Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    25/07/2024, 12:12

General

  • Target

    6f85c99be1de453fcccdff6fb6b22e96_JaffaCakes118.html

  • Size

    11KB

  • MD5

    6f85c99be1de453fcccdff6fb6b22e96

  • SHA1

    b69a79abb191c219fa6a7072863da63eeac4078e

  • SHA256

    58475a6caf9ce8d4a80b93f21dd2f6bb3d9b75733eceb7357420536f0f632594

  • SHA512

    d22d8fa43c87163859811c16473b22c5896a417a1db69a7600270516160249276776fc9a66ca4b647aceef7f474b56e3fc0668a33857f6a086fe4bd5ffaa372f

  • SSDEEP

    96:uzVs+ux7VNRLLY1k9o84d12ef7CSTU6GT/kSxp9dk55KL/kLSWVkLulVHcEZ7rur:csz7zRAYS/LiWQaSWIuPHb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6f85c99be1de453fcccdff6fb6b22e96_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2560
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2560 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2520

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed9f5e4cdd2d405b110c62ef81330421

    SHA1

    06392f4dac8af5845272f2b45220c05f9c14bfce

    SHA256

    69e27ac0bc77b1f19565dc8fd91ef581cecc5c63916cef198cbc7591804faad2

    SHA512

    89d43b9916539b81a5a3a808c21c9827e2b099300534a8517e562597a30832f84abda442db8d616cd205a080bd9b13b21f6b5ebcfcbf839c3a9f458955bd0cb7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    049c5b8b0a88cffa6e8e5e2de6b42645

    SHA1

    a05d2edffe1411886f78587172f6e166280405f2

    SHA256

    562137828c615e5bc817c4739e578edbe97a126f19cdc94c0c5af6bd99490eb9

    SHA512

    b70996afdb13fff4b87d9a5791e76922fd8fc9df262819d28ebdf328d2fd31e25d18f236cd4fe23108b5a0f4296dcb4dfa95c8837a7558f9e889de2aa898953f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43a9d659b2d33988fe95be8aaa4b2050

    SHA1

    1c7bf8164176f0feae3484e9e1a5397c0d96b3c5

    SHA256

    6f83d8eccb91dedfe01c97e7da74ce804661c415a394d40dfd0645efb6d0f027

    SHA512

    8d9c6f97c3bd23d24d1f902fb7e4468d5bab2040462c9943602d486bf23b86db796e6a73064f3506da7e4d3f162dd3c67e4d5c5f957b6db032d43c1c8a3e2e34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb7c43c2d09be41e893fd8b2e8cedf52

    SHA1

    f60b49369978d79443da2eb537b2f7c4eee097e5

    SHA256

    0f2783c4166fe1bed0e37bdf656225796bb58d1102a54a329bbc139bda6a747e

    SHA512

    5c74cd672210987198829480fd41a7ef3e5bad0ae435ac7ef3c0d786001aa3a1d90035808e099e107791a42f8f4e4b20baaff06e5dd85a39299fa1a923ef9807

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee7c6fe08eedcdb5c60e2fc6ee9e3752

    SHA1

    50a9f5ea01a238372f18d30261013b64e93ca218

    SHA256

    5b4ae59edd595f2235e09a16efe540f5dd0982b5dc9dee822d7101f0d8bb24e4

    SHA512

    276afbd9ed8f5d586f7ab8814a642fe2db377fb9f7f465f71f741bc09bf019d1492dac1ce40fa6e356e529895641885d44c179899788b6d361eb7b9504ab3e51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c18f200d45131827585ec9c89d97d3c1

    SHA1

    e0b584440ea37638b2c63d1548a54c4c21c17bc5

    SHA256

    9ea49af35b2c65b47cbd176223c227904998effae001e971892de87938b254b1

    SHA512

    a113166d483b0a7b988753de1ef9b0b06cb3e376654662edd49006f12731a0a88fdbb77792a999795729a78bd19dad142f1a2b68bd999129a97ce37bef8df925

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    314d1f34eb79e09c2af6004579c8d56c

    SHA1

    30a69f679ded30d4cdc2c923dee39c9b04b4e694

    SHA256

    43a689650adcb132668c9c97f252e369313274c4a03db9417b01b0067d030f9e

    SHA512

    ab77aa301989afb5b7d324bd60554ce14a7cd06cbda0a26d6c23deafabfb5151bc9c5d0d6d6a7fa5bbf26f12f159924395062f99d0d13c600e8b83f104698763

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b1855ff83fe108ffb7352f8d8579e9a

    SHA1

    b86de0b6ff4417393eda6e0509015d3ee03b0e51

    SHA256

    17a689c3e4ce210ef3e4520d80c673c41957648a98fa4f7427370a6a3c1251a1

    SHA512

    5f60f41ad5d708a598ad52538b55e1e73864a70cb487bdeb2c4f7290ca0c4b9b3ab1d9a60a1b54ce9c1c6af517f59e7c429bd96e55a5e8ebef62485bae12583c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f49fe0f1d8c4d48f2159a10b741406c

    SHA1

    1e4ec0f9f9f6b4e949be6e03cf93c188a4949667

    SHA256

    32d02f8b6bf3d39f762758f4b178a51e5a191f7b2a4b4da5f452a99b0cdb80b4

    SHA512

    d834c887db9ac72be176285447ef76f1e3f3f2fcf4f2b092c692f122d59ea47323e887c7cb67ba493eda9de4845974e40b7df77ea52bb6e99a83df3948bb2f6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cefb6130d8242ebc2114f2c769757cf4

    SHA1

    7fb277fc34e661817dc65f71078ed21c80704b21

    SHA256

    d71a13e043b82cd1840ad38957c5523d2ebcf235c621bf0eaebcb2cb3cdf09a7

    SHA512

    466ef25ba5537744f79ae0261daf97ca681c7b12b56caa552897d2b79963d5dc83910393fafb760c0457f74c4a73b496e1695d3e359be082085b849455fc4d3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4d68da0f4d6a3f122861c669c1c94a24

    SHA1

    66d0496b02d438307282889684df06c37ffae99b

    SHA256

    4c03178d765604d409d556e9b3122c3cfb8e502de006e16e984d2cf8abec5f2a

    SHA512

    0822e3a6c21b63c0e7b618b8355c39fb9bf7c8b9e37ac730612a8c761274fcf701c4386e574e84a69226553470c771f598344f7ab2949143e89293ca56c3815e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eceb3f17931fab82c0ae45ce5b471884

    SHA1

    0cd080183ae25f0db922d8c7b3eb49b8f08a3816

    SHA256

    c4185ae046574b2c4c58f5a5e3ced1a0a9e3ccb9f29dc7d2723dadcdc587a858

    SHA512

    606f18bde9da39bbeba8084246d92b57968abe25327cc83f9cdafda46431b4c3aaa6e30f4a89327a6dee03c2b7ea1a158b1e6dc2b41295b9fe5f9b137a46da3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    056558b09aa1b55f12f1902aae8e4201

    SHA1

    6d49ce114e0fb30878393ef5571efca339031b3e

    SHA256

    8388c48d4ce51f78c8e712c9ecc164839dddf5f72d40357cd7375534eead960c

    SHA512

    e92ee35cf10145eb37b7398bcfae1a09b53473a3a077f74b2442e12eb2d1e2c85b689ec80a379f1cd842079bf1045be628249e3ab62c5a06bdd4c4d9abd474f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b32e0263a99c90663f85d5f56dcfba88

    SHA1

    8b8ae74fd7caebc22b9acdc87d736c2e121e03aa

    SHA256

    3fffdd480bad0e5ad61e5b3a1fd09b92ea5de373570a3baf1455d7e58fac597d

    SHA512

    f4f2f1078ab049f1aa236f83c49e754865a92d8c508f76558f5eab0903342d1a28ccb8c7d77f68ff3d096cd4ff39c6fb67b6b7832a2184beb25fde2e4382d9ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c6805e1e95181b9f5d78b98bdc87d1c

    SHA1

    8c17261206f7b8018f318c9070a9337cf211a700

    SHA256

    fd95d22f2e05b985fa2cf311a87e62d43541cbe6be97c80452fbcd05966377c5

    SHA512

    816c31b3a921b6badfc108d68386ee51b3428e01f4221e27b577c8593973bb0f1178f4bf67aa39024cef3fb6c1b0f23164c2f89df23262da5190c9f72394b86b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dddeee260ec97dea984da43637324f11

    SHA1

    3ae2ae201a3bd9e856193a09910de5dcb0f2116a

    SHA256

    cff11a38a9ad8810e986e0995a64354f9a7653ee09a9eaf8d43895f5b274591e

    SHA512

    55cd9541f2b83c2c983f62e62a384d985153c9dc5f629558a315e1a836a3c4ffcdacf10e5cdc28164e715759f361f3f0e55149c2f6a8f61da24ac8dbe54baf20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24a559cd5936d1939233b7e203aecb15

    SHA1

    cd5f493a98eac0587429a361a615f831251c1779

    SHA256

    82a928bbb15d10a308c93212d7f3f50d4a6696a01868c646c509e8a518c4cfac

    SHA512

    546c7f2dae9ebf41c4376cb8965018eea071265598f930799bff2a6f7b9623fe3131876f9fb4437d9a60c14a45ff8bf26ccc6c72feb5a4c22170f8dbbdb893d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea28fb66ccf7e01f7498353efe2d92c3

    SHA1

    a012738482434e1f02445386a189089f354262cd

    SHA256

    3138d410f3e6ad566945a17c02d9b5c68b55b31664e803f698c2d43478da0a30

    SHA512

    0d43541ea639f6a303a731b0c98b75b671c12e53ff836dc2fdcf10ae9fb52ab012bd47645e36f3814164623354b8149997065fb9b759c7a0c74a9b8081aef3c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6301e77509399f798e00c3d29ea5007

    SHA1

    65038d038c381849e4f309333bb0b5002cc9b87d

    SHA256

    761149d30f4cdacfd19651073fdec6a589caa5fb956e3dc2bbb4978b87e7e514

    SHA512

    60c3297cc5a54659dd2c59823ed4ba0107e2ae011beada6c22801823ff137dbb413ae4ca0d42df8cf4a2ea35ae0eb65eab4193cb926930cfbfa78054c8e7c4c5

  • C:\Users\Admin\AppData\Local\Temp\CabE44A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE4BA.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b