Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    01-06-2024 08:20

General

  • Target

    89dc98cea85391f62e9e94d543e41c55_JaffaCakes118.html

  • Size

    742B

  • MD5

    89dc98cea85391f62e9e94d543e41c55

  • SHA1

    bad70021785bc11cd91052807eadf2d483551570

  • SHA256

    75898191c178aeddea96466e05d330064011e9ee34e91a61af8d9cc6f6af00f7

  • SHA512

    5deb61c89646fb55e635487fd14ebccc9d22d8a40092d41b3e17d816d87fcf6ba3852ea240376547bcc71224c0b5a44d38092ac424fd4db8be6fb3bac523e8c8

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\89dc98cea85391f62e9e94d543e41c55_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2868 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2208

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bbf4f294fac988e034ad14ab0e4424b

    SHA1

    206b58e169d15a4f08b81228ba0d8210705c03b6

    SHA256

    dd847191d4555f85d660cb9032181c5edf2b219740efb93e80046fa72b8778d8

    SHA512

    07cd5a5a865d2172fc498c61640e8e02a3734f925f65d6f7e8a58419d7cc52f521977869ac969d724ed7aac0fc41729610e24e560ca9afec706e5399603e07fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    552724a423185a0bb63a216589c9f0e9

    SHA1

    e1a610c80718b4fa6c7c4dbaa6d7be530e40bd86

    SHA256

    b3697677c8ddd28268a82b45ee066a28e5c4303711cdfd0158fd765e6c4127bb

    SHA512

    2f922520393bca149d493c26493e16acec601db6d727646d728c2a7cfbb6a13e64b9ea156c5208af05a99f3d2d11a9522a31f87340aaa5458462ce0d2752a1a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3bc409b8e950883fdd2934cc7e39b2e

    SHA1

    6a8959168ca504bb2b35a247121f06aa42018066

    SHA256

    503d0c6d03412cac41ce3802cb2bf1d11bb43a7fa6e414b920b0e60f2d746470

    SHA512

    b1955d80ac569b69c4d2f63e0b1766adc3c9d8b646cb3adcd06b8a37c83516776428503b6bb8bfd901cfd1c09eb0ead09a7ae17ac3cc8f5bf65a2a7722655993

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3d8d37e29152013beb72ca161d0cd25

    SHA1

    5d71f3722b314f17f915d45e2de52fbedcfb761d

    SHA256

    7d1c58394b6a731955b9eccd0455f0af3521ce65a61d9ed34cab7c257dff8b47

    SHA512

    acb285a4fbf8f641378bc99753163255741e95efd95c2ea0614ca7fd5589f86d776fea3fa00b1ea1a6b9b37d7576bb6b3e1770cc418abaa168e97fb089eeff12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a5018f02fd3fd03df5bb725da3a5447

    SHA1

    781c3e3470d5db5e220cd721bbeb9e0d7ccdee6d

    SHA256

    77a9d98957a9c70fa6ab67a83db57acd81289bbc7b811ab84a1e4033e9aa3602

    SHA512

    a89608eddb5d49efe907a6d32c247b079491cbf4cdd92bd2329803eda9a963a2396af38afeeb13d3d16c95eeaba23eb66d74de5896d1404fd4643ed08de45cf4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14fda68150e7755d5878e3c319fd0a72

    SHA1

    efff237a4885325b8bcd5c1a1160ec3df736c93f

    SHA256

    8ea66d8df75a67cb1c9e88fa689eca9e5d17309a19653a3d7d1822283c836abe

    SHA512

    ce5dc56dff46ea3c7f7089b6f6146da40bd09304624bc28035c1e9332e592ca39b6ac87bd41eda317a804b0f889a00046fc7ec53dffa61189ecf961068e0f874

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a32a2d07d7430d7d91e252b3b66872e

    SHA1

    c23e0b3c78def0f3f482b1dbb5a58314d353eefc

    SHA256

    3edb9a24a70aea9b200ebd0738ddd2e3d38d8db1ce6222692150b6386bf99f60

    SHA512

    09e178bfb8b623d6b405e69ec3ca16d60663f18809114217112b2dcd7be0d4778104ed3ab2f86389cb9857b0a59214fe44112857ecd2a9bd8de5f8975b65fb4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    904c93026d978084317277fdafb194fa

    SHA1

    95cab6c055fddde9fb7a81df5a3d02007503f976

    SHA256

    53d3f8e96cc62fc7b3ca6d37d75f91058da64c598964571030273ed68adf0a41

    SHA512

    18f9c4bd8c5e64cc9f19eb81ca98a5e87adc2f368dabac2994b1e2d146ee854ea3822bcf4b0a48f0c9305b6d5089256692db1618e7cf78f1f287213943420010

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b49f31bf345e60ff6e02d74fa14babe

    SHA1

    2032dc5ce6c3fe879194a5d8af733853779e36e7

    SHA256

    752491a957a1832370e0f1cbcbf2556c21e947846cb5360745f9475e809415fc

    SHA512

    e989ef30354c6cf93018d5152536032c01a272a3be57b671ba669f6989843aaccb4e1f55d2c8cc1ad94d8c0491052cf4d4006bd5afbe73d7b2ddd967218cc1fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f609042f1044990ebbd08fa6631aaca

    SHA1

    6286bdc5d381671aa3e3be861a00f8363f9a8593

    SHA256

    f9cba179c0d8eeb34b1d7214d2f225d4b0a759e55d764ce640e18032864f2b53

    SHA512

    7523f50e585463b0d70d1da56b788ad322fae026e583e72cf7a426fbb7968bc66d56019f25395e85ea8422c833e11d9852843cd97ec643c480720faa9f9bbdc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6740e09ae12da4621a524632a6ee767a

    SHA1

    03042ed52961d7da39943e5bbb7dfb76c6b1a230

    SHA256

    2beae7562b946b610c3ce198677ed67e9bd3314143b2ac60b9664a1571ba2fa4

    SHA512

    a250a7193e0340f028ff31217a1ef5f1ba042efc495f4cbec08b0aff50b56668b6f6f0b428b0aa92a3acac736639793ced1c06f2ec7f59668bd0a5d7a434996d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    348882027bcbc6a1dcb129fd5a546bdb

    SHA1

    010b4e5fc3f57734427068b6c0d343fc16722e02

    SHA256

    79c2da36c1a006e608ad652ed19dae79e0ba4ef962938d064ed936b4c80e22b8

    SHA512

    f00b40ba0ecd55bcf0ceb88389132e567e35e621fcc53837cd613a86be2f2d4162f33160e470378cdae3641d5e43d3518ecc5a5c20337b8490631ee574d61c7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8c383545b526928e04c0d36def5e902

    SHA1

    3c505e654059f564ae3164e780951243b93a7d50

    SHA256

    24c28c23cb7138e6dc42549e01aa5d83f42ade92decb64958b8f0c961fa983d0

    SHA512

    822a76c45809014476797b2cbd3ab81f0eee925a4844ba03ba130d6d4f17837a657a2f3ef6d47e819e2cdecdfb12ed4d4183752f9b2bb46bfd4e97bdf6a5b09a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8835eae8537dcc9d49a86c2f6183ec68

    SHA1

    d409858d91ce715736b22495b16f286885eca64a

    SHA256

    67bbad367c561cb68f157c0ade1f02e4eecd2bd7acdfff3135d524ead4f3fac7

    SHA512

    ee79d82a46c540606211bc4fff16417e1e6620671d597ceeafa6b27cec105c82afbd565272af9444bfff0e17325fd260ec135e5e970346e90e3ff93500c3786f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92d293f31f1dab38d635412b1a4b8783

    SHA1

    49d8963011120ec97f1d3482a5cee0ba924ec510

    SHA256

    da6efd20c349c4725ec121bb69fe48ebc0b759792514aca3a70a8180d679050f

    SHA512

    4de01d6afb6c0f9d601a3e5451d1c2dfeccb4c94ad1148a19d999d029e734f449d61f9b01250b6f59325592ea7c0e39148e3e2cae2aa7eaf7097ab7dfc1a4d93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff8604c1e0c14fe4521b0b887dc1be53

    SHA1

    08dd88c7309e8aefd6477ec5c6ea40c43a569b37

    SHA256

    2f6b34b0b3a68daadec4397bc274b11097195c43687957ffbd290733f1b3b23f

    SHA512

    b2e981321abb28429a74271590fca37abb88c88c68ff39b9170d2615ad8481bb71595e345cf6b975a2e319c2c597ff863f8f5cd10d7acb4151e9d0e36f8a5a7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b43bab9d5df26c20c324527ff297147

    SHA1

    a4043dccaa393825177d9089ffc04de3fcd927c0

    SHA256

    02afadf5c6938fb777255ffee225983fff7b5c7f99e88bcdd7efda53b336bca4

    SHA512

    dbffb099b26cfc0c34f4964e0d2b18fcb74556df9329bbf24a432da1412b3509f109419f1b8ffe9385e02d7c9849263acad9d4ba7a8fb14aea68f878f65f1dad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad2ee45eaa78ac4fe750563bf59795cc

    SHA1

    01ceb755fbe21500a624e1651b79b0cf78bffdf7

    SHA256

    5cdfcf9b590277934cb758caae894b21f8356cde7e24fbfd3056bde31a0d6c64

    SHA512

    11b8b074995c98fcf8ea516a6d876ec7ac556be2808ab5dff015be942f995ac6378a4819d76d9d11e31bf803262328be1d1a4dfc71abf73ce1b2b81ef9ae6d9c

  • C:\Users\Admin\AppData\Local\Temp\Cab2D49.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab2E19.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2E1C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b