Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    17/05/2024, 05:07

General

  • Target

    4e8be88f302d4ec2535075676e621f20_JaffaCakes118.html

  • Size

    27KB

  • MD5

    4e8be88f302d4ec2535075676e621f20

  • SHA1

    623781bf0c1429f838aba2a699547b909c5e1084

  • SHA256

    f73bc2bb2fc3dd4828fea024ff7315f4a0f8ac04229a595029181dc80c9eda38

  • SHA512

    5d6ad12225d3c0c3da212d8a2620ccd3cd2e39c9cf62f882ba8aa71fc11cd6e796b3dcee2623692a84048f30f1be703151c6d5976966acd89ebdd54f29dd279e

  • SSDEEP

    192:uw/Ab5nCOXnQjxn5Q/JnQieUNnQnQOkEntPnnQTbnxnQ9e+0m6uJsqQl7MB0qnY2:jQ/ofMgsNS2xe

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4e8be88f302d4ec2535075676e621f20_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1772
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1772 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2660

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31177d55da889a9a21d89a8098106f82

    SHA1

    ab7c17f2f0bcc16021118b4cbc9765eac6aef12b

    SHA256

    5e5d440f59d6e50bc9e7b12e6ad8b268d5fdfb9400195b90e4c88268015b1d29

    SHA512

    6784d2806501543a2b5f29e41be5c07272289eb182deef3e0b17bc679aed2b23ea45828b8c60be0cf769fe9808c2bfdb3457d1fe1815a6dfc7d86ec988757670

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28dadf420f91c3970d18a5356eef4737

    SHA1

    d2c2e8fc10486ecd3b087d8035b2af6d52e753d6

    SHA256

    f3ec8923dc2112b8ee58d8e3610b05088bd57cd8db78bf494bb62780d107dbd1

    SHA512

    8b740243651c87a07dcaa55936f579a1dc5c3160318c5e7a44d7741f26c77e8fe802ee4f7f8f4206f18442de920f4dab1cc74c0c2ca77d5fa061b096aec7f374

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b5305c1dbebaec00aa1e3c0d80bf216

    SHA1

    089fd69654084743835f32290f9e3035970a8f42

    SHA256

    c21f1963ac7aec5c245c8d6bbbd963226ee7041055e799fd0af1ad58392b40fc

    SHA512

    904314a2655cbdb96de12cda27e976a956d8bdfca4015e080521d0fc98324525023599264fbddbb1444f4d98e3db75f7ac5f7024d42ef7f774045b82d22693e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcafa2c4bd29886045d179a15922c585

    SHA1

    ccf082ab09c34387d09f81a0686d86cd652379b4

    SHA256

    037a504311bbcf16827dba80399069b48099d031a3fcb933d99f6b63920b74ff

    SHA512

    97f52b48854b6a04d7e19c33f6a7b3f1d2d3f721c7be75284155ae5e1eeed1e848014ae133a5861a19472bda2b1709aef1f2fe75f019679f33dfa79b72bf9760

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    30565011d6d1f7975c5b2a57941d81c8

    SHA1

    21f393a05ce04e3e3a267c9b7882cf4d8f839d35

    SHA256

    3ae201d065414c0190d87662876e6242b623eb12f4696da5e100dae13fd51151

    SHA512

    31c637c2034156bd426d6d645eb308b48024574af6c32e27b6ec4cf6bf694bf6f5e798565e89b6380dc4ac59cf69249a769ea2633574bf935b25c8412008d8bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ca15fefc1cefaba8edabc14db6cf8e1

    SHA1

    8a75d91545ee18c867b4d69a2febe555150d71a8

    SHA256

    91965cffad582a5a65ea70a83e137773be02cb4ed67a07d364492130b5ce299a

    SHA512

    8841a83c8901cf16c8539cc255dd42007b625fe85fd83cada699d3af8967a0e0b558758d6debe13ac68bdac920e2166a8ac26a4117b894e213f1427475629be4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3325639b4ecc8f0065260f2d66cb0904

    SHA1

    4dcbf73a08dea0ab0e70a534225790accd8ceb00

    SHA256

    4248b7cbf7c5a32cd614e97fafe8c663c3cf2d128c3121f261202665e2765e1b

    SHA512

    a71fef4cc92929a8ace78afcd46e9757d9ac82bb4d6be8e65782d3e2f8d95f388e29883da572857af8830a5bcd25540b36ebc453cee63af522e940afe99c50cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f450dd6c3a4c063a51790cc6f1044c6

    SHA1

    f8aed9af6874e9855723322f4fd10c11825c3293

    SHA256

    59b706f1bc0e7df4f0b92a68cba8ccb2899aac216e803579e81dfb682b0ae43b

    SHA512

    93f9d15ac4f15f054f8f492911884ae24d9a0efd88ad0c8137777a9809c947b83a44cfae64a5214195a0e326b19c27efd0d082b9da59b553fe259dc31ea23345

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7fc9c686d96f2437c86026db14a7ae99

    SHA1

    134d677ea36c28f65c6caabcd2ffd370101008db

    SHA256

    d0806be44db4a7f75abcae724755b60c103a3176387f0e85add52d141e159b4a

    SHA512

    3babf437da38c6201d009a4a020e7a035d48e5e5abf8eb31c21057aeb94ee81cad8815926f937aca519b028334b2f9ae4e92089bdb3e000048dde72404e5c956

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d19b2a1c620ab31bb6df64fd59cf79d8

    SHA1

    3a2f35ea5338b4448460cdf1078f9fcd3e70e071

    SHA256

    5cb50df003dbf41645ada11225c21f74796332056d1943c7673bc94f8f50ef52

    SHA512

    f4bfd7428a8b2ca5442aa8f22e70d353bc0ed4ce2c5c8a282df3bbe4d44454d115d12f2e0d15a076be27cf871fa70a1ab0003e2d19a3c2838e0478580f17ec9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ce5a9ca1d43f1270862153e5ea921777

    SHA1

    ea81dea858f8894582aa8e972327227b790987e3

    SHA256

    149d5ea98b5349cebf12a09908ad2222ddef853a9eb669a1829e97e8e5bc6f37

    SHA512

    32804aa233595d248e4afd487f61a02b6dec77d66f25bc8136d07ec47cb3407bc223e35a575268b0717d08ba30d8778663a5189afef44967a2214e47ff58088b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7367f05f9822d5deae8a5f965ecabfcc

    SHA1

    94268fc6f9860f0db5c1a1c0a665022bec5c1a15

    SHA256

    08ab16c2a60b4e28c6457121709095ce9bc4dc623007d25704fbe96e0db233cd

    SHA512

    32006fe35789aba2cc1808ddcf2815130e4bf35d0d667f2073a09c5ad45cb991ab617b75ee62bd22833bacae6df8ab653b84494328c46136ddd4656fb8439e59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2cafc0184df4e8fe63dc9c46727138cc

    SHA1

    7bc7594ec39ea1f7d3f1822654c814dd1a7da856

    SHA256

    74d1603452ecf662e56857d21867121fcf476403cd1535edb9c31f22186372fe

    SHA512

    4122a4910ec9756397ee80e9f8132cce43a9648d94ea285f63ebafaa4bd7f01f488bd20f8594112d0a8c25a01c41d18a811759b7c10cf5d83d271a9bad9c8cb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe22207b6f6589afb109cd3c941c6b68

    SHA1

    12334e91cf84b2b4cd6f4906f57a2b76acd7a407

    SHA256

    c575e17e5bea16b77930ad1797049e2f2f76051d3c2c7023c40cfc53559988d4

    SHA512

    57cfa527451c27ce6cada7f5e8b2c41d1cc3289de86fe2e5d9cbcf98be9aa224f61943f9839d3ccdf1f9521b5efd55b88c5b4082a5b4c72ac356860697c56638

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13c58e870ed7ee96bb888275273afa02

    SHA1

    f71cf54928fca57d9c8a0580caa252709d115b7a

    SHA256

    c532a30299f23207196351d7f36c993322969b3d707c9815380b02a567277be6

    SHA512

    5a92f304ecc30449959009f66879c760f4510aee739df4dd11746dd1eb244e77cb303a0d329398e40ee28bfa22113a5a226b060e6fe5028c75236e8fafa84db3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88044370da6c14f99fdee93fa59437f4

    SHA1

    032fa0b0707bab278cc6283bfe91f8b6b4bfdd09

    SHA256

    d4caf682752ca1444666fd159309edee76a494317c31bdff9ae8fe15bfb3fef7

    SHA512

    c67dafe990e1d257e0d8777746aed4728fa93f6323b00ec7815a068b73243e7c0d1b3e895d86431f4934dae8952ab73674665713bd2b84be2d0eaf2aa7a47080

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29d8f71089876b7625e3c50ef3e10e0a

    SHA1

    841b0d5597937a87c061a8ee4c2542c79bec2843

    SHA256

    671c0f9a0d14e96f1627f338c3650e7a3b8deed3a346e9323ce39fb090ae4f41

    SHA512

    0cf927f05092807516b84e6784630015e2c6ec5dec6be9a17d39a382a3ee099614c8564edf207bbb286edebbe1f96679315efd9cca7f0a1f63870043483d4002

  • C:\Users\Admin\AppData\Local\Temp\Cab22ED.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar23C2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a