Analysis

  • max time kernel
    141s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    08/05/2024, 10:46

General

  • Target

    247d6d75ce54a74c46fb22dea75c34cd_JaffaCakes118.html

  • Size

    73KB

  • MD5

    247d6d75ce54a74c46fb22dea75c34cd

  • SHA1

    2945611b962212e5ecc341387eab6e111bb840c3

  • SHA256

    979dc04c55e177d8dde05c8cdb356455f108bbf1a244c6172b93c58d9c8f4fbf

  • SHA512

    44a4c7873360e0a90c77def05132969fa59af608454de4822984f09e34a9d75e8e59dc224576746595fef809c180481fbb0e780bd9751668981c38c801d04cf0

  • SSDEEP

    1536:9ih+8AvjGiFD40NbCHrCeMA2MJGi4hjvUDDxaQqKTVA:9uLArGiFD7NbCHrCe8MsiQxKTVA

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\247d6d75ce54a74c46fb22dea75c34cd_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2496
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2496 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2120

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2ebc066cabe9055b93bbdf98077aaefe

    SHA1

    b336ca064aa9f3a984d6244df1952848a1627633

    SHA256

    db5135eed4dc4fb224fa6da238a725514fe2396e191483997bfa61833e550160

    SHA512

    d465b807f94b5b26d2548412664e2030e1061d813c494b6f51b289eb5ddffd90fcd7078781fc79582b93f1a8af1ea34223a5b8ec84816a944ba6f8498224e9a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83804f79202ac1cf9b3bd4a03eb3fecd

    SHA1

    39a86730da4eea67cb2122521ddfb91f0ac4c91a

    SHA256

    bd65fee3f5f3befa54a677d8c378132f33627521d1584e9944cdd4c39938aea9

    SHA512

    d3913684048d3b18c0c978a327d94b7bb733e8f4c36928cbeec49ac20d7002f5c0ccb9b3b636b0819c7e2d6b41d26e0aeee0b4bd95a4f1b83b5904c817f51db6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1027f9785f67650dda8301bdcb40708e

    SHA1

    8e5cf2bba5ed404814ba9168602ac961fecdc035

    SHA256

    107a2bc6760d6056983941c9e80daa16d3c1c7bbd1bc68f41fee76da8b695072

    SHA512

    d46e2183f8ce8a905357457df6fd5faf4e2d4c46d1af7f027d1688fe2c95158e86653b4166cdb2fa781c053598ec1ae6d0799e642cdb0665557ad9d23d07cb08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9dcada10958a8d8eb50d05e768b100e

    SHA1

    011cadf5d47a08f6cb5ee3f28b181730c8398f90

    SHA256

    ecb6fc18c464410e762892a1f73d8cf79e54fce1ec29c44710e43fe450cb17e3

    SHA512

    f58f75edc8afa2fa0ec62ccdf198f4901417356a2efda07c85c4d2bd7914b42ab79308371388f19e8647f7e5bc875e92032955eed67a0f6fef48ef366d5d5e0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    629e4723d6a6f6ef5fbc880159b065b6

    SHA1

    8ce8c3a7a963eaaf6d89b6a6fe372fa1f44257a1

    SHA256

    d86dd086fbbe96ee1d76345c8083d53c0cc49b38f7eb779c3047c4b45cf56cd3

    SHA512

    99dbf5fa779985cbeed974f8222552cc8a94f65786aeaa3f6567eac7c0f47769da922faebe73b40668c1f5c219d395d5628ba8a0409129e87fd402131c06461b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9da5f451da0faf20b0146d32de2c7a35

    SHA1

    e7072aac2ed45fa7f0de3fb382afc26dcf53432c

    SHA256

    ca7d7f6992430b0df11cce014690332a8f1eb00afee970a7e6ec767c1bc24aa8

    SHA512

    1b86883b29ee897c49368da9cd3088c0ecbac8392ad1f7a7643d0e8154644fc8b5cf1a45d3e841ea802bd66dfed48aba479b698c7407312cac8c3c740b495392

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    054dd6360c40639969ed0c39fda7c503

    SHA1

    e20c53630111a055ecae1c45e667a84ec5201b98

    SHA256

    eb8704057a692f88f2a8c31acb24aaf5d8717032b67cd1a2d8b3236053b48781

    SHA512

    05a9ea9424d10ea524c948f838e303ca13fd707b3360381409e5ab16cabfaa7a619e9adf93fa4dbe93343fd40b36ca387ec12b86a730fb539f66a4c60f7cbf5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1acb5c75de5d49fe84ed15220c020df2

    SHA1

    2ec3b6f9af35bb182b05e61c749cc17a196997c3

    SHA256

    fee291d832fa3fdee506e155233711c6603a1e16c752c81322a455723fc1f47c

    SHA512

    2663fa61667ac89ed96ccba7715376a31ef511f60af456d217fd40dc93dd7c8553564075733acdccf5bb1be3b79195592de04fc4c7761c6404a643cc671a04a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4cd1d2fa1598270f7e2f6c0bbd99017

    SHA1

    78c2ab397e4f570db3d458475562008de5ea01a3

    SHA256

    f2fe70c995b2437994a7409fd8fef485dba67537d648fae796fafc8e2a82fdfb

    SHA512

    c885c0494731518b204a3dadb74aa3404c18bb5402bc8568f3de84eebcf5f042a8a950826d062b553a43b2ece41a9a30f191adc0a80d27119e744b8facd41fac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a49a0c77e9cad75fa70c504862abbeb1

    SHA1

    f24e0013a4ad9a926f1559f3ca1b5427ba923738

    SHA256

    06c35f8a7c8cd901321e5d15404fc86eb6bdfd854b95de3c294467032dd69ff9

    SHA512

    0dfaef0a2e3347a61768b1040a5a032e96838032847cb522aa79a4b358ef4a8912e70143de8010cc3d43e17c60584d2d47da00627816259979221cabb03364e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae360fd5be1419d40de374d971d9f425

    SHA1

    7e25a95ff1d2cb1222e1764924ea52963324b6e0

    SHA256

    3601d11d90418406581148fd123b2d8e6f5290c3396c42e065ae8e91700c5138

    SHA512

    e909e1cdc06fa8a22f8b13c78a8458ef96b0486fa815e1e622fde7d3d997c91eec75b80d03a00e7bb93ce6792b5973ec2b6734fca1cfca69960f996fb606b3cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba661c3ede91f8568600710db0f281fa

    SHA1

    7ab62ef2ccda68061260e44a3a6a484dfecf6c91

    SHA256

    f54a119a039e09b8b0c6ce127780fb7ae1cf985f81089662fa4183315a76ab0e

    SHA512

    263a6b9954085e69ba43624c0a65cb6ccd2b213f8e36f8834b3437c53b5c5a66a41dafd485612b67bfe2666cbac74fc5a7214dca060b1a5f43f73ac32657a227

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c9424a0e640511b2d30c90175fd8752

    SHA1

    279ba9161c7c71c7c151c743778f5053275ef3b3

    SHA256

    c31ff625dc4a032d84378659387c26934d96ca151c61c0e6cd239128f249edee

    SHA512

    9c3ab4eaf8c76d5e4ffad8223b17ffa88300f909857603eae75939af84b5a130f010f28049e192c83fa82c7d7a63f73de98bbd48a5b7e7801eb8c744aeb3887c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1acee2ae4a369d55fb8b072fe0fa7ce

    SHA1

    04b42b895a3270aafbd119bd1069ea01c3965cd4

    SHA256

    39b54c26ed9fad89507d591ad669feb4722271984cef75dea87328c4c92096a7

    SHA512

    540b271faa9cdd605fddb7eedf1096ba868b17e2442f145c488a1a4fa9b56a20b7a3e2dd1ac49959fc640647e1bf0d0aacef5df889513e2071351b1b751f72cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb344d600a025b5e4ca5db6f4b7d55ab

    SHA1

    61242c433bc3ccec4bbd7f3ee9399386e2c6c171

    SHA256

    94d087c61812e16f2ce6127d1ba6a0499e7577b0bbed94f1c8c53abaff7a4c99

    SHA512

    07fe072fb5194ca420e85ea501280e0ebffcb38f16a417214f94cb3c9186741107798190a6d2480d34752a732101203cf0af42dda1d86101015406fdd8f4fa33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83f2699b2e4f61a6587d1dade39f10d6

    SHA1

    2dc443027535c6364558ff64af4126d8c53b5cdd

    SHA256

    45ea8baf84e764b1f9e358d4c232e0a88aae5ad3c7fa47f5854ebb90e63b73d9

    SHA512

    be7af9dbf6f8f91c4473695062261fe39bdcd368ced78cab10d764bd0487af3628f2535d2745a429094140f7133be2691e99cc3351b3ff3da4c5ee08d9d0166b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e0b9e4866f99fc1e0dc2fb229f49e344

    SHA1

    687df966191d78dc826308c5ea77485a75d75e05

    SHA256

    dec0fc8d87b92a3bfc8ea24d71c55f0f7fa552bb7b2ec680abfcd4db71b3e464

    SHA512

    31cf071c224d46261cbb475b2a2ac666e284ea234115059fd5bd3c1f99b65b88c7c9a025dc66e57da9c65a4ec6eba629741fe1a9fba01bcf28b4916ab793db80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    74e3bf4f76992603ea98ba77da95f26c

    SHA1

    bfc5b088dbf09b8e2e100d55fe88f63754914344

    SHA256

    d7a5892672ecab4deac59380c23391d313d3ae748c51305d21a7b24dd3b5a03a

    SHA512

    73203e2644e7a7c1115dc277fc2dc7edae77e5332e2319158998bc555d654b984059b4833382fced6ab1a28075b46413787594f9f154a2f849e1b0533ea448eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3910194450ea34f5541cfbe4102045d

    SHA1

    8022aecd08a09d4d5b5184cf3331517d66e10dbd

    SHA256

    d908d8ec26993ae8974a4e135357f68e85606839fd611612ebfa7f458115dc9d

    SHA512

    f58067cfaaac41cb7bfc6cfbefb5ad824f05830c664947196c8cc886624913a3de220b03ffafd7d58a1a35b2d9da546ed6c8e03f1e592d0385e13159554bda88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    839d7dbf4dd886257e6cce2251df662c

    SHA1

    f7348b06bcf6e4ef8a2684b2331e4d697f88e345

    SHA256

    b734fb4242a1899ce4fc6617fb4988cb5f226cf7fbe8af38b0da8a6a7fe1aad4

    SHA512

    5f83b799d518c620538a4ee7d418b2fee4855d0977f524657f2dd0b5c62d0be61cad159dcd26a7af60d085a10040c2facef666e90a35c5090119c29f1f5e0621

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    94c3bdbd58a5e06553f3607ce226ebc5

    SHA1

    6aee14a68a0959d70868a14cb61d3d43dcbbc3af

    SHA256

    7843b32ea7d0bcd5c191572386602ff4916c422a5ee2585f5d79e3c726beaddb

    SHA512

    ccb83182902bb0ae306d6d21e5f458c772a06783f358fd5aee0322e98a92dd89317e93f336143172853b83ce61df1680eb472b1cae104f0b68a7269d80ff1ad6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0395935b012ce357e4c9aa2f8fd1411

    SHA1

    797fba6e27812d8f720cfbcf498b380fee02288b

    SHA256

    4047ba7f43ba5cae22f0de58cbc960782ff2634340f6d00ebc9bc7bf315d700e

    SHA512

    2ee9bbda3d3f762710b06afb66b76480db7f201800ed3fd4b01d312e97aece97265bb66097e224d788551db2882b23b2b1acc5b444b42854d49a4035e1462220

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    45cf230d8d2917266f13af6cd2c71f50

    SHA1

    e4a0391708dcf7ade14aa5ee65f95f3ec71839ab

    SHA256

    1cbb807c8fa302b56bcb5253b8937ea6ccc5085ffeddc54bc74c322bfbdd1819

    SHA512

    afcc6ffe9a9fe636e002870edac0f0d532105704a733eb622f73d6ddb9270f3b5f0579b226046010fdccb43fd6ff635c3dac6ee7b45957641ab7eee922e462ea

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CY2G78MW\js15[1].js

    Filesize

    10KB

    MD5

    4beb0b1c8bbca69316e6eadcd83b1bf0

    SHA1

    602491c5f60960bf4ba7c3d2e600681a06ffcaa1

    SHA256

    429e7004f3f8fbe42cacb984c36a9cda33efdacc100a276b12e82c6ab78bf7ec

    SHA512

    3bc8560d56f39ba09da8a3582587b9ca727dd9fa60582892a2a8a2d7de42fa0fa057b28986a0975b84589d8e9ef320f976b3731a19ea17c83388c1309041b8f9

  • C:\Users\Admin\AppData\Local\Temp\Cab1557.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar16A5.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a