Analysis

  • max time kernel
    134s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    13/07/2024, 17:59

General

  • Target

    42bfc8e036b9b3b749e7a9a075c794ba_JaffaCakes118.html

  • Size

    1KB

  • MD5

    42bfc8e036b9b3b749e7a9a075c794ba

  • SHA1

    ec0e7e19a8b543ac9297588d2993917dd670c244

  • SHA256

    0af70e7fd44a8c205083b7511627db486a91df0d01a2862ee0601531cea867a5

  • SHA512

    e56e4c9e3233ff5120a3e6107dc65c42c1863d93b9ccfc8d50261c98d9bffde737fd66c9eaa8a0303e73e9f4e8d8b2cdfb5501b10ee6fd1038a49f151130bed3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\42bfc8e036b9b3b749e7a9a075c794ba_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2708
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2708 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4432a6a84b5839a93fc34f5ca337f17e

    SHA1

    d9743a69f8f14df17089a0e06b6f608093b837a0

    SHA256

    89895db7a090517b1b33c0211d22f35334b0473b70aeb1fe08acffb362c03e9c

    SHA512

    f568e607f6c459a4898a8ae452cd5ea9eee7587fca4ceffb57b6121996a44cf5524d5e97ce1632c2c2dacd9cf78c4b26241b48bf0d985ba34bd59ceecfa40f27

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95448db2b07b42e02b0bf019dd12a742

    SHA1

    85477d6473b3f4585f44edbdf3c6ee9ced318673

    SHA256

    78c7b3dc89c804e2684b21d061851d57357ec3d5b32c3a89108158fa346fedbe

    SHA512

    3aa601f3b1ef96bb33f77eca9a23adebf0e9a2209abf3caa49d524f88bcece8f66dac9792e70a16d5b620d3d0d5e29fd48fedc40496407472f9ae5b893a2b705

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02c14c3aeacfb9ddf5c20883f78880a8

    SHA1

    17f4179c80d3d24f0be56f428b0757de904dab87

    SHA256

    529c49064c7f6809735c78268b4d714b39316258f00ff6122155ab6394a215e2

    SHA512

    63c387c97c10dbb23d2842b72f8fff9a7a27e296688ee02441231eec606fbe09782667c103b2d6316c416431cb2f18eec6f44a8da515bb30b1601ae104e6a0f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c22cc62883f4836c9fe5eecbd0ee1331

    SHA1

    ef50d7b38589292bf9ebac13bb01e90aaa18be1f

    SHA256

    37fefe17910b0f499dd9963ad24b60a5d77595b5ffc3c428a4e87f2bd546bdf3

    SHA512

    6f6f6df05470940c43ec7e0c333f9cf946d8a3fc99514c69d08f908a04231924322e8a64ecac24a8dc52a7554a4e7c0fc34e7d95fce7ce42fa52e5d1e8fcc750

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb2b5dbf150ea846a79ace7ed90bedff

    SHA1

    7455bf44afa316601e6552af27ecc6f79592b2c7

    SHA256

    504e9a96d7ba75adbf366bfbbaabfc70f29f7ad49217a975b00bd8040eb98572

    SHA512

    01857c29d45ff92d2a8cbaac97106acbb731542903df8d6ac3ec097291685073a6ca039b7f230780af453ed9eebf915f0d56844bd2fc7d1a5e664d2bb43b7770

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5cc89dd2a7df8167fa3bd20cf9ecede

    SHA1

    0d60256cbf0d2226d32067758d220ec6e241644f

    SHA256

    c6fb8923e7026493e337bff78cb9cde652d006ebb67f7254706d9eba4126287f

    SHA512

    44ed29cd2b632b9d8a8de5caad2923d3ed94f7f73ce66eb5bcd2c125f95358cb2670a572ce53e98dbef6a796e63ebb35a4bce9f34f3f844f79a8188f0a8648f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9a84b0b79722cea4cfd8d0e79ff84c3

    SHA1

    75b712c359c05d493875ffa7d7b630a07bffc683

    SHA256

    932d57dd0348702259957b7d4cf1dd4870b73cf86f3728ab366d515fee56b0d2

    SHA512

    76ed7bb4a0dcbf974e2c34d90d2d631f7508d9197a8715ccc404d01df7c847ffd04f6f0c5feb8067cfb8455d45d8dce5ac98df7bbe7a2014f56c8a5a1bad50c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd510c42ecb27521eaab3b77e4f81ea7

    SHA1

    a013f9ef8445fadee192f2eb4706c9ea20560c83

    SHA256

    acd15825cb7a8bc5765cc98399608cb5595b0ab9d50d120d711a7ffd74cc483b

    SHA512

    479e14296fbecafc49f700a2160300a95db9cc56529ff2de88c169f7c0737db8f50134e5eeb7a7f831d5bc170bca59376f020d8abece58a0161248995a9d8ef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d23187ff5502497658b4f8fa1e728a92

    SHA1

    c1771da623b3e8c8bab88d00a17a893a033d2031

    SHA256

    6affcaae6a45ab5fd21c4cb7db2a549f578d631a03112e45581ef08c56997d4a

    SHA512

    7757110c18a89e061f287f94227f057c2602d0569aff3d139d3859c23e71df1af94be45fd40cf334b7d1c55633c5b8650836e4dba89b676a10c8632d2da01f20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e86d78e1066d6135515f412102e04000

    SHA1

    b7890d19c450eee43521ffe9c9d10bc0d68b4e26

    SHA256

    8092544b015d641e5cef99517be3f28a3f4699dc79f99ebaf4831963532a8ada

    SHA512

    d46b2378e80cc6d82fd1422af2f5373918beb5a4400f398fb73762a0fb0ab33ed1185eaacc1e5ee0246198a5002e553f4a2fb1fcf80dfc1a6a09d8aecb53e05c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2019df84dfb47bb1ca8b8339b120b0cc

    SHA1

    13dc19488ae63828862b5f6cde1468449cc00065

    SHA256

    66a68fe7fd68b240aae70ab44ae1b714a2f00238222bb1bb2064aeed8bc22ac9

    SHA512

    ef42d7cc73e70a4705be88bae607e946792b58efaabced3887a6109c2ea7e5aeef69cecabcc06192a8bc5a405f5d48184edc3f2327bf50302460487592339943

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    448421db03bf1ec507ebda401a579717

    SHA1

    99827685737784eb5cffe867b18fa8765118692d

    SHA256

    93f289a20934c7db31ebe0fb5db87d15ca60296b40372ac3dfcb72ce8c23f7fa

    SHA512

    91562b3b3356fc1ca2c7a5df59b0b93c6b1275eae2f4b02a01f5075bf4da12a6369fe7825e7ff452193299dde8b48b055779cc53485af286e4e4a55688b248af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45d64be5a8f7fd1aa3600ae84341bc2a

    SHA1

    0769f04b95395ec760d905d0fa0f917da1dd20e6

    SHA256

    40b151f463e9c56bd38ce25bf07e315911fa9b303e8785a10bf73c84eaeca984

    SHA512

    a26afa020342b21652cab8052bb70e998170f2c1ecd18e30a3119a8cbf1db3b086d18db24a17f5dc42b393cf27eb6f8040f1474bd98d8b6565acccc843897adb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    94f8bd5fa1c4c8e33766c4edf5d07d82

    SHA1

    38a8475231338aa44e73851530c3f4ee98532bcf

    SHA256

    d8feede9fd5fa78d46c0d2d2307364475a20724e8384d5ba796485fc986f8047

    SHA512

    80594fbfcb6e4d8ec25cabe47ea37a6ea1eec1239a645efc4add280abe3ad84b30c3f01702f9ac83d928b048bb180fcf8c4bb0a53bb90d2b6d873bf0c9475f70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    626c7b6efdb36c03ce1abc565826eecd

    SHA1

    0e27c195eb8965b280ee333dbb1dcec0ecd614cf

    SHA256

    3635679bb6aea2f5370cc118a30840d2f2a4a5ac232d061a4b0e652ddf3dac8d

    SHA512

    6b4e804ca572c3eddfd1dd4236378aec53f12f3a7b5eedd3e9cabb212bd56da6d67eb41dbf111465f068178c5e726422d767617de5bc05cdb00d0fa702a1af4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8f6b6b74599b4377f98b58016af5ed7f

    SHA1

    70dfe01e9a20a5e4c17ea0c05d2972df9cacf250

    SHA256

    241c4820b2da82f0079d60cb85f111b92ac4e8fbe20f53c32e2a443d9e02e425

    SHA512

    89a594f9ffa9857e75054bf2307b56d24a1305b2fc4a4a1677ba084e4d32faedbb2bbfb1772fcbab137d8dfb23698bf9b5fc01ceaf81bfd1a0076cbe4121e3f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea2d9b730b7ab26170dc5455d48d2930

    SHA1

    45b8a47dff51b90cdd6da39535501f5070db5caf

    SHA256

    7bdf6f329653416409a3267b643b22e9332a0ad08975d173a8ce79205d6c27ba

    SHA512

    850075b066e30595ebe217e7fffa3d4e4ce923a3c3b5ac2160c29c4b53e4b83e6304404650d1fa30e6cdaf051ca4ea2badb8b3eaf66430ffec8e7a89c0700c5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90d51b77b3d334ded9218add5d55cf2d

    SHA1

    a845370f3d5a1f5ccb7449661511ce088f7fba24

    SHA256

    1ae189564b4ec449a26f0d53e95c0f665a3e1323a9e82402555072ca04b8b11b

    SHA512

    5d4a252980f99d0df559593d74496ea5bddeb3d57b56b8ff48a7adc9d66de99612c8ac9e40e89896c19dcee00b8fbf56840cc1da848117e9ad4368815b17039e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37575bc5608e56f08fcb1f0614cf6588

    SHA1

    c6018bdb9a16bb4fdb45e87935edf104b0484bc8

    SHA256

    224927e8d6a4e5aed8c5c3733cdf4488d71f066d70188a017c76bb77adb4d0b5

    SHA512

    91973b4d3cdb0e1c7cadbe0d0da0f0241b8dbb268591763e7851e0a93235898547e3ab2c94b17b1ae2d421c6a09a8ca43fff5b8fa3287471a81fabf176b055d1

  • C:\Users\Admin\AppData\Local\Temp\Cab9DA7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar9E58.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b