Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    03/06/2024, 12:31

General

  • Target

    91cb0547f9b54b65cfbe03d7c97bdddc_JaffaCakes118.html

  • Size

    3KB

  • MD5

    91cb0547f9b54b65cfbe03d7c97bdddc

  • SHA1

    41ee115a6d0469b1c540eba4f5c0df05678ab353

  • SHA256

    9a914907e58cf2952016d9bdc2aa26ca32e8b0b15d27f6a6af29fb2a1325a713

  • SHA512

    28675c10de85c3fe508c1a30fc83e11c8a67aca83a2d030e43613c6ec637bef5fd12150fe7c86be76426a372922e67c9fc3826113909189f9792b3fc73e7b467

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\91cb0547f9b54b65cfbe03d7c97bdddc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1056
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1056 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ade99dffdb0c862b0e8824c4288171f9

    SHA1

    626fdeff7e7e2e30f95dc4cc1fd3ebe0ac50970d

    SHA256

    d310273597320e41000c8ac59d8ac23e561f450f4a4dce5bdf692aff5d5f4ebb

    SHA512

    71d268b98b20b45fb767b5f99c62b930ecc2df930c685c0c25298378c592a7d1bc7c1b550c21a50da1dc93da762c80337a628e07143ece24ca57f9eb076e5285

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8cd64d089a73dc84b08c89837399c6a1

    SHA1

    499975f891e5a8e5fbd4e825f9c16cf0ce36e8b6

    SHA256

    5720528268b79eee783661776e6b1a066d53d8adf9fba6770f98485a3433122f

    SHA512

    59c6b695f50406abbcc8e483cdc5c7b62421298cefa69ccd7638cb5bc7250cd34181aa4c8391000171453f26d9133f93e28bbcfcf0704510ee29e305e5b893a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    74a19054686e93fbce582d2ea04797f9

    SHA1

    10134d2e9ed010d65e52739a7b79855569d2b538

    SHA256

    c0905371c6b2f2300d3acae8e3c38cbdfb8b3845c0594f6d12283e611d190d3a

    SHA512

    6ce0d19f06118de13e08a49c9094b5baa8690a3b93085e73cb072a09bc5eaa906e6a3615d1dd8bf94ce5700451c18bca4e1cfc9451df8d8408867cfdbf51569e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    241887a6eef05f94084915f24b9913b4

    SHA1

    9e5382b4de4273b834f4565d6c03dc21aa158152

    SHA256

    88d0791632e3688547fc00ec4cdecc16b8264fdb4c9829476319f506fbb31c39

    SHA512

    0ebdf1f8e0fc12de5595308c723d268dffeb2923408f30e1f8f46ec182722950bb861b7036b41d1643033fe10ab9a85b21bd226b2db750fe63433ddf186df36d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    48edd9767b69114e29a41b068d7fadc5

    SHA1

    16b72170eaa5291aa0d5d74c8585c916c98682b1

    SHA256

    2044ec920c73bc9d79b24665a68a0e37050a18d62533a31d52c7acc799603d1d

    SHA512

    40494fe6bb5b6e776d75990d8044a5015c844ecb1bac07d909046a6857a9cb2f71ab1fde1cc53dc92efb41aa80b15df9a6261b8ce65ff07dd63358fcaa5e07f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7c833f90ad2412162a340c168dbe2bb5

    SHA1

    06b1e1e5cea08a9bda185055c5cc8da39f86998b

    SHA256

    a8e01f51270ea4e0d3d2253a22dafbd8af25c1365c34b0ce11703298b5c208c9

    SHA512

    462fa344f2e7d8e62645e6d447a7924f1b7fdf76c7cb48bfa5bf98c1c6ff068e242afe528e05594526a3afe7d6eac3c7ccf4f8d85b0f7742ad12b438cee35eb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    abadf9ce171be91175c1e50905575dfa

    SHA1

    172e455dfae33771ecf2dc684a4e6bc8e37c4420

    SHA256

    147cf7613cd904cd2b174b15b21e698b582ca84618d278229e0a3fcd260b32b4

    SHA512

    80a8ce9f524dd1db02d46ce9116a11800c7ae86ef3a1c5faecee7aa5ee8bfca1b12da5af81a0d25dfcb879a42a3d331cc050f77334527eb0a791dedf4fe3917e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1d62c705092bee85bfa57674a919333f

    SHA1

    82d39aaac876555e3b9d36260608db30aa1c6c8a

    SHA256

    806a549f89ecc846670e8dd0e0b9389ae2fe680fc3deee647ab9f28cbfee8dc6

    SHA512

    50831bb0d672546006b2426abe0a165cd06980c6788b6818f36f78a19fa1c9afd9b9aa640f786be746fa8191af9c74227349d844f6886e016f88c72aa7644e38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b1cf4fcbd80346dfe382ad7fe53bf42f

    SHA1

    4f6567cc59661b801d3ee7c4990bbf85ff433f0d

    SHA256

    3d2192d595efcc3a5c076311110720d5276534bf699d912f35c77b4cd8771d1b

    SHA512

    ed6dfcb6a505b65a49195bdf76278bd39c1e19157446ca89205f5368cd9b483367c4a47141ba5f7d04c60cdbaa35d2476f2bbe35649ae81b7f7984629fe9a8a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c2bed9f0150c7e70a19a00dc3d7c61ad

    SHA1

    265fdbc8d56d1b2cb1e9da82087ea7473794b5c6

    SHA256

    01b73344b4451313603b8e5945e6fb647aab01e8943af0f32f8722425399b195

    SHA512

    aa2a7b848909f70c6687c440dc5b73e241134f895865a7ae2a241bab9a13a8fa0cab1bf3722e8d8e8b9752269d4358a8bc66a98d3a64d0d2b2756b9e20639455

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7324401260da09665fed7adcc3fa5960

    SHA1

    93d9f5a3cdbe3105157625ea1d39ae46fa58eff7

    SHA256

    83d3f1d8ef9a7990f2a58e90efe74f8bcfe62584104d2e5b25d21f90f1d34eef

    SHA512

    d6653eeec63377a403514de606cccea0791a1cef9b597b9227fcaa340868ea346d5113a3c968fb9051e2b9bd6558426a7ca09a8e1391c65f0834a5c59c3d4d71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b7361cc291320712b69aa37e8389d271

    SHA1

    826a31977f23725c1e63f3c96821056bdf40d4c9

    SHA256

    7d76bb532dd59217a42f1c2d6d6bcd2eed4ac8d21159ea58ca6c18ef7696fbfb

    SHA512

    18b80db33dc7468aa8d5190a081e6f154a7a2828d4562e269f9ebd074a2a1b630f0b7c9ec439d87c6f4b4ad20ff5c6a391a38c3c8dfd164c5a44455b43ae83b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    250296ffd6fc4b43303c59b899082406

    SHA1

    852cc9e36aaddde7bba7f32720138233983534ec

    SHA256

    958764889194bfff1ec2c615ccd07642768b9de685d521264a43378dc9b0b892

    SHA512

    fb85e7dcf9878ca9c6f3dc9e485a3280bd40d794076f60c663b7ed0abc27015be7e68a21a9234127416b15fc9625415fb8b56bf959762a873070ae144608014f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    00d18d451e8ffa86e90ed70644a1f40d

    SHA1

    73e7cbcfe2fa3a9ad0590a55b1404388e6c10558

    SHA256

    3db22d2ec830ba59947faedb7bd4fa3a2c862a5c7504dc834eb56b2deaa85684

    SHA512

    2a7017e39d8d38a6a7a8ada26114e42fb20b928b5f6cdae2c0b64c87ea632c17a2f5fea804d2d46ecb05ed6c63ca9a0114954b077c8744d12f9ea13e5da03f04

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5d5736c64de5d8f98296d3282bb20cc6

    SHA1

    0008153091871ce3c275eaf7f2e130f2310cf9a6

    SHA256

    dba9da68495917bc4d24eb87396b88c644ed5cf8886de023c5cf8ded50a0eff4

    SHA512

    18078f2d751444fb98e21c7052e1ca171791f85829813625fa4f0fd490614b7614646a4bfd384b64cfe20576818cd832ff6231569269ae4b5661025141e3c8b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e7b1e43db66a9c3d22e438b57ec9bc5c

    SHA1

    f2952cfbf94f134b0e435d54723498e85a387a5b

    SHA256

    09be1c8edfe303e9024cc1121ecfe493096c2cb6e54a02334b4ceacb002e9b6e

    SHA512

    65592f4e5c77370b46abeb32b6e075edd36467e3d6125fbfa69e85e0bd75fdcc635717de039f7bbd75def382b1574abe026c147593e0c538a41cb4ade6619827

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e56aa99ae47b3e783a8d7923c6912383

    SHA1

    61b643e6d11f095115f255960c40b4ccda6949fc

    SHA256

    7b2ce00b3e89c40ad8e9727b84ef71635d3d7119450290470b3471abbb07e83b

    SHA512

    26124fbfe473d5027d58ac12509bd90fd41eba172f0f215d3a64712d5b05cdf9589e8c1d03ccd760d34ce6f9eaf213c90385aa3adf96051ddc99dda2b98af638

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a015462ccf745e3c2e7ad9432a46f09c

    SHA1

    cc44bb559b706fca506e7a121c0466302fb82736

    SHA256

    f7d854bc68e2d505ef6e5a263a71d8d188cfaeb1c62c8af999898a4d9743fcc9

    SHA512

    9c12aa8420b97ec52bdac1394c2c8463ceeb83af586afcf5f806c1dabf17043e5354267a3e5d32a6ca9fd3612af29b024e03f46e5c992d8e239c85a305485e72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0b22753f3cfa8a472f42bc9d3cf55460

    SHA1

    d06412ab3a804d09139765d74a1ca68b4bbbeb37

    SHA256

    4364b876f13818111ab3af5aa7fd63d1906cb6a9afe656a6df2ff44449ae76aa

    SHA512

    1a96689e1af14816edae7d21d63cb7d04fbc9e0791126152b3edf5eb2adaf511e2654f5c06ea1a5c3c53460dc4c21383fecf3a60da9b4a45d06ffafdb0dc087f

  • C:\Users\Admin\AppData\Local\Temp\Cab9493.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab95DE.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9642.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b