Analysis

  • max time kernel
    120s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2024, 09:03

General

  • Target

    a4c2b87eb710fd465607ecc836609bf3_JaffaCakes118.html

  • Size

    483B

  • MD5

    a4c2b87eb710fd465607ecc836609bf3

  • SHA1

    31506789548aa5fc745346d745b8662a4b1121d1

  • SHA256

    45af55845b6fa762ea34f740507db849b7df03f3ce7f827acf1d31fe4d27a8af

  • SHA512

    42a275cd6f2808fec6650591e44e21fb3c2339e643a64d676eb86971b4acb5c46bfde2c5bec88a76ec24451b566f6acc23d45c1591e1e16c683af6f5d5e25c19

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a4c2b87eb710fd465607ecc836609bf3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1672
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1672 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2280

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    741c91cb3ee9dfed0e1d3615d9bdc824

    SHA1

    0902bbd1eb03fcb449f4f2d41aad5e914459efad

    SHA256

    1454fbff13da2ade4aaa79a0c2106d837dc5d48e636899c7baf28df1c6be2a6d

    SHA512

    8a012a5395fcada07f2ae7996eb4c14c4a2e71800109017513bcc712c3b5e427308342bdb121c44568ee5ed228048287e93ca285f930433d8044a24ccc070338

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d08d46be6de6548589f012078f77c2b

    SHA1

    1dd60f30d5c1013a27b074f712b49b3043257052

    SHA256

    09001979e5bdf3cb763e58d329f1db7492469c7b42952813ca853a4fa4ab30f1

    SHA512

    ab86262b8a7a2f35859ea1c3de57ea5841367e3833ceeab3c4773746481addde2943dc867bdcc8e9a86f30b6d2e888c3fc78894eb6c1850c69990d72d5491896

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56974a166239e9c0f6a079e07094b956

    SHA1

    b3eb82fb84ad770c272d488de2919d195d9ce524

    SHA256

    8314fe6f07ce262ba5d4acee44204ee176989816087d954017bb28a1f6b7010a

    SHA512

    c9f3a692f4a6ca53b8aa7cced4f231fbcf2c5f2aa5a67b217fd008002eceab71c65c0e985ba79d30392d4d177c870abbb483d7ad014d53528f48d914772c317a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7183b779552a0262fd86b94819b0f39

    SHA1

    d57942ecefe837e3da3460dc0458235f8f924611

    SHA256

    f30c995899ad898bc0a39ff6ab4b7bcf015fc7dae2d38d9f71cbd33baeb98bca

    SHA512

    af49ae153368977997217b6081b2d1d4e3bd628315c725c2c0e9d0b184318d551dc5412ab12164466004f619488b1bc77e20306a32a94cf41950098223c94bc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3ee83eaa40a16d3993be2f4fd14a52a

    SHA1

    66e2a16936f8adaf3f60822841a16ef16e92fab1

    SHA256

    8e721797be8661bb6f9bd9c55d799ff3aa9dd56c452f4d4190beb8d77d4a8803

    SHA512

    cfebd5e0f584abbb4f73a55dcf711888b35b63cf2174af30b12aecbf0142fc31e8f2ebbc2d3776dda94f58edd490a9d1f6e0e821782f74b9579fc493cba85d24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    026ad8c85070692acc80040e66610797

    SHA1

    0a4473ef1e4e5810691dab1f5294661121766211

    SHA256

    e296292ca187b93001e80c6b22d6915fdf7775fba553ee5dd286d677bb445e27

    SHA512

    5ce5bf55e14735a0a321634bdbd3a82b4b922088d7db02832e790cea796fb02a38ff6345a9de678b8fc883c6a70b6535dfedfb060b08ace4396c6249fb307c24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0972fc34225a30b243d9db9d66c65f99

    SHA1

    2ddf67f06a08a6ee3c627a36cb2824037d7d2e9b

    SHA256

    118a4369e8c3adc2e291f7dec1ff03722da0e5910aac869e36cc4da8fc3cbe6e

    SHA512

    3366d21c47be2ab6402d43ccd116ff3f7234aa29f0d4c261cebf78a86e9e2fa61e28e0369e969df8b2cd2c4ae5465ba2a56e6b163e54023fbac60615a8750350

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ac0eab9fe22081bfae36e90cdfe1b49

    SHA1

    013ca1a8a09e3c445d2bd68c16450eb7760d07d9

    SHA256

    1c1bd17a5adcf7d7b111c0044784bbd6648aa2b6d3098bee8ed8037cd26870e0

    SHA512

    ee8a814de4511f22aa39081652392dce618c042e0a5250a530695e2109add7ba7d442afdcace38c990ec49807a5c1d7e6a9d7fef9de2c902cc9304d68d724baa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1b1acceddc1abf666697a3e407f5a45

    SHA1

    468182ae5334a44479b5b5c00a873fc5ef25150e

    SHA256

    dc4e0227d9eb2c868f840a340bea93ca96dafe10522240c30d28de5e21edca5e

    SHA512

    287a3b3a10212d69f72363116a5d9cc2dc45303f95938b329380f91047c211de677aa36b49b77d407f3a73db8f9e9a853f24cbc182c8bf9caf56486285664e43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edddbddf7ed8b686d8d2fdd35e2ac691

    SHA1

    9652ce50d87cc6b5deee08e9a8459143c800f8fa

    SHA256

    f4b41be13db4803e35f5893482480c91a3be35987e87a10f5a8e92f51e5ee926

    SHA512

    add7bd61478a5d11f5ec41558dea813fd1da382d2c6edb2375375168efacab86270ce06fa786957f632474b617c03eb4940a14c1a4e8fb9dbc37e33dd2d25e1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3fd20f930fc561736bdce827b6dcc78d

    SHA1

    a74825a740bb1396bb9067218d29b5530844cc67

    SHA256

    7d02c97b5b41279c7659b782a13820218c84016d3b45eb91f112a3223eb07b05

    SHA512

    f03f2f0ad07d3055b8ad8835c7bfad79bbcd59432efe857b848f75ceb3fb3ffa338c4782e23fc2ec5196ddd144ff3f5a4a1f327c9a38622d69b3a9ffc25b2bb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d6066d07ccdb18dbc7df6c9079a1703

    SHA1

    9133baf2ce25b241e40cf2e7ca1e8be711bdf7d9

    SHA256

    997f59c7d1f494d9a2c599cbdc3368bcefce32b0f1b0d681f3e4565f51570cf4

    SHA512

    46278540fbfd81560401862d7c850b1075ad8c9d7b2f9d423177fc7a07967564185faef8d2d381d536fa69bde11fdd96d6e2c99a2299cdcce2ee3c0c1150563e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42e8bf484543b4fba5dcedf79191e5d3

    SHA1

    010b6357f265a47e6a05105926f35401de0b5d62

    SHA256

    3a7a786c51667b72b8765735b650aa308553fc7ac0ce148dd3dfa36b13cd538e

    SHA512

    b4244597defdfbfc42832933bc667e6467662c68c44590e80af774ee48b7c312ae348367c009b363b213030f88e42fb713cfe1f4ae3d04a09fc6b4b413c9344e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0030c8fdfb380070137299a148675c3

    SHA1

    2dbcec1a39c2776c263f1271b11e8d12bd7b899a

    SHA256

    8a88b05ef4975a8b47ec8c9f7a06453fe5183b91b9239d585cdbe75e0322cca8

    SHA512

    c62f7785ec50659379fc6dd47b67adf921764b83b2c05a489615cd507ea7dcf4dbe1eabe5aba18e11bc0d41c73ef6ef0950f04c4ac67b7f782e34e9666be6349

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    411d724c1f2da042142245b7ac666080

    SHA1

    0279795ad45a43b25efd3c0a4aa3ca2600d8c674

    SHA256

    cdfe33dcb531de421c5864771103a974873094b128bcec547fe99cc6dc42df24

    SHA512

    5001245c9dc13c8e0cfbde17c90e4e83706abb799543792fee431a5bd573cb5bb6a771d3f331827f79f04e7eca8acbf29a361cb95b88905f30e437bc52b7cb56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1e9c9b7ad9fcfe96d211cfa93cdb537

    SHA1

    14096bb32a0aa06b0d0885a7d06f61d674a90d1b

    SHA256

    794d2443d1288f9a0de416fd8f610d72e5ef00f9779928a872a92093b5331c70

    SHA512

    954e4e67210059f3b8e410ff27f95f9b4b2dce1ec60f663c0651c422bbc12441237694bf4f68341460a25eeecf0e76f7d276512f516c4d07a7f58cf1669e9336

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42f913d5866fa71b2967dce8bb432f51

    SHA1

    f0a83ea0b0eb0edd8e65e6139e9405867232b0b2

    SHA256

    eb86e81c1bc582d7eb6f385abb50ddd632265e7e88e82b950df523ab5fa56d47

    SHA512

    9baee49470f224362b2f45fa69e09e4ff7707237e63a8f3cd23688414c6bbc68ae2da4c91000bbefd190a1a2fa551dd5acad149d98ec726dec623e6ae82849b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97349398fa1130872ce670120a32ae11

    SHA1

    932d37ddaacf5d424ab0453a63e41931746e0d9e

    SHA256

    708388315ec492fa3bb661b2b106995bda886309d720ade5058d82fbd0108581

    SHA512

    efb971b35a1911c09d7e571557ba8b57d34728d03748905a08e7a59e47f20d9d6feb11bd72fb29169c0e06cdcbca5ad55fef0977ce9510cc66cb2761e423989c

  • C:\Users\Admin\AppData\Local\Temp\Cab67EA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar689B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b