Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    04/05/2024, 09:45

General

  • Target

    1229d043ef8b78cde27a7ce0a21fe80e_JaffaCakes118.html

  • Size

    27KB

  • MD5

    1229d043ef8b78cde27a7ce0a21fe80e

  • SHA1

    fa0c5d2fe923587e6e6b26866fa3f5f92c969ac5

  • SHA256

    5c51c6177ca43b606a8607af9a0206454825f2df1a3b9cfaa80f35347f24c4bc

  • SHA512

    88bacf58558276b5abc6881efe34a01ad122732b6a281d952b72e63e363f6ebedd748001faba06469c970fc3d3cd198b0df159b894fd068d0e3635ff69dcb3ae

  • SSDEEP

    192:uw2mihkYUJJgb5nLlauKCJlGBXGp1onQjxn5Q/psnQieVzNnjjSnQOkEnt/uMTnu:eQ/0cbKnIST0UQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1229d043ef8b78cde27a7ce0a21fe80e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:332
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:332 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2912

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2940bf8822c2b8eead5af71476b93ba3

    SHA1

    cf172bd5a673424836db37fb3422683dd8c1951f

    SHA256

    f1d63c755e83296cc259de4c020899c8a32857334c941447237ef01b987ea40f

    SHA512

    fbab3e7eb4b5a3bb48d3be4057a910e40d64623831b8a0eee74a80e64b2b73518d88cfab0f966fa1572fd14543ee9622632b246423641db08bb647e08b68d1b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29ed0226db949528f4a6a213f7b05237

    SHA1

    2a63294502aadf0f14dc5c81ddd359c52121c605

    SHA256

    641d4f050731a6223c7e62e134f6d78eba353c165b2d01f205b5cbaf4890d551

    SHA512

    d7d6d6a84505c40499a539f3c35918a06c7dbef7ed1e1197042fb1e7c5d5010dcc898ebdabd992f75310058bd41824d0a0ba08bdbf706a8829b6ed70d23677fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6418b9654377a19b07cc970d6e3dd4ab

    SHA1

    65dfb2de3643e458a62e1cbbdcb38202c6db498b

    SHA256

    510e7ee20cf1a676ee0635a1ce292b41d6ac76c2c30849b40b5dfdbd78222f72

    SHA512

    6ed7ca1f1a426f915a26d473e65d9ec600437288de9f6c4acc9731a91893649ff880eb67a356c47d83eda3d3ecd15a2d44ee3034e06431b50475028bba80cb4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff9351660d0092fb6a61d4bee080d367

    SHA1

    7e479b35dab13cc6e5c0036f74ba0e1ba54cb7ed

    SHA256

    781424cc5d371c7485755a733b49bacc747f8fa5350789ae2f1b15bdce0e5c17

    SHA512

    085045a2152f8f858bbbb71ea384ff0726182dbe6f42c507c0539576b5726a5ead71ea5830f1decef8f0363004bcf699e9fbc03a18e5c335f250c5ab011d1cfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    db8deaa9c8aae014e3a6fc4c4b25757e

    SHA1

    6ee4e68551f6625e3d2c24645eacf4b15001af61

    SHA256

    9dc2a8fd80458a4d744a5c5b67cfe80cf7aefca55e90b74b60c3863568e35212

    SHA512

    731b6a9457afd021da3004499793cb1a350799761340289a619fde55f17e75e7ab607f645f90c331cd30ddc65a5711d93dcc22b707a8bac9af34b88b1e8cd04f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    73b19526940ea8d2a73fdaf9f293efa9

    SHA1

    cf75beb2d1b262e218491704a6b25f56bfff5eb6

    SHA256

    d1fbd67ef5363494f2721ccefe358a15a8f9ed8a34a80a2f03ea422adebd6f7a

    SHA512

    ff3d60ca10bc64e3809e8081c025ce5eefdc71aa16c8dc9f0e10b7b6a6adb7e87cc0122a06b749671e5b2c25ea9ab5053d75b6e1a69a6d4f1f8c3741a02631d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    71caff5818e95a7c13b297b6a3f3befc

    SHA1

    1af563857953d9675a8513bd1fb22c3f04028fbe

    SHA256

    e73402f3cf3dd24e907a98c35291950bae5810d343dcb6f7d3788063d077d608

    SHA512

    3d7ff057f7e0671c7e62b29bc7212e47d243a03329cb56d812933914ef80863d1d56875f8ab3ee49728d49f846b0ae316be6c2e4ba0b83d0536f85529f68c4a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    334158693e425f76c8f616aaac9b3886

    SHA1

    55588f56e568b116e46552a6f590af6a16118186

    SHA256

    3df95813d1abe3bd4ee708da0585433cfb48cce734a8411f3427bfb2fd09b0ea

    SHA512

    965fe900e8fb873f3646b73a78a116bd3c9fdff9f66317fc82ab2f3763fb6a67e1477794e9a9b5f5d6ae098e9e18403608b734871d2d73f4760747c0dfd9be5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0fbff58000c989e6f74c9f7d7199440

    SHA1

    5d1baafa7705782921a528fc1b324aaadac78a54

    SHA256

    ae4d23c02ac4f6d73d61bc211fa5742ec02547a74259ac939b42c51ac0d4ba2e

    SHA512

    28b6e9cc4740b865842c3f370d4e17d6315a413a445cfb5b0374d5d707531d1b287d03ceceb45daf8ff8db09ac97a63893d09cb4d454613dd4f34d8da6e352cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4fb32b27bdf84c2f45309dc4c40aaaef

    SHA1

    5ccc32c112160ea93ce2d4483949cf28b3584a53

    SHA256

    47eef90f7ca80d016fd456a5d4faf6c4eab6ae45d5c359d0b49688f08e6f3fa4

    SHA512

    676bf9b550c0476d5c86d4582db5d3ad0035b8aee482e3addb6463f71b70d8c1ac9ead8021ed5634a4fda7beccb2614191b6ee5f46a1c583e3d66071b6ed344b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64ac0101503ffb9f9c7acd85daec56d5

    SHA1

    21eb9819d1075564372d503f2142f5cbef60c86d

    SHA256

    f3866cd3aec1b793480e620ea787b59bad4f5d18e88ccc2d0f78c110c091a5ac

    SHA512

    ea39cb7a3600a845d2c7ab8469ea425e3d1a84eccf86b8eb5075e878dff8ad1df26494adaf061b423f7c09ac64a6cb19c3d13c536298b4fae5c0a679a3916fb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3289308888edb1702b666bf9bd2db874

    SHA1

    5d81e6bb03e2793008058bfc29916f169ab19bc9

    SHA256

    8804ba60d3fab8404779135373f04843d83fb7c5dadb6852297e07a044681995

    SHA512

    4971d5b11b1703a155da960e2dd9d6c4f7c54762b5d65db05ba7eb94ae74814cd026f84647fab26bd5f63a8bace38afbfcd43cfb50b51790abb51d1b7d2c7bff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    881d5a099fb8fc1fd8538e1fb91ad3f2

    SHA1

    de6dd217986cb9a65ca83b254de6fe45a1c379ef

    SHA256

    1067692e4d8c619a45c527f0e04e75e13d664719896f89a9ad7a1d0a901c6544

    SHA512

    282bcf88d526419ab09f69dd48609222fdd4e2e5855563088b614119741fa0b29ea3c57a2a69ec3b7776bbdac5af68a46f7cca50410ef1656da2a4899558c709

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d8c2f83359d441a615c1da93b3b00691

    SHA1

    25ecd28b39bbbd3600a7854bdfb942f0f12eeb85

    SHA256

    a19ae59fc6a5408ced978e7124c94704c6b0bb3b419d72845876f4b8fa50f4c1

    SHA512

    48c8a2bafda503b054f89c6caae7be20f32813b174ff9ad06cd1597902bc0771080db5736d3dcd30fc0d09c55832340552c2e951b9169dae2874da5c37036d5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9f4076314c2ea05916a408c53f7f5d2

    SHA1

    9b9c1453b34200df95684f725067c2ae7b159155

    SHA256

    ca58a727b02f63c2810764062435295e2916f435de5958de10736cbe4dc7f4b8

    SHA512

    745b481154f9cd84f13c0e51553e6703ab17a60e4b3957e52b4faa00d2038391ecf2b19ac2ebfcfa36034992f47d4f02ebca6ab101112caa815c45e86a919707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c762f50b512929d92a400e361b0a3428

    SHA1

    16d4f2a1624867a2b2a8f2be49a98b5a203f0667

    SHA256

    a159e0c86a99b1c5b999594b8458c0cd25f72921cb510f666e858779dba8fee8

    SHA512

    9a5886a23d75364c93503c9cfdc624f33fcf9b023aadea2d505c5853987813485bf0e5c57232e092db7a0aea4137fa6d900cf33ababd7475e8af25eb3606b6ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fae3d93d3aef1977f70ead315a2df87

    SHA1

    19e5227da7391d7fa3d2d1a4324f53ae51dbd8fc

    SHA256

    56c6a8127a4cda4f97cf3ad66aefc160d9169365f205d7343f21fe2933505aca

    SHA512

    45924d39ee86aeec6a5c95aa5ea8f4a20fc57eddaf74582d745f5e8e3105fc949594b4f042a49fbd49ef784ec34ac1385bca4fc7ea75a3ac82ecc6f19bd8ec4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee635282e4f2e6f5e861c2be9ed76143

    SHA1

    510fe0e18495ebee3410c051fe36f315fcea5081

    SHA256

    3180168adc8fa19f7214bd2304caf0e840fb6d289b518eaa0fc7ad6189cd6a48

    SHA512

    ade0965065706c8343f04613e571b243ba1b243f6d91ffead390876d27862abc80fe5074047c5041487e1a229533e069e8fd7d96554986e2ec3de339497fe64e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f130da19ea6f79e9091ce9ef7128cada

    SHA1

    0a1c13f6e6eaeebfa723cb0b08544218cb6044e4

    SHA256

    ff2515a41f8ccc26a2f360ae7c8a71578204607770f1f8c60875b4878e8a2317

    SHA512

    62aa078c3cf957d93e87b136983e0343bb1d8c9f288c8e1d6b21e3d9e2a1e92ff1c8f99ac32f28629e769be46dfe08610b30c2ad92c3d9dc070641f44b59d536

  • C:\Users\Admin\AppData\Local\Temp\Cab2F6D.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab302A.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar303E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a