Analysis

  • max time kernel
    117s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    05/05/2024, 12:22

General

  • Target

    17a58c6c201fc8ccd7831c25786bfadc_JaffaCakes118.html

  • Size

    27KB

  • MD5

    17a58c6c201fc8ccd7831c25786bfadc

  • SHA1

    9587e69709da90442047346168517b0f4f881354

  • SHA256

    0725bb9bb00e0d0d7fea3f5ed42d9df9878de25c27fe08eb4f18c06034ca5079

  • SHA512

    f4cac08c1dfa11f969f5c6b4a4c8d4d6bf43a48b4e65ed5a3780a18ece25ad794cedfff8f9707abb073a3c0caf91385b2facb76035e58231627fa6cef35dc6cf

  • SSDEEP

    192:uwDF1yyob5n62NpRdSLzOEVG66nQjxn5Q/sanQie41NnDxdnQOkEnte819nQTbne:zQ/BXQI8xSCtI

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\17a58c6c201fc8ccd7831c25786bfadc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2016
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2016 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2216

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9e12eaf6496fc1464c99f38ac32a8d4

    SHA1

    fc11e4db5bdb4989f133551acf509c070be75d80

    SHA256

    9870bcc8f6c86e2835766752c8163ce02c53dcff4cd01aaf991d459749ca6d9d

    SHA512

    c65a596b24bbd712bb3fa4473da4ea2d4908d70f8d5f8ffde1651e7e848672f7164be1894e4b1ac923c2075bc30c988706d9b3968cc364bb265e7f6d5bce26ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e03bfeb6cf0142bd0111092e31beaf1

    SHA1

    de0503f7208741a9e5b1fa0d4c46e9c61dc094a7

    SHA256

    9e1c5d526aba37290d9212d393f260ca20e76498282ee3312d450b7c11869420

    SHA512

    71d7d0d41507a01c32dc5531622c9c8468620b94e20ca7ca5ffe39b9d070b6d2d6af9a95026ea28260efcb1c167dfbaef3a0364343dc3a0ef4ce060994e06fdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e28b677aaa34d13edc3cd4d9c56f1cfd

    SHA1

    579c2ecbb918e7ba044fd4ea371008f0c0a822d2

    SHA256

    c7791e541c10f26726eaf6cbf9e973e0cf77adc7ebd79399268912b208af1013

    SHA512

    550f7175a86fece6383cadcceda895bae50c1f4dbe0c0937fee02fca5d47032f28acc0c4ecc2bf8d3fd19284ae52451c7a4d2758701d50b0142097a3b8d47ef1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1375f0efb4e34b70b35440c406596b07

    SHA1

    8e4d08b983e4fed4d1450c71f1f4cc67ddea5657

    SHA256

    facb4a8bc28afe3c2c074e0c07dca2d06ce923fefac44161c4d0187308ac782a

    SHA512

    fb45d7f9c026b67d19f5f880b47f7f7ed90e853009f82ee03ecec340eaa4d043e9523e2b28aff194411e2445fa575e3c9c69b4f498d7151cda1d9c43b4a5dfea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5071b3974b6a14395ef717fd17bb374f

    SHA1

    4010f9a1f80d9442f1b8be3c83b2974355ef0361

    SHA256

    145976d0e2650d58010284920f8e4afb1be2352010d6fc534e91eabad4334ac1

    SHA512

    a1c8ca51604f722970130ac1f6e7db564e45d92d41c0a8da6f6fe357359f4a0314a3c07a5053eaf4747a980c7d2d1db575b31ea91a167b21a93eb8fbf5406055

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    09aaa91c428aab3496360f1739d5dd34

    SHA1

    e38ff4da8967dfda48f7a56e17e6f7f593073e51

    SHA256

    3e7cbe4d58f2ebb40e92ea9868b6083ca4f5d635e06d979e85e5fcbcae92985d

    SHA512

    dc4fcae9fc0da505835168045d3f1a891e8d6d968e87edd2baccefcdddc3a56bfcf6fcb06de7ae0012103184ab296df07ac3aca97182465d42f947ea711c3d0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8c32c1180a02f467a1827372916788b6

    SHA1

    6854f12d9f18ba334e6a1865caff635dbc61fa84

    SHA256

    92400d7e3216984a174f47b214c3afd45c7cd6f26b614b4f6c7c1d6b9978af85

    SHA512

    29efd0c310c9f56d5436a4754e7ad05f8481c16f1ba689773ff284eaa514185d0e3935027341466e35a59b0ce7c78c503ee18c5633776ab762ab2b6650edda46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f719c879e0ffea2b4c2cb1c97cb7658a

    SHA1

    db175c96cddda9d0ce4ee79f6e646ff31bc3f478

    SHA256

    906ef09ed5c6a832e13724a5bf38e16f3309169b3dc1872f7fededfde72607cb

    SHA512

    d9f2f79f2f71e46d998a56ddb0b62527eb837edadc22238cd1926bd5d9dc3fb21ce06b9be45faced993699018200bc919c8dfbe5b80d31c76ddf189c470f8004

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    509ab82fee1f80f3b904798dff757d69

    SHA1

    cff96d7ae8934a2bd9c5e8b1305c052e32b1f46f

    SHA256

    3d7f5205aaff1b536403b6370578d57e76ef7b00c4c85c3710be1d508960a761

    SHA512

    44f037bf2c25759e9d4d8b3020714919bfd37018bec8993bf2cbe05347b56e774727e25a702ee896d81b50143e5d6041b8634ce5b31007857c9450f2415f0537

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4d7475603265764bc44ca2e39927d37

    SHA1

    e74189d4725f6b7a9ece313028aa1f087720d788

    SHA256

    afb1210871148968a541a4fb1eca2bd726231f7f9d335173e3690d9c2957fadb

    SHA512

    ee3c06a6d3c2a5a5b9152178406b8c20d128a589106337f3ee0614b4d7863acca25ac4393727539c080e8e7b036b95c7edb6da99872883f5f1451d8ed07eb86a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b0435a6e698f093823364c0f9279451d

    SHA1

    a9569341a91fb2614f44a610bd4dac739495c8a5

    SHA256

    499edf13fe8ce8c4498994cdf1e2decc175f6d78e03301d0c64a29568b1f07d7

    SHA512

    b7fa5fffcbcab7617fc4763ebeda2b16bd1e073048d3b0fb4cf01a0ddfa5b878dbb3ab93468050115d2f877ed2dd6e661029a2be862500fe2a17832723ecd355

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a502a411f42bf7a4b6a1ff3bf0773b33

    SHA1

    62f38c0cc11bbec9d60ac5e6ae899a0ef9112cc3

    SHA256

    06f3947b3abfa4698d977d88d6ec716f37df7ccfbb9d6edf78ebcc15d2af85c7

    SHA512

    a00c59360f19f8e8fd859afb15e6ab39659688d6166feb5ff94a67c4da2ba2a461d52535c53f56a6f0ac0b3e4ee936f27d2276bcf264bafefcc5ee0049155067

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    77e89244d954bc02358a469b96d1dd9a

    SHA1

    0e4bbc48a5a1477ea4ed86f8cf78213a47e20223

    SHA256

    3ee8e1a4f57e9ad8f4e3762814acc509394e6e7c20f95082e668d51af4c10717

    SHA512

    64eadde7ae5a0ad52c86de981a6f7e1a4dbbea2ac0dea4e70036d404118da4ad2afde48d39c6d193ea2883667b1b7586009344fdffc4403ffcb0b3d354789b9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07542904a6ec8da49d47dbe15ed4bd6d

    SHA1

    1ba135cf3b87c6ee71986629a8ebbe9ad7b50330

    SHA256

    4a31b504b86b88d6268e45f41c52c23b884a25530dfc2d255ebb37195902fb04

    SHA512

    c2732ad9f5fb2d7e41f63c47b2f36f5fe5eeb7734f6af213349e51454d3cb12d7e86f764b5dd9f4bc09cd7a9e6ac4b7de4bd2d2db18dfdaf18a22a49bd7d49b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce0267748942b83c1f0ec7705924b601

    SHA1

    8d39d8c55b28e6d3305cc35076df60175b6a71e0

    SHA256

    1a682c9f7a281870b400a767ba12e213e45249d42cc19086fae7e29451f3e7cb

    SHA512

    8a09b4c42cb9707703b5fd274b2d96726100cabd4390307cbb1146afe1eb390fcb32cb0bc6ea54b4a2d2a34c2f8c91349fbf813563a637280804962cf2cfa01e

  • C:\Users\Admin\AppData\Local\Temp\Cab3A82.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3B75.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a