Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 23:10

General

  • Target

    8247f1b4bb973feb34ded81085869f0a_JaffaCakes118.html

  • Size

    204B

  • MD5

    8247f1b4bb973feb34ded81085869f0a

  • SHA1

    d856df5f00d2927908520990d47b64bfaa917c1e

  • SHA256

    41a72052c84d1567fc646d67aa54e25d000007b51fe0672caf20d8160d5b0a78

  • SHA512

    8962f2df463bb62504c961e3b8665abbcf5b3df7f8d8334bbd3eb456275b0016360d32ddd4ad3f34509bf86319cebe7e94938de27c405cd1a5e9c76f97768e7f

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8247f1b4bb973feb34ded81085869f0a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2368
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2368 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2480

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e6b7e25d10478f690f96efcbe790623e

          SHA1

          f94bea483e2ea133b9412fab979962df06668e3f

          SHA256

          366a8328ac22fc323725ca9976210b876d4df810a3bc07c1dc3d78c62279b09a

          SHA512

          3cbd3201362835a2b56a125181ca86b4ce1064bba8ee873ef028d06cd403ec2ed4a6edba0613b52c39493172ac71f9898585be2bacf4d0163321571e06240d7d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2d485b485b82ada465a6c4e88819a182

          SHA1

          4a67a830ef187f4aa63ef03b66b0bbfddf29de4d

          SHA256

          5bf69899b2387b6253805974622ca5e52cc9188aa3d88508328268841a1c792c

          SHA512

          c727be838da13eb7bb5639308cae9ee44630123626554c02968d4fb86cad26e963d2727a87c40993eded0e02dbcbc75811025764f5ce8e63f4334316152f7494

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          24f781944af5b696ad5c06e143a7beff

          SHA1

          df6f4bcb2c52c196ea1207ff19ac7730446b2741

          SHA256

          556c7aa92433526c1569bc56afe99b3364559b9bf0b7b8499b40f558bb521621

          SHA512

          bfa82910b7b296583275096e9bf06c13089179096fc836ad580d777c79414a4fd4647cc60328f44c0bc12eb641e801a9485716a2aa65fe2fb3f9b7b7154d7d24

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          eeaf8dd813bb9ce643f20d6e82907707

          SHA1

          1462db7043d88688610bcc457c2a98a66b0587d5

          SHA256

          1b0bc38cfa7f90fb2d8b07da98f3d89d9ae5009044dd7e5f937dc9e9252542d0

          SHA512

          5648c4c709218f0a0d85c7d25248f8ed38c545962530c6615db8cd900fdeb37cf29e38b8db578dc73c753ed8b2568b1e59dc8147420c3349ec2ce88a79293ad2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          23a1d344894cf0c706efcb9f96ef0a4f

          SHA1

          ad06ddf28388a6db1c02d448e2527cc0c1770553

          SHA256

          f7f8a4582ec7d60fe3ded03008346eb53e14140f1ca7978edadf01633616c8e6

          SHA512

          d6656cdd39c97a8078dde441332e956fe22dd3632f487e569b43226f1f7cebd3df68dcc068857b7e5b37eca424fc6775356fffc8ceb1defb56533cd693f17adf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6ec0b973ef35234f9438b9279cd8554b

          SHA1

          65be5b9a36bdafbb8800e6e9c44dc267067ffbba

          SHA256

          65e8270b3f1b7f097022c72b5b657e100c3d94dd795d2cb72bc33ce7fc1b5b1e

          SHA512

          f78ce5f22a5c17e6fa55f73fdcc99030f37b418628ab481ccb368c2fdd2fd527dac42601bfd68df624c6ebf3a662aa3104b82998dbf853f0a1f8a4252dc3cac6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          eeade4edaaa99fd0088e9533282c73fe

          SHA1

          4bc648735dee18ca7f49a66dba56d064df6cd528

          SHA256

          13e4d382832a7cd689fdc53ba913ea745f7d74f81d408dcdf8a3a338c478585b

          SHA512

          f7e0a1c1324e4e3ca7e5f83b40629a2e88289f6e260cedd69f140c388fc007c46bb8ba08ff4944ccc09cb7286307985f633d4e425a377e61d860b3029986865b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d88e0d0848dabed5d6915b177f5dc890

          SHA1

          b6053acd1eea3a473805177a32288828db4f077f

          SHA256

          822c771c02012bbb206066423143882910d2b3faa178ce7879104a81e5728028

          SHA512

          1dabed3d6fa3749cbf7c67c91a4ecf50ddba5994520b984f418b1ece9832ddc2e98c4e042a43e2de70e07dc361dad03281025c4b3cf3e33f9ec8705c9157ea89

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3f8442729d85ae251c9dcce94f712382

          SHA1

          33f17601ab1e84de3860b4a15fbcf04222135bea

          SHA256

          d6c04d0c58f147ae341e3b26862af1af743160a3100e7177565430b349266eee

          SHA512

          d50197e44d8ccc0904aa77d96a857e3eb25d83e8e13f55da19c4e55467da6481e480738f16606c4812efcf2876073ede88b61e4329e57e12496c4684fb1e70ff

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9c40f31839bba738deb7ba8ea79e88c3

          SHA1

          647eb7be6c3f337af6d9a9089c13f13100b6039f

          SHA256

          df34a62b13185be68d52593d16252bac5a0e6ceb365c43cd8e3f009bc5b77927

          SHA512

          e2bd72da26f987353d9d09d1da9db17ba86dcdb1fbf5dfae2711f99dd914ecfcb3230c8e8df001cb398f164bd046a95ab1931053abe58870ab2d61b858013900

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7c097da9e908abde3690a908d7536c0b

          SHA1

          162a67c7927f62b7887fbf0d92b592a7d9f0c38a

          SHA256

          12ce12d5a2329aa4b21f8ca4e5fe1f6618c98dba5325da5aa982582b471e76db

          SHA512

          1b8f66ef56159556fbff6a2793f0d0ac36a24c6b337287ea461cd7a903d8cfda24daeeaa15a18a829eb3f4ea7ef6660329221c3da3f9967852e4d1216a288532

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3804f518bfa0418c7521a88f9b0c1440

          SHA1

          35a14ba1c477fbf133341933731582569a392c21

          SHA256

          5d2db705b41a0a621eb07057f9a0a036fcdecd674e321f6e09165b1c1857cef0

          SHA512

          3c2394563b68e505c8adf9696acec259786629eb38d32c0e859bece4de0affc24c4b95f6fbe51809a698333d3504b42c6dc43217ea5467d16f8df49ff1141234

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7ce6711f4da083e55832ca0590c9b08b

          SHA1

          bb14c90254d82ea25299bc2586cf347ba7723052

          SHA256

          a57902faf44bb6319168633a20adfd7d2a2c3eca386a9444afabad2393a70472

          SHA512

          a213b491f8aa9b0e8d58ceb617712487adeaecc3783cd97c57156f4da5241460899360a1a1614883c1b36a03a975925478a9b19dded817f6d6939dced2763df4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          97e448cc2baff59cb1dab124bc1171a5

          SHA1

          9a5d1e8e7fc9f967533363e843fa925a3bc4444c

          SHA256

          9d2e411cda01094c0c9ccedd0d05d58ec1a1d3c03876ea3a52e20826aa469742

          SHA512

          89c425a4adf02090db1264885d3d839afcd412623a3f38fb9bfd4396133a16943ef9aac04219c7ff7bc8236bb094421404e3780fa692d7d0c12dbf618f339c1e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          6553990b2df48837b186b0f1248cfe01

          SHA1

          5b19aedba132602f5326749895a223385d5e4248

          SHA256

          cb1ec4cd7239c8fc9a3f46215587c47a277620bbe96d1fde10dd7c131f2f18db

          SHA512

          b9d6026870499a2d84edef46d47eb4ae4eebac7939d82240f332a842742bc0cb5d0482bb95b69e7da7deb533771f77aa6569551bfa19b7f625f45b7a867e54ec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          753f7f72432ea1b618622ee5cd8b23e4

          SHA1

          254678e73a9022cee1b863969fc67b71e5e5cadc

          SHA256

          fadc7e1073f9a44153949188ea175f2bd55a80eba2ae6dccdd9f9c5746e30101

          SHA512

          9eb05cf3265bb8818b48306a2c43ba72f5e9d6587af4c50ef131a55edad2cbc5015511be53b7ec5e805c0e95fff22ac917d9da1fc3ccfa6f80cdc2f191a09e84

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2e0443e87333a8c2fbdc6da4e667b2bd

          SHA1

          42e4e70528c90fcc1064f03762a74d3721ac0491

          SHA256

          49b65b7c25923ce9d6d064f24df63bd314ed72872acd85c344f20decec431225

          SHA512

          de1717388fe0a473a1e58f5cdc2089a4e36aa957924132679de2471cdb662a193498ed6b00144b22aaa9803bd76841bf3a624b20cab44a335414be26921f4273

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          24bb50e00fc5dca9cf342781458cb603

          SHA1

          4a51c6b70d4250ebc7498e6bbca03e66afce0816

          SHA256

          7b24d5b4ca62132acda0277913184bd287e9bfec318620c3369b6a61682d84da

          SHA512

          0a0811428a5b43e67d9e250b62b2238e2077b67aa7fc5eeb04a52f641a9dba535f3ce570e84e4a693cb0bce9a3f2066cc8e0aa4ca503823189a3cd8998c91f2b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          48167cba38ce6096e0b984ecb52dc4c0

          SHA1

          cff9f2af68014a0c2556d16b65a94210f1e22807

          SHA256

          a81fe34060e6c9839c22bc29ac5ae8b5c1abb96d03619246e825b692a7a9cb71

          SHA512

          b98d4945a49855c81c2b422086d3b5dcc85ca997ddaf88638a7271d05cc4532c4cab2b3041d8715b036c3fd338272a8f945a968926503eeab0101f3c3ab7be8e

        • C:\Users\Admin\AppData\Local\Temp\Cab3870.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar3962.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b