Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 22:16

General

  • Target

    48498ae35424d123d77f03599e7deb59_JaffaCakes118.html

  • Size

    27KB

  • MD5

    48498ae35424d123d77f03599e7deb59

  • SHA1

    cc08124156520ec01a03ac575bae840b9abae34a

  • SHA256

    47cc8e0d7b12b394c223c8ef22a1b0f1aac0354e55f2cf446a7d5d8e686e2f85

  • SHA512

    6de2292c1711fdf50302b25aa74f4aebd83d0d3fbf9f9007c0e38e882751685629a0e83460686c0e3fe88c131d1264399c55567e4a91344899d72aaf96bdcea5

  • SSDEEP

    192:uwbsb5nI06nQjxn5Q/knQiePNn7nQOkEntU2nQTbnNnQ9e3Lm6uPxjQl7MBvqnYd:MQ/r6dex6Sl+K

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\48498ae35424d123d77f03599e7deb59_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2156
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2156 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2928

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          4712a1e5a3bde090b735b4959a6a2ed2

          SHA1

          68230395c1cd76f94bfbd0974366622b886ecfbb

          SHA256

          1f2bfbdf4f9719efbceff46b79534df0d9b0c5a3778126566a76c308e93b1efa

          SHA512

          5cce157d774a8a43b1c3f03a68ce66d6506a8c78ff96d09f59b619cca856f14d504e26145e7650c7ba783ffc54ae0a34669c9045108613235957b807a25b5b49

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          261a6f787b9abd80f947a1e8fb581cb3

          SHA1

          5291fee8d74c8b569e9fa309b2ef29778c25b131

          SHA256

          13c3000cb04ee7944d81d0b6015ba1e58f49753d44577b2e08311e6994783623

          SHA512

          ee97cf7cf314fe2516a90e5c695edc2454282a2580c23c4d2c04e45cce025f4895096b08a5e8c95f320e067a246cb770b7d535b14839c7ad9d303defcc1b63cb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          24f4f69d0b039d7a9094a7e4c8b75c36

          SHA1

          1766e976eed875f37a07fe689197fce3d5451175

          SHA256

          5028836d2ddff7582ca881ef3947d39e6215bb2ef23ea673c4c34a9979fd78e3

          SHA512

          f24ce97ed28771d50402fadcce1fde4ead32460ab203763ad671ee318267ed6f84c3a63b6e9f3b198e6d4ad1e6dd816dfe75ba1f6a1f24c7deb8024e40d4d657

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          8b861798a2ec562d5ec821c0556ef542

          SHA1

          ce423dae0f7bde6ffc2822263bac3d9f16576a24

          SHA256

          c4451f3a355374da53a8fba601f29d40193455b00d47c0faec1798e79af7fc92

          SHA512

          0c91a28687abe339682a97bcc9f3486067b25c0ac903c6a9f31f489d2c1c2b66104134091981af7b42485e4865e48461336943e10385cea72b5f9dac1a992554

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          02ba0bd1cc0bfb5aa83953223f2c59fe

          SHA1

          c0a2f057d8ae7b56b98e04f702bf7ae8a0033069

          SHA256

          04fcfe711a913b7e05d151dff9fcd95a554f0b1df28ddb6309ebea99871aa027

          SHA512

          ecb1921a07feadf6bd5735bafb0e0375e53affefe43936aa75428989740e62112a36cde7ec9728fc602e07da835ce5b1d1ecab0cf5acfc631bab4c414d06c095

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f4a80416e950b322cd8ab1ee83863235

          SHA1

          5fe1613c3564a4b47e43cafa5b87348c971d66cb

          SHA256

          6ce133a996f77ed8030a304040f6cccedd620d7517d02856acd827671741550b

          SHA512

          9238cdcf0185b7ed1c82260719730df1ab3a78673fa079f50ec9290226aaef8750f78e3b1088e8baaae214683fec166659d7c8ff7cd41fb16a696ff6782c587e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          9a1659daf14725e1e46362d6880548ce

          SHA1

          8f0ed39dd1043847141b785ee602366770855b62

          SHA256

          1c37bcff7e51de92f28baa0e2980400b85c265c2722127c242066e52cf07dc20

          SHA512

          dc168f29eb540c25c198dc05647fcf8a1e3fe6ca261beb1c1572dd4b30bcd0301af3fabf9b71905eb75c5aa32473f3c69ca535e1c7a610afaa20628995a56073

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          79111d344926c302c9d2be3e965acd83

          SHA1

          a4e1585b9d2112a829987b72bcef05eef4af8c02

          SHA256

          c9a655e7b009911182f836bdabd8758f1781f08eb858d666cb85e621abb241a0

          SHA512

          435aa1424d553e52d42413cf1ef86feed0b4da91c7dc968fcf9e0cbee09ad3241de2a8da54e30de70194cf1406e3c78cb4073662293d424856393e9c5c77bb9b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          d32d0e0ef6df4fe9091f2a7ea8abbada

          SHA1

          8b37cfd9256507139577dee3bfe3bb016c419e57

          SHA256

          e35d0756f0eef22ba8c498b87f28adadec0f2afdb0bf074f5c49d0d1b0a22a8e

          SHA512

          fbcfe6835a9a639c07b5b2a50aab65e32a89ccab37d9dd2a46e43744b1761abe4443595b38c7415bb9f8066e0cde63bd37c140965b7e79fbf0a6092da597569d

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          ca64bfd2ffe0fa83c74809b028f0fd94

          SHA1

          39f726fece0d056b98c141c90ba1d20809a6721d

          SHA256

          204410976d02566c9b9fa353cef7d3937ba475f99e29e9b3499669eadae6b805

          SHA512

          199aa0336c7d3f4da49c835f79be7f55a95a686fc1264b4226430e3b454c542dcb2bd03db6f8af52387e5459690f75434d74e06a03f41e88fb0d3259a68eb24a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          14c7d95cfc6009fa2a1a52746ea96aa2

          SHA1

          f85080f648822036558ff63304e6a80522b3c9b6

          SHA256

          3e432ebd9edebde33c28782f65e50f9a9de62f9b613219876541d7647afcbb92

          SHA512

          d4ceb6a74706971df09111511f7f68bed737b4cedf5c908ff298fb6c5549c10599de80ddd9daebf9b1978596e7f95e5dc7e8f6d82ed5b6574905da9c4a2a0f80

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          3c0e3883c23ccca6d1bb98e4fbb28ff2

          SHA1

          6cf60bfd36ebe0ca274425694ce6d247f559d747

          SHA256

          e4e488f05b35a374b660aba1be359270e597d815d92467e9adb265c468a264fe

          SHA512

          2d32f4149218dd131f548ddabb0509d682cda0a042d1bd838c197f3f2ea268f3eac6817d46b1504f6d771f797839b6bde1b5c0fb58ab72754ed74038e0ed00a8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          f9e04cba0097835705c764e3acccdcd3

          SHA1

          b6137b2ab3c66e19761f14ebe52fe023401a6389

          SHA256

          f8f0ed3ca421e7efca430899ce1d6364dde2fff6e2f64c631ee0bc72a5c892de

          SHA512

          e434bd7254e0e0fee6f86a33510a90c585a071e88e79aad636c94279b614e394174aeafd2494bdc316d0edc63c7a60fbe48d351fd6384090b5a0ef42f358517a

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          2527b24dd502f439bdd06d0654791fda

          SHA1

          5e96a85ace21d75d6abf8e93729640a9644013fa

          SHA256

          eb347f7c3b3da47c8223cd67cd4c177ef791610a217c54f77d6f63274bab38ea

          SHA512

          0406bb329cc5669055fa97d54ec376ffd9eb099c83aa4078284e3f45985b085ec992d72e6a83aee27e6b7ce59eb8d552bd3183961881d48e07ab17e3eacb4497

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          144b4b916500cb9b0564a310c4511d9c

          SHA1

          27c6070c674048ff258b389bc3f02650c355ef08

          SHA256

          b5d799f93f9c6851a37e840dc1f514eaa912cfe380a7a053c7b551875fd7dffc

          SHA512

          7f73c0e16f0a782d99651db95d15aefa7650e6f3b8efc90100f1651d14c7253097e7735ee5f02d3d05e0aa0448e91329f8aa28a2091c2bdaa33fa9e8300f88d6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          12f1f2a00bf38be6cbfda6ef92e89628

          SHA1

          b12928a32c12a836a25113d9d967d7f0af063fc7

          SHA256

          f16d47be42cf7807f9891ac605dd07b6e0c0312f62b5066e9fa98aa37bc20bfd

          SHA512

          cbc7fa41dd16b5214d43dbba86c900b4e65360bdc4a9f535db2400368676aef591dc5b6aad6c832b1f5d94aa9bdd686626b65f4328904d9044df16553ea44188

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          344B

          MD5

          83a29b957bfbde5c6d181c01f1c925cf

          SHA1

          c7a978d5b5a4c8fbba821be1a7819d2d460ac89d

          SHA256

          efc1528bf751063d40a91b548b9a58e6875910a01cd2dcae3d515c6509e5a5b8

          SHA512

          9ea2004c0e689f35bcaa5c579c4ab5ee299ddb3d7374eb21ce91f6d0b516931caa2cbfc5f3ffa2c3a895a4fe97025fe315a96ab69ae8660125e4763db11060b6

        • C:\Users\Admin\AppData\Local\Temp\Cab2761.tmp

          Filesize

          65KB

          MD5

          ac05d27423a85adc1622c714f2cb6184

          SHA1

          b0fe2b1abddb97837ea0195be70ab2ff14d43198

          SHA256

          c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

          SHA512

          6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

        • C:\Users\Admin\AppData\Local\Temp\Cab285D.tmp

          Filesize

          68KB

          MD5

          29f65ba8e88c063813cc50a4ea544e93

          SHA1

          05a7040d5c127e68c25d81cc51271ffb8bef3568

          SHA256

          1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

          SHA512

          e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

        • C:\Users\Admin\AppData\Local\Temp\Tar2872.tmp

          Filesize

          177KB

          MD5

          435a9ac180383f9fa094131b173a2f7b

          SHA1

          76944ea657a9db94f9a4bef38f88c46ed4166983

          SHA256

          67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

          SHA512

          1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a