Analysis

  • max time kernel
    119s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17-05-2024 16:37

General

  • Target

    50721bb579b2428c1c4eff82a4266635_JaffaCakes118.html

  • Size

    27KB

  • MD5

    50721bb579b2428c1c4eff82a4266635

  • SHA1

    18eb0998336cea1a9de22d9765890ea113c20b4e

  • SHA256

    b404cda4a424c04573d14e2dbb6f1e10e77efde1ef57545a0479f496f98b93e0

  • SHA512

    0baa7139146b5eb645c0f26142f35a4d7269187cdc6cb4b4a3da07b654e7c37346741858f68defafa1c5347dd637bf3ffdfd7254da80904a51b27b59542eb091

  • SSDEEP

    192:uwfsb5n6unQjxn5Q/xnQiecNnxnQOkEntrLnQTbnRnQ9e24m60ZkyQl7MB8qnYnq:PQ/jLgKkFSeBy

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\50721bb579b2428c1c4eff82a4266635_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1708
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1708 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d440e4038d7e27c6a31c5086761da14

    SHA1

    f31c1c0071aab49d771091dc1ed9ca05314dff51

    SHA256

    e7974b4305027e633a4eea6be433dde74f2cf18b09e30224e19faeac6d15f22e

    SHA512

    1999cd2553668562b4c057f13ff434595ef067db59812b4e290eda15debdca41f63814c72ff973919a613a0837b9e49a9092a5350a3da710d8843a59297492c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0a498225955381a06f2ebb73bf395cb8

    SHA1

    701eeccc7fde4bc046b8f4d39495d3993be91bb0

    SHA256

    1a8aac7f9a1f58d2bb29bb59a6e70b12d29661e46d2b5d3b89ad4facbe90b360

    SHA512

    edeb1d022c3adb8e5143d8f8e8f6148658e980fbddfe051cc18529bf7e669098049065914e832f629a59ecdaaad51f746de37ab51a646b71fe5bad03b49fcd9a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a5dbec49dd238ebc5a0529a38ae4fe70

    SHA1

    6ee3f20393f42ed40f0a0440dd158643702856d3

    SHA256

    f13171197ff7ed13e020798a3e506db336b26f353f59135fde156ee4472e7245

    SHA512

    28cf3b4c2a37ebd28d2f2f32dac690e6f60f8360904dfeb12c4625a710eb0fc0dbc0537ce5d167eb456964470e310fc1e583e0aeb8171a0f1e87c92ac00f58a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f9af0815fada4248394f76ab803b2594

    SHA1

    9cfb019c4a44826d2def762cbf388d72f903715c

    SHA256

    2b60fe744c6c85218f316328f47504d05604521084fe57adf498d03ed8efef81

    SHA512

    a94b799aff49262729739ba108fff7a5f67cbd09e63a736e41fda4b03a4c9abd73457b51da8cb1049bbc5048fad50486401131fb692f3db960f8613599cf2f0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    78fee7394eeca9fe37da9e4e37dadecc

    SHA1

    ae6023825967aae04c7ce35170c04ea54f8715ab

    SHA256

    f7dff47db171a8bc5648411e4d38e3c28ddb370c153e8f90990a2fe2acd7c610

    SHA512

    bb95418c578cc64600a7e3c96b6f07a727b7f79a12a83f282351f7c11834f32755a480e1765d10ebcff2bac16bd7dae266c22939e46880ab9152fc6c177aa81b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    72b78e8b9bb7b0c11ac18cdcb0c783bc

    SHA1

    116370bc1d442cab587471c19fa325d497956cad

    SHA256

    2ad0d1852377c7ecc3b8c56fe25bf4467d1780d1296c6854b5a60778d6bcfe03

    SHA512

    3bbddde85ca09d38e5e8405054442b70324e63daad12102d699b478542b141682787f98347a35b65f7ee0fa7445c6cb0e7a29b9d4a53fdc8955eb606f5699ccd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    173f8a374d429aaecf32c9352075c0ae

    SHA1

    dd2ef67ac04a532a72b12ed61b3c46ad04f03247

    SHA256

    fc635d324b4435ef7157551a92ece50e36d8c392676b6321a435bbbf58958c99

    SHA512

    70729837c677a99b276f3b02efa493b5e50276fb2b49022f710be1e4a4fcb0ae9328fbcea13744a899bc8366b915f8bd390ce5948faab63ac76cb3c0cf9223ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d1a84c8840cf83a504e83772af6754b

    SHA1

    1e30583bd85b3feaeb17954b9f42ca4cd9864463

    SHA256

    ded865d0d111e9c2b4c127c5c9658ebf2747b86ff571eb3896a23b1df6e94a53

    SHA512

    ea764f2202a4fd5ee08783822a85d68965b79e6d3ab6c14b005b140d2ebd1063708232537e7a5eb6cc3930f5432e812203dc76ec8ff2b910c2c281af3aa55c60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e88829fcb34464cf001734118042a26e

    SHA1

    56323c39a40cd08ab874b6c11c8fc34628ac0a50

    SHA256

    6662d571092414a191a9eefd07420db60de6fdddf87f9a3281eaa61b64afba6e

    SHA512

    5a3e8da29a0661ca860e650236de627504b6f6f893d1cb1314d09ea6102789b2da8fc9464b43b1028d4534cdf19d1a8aa980e2a5d9bce612a64b219774d552d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e24c53c3e3d1f84eccb35575b631eda2

    SHA1

    52e0e3b7d56641ce27bc3776a5801bf526291346

    SHA256

    72935a13103595d8f0d26be16f94a697f39f65a6c0f9619f03aab0cec1a0c6c9

    SHA512

    8136ad1a6ab2ccd625a03cfee475db32e5bf37bea40dcf89117c74f47b5592c7dd6a9d5215eedda82b1d25d1f067692b3dec6483ee2d9010cb5826bb080fda82

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41c6397fb5ec7d993ab0d50592125d91

    SHA1

    a10048a542db440373bd562f23062dda23851426

    SHA256

    ac9081398bbb6e1618e44f4a2c734cfe3b3b5cdd7c22b4bed105acccee803e14

    SHA512

    76d1531927336a7583cb8ce3528cd4f27d9acac41a7260270250875dd649f06d9f7f0cba336c1e4c85f066a07204b3eac56d2609a7749a174981c7b5a8f44c2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b9fdf99478d7396a022404d7ea92579d

    SHA1

    f9eeea7aed15acab274bab146b432ff763422cd1

    SHA256

    1012b16bb93dcc33cf3716e9d1b8d8fa7f439c22dcdf34076ce72c32e34d5022

    SHA512

    b247f793ec13fe1d9b3e77d8b63e09cfff9dbed3224edab3a548148a3f33c208e675f506383d26cf7d7d74529e230e4ea3e151b66cbe829fdd6ca375d8a00036

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c41cf042b8a20692f174cf09a1da9915

    SHA1

    253e9ce8d1b0c90e50a54bd673e59e0b0979db50

    SHA256

    3eac1bb2cc034c95534d86f15f9c07aebf9d9479523eaf1826735b400b6407ad

    SHA512

    493b4e37ba59f33c0364688548e6b408aa3aaffcbe5937e32e8c8136bd6dd4517e5c750d276e2207cecb694a33aceba9e02c525c8851976bd053086379c1b6aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    23197ccc13868c5a3ef91604326c0fdc

    SHA1

    5dab5532c707d6ca413e5778724983649c424aad

    SHA256

    1dcf33f11ffc9ff4bebe6456238436387fb44a50ab8fa0e8eb94ab9cd0ba9154

    SHA512

    03f0ed5d5f6f9a1f21571c6b6e9a6841d9626790d3da045e5e8d7e0eaf57cead71b866b5321bd09c79402dafa3a7f1bb437b2170196a7ff6273cf757371796b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8cd89b4dc0b1bbf507d568d702d33dc3

    SHA1

    154c6f0a3998316a5cc928f98d62ed83c6112f23

    SHA256

    2f32ac3b19139701165082ac942fa5999051bcda1073605d74adfb6575b9a11a

    SHA512

    ab43bef0c71f3d25efd9ac2798e1ec4a7a54b6eb6225695819c1428aeb25e3637c81bcc1dcffddfcafaaf5a093c14d5d082cae9fc5be1120b1dc8bd06642244c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    077fd3b8416d4c50cb4e7c6efdaec610

    SHA1

    d746782e3ae4f2865aa63559befbc53bd4341888

    SHA256

    5eb0593740963d887121f7cd67bb37c82f49f61b222b597228ea7431b50f5c4c

    SHA512

    bb6f350462181b8f4c9bb944aced1716fe6fc057da3a557408f10a13d7466b2d42e0d0434e8709c8616a2848365848c47564879e0fa5efc7145cca2200d0fa70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0ae8a6a34c4fe7ade40fa0236b77b91

    SHA1

    eb5836784542c3e737f2b4ff785199493616edd1

    SHA256

    5608bd2dbd3a0c1dd30dd43fe7c9701864934160e5314b51ed0122dc57677ff2

    SHA512

    fc4c80c13ef7550eb9cedbd0e4c3a5e974b05ec74daaaf7f973f533b60c5ebaf1da7d7a9be10798238bdb1c4fbceafe31d225b2309164ff674958ae767892732

  • C:\Users\Admin\AppData\Local\Temp\CabACE4.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\TarAE15.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a