Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07-05-2024 07:18

General

  • Target

    1fdbae26388b24c814bc36cdd7915d58_JaffaCakes118.html

  • Size

    27KB

  • MD5

    1fdbae26388b24c814bc36cdd7915d58

  • SHA1

    32945594f0d1b07c8460091349e1d210a417bcd1

  • SHA256

    b583c1e134395676c9f5fce59caed6d75f7a33515cf80e04bf396f443da86e8d

  • SHA512

    6cbaccb4b90fcafdfa99013f61dc1a935c934b6c6c8ebbf4da76e2d799ad3806e94311c09910e9345c800417c6b8770c5b9b8802cdce9df31bff58ec81a1f507

  • SSDEEP

    192:uw34b5nLOnQjxn5Q/qnQieJNnSnQOkEntagnQTbnJnQ9eldm6u7/RQl7MBpqnYni:SQ/IAHi/4SD0/n

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1fdbae26388b24c814bc36cdd7915d58_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1816

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22b226352216a1cb457ecd02c686f2a8

    SHA1

    ca23fcabf5b1190da8e73ad7a0f7699f02da421d

    SHA256

    4de79af5a68ea24f130573c20cf0e68b0bae6a84c8c78c5e64ebb88e3cb57597

    SHA512

    f5835aeb7b6d3ef7a44f4e6008c7fb8a033c4480d2aa7358d4e28a1f9fa51d945a1f7c2fc10ba7b1dfbbc336da96db4fc0338c0b1c7e0d5008dbc3417767ec61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    554d0e88071c387bf626a99e46b619d1

    SHA1

    e9e1385075f3deee81cd5887f06358f073a2a2e2

    SHA256

    303dd9a2bcc6bcf27255110f46fb20724873b1351b9cfcc555699c8a54a2efdf

    SHA512

    ac0e7da8a702a2972892dc19bb66e178484f94966ffc406b208fb0b85fdb43f85aa271a66a43ccc55eefe97bc668c2fac621bb5a9d342af8d78a9bcec3606f46

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a97213738015e3be4046e15c0e07f27

    SHA1

    003e79c22cf625a44d14cdb8fe1bdb1d447ec160

    SHA256

    21b99a411379133efee57c6be4c2c24ffb4b4acc24e420dfcfcc219febb9fdd1

    SHA512

    1e41abdc9cb08b77141b9fe8714d1c7c400cd442ef7cafcc6fc521133a82124f5b16999dfb137df7f95ed15bacfbd7e0739dfee52a1ec393c2eb98724af690a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3dfbf5b52276e9719d86c6d8c6db92c

    SHA1

    56772514c60fd7a607c268615afa3d3f030eed06

    SHA256

    efdebd5816119aeeccaa635814d10b42abccd1e1207b113622304ba4bab16ad7

    SHA512

    406472dc9b8036d4bdc2fe99eb57a125a0c592d80cbc086b3080b80f848c1ceec5468f188628d77458a914f868b6bd1e616f4d1009dd2672723b7ac68c5c7db9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d1f76884cc8d426c5b962164295b63d

    SHA1

    05904605c0aab5d8df3da01353b66b701b341199

    SHA256

    835142dc95f6ed79756883d05dade76a050f9dc2172e87078a5c170f3ed86710

    SHA512

    0a343dfecee66932a22abd9589f3fff1925eb7c695fed5b28e5be4cc968d0e83e844661b8774edcc0f2af083bfe98678cc98a756b2104874774472341ee565fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9cb9d1af75f9f0eccd9172e93ce3e85c

    SHA1

    7dfff5d10f481bd5039155a910296bc6f4e6fb32

    SHA256

    43c0facb13f2c62c498b7687b6aaa744b65b3cc1d0c6e752a8959c3342412606

    SHA512

    b1bd0a44b45f2ea6b2382f11698ab95ab968175de96f543088f5bef9c74c2fe3011cdbc85e924b3cc51c5546c2e7600ac51216dd54738bbf9d08b47e05e9edde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4b94f26051f7c6897477443b99f54ab

    SHA1

    0504ac709570dbf79d2239a35c9d621f489c2bbe

    SHA256

    b0fdb6eb22992af9c43265f9f52a429767b442dae41763e18b1f13b60c083ca2

    SHA512

    de8c972f66a0459b8e170654174671b2d1030a5da4cddc6b21a6e41d6b033af05c7c1f489b57836baa0218769e3b8e289fba328f6afb43c7e1f4510a7698a69d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c08d16c6f8aeff6177f7f99de586042d

    SHA1

    a81bc396ea9a798e102f07261a8853eb8154d600

    SHA256

    f8578e10285acb4e5db173b50a32f951175d9cfef81bf4fba093d854c0b53743

    SHA512

    884028c099d999839173b1241d7cc7a3b903161d90c00498986cd9884796c4219a2a6124ebe0614a73f5ccf75450cc2a8f30e926a6db2b00d34cbbe769072987

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9d8369e1d71c729f20379dfd7e0fffb9

    SHA1

    2b3f58df9d83b0171507653a9890fdbca1b69b83

    SHA256

    29710e215f7c528b19af880760f3ab7c433d01655bb8707495fd7a36feb38156

    SHA512

    97ca75fc2fb80d3dbb0031561f113b7093c0ce621bc983eaa9ee82084e44bd10f8b64697d266bf9f429c4ab638dca53f019f06d5c93f2d612159e1059950ea16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ef39e1fb02ca2e356cf51a5ac9cc242

    SHA1

    9350a6709446e0a5426971f70c4d56402f1b5a4d

    SHA256

    4e5059dd6ee3ce644b32c8791f043c71552e70421270c9bf845e81b54f32931a

    SHA512

    678aa3f7ae596bec8aa46a162964622c2fb6d345d28e55058f81d071105f37f5bbd2afec19270ceabb2d75b22598111d1c94a7ddd62c4584d2e263b14d89de2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    47f32cea69511eb28d4c3f3e2520360d

    SHA1

    bdba44204600beb2a9954b87617655771a04f7f5

    SHA256

    d42086a3c4b8d0d8bd805764facc19197e7051306beda3e8f96c54fb280c22d2

    SHA512

    f7f8bccee59a8863366613b79d41f446a2ca7a6bbfce9d01a684442c10a22cc19b9cd0fcb8e8eb729237d9fea539efaffa0ecc414d6c70c2684ae9a994f1bf3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    142e36ba8689596fc196bb03bff2e783

    SHA1

    178779ecc0c963d101935b5f6a3c10b7e986bf38

    SHA256

    3e7149b448e8349bc852de251380a47275ff1f3d34b163f7442a83778c922ec6

    SHA512

    d2538be3c31f1c2afc56241bf796549678b248ea216aa3e3297b39b502ab0d9081cb86b3d6cc5275a10ccb752136c3f1a6204dd04be8d5c1992519036148cffc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    93a852cc8ae311a7802440c925e600f1

    SHA1

    fb13c76542e5e80a75f60e107cc3b0dfdd008656

    SHA256

    9d66c97bdd045355c0f19fe25f32e632d83b49050e2dccac334017dd75add1a5

    SHA512

    ce231a6305a05688773198661390057b148d6fe9e6022fd832c34501934927748452f4b34b81bc37ae7c7fe9fb8985ab214ae1dbabdbbc3e3fbdc481b39f6475

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68339d4316ac562601642ede87e35a13

    SHA1

    20a9350562c7453709b4df69fd9c2c973e3c6098

    SHA256

    28837a057e1f281fe0a1c234d2281f25675bcb25e41e0a8cfdb655ca938d2793

    SHA512

    a1129a799e5e9b02c857ee6eaa0132cceb6dc9f3986859c52a00bc13a50486acc6f02a73c09f5c5acef62036dc54a4498fec526d248d5c6ebbac9adcadb98142

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    81836e2b4c0a2d9642536629a4a0ac97

    SHA1

    2b6d83681d69e49394aa62334aae7b87f9d85fe1

    SHA256

    562c129310709c83a7070e27e3d143c2d3bbaaafb5539eb61cdc9e592c49b901

    SHA512

    69f250932a674f8d02a245a5bc6e4d4faf51c413764430da0a5a289aae30dcda195414cffaa7e545ef520b02a634939c337d13bc0055e0934c6daf4b67b51c5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6393d8559037d5c1fcda6e24e0b1f9f

    SHA1

    55458a69fe207111ccbbb3653c19b61d19dd7311

    SHA256

    e954c830d79d210edd9ba22a2c53d1b7cadbd670d03a22cbf81e11dc5b76c630

    SHA512

    c09a49f5fe1f56592ae77348e49501d7614024d73ea5f76922ab3ca7026901aca7e3acfd24e0e59cfe1f1a0ea5ab462c4725a3f0e489d9f5d0406aa0d4409a9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    43cac350fa71f580fb82e46f57cffdd6

    SHA1

    1750cf6cba1c6993a1ae91fad79801c9faa4354b

    SHA256

    6aaf1b51f413cd78c9b940c1ac9043b861bfd76edefb500eec4810075a82a8c9

    SHA512

    4ef114a0416f21afcac66f49e6f34f5108a2e102183e0f92557d5513606723bd316b418d561a77b0309ce57873f612459397f555c4c49b5d346511ccee0a9d77

  • C:\Users\Admin\AppData\Local\Temp\Cab3AA1.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3B84.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a