Analysis

  • max time kernel
    135s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    23/07/2024, 01:41

General

  • Target

    65a78990b5f9d849cd9cca5b444ee898_JaffaCakes118.html

  • Size

    44KB

  • MD5

    65a78990b5f9d849cd9cca5b444ee898

  • SHA1

    89b8ae3aaa5cbce9f8651fabc5b5d20d18ad644e

  • SHA256

    49300a28884b893dd58168eda8d9ce0dfc8094cb326853ab7eec2834312d38b4

  • SHA512

    5f7dd7c6a02168336f1536749b0206ddf3e6ff6eb3623e3ba1708a87641ce213d057d054e644c1c0c2608d84607f1758ef8ce57bdb177b5dbd230fa47e2cbdf3

  • SSDEEP

    768:3hJuDp4ReyjRa4GQ/1NYNRzz2qYSG9+/A:3hRjRas/1NUzz2FSk+Y

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\65a78990b5f9d849cd9cca5b444ee898_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1952
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1952 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2148

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          26bad53c610ad79ba2614372664506ab

          SHA1

          096f681b76ed43ccc396b60357ef1dab8e125706

          SHA256

          a6035aaf0cfe4fcae0aaee70d453d8e97444fec6bb2f8b5dba7c9a4b0170db81

          SHA512

          052d0b07448edbd04485b8c60e0792c20859f5fd099525359c58218782cd40f3791e3fcaaa941ca826609a2bd3bcab1566b031405b058e42fe074fb4af5a0468

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fce250c24dd9edc4ef26ecb080a6d0ff

          SHA1

          8a3fdd24b8627157ede80e232367281d53d8312b

          SHA256

          4d86528040b811f215b75fb8c328a4d936dec4f788a6f10cafa2f728a99c7119

          SHA512

          223d42dd21d1fe186195e028867f27e393b52a44d5a02cfc10e02d688635a7b895867d8909835e3b2185eba193f10caa12c8bd909dfee0b44c067acb525b8d94

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a32b9541a376821003446b2bc2970769

          SHA1

          c874de657080b4680ce8435ea5231483ecab6258

          SHA256

          a1e4084350fe4687afffdf7657d287ba403591c9e28608df2558d0a5d7b13522

          SHA512

          760ad0a51c561a7ea36c9ebe0ea8cebe9f0d90463a32a75037be855fe67e1a3ace1db00bf121a3d421eeb80b5180a4e8aca3410ee7582387170105efd2a5a453

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ca02019d4214acfa9d0cde8051fe8ac3

          SHA1

          e56a3d3ba3a7f7cd9aaa637904e58e75682a68b8

          SHA256

          07cb7f3d409a2783bee7016516b98e9bb3b38692db31c096992e201e99453c89

          SHA512

          d1da505a1a6678824d838187b5409fb69129488253ee01c4adea5d3f29635a37bf15cf0525bada0829af26ea69e160e429246bccab8c4f01d29cbed52253882f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          7db5d95649ff7895abeb630d6709016f

          SHA1

          1b78948f683564e9b5a220b6426eb4da503b478e

          SHA256

          3631686480d4998917deb1cdaff784c66b3286f144a44c4168daf6b22975c638

          SHA512

          144087e2e5b626cef99a59ab0fdf3e7019528af1fdac7a87e0f54b58b59f141e8502b240c88e5dc81c89bac2795538aa7ade663130fe484699995ac1ed1954f0

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e8ea89c95d0b5d47096e0287f7c04d88

          SHA1

          e65296c35f55e62834e7e838195aaf338bb8144f

          SHA256

          919f089ac0ecf3a62a836b852e476fc721c2a83432f0ce2dfc7acc8143625dc3

          SHA512

          0299c81292c0466343552baaaf09470c3c2165c83509254de362ad90e948aa113c5f4422fe184c978f3cc47107cd0c893ef36a9075618d90e06520d34d36542b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2ea133abc35523ab9ef81db14e1d2b62

          SHA1

          9ede82293aa9795f72c92b767936b501b5816c4e

          SHA256

          3525ace49aae09f3d77f45dd6190e485696d27f254f1c6957bcf3b4158f85df4

          SHA512

          b62b884c894030a0392767ab5b956fdbf55e545f36b617ac50dde4ef1e671519b65d53401b97281f37f2c150fc13aaefbcdf6a59dd37fd72624cd86823a3fd77

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          537a26f9bf2ba2968d1184e52d2ea255

          SHA1

          9eafaff509750f60e1c6b4356712e695a97ce585

          SHA256

          d373d394685c91610135dfec8eba4b1ee9c3889ccbd57e4ecd2354c863759799

          SHA512

          72b9c3187139bec03a8de1da1043bd294f36536bc04e38e9f1d3f978b0fd6592207efdd271377d6695154d7e5772f34735b9cfd28b2499b18a5f924a95a4e081

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bf8dcd73b27a151007311714fa6169f2

          SHA1

          ea28d51e73898601ac193dc3abd83fb0fc0a9dc0

          SHA256

          ec20820642392abbe7479ce39a1100d25918c230b45c7d9cc92a6c416daa94f1

          SHA512

          f46df17965062b87823bc911cc85d8e23a342003cd010326c93b052343c00484baf2f1ffb337083e7f05509c0d365ce541106a9ae2dbe27c831b873184030c80

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ba4923fcc6cbedb654a22802455e9e74

          SHA1

          c5403aa482dc0f4e3396ecaec0b9f4053b422bdf

          SHA256

          a36b21931b2687ac54b2dfd97388e0861a7e488150f73c4a559eeee403f19b4f

          SHA512

          a06a1bf9968c8513d3b1bc415573f96406eafae4fd623743e4ac5833cea5b8c1445bdb832065e31a2a6f3a06d56ced7f278001fd0a4a1a1d3c54478518dba841

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d753f6ceb5f4a3f8b720ad4c699d7911

          SHA1

          2ef002ffe7e948d85ef030427974efef78b2f86f

          SHA256

          c8477f4e132c15d377dbd3839973c4cc30ba84238425f11df59d6e454104f8ee

          SHA512

          5225e92fc24b5aae54473cb7f1f02075bbd2c492050256c54057553b8a022c64076cecded20405f179a2a5a95fac29314e1a1286ca559cee96a75fc402f11808

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          820a7535f8882d740b2098d2f9408861

          SHA1

          70e63f41c57981b8c9220fe2e281341d4fe918f3

          SHA256

          afce1fbb9c2f23b5a37d84e27d5b9622d727fa1238b0ff18444d8d8e009f9a33

          SHA512

          444cbb3dcf091077d8c1b10497dd979a76906cd8b0720995d41b14b38aaf5882db479185c9d517f6acb826dbaee25ae310d34d3321d0cc68b7241fd41e489c58

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          32988e31dbaa218fba9fa62e81db633a

          SHA1

          8bd4c56da6943c88a638a886e10e23c6d7eaadf8

          SHA256

          ebb538055f177502ea54e661e1c3da21d13ada1d3856a10411094d5ffd4e72d3

          SHA512

          5e3c2b18f2dc465be57c9f5ac7af3331d7afb0458926a9d7067019d6b118a4b1d3334110fc29a92f988c3c374102e19a7f9ad2cd7e278066854cf1c1c6212f4e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a441ef6b268eebd937c554f8e56a1866

          SHA1

          bc0a3389ee6bdf8712943aa5feb8a17ea370d306

          SHA256

          308f87dd044d1a5124b1c6b2c26a5f696207bb7d5b1a37841116ff70e95cff23

          SHA512

          943e4e4c20041620bafba955a93554b372a44e51e82d7659a8529511a012ba98b5a2bc40c82e13c49f60aee4821af2aa705a073f130a3f3b8e40d98bef27c2bb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3c9983791af88820009678233555468b

          SHA1

          0c49a954928ea130333240e44c0ee231175a23f1

          SHA256

          e0c81299a34b444e86afdf4232953b200f6f2c0df7ed1d90df89386d05fff34b

          SHA512

          64fcd3f3c8bdd2d32afd284c4caf6123a76f992196d3834c8d12d587dbdffbde43ce07b760bf01d57c79d58a894731c2e93b06d354dd32e4b233429c06097adf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ffbe73902c607fb48638f7edde1e3544

          SHA1

          c5f48fb627ecf0cf8ef9b38d2394170fbb6db615

          SHA256

          01c2f1cd9957c46e18ab61d80e4b7549e86e200056e5da83c38544cef0b36360

          SHA512

          80cd1bd3d9b0f5f9605da3e77e2753223bab936024154543ef6b80686d8150518372641b7e55f77ce3ccd1fd92d220a392936946e1efe2bfdb41b026b2566705

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9003e6411e13ef13b4226710935f2e94

          SHA1

          37a28e6c69fad90983ce4645bd2ce945150c0fb4

          SHA256

          be8abf436b89dab1a6d94daeee7fddd3249fa28ea60d3808addf4023e9feb873

          SHA512

          4df04f62acd2aa0ceda736d3923c15984eb59c27f2f75951e9640d4575d5b3583dabbaa7bae293485f7aece7d541e2441cf5ae44197ddc5a37fd23db3ad68fa3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          10579257e0dfd18cef98a01ee8ac3d1f

          SHA1

          d8a7103ee07d16ac8b7af319d2a531201976a3ca

          SHA256

          f850432bf96d2d653d09946df0ab57160b718acd008a4df78f8d1018a5731286

          SHA512

          ae5ef11b7bad0db7940de17d1630c47ae599ecbb0a8157869308b02bee5881cab654028bf5a48bb7ec92abba72e7da8651e251fd98bcb6e5dc6b9675b2983d11

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f43db02b5521724481964c2ef748c275

          SHA1

          1aaf3ce2f1b90342857f73e83572d850aa9c4a09

          SHA256

          7cad25d128aa9956541f1198997723efa5bdf48b54d99217b1279d36da5ed331

          SHA512

          7351e9801170a9a718233e1acdb88f71d0202cdb0e84ff1071333b4b5ca94c43ef21758350d69ea78a0948cb174089ce18f07695af91bc92bf5bf5f0a74a1987

        • C:\Users\Admin\AppData\Local\Temp\Cab9BD3.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\Tar9D01.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b