Analysis

  • max time kernel
    120s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19-07-2024 13:21

General

  • Target

    5c1c55f49959675760c6b5956cbcc201_JaffaCakes118.html

  • Size

    227B

  • MD5

    5c1c55f49959675760c6b5956cbcc201

  • SHA1

    315e5bc5869babeb8d9bac6c67d9e005e810b1fd

  • SHA256

    d8360cb1f842d981a7f6b3c11512079aa896a865b10de6631c6eb96f568d966b

  • SHA512

    b7cc83655354c997e62edad9d27566e21b63b03e46df816851f0147eb7b75d330f82b34aed2293297a44a2f191b5c01536f42aaa748301fd3c8016689e8fe5a9

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5c1c55f49959675760c6b5956cbcc201_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2280
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2280 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2144

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2bf96b75c59c29feefdaaebb9fbd6f4

    SHA1

    3e266b4728e35065eacc9b333119e987d81324ad

    SHA256

    55fcb6d783d95d151db0d1202f483732449bb9e26896d18b590e80ddfae67107

    SHA512

    f1965fed2590a16c20d1cabbc5ac46e6b75448fbd2445851f3406dff3965537b0e1c7ec704869a301c2a8ec2c65fc7e2d7aa2a31632ca7b97a77566816a08cc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    75f5048c7ccc185aa7c800d1eef27132

    SHA1

    3d9178986d602bc0ebf894b1485f8c0220d400ff

    SHA256

    b8ee6ab23691fc0dc71941a99328f7bd1fb5ca6340e7a086cb3ba3f6fccdc76c

    SHA512

    ccce7fabc260d793fe22d5811fba6baeb164eb339ad87b8d0ab63547e4eb72e112a8099f2259dd3248a8c9402a30c4d0c8b303e5314505cfa06e9662e5f8621a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7492717639cf452e311c62a5b2e5725

    SHA1

    28eba7ec2d085d82e992d64080ce093e753cec17

    SHA256

    5dc7015e715645361c1faaafea5049d8ba5d63099191ef86f9a1ceb149bfcb1a

    SHA512

    4ce48e77744eecd72ca6ce27253655023bcde437c7b0da9a305f2967963e0577ac4c95355144385d5473dc80a9c8d4afa56707afc5566b96d1a20b79732e0a87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0fd76ec3646f69ef68c84f2e54f6f69

    SHA1

    2a1a7e5ba1dd838a84db9a793a23dd35ad737392

    SHA256

    5d6f5bcbe180c7edda809c6bba9836e8d4707447c727e407720cb63519754c27

    SHA512

    f1762a48317c9d98c7990b64eeef0c57a7f0a4fe5698e2b737f5e99da95d3e136a3fcf9f888fbbdac7c8a33e5b53b63731fecb992e9af89af13953413bb4c5ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23fe133ead768c19bf164f7d3a7b0881

    SHA1

    f91f87d1d605e51e95fe1ae21151d26abd95e97b

    SHA256

    ba9a4d487ac60f801e3be4d6f7ee2488d7e8fe2704480e1aee1010f5be5fdb66

    SHA512

    eaccdcf318216afa9084340bbaa7fc473183f8c576b8f27ef08684ed29fca008e1acc9c100589d2e13aa0691141c36016083563ca52be41b0028359bb97abd2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78c8028a35f8c94d5087f2fc95c30fb6

    SHA1

    b4924413892a285e5b1880de4a2bc0457cbb4987

    SHA256

    5ce33688d6aa565db401e8164dfd814db0e055933500dabd77378a8eac61f22d

    SHA512

    196666640e9e94aad65518048d755154e2847733deaa132d6705511944ecaaa1af36375390663a8c309364304cc3aa96602b19951946e741209a640c155e12a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d66aa660ee79c85ad2cbf9446c43183

    SHA1

    9181513c46943d24e544cae88381e0feea758adb

    SHA256

    155e2942d3445e6388acaabcef5152e208a4d1af4f304df2879ff0addef05b38

    SHA512

    29ba0bf993dd7e4411efe183558c46b931c22e6fbbdbb30305ae15ec4b04a660c0451c5c727fc9f4c7b141a7b00deae4b12177d809c6372cf20a1aa939ee6a2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    381da49a4748194ad1b2ecbbe26bf694

    SHA1

    728879dbb0c90f3bdc3350e5ed5732c2020c3a79

    SHA256

    c34138944b0bc692cdef7d8685f62dc6e41b0426ec073b71ed22b77d71a0a15d

    SHA512

    4105e6b4cf41829c15c246fd26b193e56395acc8aa842bf291a897a8cb06728d7527f5906542ab06678d66e29c8a25d64f3e303e49510b3fadf92d3f933ac453

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1313595a28cc0519d6b1729ca91c73f

    SHA1

    d035d4f1bea30f5b6364e6c4c9bdeb1af3195b13

    SHA256

    db3fa6b4fa29d365f94f325e0036667ce8c2285305f2ce9d734611e34a6efece

    SHA512

    366a7446b93e0f685846c89d7630eb36be15b912b563f2314954013922473a5887d50ba67e6dbb0bad1b73276b8e2fd807ee2f214db7b2daaa079582e4f7d599

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bc7b6c89d3cbafe9688e8d1050d5e3b

    SHA1

    5dee1062abf5f3c89d3df81c27d541033e3c61ab

    SHA256

    3831fd33446752399c782ad7838b92f7bb82c9662cefd8221b8f21a2bc87cdc3

    SHA512

    df4d86b57d72fe610934a708c228b0c71867f04ca001a82d1bdba091cdb29351bef124c1a18b05a5c24fa9725efaa8fcb73c53ba498a5ea3f9af675317dfcbcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1d7bd6e180cc6af8763d6835e0e16e0

    SHA1

    c33cdad1acd6bc29e3bb592852212f1e59da5b82

    SHA256

    ebc1a4a5ee944ef6560cd41f6274364b9d54893471ef9a592bdb35c17dafda5f

    SHA512

    2af3ed11996bc79c48117ba6ed9351eb238f207c10388eaef870659d2e8e1e67e6a92ca3e9d74da85959741ef962cde0817a95c695e3248d587060c517a00574

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed63dc996385eec97380bc9967fd818f

    SHA1

    f49001ed9a0159e7c087d37908656519215dbb16

    SHA256

    9eb626f6c2e444e6e7e2951f3c91e74829cb217924cbe1858c7bed88d2e6e1ac

    SHA512

    bebcfcf79dc870eef000263275ee5a7283b9ff67c34b4ff3a407da32c8bbe384c8e84d956967ec8372d2c4070fb0d405defb55e95da2e0abb14df1a3046b2b9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a1d389023b380295e0dfcb29d8d1fd9

    SHA1

    7c68d3aa1e0f9ea41046be62612125bfacfbd292

    SHA256

    a6989583bfefa6899ea086bf223a8907798bc5fcf3a329d96a613b8e6e1595da

    SHA512

    47146661149bfb8ca3e7224ddc03c30f4f7ccb0120b9958ed9bd0ed8bb94560c66808abe0a0563449fe12846792756ee4cb5404eb16c18aa40b93f9fd7462c96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c3ef07c4da68568528444832fe6d02a

    SHA1

    1f7e6f1d2d2177538e52e69bb750b365441bf0ee

    SHA256

    d9cd7e5dceb6f4cf646e2660c994a9314dc1b6991c632555b1ea8790e87ca0c8

    SHA512

    de8dd2a35b54220b451f9c6e360d8f96d4f9677523a0b4b8e43d598cba698a40dd5486701a6d86b3aafaa77132b0c542b8e5933b25cf5095564ead4e6b3b6e8c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73ddd7a791acb7e5d2a4051687b7c703

    SHA1

    c6e536370c89e9adb3367011c72c939cb4bc7a15

    SHA256

    9a9d2e701cd2914d03b6b7672af4065fb92ca66ca805a78dd34a49f4e5038a5b

    SHA512

    8ec442fe1d572bc9c5d617aa0ec5968eb8a4b1498974d5c212143e8fb63b2fbc5a0f892cb2c71f7b9179a21f989697119f0423e7ea562d3411df8276142b245f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d40caddf40ecea3608fc2b7ff59df7f

    SHA1

    7fa2f54bc1e3e4d77596a51f1fbbc203c2cebff4

    SHA256

    287363f2544df57e60e5a073c736409ade9cac82a7096182ebaf7d9ef5a81446

    SHA512

    aa7cfbdd9fd0fb39be823df45a1a66c837cf404a8bc634defb332157b9dab900a19c90e58e750dca0f68b2685b1ff39909a31b120a5f099066ee8bfe9019e85d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f8c850ce946e0244654b6f8385ae707

    SHA1

    5ff051beb86be7b0bd7bc9602b2259ab5f41059b

    SHA256

    85077c6cbeac899d54b44cf7b205e0b45c8e0d38da271a1729b8d532da8b77de

    SHA512

    739b002c9ba0e029e6d416862f0b47d13c372950ed1e498f33f103f926c22359bff18f0c2f28767523783a5e7e2758cfc06297c058ffcb54d24f5bbc6460c623

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf56c7a72c009a8b6fef324ff7ac5617

    SHA1

    b8687723b8be6b21e07e6498b44c3b2c7a9156b7

    SHA256

    0e05323d5587632c8846c5f723faa1d804890bca6106ee21cb417a5ae40f15c3

    SHA512

    1bacf251a0860bba746db068495c0261d6b5949dcb1227ce285b2c09002f721965a9dd22330da6975288b4f2ec2c679847accb049c9081fa35f69238736b75df

  • C:\Users\Admin\AppData\Local\Temp\CabB04D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB0FD.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b