Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 03:06

General

  • Target

    47f315bd9be2b7b0b9173fff300b27df_JaffaCakes118.html

  • Size

    3KB

  • MD5

    47f315bd9be2b7b0b9173fff300b27df

  • SHA1

    009abc1c1f044cf51e3bad0c0c978e0810fef914

  • SHA256

    6f27f9dd5a3a80a5a41e0afd8a1a79fa9a4f6b207ebc7ed92c518ffeb56a1978

  • SHA512

    dacd45a29a5f3bc83d21b2dacc09b640539a3e66187353cd2e00e8563a33f54f3ccb2ef4ef3fbad06461ad2c1cfe0a52d3395636d631be29c877b25b62f6adb3

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\47f315bd9be2b7b0b9173fff300b27df_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2508
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2508 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1180

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d57a51f1c187e4142b0b740183494ee9

    SHA1

    89a491e276a51dd933beb4ff2acf69d3fcdaf5ca

    SHA256

    51518190bfd6472c5094770161ed265cb1e7f488f2207a53fb54fd59375bf070

    SHA512

    2756972706edd2c08732769e039864388fa7ea374ebd6fd3c524c7e4d4b4a2ef97b7fa3e338e7e5eb13d3bc4d70b7b87d491e0646ccdd60fef6a39d065b81c4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    834bfdd1e11601f48704c5ebce3d8abf

    SHA1

    113f9f4c1b9593278645b510e582e5d53674539a

    SHA256

    9c97714e59c0c644f48451a641068a6f376dc8808cf6c0a999396dcf530f1c05

    SHA512

    29080ddf920f9cd95d1aca8f17a11893fc87783d2b5e409c75102d16028bec53aa5026a1cbaeb47bb78613476b1622b1f5d42ef63cf6a1cb10d60301ffae1af6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66b6f33f515260366c5973c60d4daa7e

    SHA1

    33a57d0a80970ad70ea7d6548c69a01e03b7df91

    SHA256

    fc5cf72a1764b3fffbb0cf296f6e2896527296b9ff4f3f927a66459671979126

    SHA512

    0479495015beb60c5b819fa9433d2c8befcb3c8d88f429ede640129c7cde9924d84f28e7a56d38710e514c5670b67bff673455e195176d99a514f40ba38d0118

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d91aecee8b4036d86e18f72de187d21f

    SHA1

    3f9f18a5658ae6333bfbdeb9a77f79b74d15e6d7

    SHA256

    6ec9169ca61e00643a135efeaf6182c4ee1e92c86aae4f2084df10fb3ce462f2

    SHA512

    561d92a45a8558299c62fabb15e166e5fc7ac14cf44733b69072c090a55b2c558463ba0bae1ddbbee2501bafe3bc95088412e2a2456d0ea5f80519e3223375fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47050b54315f83aca876e9260701bf8d

    SHA1

    04d2322def038044325d7cc6637a6c284adfefc7

    SHA256

    77025469c218929b9c0b7d0c201d766933827001dac3333c109c1e81cc7767c7

    SHA512

    31fbbab5647783e1621454a9fa4208349c14bb3adaea5710af5d749b8f826a96743ae0acb9e9a3584683251d5e039756312588555d75528a8d1e7968f9787b35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1eb3beb5821c06d79db10e703df76a3

    SHA1

    bd4dc6017b513072f3521efa4b3e70f7c4dcc5e9

    SHA256

    576b38ab539c5f4af842341b9e0be1610df276260ada1127ee7d11f1afc66e3d

    SHA512

    588de66ac41942563c78b4b41339bb7d10d7d16c746f912afb154a939acfb8489a6d18e7ed985ab81be33780fdb9424258961fab80dc8417e8ac1329d826eec9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1addd965d72f87500e3a33b6c79cca20

    SHA1

    36e95c5d0638d7201779207f7469a7929dac2351

    SHA256

    dd920e229547b4bd3082abcaaf843d5542811d2f42c763faeb649cdb389d6b59

    SHA512

    b7283fa12ca062d34390bcae75ef19cc5926ede014bf8951602b392affc68af4ef8f330f0c8bcaacb3b6bd7cac469d346bb5b86a9079bc2606ed4fdf1ba03e33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    177b07db06d40b0c5a1a803d1e4f31ba

    SHA1

    b0d14b6c4517886af7a1ba436096c978c9e4d2d1

    SHA256

    40b6b43407f939cda56c595005a08b65db2da57025184684e2d54f406b66c279

    SHA512

    8147397840212833a587e7ff302c60b06f1bb3490695a9716a27c2066209295122dd3c6a7cca2af2bcc3da9ef371c815ba58f940fd5d0ac0748ef7fdbae1c12c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd260014865e96defc703b698cad11e1

    SHA1

    bc6b19316ac4f8b0ad7e803064d702f39b666010

    SHA256

    71a1885358acb624664d35e542d4330c154dbc669dabb2d4cfd65dedc4ffbe19

    SHA512

    6c02e5030ad6a8023924d32a60aaeab5b46714ce273ca3a880fa616790b4287cbc6dc85824fae18840d316684ed3b19e2f9b4794ed0fa862d547f7b370f3a9fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa7ba49106cfc3bb06eda0a864046940

    SHA1

    c141cd86a352c658c158c46e63adffd0a5791b44

    SHA256

    b993a6d537557fe08f6559c7f6c5313e0a1d8da55ed30f18f9d8be48491672f2

    SHA512

    fe6247db5c3d8ee043ee11c80ac646b0ae014df03da4ce237241511a2e1fc52adf5d9088b4e0799aa6065d3a3a672a5eed8eba4770503e63a819b0b1b1fb6359

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f96ae47be78d68de59c43fea481eecc

    SHA1

    bcb3ba9c6d1dd541b7e462f74135753a6e9c3989

    SHA256

    f93bcaa94063f60e116149cc1bf9fe322e2cc31dae1d38b5966097b786ac70ee

    SHA512

    2a719bcb00c5774b5089ee2f0b3ea84f0fa9415432166e56492b68c11e869ded881202d13deba8493faf250a628e622536d1959a85f69b61904db9328c67278b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e5f1e313edfd9505c7f04abf4e896a9

    SHA1

    449b4c63d65e6632d802c68d9ee3b6acf1e48bf0

    SHA256

    55ea10e183ab83794818d616bf72d128a2db4962a47aa2a5fa9b815c245c997a

    SHA512

    b0b7e025bb9eb9b85f9e3ac29d7a5e584fad57c04ffd4a0e5ee145be3f963e0d976e57418b5d81ca60124485740814b9733fbdb802d35d8ed212fe0dd7c8d8fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7446d012103784666c18a330fd5334a0

    SHA1

    065bedf63b86051181cabd6d88de992de88595eb

    SHA256

    ab0b0f0f8448c62fe56329fc7c038c198a45202faa418daf7fc29f7e8b222abb

    SHA512

    e08d7e21a122ad42c54afe9cab34a57e138c5a87fdb8a91778ab3a009475997c2ea934962a471e7b3ed7c60f93e1c742ed1240fe360543ae02cd19141187b236

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fe59a59cdac7e15c412eb9ed6ac30a3

    SHA1

    f65ef50664c8b48c0de5115b2a80749fc8915663

    SHA256

    b965c6af45f612e69783ceff26f75c412e3c841fae746bc7784c9ab31001574f

    SHA512

    dac51efdcd1fc84ff70bbadec0ced6b4b5b2d9e6bae221859d01360919beea9e60b06a06a6970d73c41760b7d2ffab9b055f370e7097f6d2268de7e5a89a45d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b7a85c3f7e7184d3656323c35774426

    SHA1

    b19dbf130186d72f0d2c596a43a4caa4f77d161c

    SHA256

    10cbeb28ed1dad6bcf6dcf8e8dff3cd907cf5111369bf627950512c8b7bf2a0e

    SHA512

    ae29be17640793628b978a79fc5567f4397dd816c1ca69ad94fb54f5dde16c28b97d50c49d0ec8f8df485df6d9a5fcc30ab12dcdc0a4f863f5bbd85ad75f466c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b83c1a95af85fef72f2abd30f2687ae

    SHA1

    de0a4460bf99cf469e765245a8bb4ff3716022f0

    SHA256

    08fdfa301e2c5f3fffb5a60f00b301e33609956a716b92e684d13d7dc4b834cd

    SHA512

    8702a6609c8c1e014e6c178d03e95987314c8dbd8cee4f168d387228c9d1aec6f341f2a0c92fada3079e235ab615291d28344c40cbb671b4757206c529e621fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d3f987f13af84b00713380831ee6387

    SHA1

    57631e897c2378aee3df14c4c2517af4d6424aed

    SHA256

    b279349267ab103ba1b515b07076c535a4eeca19fd5f58dbb73901fdcbbc6b0f

    SHA512

    eb84e124106c916176c232f8dbc55553be587b2acb3203cb9168a9774840cbe8e05e0a216f86eb134cf0e46ba8b18b82da77cb6379f59f51c335f2bde6be7f8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d287e2d56834f3a6e588bcf2f121c0ce

    SHA1

    ec3492fa28083055aa4093293c026b401951872c

    SHA256

    3fb57eb67ed5382ad9c9a3fc1358455c3e8393d07173d960d8d1d3af0b2421bc

    SHA512

    4303f6c1994f22d50ad6ec067527fe7a1e70b608ac9b16e2dcc50359d3473f860fecd41bf775a040baf56a57ae6141779727a9311fd480b2b8e836fd15f27446

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c12fcdadccccc26bcbfd7c859d63dfa

    SHA1

    6a10c4bc212ee81ae68104b6318dcf80c6338153

    SHA256

    8315beabbd40ba53a198ffb7deae4103b6682a59b188a880453506858258a6ba

    SHA512

    00f3a84a4d04f53bd131d86fb3d05938bebf12d0c2fbee832b4c7d167df81bafec4c3140520ba67585e1fa80714d6f3fb1b01c16b1ef173e54b62832b1b0d758

  • C:\Users\Admin\AppData\Local\Temp\Cab50A3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar5142.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b