Analysis

  • max time kernel
    119s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    16/05/2024, 05:53

General

  • Target

    49ad9ca452720980e12f07c5673485b7_JaffaCakes118.html

  • Size

    460KB

  • MD5

    49ad9ca452720980e12f07c5673485b7

  • SHA1

    b3a932ebccb008685c785b119d750664eb2f9fac

  • SHA256

    117608d692499fdc5fe61169ff84ce7ad1d85aac3d0ae42721bcb0e9485854a1

  • SHA512

    19de713acce2c28bb3bab5746d9121a431a87348f5cef067e05854922dcf18f71c18ffe298437b490ef05d7c929d95057b4f13ac00b92bf11a4c0713d8f27425

  • SSDEEP

    6144:SvsMYod+X3oI+Y8sMYod+X3oI+YrsMYod+X3oI+YLsMYod+X3oI+YQ:k5d+X3g5d+X3Z5d+X315d+X3+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\49ad9ca452720980e12f07c5673485b7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2848
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2848 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    653822eb055112c42c750ae6090b3b50

    SHA1

    1c928be501f161df1aaa796fe39141540d6b5d34

    SHA256

    60b4ebf76bbab5b0f5e03105fe7a6b44a4bf2c503116b5eea291fe6c447b0616

    SHA512

    3ebef8115bc58b014569dc62a2736738c18706c4dec4758f60c089f95361207581e56cbd16e892fda2782ab98574d7e229e6d082f4072b066844d9dd5c6b6a07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e17f6dca236473a9cbd52283166ceed6

    SHA1

    fd1d3c9985d1f8987b28b8f0c1f1d550d89daba1

    SHA256

    fcce6bb599f101137d6b769e1e5e5bdf334357c2f41b90225dc210faf2800e75

    SHA512

    c59b9e0e61b40c90a94ed6bf645a701909d130dd9ab9f143030b897ec382d483fa161ea27c117a083d3fc3c43f0014b01ec6823619fb5c5f057cf5d422002267

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f3b30659b29d6ab45a1911f69118f19d

    SHA1

    138266393b839664828a325f44bb3fd53997f7b2

    SHA256

    c9b2e2584647e6458a1789e8a67f257e25adc9d6bc6bb761c55ca407f47a03a0

    SHA512

    abbd616d42486e3210642df082bee925b6361157b687c2fdca34c001c781962701b52f96d4ac1a7da4fcc59b7041424ced6344fc0c49435ad174c2b571268112

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72c729f2087120e7d4898ac4f5320a40

    SHA1

    e1679c86bf93d852b9d7419031a88aa54e223984

    SHA256

    7c27b1c7196c1310d06abd45ba24d0446eb056b1a54d86b0ac8f097a9a064e4f

    SHA512

    6f1915d1ed2956088e8acd1bb5f45fb948ee4a7d143588de39f90f5544afefff460a81552e4b2bc11220cc8973c17e7cf520a846a5ecc177e164837b5eafdb08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6ed47c7563d45626957b1976ae557423

    SHA1

    18e2e56fd188b38716128149ca9971bca3e44d2e

    SHA256

    031dd77b887c19b2bbc9d1fbf22711010196eb90605fdabef4659d51f21db844

    SHA512

    3cb773eb0434b7fe91dfc76012552eaa50c59dd5c418754c64e53b6d4b183a0f20245db2cb806b6a980444565c0b134c231c86ed218fc63e8474b346401c2fae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    071265d3fe458ffd407a067f2ae8ae28

    SHA1

    c88cb1f7e06ffa609c23b6459911bec67c914f14

    SHA256

    7a5702d1676ae8555146abd4005812649ed2dfc1229d44307a4f49841f06801e

    SHA512

    b9b3480292dcac407f948a9bd83855d5538706dfc6d0f00342a9213ba7b6afc20e8cff949047069f289e2c93f27c573b4b8dce992300da085a2b2ca4c1f5e606

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17cc439beb0562807fef4c7b978f57c3

    SHA1

    212ae09170b8d9396b4ef899d00d7017760a10fe

    SHA256

    7a7f5a743b7849b6d343b63407029ad1d55bc3f2e7e7fcb49bfbf3c300878562

    SHA512

    840d30b4b90fe233a0997a30f0956bd4f04ce1c26165ac1c84512ec226c35501168289b0481f99cdeaaaa7489e982975db83e968926f8741a49ae89d3ea8fdbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c923eddcda621d5c71d773092ed460c7

    SHA1

    dc375af727e5471c0375c2ff33d39e596fef3c53

    SHA256

    1876cfad419181abc7e792598bae4fe7b219e9970767865ea26868273b2f052d

    SHA512

    99cc6faaf626ccd8f7f7a0a085eb2e93717a885a200a10dfca5b47b48d3e21b2c399b34b7bcc37b308ae1a39b88eebf51f8424666af2b2edaf7ff4cbc19818ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f4b245d1dd7b5690afcaf89395c8b4dc

    SHA1

    b6d3a08b38fd79b07dfb36fe275419f65ef23d09

    SHA256

    28ff9123fb0de6a161a90cc88bde8a8cec74857c767529930a96d7f5081d0523

    SHA512

    ecb244eb0c8720f0eb8c313bcae1fc0368bf68eff8f351546bf54317c2ae44c858851dc1b3d773045003732e16f67d2a895d6560af9a1acf0ceb2d218c5fb9e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8fec5766204ea80ca70f92dbaa1813bc

    SHA1

    06673876efa2fc6e4c018577486f49eecc1b5846

    SHA256

    f31b9a95780c3ddb2f7e14840b325344b0cb563369f2cef231e0eb0ff84b0ca4

    SHA512

    555b3121366c488f85d3cfc2c1299c2214398bc8c10ad6e17e3907533acfa53db761f03360d8e6519526ab56d7838ea154848028ca374ebeda6640534da79f38

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b8e1be66aa20bb31286574ded286f83d

    SHA1

    3b8616420df575a62ec0c57676685439bd67c170

    SHA256

    dbe65330bbee39b853ed7f8106cfe7e0dba549b7227662adcc039f30dd0ecc9d

    SHA512

    7f3b15e938b2e0d6025517d02f75e5c7b64986b0fca8c096abd966c1b0ba94cabf847afcdd6c31a22c91be397546a846fd9c15860ed1bab970b06ec0ecbb84f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7200713bbc924baf40b887d41691b64

    SHA1

    1bac56559c92ede6b1d357797cbf99b1e61b589a

    SHA256

    7762586d41b676bf1b62fb7aa2a9ac35894e2dd5ee34db031bb899ea041dfc99

    SHA512

    e7f1a06982f8acd3ecfd8b5339b8694cacf9589d0a93bcdbf3f8e67fd9423ffdbeeb97f0ebcf83be1387a73f430c6fdc82fa060bf36d84904c3b790a72567315

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    828ce22a58b57381eb2e8ba301215300

    SHA1

    a235922f31694cc5071a039355149d899c024771

    SHA256

    ed99c95d2db0debb8edada6b0d2f26474c17fd18cf61b5df9940ecc28e60f2ec

    SHA512

    b6fc6e7f0b97203247b9a459b8ca4f317e6b7eabccd6be4e52b4a4cbd10edbba2312fc9eaf82777ae2ac0f52dd6131948a3fd61a74df760cc687626e674f7dbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    11c8b01ccac8010de821e912e630d04b

    SHA1

    ea3b2f15e76680e2eac7c1599e86f4950bd99546

    SHA256

    05897e8f3256ccefa4af9aca582dca49ef98f33cc3995bd7a9b71b7d29a8ccb7

    SHA512

    11eb473c8463885ae3f1c800b140474b2681950a0f5314b0e8f3d1a2b07f6b0e7fd88bd3de5894c8c72775061039699b7bfe37f2ed682cce63b33643d3924f51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d9d55943d28f8d078da081159082f115

    SHA1

    3799f7298728f1b633cc1ed2495e2fa64a74982d

    SHA256

    6d7826a52ce5cbccfd409c5cfd95bb98c22f758b3b8c35b8818266cf0e3893ac

    SHA512

    f25c45cbe9b836a04ebbf868abe748bcf6c5aff73af738fb487589ebe6108df1c8d0261da6b6606a7a4eff8fe4cd009268068c065ae1b17f4da129d95555a293

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fccfa6d9313256c2352e5d52980529e8

    SHA1

    19302f2f6c9bc830987d5ae355759e453dfcbb02

    SHA256

    c18e8c4a8702f332225e4f2eea594f8c930c1d974f69a4773f910bc604c9866d

    SHA512

    300778c57e8265746019c5276b590eea038b9b7c64a99b00cb2637016a364b4e32da2ad6c24f75f34d44c823dea92b41e6e7a831964eace91d7d41f99a6126fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6703d966697b6d2bd60994723e84ac38

    SHA1

    72691895453e1593049fc51fb240bd8018918afa

    SHA256

    2134c1640ba4326c07a513628d96ecc46f2406cc98697563462126383c994f12

    SHA512

    cb95c10ddb40720f8682279c98393a0ec72ca4134caa34c900d6a4103168892e2483f9a053f57bc990f7fa31ca292d02514f3bfca082b72f873c9eaa406a6255

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    89c000c07cb1e3ec0d320cb8a531c0eb

    SHA1

    1678f538dd0ed748f18459359756bda6f7d6d9a9

    SHA256

    3290d904b2fb4f13c1df20170d8b30192c8e038c37506d957447261308f309c4

    SHA512

    eec5c5693d3391f30e1748bdfe3778f31873afe9d5a0750fafb9e5a5ff959f9c782333d6f54539f82f7ee788e339c87e4d6d8a12e455cabcd6bb67e3801ab9e1

  • C:\Users\Admin\AppData\Local\Temp\Cab4932.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar4A24.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a