Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 05:05

General

  • Target

    49858cf518f373f85c52eb6d3f93a2cf_JaffaCakes118.html

  • Size

    19KB

  • MD5

    49858cf518f373f85c52eb6d3f93a2cf

  • SHA1

    f9795a7355198cb34abaf55495aa01c0b9dd6a46

  • SHA256

    5f9092ab66a3fcab05ba8b2fded482bb31fac1ff640093d8f47a2c483d2c8bab

  • SHA512

    c9f08d13d9cb79485b3b18bd8ff7d4a56a9e2794123931d0bb49a6da100dc85913c76b37e8f3bc666c8684dea678d901f34c590d175a9f0ca7949bb8e5301ad3

  • SSDEEP

    384:OP2XipT5V/jIBJFvgID/kZywjh6Hrdd6nOdEsN:OeSV5djIVWzh6Ldd6OdEsN

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\49858cf518f373f85c52eb6d3f93a2cf_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1952
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1952 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2240

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98a2264721c45f1a442cc5d2e40fc732

    SHA1

    7ecf3312d95e2a5b1e80097052d1ee014889fef5

    SHA256

    ec3f68d457003ed617cc5c447da8965be7c856fd19131a3d1a719dd9975d7adc

    SHA512

    0017842d9216ff90bc203275948509275bfd6023cf7d1d2ebf4b8323d4bb1f3d2866d52dc73fb6b9945a233cf6eca83df4f494e9fc618f76cb5a5d933165630b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    91248862fe769ae31f009a7703a78879

    SHA1

    91bda3efba984c98201162818fbfca95bb2f4752

    SHA256

    c70fb41d73ee6adbd07e69adbeee72c9c779dae14405a8be22023dd84ab4a8db

    SHA512

    f8e28044fbf4db7c635495259daaf2ffa7be00eceb319f2157adad7b9df9124593c191998e19f868dfeb8d034e18becc468bd229d8c95e466bc80aec9c5d7f89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5e3fd2f32f98bb9921f70a2ec3dd0b44

    SHA1

    8b8c7795f5bdf1b21459c13c724f7d47247a7b3d

    SHA256

    3a1894a36d62022f5d85c164a8936234bf74b027874c7c20df0cb408f1c0a30d

    SHA512

    c177453fa4dbe5c6c3d5862a55bd9a4190c27c038f82855046246413e0ce07a4546a38720cc344a08b3e3f417b617be47d3ddd09d9698a341ddb0cec81461dbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2601dd732c764c37f66f82dd2f4e27d4

    SHA1

    0bc09c034b2eb1e126196fbeeedf9ef06a5375d5

    SHA256

    8ee5976f2c94c7fa7e14599ba7d0340305adbe0dae3c218cd910122709be38cc

    SHA512

    abe02a85e39439a9ef4308bd3803dd09a2be11f3ad92530cb3f8e63a8ff306a02619dba14b108c7945c8bea76387b0ded899cb0f7c0a0069562660cc641d0ca9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e373045577a45ec2436cf1b9f1f9bb91

    SHA1

    de8d1f729d26532c44726dc4f3bc78a923f3feab

    SHA256

    a5130908bcd9eb38193fe831826e006a7d840987ca8eabe8860de311c8150c01

    SHA512

    5258d5f42682a9ddb0a51c41cd280f941f31f1e7d5bdbe2baa374aa462c52587976ca4020b33bdcf1a5f58b8ab82f10104b533555534c1ac61e4f250dd1920c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ba93be7f54142d0eb2cce40711d79911

    SHA1

    13f73445b1483006158a4af3eeca01bc38ddb8ab

    SHA256

    862b4215e3377dd0fd9eeb4830a22f677f2dfe7c6d878f9f767456bfa4cd2651

    SHA512

    cde7421d99bab1f0df2867f00f2ab790b13d1eee922f90e02cf1b635032c08d9dfba8f2c3ec691c748075355b4e1e5ee84e6e179764b067053ed30000f100223

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d1c2be9f3b657bd635b465fd5fb5f5a8

    SHA1

    a1ec1e0c4f85ef7b6724879ec855c6f53e17dd60

    SHA256

    f3a6da3b7d03704c0364404a0a8aa36a6047e11e7e1242887473dde9679c357d

    SHA512

    ea01de95b521db82cbdb346ef54f80c644b58ab9f2686149d19a79103be339abbec334408fa5a4b772b5a9d2d0582bb3e9f767160ad4a1aa48d96fc31b2d6e37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0dadc6bffc97849a47e7f1b6a1481eaf

    SHA1

    81a2038dccbf6a74744fa9ebc3494dd47a713a3e

    SHA256

    e1a8c830a6fae4fbc0fb32a533fd395d6d41250096ed6a86f720b494c99db1af

    SHA512

    a2733bc1445ec84dbd37453795c4a71b64b6aa7e5278951fd6e721e1e552acfe7bce8427d5824fb098f97f315a67070239b36f640f92005225bb28f8d51a652d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    39a3cbceda64eb7a1081d94f8d31c8ba

    SHA1

    cf2a86ce42e131336fbcd4624dad561b5db8490f

    SHA256

    c5b137e2145f79ec6a81c5c3e8deda9f81eeaea80b2d2ab70ed308578e7a6f7b

    SHA512

    03207757c34c408f1abf0b0c7e958cee368f5ad7bb9bad1e2e6d6e1b31aab1b076ba3cee5c0bf48ee0a7d1ac423cae6da66148a4eca6f9270a3b7a118fefb9bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    031efda2291c543571998d6afcdf0e1f

    SHA1

    9f8462485ee616f984a1366d5ad2116e31b18b4f

    SHA256

    c4d0d11f71b98d3b72cf2aa042810ed3b3ca4d3aafe13d2731a843590d088716

    SHA512

    45400567d0ff3fcfc9d479cbffd259f63876ed0206e3137f760adc409713587d6137e40ae752beb53897fbdb03ff1e77417e4d7933e2ecf381b0f96476db9265

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c57a1985bde65e50055f0bb2c50dfee

    SHA1

    ceb9a4c267af66eb7f375c9084c1f0dab46a2e34

    SHA256

    46e6d53e4fdb808044ab27197bdf95951c2cab6f7c607e1100514e82aa0ccbb0

    SHA512

    7800923831db3250b2a4e58a0fc7c59e9da5218b2a4668063bf70ff4f8f621e93723c5bffbc4cab9983d1258f139b65c5343a05a9c18f5e7213b1d230670bfb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec6b32d5e67563ab0e0d1cc82f846f49

    SHA1

    36ce4691e87ec829fe37aaff8005494aadb0b0b1

    SHA256

    c97964c351820e00b13dc8f040cf5153aa4279adf6d159ae6a210b2e3a8eed6d

    SHA512

    5b9b1a51c24a0854cf7bfa72f45a9916d7cbd95d980dd5ef3fa63f165ccf05c9e1bfa24fb7f80fb1d6fbd10aad4c260da113b4004b5ec02f29933e819d0e5c99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20b4cd18ac82cd9091c2a5f8ba2caff7

    SHA1

    4fbb81d3a644de0e1e940901faef4604bcca1bbf

    SHA256

    e1eff9f035ccf1d7354324eb2a52238b3083405753100b928a61704459061d20

    SHA512

    a05686a6dc407b421547d3c39ba4bee486e79b559fab029e44482cb3fc9c350c5fbde27d60becb0770eaddb24a3367c08bdcde5657f425f589573d395ab0c98c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    13cb2a56f86436b8dbc954358bf9f7bf

    SHA1

    45b9ce3f9b544edb62b2799e20ce0bb3bb14267f

    SHA256

    9383d73419a0932d8bd2ff1197eaa8139ef1e175a7a4c409f1caee79a19ba0b1

    SHA512

    528e87a2ac636f607c5128b3f663334acfc5632ed48ee25193362b67d5cb35757787040656be3bec492f96b9b9dc5694e2a48106c0d183810846722b0975084d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2f41bcbc3affabdd5db35d8dd3c6d9b3

    SHA1

    2976707503c808847584290eaa6a874bb704fb1a

    SHA256

    8efdb337c89e367a5fcc861bb47e6b4e623565111ffd2d17e704d980c319a08f

    SHA512

    0ce593c7f1fb52beec8a7abb6da7b507f0fe282cd5681f3f885da23eb81f25138e33e1a1f7b999291ead1eb414639455c9934f7b706db539f420ab4fd07cff45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6d8297cdfc4913d3b12bc48ec2d891b2

    SHA1

    d31a70e21237658d6845c3cc27794317541c2b32

    SHA256

    181671e043eb3dbf3e3eac98040a433e06e5e1e4231ba674b97b3fd923125337

    SHA512

    07220c641b481df325a2d5efa53143ee226ffe90644ee94b19391d4a6cbea37f0ce0290c9f8eced114d674b53a9f8f45de711d084ed833dc554c064bc5b4b84a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bb6328de03d3fcc500da047342b88e03

    SHA1

    ae342d2711e71f909f01c3131261102e11ab3fcd

    SHA256

    c4bf120f349e510c68d3df4dd4cbaaca5981a11dcdb142f0c1c27eda27e6e1d5

    SHA512

    e03fe5ab8d1cd9723ab3bdb692c94c12c001a2602ce5ee9e3e87514de7f2f16315e6d789c9b5f229b41fec8e8df2dcbabbc034a62006f4f47a85095381fd18ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d5558c12ade59fca37640d122296402f

    SHA1

    61f80d837cd057f73483c6f7e9e11e7d8c682db5

    SHA256

    e1d0df4ae28c6d21ad733cec3fa9e1925c885851ba2700c270b98074bb678eb7

    SHA512

    33aaeaa2c3d3a8dda6f2d6f653e139693cdb5369b6a763f6923f9c5c4521c7707c0557f7870b7ad997dde1295836d39c680942451869261a57f91aa4211d0016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5701eee7b619aeed3f6e8a67e2abad80

    SHA1

    22f4fc3f8ea924e628a96b7eb5df762de2db7246

    SHA256

    60ecd59f1e0929b0af43e517fe1f213ff80795d29ffeb7e9fc3166ec71055e45

    SHA512

    62b2f6e1fa807382f502d949394172d980bdc1500aa744385c747be3fd180c0bb6dcbda965a4ffba6b53a869b7d9edf85938bce85cbfcd288d41c40d99301217

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6d6cf62a20082d77a87f28ad6db7995

    SHA1

    9b5bab8b968c46f5d02203dc3b8ba4ef3beca740

    SHA256

    7ac1b3f0883ad5b9a9c803bfffb72dc9855cb775957337cec3d9d6ecbe5a3edf

    SHA512

    118578f50841e65dfa2983d36600b0a3a9661514dd554855dfc162574e12f3e12170558bebccec7755ded70dbc9b796be85637bb1466f813344458ac9eb37a23

  • C:\Users\Admin\AppData\Local\Temp\Cab37B4.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar37B7.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a