Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    22-07-2024 17:45

General

  • Target

    642922106a3ac72f4923de4b9f40858f_JaffaCakes118.html

  • Size

    404B

  • MD5

    642922106a3ac72f4923de4b9f40858f

  • SHA1

    601f1a89f5185a6bd7e43f5c2c49d023e14ab3f4

  • SHA256

    67d1ff5bfdcce0e2b994e7e2b7d3eb3ee523c3cc1dd02b446bc8b8c8971c5f70

  • SHA512

    9ac27b4b281c282817892219236e4bdfbbf5562328ee21036d4e2ce38f8a554892edee0205ad5e12fd88153670dfff843a1841426fcec188ca81b4cb7cea785e

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\642922106a3ac72f4923de4b9f40858f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1152
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1152 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39f5150b92df6343bc389a13725c07b7

    SHA1

    21d859249b461943a2fe2ba20c99495148e787f5

    SHA256

    06d819a8ac6fd3917913ac6e795700fedd805d0e85af8839991dbca1f2f196e0

    SHA512

    f4e7e5d3c24073b9f0d9a4038eb79ea4b219672670c4c4085b989c665fbfaab5f02a5d06efc33269d8b2329493347dc3fcd4028b504b00fe4a951158000db63e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa7ef6d3c743856d6de19ed7bd504764

    SHA1

    3cb70035bd7e74021a23b7cead66d2fa0b6c40d7

    SHA256

    9663247e040755040cafec521889f3bf82ce4124ff6b02081bfa9d2ca49e7b61

    SHA512

    8668e030cb95ba59283b45fad7a62ba691896a3e977bf1df4869b205c5d2ba5d7bcb76d30bba50c46e244bcac4b7117dbdec822f883091493dc018a5908ebd4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e608d726db332c6e65a3ac9fbbb427e

    SHA1

    6098fb71a920654449d4d7ab04441d5f570fb560

    SHA256

    4a31d9bf6fe6b3a065d230448d8665d6976d49cad100aa49fa978ab778ee4d46

    SHA512

    9c69789db3ed540489e57f51408f64afa4c022e946e1ba07c33320a67c5b78aa789db1b5091359cccb76d952673d3f25553bc30c6730a732d37f4647dfec845b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4449ff2c2eb649cddddaff785672a065

    SHA1

    252b9f4adc660396f374a4aae3ab1e0ffa886d92

    SHA256

    6ff41d0fb242b9bf79cde5a341f67892bd2055072bdd51e45e07b98cfc6e72e6

    SHA512

    db106509111f99d6d2224b6f4316320e7881819ee87f5408157e92e3800c7aba6337b2bdd19d10ad0f06d71ba97d0b5b9eb1f8d38e085723497080843cd16d6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    654566c77bffc95fbbf4fa8c52f9c26b

    SHA1

    ff3cbee6a308fc99fcf554be564568644c1d13ad

    SHA256

    3dcc61774617c8c1f7bef42c9a2c2f97746592f7cd0383168af771b29625c28b

    SHA512

    2cbe8cfaf213b5f88a9272f6f3f4ff9cd8f7a0e5cc4ea0733c39cf2f23a2b73e768a36ccbe1103f4281c898fc0c96d23a7acea164494b4eb940f57c658552a05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70027003655ee5ee4c82afa1faa33be1

    SHA1

    096e4cc47d11e6c829f609366503747bdb2215eb

    SHA256

    7bddcc3114659dc7bbfe5cef94cd04c66c451d12f754e6bad0b7b6ac3bc41179

    SHA512

    a758ae85e05c34970332e03cd9e80bed88fd9dcf18e3fd7596241835732d79c57a007f238bcabcb792e82e35520b148555073b423b1bad0b8dd717f33ffe4b75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73e9159daff62554704e8d0d8c0215d8

    SHA1

    986473b6f70dbfe44b4926d7b05d7f200f0bf766

    SHA256

    034b042746b1803570df6a2a49866066bbcb1c238fc5fad33c0be4b8ddb2dc00

    SHA512

    4a12974fcfa3d025b5c54787c265a3e545b38a7c0ee9c62fb13ac36052b94a8bcbe93cfd389ec5c1ddcfd627c5f84eb7aeb8b9d13014686d93e272dbef179067

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bba36370fc50a5d73d6c01d12a145ec0

    SHA1

    4f1be051cdc62f2aa6994edce4267f340c0b9e97

    SHA256

    e863164388b967bf42912ecafb3a8e216d580a9a97e898477ac330ce520c1839

    SHA512

    57c9cd5be3f51c5f3da5af7840480bb78ee21f6d80fe11d7341cd8e5f957b28a113946a0a2559b228952b5ded095b9a75b1597b568a3b307e5d918eb7703704f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54a7b1c312b2a75670e252528da00fb3

    SHA1

    b3873a5f58c5ec69624f1cd5b5a4b8304130667d

    SHA256

    763666b945fd3c791c92a8b9c6c8edde94bdcd8285a7cfbd80a4d41cabe6b469

    SHA512

    33b4026b0657b74e6ab5b2948af6b30a873311959b000bc4ff50d0fd1827471d65b984eab8565f70b59f6a5044b27504ba286be047ed4c563652d1d53bafbabb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09934f7feb8daf1891c3d05499cb2c74

    SHA1

    49ea59dc6c84ccf6c9611ede61b70e7e9cfcfd6b

    SHA256

    354269d0d9263a1f80e3ad3e523b5a854240422d9c5bc8079fe99fb5fdea0707

    SHA512

    a64511051dee2f4f48a95504a1a59bbfc4493793307e6f98dc367450907a7b7f6405fe089f9acf87fe435dc0b71178187a3ee0474eb3288148477dede6676148

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4bd8c50e6f92c07068d25f1c4b387a1

    SHA1

    452dbd3b10c1dd362bdeaaa94e90d2bd501b4b52

    SHA256

    dc5f9173c0fa4e929ef9facd4214e3f968adb10b01ce33dbf507a7afd35a26c1

    SHA512

    e27e0816d92d810feec11d40af2febe6736665aa24ffb05a6f3a25675e0e3f494f9d0e049cbb55c0c1ca0e8781a1d624e4c22fda4214feef7d6e6b53971eed47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d2ef0bad405af7e8fa18a7b81c709dd

    SHA1

    1624382052d6c775b05d963ad7fb6801c71acc07

    SHA256

    69c3a2063a26734207a23e6d59847bd3bc3cd337a306ba38de5426eb722a1813

    SHA512

    ecd4ebe53067d6ceab5a3ffdb588be247d60000694a22f92eed75bbd2cd963b94788af68b276e136de2f053edf8db51a9002ca37b35a097a08b16f6822e0ae9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e01a2973648e39e26f56ac232c1a15a8

    SHA1

    d77c0e09437e2dfa6eb4e65a2485d6bc2ef9184f

    SHA256

    78fc1c136a7b5f16f8665fd837e826affd1d1a60c6ede704956d36fc7a06f0bb

    SHA512

    b41d86ce9ee8566f05783f3d2af0a47fec20ced37f6b416a5d3af4c656b270199fe6c363955ef4bea5123f2da37c2c2adc3bb66adb326c59958fbf427cef367c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb9fa5f881e5c4406d619355b09aa1a9

    SHA1

    aa54b1af3a0026d2f0c68248f90ccbeadb9223aa

    SHA256

    85536d4627ba3f071120ef2dfa008b21f7231f233375b334a53768e356854ad8

    SHA512

    f38803b08868153bd5194b2051a21bc5043c15538a5a7f9d94159434e3b8861fbd3f629a713b050b116ebdc31dc37b194fabf8818c61fb5a79ee509e8c5d66f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a50d22cb11e2c2e4b7c5586b5b5af36

    SHA1

    9685a5ec78e4ff311d92a5152c85683478f78cc5

    SHA256

    c24977b1e357d53644b263f0612131a757e603831690a4ad69325e2f802f372d

    SHA512

    1d24fb13bf4d6509c65312b58ade792a57bb76a3f0ad3fa52b82cfc4cb75b2cfca9899f48c787aa5856f5008445f99ac70d4e5dd427bbadba20523224b6cb818

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60c993884215fa17429f211161fdd310

    SHA1

    01e80804d82038775ece93686a851833732d7ef9

    SHA256

    b59dbc26e71bbb08dc731a11e2a86c2aab28561466396a9ac04a305c8ebd087e

    SHA512

    a1931b3aa125ba2102193699fc48227bd19d3e31d8ec6ebfa51c79efd0cae37a438522da7b7efed5515af35fb35fbbf239782a6e5e432cb004cc9ea7d25945b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9476ed0a228476a49507aa28302088b9

    SHA1

    fe12904253be91f1b89997a8738d9da096ca7b8f

    SHA256

    cf89248b579b9b49128074d79c487c140521873ed849008695f68e9529b89cd5

    SHA512

    461740348b9dfe92ef3e7daa345906786415d28e92e9f29f45c6a8656c41ccd388c69f2323d139ff15b3971a6741880e835af145c879af0995671114abed9bb4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17bfa3815d0f5cbc06672a7f9a7aeb96

    SHA1

    6ac7af38507556a97c721fa05beccf564f8be3e2

    SHA256

    49f51554d81248ba150e9859287290e890c639037ae60de90587d2cdb1673d99

    SHA512

    dd7a4d68b91917506519786793160b74ae9ed9fea8723113e1d00740e63601e454d2456d8c3a06aa617e28d3303764a22682e62f3f174ec1dd6c15b5c958e261

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aac3385dbc0a64a8225ffb3da62a51d2

    SHA1

    7e2d2ff6509f687e0ca4f091f9b15b0aa1a6971d

    SHA256

    0154570827d82afebe50ab88f7fd7fb57cd23f64ffaafc54ec3e8a17a2a1db6a

    SHA512

    7c323b52865df1e97c97da8c64aad9a545213d724aaca933eb62670bf661f5fce634d6b464b3909f674d5192f4526cf96f0fc68cc6d5f31094e731d19ab94781

  • C:\Users\Admin\AppData\Local\Temp\Cab284B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar28CB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b