Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 04:01

General

  • Target

    38262c646cee265200659fad29e9b94d_JaffaCakes118.html

  • Size

    27KB

  • MD5

    38262c646cee265200659fad29e9b94d

  • SHA1

    da9abac01d7b07bd9080d93a34e6e78a672ab23e

  • SHA256

    2262e174d4300800979812cbc6c0306be058c8abaecc7d8aec7c68f76c938944

  • SHA512

    2ead016a0b20c0308bad2bc99276203e53f048d41862eba3706d4b64ec45abce3df455a05e849d5c89777d622712b576a4940601352288898dac894e42243acb

  • SSDEEP

    192:uwPcb5nWN2/nQjxn5Q/FnQieINnunQOkEntvnnQTbnRnQ9eC0m60poOQl7MBoqnh:xFQ/SfMSopSS1+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\38262c646cee265200659fad29e9b94d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1792
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1792 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2924

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2c98738e7c497aa52348cfd34e41954c

          SHA1

          ef02c581890eba85c470311678facc414b6f3601

          SHA256

          1dce822f7f4ab05611b976c01bc04021313f039a8aaeb39391619fc16af1193c

          SHA512

          5fa8676b3c50e77bcb69eedaec36629d05a9871dba64864e072a2ac8acf21573eed7587610f2635cceb2e8e82e07af4279e6c735b1f8c1e50be289c539a83132

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0479e6cdb8888e635269fb5e208a341c

          SHA1

          5fabd23fb7a0c75867a73cc8836a06e982f60f34

          SHA256

          a9a7f66f3628db7436e23e0136c4b78ae47c4e80f2bfc3d4407e3d30483e543b

          SHA512

          7121b5b81492ce06a471261b66110b2bf972ec6c6c1c88977db06ab5cb86399071b4134e937a465c750be957105b79bc6b8d706f6f868e6fce73745211fd916a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          584e909102b6cfeccae86ed5a630c6e0

          SHA1

          ae2c2dd53b5c642b2114b4c2523c241cb3d83904

          SHA256

          55583ec06a82aed4cf14e890d435ff5c4e4734decdb26874f4ddb0bd8231da24

          SHA512

          f7ec34312cda17a014b1bd763af0f65745fa9758dfdd9e2e5002f9d35acc26cc3b2cfc94d9ad45a423c79b6b6a34054bb6f60f3c56c81a33dab1e29621a0aeb7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          88fe2263036beb7be129fb5809cc7012

          SHA1

          920873769af74af448ed204fee5246d453980e49

          SHA256

          b5fa596b8ea8066af862d51d4852deb85f17054fcbf0dfcff0914ba4d21fdc16

          SHA512

          7d78006831ad6430369f4884d1b17634fc07f356ce8b93b800aeb129a6cd801876fc05baba78d3acf0a7bad66d7985c63b0a34b20602f89199338ee8589733ee

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e0080a3923179b5bcb851e3583dbb78c

          SHA1

          89fbaabfdf6a6405b6983c885d83fec9e4d56e2d

          SHA256

          0a634085eb0afd26582a24eccc0a6b5132e682880bbfea39cebdea01e15622d5

          SHA512

          eabf71e126afac71e39f4070b6104439a49b491750d7f2cf065fbc1f1405edc3b6046c8a025fa749dceaa0588958de688ceb6fbc137d0d00e974d8e50a095980

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f154d4d60cd83ea483580dda21f91a1c

          SHA1

          0c3ccaeb4f65a11838c99a05718d24e27c9431e1

          SHA256

          303317922b9018c4526d5a6883981446d4e8798b96fd03dc15c06ea479a90831

          SHA512

          455e8d216eaeec6817759904b3ad37f0fc48486396b7e7f10b8e987677ffbaf7bb6ca901159f6725701cae05ae2c183439a1ba40e7b136650a3e8fa5bb905361

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          0aee8e784f632140e8be762a8a246b3a

          SHA1

          54f3cf4f6dbd66bdc5dc15710dcb571493b551df

          SHA256

          1d61e8d31334bcc7ca06223014d5e669144f52000c90a8b94458dcb46551c061

          SHA512

          57133406ce26decbed937058e1a7aaa103f4bbba0b9f6296e7021b8daeaac2f0f63cc83fe66293c8760b0a336b10d6e7b77f740450f47071a76359bdb96adb37

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          400d813ea84cd1ae85f24ea1e855bda1

          SHA1

          3151c6c5f9e4bdadd311c066d4464278d3cbad45

          SHA256

          2a109d27dea5a7003f5b30d817dac3e5e73ae5a3f44e27b6084ce8d60ad967d7

          SHA512

          befa9a2f74b53a54229cc31a25ccf352babd066bf2a01e558c46b25f26a18cd9fc6e26e7e069bfe3324de9457ff57bd7341faafbac160aa9d0ae92e37290f385

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          1ff8be6af797ca4cf5102e2aeb184c97

          SHA1

          f61b6356b27527fb8650c76d58839a5f3ba38791

          SHA256

          dd648549f239f0ccb214495e3c5a7ac5d948c12c4bda28105d2bea7b6b17ba86

          SHA512

          5a3b8c9489f8eaf12e0d24adbc4dd9f4ab6b73fedf32bf85955d839a5ff5a483784855bf140ff592e48dedf64fef544323e15aef00416e0f4adcb7a131f5a0b1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          c977d4229f236dae4f4062e790ff45e0

          SHA1

          544a1b5a370c62df9aebb9d29fd9d609f21e4276

          SHA256

          6ef837e7076229ba8539e8c3853ba7f7bfd22f3623986b23f23c4d397294fac5

          SHA512

          262327ca541eb5002394f0f4f16661c97e6bb4db03ce366ecad9900ba0e54f7e36190973bd79234a58e1a32383a42787fca6008f3e9b8950c184311d9013613b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          03a1a3be2acece59171316d479970a7a

          SHA1

          dde8aaeaefaaa8e19932bff84c80a554f2e494bc

          SHA256

          e34d261e18f0ce93a29f37a4871ac926755860057bdba9b84fe6601a8ee6f9a9

          SHA512

          ba632a8aa3874411d91abf824fac346b811baa24985890550dd270e443a8d52bbc7ad2228721eb5d0e96b3174f3804543e28470d49462160d563e03c427291e6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9b8150b2686c4121d4336e5167efd6e4

          SHA1

          203016fbbf62f2df9e359d7149019d03dee18257

          SHA256

          5f5f7a26ce769c10832d1974596c93422aa425c8be31a3696cdf9c61386ecd8a

          SHA512

          96c7437ee474000751ca1f9e57a2a0e57ab4c9cc34b27535c4dcb1dd07078df2a9462f98e41597aa407396bcb5a7d11247475b09cf6b1655537854d068ffcafc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          6f53ee3310ee399ce16dde9a5ab79202

          SHA1

          182be1b4f0f3c3398bd96d0605eaf523124299dc

          SHA256

          38dd2a0222de8137c7f6e4a5dc02f99b41ed96426d1775ed64b387cae4de6155

          SHA512

          73f387b7eabc2cb04b715d87c13cb49c906c12acdd3540fb8c35e4caa31756076fc441ff02caec27f09494ca5f8e0f85e8f1904fe0e31f3a7797451ca846f84c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          478561438b34c09cebe2b528f5f7445f

          SHA1

          047d682c12973dc42bc304db3a7ec82f7b0e852d

          SHA256

          759e52ffdb412eed7dbbe29d2f225a43f21ca72cef2dc230d20733cae8aa4ac9

          SHA512

          bb02db8dfac2798fb8cee4415cfabf12cb058c287c91dcbf6303fc003448f4993d5bfffd438102f55b7a000e156a0994aaf5ade8dd29899d24b2e301e135a6ec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          650b973db5f8443cfe8f00a54d64036b

          SHA1

          c194cfa3e227bf95463a348c3dcd8f2c44e1868c

          SHA256

          faf95a93018de00ff2f8c4b95b598f1e0f7c9e1f46f02f45d922c2829b0e084d

          SHA512

          761b8f383e2e7dbfb4abc35957d91f06781a8831a5e5789b1da5ae0373e3980bc1fe37e6d22f42dafed02c792bc4385c724412705a1d42a68399daaa18de294d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9e1c2b89a8c8f4e5d9a900c6a1675f43

          SHA1

          36f65509e8c24d7e499f5e6c85fff71f8dd065ec

          SHA256

          11a0f49a701bd2c31320430ea64cd8596105c19852a919af19b6b4aaf741a173

          SHA512

          68982a850f4da960011506f1fdfb897582c8217864c35c09147fdb0cc2ad6e8eb855460ffdc2c88e173180d99bbfe1e7a162f1bfcb9d59b48bad2437c490b399

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          94a63fabbcba87449e65a52eb5418da8

          SHA1

          2c8a2696b7b4aebcfb816e3508ec7a590d305702

          SHA256

          b5a60f660acf0f6cd7d6b7869bd4384781c5590d7a9c56c85f8e16f3c79d8ca3

          SHA512

          d5a59afe48989dacb0649780f8e3e4e9cd98f4a5a589025f691a1bdc6303ecf3a19e8076facca92ef14e1963e4ef31f158abf7e1d0076ad9646835c29ddebecd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          e333c0325031b9ab7c15538c901036d7

          SHA1

          8da259092ac1d552373d58319c920acf38a9f02a

          SHA256

          a1f83142545dcc1cd43e5c53e493fb41eab708fb406861953f7b31a66fa4f5e2

          SHA512

          14230ff6a32d532d5ed9860bd8793f8e5edd30abed5ed3a941f05835f1ec6317da3da4facbe548c34f20efdd5836b61a1325a669483d73088039ac3106519f4e

        • C:\Users\Admin\AppData\Local\Temp\Cab30C4.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar3115.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a