Analysis

  • max time kernel
    145s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    15/07/2024, 12:27

General

  • Target

    49c71055c624f6750be63860241b6a95_JaffaCakes118.html

  • Size

    12KB

  • MD5

    49c71055c624f6750be63860241b6a95

  • SHA1

    2301d33d803731c13bb3bdf9d35d7dc7ce061bdc

  • SHA256

    148e4d6d0855d724e8dac7b41f0922c152cc8e5fe9ea26f271d05785dbfa32e7

  • SHA512

    1d7ee78e67a3fe977a0976e7a06521cd3e114ec48376c12762cd7d90077a910b6dbb497a09e328cee97567e14608b549fdad00461b30bd347b802adcc3076bc9

  • SSDEEP

    192:8+8agwOw8QEQOQpuWQWac2gTMD+aY19t8/UMNt:8+yDw8thqRn2uMD4TWcMt

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\49c71055c624f6750be63860241b6a95_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2468
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2468 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2440

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fbacdad9c06be252686db4b933f3848

    SHA1

    2e2f63bcd73cbd72b000db14ddb9eae533223c2c

    SHA256

    9e206086e190687a3e6514846e595d0cfc3c4e53dd9e0dcf6b982c954b02afed

    SHA512

    a87610a3b9b0195dc196d4b3c46f731b48c191f6817b747508a543758d847b76a75c4fe8adc2503b4b9f16b689b1e0d102af788ba94774104ec3d8c8be8d8b22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15c6c65d643bf1a7557d27de97c2bf08

    SHA1

    faa20a1de1182a24159a8be9c8776b02579e6375

    SHA256

    f23b7159baa8488ecd78a14db07500e0247e538234de819416c3a989eed2ae1d

    SHA512

    d749e10fc8c9f9e54d587ef4b0c6802f2c8f261ff5bee19cc9e6ae8c13c938e578ce70d2835540ccacd9341d7e839a4165a9305d141feef0235dc757bb96bfea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e1860846a5ceb59d1f878ee80913362

    SHA1

    cc2be745923eeec28418f7293d83bc4d4befc31d

    SHA256

    a064352fc9843f3e011db754b6ea59c197819216c39b755903bf4e863fc6d8a1

    SHA512

    875fd4cdca19777e37573bb7c1dd0bd1a1a6be3c9ae562461335e7f59cd05bf93bdcc1d1d7c8a299dc35ff6d942092e3f038f6381bffce07ad3284cf0893bb3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e0c15555c38ee9f3ef630d147a47211

    SHA1

    b9a139c56d86c9b400655125e14bf528014a4cfa

    SHA256

    1d7946e8ce091add092f5a0bf224d50c4292ad61395378e45e496c85c358d9f8

    SHA512

    bea58600cfb255a4da3899ea506e1c1e2a211a5184b9a66b29795ef5df3929b32c0a82e8b6ce137a87af4a1a3843a1c4b014eb2704eda4efae8f3edb7d021cf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd9f4bd6d29c59e1eda9e549649f33bb

    SHA1

    4f7714874943f59b69cca1c560aa24a3f06cbb79

    SHA256

    da0d24649eaab8db610a4e9d4b2881d3c2d5cc325ca95b7ae8551381f1f55f26

    SHA512

    6333375aa4748bf3f01019f5229155b68300c9909e2aa79a1a7e76fd5bd72d189f65005e0e54ec09af215ded0f2b6f97d6e1e04bb5ff8fc42158f07dc122cd21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb766ddce059e2ef16ecc35789a92e64

    SHA1

    548ac9c7ad1d2c9c51a0d4709dabd330a511b702

    SHA256

    ef8d08c333177cb8241cb021b73cf812757f44e8ade5e3b5712517d3eb9d3816

    SHA512

    eb7643d3027a65802eab1bfe249116086c23c9f99ade6d93b27c772a5b5b4508cb5a7a8eeb6bab3b8c938dbecb439a5d22c17160c1e5f05806d873b0b7768398

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a87a6bf7518c143476d7da8e95dfa9f4

    SHA1

    de3a99083f4c0828b223202c44e580d52e33fd9e

    SHA256

    c09b7a3d7dfc858d556d42cc88ba69fcc151517d9ca831dc9bc07bc9e88d2654

    SHA512

    fdd259d1c5e5f2f29cca921a27679fb488786e040c41c9e59592f1074ab41359a2a5d54c119e2e7616a8bf2173c034b0c1c91c66d3d1937f80385ef97bab8734

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fb6417ab595c8eef12a723f5a140a37

    SHA1

    6e4f54c49ad49112fed890412eb9d353e4cc74e2

    SHA256

    be3089070f5f1bf3c93192cb19b1c8c9e0aaa405dce1f3b8805340e0d349d732

    SHA512

    99bfdd6f20ac59470c76ddeb342f5a71630475a0cb7db0bb71f539758293c0346ba774c20b47fa680f86bbe9a74c56eb8864483206af68dc32a28744c60ff02e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4096c66829637c1c91e1e70539c7d5c0

    SHA1

    34971d5a1d01d2fe3d8efcc6e85c4d2bbcf867c1

    SHA256

    d59786cf1e66d9953c39b1629d63e704b8af4331667ddf9578712592c28630ce

    SHA512

    3f69ef7f18ca7805228c3df41a1e63323ed99025548673d47dc609d035c95ea6a6fd553fc927cf1077b708fc9d9e36de6c71d608d66c3a7fe6220d664021d258

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    108f33ff28360758ffba4d7aa0473044

    SHA1

    1653c3e8167a6cb8b88c2d641a0cb587e77cbe7c

    SHA256

    5125f229bbcd3320fde961de9e087e7b38cd835c7704692dbfa2eddf846840ef

    SHA512

    48386accdb089a0ca1e262ee4a84f65c20bf14af168b256fc2bd8252a4b338365e48c5f5234a60a7e750293d84f9f2c48e838f6bebf7de1c6ca3556919943ee3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0746231076cece49a694bd5cab27bb6b

    SHA1

    e7347e9bb790004806edf390512a9e3f6c082222

    SHA256

    31e23ccf312de29c72e703cbd056e2870e4fee74c50d16245ca176eb453f1fa1

    SHA512

    03accc2ad7f090dbf9735302e5cd6b6ccf304667024d90fb6f3fe904a50a14933c5d6189c0810d870a7d7508d98f51931fbfd506e5647a3c6f99f12c3066758f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea2f454b880a002def5a2d2a82274c1f

    SHA1

    37791196e6d2b40c800a0d4dd9e7ace696de9fd3

    SHA256

    083a408168dee2b0679fb01146db40f6013aea299245cecd4703ceeda8c4bc44

    SHA512

    fa5ed7ee0f9f546b548b14ee6c994d36dd515a471426d5b081bc16c77eefdbb82ee2bb0e94003e0843cc07febe544379cd25ea0d0c5465ed9e6d233af7f2015c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a22d3ee03666a360a0eca061411fe88

    SHA1

    1ac3848d312eb6115950f5e2112a4ef0702b70db

    SHA256

    61307d967bde0ec3e32013651d1fe04015287a5f7f522e6a2dc44f4f70714d57

    SHA512

    9144f4b887584e85bfeea7d4eaca035a110db2c1bc8a40d8cc1094e62eb41d474153717c1bbf3c4e4ef7fd1011ae94dd9573b279a5709fbf754a935e77187c8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d02beed4850a77be99a289d346e46104

    SHA1

    b176d0c8ddb8637871bcc66df7de092f9424b20d

    SHA256

    1cbf5ccd639780e28e53ff80df6add6a3c00aecb8cca0ee0b3082cde30692f0b

    SHA512

    a30d49cd26d355939eed394f83740ee325515ec58b5981ef9731366e9a3c4c871d663354f242555e263e2a5dab30116b56f5a8af17242d1b1069e9eccbb97497

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    778e767faa7af98d51dbbc7320a16310

    SHA1

    db280ccf2da416705ba3541672475eb148767d89

    SHA256

    3802984b134b9149001a091e388d35df68cfa43d498564e247cfd11ec935d360

    SHA512

    725e008bc6840de3e38c83049129fac5d98d6f2ed24aabcd83131921008220e2bb7559f120b64fbc984af0e4ea4f57c75f00635e39a8fb4cecc670b495a382e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acf02965c110ed41e5f704d472d62923

    SHA1

    f3ea6901411de6b6979eb974da12cd8c3012b5bd

    SHA256

    a75a295a0ac7397c2f494c65f77a0e305e371cc89df387437add853cbbd53da1

    SHA512

    560ce3b35be930c4bf900a7d0ca610b9b8df0d9c2c9d9366a2151e3934a2955c2c0403cb656c948d840436436ba770e8ea06cfedd891cd51f7a5e92e9e8107a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7be7260d828fb5dde20963bbb1c92852

    SHA1

    63a6e667f9d1c1baf7e36f3c4e254889692dfd3b

    SHA256

    8c13f2533bc0f4a4b1b97f5a3d21128b37b43d7badcff9d01d4403b0c315d437

    SHA512

    a4706df0e94ff20ea5c344aeb418200056b1cc12ec3aca31a78d6b4e8f67137ac5997c512733d3975da6a9a6f10182d78956147c71bcbadce2444efa03390c55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf6a9d6b71df7f13dc3030b93dfb33a9

    SHA1

    37234c9d1b7218d7fc52660a4b3d347ef1f8200f

    SHA256

    3e076aa5b0f2f6caaaf0c6ac339d2a3c13603e9780bb7c72dc5f7a8c4c6fdd4a

    SHA512

    b1451721f07f3db4800c4929c3f0c6e81bc20e4e4adf18a6807d21372b3a1b50ed32b4520351d5a005f19fd9483d02c6694c27430c17fc7dceee924df4fa68c9

  • C:\Users\Admin\AppData\Local\Temp\Cab1593.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1692.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b