Analysis

  • max time kernel
    144s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    09/05/2024, 16:45

General

  • Target

    2aeb45681e958ce48ef0f8fdb3d4a499_JaffaCakes118.html

  • Size

    12KB

  • MD5

    2aeb45681e958ce48ef0f8fdb3d4a499

  • SHA1

    a03c7f0a8c661cf01822e42e8755dfe329b4c3f9

  • SHA256

    a703384717dc2ccd3632ab90ac5894c5df89bee457099f5792f7555bf9dfdaf5

  • SHA512

    15382ba1ee7b1bec1496ef2c0605d5a94b102d40f0731d6cc87b4bca65fbcd64fe130760460067ea48d784baabe9b7351f80b97910ff9b55530003e10a856bd0

  • SSDEEP

    192:5wZpDJnDk7He+227wikzHj7O+B+q5hRPimBGLeM:W9naHeR6I0qJijyM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2aeb45681e958ce48ef0f8fdb3d4a499_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1184
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1184 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ad6310d7ec2b5c8cefd0a095eadf6a93

    SHA1

    8085635033fed14a0603b98601aa12710dc663aa

    SHA256

    dfad61e0633f233799c7f1ef830a271445f9c1efe995e35a2a2215249c4c2e7c

    SHA512

    c035f9bb99c6dd6b711f281847763d4cd928d9edb62c24e3a988e2606b1dfd66d423122e6fe0ec177a671595f2bdf4740333f7de49876d7dd2bd7f9f71cb3078

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b40a7d5523a63663f4769381ee5aed0

    SHA1

    ea4fc2141160b6c4f274b36dd70c20166bf3d998

    SHA256

    34ceafdb5e9a73f84cc7fed1832ef33d17a74595cdb84ceea1ef5f35f2447437

    SHA512

    c4f36e2d83c42bbd79874a71011d7841d8976864ec52ffc542a234c0559cda4514cae20d475d09119cf2f5459217486678e07eaf8b1c938a57d7d65bc254c014

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c690872a26d6eb9dd97d59a848663e6a

    SHA1

    1a54dedb4b67b828765d8267af72aa3b1ccbdd8a

    SHA256

    9807aac6effedb3237b43ee7cf6c920615e5f734a23b9c4cc6367c37f718ac56

    SHA512

    da7b60f1c8f9912256a2e394819e2297d035d386723ca8cc88b5c097baea43300591f5fa515283d7a585b6f94106c38371a1425f42d886572a99b86f04fd0023

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41880f6a1806d796c98991e80133c52b

    SHA1

    8a4441710ca006a554107d7a656ed6be88a89c48

    SHA256

    f98910dff79597749195b57a25b13fa935b490ebfc8d84f383e09cbd71bdc2f2

    SHA512

    1ca05a376f9eea440cff77ccbcec43ff680022451ece21729ab7a18802af57a336ea3e7919f4373ff06412efd175c665557ab9820e962aa0877d365200e0126f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    331f55b4a77cf4bed8c10f579e4ea248

    SHA1

    fa844e2c555835f28c08e25611ca98e00bf7d462

    SHA256

    e340e85ee4abc04cc6c55dce88a5de26bb0f66754e079d788697972dea7f09df

    SHA512

    47a2a9dc092c50c219478b45a00ff16c0e03c98c4a005ed47b3da1d4b11a97d02d507a095331b81603d5a5c1d283bf8c72a1ae37a6dd90a4a9450c66601e7342

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c36a3a9ed9c12a7fff7ca323c2e79891

    SHA1

    0fa39d619f1791b4c663f3dbe57d59faeff0d13d

    SHA256

    d95e24a240ebb25ddc8420b2aa6c77981c6a282c69064cd82cd6c80b0f012962

    SHA512

    53017bc291a551fb1c2574f8dc5e6db4524a67f1b090aebc86fec5bfc275fdfe155f088a5c4b3f29cc094677d3881fcfe3d8d03f8e5d6c61b406e5da63d70603

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c5f4a697b0f5159e093aa087a038021f

    SHA1

    0ad5b11351399b326953b4d7c56d9acfd3cee617

    SHA256

    ddd623d261d7a116807c0872f2add7418002a28d6bcf1654a215c154a665363f

    SHA512

    a14a3c93b147c7bb31dedbe7e9f4e14cc0089650c6f1a697bf00aaad68ca19617cc5b09f8949373cb672b2cf480a95e64411cf084db3547e0cd5a1eb17f41224

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e7ac05b32357c96a539eeaddef9fe72

    SHA1

    aa31d842535f7cd38d2b2ed16be3ba9447d64cf0

    SHA256

    2e3d703b2ca65151646baefaee9a210a7fc524d77d11ee592bb54415a7796539

    SHA512

    136b4b86fd1e0fcd0a9387252a1abcd37502e935771e325d7c343eaffa205c82507f157dcd25a1989b00b7099fc738f6a32076b5c61b599cc16e0c77e8927836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e343691e9930b26c83dc1e89662cf68c

    SHA1

    a6c8d0ffb6fb5caa1992ce0d8b4be16f8eeb14f8

    SHA256

    379d96ef07b0370682e4ed172b2cad50da6c8257e4e6f400f6baa4ed0c4b7a00

    SHA512

    04596eeddeb249d585995b2515e16b4a112fa982eda3b1ff047ace32ff68aa09d930b5507c0e6cfd66bb8e979edabb38ffd0b1906ee8a9d3b6c991c276cd696d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    effd6e95607f68c10eb9849ef8a9c539

    SHA1

    e3c93438b0570af9a48560f6c7e92c420eb96d7e

    SHA256

    0c3d92671540ee589bca80a0c025c2dcfe121e1931124652da7c8a56eb0bdfea

    SHA512

    a5b7e54d6bd7d50d9090eee6cafd2d8a6491afda70de827433069a497d3edaa987acc3c009e7bab0706edb20090ca4be50c4ae73d47598044b7ea9155a1c2e6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    37cbf4732b360d8880fc65f8e9a41e94

    SHA1

    7e1e00f8179ca0cdf690983b0fbf371c43c3450a

    SHA256

    ef29e1fb07b9ae52f0b386891324ba083b74f5863e174c68d522b651640c5e5b

    SHA512

    ecb36936197a9c9a43f4fd2c562e18c622f576d6041a44c1331341797e9efbaae5349898bc93a626a787f16b1f8203332af7afb86eaa60a9c8345d37b02caf03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f27ea550392c3f9dc1dfedabb89a2e7

    SHA1

    187e659a6ce3931df0c9cfdf51b9e2a679ffe131

    SHA256

    5a602b656a3809af3e503ba2716d4341160d14a0dc018b3ca409c7f640cb8185

    SHA512

    e19a763a9d341c9a9b341e801171fa7adc915e7542f8ec44d9369917ae08773b833e80a27776058556ce411bbc471338d26da7f55948816a4f773530c5910367

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    277f53b237fe1a76c8b1c42795c10242

    SHA1

    bf1a740b245c5ef4567ef1d2d10fe14741802e5f

    SHA256

    d0d5721618c59b9a05c17013c60ba5167b3b2ece42ff54dea6513bb22856bd5a

    SHA512

    cb59dfed3e51d4258a4de0ea40e369903d721e26e888107b809b7746476cfea8d5b6c2b2c98cb0632911fcfe1e7ac6b771c2ae4179ceea2f22fb427f4c16bdb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d2d589aa3bba16b3fec01239e2c4b55

    SHA1

    30f6b5039bd35ec7e9b40b4653a0ec911dfc601f

    SHA256

    be4e8db8d7b6e885d357daa385209506127d95713d1d165a799765b929ca41b0

    SHA512

    c31d33c24b8398c9c26075b5e2ed15488c6f1a7b066ef02abb064ac78c0268100cae37a5df136a5f32031519731e628627efbe2194826ea8daf9300bc467f989

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    57f1682d81a8fd78445895a01d94f803

    SHA1

    07e546e863cc133ce46a4326617b279255bc3a59

    SHA256

    75768e25e3495407c7829eebc97fdd1613912bd616137c92d444e70eb9a39052

    SHA512

    85a122090c5e6a3d1e3f4f30370219322c20d3d3507741dd2290f8c485f0fd68835200f39e02eb9b935a4f7f450475181f5a7d227865d8380bfb170b6730523f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30467727bc5782c617d48b0896c6d0aa

    SHA1

    6774e5250bce4199d64eabffa59b2a81ce32ee1c

    SHA256

    4b25c16fa1c65dfa93af954c5357b952304586000abfc8c6c4a6708e8dafbdd0

    SHA512

    726a920e365a6567f9525d81f2e0b68a3a45a7072e78b7dcc9646820bce5cb293225a7c33c88b0420b7cadb83b295eef9b992e76a426809cf783f5a78cbdd325

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    554e8db81df141a72515f11e8100d353

    SHA1

    47753317f939ddafdb4247fb946b0b520d1c45a4

    SHA256

    34dba145df35cbab4bb49494800d82a5de29538b1f47320e70547ebba6d89e8c

    SHA512

    377f92f344d887bc8c139018111284a78af0fff0fefef42dcc706aecc79c01bf670bbfb27c063b32b4e44f39754e0a1ecc96b21852202b7f775c1e4368a0ee79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cb611d17fc7e2cfda7ac999628537ff2

    SHA1

    40d375bc86d744a9712e34d639bd765aa287cce0

    SHA256

    a84689e97fff759eb6f4555c4ba8b2d6646d8675b7689f4f21d0eb9f45936be6

    SHA512

    0a5cdfe613c72b9c7bc01a6b5bbbb37a675c8657a76b54ea898d91496e052bb495556c7e5378d5c77f72f09d735a6d8b97957a7a6becf3dad330b76e1b35e306

  • C:\Users\Admin\AppData\Local\Temp\Cab9292.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar9400.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a