Analysis

  • max time kernel
    139s
  • max time network
    140s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    10/08/2024, 04:48

General

  • Target

    84dafd46acc7419e10be03df0e5b0430_JaffaCakes118.html

  • Size

    37KB

  • MD5

    84dafd46acc7419e10be03df0e5b0430

  • SHA1

    4b87742305af862e7e7813864e151a3e6a01732d

  • SHA256

    9afa46c91f4c2e6aae8672b09b66ab38d2747d92e108ad3dd092dcfe88309a3d

  • SHA512

    8a97b57bb7d0d0939f8fcbba63d676c57f99e25d68ce0ed577ba47d577fbc74f280ecbc935ad977105fc8a0157df244a11593dac988e6c1f359d42ddb230976a

  • SSDEEP

    768:HIIZP4ta9BIOFimEVYXFMEPJ46ZbxYhtLl1/u:R4tCIOAEPJ46ZbxYhty

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\84dafd46acc7419e10be03df0e5b0430_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2572
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2572 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2116

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

    Filesize

    471B

    MD5

    6252e6fd2df17d09da5cd211f30b5d3c

    SHA1

    0131eae8c576b70ff9cd43e9acebf908510fa134

    SHA256

    ecf68318687d842e7bd02f5f19fa911e925ae5e28da49ff5b39911dc3a8bb832

    SHA512

    f95ff07da07813aa5693e3c0b21691144635371d5b66f4d6634c5d8cd631be989c74bc98be12d3311fd131906848a4151daa7b9b3ea57ddebb6e068f52afab0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    436B

    MD5

    971c514f84bba0785f80aa1c23edfd79

    SHA1

    732acea710a87530c6b08ecdf32a110d254a54c8

    SHA256

    f157ed17fcaf8837fa82f8b69973848c9b10a02636848f995698212a08f31895

    SHA512

    43dc1425d80e170c645a3e3bb56da8c3acd31bd637329e9e37094ac346ac85434df4edcdbefc05ae00aea33a80a88e2af695997a495611217fe6706075a63c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    174B

    MD5

    0e57b8ec4e2f3c6ead706be2451c0477

    SHA1

    5443b10cfd957b0bb2871d8de93542731a7ca0c8

    SHA256

    1ee341c1b3b3c32fc4b5308e236334c48951d947329ab447dd303b2b128a0f93

    SHA512

    8328a369eba33e43fde677538deef493cc314ce8720508e4bc36dfa5b5006594f92fc6abb41f99c48ecefebb4a2d7afc8303ce8bfaa05d9968d50b61d7b8894c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1682cd6c9d5ea8a65071e4473d771390

    SHA1

    b507769e67f489c4e7dd62837cf7c014b0c4ff69

    SHA256

    3df6511b8f7196bb43d7506b07199bb7fae09de6e6188c5b771c8562af542dbd

    SHA512

    12dd2ca8b670178d46e57369e8de83252199d92774757dc4b3336128552675b32badb4371ef173695f679de50a738b1b03bcb31c9bb5f276f6ad8c2a6fde851c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3ef2547dd06bf69b34a7c475c03347f

    SHA1

    8dee586e975acbaf54d94771b72684116643f173

    SHA256

    5287ed48e377e12864672319757a3fbe3d0e29532791783f02c39fedbea39eeb

    SHA512

    9915b2d09fe291742111e1644f734666766b390bbaca5cfae18be72e7ec6fa25cad5bcbda6882a434ce25171870859a2ed2a0138a271e255ced9d3ed8cf08446

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55102958157a2ac6a6e4913e30529a9b

    SHA1

    fcd55da076a777cbad9004484510440d5bec14d0

    SHA256

    cbe8a8f2dd99360e3baaa0d22107ed9f2a80894349dadcffd43dc7f36f53eaaa

    SHA512

    b4e9eee004eaefc5536eae454700da0bf768d83673f9d8375ff2e2f59139b9c82da02145a0cb924f5bcd3b6d98e6855b01d8cf8f467681f4f39b50ca2930bb2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5f1418c9e1574b48de1d2876ae24b6b

    SHA1

    e9e2758e68eb81c83e3898057ea73165bc1a88f7

    SHA256

    03859ed7bacd3cb36de6335cee4ddc1505eb63cf1934b128b64396e5ca9fe811

    SHA512

    a01249d4c7017ec25395fe8d74f19d8e12ba94504d88069405dac62842581b9ddd41114cbb167c893d633b22605abee98fac9ba3a33de9fa54a0e07fe39af7d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f56139bcabadade09fc4548f0e09c37

    SHA1

    fc04f63e3cf3c6782dd1de42dbc7dc09efab34d4

    SHA256

    35f0dd1ac4368009cbe0f49cfa502d7032d204d7f8aa3f296d9b384d3f8a2bad

    SHA512

    f3faf2bd39ba94c98c125db5c37596e20cf71455ca33d8f7497807565e3fed5fa3fcf20312a33c561123f351339e800fdf372a24cb9d56ddcebbd6c42998829d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c92893407265a967e9f64153f6c93ed2

    SHA1

    3cc2e67e38b21d8337dfaae07535c48fd8f6097e

    SHA256

    13cae33bc193b0056961dc9c01ed24083e3dc3e7a2c2ccaadc4f793b6b5be0c8

    SHA512

    a7689284e9a3b6d358fea8d9933d3b5a9643376c0166f0806a49da858ec0b380083187716fd8818758f2e9fbf6b9057c9d89e413554adcd9b05fc4e28cb68520

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d9ffa784a75fcb55b07b9a8478ad5e4

    SHA1

    689343c5a799ad8b6519e1577f824b1145eb9331

    SHA256

    fa912379cbe6af3b8259a2dfec92a65b82fb7dc6056171c87aaccaf37ac80868

    SHA512

    fbb12c5cdf8576b22000fcf8855da9d3e89388847e26f5685f996b60f4b851a065914f4c4d7fa8575841c68debaef0bd490f42791dd5834f5b4ad6b4680d9931

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fde99d0a1ce5b673b64eb9abba7ff2de

    SHA1

    17db9a8330c337f0caf180a105d405eae210e88b

    SHA256

    e14de0b1b6a5790cbb7f8b3b54d011f637cf8f8601bf0e6348adb52802521ae7

    SHA512

    2afb82b715a1c1039dc368fba7e7b0e1b505af19e4f85e866b3b90564a46dcc13e2c972949e79e94d133621c7d6ac695c3a32487a4ee9cc18c023e606c898cfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5510d0e48b6830f8afac6219c724fd6

    SHA1

    293b07984aa1a6944dafecd09d3d08ddfe2aa453

    SHA256

    03d270fe36daedc2462018f4ff52494643ae7e43ccbd7d7924b34a4773f74266

    SHA512

    dba2cc8887db02f18ed5614d7a39f03aab55df8e25a68fd0f05b851741c9eaca95f34dd51d162cdca54f2a8cca7be395fd6c11d6938e63b8381dfd54bf5c9abf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4327671427452fbacf456cd64585b5b0

    SHA1

    87e79ba86d0ed4e4a30df04d2e920eaaa81acf4d

    SHA256

    b8e19a13795868a61b95bf84b968c21386218e4d51e1eaa6b11bf0bdbad8548f

    SHA512

    a8d62c1f60cc46cba417b47ce76343886103268e24b22b22487bb6a6127db10f39d3489e56eeb15c3ffe5bfcead32170715fcfee2a898259ec5ef6c6fb64392c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37998a15168531a0402c3698afda0359

    SHA1

    08a40f6f03eafce46bcc552d97f2531c4637947f

    SHA256

    ce708552e0816bed7785a41f3d1db35ffba7b8bba3e1590b9010d6ba55f50555

    SHA512

    a4d042457a3eca8fe42da8e31eec3f173ce6bc9e8f63321fb2be0ee5d447030168eb871f6cb0b02f7f3c5e7df8cdc78c6cff56ed0e5e896d631bc6839c4d58e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff06887460575c70e5897ed08e93c538

    SHA1

    559a70bbd1575fab44a184ca4db8151f74ee3d78

    SHA256

    73b2a5ec84ec5a2dc56a9820b26d0e92f4c6ad5c07156f804569c7407fb4dc1b

    SHA512

    b6e4c2c27811d84a43fedb3749d9d0c1c25889f4fdeae92681b49abdbfff15fcada4eeb4f542105272fc4133e63866048c33cfdc28c1ce0e63202150cb8d20cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36f602cdd7374de7e278c1a917d79d09

    SHA1

    a8ffc5d149eb2fe0a0dde3cefc4652e5b2e4634d

    SHA256

    40658425598da3860ba965b888058519a91b0588d9ce041b39186f46b8799d3c

    SHA512

    da6ced0acfe581a847bc640ca8340dff3795a244a8c7d7f412139c6847e255fbbd019acfa32848778c3fa7bfc3f05289f59f4192880d5b0992f67cab8c45f894

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ad295cedecd970a6f1f3285331e9782

    SHA1

    48a472cc217467e103bc5f364d5e6caaca651e0e

    SHA256

    c6c8b1d60cb1e24c4f184f8c7ad2f8da883605604e82657ad7e5d187aa238f48

    SHA512

    ba22bde47a3b92020fff3e4ea34693ce19de0bbb56c4fa022746db82cd4c8842ba4be2f09a5127eea942dee8148b8c16deb4fbc2a2f379b32c6c23d62c9f2108

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad1103f2f78f1fc9179a55c8b04c3865

    SHA1

    aa8694c023cfd3399320da7543e9678f7bd57db2

    SHA256

    6a0049c4be1304fe567c80d2c8787d74d26679a5718f143c63c8277cc5743cf7

    SHA512

    d8e799b34ba5ff76cccb99c68fe777be08e338be71a26811a7843217536f36a07cfacee908c4658513367bd0b8e138d58f05ecc3363d0088a50f2c1aa872150b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b149176e6fecb472dab19c697275479a

    SHA1

    17ab61b7728e4836d568a97732004ab37e44865c

    SHA256

    8456c48ac3736fdff4fa53759c22b7f2442119afa2b73791eab8134843fc3024

    SHA512

    e8d361dbba623fed071f48d3147cd59dd2b24af265a01931abdc41925ec0cb22001c0de8f7ec54f99cbdc75ee8d64bac9711a6a9f6baafe95e3448b4d573f485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4f547222f6455b6119dee52cfe5e63e

    SHA1

    6b879d47e12ed8f892a68f290d110b407c4e7502

    SHA256

    31edd0a781b6ad55403f23718ff3c9bfdcaca074a095a09c3817f760a8938dba

    SHA512

    93e405bc7130be7e896c4ef98548838ae9e976fc6773de2f828832f765dd37bc196982096cf1b9f3e89a2e84afeec7295ab778428e331111ee513f0448b6d14b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34366a19072c2cced80e215f4db4bbc9

    SHA1

    e4b5b1b94c3e3c209e0421ce6c18c6fff4e7f640

    SHA256

    4e3fc160c4569b84092e32e31437a76a0497695ea07ec66b2702c83bbe6ea00d

    SHA512

    cc8c2956d9f8be7c2d8f13812c9e5c9515aa6486852e268a20e30948f42bd8d56bb68d85b9866555971f47ec2703292a1ddfd745ef2b9721b06c5cdc22430188

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae35045c56589285b66c7a99149ac8cb

    SHA1

    4556c02f45487c49b866470a9ce860ec8da2b085

    SHA256

    3bb9f318623b53041ae1e4c3b9abe7aaaa62209c496b7de4419352e2a772c3fb

    SHA512

    3575499d38ae5e2a8a105b7bc1ed6028a18fb5e7849c8ca211e6c5bbd69c2d5668b9b44f45fb0b94191d8228c3ee8872d6a582418bc24238bda3c554231b7fa8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

    Filesize

    400B

    MD5

    1476e6da95f2c8b3cb0023d8fa438a22

    SHA1

    eed8b9377e9911c4b5a1970110a109a72786ca75

    SHA256

    211a96c0882d88fa50cf0e1cd8b0f3c6966405d75ba6b74ffcca334c8eaf9c1e

    SHA512

    ddc5ed3c237ef167e1abcbb5a9578eed67512bd4ece16632a2da7569d6d306272f3c5496545d901e0b04f8c7e6a8cbd97dbd563b69d91ed1c4f9400caf712613

  • C:\Users\Admin\AppData\Local\Temp\CabE458.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE459.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b