Analysis

  • max time kernel
    118s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2024, 16:23

General

  • Target

    9b4ba4e3667c46dc1f409374da1039d9_JaffaCakes118.html

  • Size

    3KB

  • MD5

    9b4ba4e3667c46dc1f409374da1039d9

  • SHA1

    82bb5b4f188657fd030a40f5ac06aff8e639a86a

  • SHA256

    a75b53eea5342226d58b99566b8291dd63b2866ceef7a808379d90686ca59a8b

  • SHA512

    ac509a18cb21b19edd7889c16405478df7ab12d02889a9e85d2b128992cb2d373791b52d40954b05eb43e543f0399c38c2b1a1f9b66072dea248f4c924f2edaa

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9b4ba4e3667c46dc1f409374da1039d9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1996
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1996 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1856

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98a72aab30df27a6e7f6510282b19684

    SHA1

    e184deca6956366290ef8905dcfdfc51eba5b22a

    SHA256

    62b058ba1a2d9f49bd77e8e704773abdd4f7e8f8528c22312678bdfd73dc946c

    SHA512

    fa7514c7bccb2940d9195b2f583c94aab27f8c70a46601bb33a8138f8c2ced48aced1fa1d692be1a73a505b9875f60e5f0ac3dc9ed9df863ebedc0e4a99b740d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    01f1d4557931a4bf9609410b17ce0cdb

    SHA1

    f7e278a8b8736cb31ecaedef8335ae799ab7b050

    SHA256

    0d28ede702e13dc37932fd37f5d4ff2f94888e2c243f356e161843e87d4205d8

    SHA512

    14296765044d8e4daa568087bd8d0f42e300d937bdc8e3b8d4d0e811759f8af05f31f74da8f10ef898faa4712c2bf71a3b7410ff4c3136087e33a73f2946fe59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1644b20a59c2060a92ae4369e7e4786d

    SHA1

    aabcdc0469a806d229b40a25d64eeca673b712df

    SHA256

    2b4eb7b73ad5dc868e56630da4fb2843cb530757f6a5d217df460a59127de337

    SHA512

    a5062f1738c9af598f0cf44898e4af9fcf9f58b8d996b329a820e370fed432715dd0d70e487d78564155824bd651cd74453ffe400909ea08862d3c54671a7dd9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba3e97782802e31495f33cdf371516fe

    SHA1

    7580b6b25cd9cd4363cdbd7180e6d12435ea19f4

    SHA256

    b8595b415bc5ff4bb4b0fa9d8d645bea7653308d3bdd5e5e39d5277bb27bb8ce

    SHA512

    1706805ad5532726877e494cdf0e2fd112ff945827b0cdc38ecc6095b9ae624fb69b224bfbb42f0433de9fc61f4fd753408b4fdf98c84ff5d5e08b8791639b94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6f641c5825596adc0f2a8ed7def42b4

    SHA1

    1275df916124dbf994017a585f04e292e9c7373b

    SHA256

    731b784e5f87d9f3c7c698a0358a9adaa5f34b5592f8a0bd7db6674aa1d29b02

    SHA512

    4eb39c36b2d1f2737a7fcb36b036650fd476033e9244e4225bde2ed310476733bd6ff157f0846cd429a15c4008ba02dbd29af59329916e4e39b731fe133b60a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf8f096f5452ef637caee463b014dcad

    SHA1

    3c458c985ecca52f779007d429aa39321ebdf60c

    SHA256

    7958e705b28888297a6e01d8fabeed8d85ecd5a87c34c878520b97d2e9607b45

    SHA512

    57a11b0417e16f630b0664685d2bca15cc3e3f5aebe21b4aff5c53950ea34d7779cc7afef9d93f747ad707ce2d6275a1ffbbd9c796f9341d44086b91671ce5d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38e17f8dd931f9ce516020b421ff4b71

    SHA1

    32fe3c285b2acb565e983309b3ff3509ff197e04

    SHA256

    6e7cca53fa2cac1b3a50447ae7283f2493fc49e209e98bf0eb5ff03f9f6ebf6f

    SHA512

    bd6c989d6c75fcd75deb1e30fb57bbda7b51091239b043a73ed29a63f136277a5b563f77b888905c09c882d937e109d73d61f3e5b5c2bca734a204150814bbc1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f84c91e957309f63e01d98da0ff316ad

    SHA1

    74212c78c8796a1559f67197b429025956a8f46f

    SHA256

    49ca2330fa19b9f91f226905adeb30d566e43384bb5d91dc4d718a3fd483ec10

    SHA512

    18621da9665392a9d11d5196ab52578a673d4d04e4440caf805fd00961fb938c27cd87b9463df2d5d10da9ac25e03f917a58115ceabf3a70faa1b1de196547ba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2123acafcca9e70a259558280b54d206

    SHA1

    4cc90b686ae7bc22f3ad0349ffc05d9721595ced

    SHA256

    dbc41cbab876067751329823ec377d1505bcbef0326ce5ba7852f9ca7ecb93dc

    SHA512

    3d0cb755d83942c2299ddc2f7122c0932bd10ad4d57d2bc122f1c485a1949875cd2eacfb905cf815b7908954684fa2001845bf0f9e272c94588fc4a5bab71926

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ed533d1b014aa081e9aa025811b199d

    SHA1

    863831a1956e0a4da7a9f9fd3ca17c487921d762

    SHA256

    236fa2644e5f88c89c79e1cb7d2252d3a91a2ca4e9112e59f3f459eac4030d09

    SHA512

    ba73969fdff16b3cb8bdcb5f73e6ea03239de772e3181f77f61c2594c1e2ccbc3bb04fd3fdbc2947401b842eaa7b38fdd34d4cdd8624d1dced5ce7b97ac642a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    841bfaeb183f801d0160cfa2108b36df

    SHA1

    59e4717db2282c99c4a3c6ec8c43fc7ffeb3def8

    SHA256

    a5d3ee6b1a6a596bcf553f44a31bdd09e853475e870872c3e6e2f28a50a058f1

    SHA512

    a838140339e1067853109369b4a88c7700243947bf5d4a28a09479ea600c5a35ab541096ef4341423908697147d2df8d5e7b57f70c9689cad9469ef0c6e37943

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39a3051a2031226c2361ba345c2a1022

    SHA1

    e5a40ca831875bc55c1d8ce8190322b78be5d793

    SHA256

    fd26b4a2bfdfd1b33f8e7fbe42a69163899d1e1beb7d3fee8f69120112b4a17e

    SHA512

    2665e326fe604176614ef85b795a635cea8970bcaa12ec94e68e7b1bc6553979bdb6e290d6040046649840f6ca72fcbc6b2904d52e861a0d86823d872b9e68e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87050b5f26b19197311c035b0a9a73be

    SHA1

    dbeeb51e725ae8a9af7b595a330fb0dff601e293

    SHA256

    64dcaddc674879ae24d351e161d03bb40c4cfe3a4566d1deec40b74958a40911

    SHA512

    4056baca76bf37c25b4a4f7915262e27524f8b550da12c1a454d903b349f58dc362267cdbba575e6baa893a3e5d5278f31e62e3f448aec781bde0a181aa16194

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    554f2a877123cb1729431f9ecb6330a5

    SHA1

    823509d9999d10e591a77958b46f2975c0c05e27

    SHA256

    1d96827a2dcdf2ce3c42e953a6424b337ee4851185e412c2df5d53257aae2f0a

    SHA512

    9638705c7f8032ab03161bf4c869f228f3b805c54c066b793ed3886bc5ae19f4b999e01b6a45730382b64a7f07576ee791de7bfb808add33be054181645eb529

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a70063498d577b613b427be5f7291e37

    SHA1

    52082cca4e7590b5339ad4b493abe781b85dd1ce

    SHA256

    95787e9e1b858caece74e7706377270bd1d90f4e2147ef9c59fb974cbdbec528

    SHA512

    45cbcb78223d42bbb6dc87a46fc3da03b190fa2173ce301673c6468ed25cc4f22f7ce1db671f49be632c660fad6403560719103cee0bf0847a9397a162e53d0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d2b10359eea6f958ee03e9834edf3db0

    SHA1

    d2f2bd2c40e541eb34099fc59127c773dded272b

    SHA256

    f9ef6345c0bb9ff9ca3d0121c9042f705ff3fedc199ecbd96692bcf759c29975

    SHA512

    3fb60798bcfb253723918e5bc4dbc61eec6cda020935f96a2bba36a772f7f933e9e18ab16e86ecdc16e81575125347f48a70a971d15e69f703560f522c50e05c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0896e62681258d96ab7e29278b2f1ebc

    SHA1

    8a804d51b8ac66db6fc68137e2bf2745749f2c63

    SHA256

    989f358d52715a7891bb18ef6c2b744307c4d5f5b1082c746ae4b043bb862ba8

    SHA512

    a0b9860352b498af735e00c43cb8ac351831c86ea4a8bc9da02342683cde4dfba69b29b1614582b84c17463bb169b155359e7cdb037197c6302c6b255b603577

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2360c2402b48dd11eb461b3bdc5ccb36

    SHA1

    2bd310c295f075b00c049d1a46b4f2afdeea8482

    SHA256

    5a32c00463851ce35bd588610acf240e2e1d0bb33b1b726ab3f1ba6d5a052aaa

    SHA512

    c7a0d484280929860a2f2faf58a769e1530346df7216bb1a19a62861c467fb1e807d6a5c321dd3f93c03c001fc650eb8756f5341ebd63a8b8d6cae7acf3dbf7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa43c27de549b348e25f8a7af47be5dd

    SHA1

    19104716af9619f70671f4c3b7f2f36ed6ebae48

    SHA256

    6faffe1e912bd6b44edd5bf4f278b4da60c3d6ec74464f3aa23794d3d265accf

    SHA512

    1c2835d5fdc2945f697fbd14314362cd4c5bd9a79323eda0adc2545008bd24a0590ce0e011c475d4f6e000ec6dfaea54ac5485423d1dd698ae58a2647f0153a3

  • C:\Users\Admin\AppData\Local\Temp\Cab2712.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2843.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b