Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    02/08/2024, 02:56

General

  • Target

    82c8e5a352c5f796252c0880244a125d_JaffaCakes118.html

  • Size

    912KB

  • MD5

    82c8e5a352c5f796252c0880244a125d

  • SHA1

    cac9e6834b31616603137b865706acff05e76c58

  • SHA256

    c4c9d664fc79976a930f194f1d34d7976f23a56396d0cc7e943d702c60c13eab

  • SHA512

    0a48f36214ecf2acf201d87e04a29bccfe123dbca42c1de212b75c64dae1e9c913b18c09b955e5a26dc4684805419ac90a3ed65f87f7c69c7b1c7637739ad66f

  • SSDEEP

    3072:NpBcyaHxl06Bplo75hBTmf69N5ABefWIGqSCn9I4EgYMambK4yA1e:NpBS3b

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\82c8e5a352c5f796252c0880244a125d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2628
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2628 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2444

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    c3cbcd7ebb4b1379b5916d7350cc5cc9

    SHA1

    6b182b02cc8dbb545ac7c8f4aeba1ade37e7034b

    SHA256

    e9f9bee5ff39b36b5c875a783c30fad7cb943096c341aed371b8e5ede4abfbe5

    SHA512

    be4c61d02f06303434e81ef5454312c57cc23d03abd742113c3eb103cd04ef169805f2c475a6f48279f238fa5ca65154b868bb4f6d0f876169f2a2b52b05fb13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B3513D73A177A2707D910183759B389B_147AB4536A182B9FCE88E194D59F3B22

    Filesize

    471B

    MD5

    ef96df77d87d3eb55b9e9428949badc1

    SHA1

    c5f16b3c6a072065f955db6c431a8619af3c5630

    SHA256

    c07fa08788d14342a2c4ac6b5eabaa05b5b3d9c25361ad05191d563469a66bf3

    SHA512

    524836a6481129d04baf8cefaef7653bd39b5980b6d7de486f77e7e388dbe3cfd0a7f1171621ca41b40385a71ef2ecfe673e268672d3e50239db1f734e34ce54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    852c37f394f8ff088b025dbe1748d1d5

    SHA1

    ea4e78b0658df78656485893d7bc55820b8d41fa

    SHA256

    c1bc3514f263f06e43f2ac858c7a05a2723e3aa1bfe68b3a8f767c0ede3593d9

    SHA512

    d19697d8ad704abc562db2ce912d2f53292e183c552f85fc25366ce818fd2505752ee93c52540c9936ac09899aa61e424a78ab4df870ea03417a948792b81bae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    7f57347a7f8bfe2c2713660799b26468

    SHA1

    0252cc504af3a98816cd016ea6b7427c5954557c

    SHA256

    db21d5f9bcd5334c6ae5c7413f825cb44a27b01e27535425d8b4927d809893c8

    SHA512

    60a13ca083302bfd1877c9e2a323a6e63c4676d2ad3e2925c32fa7df4326bb1c6d946fc81dd7c91895a69b642be7d2d9ba63cc1fbf7e0b97f5e215a005e18657

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    12970546fd86e3116b456ebc3f7841a3

    SHA1

    932d49a82f95d9c6f30d7a38e940af9044dea8f7

    SHA256

    1dfc8b9455729ad2b67e43db31ad04d401d4779a3054d6c1a6570bb9cb308c58

    SHA512

    785644c7f7d79a17d686aea331618ba7cfaa613a5f305f21cb0cfd2367ec5695195bb4c9ea682cff862ea957ea6a7630a0daf3b1fa1c6d07732607f7f2d9bc6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35efa5f148ce109aea68b708160cb707

    SHA1

    08a4644035575bb9c1cfb6a0b527598006e260ce

    SHA256

    ae0b6e13be99dfe0b4d2adb76617c5ceeab394efcf0c899ab4dea8708e3c27c6

    SHA512

    ad354df5e94a6087f0905939832d1abfc179c92de95b6b7c2fd702ca6541e8e065b675e5a6ea3b88111196eb1f587266319cf97e3422fd17cb88855168d5ad08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4976218ea734f6327ec7b81ecfec4022

    SHA1

    2e59f5a483bd28959ffcf757c156bcca0a4da220

    SHA256

    2f38b7785030a73f8ccfba4f354be10b49afd1bffd5a47a8c7f8fae84dc3574b

    SHA512

    9b85ccb76edf9971352b80d89e4ddd0f96f19b7ceb7b79a17a61904641c15cdc3e489d9558eaa86319c245fb049d702fb418458044f728c16031861c64659264

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98d30c5da3e3d171ef2334e5f30e7989

    SHA1

    73f07cb4ceda0b4947c5ef77ea83b8e89d5faf5d

    SHA256

    d56102d859a3b5193040d71ce9f8ffd9aa8ec68060db7c6e8c735229b642f369

    SHA512

    4f326a592473587e4ea257a78b2325bfcf7954ff2813c61300ee5869f896ad1e2095360bb5c33da222e983d8c52508349c99b2784616dc96a8a0efff92959060

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    342e76f14ede210d917c87ca5be43b0d

    SHA1

    5e48ce39914fb788f3080104a184b9da7d69ce9e

    SHA256

    e97501e41a1f677f5a1d57294c624401b01c7c3d110e234398ae378eef1d147d

    SHA512

    2754f20009815f13ab82a99d83ba3a8fc658b5b5158427fb166e20e39c264e507a1209f26d9edfdd2ca38db7ae50983ef621f938874070eb1f34153bff3f7644

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9874a63f2cfa8171e2529983a3ee6efb

    SHA1

    41f7d60376e9a4ceab485ec15bd80f76f22b4ad3

    SHA256

    17ff10df1b29cb382cee618b06108b78de07f67ffdcb6f2874b6a341f9c85ce1

    SHA512

    1cea94ba341ced11d587868e0a1f57130510c52d0b6dcd5a7395a1c690bdc699138fc415d0338de9775c4354225804266b78aa23086a1a416d36f0321ccc44a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd636fb64e601315b22d995230f2472b

    SHA1

    8ee9c3b74cfc3dedab6c54c11f034a8ee5ec45b8

    SHA256

    39e7d5c8a6b106361b5020e727b0b8c546cc6093777375fd0f51ffc0a45b26b5

    SHA512

    2f89ca932fe52035f1e11c6ca035ef5153c14551b5a5fa6bd82022e769ec852d1127bb65289739cb4e82f02ef1c4ebd359cdf85a3b244422dc038b5e5ce2f0fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9207de5623109276264224b20c6a8490

    SHA1

    55f577e51125888abccbd01f87dd30b98402147c

    SHA256

    c1ca5e7427e1e098cd0694479869d85c3d0736bb704eb1641c2a4920ebe34224

    SHA512

    db05f23c754daecc6cc6f7b2e168a200f15bd51a61d81f4a52e962626b9fbbbfe696a5be28a41eb35df05b8aa256140a71a6a801e13f3076fafbe84f5fa6700d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4c75c5f0c7bee0ae4a5e0c2e311448a

    SHA1

    fa620cbc297867a043d57acebc8592075cd309d6

    SHA256

    d361baffd2a101a936ca87c211eb534a7e292d17ec6e82e61f5b8793514686f0

    SHA512

    2f7f0955edc8834e67daad1cdb7aba9a168bb859d1f0dfd1cd57de7eb921997f59426aa6cc971ccc64958e955213b4014da0528de17ca6ac516b04fec2b0e606

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    301ef40221e4430fd3afa123beb90b89

    SHA1

    0711b8a14f0540356a50f5642612fa250f60e0cd

    SHA256

    9271f648cae585f8ca2bc7682ba62201e87c10d2e7c968e83a0bc477e90701e5

    SHA512

    85b181d6b9e012254026962980da0acd53f7ad11cf41f8f0491186599580cad59f03184e3e8ae22d526b7ffd3b8cac5b815ccbe96283bd60d16fd3e4edf1f107

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86dd0a210ffe072bbe3c69679a8ca813

    SHA1

    db2463019cbe73b1666b4d77be7266e8d42b26e1

    SHA256

    5c454d43df5809d31a39f6daafb12d48e55db465df5643ca1ba8b39e449891e8

    SHA512

    4ff45f2db194e83a191c7d4780672d9b3a88cf772a23b36e2464a31e13b363b820cc6cce23dccd4ec2e9baebb772e42b6cf999e44bdf2f6cd3889f8cacf7e21a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    842cfca3184da77cda7502757d4b24a2

    SHA1

    ab96abb6b26961b465a4e76748e45538b0b143e5

    SHA256

    514c3e7e26a09778ef712e0b4d135a5c623b67432a8f34aede28b9c26d79ad24

    SHA512

    e92959b57e9dcf2ca5444ec91d180899e5f25d464f2c050b842971f12c6f3a631624a84f04863103769f90ec2c94a5a036bef129f70f61ec1fea7288b9f65c25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b0b1439f2ddcc6e888993b54e3fa3e8

    SHA1

    8ded5db8f6a727c377af2fd6d9388269c790e1f3

    SHA256

    443afe3c5bb276891a6dc5b20a5d4a95052e5ef2554bb3766fe594762c28d21b

    SHA512

    cd0307f910059091a4da16e12ef8f6735cdeb5c8d34a78119a8cbdc7bf070b2095a6a3acc5f5935b447577578fa8d6cdd3aa40f1636eea504486fe79e0063e3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73fc8790ded76f1c0ee7f7a94ffe716f

    SHA1

    4a853497a54ef3ce885dc4b98e6f82b0f27b83bf

    SHA256

    35514d9310e3fa67a433f48ba77dc528ea369a734fd41824b9270dcb67859ea0

    SHA512

    c7b5f297a6595a8861cd6f28d7d47d2ffa28d202779a3c9f9042ef56521bc2d62ee1e64b29d160e2b743fb23f8651b2ae677c5dba8273d9f4e529522e95cf000

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    462e43c05605becca86b05bf3990ef02

    SHA1

    e5c446c7b7061181b95d47490cad11a5b7d00ac0

    SHA256

    d23f65167b36f248e69f312f5e1210bfec9a0b97c0b45c66e2c38582f6b45a2e

    SHA512

    094b0128e731f7b5e3fa2d8adcc92dc98deb613a39d12c14cb833a1d56395eec3bf9b4bf92102b67003d5640cc7efeda98c257bec96b0bb7faca4ec1dce8a8b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cc1dc5cc483b8324e9fc6f06463f6f9

    SHA1

    c74c04b9f2bd5d1b14037c2a56c11e8088ddf8c3

    SHA256

    6d28f45a9f18695905ec992f29aecfff7250d360b33b0b6f12c24ce2e2d20186

    SHA512

    bdc7b5a025058695c29f4b9fb96487dff31e5c8f947caf23a25b77667d0dbb0d1f585fda1d147787b0156a621ad25deaa8f916cf307172992f65e86d6984f3ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1fa2ba93deaf9f6409f8be00481bc896

    SHA1

    66c99a3ba2d817ee8134b764cd8d7a8a815251eb

    SHA256

    461b73e8caecd03569ba175e078041d94142d0488afebf6e0704458b5481188c

    SHA512

    2cb1e206bcb6946da4f33c93a0bc03308518b561a8bb512f7db150ea67d7cfef0d5cad6c560c10f2431b0737ce7fa94c6a86726d68cb87c22089781085c2a4cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c42082929f8ac79bfdb359a7f289036e

    SHA1

    0622cc1ffbdfb1492506c3428d76c68220c21550

    SHA256

    90967f469b93574e8d5aec57b85148fe42ec53d117a81a017ad1ba0a8390824c

    SHA512

    4a40dc188bbc0437df29b2f5c3e35e1c25b1df6ed7e78dce8c60208ed0f589bbd79c0e773066db4ee21cdc31a62338c5104284a4c66031f4c090b751b8d3394f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67c3d6c7a6843840940d2731bcab0a33

    SHA1

    24f5cced7704b845fd05685ead8e91da8405a889

    SHA256

    b84d6a42b8c3554f54085724146ea32f71caa1a75f49649ac89c6f3ad55b38ba

    SHA512

    d74a0dceab1de9d82eaea8f5b70f6a5a92256166f9895ed1a1b6a06c47fb9203ae902c5bf5e0b0b179d65c0b9964f02fdfc19a2789dd42ad6521efdc7ac12b39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3513D73A177A2707D910183759B389B_147AB4536A182B9FCE88E194D59F3B22

    Filesize

    402B

    MD5

    a1fd541f5ba16ba3f0af25b66ed3391c

    SHA1

    da41cbb5fef75e726373353b7f3b60c34fd89276

    SHA256

    3358b51d6369bbfe9336581a7de7aa6a19f9988f39c8c4a4b7457053d2689d41

    SHA512

    bf181f6768a5e31313accd58d0d58ba3f96d804ddfba98d558dde3c6899bd8ae9909fb23cbea2b0b267526e1fb75014d166b1fdff51bab343b284cde78e0aae1

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NT8UAXPK\cb=gapi[1].js

    Filesize

    135KB

    MD5

    cb98a2420cd89f7b7b25807f75543061

    SHA1

    b9bc2a7430debbe52bce03aa3c7916bedfd12e44

    SHA256

    bea369fc5bdd5b9b473441583c46b9939232bf1f98c1cedf6bc2241c4f5068d4

    SHA512

    49ccede4596d1e5640a9c8e8be333f9c18812d58f02b2b15adb54172df1387439e9dc5afc4ccd9d8f0f75f092318bed68d3cd577338e88ef4f9373de8a07c44e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YUF3ZB4A\f[1].txt

    Filesize

    39KB

    MD5

    438707641494f9f7b0edaf8ce6611eea

    SHA1

    8208df26b3c2ae294c982cc9d14d68e134b78758

    SHA256

    95bc0df1f9d1264a3084c3ffc5905ff54ec04de6bd839abf0e42a24751a6676e

    SHA512

    e0c9e0b9c2307ec33afff130996fb7a690bdbc4c910b5204cababafab2ab7a761b4f1edc57ba5f8f481349e129f2de82ad2fe836f77be5d2bcc846dd006f9cd9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YUF3ZB4A\platform_gapi.iframes.style.common[1].js

    Filesize

    55KB

    MD5

    aada98a5b22ec7188655c2c17a083c57

    SHA1

    7c3c2fb8744e7412d8097e28f588788d91b9cd9b

    SHA256

    f2f09baa213dd3dd95edb5a30c7764e4a44d9a79c0831f90b1ad8ebedec9dab8

    SHA512

    a780aa3b9e36f61be8240487e75c19a96fe26d54abf9006680a00af9d1d394e81e517f0bbbc13edff3a7190679260ecd56fd5cdd7c2d2f416ab8982c3277b953

  • C:\Users\Admin\AppData\Local\Temp\CabE8C9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE8DE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b