Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01-06-2024 21:40

General

  • Target

    8bdfdd1c487960916b0ff8382d15091d_JaffaCakes118.html

  • Size

    585B

  • MD5

    8bdfdd1c487960916b0ff8382d15091d

  • SHA1

    ae5fe57f39439065df589941c42819f688d0f3b1

  • SHA256

    646451d0a52aab51a97613cc140aeea0ac0ff5513d4329c2923feb0d99547eb3

  • SHA512

    f6541c9a8bb4294f5937d07fb466432453137d54c8974478be548c2a3d9a46d924110473050d11db302dbb5c08fc516d044ae4dd49143f4151458c29b4cf0fe5

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8bdfdd1c487960916b0ff8382d15091d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2812
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2812 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fffde5a0713450747f782a197a686bb

    SHA1

    1ffaee2a80ce761b2b88af7deeb547c32ec5f183

    SHA256

    0e4f2acbfcad1bb1500589a78ec2efbbed40628f8768123590d1787af2fbdb1a

    SHA512

    852a7b1b87858378722998c560bf3e2a1ead4ff913c3e3d2029032c7f9b9189bd4b8b6584fa7f9494a8bcc9e82c9de55f150e116f783cad7b7620cbb08a0a51b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f5748b34744bf28d6a73ac72e233286

    SHA1

    7b395bdaca3b21c2c10d73b7289286784e98c459

    SHA256

    6b21b82c6e4df44ab00e94ed06f75749078b50b64aeb7cf8ab370652165780ad

    SHA512

    b061e860e58047ff28a739d31592aaa5f066e02568df27c7678125a6cbb994026aeee17671f155225c8705a32f555a4e0c8859764234a33bac393b1f4f592fc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e581a5628fdc12d047bd0b24396af92

    SHA1

    99c26d12fab0f7951bcb08068e2d29f5001f90e3

    SHA256

    1c33f85987d9f627d835c02b452b307703eb6609ef81f1eff90334f491c40526

    SHA512

    13ce039fc24ed05388ffa19841793f99662fa519bc8a1eb480b02605f1f02589d43958fdc8ff052a263b9e50f8cfe10ba12d4d094c4d0a059bc278609c7dd125

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    538b666066e9f6f1ef7e5f2a83a5fd53

    SHA1

    9427c53cb19fc4da73c8da0d7e355296ebca0cad

    SHA256

    c811fa8ebbd00dc3e61e54141b0bb962b97d176e68c2eb1f8f810756234b5bd1

    SHA512

    72a4430d9cf1067638ad9d97628b69eec88fc02d54f40b143411472ed8d1637961cde1783b0970efc3464d42018d1c078eafb1ee460084f76d795ad4646ba218

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c41164798247f1a4c7e4bd4d3ab91c0b

    SHA1

    3209e8bcad737ddde39d6db2c0c9761c55811716

    SHA256

    e2733e0066f69904fc46d5f9e0a0cffe75c854ea4c846e309502e2e8539e7144

    SHA512

    b41e5e0a7c0721bd49ca30e7aeb569fb87a58470d8c18a5910e6089686420cad70009f3c156d80addf6b2dfe42b16a389ef8a1c0db8be2d02982d981707246a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d915a93d5d94875abe735f38ba3a4c0

    SHA1

    660ce9aa5514a432a4c2cb04711884853f3ee992

    SHA256

    90abcc7a739518b5194e7606a20449e1c2935dd85eb9810dc8ccef8a0da9a937

    SHA512

    7dd97bf6cfb7fde8059d9787993d18b16ed8b3448475254f748eec95bcb3ca7ba41e4a28d60ae45f5c006bd939f40c303a54e784e7c3ffd6eed13c6b951c8d01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18d47af656bcec5565ca002b747acfae

    SHA1

    c951782d09dfa297c9bad9b768a193be2c87be38

    SHA256

    4727434977e5bdde6e519a43d81bb458e873047093eee52d83fba20be4be2a3a

    SHA512

    b962600b33b4e658849f85f88f4c8384decfc122422a9f77ce940fe4853b822da87ba9ad8822ff817cd659ba8649d54b268afde36d51b237ee31b4c5e46e6e22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbcc1a25273030eb176d46e7d7919a19

    SHA1

    13a66cac8cad64158eafd9163a52eded7d64ed5f

    SHA256

    ade04c19aafb0216c7b653e24ddade473aad9a50b90f32b5f35afc4d1bfeb122

    SHA512

    88d018a29be2d4e442140c85f8cda3e05961b3a1a929d6816b7826b8b58c76f64034f89ead594c22378a6571a420c35aff7f3ab00afbc82ac39786f197190ac0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45ea14af09a8f8b15b0f83dd03c10e06

    SHA1

    3e4d3639f9ab0cea4122bed7b5d97422e65623f5

    SHA256

    202d9bd12e4140e801d9e6995a4ee194b3b35669d92b3f9710562f6dce18d765

    SHA512

    ba958555e656d7675e658a07aa4d85458fb983b3a0530314d9af6576465846519cb3d8f60e6fe9eb7f65bab3caeec070e1f0d750f2f59a7fb7e9d1558eeaa16a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9994bc86388e6ae81bec917f2102a0fa

    SHA1

    9ffa7ff51bcb3fea7b5d5587ba860710aa6edb90

    SHA256

    645195096a11c1ff44091d120b0fa64e11afcaaf57541e8f4939f019ce6714fe

    SHA512

    8e1f30268c8c31dcd39932ce45c42b6a73533c7b29d534856325d9c4c5637576a9b0b0ef0cee2e4a877a41b36a3271b65e70987b1383ca48b9d88d9d19bb15c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8213c09eaac5c9b7ae1bd1664a30a679

    SHA1

    019b26decd6c71b953f8f60fded57b812e2f95d8

    SHA256

    b035f4684434d43ab05ae1e0edf4033e3af8b3ea2eb5e5303a83f055717cd5df

    SHA512

    8829f73561bf6507164abbe7b9c78d98a4c68fdd7b6b777b552f08439ff5b20777f7a08fe67bc13d0df4a3963ef67b338c2728d7674f40fce6cd1d7dc1110519

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c348c0378bf261bb740ee68947665a99

    SHA1

    bf8a8e98f09b99352309d6000404c6987a00f0eb

    SHA256

    6acf7981b7115d486141d6404aefd67c5c9bb6769c6a00feeff3c25f95c7ce58

    SHA512

    b272b9b36ab68b236ab315e2c0df5c3d7b82706f4b695d476a38e0c86adceed6be492a07e440a0c864bd33fb8fa29722b8388846ba17ae870fad4bcd0183b92c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    377d24e6f4d86c7cfa1675ac63eeda04

    SHA1

    8c20ed3a6be2efe7d4b0088cbe65d35f06696ac7

    SHA256

    b80c3f9c3c192d97f5aa096e7ea3c438f20d215043e8998ffe6471851079df90

    SHA512

    384df8ddb0ef3e469c60c5a488a54f11a87b8c3bca649e41853d7a171ca498c143870ba893d0bb732f95c1891a0254c57556e38c940a6fb61082dbe96a8d278d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5e8b8454f730cab1216bc5ddae31cce

    SHA1

    a684bec51813752a70a15fc12dbf66498e5bb231

    SHA256

    1c317c6aadda2492e2590d2c535c14b8e3538cc558c524fe8a9a61130436b9f8

    SHA512

    f2d13a3509852bc422dc9af63d204a466862c22a2c19a4e015d7c39c66d99a7f7ad97c4a2891ef35aacb486a724b53e2d632efc2ed4dafd429987d1c72f8f77c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79a54cb3e6a69c911956e6aa4a376aca

    SHA1

    feaa999a324bdb9b83a59d9bcd629158e980ba9b

    SHA256

    cce243f8a42d9d69ebfb9d5ca520b584e3ffb9e32db25f1827b62d39c41fe74e

    SHA512

    a10d0100fc5092ea2a2865d65b4f17f8a08b59f62223160e19d369f2d308ea1a02a2ec1078c689d635b9a484e8e39a7552dc9ef58ce1fd775db5da8abeecf619

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57006dc9054de181a4948e09152df298

    SHA1

    79a3aea3898cfaf26dbf56541fe74ba2ef5a8873

    SHA256

    4fd67d2e2a689091e185624f4943c5069f1ef2d0a0b3ebf0f799a778de8eac87

    SHA512

    d978d50f0772d985b825e9734eb2fa8b923e46ef8e12216da8165c87c6d9af3cd97e067a614b3b1c5cc592b2a4067bec7b44b46495938173897af97c3b53f414

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f23ef0cdfeae3f6d68dabdc9378073e

    SHA1

    511ec84eb13df7f4f3218b2571baf7837b531ad1

    SHA256

    b5bd6ff70ab9857fcc112c23ae0fc6a1210629dd93b6c3827ac1670c21392c6e

    SHA512

    ac9f19127f4297fd77a5b45bcd4a92e96bf4ca3919882f2dda2e59602dbfdb4ff11746b7e2b94af702fbb54a8b66e50b3c54751377f5716031a45245030bad97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01fbf1ed06a8afef1f0213e87fd96cf4

    SHA1

    afeea52b79349c1415927498ad9ad493309cdc25

    SHA256

    981616f5e74e95c015d23fa7f0c0d9cecfb1ea30a648d442ec8c325fc24a5787

    SHA512

    c0c5cf5dc71edb1723881ef17b05d1baa385ee7e9d473f4bfa1f1a7df64d4c173b2fb4eb35972b244af5f3bdf650590d6706d344a7c0eebff91e9b621066d42e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8377155e65630236c0119db354c73d49

    SHA1

    48315d3f98a68dd3900b9c88c97d4891b3bc59ba

    SHA256

    da2bc1421c2b093d1e1b13fe4f3b353d62657b59e543b53dbb2dfc60c6f9e50b

    SHA512

    f50b5b07267b2a5395fe42a14687ca0817e98521f28b4cd6e84e6db1c0f2c46cf7c1e6bc85c19d410a5d44e7274b511fadacb7b956f0a67e4aa5e4b6b7b401ac

  • C:\Users\Admin\AppData\Local\Temp\Cab8FB5.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9113.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b