Analysis

  • max time kernel
    134s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    17-08-2024 19:08

General

  • Target

    a3c4815ae83144d8ec0cc541106ce9ec_JaffaCakes118.html

  • Size

    86KB

  • MD5

    a3c4815ae83144d8ec0cc541106ce9ec

  • SHA1

    19167b0ee2192beb8195d94acf74fd5633fe2a1d

  • SHA256

    31d16b180020e169cf8d3d50ae8717482434961de9395df6a326e5c17a30dc8b

  • SHA512

    8a22e646a5dddd7948675f7481c7bf74d8b079abfb69ad92a6a7ed7285c3903ea78c5b4ac07d0da369d608d240eb96933f2b601d83184275e2c9fea427bb8d31

  • SSDEEP

    768:IOfiAPMz3kW1T0YRwTIGmuGJUwuif1cyMo5:IOfiAPMz3kWWTIGmuGJU3ifqDo5

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a3c4815ae83144d8ec0cc541106ce9ec_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1720
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1720 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2584

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    86be9477290e3a1bd21df0e99f054850

    SHA1

    d424b3b3cead8bf4e2cdbb5e5b1d92d500d9ceda

    SHA256

    77fd144fa455d0393a830f9342e7e25b857e964da53b2469033d20b1e9883499

    SHA512

    edcfd2965be9a65127ed04d3e8f382135574daa167ec37a6fefbcafa68913261a65830f02f2125ccff08036b0d18599e972c464bd092c234331d83e30179e888

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae6076a2e470b7e806821e01d5036525

    SHA1

    cf98bc94ecc35cbd87518c0bfb9970d76ff86c89

    SHA256

    f8f40d89edcc2e013f50b88d19cbf35fea1060b755a228d98514bdeb42eaa379

    SHA512

    1c665a3758066665fec07f0b92204ab921b1d9475fb9d5f8c03c1d37fec3d0dd51de695875b768c7dd11f575f03d2dc643a6369554573fc36d886e809c675ca6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd5dccdb025c297bec2e258de4813b6c

    SHA1

    b570b1e285c75b1da60d2347bdb51dcd4ac8780e

    SHA256

    891ec8892309809ada7f0e0e30f5459b5cc9c3fa810cfffd7f627804830ca05b

    SHA512

    3719c560674fc7a82e14d531415f8332fa4c5463a8678f6f5512746ae625c85a5f5102a14623bf90e9b904e083322b39fd03123c136ce2351b879aea8004793b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43683aa97310f693c0912930c35b0ddb

    SHA1

    a5c96b986789cdd7e495d680acbb450061f35a8b

    SHA256

    707e5dc0064a7ff623c78e3d371d1436e4eee702cbdee10ad8729d24670113a5

    SHA512

    c759cbbf60b57775489756605bd18e6d49ebd59dedb1f8f63b5f0ca1f085c89534b0195f588f124d939177928a7be4a5e857f01d770967e7a920bcf95a9715b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5333c30a6245fc4e460380efe44ec284

    SHA1

    ba0e2fb8c4c9ae16ec7f1b687e9d486c28e1bae8

    SHA256

    e7551a7703b3e54a8094e9cd54cc93c60828b5bf0c5fecf57973b06a8f04d495

    SHA512

    e22413f1be413f2efc9483d4d57d3baae32514a986ff604297b21d319f5ac5ed5f8ab8f0993ef19eab867c696e72231a3b53f9d11cad99af15d56948cb4cff98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3debcfc3bd9154e9fb5467a39440b23

    SHA1

    8e3c778f02a7686c9bf37762dd87cfe65942f0e2

    SHA256

    13f7afe425fbe865d06f88967c978ee71a0c8cc8c2872659fb2d6a3613619628

    SHA512

    af47b2a73fdfcc8c6c43eb12c108e9476d6c44ca704dac491f0e4736bf10b4516526832ce62466d4b208da89aaf261fecb6648869d10bdd7f5c90b48ec7d9f11

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d01c1df3aece56a31f0f2b8248b8e51

    SHA1

    0bc1c6bfb1f1df823f6816a0c627682be0a2e5b5

    SHA256

    46cbc98f5249e87c83afe8f0a300cb5f3d56835521762aca89d1278cc8b8a724

    SHA512

    16df79f4d01f626dd934b15dd63aa2d40d75764e2038e97a646dc1f77f30f985e4bf3625d324c98592b2a64f12ce02ba3b45d702bdd4407d126312d95baad26b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    822be8dd794dba3c956a619cc481656b

    SHA1

    e7bc11df25ea58e4850ee6eaccebcf0e62c88068

    SHA256

    d491da3a29504d0dd7fcd68e9fb6a443e41e74535110557851573869901dd040

    SHA512

    260800b2311d8061f7778e9bf83bac6ac53ebc3f2b67d6db52381cd47c2c41fd9a920b5c84a6b87b9c1ac3dbb2ae54383d82233950aa68075336a3121d22c2cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36e04627d6d8cffb2997c020b477f6ff

    SHA1

    bc9cd44975639cde7a0341e1f04fb906f996729f

    SHA256

    7a2cec443bd9d3fdd04c6d711abedfa4558249a771bad57b0d10f9370c040504

    SHA512

    2a75fb7d55e6eb94dc0ba704e5a9e9fa8945c04d72b49292ed37f7f232f8e28cdff9211c6423f73d1cb0f3dd1e9b6bea3929b4f79026e29807c544070e21f698

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99669106bf74c084b8331c90732877fc

    SHA1

    ef7173fc46e2fd39f634218ff6ba11a760a7b6f9

    SHA256

    991746e630a2e2a25344f0a64a7e73d537d7d72f4788bb9880f72ee7488227ba

    SHA512

    e5fa77c07222ff2e1a8d3de94e12cc2b815a64bab2c421bcba5193c6e96d5597a603732519cdad7eaf70d96a221ca2ab289c1fe4d410cfc62dbc3db1cf063da0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b87c09df208dcde8872c92d0b91b938

    SHA1

    a7d74945f6ae14e9ea939676bc266a95a4c72d87

    SHA256

    8d9b8d970c90e4b197e89ef5735a0b83a4d358f3e915763d4281b392df29f317

    SHA512

    5f00c547cb096138cdede03c0fe6fcd5ec7a57998b512b62b8e893955f4d983853a7a46dfa61f10badb71dfd4801ceae0617ba0dc67ddb57211d4a75ab9667b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89f165fcc048c2cee74d5c0b628fcbc7

    SHA1

    68b70b0eda170bbc342762b5cb7e543870ca0006

    SHA256

    1082f1c0ede1e12f4d130c73ad1f5f32ff1bf079a1f0d69b638e69d37dd7285f

    SHA512

    d272b8f3ed0e5bc33594ea9c9f59caf8ce853d565a7a7f1c43654f4e77c6b38e9d198687cb11219dc74524ed17ab971e7cbcf60b06e5d961be4ce7a85894d53a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3639032dbf59c469789104a5bf89e68

    SHA1

    36f96ba122c757f9b9512de14ef7d2067c331b66

    SHA256

    a9d07415974f3912f55f05701264252bac3e21302da042b4aacb61fa56a53cec

    SHA512

    59b38f54b5bc74f9b88914951c7fd3d62c8e3daa7bfc8c58044a6b47a42303a91360537282a68a3dcc1d8eb54d1a2e7c15b68455cd36e6d489ec3ae186bc44f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6f4b41230c682807d47939c2807a4d8

    SHA1

    5fdd360cdb6cc7f21a74ed01d0d4dc57fecab7d3

    SHA256

    32a703265d1afa4d99e46ca79c1607db67904aef9868482088f9a179bc009497

    SHA512

    867bc5c2ca7a233893bf61d733172decd21b5b26236cc8e29bab35b81ea3442daf4a57f0d51902aa9a44491b46fbb525bdd67ed26fc233647394898cd235f8e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbcd98d8f740e54b2da04081c80c3de4

    SHA1

    f4fc8c0c79bc2d028f579caeaaee48028b761965

    SHA256

    b82d7eff25b0d4d09d6b73406ae00c0b78ffac17c664eb5730bf079e5d0646bf

    SHA512

    45be9d641bc20419352d4070ad484d843cff79d5e692e99a697ff6dab60f2e803b9ef5503308aa00a2a250af58ce7e8d3fde020c0a01fe52970bc4775708ecaf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b41b8c35b04f8e8deb1ae420c7f25603

    SHA1

    d4bbd28f85d8625f2c070879a7b0d56865751c86

    SHA256

    556267c2982e71808cae6121e68ac591070dfa4de004cc1d1f478473d750c963

    SHA512

    559f5243592a5a8d457dcd4567dd19b48e8b471c9a82a963e3e8c9a49cfd1b6695371c9f9f86fbce35cc2f4b575891a6984cc40b38c81887d07a6c2a3fc2cfa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a6b8a036a9c3bcb8f559e87ca43569f

    SHA1

    633d591cf68e8f95baced7b6d643e525617c49e6

    SHA256

    1c46865f6b9447a511aa738ef8e49c426ded1249cad7b6d3ec3469bb2e32a644

    SHA512

    94d32ebdf05a1cc302a064b755c20ca7b3eb49905b4fc2bb95119ad72e0d8b192e5b331347dbf2d71462f3567ef377e4ed6b7c08fdd08ca029038587070634de

  • C:\Users\Admin\AppData\Local\Temp\CabE3AE.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE46C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b