Analysis

  • max time kernel
    119s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    13-07-2024 18:35

General

  • Target

    42dc443671cdb6cf24729d4dc580a7a5_JaffaCakes118.html

  • Size

    2KB

  • MD5

    42dc443671cdb6cf24729d4dc580a7a5

  • SHA1

    c8b86ff6ba854ab913e6e8ea2c5eaed06975168d

  • SHA256

    3114017ab759c2c94256c3d3f1434ed8a18c4d428abe739617422c55ee5e865c

  • SHA512

    8bdef72d634a7a13bcee3b0e0567f2d8539f97c2affc1ed1691e62ef912e325061fa7a06bd96062d61d902125f3d5284dfd4f12bc0dccd5fe1b4a5429a7975bb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\42dc443671cdb6cf24729d4dc580a7a5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1760

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a686e9993c0afee1b70d13b682d5bc28

    SHA1

    b909e74f678dfbb1cc6cfe60f8466dfa87b8b1e2

    SHA256

    1bbec8209a8d05931e0f95c79c9a9b250794dda045fd369d333651386799ffac

    SHA512

    2558baf940f0aea103d736b55379c7a4812b29cd03027b7c1edc0557e537d7b9ac2c705150a1a799515266e14cbdc0719eeb1391003aefca34e6e1475a15a62b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c899245c5633545d7af85b2c19164e4d

    SHA1

    1a2ef7d9baa49b17c83be3b69c766d90faff1d98

    SHA256

    7accae027a18ca3415bc2001c150791505da9d71ddd9ed883f7579c353a03f15

    SHA512

    92c5ad75f44003cff07d2bc393e604a4265a597d5180464e26ef4c33ad2521677cbcacb72a501016f8d591968af32f3cb66c3f915dba5a4920061445c2a2061b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b806ccd380dd848583aeb3912e1d8541

    SHA1

    7eed85ed9c0c246339469fd75b80909c87cb6b18

    SHA256

    0607243880721d81e1d73d6e840dac5c53edff3eb52b57f922300e93608ece99

    SHA512

    465ce4b17f6dd52417aba0da875a7379e85134a370dd8543b602461e4b160e9e25a84c947daa7f2479d982ab2731d9eff34673c18f3dc049af95d98e41c42e7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e5888cc7ede8dadd471bea34e0466f2

    SHA1

    c096031e0abcdd9a5fa0a316809d7cc570232a3a

    SHA256

    bc22db71415ced69e2bae06961b6b4711549df1ff28648733525eee2169bfe3e

    SHA512

    a889c24057da0cf5b42dd89979130f172d68e2770a86bc4c06a32d031cbc412b41ec777644ccc4077651fcad89ba37cb90ff285f40a21f05622d85484278d347

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e74d79c49f118d582f029cf7f9b3c9d

    SHA1

    e5c7c7acfa5c37f07e797a2670454a7debfcf157

    SHA256

    db43c390bb07fd9f0b41ba16d947a1cf7c5d98908357196111035f097dc380ca

    SHA512

    b1078348a6ebeda3c70fb23423761bf9c3bf63cd6cc49f24fff5f4425b90aaab4b09f68fd76aa21ca82778b760e0a64ef2e5246b73cf754671ce9e2948f3fbc6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05ee0804e76345c5a0d474ce9f6c231e

    SHA1

    b422e2c6b0d852bf9859f36e6e382541c09b9f4e

    SHA256

    68326326b458aac270409da4d027fb6d6855e6d8ac9cb1aa3ee8353265a21c2a

    SHA512

    f1755cf3986d49c2b84dc6cc573399704187726e51ec256010575a7700962bea8e7228b520324e91bd2f99e093dcfe8e75f2a421e95d398996b6b70ce801ad6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40b9d613c5daf5b06a805073336c100f

    SHA1

    be02b54b3dee346a7943a0b5b05229647e0aa3cd

    SHA256

    b2b4c8b2f7b099720359a7ed6b70136a45c986228c9851a59dac92bb2a54a6ad

    SHA512

    59492f9eecd9b3003b1b72be52bb9d433ec71325b9258ef5a16924cd11704b1f21a5fc481708bc5f2e9c1e300d955d42f95211d5d9904423d007fe3364b8ea87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67c3a86c801c03024147814462e50800

    SHA1

    74f6113a48b8aacf433a5cbaa5c2b206ca6274df

    SHA256

    47ed667e5f454cac60189dac22167cd74ccdfec5ed6338748cc09d4f2ed0140a

    SHA512

    d3138c5bdce03645094cc24f0883d39f10b77d0ce5b50d5b222e65f9facf929f76bdc1f1e5de797750b92917af866a2fd2b241f5e79bd33f5676e1a21dabb1c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a40bf375252b16b104ba3962ff2af9af

    SHA1

    103c1560ff43a116148c6e904c8f5575b5ef6354

    SHA256

    d9b558e39da277c0d37b07e064fbc2e0a4869b1068709b93dc9661d251ddb806

    SHA512

    72c09936d04a02e1cef1eb7506d39357bca45294951137392e04cc7e6bc3e5ba323c1e47a0e27d3c8650a67039860ed1385bdb6dc90d03aac9a6327e96f7d691

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f64c87aee1ecb6018a1feff8863faf0

    SHA1

    60cd7d563dbf2525b6252fa03f4df65b35c9db44

    SHA256

    a297a71669273cf21dddecc11d8ea7f999b1e0c6d5e233771b5c227c770f9073

    SHA512

    4074ad179e8b6cd179afce2f5c7cc3340f8e615450453556c8a3d72c2300f6fc042ea00334cf0f3b4296128d7e8de30308193d12a553d2c5a64713b40f2979ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf0153c208ac5284494371c3f835a394

    SHA1

    d6f54050e4e0442f749df1b2c8638823f71e859a

    SHA256

    266e4f2604a6c943089bf19cc41e03d99034d19c2dbb279476a297793309c744

    SHA512

    4be0df04eb16f5ca133dcf415d39a305709beaee856d5b7868f2b8c81e263c9ba722b7d5ddf3e7c8ec85317229edf71a87851d1ea98dda9639f30d606291d12e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    796203fa9d22f91c9db7c5eb69a93f72

    SHA1

    749276309736f106538d9a52e333891ad3f8cc6f

    SHA256

    a5512a5bbf061ee08a0e45d0a857c30c6cdfccee0a782f8d9a3f58f9040e5fc6

    SHA512

    4c1c6388c2cb536ea39d0093b03904fda709fde1166881ce5f8d5985da43bce02050596edb5d408882ce40bfdc3ad51c54e1769da762fb19dd2597c79c4b0c56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2480e7c3040c70a233bc988ff1500e16

    SHA1

    e23b5d21ada486d2567f6a7ad393a09eb5a0c323

    SHA256

    f9b69b8f6d4968a00bacbd01f10bcc13f6f128bf63f4111726f183300ee8e782

    SHA512

    e117239a0714bce8c97ab4cf2f28ff6918eb95488bc0b2a6e6443ad06406657cc8a44e658e0aba0ede2c3ac58bb3ce61573d8970130f29b4f0e16e49a318a668

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cec2b954eb75b31180fa86ab289b70ef

    SHA1

    334196ae6f5f40c0278db3ef851bfad3f09a9cdd

    SHA256

    a5d633274a2e36c329f6be400559df175f702fcd2a4520e7893a24c4c4eaf75e

    SHA512

    46219800d4d0b7ce6faf173df4f983c5a85525392ecafe9490ece2d2fbbf83582d8c8ad866b637042c2580b031f9bb734557951b944f6da4100ab310658a8eed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d9130aa42ae54ea5b9366a58a9b10ad

    SHA1

    cab23cfa311fa15f55e85a1605edcd99d69249bd

    SHA256

    30d999f2dad924746b1fb5428df578c2750af0316dfc5583fdff4d71800e929a

    SHA512

    0ccf0b3eeeceaa2fa1322210811ba8099c263b473adb20dad1688188c529c6240cf098b6df6b3584f1fbfc385659c18e33dd10934e82d8d7ebb328166993ef33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee01a81984a3e6c67bc75665b7251594

    SHA1

    58ef79fca2a4d7c6a0c5845b3d9567bf8f301e64

    SHA256

    b5a438fc86ead6df543b92391ee08f200fcf6fcdb4ad5f25edd9168ee393be0b

    SHA512

    75cb888575c6aaf34eb21c4eaf054b2b7bd63b33d1bdb95a01064bae4de5edfe7da2076bff47bf4c07db37600c604d9a441b8fcda6e1b75724ec2aec65838476

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f93790caaf8af346e7b233ef37a13a26

    SHA1

    2eaabbbf94f064a8a7836b0f640e34a4453ff990

    SHA256

    40e255e2acd29cc0c42cf80001348b24e0fde69a8c8bc4694ddae789f971a7bd

    SHA512

    fc23b2a4a79f7743b6e6e7c3cfd0540ee720ada70e2a78f43e3268a6cef60dc5e62d668b6cca0053c1d79427f0893f4f67fa09466ac6ec847ef5800c59fc399a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf4b4188a35ebc60a8302ae9458a5672

    SHA1

    df8c3416e38fed6c608d152b1636286004a33713

    SHA256

    71d3a36bc9ad7276a25bc49a18cf7491f0dff0a3afb7188a3e5157392aeebd04

    SHA512

    e960fb1e107dbf2fa620c657e4bd3986046907e24a28f3dafdb9dc8be0a6acfd080e1454907de86f74cac74314a80a849de5e7f5a3212ead5c9511e9e10a4767

  • C:\Users\Admin\AppData\Local\Temp\CabAD9F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAE3F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b