Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    15/06/2024, 02:50

General

  • Target

    aca5012242eca892f865056f08b3678b_JaffaCakes118.html

  • Size

    9KB

  • MD5

    aca5012242eca892f865056f08b3678b

  • SHA1

    e4fa2274c7c679884af8eb88ddb8c6986eeeb689

  • SHA256

    65f69a3612d182987c6bf6802458ff5608e4be7b90d005230982c88c965bc8f1

  • SHA512

    3e9a5e0b11896e4b942b07e9de26ec4b56bdb6cdb45895b76e71d26f1aec6475f835203f34a5aed402f355bbf70866ab22e8cb322aeba098176f3c9e80df0c81

  • SSDEEP

    192:Curen8VwgJfGAVLylLuuH8YnKTAmPEQAn0L6DZM0E:HGAViuo8kKTAIAn0eD1E

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\aca5012242eca892f865056f08b3678b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3048
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2860

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f1d3e069f05fb527b61ba07decd29469

    SHA1

    428bd412c8f360f3b1942b1fac2a7157561f9d85

    SHA256

    234fed431351dc145183f03d4ac6910a334c6aa916abe8c414dc325877f5dc41

    SHA512

    19a54ee1f4d79b7e7108e7b2eaa7878cf3252fafaadabf6510a8238f18ce037d0fb034ef8b3cc98710ee05cd6530bb33debb5364b4e9803674320a8e6a1d5d56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c1e4eb9d6dec33581573d513c16491a

    SHA1

    f335283010527d21efb2ad7dfb5ebf94c56c3eaf

    SHA256

    0ce72bf9adec5aa7db5b99ad3b7ab7311ce4d4f1e070696d47932dd96e2ea6a4

    SHA512

    dcb5e0c8b0f05ecf33691b3b2c43ca651600e183543d1a242a8c8c03759f054a37eafaee7141d51cf08488bb56f08bb5d279ddb5de7a057ecb21d6bdd1ed9588

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63c7797a28c6d2a603a82545ce86eb3f

    SHA1

    2378bcf613e5171cb651a9d464acc7803b098c12

    SHA256

    763b70da949f938c12615c65987662573ae8fcabab2d2ea65123e24d7079ec76

    SHA512

    3e988762c67999bde82ee5aacc8298120a273c84d55730cde17503450c248bcb4c408de5ddb91d1e20dc2282329edccceeef23c82e0dc688ac7c1b47aa834120

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d4c873bdf2826c962a085545158a52c9

    SHA1

    34d19766ff0c702ca7764d24d8ca2053bad5f82b

    SHA256

    f3b184a8df73eda595fcb92c4217d7ea085f81fb7d201e99b0d98bc8d5a17539

    SHA512

    a3eee3e8c69f99f48aed6fe4f23d04282a53a0bd31b156ef2d42bcb6ba4cf425a7f0fed74a8bf03363dfad1b6e8bfe0900fadbede375923b1c14ca92f864d1fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ad73c37da9ca8105ed4935fb35daa7c

    SHA1

    cb356b23ab59246b944b878d2477c6dcf6c764c3

    SHA256

    aa38557784fe2408e16cbcb8a07c687ee8774b9baea08dc0a698ff9fbe945cf7

    SHA512

    ab636627396145f305ad18bd441fda3fdb22c9b3afb0423b7f5b82ee46544857bf70d8f1c0768b801f4202ab1adf1dc99394a2998d26b98866c785846ff0a9f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae76c18801de5f5be3d1b982c6ba1551

    SHA1

    3963ce4a36613c9920b00f05e2557778cb0b140e

    SHA256

    fd8de3e373cb2151cf11d78324e6c8de598b6df1fb63437e4b49bb6d95e40258

    SHA512

    141d3b0ceb958e949ee81cf60164ffb6b4282e6872d152a73c47b523ef20d9a5278cd1aca52b23e61571e1d7bcfd60966b82bea38f03952fb1de3611c90fefb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66dd6879250767d308d61313f006c90c

    SHA1

    d76faed866f7e6fdba63d444aa6c262909b4c387

    SHA256

    a201212c34cce43754d9e27af8a1af73e993946e2555dec2b2a361acaf12e9f2

    SHA512

    ee67d5d7ca89abebd965c9e9e0467bd761d9e1e9700ca22342267dfea4702dd5798cf791230d45c8f21a0d925324f8d2a8ec1f004d7804e6a37e1b7256d31050

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2779a85c94c2a866abd6c10c30cf963d

    SHA1

    858ceed1fc0f777f22637175d6a8a6f09cff3576

    SHA256

    12f149e6e72856819016b19fc0d2e4beaa44900fd94d3d04b6ef84e01f1233ab

    SHA512

    e08548b947860d918fb41bf847b94653b827e7ebbb54d51e8b4a8b5aa874d92f1da9dc8fb7014a0737968130370ea41cebd0870fc3f2e79bc21fd90ad17ed9ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c6c016fc5b31f900a82dc5ef41a523fc

    SHA1

    1795dcc750ac008f2f045b5f8b5e9ce81e87e482

    SHA256

    69d6b9891048fcff99facccc55e6f3f2f2a9cd174be0fc819a2373a4d7c655e0

    SHA512

    3e08202e15760badcf9b2f3b80b491b6d8201e3713601314300d83b303993531f4776b048beef01d36b54bc3afef0f8336aa73b01ff4937c7a41d21e7f3a2b31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9c4b980adb090a3faa696ec0630d039

    SHA1

    6f96273084c25a69c95727e9c692f296e7b7e69e

    SHA256

    3dca3c4795164a8f019e375972019dc00bc30fe1a6b2cd54cd87dcc94fd320db

    SHA512

    db49cb792107ac7b2022c4ff7a96d7c71bd1665c72fe5264e3fcdd075bf1d604aecb3933bcb5a8a341a73ee37386b0ec0f41e39fef42c6eaa9367ebaff3623ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8872e51ae6dc7e6eb44e571841c19961

    SHA1

    ea8a2ede1f8c3adfe2741267b67debf41c2eb2f1

    SHA256

    e29b42137a108f2ae50b0a77d3f476a0dd5b7982242c8e355b7b75bb51787e35

    SHA512

    294ee1e27d4b6811b8081f32b29b02886848431f17e7edc363fc2ce3b30a67a988fccc8a3f44f5793d3ede9e1be4be8aeb4bd99a1b5d1bdc007dffcad0039773

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    82b26d47e1d9fecdf2e785dae2fc0ace

    SHA1

    d3eca7ea92664d0ad31de54316de068877d0d1b6

    SHA256

    de46ad85398429d86baf21acf913fdfd7a6c2a116587341aa928f2e8e9fa09f9

    SHA512

    f6d30ba358113c94737c026322edb2420b80b17532706198152f2a7fcf65416f0b67d40ed056ade4b5d379f5e1e86b2b63c2be6c253e1e6e30cc9e6a14964db9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2afacbbe017ed1d9ae2ccf288d6494dc

    SHA1

    7995fa2f360f76bfccc09d979d147904fd7e1e83

    SHA256

    3ffcb2c1c165eec6465562c0993b5f33d28078de32240ee5b012e87b75cdc92d

    SHA512

    0687207d82d4af347c382dd9ec6007298a19740d67702511fa9de1e0acd733eed2ae55a33cfa429ba48f0ae6adfa703302ce19be5b785fe77cee34c0a11430b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dabdaad94334f66ef417287bd1ac9468

    SHA1

    2f87701b8ac6d40bdfa71149263a9964ed9e5467

    SHA256

    d55c16b78545e7fd4a415e08a7b526478527edaba62c2df067d2e50d95f67aa5

    SHA512

    ecaa2a8888ae1e85ea13510091e8efda56c4da1156dfcfe3690744609c62d602ff592f70ed763fb18ff442be7951621acc7c13187761a81f79bf7e0221f3f188

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b84424e82dcb72683f7fb3ed5ac08970

    SHA1

    8ea4ed531ff2f8d3be11daf7856c817541c9ec57

    SHA256

    af53bb7959e9fcb9a9274485504b262eae1677f38eeec78c3411cc20b15d41ac

    SHA512

    e6008c1f0222f229cd66631420ad9462cd299972046f98a2790366017a79ca2237119a84086509bfde3acaf805d8194517e8a82c60e30e982616c18fb1b9feed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7172950723e303b61f70f7be1a9dab72

    SHA1

    5cd3a9d2501c8b2338bddd8d02991d8d0977f53b

    SHA256

    6d62e0b0ea95c0eb58d70e3cd9922d9c2ad39fe04debf1ca3088dad72da918bc

    SHA512

    951c3555d12a69c0ef751ec0becc9a86d021964f70fdcce329f221d4075bb3e8a5194605411cd2a30b4a539719da1341ebc8d340ec013fd4bf2d9fe3c84fca40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b680112582cbda4842bda5217d55de10

    SHA1

    9633a302a88ece7f6caa5f654d80aab4980581dd

    SHA256

    378ec147989e240bd96fd2ed13d482c7f6edc8875b0e9b4f9a6ea1961aff769f

    SHA512

    8ca2d10b11bd954809e801d644253e1a7b0e46f5ae37c86a803465bb310142b0b90350c0e1d10bba5ea91741063c9d8a91063b3e44298451f3888aa627006da0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    792a44c34acde7d62eb6c33eccf8ab8e

    SHA1

    e95ac69955cb858e77c8ea995d70fe57f0d71e0b

    SHA256

    bfba5eb222ba2a0484bfc9ce4999a2f1c2804b3b6e6d8eafd36722d8a0901f65

    SHA512

    3400e97bdb11f33c0946d1e6e6acef5abf87e8dc5b4a39b69ba3a2a5a0a817933dc0e65b3547122db23ebc9cf48823ead4f1a311b4aaeff71f2aa9cf7b579180

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b3d0f686b340f3bc402711b4d554218

    SHA1

    84c45ced34c24a018d6d59a8be4110b499afef3a

    SHA256

    37f5f3e62ff55fa3718e5b4c33226322ef6a6afc7494d324567f4f1f29e08993

    SHA512

    5095d6ac5136f51ae462d62de37099143ad153b082b2e6e2dee49272b62d795db5b16e9089d0238600329252523d2747bfca08ba2d8b98c017c0ac99c42d47c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc700f8a2f3b1ac5672cd9143067a973

    SHA1

    ee972a99f3fa875db288dc6751b0e23ba189eca1

    SHA256

    ac5e1132c617a127484128db26e38b5156edc97a7d790afc19847444fff2916d

    SHA512

    d4fab74943edbe0ae87cee1ddeb1937f6eaa7e8ddf9f5dc85b9b5c2ffc3a62cc3844b0b6f2cbe5861fd79ede6bc280b6a9b26a98ee1fe013f88668675d35dca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e268b4222557bc277c4241159361b777

    SHA1

    6e6f5e870f4a38774697b9395476698f6d32916b

    SHA256

    51505941748803e0679cf277ee435d365527d22bd1d9c09c22e076f7b6ab5faa

    SHA512

    a7f9f39977fc09670e00734776b29902e5887d38382f3cce870da242e4c45a94916118253cbf6b289505c0b204bd7770a8c58f51e92a3e88e036ce709e7e9d1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74b8c4939de611c5008418eff2befd3c

    SHA1

    554cf40777d857bffcff2802614796f12f5958d2

    SHA256

    ac7f0d92219d7dcf5e16da3327b68938251249bc6e00c26736aa6bb60b29db72

    SHA512

    b8640d978bb4b8d0688e8ec85ecdd6e201e610c42157d535baeb51868eeb60385e7a9fb19e8756e0c69850a54fcd49a8f9eff5b126bad09d05e7dd7f65c2885b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f17abbabca89286b4195c385b2e3d2c

    SHA1

    1fc82f6d43a56c0a7155872bf232a4742a24e0d5

    SHA256

    a6e159eb957758949d1bc17199e9f75df3efc2c2fdb719679e6ef9f962175798

    SHA512

    b991fe0bb24e9a420955932e14eb60f0628d7c22b77ccc05e7eb8597ec7159b179770ac964868f6cafafd75cdf06198af6e5de69028971e66978a9859784da01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    fe11e272c1c3d5db11441985e56cad68

    SHA1

    ebaef82a3948044632dfe3955750ad0f07e4a2e4

    SHA256

    e64140b55cf3d84ca4fcd1fcd9d6369d82b9c378b6f93fc6782729e4cd7f122b

    SHA512

    6ce74b56602972ffadf756accfc9938a855282ee65f825e27d1953bc952b1d3411990a16ca00f00d4fe3e74d46e97ed3efb80190b6abef3056add9943f2bd891

  • C:\Users\Admin\AppData\Local\Temp\Cab3BC9.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Cab3D07.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar3BDC.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar3D49.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b