Analysis

  • max time kernel
    117s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08-07-2024 15:20

General

  • Target

    2cd3463c12f4a3f6da59ec7bb1461c12_JaffaCakes118.html

  • Size

    105B

  • MD5

    2cd3463c12f4a3f6da59ec7bb1461c12

  • SHA1

    10d457e5967ff45f353b4ae93c90d480b06e7d55

  • SHA256

    f9cfc7c4059f3c4c42c6ef6d4eac257ace7c3535f1856871e8fc0230d854fdf1

  • SHA512

    fd89d615c8468c38de8fec42dd66fa96fbca96b99bf19cb29fb00dd5e4c86848f2c53ee20e3d9c47a510cb051b245756e949ab4325bcdebb31268e6a5218ded9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2cd3463c12f4a3f6da59ec7bb1461c12_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2292
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2292 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2184

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9e0b5d437197f66df18900f18f88f7e

    SHA1

    da1ba1a24769e952254b5450f0df1afedca899b8

    SHA256

    6e54a9d3723ea451250264ba1d3fc67bc80bd60e1e4db39fb365be47f74be25f

    SHA512

    5e3f495732ded9cfd9a6833e78569cde062c909e4a7ebbe5f7e4ab294735675b0632c976258499e6e26cc852b4644edb2e2ca73e79becc3ca2586b8c69c87004

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6462c65ec3bd29dad290eac2153b2f12

    SHA1

    18e0a7218f65dd59dd583a219768e68da2afb9bb

    SHA256

    e5c6239db536a9263b84daad8ccf810a5f9a44e29a3fa27e2148bf4aa7472ba3

    SHA512

    35260e491f8664fa98c38594883a608828061272903b57180818126db820f7e885f3bc25a72b56b2a0bbfeef07e8252a076b7849e75119a73b8eee5edb3b3b02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    795df7c359282c21352377815c1b531e

    SHA1

    58d1b415874170285230d214ad1dc831a9b41379

    SHA256

    b8c2ff9bcccf31ddc611e9e2041529f876c96f3653ae715615ee32e464f39b27

    SHA512

    761ff1374723ca80b3c1ff403002cf4b5cab882d8b283419169c33b01c5a0efaa023fced2199cd0db4f516957961890cbd694f56c52891b390aa188934a0a22d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a45eaa96d15c41c2400058a48e80f172

    SHA1

    3a675985fd14dedb9d238ca8b6d5f0c1858bf797

    SHA256

    fdb8ee2b78f84c7e1941c1f7acb21d670a6bc50edc885fb64aff19140834b07d

    SHA512

    5a63357753e9747e5e6026297f3c776354567da0972c4f8ded4d9e26db6ade0d06feebe3395f3804fdb040d623ded1bff72a5c88d955395cbcf1af23cbf04040

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41ea2adb1e48fa54a28f3c95c61e011a

    SHA1

    2a745e66f94ea1c66cb67e264680f2d7027c41bd

    SHA256

    65690d51a0d883fe428709842e00336e02f9ba62915d2c32eb6edbecc89a1f0b

    SHA512

    01fcccf64d9ec089b11adf78a31c8568677cde9d2adc6cf78202247812ab58ec66c4995c69bad94825d7bcf4faa7839d4206cf65d9b28c39681cdf7795665838

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75befcfc9b6ac186fb6396c1ea4fa732

    SHA1

    b8f96f60bf0af4182774a72240807ba9eb93b77a

    SHA256

    2b7cf7f88199ae5909796bbf0d90cae114648724e024b268605db765ad055a29

    SHA512

    84d221b6d4f86b5b61043025184a0ae38ea0faa57590bb7426ea2aea418f0b46c76966c9da1625bd9aeb6f19e7e1ebbaa8e543fea6390de2edd40a3186ac1e5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82942553dfa8b392329461ebcb7e74d1

    SHA1

    a0708b5f53bdad24f5dd3ec9a5ec100fecac4c19

    SHA256

    36ce821e0206564595385b920599b6dae84e87e705e6f322462d5f30fed5c506

    SHA512

    fa11f58df1cc7b421ad5888ff0d9afd733603e2fcc2d2f49e9073d4f152f786e00225f4dc5efcf54343ea732382fd108c4c8fc19852817b8e1f9b72f2513535f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35e26ddc645037f2a18c3432e965f805

    SHA1

    48d601a87cc3cf4f2b6ca9383a8124d9e52d6a42

    SHA256

    05bca42f022a29cc5eb8d60a375e4e262f48712231a572923eb43b87684ff5bb

    SHA512

    d9619ae5628a0f1fdfb0f4a25b5c1ec934886fe2d30fd5dd5943c041a6132849afbb4f60ab009376b797d42b82e7391d23a53fc9c4a452c8101423fa06f3c5de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    788fe22c0f0e7338e94bcc5bc264ca91

    SHA1

    cf539863c76a5e6f8cf06e4755a44a5421ac8403

    SHA256

    1f07d9f41066dec05c0785d28b73b47eb1dbdb13e82df0c775d5d709356859ab

    SHA512

    826fe6510762dc631432429350282c77f41b59d47046a99e46585591de563322fb90d1d3fd9aabb917380465f69d7d49217bd789a3bf8e0cd9e1a2ad8f4aeb12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d9a0f17ba85988d7e8b3a4256ed4d00

    SHA1

    fd228ec8fa8eee155bbcf3580ee9609edceccedb

    SHA256

    a68ec9d9daea7615abd59ae57fe2486fef3be8c39a972dc3dc4dee0b49d6d3e0

    SHA512

    08f6b6b79e02e6d797582a81aef15e6bba7845792190d34155df5f0dd7648b4f636e81355bcaa03db1aa27321af8d1d4d42e9a80f825b9c14bd3bb7aac61e20e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03170786f5cbd83719603739251d9fa2

    SHA1

    a24f5ffd9c1d4840e815ef961742e1dd329e731a

    SHA256

    29512fab8456d06941078f1f0615983424346e08017b3e1395ee9455cae6e603

    SHA512

    617b15fc17ec78221725ae73039ba2532fe60e2156dc594cef34be58f7b46db43c303e79e04e0f09569018d17d27e7770d3b65828c74240e39b3ba0fdc97a50f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbffdf1af247c831e2fd7fde914ef89e

    SHA1

    4faba860b33e42f58f72279553eabbc7468b689b

    SHA256

    ae1b96ae0a10ca369cf368b6d18ab0ac5d0c524db39611c41fd89ce812ea99d6

    SHA512

    373139afc76670816efb6e104038823355d52e9be56886f620efb09dc6d4bc97eeb6d9fd08c9a6baafb88b76f7310639ee2b66ffa2d54f1e6ddbe19f3bad4e06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1286af109fa3bdacfe4fdb76e5f34b44

    SHA1

    2b2c38385771232f237e56d685ce81a6900b128b

    SHA256

    10c61337f372006764551f69823024dcaae730ab4a2dd8a8a0293466e288b58c

    SHA512

    c6f1b62b21db794b9fe0ea1c4e2625ed4bfdee60960d115196c00b72414ce1f6b6f8113300b046c0ee1e07b0d8286d7a1e7584b326e1528df343a72e2c077c9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89582c36c0e481406410630b446acf57

    SHA1

    3337d96c44c27764f8403c4bd4369582b98b0f0b

    SHA256

    b2d871f3933ecaafa51c3f04aebed70721dd9add5e67a005e614fe56e0e6f3a4

    SHA512

    d0653ac444f444d19119834564ed263eebb02f7cdbb10975da6f9251fbc9931b7421eb9f588205332d73aa59cb1c85afd25773575c540326d74e8287b7d218ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b72e8942c9f4ae40544e23ff7ee7ac39

    SHA1

    598dae34e35fdccd05d0aa1d5632525cf9ea64a8

    SHA256

    c3faa6332e3b6e7dd49c528591e4b3d9dd365f8ba57e01c5c2f61f8552480674

    SHA512

    5c26feed6898c7503a423c55924beac9e45632463306836686cdbeffc9b25f7ee2ac1ed9ce4348e89d0eb2ad4a3175c14add4b6c691473e8a2eebd38aa474c6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edf4803cc499bd321f84ff26e3402054

    SHA1

    08d6b0626a20846f19257c33c773ef4c53150cef

    SHA256

    3d5dd77b4a0185835831324f54c55d2d2e471c63ac3cbee8a7fb9f594431cf0a

    SHA512

    eafb70bc93b1e5c7d05e2a5dbb3d7ca539dc4c482315b1be7c8dc7d47c4341cea31d76c7e7ed75fb8f756e807677b02be95526b343c08310e212282f552a37ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03765088d2f0f620849cc53943ca9119

    SHA1

    d4485acee7708ed1f4891327d536cf38f3a9cfd6

    SHA256

    a0f6176a94e99d801b81242edd0703448fefd119c6d1dd96d5e72f93e4e5f532

    SHA512

    c23d41e8870c6918ebc88f11fa6aec15083aa56896754930707f8ae0a1923d65a99a7287e7b2f48ad85c8d3903a9ffed09c43456381c1b4a331a538c6834a09e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f832d758a186c9a3fcca454e34a6b4d2

    SHA1

    edfdbb9940e7650d030477b82af10866f792803f

    SHA256

    4b4c8ef5be5e9cdcd85d7ff1350fd52846483c45d4fb9a219390d1100ad317c6

    SHA512

    ef32dd35b629aad4caf4a72e839dd738d7977c500b4354a6a61736dc5ebda2472eda5d96de8b6fdb75ecdaef2bc0e0a9f2d596bf028ae3d0b0731c9081ccf871

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b6112c1f92da8e265a0cec575d3d716

    SHA1

    b73d6ac98eb7b1510e1b8f3785a809702f8bdbac

    SHA256

    38f8d976243cc5a0348ed9a956c70c5d7108b76145d4fecbc31194a1391d9f09

    SHA512

    451b5e802dafe5f376bbd1e38714f698db5d84dd193df3215713955d0b331922767f452597ca46e173d5fb5b90ec6cb1f6805b97851ceabb3599e967baf309a7

  • C:\Users\Admin\AppData\Local\Temp\Cab1DC0.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1E9E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b