Analysis

  • max time kernel
    119s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    13/05/2024, 10:17

General

  • Target

    3eff2418875f8948f38546f0298049eb_JaffaCakes118.html

  • Size

    27KB

  • MD5

    3eff2418875f8948f38546f0298049eb

  • SHA1

    c89c783ecbff36d7fd66295e1cc1d1f2b6f99685

  • SHA256

    dc82a5548ae00aa34589a3176ee678be60ceb8b6ef6727d42aec96aadc9410e7

  • SHA512

    eb5cd00e76925d5a3665814af641a815a37f37b7cb4b8c825de44e84c1cf0af7bf67cae239c022d76fc1e05760dd6ea7e3063c3aeb4d6c4e46e6193f52a1efbe

  • SSDEEP

    192:uwnEb5nry7nQjxn5Q/inQieJNn2HInQOkEntGknQTbnBnQ9eFpm6u3HxQl7MBpq4:+Q/sHwMjCHYSjkM

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3eff2418875f8948f38546f0298049eb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2372

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          cc2c3d1d63edeccb7f7082f59edefc5c

          SHA1

          4ae7c3a1f1160de05338f00d769818568b77c071

          SHA256

          272205245d0a90114e0aab6d9effcadd6d16b1d5a5564c003d679ba2fe00d11f

          SHA512

          f934932acc7991f52d896541f4683770f4ca5265a6359e477a25969ebc770956501d664c4f14ad4421ec2bbce803b5a0f244b96677911ece40463e21ef5f2ce2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f1b8600ca85d545634c072a35e563826

          SHA1

          1c977db043dde92aa9f599b1d9ef7a9f7b9c7ae0

          SHA256

          543c1ca15531187e638c39b0be00a1b8e3e02cc3d438a539e4a799f73964538c

          SHA512

          eaa50dccb8328be8e6cddb2101eeccbe5bd66d623161abbbef77cd5636acc6ac2fb894e407b00b0d0f1db76ff7d1c08cb83dca00ec01bf91d13a4e2272c33570

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6ab226c0538b707def74d18085821221

          SHA1

          44a519cb0fc99c7b77d0e45b7857558f1b2cf93f

          SHA256

          7d23e6a0a96789ee46504fbb4769e3db442d58aab0a5dc8d0742b6398e782907

          SHA512

          7239bf392a2d005fe47a5fcff9c2ead1287f6f61bf60df15d499bfa777b0cd744fd1247952b81fec7a4e80773a1defeea1dc7f5846d8ac78c3e9bec5ee0493b2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d0dad3812cc0744175a2e5b13b5ac3ce

          SHA1

          366d6492a51b4b4e57527cf0975b3e2aea0491ab

          SHA256

          b46e0c1478be854c47bd2146da6ea9946f4001782b9fc823f001ba0d0bb3be67

          SHA512

          4a2563b75f7d4951e0691a364a9de240af7abbcbf4d1d72d5e013577f535811d077c0b34743f042814007905f96a7b2d8ffbb14b8ae5c4daedb132a1e3e889f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          742442a0f2c3f1c6421a475e9b4d3e7a

          SHA1

          e38d6c1f37f60c41a2d922cfc532e44b1cf68439

          SHA256

          eb719d05a80ae9ab0190a0894dcf6f5678df84853af2c392033c2c787807cd47

          SHA512

          9616ab4ceb6f145d732a8662584029149756016fde189686c2a05b23ae3f3e0f47fb7ebe0f3952f74996a6c88c1684841301a5ea6dded404ad3645a464e166f1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9f2be6298194e440a59e50af62e75746

          SHA1

          f222f549e61c0d6f53f52d69425158315e7ffba2

          SHA256

          19c05ae84a8839fb4d21de3d3e1ccbabb199c52f847a59cd664df5f1f57f143e

          SHA512

          062b21de1622d8ece0b218c97f315c282ab9f203134ab9d395422a71560e7e8346a143813e399c39b575a6b8dd7b319a4d2ae0917c63d2eae46c6adf20c5359d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e80bf8e84d5c4d0fd1369fceaa59f71d

          SHA1

          aaccbb7d1d0769eb5dade45174e9940f12ecca33

          SHA256

          db97dc374d6466909f5a16326e92c0f83afd6c14e44df79ddb3492babd37d8b1

          SHA512

          cd48ba0f9b78a1be7ee8b19fee0a5a94bd058fa26510b717910eb5ed4bb99238fb724790ef9bcd05877bb1862c1f201aa8de633355bb99feab907c99372dd812

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          235605aed338e30be518e639a2aa6f63

          SHA1

          d9de4e5732c2c102f48326366e60d1cb394371f1

          SHA256

          86e8bd16e0f1e29bcf815c3ccdb480b66714cb9f582c9886ffa17995137406e3

          SHA512

          b90aa2ff87ec490b6bf4baf5a8b832e074368d1fe2120a2acc10d80bc55509214199b6dd01923f6a89a58998dfb2c7901e3dbd3a2536e8e0ea46e25475629d36

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f96039608c1361db6aa21e9a2371d76e

          SHA1

          b93f16028034fabb53f89f8d7b022575cc54091a

          SHA256

          575468f4581ae8fb598b9fbb8b265d456012be2930f9e45cbbf55aedfda95029

          SHA512

          0f25736e805b950f2b9a3ac8049bf6695f918b842790dde4575334009c4fcef71c692442239fd802adbff437c6352796b28a6c9e004ca6144a4f9f7fe3c55754

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          589f7b976883b6e2504bd7e5fc2b12c0

          SHA1

          3d2e0fc3beffe0512e05c11cd9018c0c88527404

          SHA256

          3de05a5651b25ef00e107a210a69da964208ebc38309a01326dc3d4933b2b5b4

          SHA512

          c3817a8181c77d7806f37265724e411021a8c3d7568e733715a01bbb5ea61778f15af8c23a123f777f4c3bfa88f656a0f0d491ac45b57869c4068bf77b2ab884

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          58d199e8de15383c2e39b4255889bdb0

          SHA1

          5b65a6624bc91b76131dc7ed6b36aca4cf9a451d

          SHA256

          549a89a1830c8da976569bdf634d7533b3099c33f86e10cf3e18f01c0d67ea62

          SHA512

          d8ea47b071c4d2e3e7e5fa607a29a6b5fb86d4682434707ae715b190deb25d3f5fa391fe7adc62db9f2758ba292b195dadf8dc980ad64b402738cf4501539bbf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c65bad6d6e974b0187663e39c693caba

          SHA1

          8fc5972550e11dcc8573c474cfd29f22851520d0

          SHA256

          b60b1709ffe7ab8e38dc54f05a248adb56f0240a184b75a820627648c543ce50

          SHA512

          652e010a2d603216b004d71f40f8926f4eae6bad573ac79b3e5b442baba697973f1b38fcd39fa9433006829d391b703857b8dde84f63f09f12f569bf2b28a94e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e39038aa9f7699bdb647af95b5b875fe

          SHA1

          10a92e70dab6550fb0a86da7efc28702841f4ac3

          SHA256

          01d6c75a695568074aad634236d2bb50fcb9c21d2c7591557382c1fcaab6e0bd

          SHA512

          8192078d892642352646ec57e24afb5d8f794a8bd30a679b12ea3deeaedaff328273aa89e564e76dea754fd3e1fa3ea6af87786bbc48e99c79509df048ae8d61

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          b14e167390d600006b35fd7e0a67f4ba

          SHA1

          9b287e502889f7c9133906a8ef29939dd14b4ebb

          SHA256

          668a2b02465edcc18bcea02bea87d0fa0a01362f7c302fa41302a5661cd22be5

          SHA512

          73e8c1c97829c8ca6691bc7068172a74cf70fa5fda777c784ce0b1b1f4e2c99c2f8ed21bb667f64766d1ecc4c01b9860a651e549284c34daf2c433c2fd8589da

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d275e1e590337a312c0db21930a5403b

          SHA1

          6df5de25152e0f5b5b8d6ad5aefbe64d2ccd4440

          SHA256

          38fa72dc368bb5b2a1cdcf8adb4929c59813eae5922c38b01b4dd43bd7057a19

          SHA512

          52bfeb60ef95ae303f007448c200c5626b1bfcac3a37e6937fb5012b11f75dae82a4c6e5e075aee39f162a61d2aaf19de43ce3b10084cd4890dfb048181c858e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d45497be90a971e3c64ce98bfa6e8228

          SHA1

          66b2f0237ed67b1e94e522ee56811fa49fed17e3

          SHA256

          83abe815cecf500d1577674678ddcfc6da18c4bb583564bc156c60f19053ff9a

          SHA512

          4fa0027e1b87ee506ffa70c7497285082795eff93c255009d5518aa279344a2fa9ab5bf0950c8178fe75220e7b23cfb16d63a93466665353960ffe47dbf9e9f8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          fff13f16bca238fe74b7fd40b527691c

          SHA1

          81b8d8c31dda14fbf7146d506e030027e713c327

          SHA256

          7bad6f90ad957dfb49ab8ab6fd713b9f5cebcfca59540e3cbc3343b5109a3b00

          SHA512

          eca6b8d0b85169c2cb969ce83d3f61ac55a4b90c8e4fd3808b046d01e0bbcb856ba8c7b8000196d63daac62d43af308786e6083f8dc6c4c2f908d452eff038d5

        • C:\Users\Admin\AppData\Local\Temp\Cab2B48.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar2BB8.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a