Analysis

  • max time kernel
    133s
  • max time network
    126s
  • platform
    windows7_x64
  • resource
    win7-20240419-en
  • resource tags

    arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
  • submitted
    28/05/2024, 08:23

General

  • Target

    7c4e7254ac123af759ad63b92066fb34_JaffaCakes118.html

  • Size

    3KB

  • MD5

    7c4e7254ac123af759ad63b92066fb34

  • SHA1

    287503bc5d549f58fb3a37929529cc2da3bdccde

  • SHA256

    d157dbf0123bc0551fbb7125a69114b0acc1c53b362054212d07bb1613d5c45b

  • SHA512

    d441fb5148b67691121de434c0f92160abe7ff3c842726f203e85420ad8ea202bb22f74ca33747c0396b7150f8f424ab2014ea7d094daeac0c4579044dab55d5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7c4e7254ac123af759ad63b92066fb34_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1860
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1860 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2140

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e44ca08bdf6e35863becad67dc0ebe4c

    SHA1

    f80feb39818a9954c2c9de6c4321c4459d93dc20

    SHA256

    6bc6f9f669c8075965b523a8bbd288d699e0256452d9e75a11f2e813226a0b58

    SHA512

    b1820d794579ee856a00a3039231b3100cd7a5e980c8ba8ef7a5e74897642d2b966e99cae7811f974c01a688ae9336f44fe9b464696eb9468323e40e0a96269d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d9d6768e7224d9161c9212228c537c5

    SHA1

    9997640097646c192c25b42980e2f36905d94fa5

    SHA256

    6d3d4ebd53ee564d00ac3e09376ab9313e1f81ce8bb044af38c9d17fe19bdd4c

    SHA512

    4fad9f00ecdf9936b1d78d9c46219e6576075f91e07d604c35c4d5e69d07231cd2d93c9dc53cc668161a82337787de40a73fbf7fb59b0318819480fef391c5d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    54986fc78e16bfd0eb7dac0b971c3453

    SHA1

    050978e2aee7125effbcf3bce38849936cfdef78

    SHA256

    511b32ea7003513d97b1f0609d045970995f945eb2e4258578fa6cc815aee40c

    SHA512

    72fa39d852f8b618271c53024c93ea5ec78366413cddaceeabe96a36086f51df704ea9a3723e1d057855c9dd037a44fb24f6d3c618ecd4dbe46ba1388f7c4a85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb38e5381bf9a41dbfa9637826d9ea64

    SHA1

    e60e0f60e47c665e031c947d82c9c2237a21dd16

    SHA256

    8456f270e206f05b0acb3b3065b11a8bcf1166125804115dd1c4db80ed70e958

    SHA512

    833e87e66e9d4897783275c266eb9ec78ee201f94e6f06cfef65b365dfb5535fc4222464a08b7b72bbffcb6371191257fa28a3d0505d051aec00c2b29d056951

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9b381ac6e152d057567d4c7aac4aa7c

    SHA1

    bf683f775a6b6e8201a0aee89f16a1388b91a02e

    SHA256

    bbc03a0dc6e7a71c1338f64449b752a248fe4af687677c10094017778cbae025

    SHA512

    25b1e7746dfee217af9e818e50eab2f65aa706db0f3721a471521dcc28ee59b6066da1e98d3f88d8e3747d1b5487a2407785c6c30440732e68ff7952203ce5d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5b2c45187a2b2cfe7d69620b37d762b5

    SHA1

    e58ca21cc6ba152afbb4181f2fbdcdc38ae35066

    SHA256

    4ae7dc81f33e808081e414bec4e88f3c6464b8cbebd9dd78cdd6dbcbd602f519

    SHA512

    a2b055e27ae6a3b0e51c65a32d679780d4fbdf294aeb9dfbe5f35e9226f7387407524fb9152bd2b6f42709336f2ff531a83b59ff214c68ff072ec92b661496b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b597a14786f3e8ec63c140300da44998

    SHA1

    8b9bf0bff2082811090cd95aa9032642ab4166ea

    SHA256

    35c60955bb6f8f5fce72bfbe17b06af3b1eba14302e741bca527e73475b70fbb

    SHA512

    8d5173b5e45ea9339755f0252e3c5290f09274d527332fd88ae0b2320d4bbcf5aea69cf5b9f94c9f44965275fe41e86746dbf0b577b3a981d53bb95352a5916d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c30352468c41fc5f8e0d7a4e4d1d597c

    SHA1

    3a06da0704294e6a1386a314d5a975309c5da960

    SHA256

    e69c10aed761c812636ed58e8c7382339a7589c961c10a712f56d580d0a839aa

    SHA512

    50ddc5372477897b263e6364619e687847fa22b0221bcb3d66f52846410aeb0ac1dea092a8e411fa5128915a267f9a66dffa405c1e1d1c7f9e059108d030b6c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74ba9b9cf8f61100757dbe2bf23e2800

    SHA1

    948cf910fb8f66630bfd897441828e22e00653a7

    SHA256

    47ad77ff06a121009a6b540a4b136e2e807ed620e3ce6a8fef80f2f761ad6374

    SHA512

    98b647ffdc4e6201cccca0f7d0a1a437f1010d5baadc509da88c3848363fb476ffb962260ec1850100054a1ed12e3bb8fd00e21f3c0b51d931adb74e572d31a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d97a17864c6a9d3f6934610d3f8936d

    SHA1

    269c941dbb94a00dd12dfd520173ca3b74a9458a

    SHA256

    78cb510a7df1292515292620eebfa69e63c9ab7891731d675079bfa090e29dd3

    SHA512

    c250b6af6df0ec885464afebac66b999fe0e47478bf5b6c744685a5377e643efd509ada79febd528a553c443cc85d21cdc02e5bc8ccf5f7f408048462cc15ff6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b36ef95130bf8e1f620470594b969cf

    SHA1

    528b616f1b58d1a786c327ee607644faa3a55b5a

    SHA256

    6115440c84e5a8520b184ce3655f4b320214a90a6eb629f8938cd32ff66331bc

    SHA512

    9db64bab5ef246c48dbfa7747a6d6a013d0d6b38093e2ee050a5c2bdb14ab8e213aab98a8bd38f08d3dde0b41f398afaeb3ccbc22f42f181b41f698598624569

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fa56b6a63a853934248a89b703bfa440

    SHA1

    61833dd1034e36505e3746bcb814d0293533ce08

    SHA256

    a810f451be6a320f4a8892dcfffd1f80edc4c762530c71deaf5b798a8466486d

    SHA512

    fd0d1ac2b540cd5d91c9b3bb3ad377ac69e2da4d8644000051d329dd4a37dae2970d24f891acf09480d675a252e831e7153f8933f49067683c52de69e7db6fcf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bed616ec07f356acfb53174e0e9e8c9c

    SHA1

    fe1ed83703556a1143331ff76789e20f8bb6cb73

    SHA256

    2a0ddba1647e4bd8a9a18cc49624d2970b46e17cb8db45d5eb64e36cedef3c95

    SHA512

    37a0738c4ada0cba1cb8042911c6f6f8f4b2011ee805cbe0368d883a2a517fa75f1b7d84eb90295ed4199fc8526beb3ec243b18e8255c453cd53be4ac77f0abe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8ace50ed3f637d3b7fdb492ad40f746c

    SHA1

    6b30011a484a80d6e5c5e49657a5484f88792581

    SHA256

    ce12141a0a69ea801d71fb09a3adfae97077189cb67c5de547324d306058480d

    SHA512

    befc51f73aa5b38cc7ff91b3590326a0c54678649ab21f7901013d71caacc0a6aeb0f9db13437b960b12a974ec1e593caa570e03868faddbc0545cff462d4316

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    859ab843232949c3d3f4343d8ca5da1e

    SHA1

    0306453f718ff9997577937d5249648ac9bc4c6e

    SHA256

    a89305f29b8ce5b8afeea532d9e53701b6367a86278ede209ec7b8ee42f0f90d

    SHA512

    ea639a4804c011fa1727c8b7d167923453975978c1fffbe771dbad498f1e0e4ad93389c58c5cdffce0f62063cf5e52bf25d4930ec8e56503d088af8d4b328890

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b20c90c05211b30cd5cc2b24db09ecd

    SHA1

    d9a9d8d25fe64045a74428358cd65ce387f2b12f

    SHA256

    6e139b1c153df0b584dc16d368c5edd12a1b1132d1fae9d88b5b38c18bf037e4

    SHA512

    a170906712730cc72291a817a694c915dab4d8a6aaeca672d05a13bf662c717ea7b2fc9a3a7f2d77b808caa6dd50064566b00fd614a67a37c68d11b6c2afae51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3124a9ee0918e4aa3f61d85588f85139

    SHA1

    78a095a9822f678aeb0077337083758ca391bb6f

    SHA256

    62c2eb28856c175156156cec50164eeb869e6998ca83bce8bab1337734765c49

    SHA512

    db1684522b461b974d659426f90f7ff58285b48e7d6e5e69eb43b79246b306501eff0d561456f4cd9d80b5b1d2ee58a4f96e8ed4ae6d8ea260d7bd932bf1d123

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c64174a06a9f1c8c3c093b0d2a692fe

    SHA1

    20f06d96e0b401728773a3c8d04f81a5f3d7b936

    SHA256

    ab3a489454c99288b7e5a8009c0dee47a427e114054fdbcd3d2049069d872081

    SHA512

    2a9c5ca6f0f0ac7362326c2f56e24895ae74e71b1bb794e3b28c1303056c4a45fa4c23840b1795751050719e7fd8d101db5c38482168a25d6640fe3939871ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1eb29820b6bbd4c982e300c82aed4f0

    SHA1

    9995680cd1a3fb78e8ebb50a6f9581013c79defe

    SHA256

    142a64e99794387a99ce345b1192a2f00f9a68328b144debf8201afa95ab63e2

    SHA512

    751866d54f2df96ff46a561993c3f0da4f9b548ef89f3597b1d6e9527f78d66c965d0d156e339a682ea60f127dcf33eba33d253c4191a299beaac881de50c3b6

  • C:\Users\Admin\AppData\Local\Temp\Cab1CE6.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1D47.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a