Analysis

  • max time kernel
    139s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    26-07-2024 14:22

General

  • Target

    746d42b70f447dba97ff16192108f281_JaffaCakes118.html

  • Size

    21KB

  • MD5

    746d42b70f447dba97ff16192108f281

  • SHA1

    3687c16a2c91a60c8a0b2e4b9660dcf3881e20a1

  • SHA256

    f4becfbdf191b9768d19d1ce7ec06755606d338cdf340d93b0b53ea2c9c997f0

  • SHA512

    a20254063e9a3be31bd1cb9cdbf597eb1a35379cb43cd91e370c4586ef7beac2e50e30b75d657128c6488bb14ce812c0f2f16ed3cba16fe42aa91a7b1de2675e

  • SSDEEP

    192:FRcR3G15c2143NNHoVIsASFXYHNXIQhfLBaC8ic/XoaHjcYw7rAKEiTerL1:Fa4r14dNHQInSClrMoaHjHJiy1

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\746d42b70f447dba97ff16192108f281_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2468
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2468 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1848

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7fd761e8fe16f27f7ee95eff06603fec

    SHA1

    d6c30ed668f4e6c5a40671452fcd63e62d8bc724

    SHA256

    8c15714c7851903c9a5cd47a4487a3358c95357fd811426bf893f652ce4eadf3

    SHA512

    286356ad8a16de0df5bf7bd7f7b8bd6c6c28922ddf85f9c896d6970df208d2b82aaec6cf344629b73a7af5e7b055ebcc349c9ce4763fbcbfad66b41e7dbd38d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    087de9a692ca29373d944c7f47b018d8

    SHA1

    d4b45b8172739e47150a8d42e5daac22b5d31706

    SHA256

    9e5b19d5f3035439c5bb16b08689e48ec4e02c7b161ecf94f8e3ca1b3284ce25

    SHA512

    6b07884dbd9419db8df68f36099eb895d457ed48698baf46e6a3ae7c62724eff1a1ed4019d4be6bcb49de926e5a800680bef2f0443438745a4bbdf82122326eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5d06d4f8327470370c46a2cffef3af59

    SHA1

    e66aedd078b8e045cd415ac75f336219e121cc69

    SHA256

    347ca42f8245f3484f2986610196da9de4dbfda11aa8d798dec5b7e59892e5fb

    SHA512

    e6c2087f07eacee4b395f684cadddeaa83bfa224bd3de43168f066641a3a76454f67384569d145b12ed8e8d0c7c1a826a3aa2b3a8dbc26f1b861b88a8fe49d3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e99f7c28ff728ae3637f9efdf2e9344e

    SHA1

    e55d167b9cc49e15223108b3951203aed6877def

    SHA256

    1ed560a50622808b032fe48bc73016e14ee0c345d41014128664afba9ae9e27c

    SHA512

    02b6108a9a38719a0a986421882fdfc24eae09b05e15a4ba1fed57eac43f2b5d186f1b0da12884e958f51b5305a250b25b3c6fb4b8276bd4a8a8818392e758da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    5eb9e00d520f74ef7b77de7d31c72824

    SHA1

    9b108107f88369c8c15cc50768be2b90700ff97d

    SHA256

    c91278221948982c22d0b3d2946ad6760f3f28f396c522202fb0b0c94b530e20

    SHA512

    c6e7daa51ac1607ee4411a1258b12385027727f5fa05bdcec55a33817e45df34c6ff0f272c6c3e7e3e8f6f413a7d6205299a324c175d3f1a7203361be1a0909a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d276b58301b5b7a19c9543a9686c1bd0

    SHA1

    11d66846a458a05acbb767f15bc2c07607adb93d

    SHA256

    ae049de5c934b6a68d064fe4e1d481c40da6503cb8291de4af5fcda764773146

    SHA512

    208575980396262d018a6c3595fff360daa8c1f6db1d6962ac60b844ef2e4ec2e652108d30d650ea3ad54d69fc8ac4b7ae503d37d6ce8e4076412c0960c932e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1c67bd4d9813d1f121f195cab34317f8

    SHA1

    c0af31a2f9759b68e657a0357ec4eab9bf7758ab

    SHA256

    ddee63757742304f2f5d406e63907fd94221cb957f54ecde6d2431fb6888ba36

    SHA512

    96c9914e67093b8bb45aa6e3a230426792585e1468a9cb4d7063672a72a2be34ea74defb0a5e6e0d1c34b04ce750ba6b1acd0bd26071d673c59d8df973da4b70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    71d9f316ddc263a4e5a21897ea217585

    SHA1

    79dc8fc2cfd501bc8e6b36b34f1c65f9bf25251d

    SHA256

    b5712f0b04e38d1918738a597b42f1f9f35740b3cdf0425bdb3e220930ffeedd

    SHA512

    bfd3ec314742e53a4544e3eca43ac72c593c1b1ff041328a72d76b9c3eb95bf086cb169224958034ab1ce3ed510103985787250aebb05186d299024a3439e0f3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4034cebbcd4ad8847c7e41e534dd2ff7

    SHA1

    b949527e1fd709188f413df3fd7e94fe68132eb1

    SHA256

    60a2c0a967fa52fc4eac029a108021f4699b6fa4aad474db9fc2ef281cf7dd5b

    SHA512

    9a811b57737f1168292f1f7366e989623357f99581ef4775c3c473b2e5b12450a3c85cf30a42b59cc5166b87cc3d1b67ccf157ab4787d62d18966b6903794975

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    421e87b0c96ad9455fb82f8437e23752

    SHA1

    89ad5cb255ca18f13c8ac56ee3e530b123c225b5

    SHA256

    a513766ab21dce5ca9e246b1fca8b998d98d6eee228d70cc0e6ebd401765ea97

    SHA512

    2b7aeb948c5f4189617247e366435ba7ca54dca11baa7da85af36bc618fe71f94737c103392d0f6ac944f6ec214e33e2d359b89bad90f3e68e959260c78b3a30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9b40e261f1f08d2bf610f6f0ab1f2dac

    SHA1

    59647373286698ee83b47dc4cce1e82188964a2d

    SHA256

    5db07e4fc59a12b54b1303858ff0933acd1671f73a5dd777feafc0a50b0ecef9

    SHA512

    d0c2b05abb130ef903052b5063a12b5770d8ae54374531d13d46085e18bd84b914a4ad79c578e303bba7ad97e9cdc1bd050eb37bc181b65200eb6696b707c60c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2f29a7a2f25dda911f8aba5b11751459

    SHA1

    66dea5df14bffd14739562591f1ea4d90d5252b3

    SHA256

    dd4b2d6e1b1f626e1b3463f0a8f9ecb4f48c730e96d270d818e8d6889eaac0d0

    SHA512

    7436db5d24f73b678f6a165bee935280840d25283f1efdb7492b0853d99180b8bf0de2a9c5bd52de4190a35b136d49e73e6aa805bf53459fb07ede1a30f5ba7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    961620fe532a269a4712157803e1355d

    SHA1

    e05d67060febb390c207eceac0833598a983a120

    SHA256

    6df9442e018f69af719ac155f1d6bf02a20368afbd278b52a337054e9ba42e51

    SHA512

    a4e6b4e0d06773e5bf12875114c4392e5d6729e90346f212c6f4f055a24a33eaf22de271d3b53a74848e2dbf142c1b6facf06831f0cff725d15623e5c42029bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c02f52e314d8d84269d5805ff8dfc325

    SHA1

    351fc0d0a3e9939c2577f97dec80acd3c8b22812

    SHA256

    469ae4f27276f77fcc13d0baf04cbcabe2910cc7c07687cb258adbbf12ec0b05

    SHA512

    227a1d35ea42d8e02840b8db06cc80c3e7932450f130d7e9b4badd2ba391fa4e9c3b7328a371ffadbebb26806359ae9ebb5aeb3a3161c057de0fb08f927a3e39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a7b94e1e45701076f1c73bd5a7ff2791

    SHA1

    42d6e1de36aeadd35c071745c5823ed36e11bee0

    SHA256

    c0ac6e2690ea45e483bb0a396bafb26aa1c437024c72fe415512941c81b27370

    SHA512

    f99ff542394365b04fbd13fc811049d11de1cdb6cdaa51f2f97103dac61a4751461ccb7028a08811337d2004c0f4162f146671b4e7083afa9a8c948852f63721

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    813509d08eecd48631887aed398eac49

    SHA1

    a2d8d4ea420ed132dec5a6bd004e69483e23ec3b

    SHA256

    fbefb3d62d192f3dc7c96501fe3167554533d96fb997068f99aeff6ac1ba6a83

    SHA512

    bbfa3c01c817a761f7108ff3c1a2294a87122d9b8788eaf34fa100eb5a9a28c38eb6465855fea5e94deb456273bf70b63f8ab132a6226d2579a48e6603fd7949

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ca89fe82374e3caa9bd0955f3c6604ca

    SHA1

    8b0378c22e24c4a27893e80e0ce259cf58d7945a

    SHA256

    83e65e3c42549bc0947847a7f07ff2b1a84c089f38846f4fa6b955f886274905

    SHA512

    608068933fb73920a3cc7d0af82cdca61a6485afe9956196f78bbbf7256f0d4f4f0e9c604d2cd2a5544a65d99eeff6939df4fc3ef6808c06f26663fe51099f49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    26d6ce731b211c00afbefe170345b0c9

    SHA1

    2f64e6b480a1d3bcd3b6c667aa98202ad18681c8

    SHA256

    5ca091ab4b2a0ac2ae09638b83f36994c28020fbdc8c43b1c9395147514ddcff

    SHA512

    43616681bcd5e4b37aa4c80968773291569760d3af9ccae1d4b9ef626c82107d72fdb0a47a8934ea00025963e1974913552100aff63d6e6ba4e3df846e114b16

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3738b9b5c45763b2c50c65fabdce57d9

    SHA1

    21a0efa6f5aa2dc43b2a292cd239809116f94b8e

    SHA256

    17f0a2123e23b4f09b0399ca55fd66fbc291b51958471c0e729475c20b593723

    SHA512

    7bb517696851d0b984c8447afcaad3fc623b060abb0f94678e5df211d1f42d47ade18120713690926655e28abb9e857b623ff9c948855861077b1a6e6ef94276

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\69P6875H\jquery.min[1].js

    Filesize

    83KB

    MD5

    b04a3bccd23ddeb7982143707a63ccf9

    SHA1

    4a5dc1389aad050a44ee5e81408238a317ab3413

    SHA256

    764b9e9f3ad386aaa5cdeae9368353994de61c0bede087c8f7e3579cb443de3b

    SHA512

    3f844a06577168de05b187e727dd07b9a20cf0453cd00e28aefdeefcf783dc680ebd941ecd79a53ab26510af1f855984c2ddc77565ef0db11d4ba6e46f59d748

  • C:\Users\Admin\AppData\Local\Temp\CabE005.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE006.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b