Analysis

  • max time kernel
    120s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    20-05-2024 20:17

General

  • Target

    60fdc39ea4d1065a4d467c58dc342485_JaffaCakes118.html

  • Size

    28KB

  • MD5

    60fdc39ea4d1065a4d467c58dc342485

  • SHA1

    1264968496d451e13a233dc8ec635abc52aaf34d

  • SHA256

    e0f04736783b98d5fe5a33a969b2308af81f9411877e8e887b8c68acfbc3c885

  • SHA512

    a599770f23b72a7609a17f40b27efb1561994c898aed908e5a29f33cd21ff0c170e22a48299bc01b4f761493b9df980e13269628fa153b0401682eb3d7bfe757

  • SSDEEP

    192:uw7cb5nvkBYnQjxn5Q/bnQieyNn2IDnQOkEntZdnQTbnRnQ9eAPam6ehIq97Ql7m:vQ/YIvpqGIqMSn

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\60fdc39ea4d1065a4d467c58dc342485_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2000
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2000 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2512

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b25634370c18eaebee8d04dd6c0c5ff8

    SHA1

    056796f4f2cda73bd39d325b994fad2368197942

    SHA256

    e7c05eb087f4db25167b32bdeee6c766a00bf5efb1d645901511480ba1ef32d5

    SHA512

    7f1fd524f5f94fa1250af46bf185fd412065bc43a900f5d2c174158f30ed3d75b515dea6fd72cf8c0e3f0a2fe6543a8115ad078ecd75ca56b6bce9e9bb4ecb91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    45098b70e7bdb8e79f413a86f92daae8

    SHA1

    1842928433e5ecccc72bcbe75e666fbf19ba393e

    SHA256

    b4294cc54e8c34452e1c56505c84fd2831c385050664f9741a307ab2d3b6abce

    SHA512

    b957446e66a60fa54fa47d7318ec0edda8c507e618b2e5254c4a9aaf98a0ca748d2c5303902316636275b7d5808cb2f694306a8f5aacc4119e6277ea51ff75ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7614909b4f3c2ee5d0497dc6ca06da91

    SHA1

    bab8d301bd676282bf5da1a3f91935ce4789fec4

    SHA256

    6c3c1ff1d15224a305d5f071300e1af6c3bb460a2f559bd08deedfb91d3a9c16

    SHA512

    6dda7a47cafc735eeaa0ff6cc40839e697b71a9adb4b7e585c886027f3ffd61dc0acbdbe1d3abdc82f4312ac09e523edb06108985ca30a946d447c00165c82c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0746fd734256c3f2789e31eca2fa49d

    SHA1

    2e66e7bbbf5cce4a86bbe232fa0a66cb2f9ef6eb

    SHA256

    426b8d6a5ef823c62f8891aec3e5746800e9d0f28175405800e659fb2073114e

    SHA512

    5196c63f482acc871b2fb150d0d9a674364f3e311d7a45230da998cde356695c58f2ab43b278721992a38392988a7c2e38488b65264459b77c0021706a92febd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98fe4b05566d5c7cb4996c395d4e84cf

    SHA1

    68fddb4b122ae88409facf2de752d718ce9147be

    SHA256

    dbdda19625524688cb534ab8a5d498ee5504f2c13b488188fa9b91e294fd3481

    SHA512

    06266a1892e942bd7c2974355c8cb4d3d4cb85b934d0559b2390b3768aefa2d15bd9c507c64af40733e540f9f90f81849ea21c12aa3f3ca61aeb6e633ad8ef6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c61d919808190a0b638643d54ccaa4c6

    SHA1

    beadea1d0a2ef7d2efd79acaaaf603048ee27aa7

    SHA256

    e07966d70e451536b2891edcd79c3481dc97ba57b7f9f3ac5b8db580e6a19a25

    SHA512

    dd025400aa37411355e2f87d2e87042aa26687aebbd2531edc024afe01c96afd1dbc36a91da69c68819c488f29fa45a82de7afce80640955db97c3927a3ba7c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9ebbddbc372ec2bb66b65946bb909f30

    SHA1

    5d002aa865f22660703276c59cef3944cbcbe4cd

    SHA256

    992a6a64f6b0d01d69191992eacc5b0db8f02b02fe28cfe71ce54b3fd2729f61

    SHA512

    8b9da6ebfe93d00e2a62c748837ea0712a7ff368eb7df2a28454083090c3d352b14e628ac8756828643c3ab5f3d6f5a8c64bbbb1a6d31200d1107b93cfe91a4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28e2c5f109f10c538c48c95d20946e85

    SHA1

    b51d31ed52b5975e76e0454756086794edb764e9

    SHA256

    64005cba5723a6c7cb8d0634f7a3e2cf561cd2ad90509c698d9c3d68384a1979

    SHA512

    92688c9d1eb508dfc65a65104e5efb018fc550877ceab05a1dfc1efcd316a2ebc938cae5db8dea5a02371eee2bd36cca029f9ebabf16426f2cfc403f6b88d7cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    832da72d32334c803df5aa494a77580b

    SHA1

    1af876aba82cc3031a13df2ba01fe19a49b573c1

    SHA256

    86db667eda6e4bab30367c6dcf72b1f117781bb20b29ac6bf195b2d94fd3f6ed

    SHA512

    2aed9cc9fe5bf052acc4319998104ba84e0266e3c4efcbac4c9ab3214ac6bf4b54a45be9ef00e3ba38614b876a07b9cbd52bab0141abe993cf7d2617b67f855b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    84f2239fee1577057a1f851a01782b13

    SHA1

    a78bf9cba857657fc19919fa75fbfd172806d6f4

    SHA256

    36cdfb942cbdb9bb91607701ccdbd43622bdd19cc124fc543cd5763bca4b5683

    SHA512

    7b452f83213e86dbdb402d322563cb7ee3253afa71054ff6b3fa860106332e5fecaa580e82ac18beebd06bec5f50adc0d71a8d56350aeedda1a42301dfc6db92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e4af3f749503df06592b7d108cf0bb7

    SHA1

    69b506df2efc3b99bda8f7b32ca284798e4b7159

    SHA256

    063e18e661ab488ced73e615eb63780cd82d68eaccda0e074b2860f34afd35b4

    SHA512

    e3bb4a1054eed9408213790323787c44690eecad2f1bec848e3d289b3628ef7ab7a9d66f7da2abab43d0f2a06ccd1184b4f3ccde76a381df2aab7c1ea810c9ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6f07508e1f7dbc647478632fd2facdc

    SHA1

    bdac7008b1086480c1106316eafed6abc91af9a3

    SHA256

    89287f498926170d52e47786b538922b76405080717f656d11aff8ef2e4c232a

    SHA512

    14795ed805e8e6bf844c27ec74b21af750f1d0aaf52b701fc1fa1066f3d159e4a33cf8c1a4a2619b1f697a5f366a235c666cd9d3ba67ca37d2f636df46e51981

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    777c033f069e0c2f7d18f64e65b790a0

    SHA1

    55076cbbdcb09e54a083e79c4cce4de962ecb3bc

    SHA256

    0bfedf3cade071990d84f05a9f221df3e275fd9056e7cc96efa477f169bdbaa6

    SHA512

    ca8b363053cdc14a3ff4951921de57ca96255878c225422e5c1a5bd494ce4f2daad186b04e8962e92265589f315680d49cea3e4445553ab410c6115020c83e1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83db9a5d17aabca1329073fc39f67c92

    SHA1

    0fff0ec850f519839dfee6a6ed18da7466fece56

    SHA256

    08c21f459aca42b80420333a6d21d2eeb88e2ec3963426e3ab9c06af7bc4fe15

    SHA512

    ba7c6e7b32d85818a6240def41583c913f461d2e2858338014ff04ed002957e921aac188d4265829fdbf2c5907852b9548701694623b42bc55fe0c54f089273d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d1bca5cffec7509bc4f88fdf34f1f96

    SHA1

    f9003ce441fc9c3bbfa326ee78feeb521296566b

    SHA256

    927cacb5358a609e2b525a8d3f1c26f60617bec8209acfcceef29b36bde8c5e5

    SHA512

    d3b3c849bfddf90dce6e2f0512c5609811e22f0f6e810177563758d3b8df493cd2784a1c288ece7105f9f0e33043611b34d29a3b21ba721d404536c74fa79df1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    318d27b39d5d0835e28632b6a296ce5c

    SHA1

    b9750ef0fe9c97c9f7143a562a703fdde95681ad

    SHA256

    3ec3dbe58324d13f4fd07ca76a90a45d4b26cdaf611caba869fcbc9c5c58afba

    SHA512

    60bdfdd607c795d1ac3c255c2865620436793b737a03adffa8433c1d7f776db1346a11adbea47e06a85af937672fa517461290f46247b47cfe53aeaa5c423e30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e10ae49cb8fab829a0266797d5bb4064

    SHA1

    4b01f3f7f0b9429849dba6b3fe1e087d13cd450d

    SHA256

    cb5ff01af38d8ff698f8527e2efee75d0be8c0c722cd0bf738538e547fe19789

    SHA512

    9fee9ae5c18896617321ed5a505bc80fa6d078b84c2cdf8c9c07a50a6c9d35004e06ea3a25a35d8eeb068cfd3a894729f030c116ff5f9acfb6bfe84789f1546c

  • C:\Users\Admin\AppData\Local\Temp\Cab29F0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar2AC2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a