Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15-06-2024 06:20

General

  • Target

    ad2539005e5438f0eba76ae087211664_JaffaCakes118.html

  • Size

    3KB

  • MD5

    ad2539005e5438f0eba76ae087211664

  • SHA1

    64d58bc880ecc406fd595dd8c3fb39db52c25e67

  • SHA256

    f702fae7e4d79204edb8193ccd3cee14d8c92163bbd7c6fea2851a571dbc8bb9

  • SHA512

    ebbd53ad514be7afbfd56612fc980167b40a87d3cf058573ddf741a191fb81a129fca4df400dd12242f3450a443949c2a917afbee10d0c728a01cb96b1a07c0d

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ad2539005e5438f0eba76ae087211664_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2088
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2088 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2880

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eadc681311df15ff9cc6e00d5c458d59

    SHA1

    6329de4a57ca7df0cce172aed9c854eedefc3e11

    SHA256

    74b5efda10870c179aa77ae530dd51066ba540039114ee8de4e8115a6aea1b11

    SHA512

    9a81e5645d2e8ac7c2efd9668cacec11396011375a679cd4b5b7fd068a483d685ec7f483f808beefc53d3bf9685711662991d7440323913b0c2be61f33d3fd4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    033fdaef5de6b269a3f3870a98ded9f2

    SHA1

    a3f093d19fcd9f070cdccf5262e7bafb9b63232c

    SHA256

    ce5c4f3fcbd5c5ad8bf1e3f2ec71f7dac8df17cb2bf612bc32bd38afab4ffa57

    SHA512

    919be1edeb70a0b318dc5c09ab84120b0b78c44cbf92f9ac0fad64536219636d501aaf4d69514fcc521826f5e3df6f0696dc0b93a3e7a023750d72c3c4b26d7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66564297c64ba2187154eb7b8e726086

    SHA1

    c37443a4ed7bce266e2aec92344ab5a619b670a8

    SHA256

    114a79f25174cbe273451a6688dc392e31043cb029cb989e3640d8e58a49a435

    SHA512

    fc2baf707ca985708f60e4b562a4270945f787b2902cb1f1eb2314d8dd6c34063a15900f007b9d40228d9a9a43dcc50f1b8cdc0025fcc0f9f6b8797e415e7a1e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2de2eb0acb822251c2a9de8c0bb50eb

    SHA1

    7669ea5657d64da9b63c5f7ed79f0385603da185

    SHA256

    7455fd9597531e605467ba6253f4e133859995ca28f3c131f302c1350296dcd3

    SHA512

    fe9454781640afd8a4039e18c7ecfd27de3199f5b86fa20eab31782158acfa62ece7eb35e027da5d36e3d976f55221e0d592b21183e0008e9708e12628747d28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7812c74c97d4d4d12ac95b25fc3ea079

    SHA1

    a51721afb85e30f88aa7cff84c4cb8000cbad144

    SHA256

    d28e19f222af959f34215e45a0b60ada45d1ff1fbda121e811ec67ed1d6ecdac

    SHA512

    a46c5f7ed0fed1e22c439310f720bb717286907893626952a38cc0b8d97343ee294ab9169a95ea4f609655c4b769b4c080c6ea1f2265874888b271625d34c343

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5db43a74ead54c90a484e150e6f117e6

    SHA1

    21e4c37881834d2702be71ac10c63559b2270136

    SHA256

    27369f88601aec33c456b73bd0a8bd9e001738e142e6c1ec679f7b3403f41c2b

    SHA512

    28ba9041773d55ff43cf8896731ab4c0369b0b69e3cb18f660f5191aacc4d837c45f50827e450df62ba33162289c07dbe6d524fda67b26f49908cc62c1879d36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09905107f8c6dcd36b842a3160a82018

    SHA1

    f3638eebc920699799c1644d87c5fe5f2c94611a

    SHA256

    c48699bcb45feb8726da3e51b914e6e4cf059c0e35c9a4666a66bb6bd5c51f58

    SHA512

    324099f660a422580b76d91dc66c2e9c47e9a63fb3b936e3c44e0548a79b877ecc2f25913fb7c013e7ad6b31b13ff094e5ee68013908d165f33c95ffa1eaceab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94a054a83013d959ee4f3444921e55c1

    SHA1

    e4d2a5cab9c8276f291d049b6fe1637020bbff64

    SHA256

    7f0ec53f8568975349a7427ccceb7b833f2011eb95271b45d21404c356ade112

    SHA512

    8d4556d212368ce3b042b3bced38ac4a6a3cd2e8bb548b195c5fddda6b7f036aedbf4a2a7f6e5435de99482ad385a5ed1b9a9dd7843adfbb61582e9d1a76d13d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45d10b59e28cced89e57a4d4188c6fbb

    SHA1

    f3dc0ae47891242742ee4315eeb0cf172f080623

    SHA256

    2b5c7544c1b4b083da0a358c1e49a5b327ba0d2151a6bb96afb410c507251528

    SHA512

    cf6eef2d6391d7e66760a365dda74493f891e379c8921bdde36cb309697f8702d0a49ac32c4dc39a899b65365c9b1cffa424100eb9c91bee4ba44ab138c9a06d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f473a6cd8a0ecc77c6d4bc466377936

    SHA1

    d4001e8c30f1e5a2897ee3801ab65e172b497dcc

    SHA256

    144b80b657fc72c9eff55f9229e6a764fab12857f945276a6e6fce584c0eb836

    SHA512

    d854cb72202d3760690c00fc14ea734be3cea2a5e112f0770f65edc3f2192f9e939d7a62b64fdae66b6297201d8796711b8545a7e5266d239defd0bc4e18dfdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41998581c66c3988fb2d7062127f51ae

    SHA1

    5c03af36eb197727a3bba22f08348f18546dc2b5

    SHA256

    21f03cabeb66d7dfae66be0bad957cbfa815566703c05d4be88397622e49059b

    SHA512

    fe3013914c5848a8a322e22f23e5cdda879cebd9ef0a3a50b7a324d1d3f7fdd6d6423e12b93072eee58d6e143dd797d6b223634c9f0f780c808eb429559294b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec2a05e70c580e6f2149e24ee4529ddb

    SHA1

    bad1553e2ac5ecdb269c82e063af32924d9e265b

    SHA256

    e5e8cc0e25867302d1a89db892d6b92f9c65ec01db2b56c031d00b8950ead794

    SHA512

    3d8675d56a747bf78a426a2988b18be4a812f55671eb3412c42e7f13d9d9038c6e7906128842c9fcbffffcd8b93b355eec3b4d0380cc242838cb4f7c32caab7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f00f56a7dd9a5c08000446f684fca16a

    SHA1

    36e993fb45a1ac843edcb107977828cd6d01599c

    SHA256

    c94a56c6cbe5c51850d924fbb872b525a9b9452f696ad80d8b1d41130d8688e0

    SHA512

    e463d0b32a190c2d7ede57a676c48bfecd61dcb7ed518b5d888dd20dc25d7d9ec5f836ddcc29704ac44b4192d9a0d2168af42b3712f1f3e5749fa5c4dd905a66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    883a8bda56c41016b426a5670b703303

    SHA1

    e13b9480351a004ffb78c07f11d9d8efd7f6101b

    SHA256

    159dba33ff58038ea41476b8eb406352d17f65921dfd6f19d006a73a79de7318

    SHA512

    79ea7fde195a7ab8650d5f1c56800cd4fb3a0262c8873550a89481e5ef317293b42e8ba6f4da40185b68995f38025aa569707e996da2fc3fe7bb55e8852cbf9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc4d2005f3fd1a327b3dd08a0d4d1eea

    SHA1

    a0f209b8b62995463d69ccc660b8428dd62b2571

    SHA256

    0bcbc1cadfef857f28c06d27d0f131848bb98f9a8d070f3a5e5be63c96135076

    SHA512

    b94d2dd83c75acb2c1fe17cc6549b6cd96b37961ce711a2c0d516d20f6e5ee35ba9f90db81b2146e5d8da5baebe2a55c95471b2664c801fcdb1e3017165176fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de9d4d59d9961411df534584fdf6c982

    SHA1

    5179fa03b689b7e1e1757caf9363723a0ba462a8

    SHA256

    00e46c2cdba2d4017fc9767f0e8b87738378de1ecdb2dc3ad4182d288084bfd0

    SHA512

    ad9eca18e12dac75e7f77b4f7a0f420d14d5f481008cff39be105e4d151a622595a7f99a6253ce71d4df229bb0a698a429ae85a1e0db438d14b674dae5ea0316

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d42f4364d883eea04be694fc43c967ba

    SHA1

    d2003b721d8c45b0f197052986744e479cd41ccd

    SHA256

    279643baaca4065ca5f2af703a490a2567bff3a2e10a8e8766c7b71180c4c1cf

    SHA512

    5caa5c4203a4c77f8e6cb3b78fe78fea2c53c96b5532831de8c1a66dfcb2686b9a9549633b15f7670b8ee8f868238ef89d5d0f6cfc2a3d3349b22bb10612d7aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    702c88ac0bf3cb48926ccf15e7a89395

    SHA1

    3d44baabe08cd572928c2dfd7ba23ac3b22525b0

    SHA256

    79550cdaf0fcd75e8568fce9ea4d361cbc1301b482d7f5dd241f5723335e6f0f

    SHA512

    73811c9170e93d92adc3f010315ab087581d034528b89e5aa99d7361565bc8122704efc71379d5f774878f2d040ad3bf6b812081dc0b37e5dde7be10c8666d69

  • C:\Users\Admin\AppData\Local\Temp\Cab3150.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3241.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b