Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12-05-2024 14:48

General

  • Target

    3aa7947e041e5326555dcdab4391c725_JaffaCakes118.html

  • Size

    27KB

  • MD5

    3aa7947e041e5326555dcdab4391c725

  • SHA1

    ccbe4de0185726b3518447e9e33f79b0eb79ef00

  • SHA256

    8afc0055536497c975d221bfbad155d277493e7ec1cb8725eaad535d16597c91

  • SHA512

    41a830d3f34cd35db02c1e9f7fbbcb1ab9a83e366ee663712a9f24ca3ccee92c6d2d2b9702859d9e67670cec5f14aa0ebe7481e07581c6d385fe44ce15068d3a

  • SSDEEP

    192:uw7Yb5nJWnQjxn5Q/0nQie/NnMnQOkEntoqnQTbnhnQ9ebz95m60f5fQl7MBfqnL:oQ/SeBA5eSZqh

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3aa7947e041e5326555dcdab4391c725_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1252
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1252 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2476

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a3e2cec3c6f09565883eb1db540ce731

    SHA1

    975c7575545ef61362a2d5fba849fb7716fad0b0

    SHA256

    6e16545224b548f3eb19140bdccc865d8df42f3245d8625ee5dff14deb832091

    SHA512

    9b3e4695c20c93235e94855e83b705cc2e7dd6a2f71ff10927e74407927d5b26934576cbea00be576f06d89ab8bb8492319dd70eea31ae129ca5dfdb9844efc3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    07d28363a552eb3e42d275a8c40cc777

    SHA1

    6dad4de9e9811323270786ea656cceff57c90418

    SHA256

    7ffdbc0a2c237e2febe6eb21f28caeacf320f851a6ef3315025a3e9a9ee5658f

    SHA512

    c39524a5132b6292b28d5b438a25bff92ac49af7d679109fbb99f145e88cd17ae2a95f3967f459f3e11479a57548e54f6c837b3d35369810daf01f52d9387796

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcfe1f9515fb72bdba1a61ab90365ada

    SHA1

    04f0b4096c900b9deca2374182ab986aca2b1986

    SHA256

    7f792145948fe2a20480bef0e819304517ff07882f2e70f0280c806bb0ffb8f9

    SHA512

    acf3f398dbb95999180cbf1f7eaeb06212b0be36450fc2dcc4dfa8cdc21d1c9ee996c8e5071220293343427724cd070c38ca8d866fa6db6a20bc0b59456f11ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd76ce8e779225cb20f6023fff66aa3b

    SHA1

    ed7328c8312d27912d316c53f5fc8576ab74e4c2

    SHA256

    49e19906edeb660b8718563505205fb82d55513953f5084e8e0e65bce57c748d

    SHA512

    a2eb7214dd2981dee8893dd70c0179c0019cbc7cf9f793d74bf8303eea38af14e58132900ebab56749a64257ffd8c6940ae2a070379d6e883209adbd5370d495

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7cce4bdf1c94deb0fcfcca6c3c18b5a6

    SHA1

    c0e93d6625bfad8bd22b94116e51214f77c898df

    SHA256

    01ab1309738959bc1f2cc395ad998d67dc8cf8b8acb9a972a0fe3a4675c4316e

    SHA512

    6909bf75732b311ddf10b5f1d9ad2a8fc7928eb11d94401101bdca40d78f9db22eaf0a443d8abcfc8c684b05eb1992d3297d51211d0994c830b2d054894970cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c0f36ae191b9833636ff2f8baf86d463

    SHA1

    06782df727c164d5fb37fbf9de90c1a60b2c2320

    SHA256

    f1873c6ac3aee1de87012c00132e722b4c2111038663bc357d3c8806d437c1be

    SHA512

    b8ec59b6cfefdff337eb1d4a2d17d1a5c1a88078107598cff01457609164beff2fe31cfac9d7a7aff513270eef9fbc49a6dee0b17b286d6fe8141225c8a3a4c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    080d6b6cb788a14eed8197c8620e4979

    SHA1

    42247e561571ae559efcdec6cfe3492136b5d38c

    SHA256

    29254aded948fe62939bc8a927cea327483fd7f45eb069043c90766aa562a6a1

    SHA512

    20f04ca1a06e45e694c044ecfdf2166423152f5a892951afa4aae200b457f165cdcf0791da0abe88b82af7e3c9b11b9362fa8d00ab05f340323f1150dc961124

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2b048c5c6201954d58a9298df975cfc5

    SHA1

    ab0d6641a87d2d3dca39cf7c94bca5a7fc7231e6

    SHA256

    4c457e75b9ca833fbde87f11d03ef1dd0a958537a7aa6defabe886004be356e3

    SHA512

    258494b157ff7796271cf92eed8fd1e36f60b3ea5650cc8d4540fb7d5e8ff351fe273fe5e925e5e70bbb10c6c229de9b50a2f28e94dfc928526a0657c8eea406

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b6f26c2c17fa417c947aae416e020fb8

    SHA1

    2860a5c2b2c273c89279a63814165702464e390d

    SHA256

    b2a8dc165bd9a51f97dd1848d3323d2b06e4fc215d024ec10aabc59214ee9775

    SHA512

    6c972d482c62853fb8ad3539ce260b5528272b4b0f9bba5899eec9e5e8381896fb52c6ae6180470559d58ef51e31a3dba5bb4d54a0f43182b5dbf0b1340ed759

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1ae6580f8215a8dce1b73e915aba04da

    SHA1

    916ae21403787e472ecee27e333403fb12cc3db1

    SHA256

    98735e0dde57a058563349eb047ba4cf536deddf3ac2e8100b8a52092d779e8c

    SHA512

    f95f8b4b694555c669047f2195379ed9c108a68f0a7247257fb922f104752c83ab14d9653bb665f55e32baef540379d7c32d22c0bb96d5bb8d1bea76d83681eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a447d99188950cd4fc6835af867c173

    SHA1

    6832d6a953c67c6b353dc65bb81b827062a3be8c

    SHA256

    4b6d902b6e1c0ae9a1561f2ed8fac6e7d550ca8a25a49934301de68e6ba8a29d

    SHA512

    0b622d149900883993a04548f2ebe1f79257e510bfdafd12f522aca80c1d3833ebc6d0739f0a56fe37763e85127bfe182ba54ebea3086a5a3d3528b6015dcb88

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20ae8b15f913756528f467a0edf77267

    SHA1

    dbbcea27eda12f386c5bb99a0fdd2e60a7b9e9a7

    SHA256

    c0ffab76c8d1efb9e1a8a260f1484a6b0635c6f598f9cd661a4e523b61e520eb

    SHA512

    0bf9bd1afb62755a7db8f0fd538794e4beb650f36eb86762e2ca8b0668cda4e122e5d1821b4b7d3ba3f02e1f3cc3372bfb18b63862ef58817208172a65f1a392

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d4f97d1d09c92c01ecc8f0bd93710b10

    SHA1

    137227fc0b16cf40e5ef046d42bcd7148d706bf4

    SHA256

    679a3b3464054e4328f35a82f9fc2cf373399a50fe7f5d89665d22f31a4c8dcc

    SHA512

    ec0a64bf3694bcd3026919cc36b362080407d09cae2f091f0274b2001f7f938c3601f12f81aa645e6bf79a028e7c14a3e711d621dc53f4d60ff3eec515ee6bdc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9be9a24e7a3797f7f2aa7f0ed2e45447

    SHA1

    a17f59c77e1aeb0f51d8845e12fd55fb6ccee27d

    SHA256

    a64bd53d7039607425999895a3f2ab2bf938f2b76bd7cff092ec524ebdbb1afa

    SHA512

    5006e7dc4f8ee20ed5fe7e02b2a19457f007db135a26761243d989ccdc243c9e71d8e6834ad615648cfb9e4cfa08cc021b43c68877265a5b50996194ca438373

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45139c9527fb167aa540715814c1908b

    SHA1

    4e3579162b23717b7e80a8b5663fa2e7e86309c9

    SHA256

    3c3e0dad48e0bf3e6d84da2444a7603c467043e8c35dca10615a49f93361383d

    SHA512

    b0eff8cad3a997dec12b8193f7671409574ecd5965fb05bada91096ca4621e3fbb8331225e4574d3022ebe6eead46b7aec02183e3ed35be5856944ae039c6f0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56562bcde68f84be4ad0c9f81c328d8a

    SHA1

    cfe84d6f8396a1e2c781b2cae3660c1966d32916

    SHA256

    03341f05a14ba62e547faa541dc1b7329a8a4934fae01a3ebdc1194ace622ce6

    SHA512

    33fbd1db70fd51a84bf0c249828a32ffdc4db02075599a8f9c612ea08b9dc2b89f4dc8b6e6f56621c1af98a5e1971e1f83181614ab8f1b7d47e5b135811456a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0a58b7a873d12aea6dfef84ce752261

    SHA1

    aec85432695fe72fe79d9e58fb3f298605b49fb7

    SHA256

    2c32c935c404e71d06b17695655bd9a515f285d2e5f7162b142c4441c14799f0

    SHA512

    81600cba1809deba2800df1cc6edea9a86867531f88a79087489b271185ab410015f961655fd1f6a7b27ad7fb013e6d36061a2c32f382eb522c2ed756af46241

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3d7a631b31024272e1c146680d322db4

    SHA1

    8c6fb53c43b88ec67fe4cf91b8356236bc814cee

    SHA256

    d368628074bb98a29c8dae38081140922bacfd9c0e47eb20a9e15c84e7a68a64

    SHA512

    f01bb69beb2491f257fbeed7e78c2af9948d59c6427ed4802b4e6e8e995ede8a2d54b08908d2e2a09c69385698b8b2cb8f4fdd922948aeb2f21f6a46995142b0

  • C:\Users\Admin\AppData\Local\Temp\Cab3D9F.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar3DF0.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a