Analysis

  • max time kernel
    135s
  • max time network
    132s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 07:32

General

  • Target

    f54890ca6e916cf79ee22584f0278a05_JaffaCakes118.html

  • Size

    28KB

  • MD5

    f54890ca6e916cf79ee22584f0278a05

  • SHA1

    4aea3297272c714dcdd1ce871a2032fe9f9fca75

  • SHA256

    6c6d0e36df4e70825788ffff97d8ea5801a794130aa78ee7640e4fdee2a5b2de

  • SHA512

    3ba89253267e1f9508bf7a6f63414c39968e6b779b056fbaa522edc6f533b5ba587d2983f29570f97bb6f4e93916a9e1deb2b3d17d6bd13d8692ab29a545224f

  • SSDEEP

    192:uwX0b5n/k90nQjxn5Q/vnQie2NnonQOkEntxZnQTbn1nQ9e42m6MBomd/Ql7MBWb:vQ/UBeEomQSvC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f54890ca6e916cf79ee22584f0278a05_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2092
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2092 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2528

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    966146f39e6dd03d1143b570f64787a1

    SHA1

    1543dc7a3a59951e4c4390d9fa8e1cc5137330dc

    SHA256

    00613ce3659d0761b98e7401cf8183a48f15075ffeedf497f80a2749da53c739

    SHA512

    5a7a369f9cccb004f62aeb9724633891808a90b897f6dd6bb949d6a00cdb997ce459e60eafff879935c9db21a84724b3d3bdc5ec15017bc0b14964b32b3ae157

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c7b02288ea64fd880c875c5611b38f2c

    SHA1

    aafac2e785ad3677a40a6f0fdd934e9d4e23c9b8

    SHA256

    8ed2d42b84659c6b86726f82e283bed988b7aefe2b943cb40dbb6e5a811e8bb2

    SHA512

    36f2bbf00622d060292792cfcbba8d405eb768394681cf231b11d85f0342237a503f0c7b0f434df828c5f17081c28faa516e4e796cf83b1f68ef3bb250c030b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    155c6960e5836c2d74897700d34d8d97

    SHA1

    59c4207b80fe703da6610d9c64f91dbeac0f4536

    SHA256

    7b78919a6ad4aa64e44452167bb02aa1a6f61f21f7498fa44fcd939d7b6bcdc5

    SHA512

    25b0fd56623443ef848e3c05c9c6483cf0dea77ed12fd9d394125aa7f69f39863f07dba9abf42b6af8a9638e8ac272c6fce304adb00b61a406ea742f094cd468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    897dec6bca460737e54701bab111286b

    SHA1

    2015819f7e6fa3bf429cd53f2051a383521540d8

    SHA256

    0b090b6dec9a2bf70fe710e100cbedd29b9f50e54596f6dc0d08abb2f0eeb6c2

    SHA512

    a44fb3cd6ad21874ba85f56725f37af1d1a9e8b2cb86617ee7fd101d23f6dcc2be73eed33a58581cf61abe65a6ac0069d0d231acbc8374106afeeae9a62e5b5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4dd73b9faf52f775475e5355dc693d9a

    SHA1

    d89fd93de3d7b4444c15c191544a3d606556935a

    SHA256

    14866ce083483db99974509ae96cd64224aba182a12ac78d3e1aaf47e0fc2086

    SHA512

    32eaa7864649fe06baddc368d5397f5d9e1a085834b72e602f2053ebb2af3837ac792fe851e814197aa8759e9a60c005fb3926a512e939a383420ba4f3def6e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb9bdd7d1479fc719fca89711d485ef8

    SHA1

    a8a255cca7a9eec80dfe322e65ce10e24e0769d1

    SHA256

    178259f6359b6bf8fbfc4bd099a353cf73a380f036509ea58eb3acd1d252de92

    SHA512

    118495d26341530fa02bec61e7db16c9c5f8151b65d185477c2a98fb1b9b21305ea037384c4fc3e511e00328319a4515fbc618cb988d58b9de6f321fe7ef58a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c06dd380b374f5746dea42f9fed0672

    SHA1

    1387e8d8d80fdff4634f8cc0f3d3efdbcf9642da

    SHA256

    f96321661d84f68ba1c374542bacc5e3919305be3598d44330056405cf09f483

    SHA512

    48eaee42b897848c8386437bad9c6bc776b33627f74d64baab7608e50f136f50aed8aa65a0d5ba8aa5a90ffef9d2bbf77bb423cc872d0dbcbd8b0e2c962b6303

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    488f4c4661536ed21d8e137d45947ad0

    SHA1

    0898095d86a0ce2597efbcabb22e1d3b501fde2a

    SHA256

    9944dd92933a88935a9a720600806bb671ab1137c4896bf384207c649648cb11

    SHA512

    73064aad4b8e8e1530ecedba645c75076054f89e95ba38298b14722ee4b2a709ca1292dc5d5af178378f623fa317912a571bbd284a01958308872f8d6f3a4e89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ed3d5f64512b36f39aea39fe5b7b3c2

    SHA1

    d73a496b42b9353b9a3cdb7e5a0c78f96d8570d0

    SHA256

    3a292c10ba28cbf398af2923ea2340ccba6029822b1be51dc15a0881c015fbd9

    SHA512

    34547e080b0731a5ea01cbba61282c4f0f55173a7e1454a53fbdae27174b1bda67f231057a4f463a454a815777ab97c160ee8afaaa0f73f02e88601b8a712529

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1caebb7323a549d76fcc1341680d237

    SHA1

    022eeab869185a398ff7e44781beab2095c95472

    SHA256

    859cd5e50d3c627dabadc491f13c3bf0ff38339c11e47de2539cec0f08ad66e0

    SHA512

    aa455f2a897fa3f2fede4f0f1864dd37bf6b51ec53d7bcbcc30a7255ed3f3694c5f5be1c50a46d951daedff6e18e140d0ef5b2a1c8f80adce2fc92d00652107b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c378ac163cdd8329267e665a3992e18

    SHA1

    f9ca183ac00c7879fea88dbc09ad27e855f473f1

    SHA256

    305db15bedfa06a883aca1d430b0b20ad7d61d10afb1f1281db7e90dd13b2744

    SHA512

    6ecc71b513285d03049c5f69ab2d95d643f778e46eecebf92d96a63e3c179a6ff03ab688d33228703bd582e04949db365ff5961ea60f74abc09c6cae4fbeaad4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2a56a4fcb46644b54e3c12b9e823d8e0

    SHA1

    3c65288b563290c88a2b2ef63f3ed5599ebf74aa

    SHA256

    13485eb7fbd9fe1986ad103d11c2fc418d753e0d9d444161b7c413a0daea952a

    SHA512

    ad9251737473bf991560ab1922eebb9bf5ad1ec5648c4f21ef98ac3328d159f3f7ec3b75a4ff2dc552b23662a45f082c860a01378a6138a5bbddc4798c450c3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a35b761f3a9c2393026a96ec464ef8df

    SHA1

    7810f0a8aecbfdc84b98ee1a40ab563b9dad8782

    SHA256

    762035d52661cec7bd57e4887c4bb2042439b391437df4a656c80cba08425a77

    SHA512

    6f618e09c3dcdd64bcf1f3a0a54f4fd09018d00d4478fbaa99b944402a1818d7486907724ad10c2d5988ec6c1eed6d84897b97d1b4e6f07b44bbf879e6d3ccb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c8c70fff31ba86f8d710774f3fc2fca

    SHA1

    4ae359d6092823ee93144aeef7bd2de7ef551cde

    SHA256

    51e42e4cd5c2313486315bac3de56751c54ecac816b11b8080ad9c4de4307bce

    SHA512

    e6a9115674c9c2d1f703dcf70d88923da254c77589427939e9d6199aee111f6f348e4762c36be21328cd5b1a2b90d536507f156ce521fc9df5b548327dc4c536

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7220c7493e59b7024fc24ba003a35ee

    SHA1

    52263e634ead60b23467830e5cc8a48a0ec42526

    SHA256

    c8a0fc1a57f6ba68b84f5574fab03bf92b58536a901c61ecd9ee5049eee6f694

    SHA512

    60a92bb1a95bf1cb6fc52f14160bfc752755f8657e3153e1a09a4ef6db6a4bcac60d7bb8e01630ba15cabf89cac20bbdace0b2d8a281761802eefc18e483943c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42342fa35eb6e412a4c620fdd61bceef

    SHA1

    fbf85d75be92f7493e9d39819d0915995dc0651c

    SHA256

    e13a1613ac3dd93e69e416aea00240c58e1ea4e1c07efb7c2570a0a868faaa0f

    SHA512

    d2c474165071800d653950e23a31f99cef1a2e7072e709233711ff37f45a11ddb33a60dccdd6645dbdfe5637ceb058c8b32a8ac9dbfd356a6af379b4fc1acda4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e6afa76b58c3c0657d3d2ce043d3eca

    SHA1

    a679a63389f6812ed8561487dda96f725707da6f

    SHA256

    2889c824dee6cae71159d6535180a202436d53e123f18c71f4e0be3f8c5a5778

    SHA512

    5121bd683cd3b64e5a30cf528c885160e2e3a2c7644947a895b44aa7e93368f944f5b9f9d3f241c2ca862aa77586000d065a533ede9e2f4e7abb528173ba920c

  • C:\Users\Admin\AppData\Local\Temp\Cab60C7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar61E8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a