Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    16-05-2024 07:09

General

  • Target

    49f0321a8989934fd9a02b427bb7461d_JaffaCakes118.html

  • Size

    37KB

  • MD5

    49f0321a8989934fd9a02b427bb7461d

  • SHA1

    d6e6287fa771a505054ffa6b93847690275f25ae

  • SHA256

    80fa1fbbe9e52b608d9200f8d0c5eaad83b34b48d4700bb72761b80c9e359478

  • SHA512

    c7183194d55cf7b41f332063ba143f4c7279956b76951b60024838ab5c2dc96058ad7fa190ded8d22634dafac9db107d8f9e2066cf04db3fa940e4476b4d8a54

  • SSDEEP

    768:FL3pmAs6LiypowQBa9cPSBeyM1ru1rG1MpqO1rq1rW1+:N3pmAnityQr6riMtrGry+

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\49f0321a8989934fd9a02b427bb7461d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1756 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6344167ba6158f368bc490242f8bd8e3

    SHA1

    1d22954a640f9623197c00ef16decca85b6e82df

    SHA256

    d3106629633e9a25d40c3badffc86f91637bad6cb89bcfd124b0c9dc6812b60c

    SHA512

    0c7223d547cbf514a3a9ca21927352c00ecad3c4a09f6bd426e4e36c0ef682c379224823eb6e6bfbf1c3e898795f16cdaed806b46de5d99ca00a352a34c76859

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7c8ea66ebf91b33f2801ff94589c3a36

    SHA1

    a6324a0bac1d9220ebe62885a49eae0dc18b110a

    SHA256

    25f7d120301dd379cf375611e336c80ca7fa0d41f2b1316087fc00b69f1546a4

    SHA512

    f9dd9b60a0d3917f9db1c8185fe9373ffce27de3cc40c380281988ab310208c67eefc23ec09def680bd40b99ea348f81331d28f0c0b06e2f338f4bc1fb13b497

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    34ef7b40e729282dee84b8550b8406eb

    SHA1

    e68ac9bf68a3ff976243c9cf4f54f0bebf6a9c93

    SHA256

    7d4023c98a5a23c88b6646ec170e0293ff464f19ba494759fa8e34e5cc2aae20

    SHA512

    3783d2c6ae188c5625095077fb5a7d95e5ea13040f766f26336b93f9d326f2dadd098ec87b54a6da97a76a898db660b9169e87641232a30e11b52d5e1972ae5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ffb58cb5dec4fd11986af7af62213b48

    SHA1

    48c25741690876474a37b3eeb5a73c13640f1e31

    SHA256

    76cf42e0ff7b2a1d9051ab3f41585f78a93198c6150284cfdcf633718979430e

    SHA512

    60c02752551618b8e22dd31c2dbec038f7c104778529d5792c4c68d05b2f097d285671e1715534cd50513248f790aa2d58880ba67fbae7c25cd4b4eb61bfcf6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c91e42fa0e638ebf015a08d356cdbc7

    SHA1

    f6ced92cdada8b42cecd67cc785768f3a480c41e

    SHA256

    4db026bc1a62146c009f6046d97a81cb4475e00fea546ea495ffbc624a84cfe9

    SHA512

    322c123cef4138394bbb56470dda9a696870aa63e58ef2386da572f3f380b41dd36d68e4a6904b1d5db50d61d925d79e8884c35437c8179bfe8bca35e1d34e48

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    389e90c6864494dd3d69f9bfe8ecd716

    SHA1

    e6087bfa374b78093fd22e65e2d95735b767ff07

    SHA256

    5a2a011fd5055df94aa36394bf8551470973929d153bc68a2b5c9f76e2456877

    SHA512

    b72f71bf4a042555d923fc47612edec1cad55cf9602be057bf00ce2da68479e9590ca48e1e4d06d6d6046f770765e3fcbc36d9e977b5dbbb029587cd9e1dcacc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d350503f63c34bd6f9641fbe8aad8b1f

    SHA1

    9ccc2e0615b459b69326a4252e5057ca787d8cfd

    SHA256

    54813bd17656e07ac3a8e3085a9251d1f57d3fd2aa5fb022d77c2e2e933a9024

    SHA512

    4393f0aed3c202d9f37e87222c8ecbce01236ddef2d9733da28d61d3a40aa2d95c3f0e34d03b1d51de9bdb9bdebb3db17527bc4d050f46623f1d018a213fd701

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22c9b0c72390080ed5f2103deb40bee0

    SHA1

    8eb83afd2edfc9b179c42459d996528f9391144e

    SHA256

    f48e6e2b7279145d3e2312ed7d05f98b5cb6b6d2234ae7c5f99117bc34bf08fc

    SHA512

    bdfc7eba74250a28e32ac26607bb8382d1e94b3c6a417f9c112a40f631621b9a971104f52a9f5ce224a6b01c2efab7fab18a5848d7693696dfcf7a116845ab0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c00fdb7edacc61c6e913cbcdf3326b05

    SHA1

    7fe90332c8a56b063ee839ffb0e110dffd9656bb

    SHA256

    965bea4417938ada070a7d7dba2297e4874e4e7f4168b641036b4231fe6c081b

    SHA512

    c80c4210fe57bc2c82af81c01d9bc2a78b6988e450c79c78ad70af37460305a5e72392993570c10d54ecb75666e8e3dec102a21d4bb94ebc63c167c80d06720c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bce7ef1fa0cc86d531280d6b2fecd409

    SHA1

    57c7b9650e90196a0a4593a1c99b0cf7be0005e0

    SHA256

    0407e4ec9e78d7ec14839acc713d58d140d4ab738517e5e01eb46fdca1ad9fe9

    SHA512

    8ee9aa9c9c2df9e5c4e9964cac74aa7dd364528e918738da40d49a902ecf27dad327c65d4a1d4e9e285be31767bc374ab569a1f2daa140a5b6a478003fda59ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c52baa4ae834787074c3966af1ad3918

    SHA1

    af86f3a3f537f58538785d382aaba7e5b3181e75

    SHA256

    5b66c8cb38e76cb202ba5726cd9ec8e7c6c0d3ab4e17d1408262f54fd22165cc

    SHA512

    a8ca88f80ccb9df75f9a84c6436751bc74189f4f0cdf5f1d779e1804aede1b6b0f604da27f6c9acc30aafc5009857fa8e13d3957895d6d5cbf6267c71fb3ec1f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c1e3189dcccf97a22ddfb69120573502

    SHA1

    2aee298741284b6ffb9ce805508381647719c8e4

    SHA256

    0f094da42822449e6cabfbf6da10796ec11953f876ca452c7ee6d4c3020426f0

    SHA512

    1e23696f50e2b5e91076c19a8f7e472c7302567ae2f2a5a5ad5a21952089a530c56d526414bd31668c88fdff27cfa06c481d7a9650827d5be6615a9662d589a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    33ef8e67f4c63c2af48b6994cd7483e9

    SHA1

    2a0337d3c86793ceb3713133bf4c05258c007b0a

    SHA256

    721de624839313cd8ab3dc1a8c479330e8e46994a79b2432ae1d8d89e385fbc5

    SHA512

    afc065c66713e68f1bdfd02babf3b15bc6cdc85fc4064d727b6d67ff4dc4efb76a69034be5ebc44eae1b3b8b5b26b44d053502d9276dd82d1985116f73b7ab60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    814ad3e3aa4fc296bfe14d3a4796265b

    SHA1

    1fea58b885ee0d30cdb102d270dbaa9dbd0547b0

    SHA256

    247e22758d013592624faac1a16342e1662e289f66750e96eb262841dd8ab521

    SHA512

    a5b035cd6183cd5d33a86d2fc1ef0c320e31bc4160ebfe8a6389364f3f17c6582e8e2f17cbcac9c58fca95969e62604dd92fb238bf253f8e577ed8c7bcf75ded

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7ea0f744c6d424ed1d4f0cb62721bc9d

    SHA1

    bf71323af19226a268a4ecb7cb220cf73a6fcfad

    SHA256

    f58ec2c50cbcdc2ccc677b63d3f10f85487d7457fb4b9e1231f83df80afb3766

    SHA512

    39ac9e4d439942572380f257026363c03925a2fab150b331c74377c8bd364ba5a320914cc2c7a421ed85a0fe09260ab434093f3fc49a49381e306014894adc5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b17de3a590c1f668f6038dc6b7a50eb6

    SHA1

    923cc5bb803fb58195240ed971aedb38290d95a5

    SHA256

    d7e0de57a5aab59455e2db07550bc6a87fcea2087f350a10e2f1fc8ae42b3a6d

    SHA512

    9ae16698e54a130add8d34a938923cd7c15ebf2396dd5a112dc81dd7a73427baa3a8e3ea49ea0e4d653a393db88cc1effe3bdc0c0f9cd1a29c18be7d2b45f738

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6298ad248228bb968a44b8fdedb96395

    SHA1

    4941db2fbbede4709e9d0d98d28fba140eab5912

    SHA256

    835b0fd217c2293a18e78cbd5591666a76d5d8d15e938201ad6235f02871ecd7

    SHA512

    15b328fc7aee33d6bcd430fa4c322f3814a1dd1a465ac686315369215091ea03c1bdd3f086fd8c26d7ecaca3cfdfd5e62ebbf5dd7b47bbed9d6211ba49518885

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4860b0004478bef9b9823d46435a52af

    SHA1

    a5d30c56617b98de702d28d7eac089b8c9140eaa

    SHA256

    78a529da0baa92f05f637a16b16e7c7ba78adca489c4d3d4aade08816206950d

    SHA512

    d3f522742f660c3f755bfd2d463f368d206caaebe1bca85b5e900a81395be89cc6f3845a2e85840bdc9a9118d830f0d07e2799d02744e308de17fd3f4b898175

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fefea08b91d10a4775fe511791f335e1

    SHA1

    cdbd03a1baed79b55546b2183f27a149bbcaa544

    SHA256

    ce9a10e4222ec9ee8f062a0f8cb4f3e03a9006cb645bfe1efcdb39bea4931c52

    SHA512

    32cb80620b7caaea9fa4e48dd62d715794f6a2b3058b188827b95e9ec0c3d3cd622d22b95c7da18cb8999edc37b241ded00601a98e35f7797487282c54f4f8b9

  • C:\Users\Admin\AppData\Local\Temp\Cab1778.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar185C.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a