Analysis

  • max time kernel
    121s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    02/06/2024, 22:29

General

  • Target

    8fa7d081a407524f95bacce09efc893d_JaffaCakes118.html

  • Size

    761B

  • MD5

    8fa7d081a407524f95bacce09efc893d

  • SHA1

    6f055bfa2662ef8b58a4d9e7cdb8c0742cbe0017

  • SHA256

    65244e58d3b55fd2bc00f4e6d1e73c2578bee8f3f8e685b8d50706dec1563999

  • SHA512

    41f69fcc17d6b1aa3f40f11ba41b1a2dcb93913815dc0e8ce3642ac596036c5c58caaa745e697723ccf6de1a6d48ffa23b346b3c5ce02803fec10762c397e7df

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8fa7d081a407524f95bacce09efc893d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2040
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2040 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2852

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    486c75f7845b5fede083e58c17ddeabd

    SHA1

    02e1777c10255dc63ea8f59cbf55d11964f693c6

    SHA256

    52e64316960df3ec680d5436c7fdabdf1ec77a241c1198853f38c0d8e7b20348

    SHA512

    17837935ceefadbe5c1f3d61f0d48dfd2fa7eb77113baf48b3a39d4e6b9291579bd8838bf5aa8cca8198ad26622e53643dd103f555a6838d53de5286bffdb21d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d75b9e294f0fd96a13098e687f9704e

    SHA1

    5be334fe205b9d590702450bf2dcbf0d39d7fee9

    SHA256

    d2ec104ba5d5dfe47210102015b0c0aa6672e99c3f202e7ad3d699f6a937684e

    SHA512

    a3d027052cc716f3e083a0db92e3b59e08d914c9a210f369c2084c126ab88fe2f91e5e8af1cc4bb601bfbd132024f9f509f3cf97b4622d777caa2a30c68e2ab0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e0161b22974935c854911b8575c88e8

    SHA1

    967e65fcef554b706090b6fbb90590862150cca9

    SHA256

    9f5b0f926c75b1407d5ad49c1b9c8b5a35e584772a011cd95fd6b88a662535a0

    SHA512

    386f0d3e976c96eb40fe3138582260cf50ccfa28dca12c1bab5f7160873ffd9ff2dc571cd10eb31af3c6ebefe49a817047ae3594628f68b7f54fb87749e7856e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f7404f73ff854cc459338f9377f9a5f

    SHA1

    b84ef834f3fc61b8e82cef627707d2180014e37f

    SHA256

    cca60961417b934b55e2a3596cadaf0141ae3422b981d420c1c877901e237929

    SHA512

    294085853ba36ad137dbac085ba18d54eabaab3f62ce283ecda4abd4ed411136b8db1de5996ca15363bb5ff1bd85f7da6befdd55c281fb8ebd12a33bb29ace1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5d782e60e9389710d0c560005f9ccaf

    SHA1

    6cbcbbfc8feacfa631b5ede2db0256acbd9a5d96

    SHA256

    5cd4d7e659cbe05989d7d77e0abc1806fad4b0cddb47e4393fc5a096d940ed72

    SHA512

    3cd99d93ee0cdf20a9bfa6427a28c18aa8e887f7b8980d41738dd5c84b591e6a4a14d9a314e77e55dd5ac7445fe2fe71fe7ad3ee610d0297462f615c5968888f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7fc00402e4e4ea7e61009ef57ceea93

    SHA1

    671d0b2d1cc37b9b5a0f138f59c642a20576590f

    SHA256

    8a82a929358ba96768dbc0904a0525f549d15fb3f1c6c5a45239b8ae8fa39d90

    SHA512

    cee72189db29e72ff966c5f1f57a6d38a9ce5f808adf8363adcca5c333c5a9d71e9b36117f0ad403e52a68c3aeeff7ad5a84e86b8afe6d7f18922ad1f5abe319

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    262549581f84cdceefad18f4b8a1461f

    SHA1

    8b0bea8ea4f4774d2e39fc482307fb8433f40ff7

    SHA256

    a5e03ad60ffffad7007856f7b9d54091171f9b24b83fa11c83963e94fef08aee

    SHA512

    5d57e106f39bc819ce6e66622174e71e57dfea6606c64ae40822fd6dce868f2dcd4f1009e1677089f3d0cd8022aabfa344a65b91132d4c12b8269e6536607fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9aa86137bb41b8e2634c98cbf814a78e

    SHA1

    bf54504861be1f2353e3e9897523a2868ef91a83

    SHA256

    efa301e109f85a8a11c89f0246e67a6fcbd8993740d99cbb1df8d2c3452d4557

    SHA512

    971f20fb88f52146dacb4f008b29cae60b829a75e54ec6e4d45278143ad7743601311917a0a97a5d51346a9c2b074db111e7266cbe931c7a194ed92599a1c881

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64b4aa1cf13914f1341eab3990410c04

    SHA1

    d680edb6fdd53528626a6df120e663dfce717fe0

    SHA256

    c9928c560de9f64c5db2f31528b2f52b3eeb2f9d93cccf0a6a80e8c046b53eab

    SHA512

    6245e5ed53ffcd26b455693d3975fac80b17bd749fdeb865e0872ef8f54320a8d1f38247d8ad9bdd01de35b2778e2566e4e2ebfd87ea8b1cbdcd3edc3c15a2f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b68393ec9c712c23aff7fe0c0104dc0

    SHA1

    ab1dce105a29f79cf13ad96c6300b45b4da5ce79

    SHA256

    895548bd4f984330ae49d1afe0b400c67af96ae4b9fde1be554493590457a3c2

    SHA512

    8ac118fa455035b4bea09813215e93836fff8d11b9df121d3eb1b973e7424c2fead15c2e9154d55a15579f09dfcdf2c628f4e8060c761cba552c67412a483d2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    551fb4e89084364609c324c1b6854f4f

    SHA1

    2cf5e78ca6337fa1cab3046b775e5a26f7a6c49b

    SHA256

    f6a9a9a627192d105736ec22fbc7f95c2e5399b93db01d768046059abc5ca5bd

    SHA512

    af626ca9ad24bd7cf2fdf8a1784888371849a4f0f7876cc43857d7e98cc6af6970dc0975036bb0018759e6fc4762d485c80f68531952c75de0c8c35bb06463f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    291d24b273a321f282d992c1d53bfe1c

    SHA1

    0b0cdee1ba9973642558c1c676b26416685d1354

    SHA256

    32b9b41ec075cfcac8506a327714b3eea0251f4fdb890713ce6a9859e504547f

    SHA512

    dd07833291db2f18c78ba3207e5311aa396c326779812d42fcbd7e4f2e9f2f377a38bc3568d742eb59e146ac39599c908d9bfc5dc86e2c3391ffabbb974d89c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a651c3065e8dc3d2107327869206e15f

    SHA1

    acf70ff76d0c1c9868f621a26b5813feaa199ac5

    SHA256

    f48b53cc4019be7652cc06d6fa5828a237959d739cc4bc9271695689d5aa4b92

    SHA512

    0a42a618a8a3b47cb90b402d2ae17b481e4440be64531fdc1c90e830c7086547c0ca0e67f3272eab9c42f506da608ec26d5a9494899b37a32ab8fcfbcb1f5250

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af85b9ed761fef65e9c01452d46d8da4

    SHA1

    a0cdfc49500e93c9212b19c1f28f718b3ff7f50d

    SHA256

    b32650226408d996303b322106de22721b5f032cd5d9c5a0d9f09f6192dc558e

    SHA512

    83544c174b567ad826f5b78f4e98be7885a7e086599f4f86a920f75853431b3c5daf08a41373cd73119dc1fdecb1323791cc08410a3ec04b02d934353d7d911f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0d0d11d69c8c90a96107a101199cee5

    SHA1

    d0f3dbeb4b134221c2bb92e3893fecb8acfc0a93

    SHA256

    44e5b7325146a9c9fc6d396302cbc9cf23a5a7f960c5b0407a9061e9643f0024

    SHA512

    d184dc0fc1d8626c826fe42e103331a2d2149e4c392bd4cd84245faa081ab49f4b70da6c1c40fd045c03d40e5893f7f302f761cf6e8323b5a7d4041dccd2324e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e2af3b4d4668291854b6a89a12bf0f7

    SHA1

    7ee8dc909176759fccf8c17d7a078039680eb008

    SHA256

    e3afe4eedbd56201f2197a957349c76ec96800f89b6a2f352af4d86d52e85c2a

    SHA512

    364b8601011f01948e2fc0ed53e281d3f578967a51a176819721d180590b152f5ee2856ad64525e144bf629a04e8def7810a9a6fb8295ca2fe885b0d211ed5cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7ebd1afccfda346924d49de7c59b8d6

    SHA1

    a18d527b4a4e255400e5664b6077757a1e2fcdea

    SHA256

    c96b36895cca0e863192d8536a6f72be6c1d6a1b3b4edad3934ccc76b842149b

    SHA512

    13fdd7a71f98012c865d94032280ff6622ac27c3ed113944bd12e5db1752921b2571b5101593b28c78e02b0743a498347da2f540cf2168579f9ec4fb32b828f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3428f9dbca87e52ff9558b2cd9512d2d

    SHA1

    b47064b3ad576edb4b2971aa588a8337466d9361

    SHA256

    b61f1d3bba3c6e187bb8aea9dde0571b921894f4451664933975351bc9e8dadd

    SHA512

    3667983893e4ccfb1a90c4f79f8b151746bbce2064af1fa6a9c415551f7a86c9bdbf67438974b56a27ed284914292a4b8f1efeaa43369ed5849d88f1e0b2608a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa45460c26fb39dae4a123a023809524

    SHA1

    6f1dffabf84951ae104848f1b77407992259d7ca

    SHA256

    c493e6ee5b26f260ff60b2fceb0a06a1f3816bd0eb6fbf65b723d86c7c665dfd

    SHA512

    9787277a8edfc09b5b2c106a90a1378568d02fb6014abd66339de44eb8440a6e3c48fd7c715e72c10b6d970579062130fe26f1f50292bb3eb12dbca86ffabc6a

  • C:\Users\Admin\AppData\Local\Temp\Cab41A4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4258.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b