Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/06/2024, 21:46

General

  • Target

    965eea72892bbce33b4ac7d06f248b10_JaffaCakes118.html

  • Size

    3KB

  • MD5

    965eea72892bbce33b4ac7d06f248b10

  • SHA1

    aea79929fc94ac936460d20427fb587226384432

  • SHA256

    5f9b150e34bd987a6729c882c65e947e48ec912ee42a602ff83e7e9cae00c6b4

  • SHA512

    559282a4d7318aee7944994381638defc4f4b46f0b8221a1dfa2a11dd9c58cc89126c954714c27080618589efc26012e5d82e456c985f12ee6378bee3b683c20

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\965eea72892bbce33b4ac7d06f248b10_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2128
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1192

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9dde83271d89f7b5555909ab2b9be44d

    SHA1

    aaebb82b40f8e015b2121ea040ee3b57f540a1bc

    SHA256

    be5dbd4eacdc21e9b34f15c923d8dce5109a0dea055688aae5fe1b487a8c1488

    SHA512

    b31a8177484508193c7001100caf81a7f6ce101f4810f4b6a5288247e80f17480f290eafca26183bbc2a63820d740ae06dfd7a1fc04d0f983468b263900e00a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e20eb5b196d83881901b41ff58b1dd60

    SHA1

    bc0717397576b09fbb38b61160281b90fbd53a5f

    SHA256

    b2e085185d0d758fc1cdb420fa30f9b7780684a6aefbbd3c91bd8e577c52aa6f

    SHA512

    e820c38ef29a6d4bab512a7716c51a161164e425937dcc6fb0d13410102e277001a84d52de8db4bc9c12c3fb070a89e11c02a22d0e1d9e60f8b5af239736b3a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8217390742e2bf0dffe5297a0883080

    SHA1

    cfbd88f4ff6ac8a583757bbe9e0c605c585c6880

    SHA256

    a7bab4b048bb35a23bb7a6831d0d917dc211dd9c48356c34e94cd05586802873

    SHA512

    dcd6b183425cd498be3520f305449f27f725b13acc01546005d896fb655e35867169ae6805992512e53525b5ef76afde6802be41c827bfee057e9a3e61b96e18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0dc9c5d49b95fa4f08e814f3b5febc8a

    SHA1

    d00d5424c01eaae097dd647e2cdb04c6a5d8d378

    SHA256

    b071eb60cb9564066112d5cc8175e50d5d1f3ce8a948e5a6cf83be856710424e

    SHA512

    57e3e73901951ef7af3796f56be0216b8051b678fd70f50681a91dad327ae5b936fb924f73ae4b93c0ec4088245bf82950f4175d1a49b10cd8c48c3beb69db9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9824f317938be1acadd701f3c5cb3343

    SHA1

    037355ce3e0b0c12439e239493d9fb77f52b4b73

    SHA256

    25bf1ae067fd471fd579d24b54abf9d9386ed15a200fec0cdeda9764c450d665

    SHA512

    d8c7fc2088f88fea5950396197ee335ad7f77798357b4f0223cc5e51d185ce8a693844f0b6a59e33755b54793636ced966f980f4837b94083d11d9c55f174d3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2638ecdd3978906bf36e1b899a3005c4

    SHA1

    cca254dbb97a8baaecc681275abbe0ef2e616371

    SHA256

    d78fead62793a709137432e369b2eac261d74775074b6dffc5be75d3a2cafd22

    SHA512

    de7e5fa75d826cb14bd93844939408e9b34cbd8c00997919edbe2610b667c35974ababe6f2da85f50720a2186c0e2da660cf3b5d0c58945d76b61c791e612a6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee66f23afa548d8b5f7781cf0cabaa75

    SHA1

    2c6d8fd362a5719d6bc730229faf6976b7757f3d

    SHA256

    a263b6236a873af73527ce1f5b429f56a2c1a2460a7fbee25072c24dbbcc98d9

    SHA512

    4c9e6bce2b036cdfd7c2dbe47853925a8f9d6778d6c6d9b38759bcefafcffd15975c6d3cde56f9630300d08cb97778204cf877dce2bd3597908a25dc2ed5aab5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88039dd13a68faac809ef77705026e32

    SHA1

    8b8b6c7a7d62f66ba1d1b416d58ebed867f3d968

    SHA256

    62b292e4665b022519af54ea9c7d6c6977666358273ea731daffb58f906b7c77

    SHA512

    e480a511a580f08d18f521711e3123a4c14bd22a281925caa07bb06c2eb58ca69ebaa5e0c17aebd0a61307449dc4873eb890628520cd4f91864eea2f96cb7f34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4989d9a73b5bfa01806caf8c6c0b70cd

    SHA1

    7078e9aae666aba6f327ce323f052d37c6f8e367

    SHA256

    3c4235212ea2b1ae62d7d1e27a68b4971f8f96e4e638b3d34b672c972a6076c4

    SHA512

    8181b9359333437906e7f37bc9f0fbd84a8b25873e318c43a795330ca4703ff9e0fbc451c8e525d5733b98f296a110b8aed82c1150e94e70fdac34ed60136a8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    48dbba6bd10a2048ca3629e653f4977a

    SHA1

    ed9c518820e3866153297fdd61da34291037d398

    SHA256

    d84bb4f2b4ab17d1f0aff147036d3692d6070d17ece8d8d0b3517df84ea85135

    SHA512

    e15c908aa2eedb6066d15d95dbd393e59d97b37a154f6b334b966dfe024bdb5943ce15dead267cb4e43fc88b25e59a9c3038ba6413e3b492fe5931dd22beefc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eda1195e10bb2aeff0813e79fe4bb702

    SHA1

    c1ed7d6e12d9fd2093adc2240436526fec7176c4

    SHA256

    f77df97505098993ecf25aa39f741c968c4f09778959ebdd874ec8a420e61023

    SHA512

    0d32add679d9c1e93889af38cfab02632cf18dfe24b6969095d8a20f06f1d1869c4e70f53ecca3798a362f5a3b7298a386c69950b7cc55152656bf31d33422fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9525c5b11d12ac4874c2c2a452c0de25

    SHA1

    3a294abc1d164eda1469a87f8c3853276e28c6f0

    SHA256

    f57c4b982d1afd3b3460bd594597d36460202d2201b26fef4c420c8072cb2ab6

    SHA512

    3e9d0ac1093e7ac5e0d50aafe4d79f20aea8202f3385891944266f7a4c42bd15343b3df3388bfa7b199c2ff3dafb599367c4cc84a46d903045e29ab14a36c524

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25bfd31a5c09ece619fd47caf6da28db

    SHA1

    6f4161702c2041d86b7bbaa5ae48085ce38d5786

    SHA256

    6700fd9b68472be5b79bd752238e4b00a0228802a0ed2b8849d0137b1800297b

    SHA512

    729d40a16d2a2107625d4a510ac42d37dcf5c0c39a82992a3f98a6f81de8a02c56ea4ad362418dfb1bc710739d384ee33c9d8a5009a096ad3deb28c5ff0a922a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2dfd3070be9322adce3a88d9b4220464

    SHA1

    15030f35209d009bc7d44fa78ef6a44b058fc25d

    SHA256

    8ab62ee6b0e52c08330e9a25857162ed6abe7759c25ba07141a2ee02e941ed24

    SHA512

    c78f6871346a02aa274e9458151a4e8729d7ca86e1b776d7e265468f52d278896448dcf9bee501d1731907c2daeb7434814f5ee0e3571616ccfd799c2933a1ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a1627596b4e8bb314298930c23bc73e

    SHA1

    cf9c7bfd230c92fb4dc05839acdbe12c3ff77f01

    SHA256

    705dc01957a4438421e8bf22136b7350fc71c3e34147d73f3a30a7fbf835cc7f

    SHA512

    6af2a183e680c442489c73cbc9cb6338e06f4e7b5920d331e480b4e5de4e320c609c8e366ad691a9213ee22a631a71039ddd3161d17e90cf13daf921c3b0b6ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da56ed439c99a7188ac78baab31d4cb2

    SHA1

    a86c1eaa08ca77ace2dbed7ab7cd70427ba2e1dc

    SHA256

    e3f94f9c331f4f26c1b3f2eb4aa90c486ad4fe4f2d6b55c7ffd7f656d87f195e

    SHA512

    e7d397fcce354fc8d58142c19cbba25441504d4614e388f4b3651b734fa763e69cbb49417f6fedc2c44e918505ec0ed01e21cdd46631d309bd1253443dc9ca80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc31c70490b5bc212e16f7c322188e33

    SHA1

    ceb13fb186006a5897e81c5531168579d1eaec4a

    SHA256

    5de55f065c6b48400826f1c32939cb73fce3b6e467770e98ad607000f5697e9a

    SHA512

    e7cbf2f2b7fb41281a529b154de8eb7e08780acb5422675208658ea8f5cac89d97943e4f997d116a9cb5f0f4a99ff8c18c503f8f37843a16f2d6788be0d96796

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c02a3fc95b10ec8919d83a9a358a8552

    SHA1

    ff2d4b52ba496fe23d954614fff2fed69116951d

    SHA256

    c1feb57fb4f36a5f0fe6d89b6bd22e6aa269943759e19ab01f07523e4c126728

    SHA512

    5d9dabcfdb630da06f84ed7925b024fb5e1dbc828d5f9971e724e34e9ad37f6479a4a9e826325a9616dfdcf0181fd43733c4c8b32dd2a538e31d76b4123a62ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84d15f83600d97efe7957ce96856de9d

    SHA1

    f9aa84886421eccd077b5f1f1976b95cae862035

    SHA256

    dcd0b7b6902c7550320c023d7b895e0717b750031fb6765d8b3fb52c8b916846

    SHA512

    c159b8ee282f1ee17641151298a0b4537ef41455cf9800a9ec37c7ccb1ce76e3e1eb7c719089911bbf83cd17857b233eb2fe9d726100a90bf8f11f3b1a6ef8a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cebee65216719565a96545ee05f41e2d

    SHA1

    e2ac6433ca1754ac4e25ec92847151541e7241bc

    SHA256

    b956499aa0ca6e22277603fd1c7987fb3d2b03813a2e9980073e1e4f43ba038a

    SHA512

    78409f9cf17ddc3f665e8778287a3c58efb27be7f41a9da64e564ccca8fd735cc87e8782d7a51cecee2c71e74dce20e7e4f54901c3d47f1761989012839e4433

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a51ddd44a1509d8600ad4d41598d9377

    SHA1

    39d6199439848ca9d295e5b5251f014f5099b19d

    SHA256

    2b92612dc068551827b61640e57ade581b04af2d6628d99da1e38bf39bed154b

    SHA512

    9e8a3b9e2343542fd4758ece5c6090aa41b2daedf5749ee1e5f4301ff948a39dd6437e3e8da44102eacc350caf90db2531ff41b660cdee5d95746d1e3d5c8432

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afe7352edd565f34c66dddb9af0198fb

    SHA1

    171aaf5ce97010a28f641b80fc8e7f04d1211fe1

    SHA256

    06ac11add1ebb86c88992ec98ce254f34276ee22fe4e63c832fbc4bec74f445e

    SHA512

    d80259611ac425eb4c93e51d739cb3219fe6152007efb8c40437b311f66b087cb37a95111b6bae70b49d92a5fb4f7566470e0e10c447677cf8bbbd9453fa2309

  • C:\Users\Admin\AppData\Local\Temp\Cab408C.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar418D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b