Analysis

  • max time kernel
    142s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    10/08/2024, 14:53

General

  • Target

    867f93ac973d2873b008c2d8b12ab4f2_JaffaCakes118.html

  • Size

    28KB

  • MD5

    867f93ac973d2873b008c2d8b12ab4f2

  • SHA1

    526e5cc91fc5a8ac4b556edee2eb7abe1be7370c

  • SHA256

    58e97d1700b2cde4636fa0304644c2082d7684ea39efb7cc19cbd93d50a545eb

  • SHA512

    1e14a44caaeac559f8cb24fd14a991157dbcf2ce207bf69a18b58b3e60cd846d193ee3b219019ce507c0cd3267dd7997f9087d0211363834e74de3589e283fa9

  • SSDEEP

    768:Zcd9QZBC7mOdMEdpC5I9nC4DwAwXwbNPd:gQZBCCOdB0IxCOwAwXwbNPd

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\867f93ac973d2873b008c2d8b12ab4f2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2764
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2764 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2828

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f0f19545e312351052d93656ca809d33

    SHA1

    f7f6bcc2b550b0612fed9f2753a08bb8f53564c5

    SHA256

    bc1be47dfa64b0717fa6d6368a120bde5e9f12121fbd8e6dfad29a2a0ac967ec

    SHA512

    906296ed8e4abf4a3c6476fb1ac01bdc25fe43d1828fcff49bf603339a0efb7aeb572530ce757f0d7ab64627f1d40dcabc873ecf3e13a5038c002067782926eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07a0b05417ef06b888608c67cb4a34f9

    SHA1

    61e99891ccf7a7b5b9fb01ce83c5bb21481477fe

    SHA256

    7b965531a3896dcb296611b87ff39366291e7243ea6f0a5849e786893e916d53

    SHA512

    b73f5ac6b15f0ac319e95ddafae0edaa26850eecf6a736c64ddc2f9cca688feef794290f5c4a63275942bd3cde75ce2c334aee2194f250e5403f88f56143d796

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22e54ed4b07130160105a22dc518f99f

    SHA1

    8432cc23fd619b429220d9bd2446e8c1bebac8bc

    SHA256

    3d5eae4eba34cfa0a48317d2c84716174b299f1e7df464fe2cdf5497fe0bb472

    SHA512

    0b08e8ac494ee51773f1d3d5b8751c56e1963179114a282e406e76ccd53ffcce76bfdb98b1948871da8a19f435002f6674385fa442f7dc89a8377e468e344506

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec84bde4128e934625494bb2275278ea

    SHA1

    a06df3794fe3a6dd93046a6309b8885b2d36b962

    SHA256

    ca14a45ea9748e71ff2a66f4eb860a4f268159dc4dd806da58d385e78c76031c

    SHA512

    c17fe92147568ade5d05667f9c36430cfc07868da9639282c67472916c196fdf770fab3696289e8b2d776d68bec76d9befc94e1f76cdb843c9d1c901ddf188ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da54f3192e24270ef8de9bdfa81a25ae

    SHA1

    82cf08f74dc469374723d23db53d722ee282b8a3

    SHA256

    d896c14b1f59b1b6a898d04f6aeb5e6550efc88fb0221f300ae6ad3095dfd3fa

    SHA512

    7657151b819a6bdb06815cffcbc968b38e023f70e0caa73ada15ecade3500258e3293530372cdf7c371e2dcad27ccf5530c394660dad212c5c4173a60b10d37b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dada3243396711c280ed3aca7ba999b5

    SHA1

    8f3867c6e6da7aedd7e85003f498f6afadcac570

    SHA256

    04de8e84fa0729969ccb5be349a9dc417c0636ffdd0939a2e86f6b1b8db8d733

    SHA512

    05974779b40e401f247a5e1f45a2c63b5756a193244419cc555cc3d33aa94d777c803a0ae1d44824b5c6b2d52bc524535e2b53ce6c5d1f3a8d5e7a7c8f870b66

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af8b396c84b3457927ce92f5d6283521

    SHA1

    5899c9965dd391871a25495925f0f9dc3ce7cad1

    SHA256

    7a5120823370505ce36e0004a5588e0fb7c1ce3171e7c61edff541f87be49073

    SHA512

    5142680af3b48b788de842d6c860ee7c2938ca2aec330d82755bb07f1aac8ae49e660dc2d419e8f642e18b2dc1d4b273e42fc795ff2df626854aa871628e2717

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43118be76f94d6e2872041ec950c17ef

    SHA1

    203ae05ab0af09756de3c3722e2521f446a0a823

    SHA256

    527257dd27d315a5c740af2fcbff01de1269f7bb2026961b5a2881e279e2af70

    SHA512

    03ab1c7ee86d3388c14f319278f3faf7321fbc3018b33ffbc02085049da9f3bba708798b53fd5ba7780a08cab0c9a617811fd71d7d88326bc0ab0583ae636b10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a2c98fabb15f19b97ff5b146bdb72a5

    SHA1

    4b236be30d6ab27f89c965f9c2d5436cde4c2a78

    SHA256

    8742b53ab51cee68c94b310d30335d03cd6f0a2fda4fc5ed8894ba7287fba67d

    SHA512

    0342884d06f493b1792c5654c97730c7e705ff63a05bee0ed608f0fd97406cde414c62f96e66706cdb053bf586e9d7d8b0d49e57c7dfe5d016bdd4f162439744

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c9c744b159144974d8dca7116b4bb73a

    SHA1

    bc98425ac13cc9a594d9586f3ddb25d527c4184d

    SHA256

    e853de805c70d0244e085709f68a23aa6f3e1a136e3474cf831f58a4003b06fc

    SHA512

    cf14242c3c8780dfd7f2321a0f75b7d345ee78e1588d53f81d2f536cfec49ff16cda50ad8dcfedddae62e4c7c7cd970f0c6b47339785212a43cceef3c72e1103

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72d19f8f2f13a0308943380f8503429a

    SHA1

    4bc2e55b7998fb4b02cd75246c0f2dfc8bce8a23

    SHA256

    cdd305891e220a9e2971afff2e91555faeffd27feb3bf44173a32bb18a6a040b

    SHA512

    a43f38b3c8ef3c987438bdc3b264821b0f09d2b1ef3b8480e2f6afd3dce827bd18bec028344cd492a6928fc2c6d1c37733e64c2eff983e55bbd13d8110c60f74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57f234613317ea04f9954051834037b8

    SHA1

    eac945b0625bedb10d5b27e4c2000d53ce589094

    SHA256

    fda72d8af86f5cab0712084f9fefc7d45107d058b3fab9570ecf15e7eb20526e

    SHA512

    73426bd9818cf17699aff439348f7c69a644676f482c2f418fa8c572f79b21489ed922d6320db8265356e4cb7fb47c8bbf71a92f4fd4a637fb76143483a34175

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b46af6105c15313bc800d3dd8b8bc065

    SHA1

    f621ee13b361dd922bedaa7a52efee484a63c311

    SHA256

    d06d913148da88a162532a364ba5787f365f75b8e0b0e40b63146c1203eea9f0

    SHA512

    7054d4def675119d483ecb1644a26ac681e90a473961fff620c7392b28f471d81aba72f77cff7e26c8bbfe21b9cd16b2bd68585ac0e6510b6887d82abad1d98f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a84818ca2574b9ae7e628db61e536b3

    SHA1

    29d15ce7031b66e54d3bcd87a1884246dc6af802

    SHA256

    2b60d9b4df4ba8c28ed4c81ddbbc2fa8d1dc52e15f09803e03bc30abf1a51bb0

    SHA512

    da3cd3bf517e5db1015791352b93643fb1cbec03c2bf6aea9f9d8ad2324cd3fabda2ade7dabebd01d5c9e010499b46404ac5efadfd7fe9275639e419da1e1de2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9380f7b313dab6bd9b9b29bae72f0b20

    SHA1

    d55fd338354ba060b6bbb389a3af20fe1025997f

    SHA256

    086e241039b731e853a451f07ab4bce60c17b2dfb2c6b779061da73d135a2125

    SHA512

    1db931e73c2abafc0396182c1dc41e1ceaa4a94e12289a4005f85670545ca9d5ad4f819206f8ca5ed58d68cabf13f42c61a6bad2c5aa44b5e0a38f571613c4b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    acb6ab0a857aefa01f4101afc0584fd9

    SHA1

    90304585091220c5b14956724add1fb4b62967e8

    SHA256

    6421ead4608b0de855043900d5498de43acba3800d81f59dd257a3b75b69c003

    SHA512

    54310fa4b6ec8dd379dd9ab52f5bdc696f2891579f2e96e64f943d3c2d188d52253e9c9b238f2a77a00eb76207d970cf6e53792e3f3b45cc0e0ecd89ff5f532a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a105276d162836cac4080ff8a48901b

    SHA1

    e8e4e4296e718310f3067f133ca1e3b1aa218195

    SHA256

    79b0a867a9b54a7cf728ac5144d91ba2fdf4a84bf63b47e27fbd94e42a1bb9eb

    SHA512

    ad3c525fed6559182ca77d0d5d1fdf80c3b1553f4d69b0cccfe5176abf37e613265a7f23f9baaeb421de04ea261b7b479e77b811a8fd4e518e43048470b03074

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d39dbc7f1f71e36ec4005b5d5234077d

    SHA1

    2d67589332c0737e5a09ba00114e8b5f7aa79bd8

    SHA256

    5c2bb59a3e97f3572234f1f8a2788cf4d1103afa93eebd05dee38d39ee24346a

    SHA512

    5996e94ee117ca7aa6999958560b8ffddf2bb993fedabb82abc56611fc4fbce6ad3530fa530fdd32263a51883e394f59c35fbf513ae37fe3f8f9170eeb454e6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7f071e1a6154a2e54306f2832c6f84a

    SHA1

    3696a135c1042f99af285a856bae476b74adabef

    SHA256

    e6f3da8b5cca4c6df47ef11f1c6c112a4265cd2440885e1eeb22d37416db6736

    SHA512

    40ea4e89498b14bfa76a6173df25c983bdc29618969b9a6d0d19b0c5d8a5c019ec575ab6ebf6bcc7182f1c02b5eee9054ee1d906c46696a8b8661766f42b262d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae0597d65fb1dc5d45de1f76254ec55f

    SHA1

    8891f002a91c0443403fc51305569cfdbf505e34

    SHA256

    4d8dc95b00f42cbc4d02dc724c01ea37e909dd490695d42e77ad498537633fa0

    SHA512

    2899f6287760589388b87d5bf05e6cbcdb91af0d9683a5cec8255c3906a5fc1f08dc433aa21956bcad40f66096dc7766250783a4d0024f4bee4b2ae0a369427e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bb28a2f1f44d12d346e3c39f1516383

    SHA1

    07dfe5b738d592dbabb499e3ebe7cfa08a4fc299

    SHA256

    f926d3ec44b463076744428addb534ddf50c925b780ea895cdcd0242b6dab99a

    SHA512

    c8af1abce989ef47f29a142ea14fc638df59da30544cdb304de4e469026a86d493bcfac4ad9af74b1c156a162c093625d90b7a1c6083fa2e096ab5bc79219d0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cdb2b381fae603c2e30df4097be20e99

    SHA1

    06bf24f0fe5aa66043f4d5eec05390d06540d94f

    SHA256

    0dee65b938c2d6f625a387a196455c87d0b88d87c97c7109969e8d4d1d89e1a4

    SHA512

    a160c7acdbaef461735545564829620e51565f9a9d8b03da9bf8bffaea4168cd3d0d33a5ec1579d396fc31abd8fa58b1f0a620d6e2b6e71266af6849c1fd96bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    1aedee552a681ec9d385138f61e5599e

    SHA1

    a36b29d7b56dfc4e9a34768371dd13b87eba99f1

    SHA256

    152b3b66d4e2a4cd5f87667a62f80f3baef88693132a1bda4130337e8ee7711b

    SHA512

    32fb3394f58ac40ea65cb38a35ead42b98b4541ca998fbd68b5aa91711d03113a27a52e497516831e4c76b09c0c5af982868e28b70c842189adbede5fff7a081

  • C:\Users\Admin\AppData\Local\Temp\Cab235C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar235D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b