Analysis

  • max time kernel
    121s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    11/08/2024, 16:46

General

  • Target

    8b26f3dd04f51b28f8d9334621f3d63c_JaffaCakes118.html

  • Size

    20KB

  • MD5

    8b26f3dd04f51b28f8d9334621f3d63c

  • SHA1

    a449d1e2e76915877cbcad7a23f7fcd5f31eacaf

  • SHA256

    4b461d0150ce759193f714eb2e4fe2159342bc6b11e7eb0c74cf1a3595f05608

  • SHA512

    d7d1ec05a43e8f58ca17b11d72d4b30da47c327fe0ce57db30c33f957fbf2d0bebb4ed03aaba862b375c7dfb6a24c947f429098ebd1ed3ef90071cc62d68c0e8

  • SSDEEP

    192:oYak/aQFfiyB/GQrqH7hbn2P+wBeYkrZy09MH8XRYyHjH8TI2WKV7pdneXh8ZgDF:oGxdf6ZnQEtl8TI6V9dnewgDaY

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b26f3dd04f51b28f8d9334621f3d63c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1596
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1596 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2440

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    bc2695ddbfbcb85f25ae42e9365f230c

    SHA1

    b82171edbf30083f2c6be1fdac232c7d6ad1d8b0

    SHA256

    51095557217bafcd55e900deb905320c8fa73f87821a1b4a51331d208d368757

    SHA512

    4f10bcfd6f4de8d655bc7cf0758369c2ac345194cbc23304999e9002fd4756dd314dee09fe4c6b7799cff07341a8ce270db94755a32a9d5ce7ee2bddf7a816ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f89c9a4e32e9883a6037397c228b9d72

    SHA1

    f9eb96a023f054805dd71231a601dadeec63f21d

    SHA256

    8cedc972ffb29efe24e4c941114bd0a15e3ebd62b946b290f52b0e67fc3bff9f

    SHA512

    d10ac37a10c3decdefd615c9b90128a3a3cc0a5e29e82b78cb136c7cda61aa673152073b2cf86ecf949bf354a91b1243abad048da846dbf452b568bc0b8fac7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    416035e8a1841300d0d0032063ce32d7

    SHA1

    ef15a601e6a32184603951f8102cdf135e79e862

    SHA256

    72ee76921d8fbb2db5fa10430bd10d55690e8425679835f142e1a3e1014fe8d4

    SHA512

    41fe9d92f6ca04542101596391b3f355e1c5f534d367abdfd6b1f5956a01d0344ca157e0826503697d071829b7f74461e5dc09ff9ad5b9aeb87d3fdb526e98df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    576ea05b92f1af873e24f46cc9b242c3

    SHA1

    b1dd9ae755962e1b7188aed527ce2ca99fb2b6ef

    SHA256

    abdf9db085fa54ede104ce0fdb881e4b6879f85e0b8d2989cacc59e843a8554a

    SHA512

    416487609975e5e650d351b68f054ff0463b2db868a215a85c973618b5d667937ffb0bbdede510041a377ea94775cb41c5af417389e33c8e86db906325de028f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10bc61ffb56ddd2aae9cd4f6b9279e01

    SHA1

    89168dd8764f38329a8cd6c76d1feb48083fed6a

    SHA256

    92742c240e297b75570e142c38de588a5e24eec47196ed6c5d5b89af51dccdb9

    SHA512

    8cd7e3b6e73786a26a5059c2f3255fe3f480e996903216177467b6b43af0bd70a0869eb8eeeead5ebe1a37fbcf93c0dde108f1e49949515c6c780c330668b057

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6af7344e8f5c9169c9ad8840d356e9e

    SHA1

    73d0b3bfed0cf3d73158acb5017fcec2aa3415cc

    SHA256

    29dc1375956ee32cd7280f50cd75976843d5371216c2217323610d3334c18b17

    SHA512

    eec672d2bc859a82159f442db856ebd68156312384e21ec5d220845edcf7d5f3bb640371f7d19fbdfb4b75799dfe493753facfaeb96936629a33b88583777d0e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fce06f1146133f2b5d399aadb406fdb5

    SHA1

    3fb4c593e7d14f8dddbd233eec8c519e90bd7fe2

    SHA256

    9943752be659ca331673daf155592747c8f252d0bb06d162b27bcd30d42c03df

    SHA512

    a7dffa9646accc89bf0d23cdace6618bd407f43b7b0b82ef73e63d79b5d733a6b8828e69200ec50e9052c3ed2abd467212238876852c6d77cfd67b15a7aab66c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a592a228e9940e3b479c2201d5200c26

    SHA1

    96cd7d806a8cd94a906e5cc0d7093201f527caf9

    SHA256

    19ff28de146f26a596ab7da35c608c3b2ea62b0b6864d749a4ea371256e3f49a

    SHA512

    78ec005be68a6f714b266095a8c8a4ed6bc1a4d329e61a6174e3bffd2f706735dedf89dfa38c3dc8a436926de7bb624cac20a90baf4fa13da8ceb143dcbcc7fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    633090f8487c4d5803deb4dcf4116fb4

    SHA1

    94e69c703f1920854ab42e8a3a48cbc52bee9716

    SHA256

    c28bf04a87bc07cb28567635c56c51fbbb85536ef30e07cf08ebf4854fc17329

    SHA512

    8a0b74a59689104f044bf654bf7d499793cb5bc16a86e9667e2ce232a163124a3fd3e8a90612d3c2565daf075880dce685ad5ed9ebe582ed781bcd88ce226788

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    191963816a70ccfaf67b1e667e5dace6

    SHA1

    cec1bbc23ea6276ad44d69abd460d0f747136e3b

    SHA256

    6ad1079d077dcdea5c9049303fad3747a8c25f95db06877ba27f871ce431a619

    SHA512

    c3cff5d0191fd432f7c1faebb5ff40acefeb5b7942bcb3501c7aee2c1493215df3abfa6ec64d21f48c8a78dedb9d7ac221a7df874d0829733c8dc0739036fa6c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c5ebe1395d4699c390a51e283132ed7

    SHA1

    d7abc44fbd647cbc803c417f6c306985897e3e25

    SHA256

    725bf3eef9e918cbf3fe7ec90b4f780d4bea6ccd77cbdbcc86e02cc4daf2a740

    SHA512

    6640a9d6ac70dbfaf8cdbd761158a31dc0e2667c56594aead8468c45a44716558ce93cb0f51698d8bbf93a952077994f340903bdd26e566fd62ce11072b88353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99c76de4b650adfa1bce9325407d730e

    SHA1

    c9b8be1ac82143df5f8d5e5baeaa67dae183d199

    SHA256

    87e266284dd4ca56970615b66d9087616888692649a216bdfd2ae9fee9ea2275

    SHA512

    bbeb90a863586c40c1effb1734bdeee8f02db9461743933a2552a1d0cfab30bdf509437bd949b7eaed92b886ea4b7b5e9037a6fa4de2087b21a43729331cc1d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f1ad8799c8d2c77fc3d16725ca79ed9

    SHA1

    65179b3f8b53a3a9683a98b33f5c54bcc8153e96

    SHA256

    1cab74518ca244244661cf3cd7da0ae76528e94edee29f729b1bda974f4fb1a8

    SHA512

    5e74ee3dbd427c8d899a525703609851cf5d4fc2649346daf658fad174af981933d1810eae78a42fe2499cae9f1248444b8822aa5623fa57ab297887f3054260

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfd0f4dc2cd93d1c11dc63af54120ebe

    SHA1

    c5e82e6f0f0036d7d5d7d56c2b6cdb21178ef562

    SHA256

    222cef7f90c5ad2298546211a522a9996a46db02de7bf015867dd6dda4167888

    SHA512

    8e0b7cf5b9d0a62b949ef1ad0174e613f9f2075dcfe15ca9041737a6b991310d433a9b3fa4e2e7d89dd55807270fb4fc50e569406d280fd5db91115c698f306e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6115aa7a367e9f4f9ade25f5e9219390

    SHA1

    b4f14e33dd626798848a89709847c91f282b3e6e

    SHA256

    e80c2eb0463ebc762cdc5c2bad06b8157c1122d52e24a0f367239ba10c203650

    SHA512

    ae4dbf8939fca794957b687f3c028136a416db032019c7a3dd7da12b64f97d914a286eb8aa427ab54f30b5698e013db894285308352c58568a75357f4d58e78b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61c3034ca212ded48a3d4c4c9768ea59

    SHA1

    fc859b93410f429ce76f019bea9bf91a144d3542

    SHA256

    e06b7c368ca5fa9079e29957e895139fd7f84f1bb4606cad442b9edc15913757

    SHA512

    3bc2c85373dd137b19bf7a22a21f819dd37122d7e27742e838e1cacd9803a1930facd7de83de4f2f6b6f57a46125f6753a9f889984fee29bee53ad4e0a100d0c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c2e22250ea0b3762518e1ceda1411827

    SHA1

    a04e4fc5c4f150ef4c09185da52dd0a59d14b728

    SHA256

    f03f3bb6e68441d9f70f7d58f14ce7ad7626c8ea0c7dc8e2aa2ae9f00be98c37

    SHA512

    8ccb1a78661e282443fa08f6a8e82fe1bde4c1527f13722675193b0a5b9e1321b0768862ccc9405f4c1053686a2d77149ac1e4681ded251f9061d7f6337c88d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ea73259ad992bb1423ad5108dbecfa39

    SHA1

    59022ad62a977d646fa7e357904e2ef515c1caf0

    SHA256

    3afb9508bbff759a3e5ba04497c79ed17aac79e8dd4917767510535fb53a519c

    SHA512

    c4078945d9e72ea46389de0414549689b70e3fe74b9acb62278240a4f9144afd465cd82dacdec4792319e3938a788938234fe97c33c0ef6fdcf6bd1b87930d52

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HNGGU6NJ\user[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\CabD01B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD01F.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b