Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 00:12

General

  • Target

    7ee3721b8c2be28182bd42cf96285b52_JaffaCakes118.html

  • Size

    878B

  • MD5

    7ee3721b8c2be28182bd42cf96285b52

  • SHA1

    6dafeb91d2827494d166d58899e00b3a6df7fd0e

  • SHA256

    86bac7400160d1b638c6e92a616783cb5ba319760886e022141c8d334b509fb8

  • SHA512

    17d285f12f3e604a4a3e44ad0fe442e18c7056b0132b71135769e1e7c78406d17acb66c89e7465f4ce3768a738696738d4044978f9cd0dbaec8328e8ce2ce1f0

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7ee3721b8c2be28182bd42cf96285b52_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2660
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2660 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2632

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    491bb739b4cab929af201ff2c64e6bd9

    SHA1

    d6ea0ba7bc33ac7029c73763027298aafe1e4427

    SHA256

    440d0e96c378fab58973418a508617ab05fff857458be88247489d978fc84fb9

    SHA512

    fe7a68731285aae2a84bea8aa645f78e784fbbfefe958a85704ccb5aaca26b0945d3f0244d3fb9d0861843dcfb929c19954648999371030ab9e2db8feb944360

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    daf3b7114dddcd6cbc9ba68bc76c6955

    SHA1

    848c245e4a2c7bc8936a55d0e01d0a18a6a98d6f

    SHA256

    ccab65a8e3bd7a4229e592a772d50722e16f75de1dd52dddefc6758501f5e983

    SHA512

    2f95f27064b76fb28b423f3538f1c840a08b040a1ca941c5ae2a04e5774842a442347846b0dcc7f5aa201bb1d955a54027ac347cdecae7f059dacd620af8d143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f70a5f4add87f976416219e9c4638a8b

    SHA1

    c416e3767c79f4852177ca28b0a19caacdeaad82

    SHA256

    fa6dba39fd3f1c2f54ade6b46d8d1d0a2b853443a364769f114ab7ce7ba7ec6d

    SHA512

    7ca6769ab5e852bcfb180c24707336d685aeba1fd78a8a63c7824d6b6380340a40858448900336ac6338f1f268bf87cfb79f4253f934b6c3dcd8f4a2ce6411a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d977ec047cd6f7f028e23e209e38cfcb

    SHA1

    433dcf0878b51890150dc3c4931b99ad0cbbdc05

    SHA256

    b116cd90294effb48317106093477bcea3168183864168bdd6af49f92a92fa81

    SHA512

    f3c28abdfb3e0c579a9b921c93beb80771366be5e0f727f8e3ad860bedf734e2ca067208f66d4e9670f6640d3aa73a6b0595a378a190cd5ec85f22a2ea8bfee2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f6c68825d5762281811e376767d408e

    SHA1

    568f2435a6a6c093db1d26cb8a4ae92e19646a37

    SHA256

    a0850dcb4bd35da760a76a99d1fefedbd96590b5dbc3fec44931f8d6a1815d88

    SHA512

    765c788ee93df2c35b53558fc6afd1075086b555a7a9c854d0f46ce9ca71333494389d19379f2fec6700f1fc0ebc09e997074e4762acaaefe72778cdc5ec1d5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c907cac82e22137f96cbcdf669ade54

    SHA1

    034b861588f685062a1668f6724739eeaea57aed

    SHA256

    40f7474de0eae7de849e5f46fe44c5b64efd5ffdfe31f295b2bcf00a10eed9fb

    SHA512

    82fd4bd821752ce909d607d0be4afa3a4069534d0536c7274d7eb502aa1ac3c8ef24c654338fbc9d005c56592f68679eda6d3e116d113a9a03154b7835da7a96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf3e0bbadc194a0addefe94b363e59e0

    SHA1

    af2e2770eecb8aa2614d8dbfd848d3973e984e8b

    SHA256

    e543bb94369137cc6e4428bcad0bc8349135eafef2356af546d90e96c68bc06e

    SHA512

    710c32a359d453fcf8bd0464f13cbbe0a3590bd62eb9e384b69e42b589c08d3bc3de0da6b43440623119d30b0ec8d1347c7e6bfb3a21334b5fcfee949c1f9593

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edfc317151c51ddbe0cf81a5aa0082fa

    SHA1

    9dd62621ff686d131b735eead2988ab571b80db5

    SHA256

    9aee79d5f2562a15cd0ae17a2bbabe1b1e5e9cf719aac6b201866d4e0cc73a14

    SHA512

    fb4dab6f7a9421bc45077f8343a6cf6a4170e066bf3b464ed2b4f57e49fe5a1f9cef6cc01cabc3304058aa6f8ea0bd406d63781672eaef5911ff04e4077e0467

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98fda12fa87298925fe35655c0b5d3a5

    SHA1

    ce04778bfdc1dd8fe9c89633e5419bbd24a8f3c0

    SHA256

    6d3cde14527be315daadb03862bb6d629e2d34bc1f0d385ced1aebcbb729c1df

    SHA512

    12d770d18437b950b24ece8d544a26b02e266615259e5160d744b4003eb3707894935704251dffcd9dced42f352fe41982f74010637aa0d0211e076776faa322

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f46092c009a6f18d016392c240cc245f

    SHA1

    fd98eeab3c149f200b51cf3f5f1815c0f6017bbc

    SHA256

    7abd8e7649db8c9c064359f6282193e313b693f71e0ffd79aea80e9accaf9d46

    SHA512

    2f12995902c25f733a2d89d13193c977f0a2ff1e4914fa9d29607da109f00af767c131bbd410376586025ea4ee63c6a2d5575fd4b3709c7668340fad313cde50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b932cd651a8e9b35e7d8eb183bf232f

    SHA1

    edb1c554c3450322749239d3ddb0f7c618d9af3c

    SHA256

    22de705b9e9d1a9bc0608a7291fd1e4348fc2a30331a29d77f512b13ad4be3b1

    SHA512

    8a3e3655473405c9ac7c19ac9dfa6f1562e3edb913bf94ede9131a18e028b9614b7fe9e07606049b2e36e4d9d0bdd5abd33033002caa373740fe7a59a84c654b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ff4f86c2ec4224b0caeabfa72982e23

    SHA1

    00cc09bd4ed8dbba07ff82ebb7d5facf00407ab6

    SHA256

    dff0356794ebd48c5cc12a4b0b063b59aa084649e39f2ad1862b88fc625b1049

    SHA512

    1662b67e9a6ae3754de5fc93526bb8258781e8991c2a29c832dc161c3a6c21ed93a5bdde7dd3775ec157fd9c567ed9790d2e8e4831bc836c39405851db273ac5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e04ab42525fc06d078f95d8716a6f2d

    SHA1

    1023776562dca9bc43c0035e9e8526dc44eef72b

    SHA256

    501ef6b7903df3f4be37ed272025ae3c75eaf8e64809c5a869cd4fdf7b2a3472

    SHA512

    cac6b3bcb5ecf8132972a1dba83bf841c2797a45747169b07eceaa056ddcfb7fc04db66bdcbbcbd6099736642cc5821947bb01edce7d697d732d885e2552346b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69e43ea0bd651594c446cf0fb1446fe7

    SHA1

    2b5455f6cf2c0b83aaed7e26c57b31da3d7eea9b

    SHA256

    579108ef2181347b78863abfcab77b9a6b9f6c2f99642f6b92f493ccd575f7e0

    SHA512

    9477d7bce87f60fe3ae7151d77cdf6740d672f2fd5f49e33032a6510881e343f5e1bd8b0fb034720fabc2f071dac6e978d4f8ed0773c35b7150d459336006361

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e72089bdded03e2b641d11eec2513af5

    SHA1

    acfc58b8733a7e5ad05f45f46e0f66eea133c865

    SHA256

    e42311971b5f3f9d2370f5fd24038a1bb56624b83d14d16e953b00f7ec53e2c8

    SHA512

    1e6731025584acbaa7305274ab2b7d89732f33b990fb895673e42931e4fa0871a5dca8f6b74ee660a5a6957e9cdab10c9ea24a1dc53bb6063615191537f304b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5801674bae0d1e31a0240a5a6476c894

    SHA1

    37ed4d9364fc08bee2cbb1b092025ed3d3b67f72

    SHA256

    75d94ea5b45ecfb271be14c69f8da8db43ba28fc7c94fa27a62390a08fce0e38

    SHA512

    f9837c7aa2c641316f6673df2edd5bebf971a35d5b9b0d911348e40bdb4948eb7692a7b020ec70c871f2e613e10bd2f04abc8f9eafd891698f5fcb9e5714bed2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7047c45535e55b1163e884255c2cb815

    SHA1

    5cacf59924989dd0b3ced7715eab7a517fc4c4e9

    SHA256

    2e471518869a9b9695d6e9853f00b2355a6895f955b93642737c3eb99e69b390

    SHA512

    f3582c3a3510c69241429780a741085d5809eecde96036851de5860dc6f868289c6e8aba2782a7da2f84a7bbf3126c68b3958109e7f76d4e74f868f28cae100b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98daf613ec30cc0783ec2760ad425756

    SHA1

    171920b59ee8ad9c755533ac0a773bfaaa27a999

    SHA256

    bc0834dffcc0d3868426bb2db98b141aec81bc2c1528af85768156c7339cccd9

    SHA512

    6339148f1d701462417236dd6b488501beee09a477886c633b36fb8e0e01c997dae42dc37f6cbcd1ba12e6d5fcb61bd11524d19f0b4f56ea41dca66eb2e13220

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8fca774258dad70443456dbcec7d10e9

    SHA1

    1d6b8d1847276c51cb740ff5ae97eb6553dd0a50

    SHA256

    53d1e1576c79eb269dc0a7d6242c015b3c9932d579c8a552e0cdbf23018aabc4

    SHA512

    adaba863c4f6fc194f4c06c5594464020df9e3dbde2beda651ea9415bb8bdf879c672c6168b3d1b912ece5307d3f155f115b761e886bfbc9bfc21e98c0131003

  • C:\Users\Admin\AppData\Local\Temp\Cab95EA.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar96FC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b