Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    31/05/2024, 22:25

General

  • Target

    88903e307f847f22ecf41abbfb623aee_JaffaCakes118.html

  • Size

    19KB

  • MD5

    88903e307f847f22ecf41abbfb623aee

  • SHA1

    d48d7b3249177ae0ff94b5b0b4c7a87676779482

  • SHA256

    64030b5f06478fddc008b43427453b48726681306174960a10f95a1c9ed9e740

  • SHA512

    49ebc3a8593c9b4aa62de3d8ae0637e2a7e005f6ee251bd88d9078cd448e01b31445e56bfda182667a065f3c30d8eea3ccecfd1026cc463eabaf82562ae8ebf3

  • SSDEEP

    384:Nfe5QRv+LGisKQx7H5sq2nDdT64LL1SG2u:NfeGRv+LGhKQx7H5sq2nDdT64LL1hp

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\88903e307f847f22ecf41abbfb623aee_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1660
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1660 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2512

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d145aed754f06036db1d06e2793cb852

          SHA1

          d436d4010d2f1b9724c89bfa8ac9513e2af273b1

          SHA256

          2b5e3333b7ec02313561b29cc5e2a04f6503f0b416be46c2bc37fe32d7e9c5ab

          SHA512

          dd885c4f9dac563ede49bb9715d3c47f2719be4e2058eb16f3a739af55d14d25fdf48af1031262b38d4360d62c433e99ae3a179dd1d8c04ae787149758b132e6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d1fad033c4e5d264ffb5dd98bd082e01

          SHA1

          f8ce4b9cce1b0714df5489d3944eb22dc9625568

          SHA256

          0d6b8932f7343b1fcd6b97e67bf00a21280176e36c88995d2810406472e921f3

          SHA512

          cad4c5b6c64b81f93ef818d36aa8fbe537c44d4da05c394a98c069f38ad3862a9e3c3af6f84a74e7ebeb517e591ba15c6ec1cbcd55e93cbb1b1312afa37cac3a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4700ffb612557e81dc158bdd1cd2c5e7

          SHA1

          f91195071fed1375168262b770b2b81d7c7bacd0

          SHA256

          6cfc0719d018c75b4957df20e73b812f9e692036d81966f00de7deef4ef5614f

          SHA512

          da8dcdcad95f27c2ff66c71d5e960164181837ea6b9e3c8712e2d9d329be90a8b744f3dbcc20aa3a5ba75a2ee16e29109fe9811502a9bb14c9c0023cec9ea96d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bf38cc6410537a4b76d25d25c2a9ead7

          SHA1

          56717cd0eb2e834d2023bd6bf67226fed1640b31

          SHA256

          b71ae81f887c707194b5c7a516d6f96c769fb8fc29b0dccfc42612fa94a8f7f2

          SHA512

          7cc0d8db9c9257ddf9d74611bee1b8d41dfbda7880b1b757438f342f1221ac82e80d4a2607416b6f1207f7113cc1a9bdc5b3be253d9f40a2a18ddf8678d1c164

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          54f7885be238310b6dec8b3dd404685b

          SHA1

          0e8fa37020439abd08cc3350b3d3d5809143b8de

          SHA256

          4f8d60f776fa71c4f45ac25eaeac983562dcf4e64811189629138339717e2d71

          SHA512

          119a20d7b08cad42b8b6ecf036204853131d35158ac951022cc76e738648be65815ea0921f4e5c18349e801d2945f446303b002135d18423ee65c03fabfe4cfd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4da53d39d096fd7c99eb0a4e797f2d4c

          SHA1

          eac2a65a7c69fce5356e97eef563e3c4c3243301

          SHA256

          96086d9501b16bd3d23f23abcd84cf651fcac3ed637f63f25293611244904eab

          SHA512

          6e58ff2bf5000d918ac2738a251c12beb6bc5f934e6216d109683b27ec316c8eaf8c1ebd5f59f0ff0fdd8c7f906d90706121157c1892b5bb26c3cecb9d067eeb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0d70684adde5060e9562fe2cbaa9fcef

          SHA1

          ee79d58550fa74ffc29b2b4ac2550e68b30d9dd7

          SHA256

          01a1c255f4ad4ba16d803a1a8fbfcf06b35345b64ac9d964d8ac306ccf09af71

          SHA512

          bb10755a76d4b8fb053826b1ae35eb8535f527914936129c7d1df02c9968d891af9db6115435acfc08e804c33dac18b998c0cde8c2d9ff780054e08aa587c924

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          656b672a60a3ccc27d17f4054693ffa4

          SHA1

          c0ecb47f82cc953263c41b9db2ed5f58d7b47e57

          SHA256

          01d0a4fb58726a4843498fc85d5475023c6bdb30c7a74f557697fa1913c0c6ae

          SHA512

          bd48b0b8d768cc0e63397d1f2ff82aefd794f880e83baeda95c80601b405f2070c15f7dd4735dd8c5a965de73c3d789b622aaa497392def80af5c5048a6776d2

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8851024d8179d6b3861be43e204866f8

          SHA1

          20842687336011aa4509c8279129c64db9ad47a9

          SHA256

          22cd0b2cfd740c99d32bcce31a8063a2759d7ef0067bf2ed9eda9bd4df5bfef5

          SHA512

          d3c83934d60f94c2145a859cfcb7039ed2080c374315cbc70a597ca0d5029524da0fadb199549e77a60189189c609df97b90ac0b25f98bfd50388818f7428863

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d2f46ed59f39dd3cb0c915743ec34012

          SHA1

          b576a2fc1b7f351cc0837761b77c2e416554a8b6

          SHA256

          81f82c982d712ff9dcd319e61b0f0575804a10e1421c3b7545764f84fe670700

          SHA512

          51425e895ffee0ca9a4fef1783e00e54631afad762d0afddbf0106564d1a88efed4962f1453b96c5df7f01fc1bc1a3e5e976d0f7b8d5c0b87c0acad5a8e7a072

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2022901578f222c3ba3c1e91ac9eb32e

          SHA1

          37c164206162f0c71bf7f2fe9fd84115797d736f

          SHA256

          96e2098dc3bd8c04a3176b07e6c2153f85ae45de210bda5a0afb3e35f6156d2c

          SHA512

          5cb5dced9e4e4e6b450abc31257c1f835a43f5302623737bcaad2a84218ee1f906f380889bc4f4dec5f667aff9ec54f37c153a3d24f44987c9d8cfb62ed07c78

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ff8e9744cf676a6c4332e6b4d0220c93

          SHA1

          b9964bb4c99c47eb609bf8cfe55e064ecc6d47b3

          SHA256

          adaa8a0fe5dff7f0ed286140345203736655f14ba46489c06146320e3cbf4f26

          SHA512

          b778ea26deb163d40bd2fa88f451c53a67d308fce02040799dd7157a7dbb8fb7cb31d90946fe23656a467ae564454da8cda261c20e0b87c9a18bd1b9f30c9a7f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bdf67afe0ad1be49681b2850b655b052

          SHA1

          aa6e2d32d32adb2fa7dc779065a76510cafdf134

          SHA256

          1bf846872709c44ddeb3117c888e9df1ba7e68cc62d90637999607c8fb1ee5ed

          SHA512

          c0fa02c21be2116876a48777a84b4df093dedda2c6fc02852970f00c8293b651c0d739c28412d10563d6e1f3ec51bc674c8981b75f18498cbe76278fcb891555

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cc6f606828a16967625c836d73e8a47c

          SHA1

          e4c16119d847d4fa2cdcf6dcf6f4d33b999a8985

          SHA256

          d495b8d7c265ca284086603edcc618f706f7f1ac45a391c8afbd95949a9e952f

          SHA512

          fa38dd9ce363d77ce5c106a2390f1d4908e61911428163c0df70e22baf3d11380dcedc7c0c3710b5f2952aca4169296552045048ed4c63a663c4762d4c3268f4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4ddda4f21d730a0cb01455356b3d9bcf

          SHA1

          2f10db88f8c6cdc423d459c4f6bbdf255aeb7cef

          SHA256

          1c5ce9f3d7124abecebddfa10fd8d892be61150d014f8c5c1b6fa34e1aabe8d5

          SHA512

          687566a92013254154cd5669283f82b5910c99433b80bcc3e677145af1e936a5f66914736bde6fcaf1bdc1aedebfedc7570164076ce8136c1cc79d31aca0aa67

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          32ad25b915416ec8ced987fb6bcfa3d4

          SHA1

          a17e73b1b5918ea4757af243ca9e1db5ff213595

          SHA256

          9b53341f214a0331308ff25841f1dd9e6a04b7d2145d11e3f3bafc0bfa70a506

          SHA512

          eda75a26eca6e12b997993873b16acd9fa8c3a4a6a8c91de84e3fe00ffbc749005aa5a09e4dfcda752ee0a626107a8a99c6a6acb2d286f6cbca435fadc6e6bcc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          dc1eedbfdcaedd38c7203151e59a58a8

          SHA1

          eccb5e35553fce7b57c5f2812ccf85a3a069c0da

          SHA256

          ab4cc63c5ae63e81564c2cae9dc3ec7ce93f69c2e54c911ee9a1365b89c6bd1d

          SHA512

          cbfb1e83358fdb24b66489d755f244755c78b9a83d0610a2c43abef8041830d15d1a891e5e0e37795f492348dbb5edd9973a97193e0c8013d5030c31d16a087c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5d33490806d55f5f6e1b9fad893e07ed

          SHA1

          8580cf6bd788fd8c388d5a68abf91b3aed1ea2ce

          SHA256

          57457fdd050d4e8b7ae5e248b6b5e72d94e83e1eb53286f3cff1f07bdf9f6ff0

          SHA512

          5365bca3350279be011af2f1f9a3f25bfaece757cab39c8797fbf541552c6c6a0c47700671e7049ef24a2f942cff6e63334fb19fe09ca871b9adbe1ff06afef4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9a27ee391c27851c36870698c818fc3a

          SHA1

          0fca74cef9680f6ab0f6fb9db3ef9ddd63da8c23

          SHA256

          8b26750b65f05981389f1e87881906ee0e15c53b94fbeaeb6e7cf762aa1b513d

          SHA512

          c18e71a489476714c713bddce95d0884eadbc6f96a5036f123b3ac57ed4640dda54ff7c3f0d02387767050926d26ce04301e0dc8a7e0aa2cd44574a9b6ffe213

        • C:\Users\Admin\AppData\Local\Temp\Cab3C39.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Tar3D2A.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b