Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    10-05-2024 23:40

General

  • Target

    31a22154208fc6e341ae15169d79b75f_JaffaCakes118.html

  • Size

    28KB

  • MD5

    31a22154208fc6e341ae15169d79b75f

  • SHA1

    eaf72a6db2c383a0d760f44f43f88bfb6dc0a09d

  • SHA256

    1b775c5b34c8c65ba094cad1cdae24b0747c6072bd279959797270b75c4ba9a2

  • SHA512

    3a0196e03d69a95e145dc7f173e33d30e3cb4642f4f85f42112f7c0115d1fdd2c7ab0ceed1411b445ac42c2eda010b5ca2373e2a0ce8db2cec8f692fb1a98449

  • SSDEEP

    192:uwnob5n6FsKnQjxn5Q/SxnQienNncnQOkEntkdinQTbnpnQ9e/z95m6sn3eghQld:qQ/K8z9ze3eFSm

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\31a22154208fc6e341ae15169d79b75f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2236
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6186f0eacf73243cfd92e78c9c61910c

    SHA1

    86e12ca64539fb929672c3ad15c4586da83c043f

    SHA256

    2373c946eb0900c9d37977ba69f94c6f35a9974cb4c355ce6ead0c91248d89eb

    SHA512

    146d7a4e98d129bb6d9f79eb82e42ae5d8917d1d860b9c3528143503696cad195db67620ee649667bcf0990b49f90beacc877a07a8ecd2eb278c046569d91a64

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f158023a3a0e38d3440958d08bd65f6e

    SHA1

    67fd818fb776ef575fef20e54b017d4290e42d80

    SHA256

    1fa17f144c67d4c9a6e6b1da79258dcc1ecf12b10dd924266ca0969b380a8f14

    SHA512

    ed34a85e2b4222192aefe54a43746985769776987be0a55ae70e1c3d077f91e5a9c9bb2d36b78781d11533aa6802594d9700236556504f140d0ff064d3b4848d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    67fedc47a58d444e64b6f4de727c8a78

    SHA1

    24746076fb9359d45d0653733f3208987ed2a184

    SHA256

    6f7af399b7ea1a70b908bf20fca07fb35cee8fe613b39cdfffcd0d71744ba985

    SHA512

    cdc310e3986f7feb198fd71e5c503a20eee520dbaae2f862a8fa392dc7d34041596cc207f1ea1144f7b1cb7d23de8432fc2ab4dc3f41e662b402cf89de1f7997

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44251262597e59dbe39870519fd74dc4

    SHA1

    38149571d7ceb18b6c1de76ef3e68d128ac59a71

    SHA256

    626575e39a3e9dde7ee6689c93e7da3ff8bfc177e877ba39fa70e0f3d9f2d9af

    SHA512

    27732f3c1629b1f1d2e27e972601c955533dfcc2d3d6f79a1b1c2815028f3157ab1a909062f8adbf246bdcc40123cbd0b7d8a646db3cc1363d2560450301f137

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b6b9e00ccadbb592b95f3255542a3f2

    SHA1

    c0dfe617199d52233c30b9fe39931462f121a105

    SHA256

    102aa4c86a089ceb757dfe16afdccff3bd2bc236589921205642892e7434222d

    SHA512

    eb7a49c3fa6a6b3d0b1bc79c56bf3fa2dabcf6fe7b3344138cbe506f4ecc9fa7d03c31328d5c2c64bbf874fc49567d03f5eaa220d398b9b026177ebeae507e0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    293bf6768d3e5e8b66c3321d52e1fc9d

    SHA1

    5ccf91363c7b7df99eb4a1267788b2a0930d5df9

    SHA256

    d4316d08ecdc06c004c9a696b040f299110c3c9f88403ef385ceff4fe52c5044

    SHA512

    830c4d3fc75450dfaae7edb691b2e365e7fa0417bebe4269d19104895c4c8e81d6dfecf4a6f76813aa9dc25aadf4e54d9fe480c4c9c3756b722385f00cdbc506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    86acb8ab616be4d9fa1f87c723f416a2

    SHA1

    8e71d358604209319e395ed104adcb5186b82a0f

    SHA256

    81f13dce74adaffff3c33b18d43fb99e0f961380355d523b9e6b1807738e51c9

    SHA512

    2a233b3147733e51fe7eed838a51423b702edf1d49bf9dda489d125595a85990ac8e4ef4ab6b2d866133ca9713952da7b28ba09040168afd3d92f900700b7cac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    da1e14add6dcf109835b18d52e7d2f64

    SHA1

    bee97f0bbeaec7dddc0561d492cf0952baa3de31

    SHA256

    242304429ba131d79bdfbd85b96528293ae92dcadc4f8931349bceb34933b6bf

    SHA512

    0122a51d5441ce9040f98b78c3b5ee352d624a203823d0b0db9342834187bae7af48159cf05643b14a86cb8fc32823f67f4c9791ef14cdd5565317705ff68916

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a73e03855b53a758999b157bf83d95e3

    SHA1

    74eebeab55b149a9ca905fa61c75c7905e26f1dc

    SHA256

    7f0286008a5dd3d97e2e06689c38872029ec9ebd0a1467a79d4bd396015bfd0b

    SHA512

    c0a1aab211756f6a5031b2c00a115f61dfa6e393c7a9f336addc28d73a8e1783546646290384c40ccad9c360eb65f392cb321afd111e619d3bc4aae0fc164c62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3dae4768822a9135266ec6cedb09137

    SHA1

    438ce588f9c58a6283e831088a08d29e3a6e3015

    SHA256

    9ecfd4db1c69d0dcb5f03463ad31ecef13d8b69e59acf5c6b70ae85ec50b49bb

    SHA512

    de376b4e88d9fc5255a51895b758a98ba2243c584b932da1c1af7b13bfe3eed71f107069fdedfc629ffccbffb51d6d19efc76362455d8de7cb5003d6fd0133c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    003a47c6b7889a657ff7b0ccf11913f5

    SHA1

    3391315da0400f5b8852ca040115e3fbb2f0f20d

    SHA256

    8ac0e8eabd444355c113108c799b0f5815528ac55327a22723f74bc60964d493

    SHA512

    aedb2034365f2aba31b58f171f875a3b435d69506cedc56f4388b2a773b184bd42c925850792a084129ebd981c728a0a74265eb956785151c6232bcea8df80e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    023c425a281bd671d30d07233ce8fdbf

    SHA1

    f4f7dd15e2ff130951eb5e19b5a08586d5671dd1

    SHA256

    eda733b5d22ca3450a93468a3b3ee4cae2afbf14b53c3d09ff33fa7d1622cc9b

    SHA512

    e6b35ff8460ffc448791d4861fffd0be02405bf645d11879c9d158056d3c3485e6e252d1aede3d7a392916fea5cffb99e87a24f6dd84566cb0edce4f376c3d86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ee1f49960cb56e98202354cd15fa0ac4

    SHA1

    1eafa7c8513c313fbd4b84b50ac911cc1ca41b5b

    SHA256

    15be8897f0404febf847768af3e026323861c4eb0e3b472e378b7036a00d19bc

    SHA512

    4eb584954915c772a26589620bab552441c6ca7747bac06d03ea56a07dac1dd8edc5a8ab5abf2d0a23c0d12c6d8bdd6fd3e943a6a8a33eb3588357054f8a9cd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a301206d7e2077957e15812df43f57d5

    SHA1

    ce25afc5e48b21d14c71902b13210f521f4942de

    SHA256

    3abf4f3a3b81b76a72dc76e6fa964d95ca46972810639ab151538375587ddab0

    SHA512

    8a85d17336d55816bba6e1057dd1b25fe67833155a0a725e9c13ad183dafba15585a94061fb0d0719d86e7de53d315199fef37b00ddd0eee1d4f8a681004c362

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    676691795a30ae0d373b312258276bcb

    SHA1

    0331e62d2bfc06c01c294651fb9796305bf95538

    SHA256

    87cc547f1a6b60f5159f2e63b2522a90ad0019223e3bb05bc420f24cba2dba19

    SHA512

    6ef8fd5b8394ef43eacbfca4ef892bf1019782589cde5d63299ce9024bb6d1c048f7525150ce38c7b4efa0c0b258241d5d30efbff95b57dfd5c33df03aaa6986

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3b8c3e58f900bb2a11162e63b575227

    SHA1

    e966d3a1c758ddb4d8f8bd9dda68eb76bf928e80

    SHA256

    6bd06a611180014089496a1034a45f83169bee0364356bde121e0bee841f4b0b

    SHA512

    1c0d86702d9403d3167200287ba91d7122751971aefca72ba159aa31df78ab41af03dde140ef8036a5f17218d4708598f6d73a0ebe787448eae3fcc2c8393579

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9bb338f8636a460f8620d8124f6bc00

    SHA1

    f12af07b0872a343137fa5d4924d97e6de379c0a

    SHA256

    ca0e90de7f79f91522dc1c4989f8e5eb08b01b888f65613a06934a540fa4451d

    SHA512

    2d967bf1964ecce518f8673a1b8a0f2a4a1cc2ca9bd82919127a00876e02c48cc242d029dded95453b532cfd659df4a74424241f36ea2d11b0115bc8c1f4d8a6

  • C:\Users\Admin\AppData\Local\Temp\Cab3EE5.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3F48.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a