Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    27/05/2024, 04:36

General

  • Target

    77eb2e355b38b2e9ee234cd087086fe3_JaffaCakes118.html

  • Size

    1KB

  • MD5

    77eb2e355b38b2e9ee234cd087086fe3

  • SHA1

    0ba96830a70e4ec6fb123166b600986e472d31b0

  • SHA256

    60cbb79f63b33128bffa2881f6d95e3911ddcd69ff48cbc9f4d9d6e23d924924

  • SHA512

    799a12128e406c13415bf10e32549243424828b83e5aad5813949b6084b31552560894f20680553bd10f5ce0bb45b4815ad726ffd665a4efd123fd183b4536d2

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\77eb2e355b38b2e9ee234cd087086fe3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2972
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2136

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    edd9a0b82efcc53035119bf6aeb42c70

    SHA1

    a8a4f8980d5118ae6831cc43b601d9d398e233d2

    SHA256

    4c7f80787bdf9e356e4017ed1f6f0ed3b79d3412d26f1a7c92ff5ce9d37b50a2

    SHA512

    a79ec978a53e267401fd949c2c962a2a18c8affd25cbdccc321d1a5438390378156217b9af466b4cdb926fe7328a2e11f92dd76016a3f0aabe7f4ef61f3464b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a1dc6ca7dedd4fbaa35fa6c84c018e7f

    SHA1

    fb9a6b8b7784058d3f8de973042668aa0947b459

    SHA256

    d8f8b5330b4365917fc1d96969dbde5d946257503709a46cd7ebd174e5832064

    SHA512

    75c82d96e3a845b1c4c1564e58b9d280e9f9a840e99630b7e79df3d001b74c0c027b25eb7176a8d8bcfbd8c048433af81664fe43e2db8ee170b296e47397da78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    102a67b3c7685dc57a7526cc610db47b

    SHA1

    0af155c097be2201bb6c883119b538e458126f09

    SHA256

    51977e4b9b4c81f24238676706c588aaec107ccaa85a75c07614dcab77d59d2c

    SHA512

    ccde1b9a9636d82d012d844f7c6b7352ed5a7e26ae6cd9291b0182c986c1bf4201afe1422a58e566234d8044072d00df4d442f255372323413537c2f527a0fcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a9a8f453404170285655c7cf2531e606

    SHA1

    53a93daaca4f741c828b45ba93e449140abb88c7

    SHA256

    922de2cc6b3d70a67a6c59f90c3b14bac8f9eeed3115feb77c61efb966d86811

    SHA512

    651f04a15438731e3b30abc4672d11441e8e0300fad41e358b428b3797b92ccdab56ed588791639a85776967cf2395ae1d337f7ed9433f6da02662731a98de20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    88ad2f4d5e07d5f3867bee6889e2efc5

    SHA1

    551ec09c0188a79fb746a3bb98916a484148708d

    SHA256

    db9a246c01618daed381172b377267620014978ee2fa1db33c5437a5d34bcb93

    SHA512

    4386a25e9a80658e95741e8224a5b005245b28ec7089c6ab96a76b0196ef7f9559f4419af6e17f07f61898e96b0131ae72d6e9ba56a30084f0050a312d75dd80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53b6c72b9b1fb86039fd2473e093a816

    SHA1

    9067b83fa163dcd35e5f3d94ece645a88bc41210

    SHA256

    46f2127a5ba2e48d9cf7f0a88eee4576ac6c3900e85ddd5d1f466c891d1eea39

    SHA512

    ad4c223da6b09694d5ffeb6f5ff2b6bd99ca306627dc426b6a92c5f3156c3adac53399de9d54394b2026a7ed9fd2d1501501bb05ff56a405b15890a6b424e326

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    53598698015e38871357e58e5c392955

    SHA1

    7e757669841b1a604e917e0196c11668288c75a7

    SHA256

    6c813938a2ee956d5c9e6f99dbdb440e2a0e4de9797c02bece68f4b7df26cfe2

    SHA512

    a1195ef26d1f7918628ca4fe579e8c114d45d972a9ac6c954a23a2eb40d62b5a2c959bd3ca20bb414a7d3eb1857fa6f74af266fe10516a985f5a2a8e55d92b73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dd7a393dc1c05f3a371d34f3c30b812b

    SHA1

    7e3c678d3a27187e3b8108195e29a828494d5adb

    SHA256

    b43d356fe196dc5cc78a6e2297adeb23bb68313b721868f526de264734da60ec

    SHA512

    6c30bd868be4ab38b0e7d563f8dbb76c374b0abb7b3f5c1f17d247ae2d8169ab98b9355aee12b5de88a6e312a9a540cda59a4577eb0057701bf25c7744f4774b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    44513ebb8fb6b42f85e2a82480c0517d

    SHA1

    89ce599e8ae1401a7d72c6f4ba3b7e30b4933423

    SHA256

    63fab5ace2a8b50d383eb803cb9e71ac0de9954d84a0b51a1d8da7cc7f306ad9

    SHA512

    f8333a2817bbb0588687490c74be8a4cd2d87b6bbc17377ef43ffed47e68ea0dd433ca975528cddb2c4361a6679e6726f5cca1b0582620c0be58cf9c6e733dcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f5be3976afcb6c1890cc2cd0cd92218

    SHA1

    7dced21d5045fb2a6d63af75ce187dfb859a14c6

    SHA256

    1da577146c494e64765cea2cfb26205fcab17daedaf0e69021be3484f4d839bc

    SHA512

    8c558b01f4a1722842c7a96225dd9d7554ad4b352659aa9b95daae5c57d315832ec8a2b957bacee4e7b737b3c61827fef2a4295334f948713ce34d537b909615

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8b085a55d5062ae24fdc02201e482de7

    SHA1

    67b25bcbacffc690d64dc84f0afd5a09e2292f96

    SHA256

    a5067c2129b78fd13e339edf3c280bbaf3e07f6742aca0ea8d8e0fc0c38e586f

    SHA512

    e53d64f03bbca2fe21c950c2da40fa19d1d6a139d4c0f990fd60eda3ab67a0985695dffb319cae9624245cdb1d362ed7a3f00a14f629d8a282aad9e1b7492a4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    770ce1a1d67ae60e09946c2735245bf9

    SHA1

    45479c4d0a92a3157eb3b78c5fe4074bc8867c49

    SHA256

    9ce3e4d9ecc3d1f56f57c00708bcb8c619aa0f771b1e7783221b603f12583085

    SHA512

    db1dcb8ab699592af6e8de3112f8512b1d0639f404736f6bfe8dd47ec36e195e541f046ff5701e17226ba45eb6106b39c133341483dfdc17d9897c5a09a2d15b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    dcddfff1a354564a5a01ff7dd78022a7

    SHA1

    2cbe4832f106dd303d5abdcf0ebe1504114bedfa

    SHA256

    79d7026bd761ef471379f8625e9ea2f2b6b59cfc55d3ecee57b6c053ed5515b0

    SHA512

    e7541d9c43fc0859d72e103196c0771e4efe660b9d88f516147af9460b8258de15b607a5194ccf556015e8392a0adbccf3ed139a4b70a8f7fc1bab2214f5a5d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31220276f6b2a6a958814b9771687ab2

    SHA1

    9d6dd70799284f59918d941b3255699f05676b83

    SHA256

    cad593302c572eff519a1af27487dc628cc2096d84abc2545272db3019e2a7b0

    SHA512

    6f9a9218ac17b6ed77fd2afef94029c2d6f270ab2e2aa9629679282643ef3e338ef273bc7b1edaef2a3c86827de378c360490fa09ee4770b37b3758a9ce54834

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ddaa4b5df4a5db261939590e8ea18327

    SHA1

    cb82d5a40eb87e46cdb9c54839594fb23c4433ca

    SHA256

    40bef29df3cb9ac472c22a4885ac21bc7a17f70cb4e9abdf21a75593e0700a7c

    SHA512

    52eb7ce96b70222f78db6a9621c4688c72e80a0297f1f78649890527de2f09e61aef061889c22fa3845e704fe04430a6d28aa92daa8ebde647b076742cc7beac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9c44fce91d55923b61ebf88ed88926de

    SHA1

    c864b49798390c2355856c14a40b00c89c9d2cef

    SHA256

    281b5d3348f88822da5e75303102919de9de34b4e94242302cc3fdedfefad9be

    SHA512

    c757dcf1cb280d7f478adfd7f10be96099a8b1fbc511647ace3a163faa90453d9fa7f7c67f32dd8cd5c8d874864850c952c13619f1165a98e95476228a76b38c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7eb965d7092deeced374a177bb6e1058

    SHA1

    16a0a2028c261134f22372e4dc92a72f3039c5eb

    SHA256

    38757541576ba36357113fec9d8e6297ebea52cf65830156eec6503580ac976a

    SHA512

    e1caea08b107b8b1e696c1f8151564915ce89514d2150913f38b06c7ba15619d7fe7d39192361026d5d00e83b1ce2f1412d6fdde094531f0c6f99640fefcb234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ea9b36bbeca8c9bdcb9792bb9ba55496

    SHA1

    0fe06c9fa58a2a5119bbe4b37b376eccda4b0d84

    SHA256

    16098e7139f6baadf138b40e7bb840dd26b9131ab56fc8ea16905ba87829ebc7

    SHA512

    89e389911a61391d288bdbb867e25feba4811ab6c1716741dcbc942ecc6564129560851ad35d9db15cc190802c40239214cc1d0b76592b9b4af2c2c89ec7f094

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83e19414813fb4d17b87cb3a259b2d97

    SHA1

    ebee0222fee240e193f85105fa57758350900b37

    SHA256

    7c784d3f408f2bc2ba200221b2c80d494ae5740f15f40d65011950faad241e62

    SHA512

    f47c32498f2e3fb05426152bb8d0f21de1ab419574f39c7890ee53137c4201d7a33af9caaa02ace7d9f5642a95db3a804d55728afea9d1e8d97a1ae3921e6daa

  • C:\Users\Admin\AppData\Local\Temp\Cab33A0.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3492.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a