Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    29/05/2024, 10:30

General

  • Target

    806f1ddaa7de6e53e15fb6c9c9813626_JaffaCakes118.html

  • Size

    869B

  • MD5

    806f1ddaa7de6e53e15fb6c9c9813626

  • SHA1

    66beb2d296442dff8232abd58b51648b783f320b

  • SHA256

    e9699605ff9da6d39d6c0e831e36dfd87345c7594ba97c1bfd99c45dd1506ff0

  • SHA512

    f19c68374007da45b06b11bad97c7acfae1fba3fe1dddc19ea4d96715ee29ee2719953da582656c691564fb6cbb25e03ef4e63c71dd1c68145477f5d27fc66e5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\806f1ddaa7de6e53e15fb6c9c9813626_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1304
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1304 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c261d61a15e27bffafcedd0047223b06

    SHA1

    a197e3baf6cd166a8c19399920c431def18da558

    SHA256

    d454fc1dc6f008481e39f18df7f93c486cf5aba668b7b5820523d64a06c20654

    SHA512

    6d1376df95f7f291bd3f5bddcd405f877dd3da2b882c283db900e3b92fb8723ef40684ac605973cdba59e0358cc70eca76a599f4080a029e0c33cd52298341c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70d693d84ee54ab34a9a2e9af12ca036

    SHA1

    b08c4bdbbc658c74b159a5830e5d124e6283a9fc

    SHA256

    4681dedadc016b3f7ab62b5fe4942a08489913dc802703ba44d10620d46a7100

    SHA512

    96bdc5fe08381e2ed9db83e89dd08035b4a5b55e49838e2f2b5403fe5f3c96c6fbc6aa3b4ed0b12b5e9eaf4624ca5df25faf2562c3227f1858155be1066c42f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b844765ab3375b38245ef974607487c

    SHA1

    252ef103adfe4a309afc1a387e57ced864d07250

    SHA256

    ca0726f880b8ab19d3b19588c89c3aada6a24b618dea8b57ea4250e8356af918

    SHA512

    2a6ebbafef2bc1386274efe09e5f04f8147244b36abb57c973149f4c5f3e78a892cf2d0190bbe28820b6208ef7cbf3534b0da153a7bc127aa16f871fef114046

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    551d2566f507d1d5ab72e381be7c8f61

    SHA1

    9ef297abbffa2dbdafb8569fe133286586f0d042

    SHA256

    753047af83eab4a4fd0fc3b5e5bc2c3d9ac48801b8525e17f970d96d316b13d7

    SHA512

    4f75e3b8bcfcaae62ed31bd6cc9af1d7633c122b62e8660a7a77ddc0253c79a4ed4f2a93c31b7f493d7878aef436a5a49b6ed7a354dbf843b9c6f37ee4ac809d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    221b185c343ce937547cf65d2845cf68

    SHA1

    5dc4ecc79c4a63c18306397e1e5ffa580c4e71f2

    SHA256

    58a87485a0539d5da5326136ec2be4c254ee324a6fc5d22024e6f02c2a711762

    SHA512

    72567e8c3de6c01bdabf6088eb11c25444ce18b9a7ccdb2b178f899be894674923600840d59a1d60c1dd647c544cfeb52e24b785e085aa7cb078219a4a429dda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5b466fecfd7eb54b58bc8940ab5f4f4

    SHA1

    f9fa16aa00832163303d17291db2df1a6247c003

    SHA256

    38076b1b614fdda809d5edb011c2dff981cdf2ee8189542b6391b7c8787399c9

    SHA512

    34fa0e90c447664a9311a9959d662778f326f9c443c14052b293951b1d974f0f3e3d36c6c1fed8218437ca8ea683718ed1712991950828ae2b8ead83a1da4a33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5bff225d600e8d8318bf901649350ee

    SHA1

    1f6589922019a0e9a70ef5e9a00509f01f04567a

    SHA256

    436eac0a6728afa740115a9eb3bd0966922896cbd26dbf0a7540c5c38731c1e0

    SHA512

    a9e1ab013770199956cbef8735d0c37d148f802ed8a490b6f0b1dc64b191f3cb1e05c025e7e9da67395a9347d7615a25ba6f72c8325afd23c640d9dfd533f640

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2da2349f30d28d346139043f294d13b8

    SHA1

    4538a5044aae5b5eba4eddb22be6021a6f1bca41

    SHA256

    2301075774a442de162b44402a191439eced54a768df3350857c68ba2812bf59

    SHA512

    a6cb269adb2e599971ecc61afb26e829f94e9fccc4525e451d3f5872aca530012514f0ce6bb403576a9dc025b7f96c0e31b0e5b6d2d975a9491685ffc6bf3472

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1cac125d3c6e920d2d25b49abba9d0bb

    SHA1

    3d689e54d502719d06499578a00b3646656fab34

    SHA256

    088e5675395a9744c0560602401caa17ab9f8abd46e585b96a5b17a9fb1ba961

    SHA512

    d389c76dda57135bf8ca53dada8a90f1d7f797b4efbc2e6a39ca5115ebd3fc0e68e746e0282d5db7df4bb90ffa885b8123f94b752ae616dbef1a1107292de41b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff842d4fa5a3741a88c590f5590bca15

    SHA1

    f26e03f957db7b49f56aacb9d7050bddd1444285

    SHA256

    d2270a66315f0843e3e3e9631ce806addfdac255aae0556e658170fd20bb6fd4

    SHA512

    621685f96456d1d428a49e7ab56e61abd4c913230b3299403c4473c41383aed7364892c84ea34b6246c643b47841c80ea887e7f44ca747dbcb33e2f4fc04e15c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63f92e91568b2500efeee6fa53b7fcdc

    SHA1

    85f44574f6edc1bb2d29b5a5de448d6c143c43c1

    SHA256

    c0b4c1436236206e39dfb3cfaff6d2c3a25f4af12581d77db06556a6bbf83ea3

    SHA512

    fa5d6b7101f5ed740f6047dec2c4c542821297375fe3bfb3f92028f30ffd392de21c5371c4e79eaa6c7d2e703dcb300d57e7f4160bffc9bdcaaa82b34e7b2b11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    365ee9f93a2b55bc204ff83af888251a

    SHA1

    03f485f06f431c33f2657c9a65eb27ea57b9e3f1

    SHA256

    44c8bf7f580c8a654334953f3e0d551af3829f605d9d3464c7b6b8ed10a6d486

    SHA512

    32d7e4133ec63885ab2d07e811011058c8bf7f8b97284fb5858f7867a189ab61202d1957851154d60eadde2e9788094ecb5f762a544191145728f56e3a5962bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a976bdf0667a5542e84623db51dc758d

    SHA1

    1356eba9164acf0ae88c507402c4285d5ac70f6b

    SHA256

    6b8e379e22e2fa13344025e6f7e09773ae86ca534b3586fca56d82df129bf1cb

    SHA512

    1d9863de0e20b22f01063a1f951b5d24ab7809bca5cdb1434b0fb83aed35a7b0f8ad2011e6ee04062fb42e2e80877301e6697c23d8ef15a077f07a5bfa2da2f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96fe8c400f4dc9a9ba6aa40d2eccdb88

    SHA1

    1a8ef8ec9f227510f906487edfd292c75b6f7a4d

    SHA256

    3c12ee683fc1482788cffde046f69e2acfa5ea2eba0169ab9afc0e4780cd2b1b

    SHA512

    db5692db12f295998bc2c4d9cedd493f908e144daab25ee0d4c2fa7ab9a31c058c9fb3c31ff182a736a4c00c7ee5f5c934b133ee83dcc8435532a5e3d905514d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    302f5f59fc21e896f1d7c666c1a415dc

    SHA1

    4fd09f0407f040e842b275279f8f928890a64b55

    SHA256

    71459a4faae268638cdf51512cd6e2a9744ce03f11ddcc3bed5ad0eab06c43b5

    SHA512

    857faf3dc30ddae6c256985f6da414d7f3eb1c8eac1be2203c5aa45227db8dc5482cdf12d00021dc2e6f05a5e2a74f77f35017991fc0d7cd414b309080906ab0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba6fbe8be47b4d7a17bd6b6440e56b2d

    SHA1

    bbe63d7d39d0a09b0d656e57e8892db39ab47a94

    SHA256

    77f91778bdff127046e67c7a27224e1b987762c1af87a60ae8fb93befe780c6d

    SHA512

    d034c9df852da8649dfa5f39f5e6da5ada6528957be19afaae6f159491ff2fbb4e3ca39a5426d179395db92d396a61064e45ec74c81a0167c2ed8f234cd1667f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    261fbe5b5323e514879b5176f2c4853c

    SHA1

    35588d261a16ee6e9c27450e461791970bbf5fb2

    SHA256

    46bc846c4a725816b819dbf8fe0b1bcd5ac8023547f378f2ce4e0008be878314

    SHA512

    6b86b2dd24297d9c77e5124bcf9c62d684cc58fe6e32cc0e2ec5cfa1ffed87c98f1fb61b1f803d9f5f18641f2e06f02eccfa495dda63cbec8a383c4eeee50340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d6dc50765fdc7f44d5b30ea5ea15c80

    SHA1

    e87cd3250c663ae153c5e1cca34efea4b20295e5

    SHA256

    41407468fb1c6be7b429ae96c2f444395e60c81ffb960a0e9e1fbbea03b0e2b6

    SHA512

    4358906e14c67bb7cc9c35bbb0a73deda643e949e0ea216def02abfe6efdde911ae803baa34f911fb97a4e88f410a89fe245aab3ef1ff405acb32fdfa8f955d2

  • C:\Users\Admin\AppData\Local\Temp\Cab279E.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar28A0.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b