fbb4ec1fa3e834ed0b76fee1151732b667c669e8866253

    SHA512

    5b7aa5b8ba1def379c8a7bd3d5ec94f82332d2f9c68c0148b85eff9a8574ace679f074099c0b550fd65c0a27d2e3de3020df3db45cd0483f5dbf8eac8d1bfaa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f578810bf0a2a61c1eb020c171b240f

    SHA1

    02c4e85657db15fa96226ffdaa62bd023718f9f0

    SHA256

    0829ab18854fff9dd5503dc5304ffca4014da996c87c2e04c1969df639b75eaa

    SHA512

    1b7a811f5661a2eeee59694dd08f4601854ab882322f2ab6de72a67e20574fac885cbcf6e8a0071c758c26bece1ed47a511a6c14eac75c8f0e6d3ec0ce8518b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7acc429aa37c1962e891c925a0ea0e4a

    SHA1

    3cafad22ec2eb853ef5ced3bdaf3b79e41ded62b

    SHA256

    e3c2505e9cee55cf4017cb65e179f242078c326b765b89967d138b77538cf75e

    SHA512

    ebdb4380ec2166e12be6954cebdfe143b5e81dc130d2df61e9d07896bb9da8b6687723e99722fa664d72d273db379fc077779dc2c9c412b015e47216c8dbc0fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    230e50f7545b42597c1336602b84f3eb

    SHA1

    ff27939ef53978b21485f9f42cbdbf68fa9bfbff

    SHA256

    0c3179076d7b4ef014139fee4c49f5153a7bbee2fb20beb30c3deb801fddf97f

    SHA512

    ea420a4b5839f2e72cff9d36cf6b4108ec45483a812ad18d4bd7897dbbed33baa41d29e166ccdfe6173824a25493fc270b0d18f606b1497316ceab67a3acef08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b33b7fbcf63622592eb5e8e4fbdea57

    SHA1

    715c06025b1d129245141ad7c0bdf164b5b33871

    SHA256

    c9521d4d93e00a02d0f6fb51bdc23a81e9272558ac4cabfe2e921ad6b77b6059

    SHA512

    d33bae6654e7a14fd9cce16a23888d1fdf972c02c08b76f4429cc562a82226b9fd576364626598fd801e7bb9ea041e4e38388887a9d99e094072c0ebe7cdb3ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9a7819f511667f688b7b7ad516ab566

    SHA1

    22d930f1fb7aa86cb28510094e06ea055ec4c044

    SHA256

    19d4c80dea1bd3b5dd6cfc730f0a4921dd442fd30a179f6d59a843c5cd2b9cea

    SHA512

    d007dc053da94ccd1bbbc1ac3a62963c9e8945c685113b754a27eeaf2535141909975f564bad548f26e81b38d02a301490cbd065e5d555a50620dc179bb0bc95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f564e1f59243bc16d9af703460672532

    SHA1

    e7a962bec5549b333cff9be88ae1cd39201a4176

    SHA256

    2aecff993ec4568df339374676dcb62dd8c993ba15212b731bd265622f90e757

    SHA512

    99af521e4f855dfd2a8d65883f412ea312c6c4a975b7b99290468530b17c43ef65f992b0c95841a46784209dabc0bc536f330908ec2f0a8b813c9473ffa334e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5897b8290b4b0e9163cdd361fce97669

    SHA1

    7a571115748fdf3fb70f3eefc0ef4ed2cc3a2d1a

    SHA256

    e331f3361d6b3da515b0912bad89fd3f9e3158a936a09692894985c83b1c1dce

    SHA512

    d1d61db1a1579353b6e31bc4336d492583cfa8e2afaad4244a92d89dc7ec0a06ef51fe74bc89ef6d3b32e3c9ad0fef7cb237c747c13187139cea34a0ec2e1007

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40b4854d05fca89570cf57e489590d98

    SHA1

    4b32986a0d665b9409d88f5f68a5151e91436080

    SHA256

    555849c3451e32cf6e12cecc0a1bee702c15967e380667db30826482871d6c38

    SHA512

    a845512cc0331ae0bf94fb1c607236d742246b94f78b5eafb4e5f91285e359709705f4d26b414ce656dee08f22cb82af62f5dcd70a6de882141fc5b5e00b050c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    eef71ed5d3fb03352a0d236e1f3abcab

    SHA1

    c3f11b3f523b1cc944a931ae938c43bdb7690ab6

    SHA256

    631d07903945c4282e27e4a33bf44fcfe64187e0839edd9d105f8115451045d6

    SHA512

    b261d1b9cdface622b1db63ec0a2d8b0ef1df1a77e2e96bbea5ce46908ac04b9cd336dc1858b79a7663e904f9f2e7c03ca7337984c26c557ec92e9fee6d9023a

  • C:\Users\Admin\AppData\Local\Temp\Cab37E5.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3836.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a