Analysis

  • max time kernel
    122s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2024, 05:29

General

  • Target

    b68244f9f411d53e1caa9904f4d3dd87_JaffaCakes118.html

  • Size

    6KB

  • MD5

    b68244f9f411d53e1caa9904f4d3dd87

  • SHA1

    35b8c197916365c1171fceb841299505435f79f4

  • SHA256

    d282a0e60f13baea9594f790f93c63f458531c6b315c8fd223daeed99224ec08

  • SHA512

    08e6e72b47bae3a82d1ddd5e4653303e26a6503af074fc5c83df01f5a7786b17535af518f73595a62b4f0cd8f206aa9ebe2183f6fd0d4e43a6cab24c9ad968db

  • SSDEEP

    96:uzVs+ux7I6LLY1k9o84d12ef7CSTUSZcEZ7ru7f:csz7I6AYS/Rb76f

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b68244f9f411d53e1caa9904f4d3dd87_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1908 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2968

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49e574cf4b55200a9f4d4f4d467d8220

    SHA1

    15017cd52f10e8d21140ebf7da412e6496768196

    SHA256

    e2b066585d3a54717b835727e7c4d9cc961d5eb8bba8904b94ede4df527301d2

    SHA512

    50866e790f40fc00a7bc9272d86a358deed349d4a4bdee4b4d8f46368854d393e04262e2c8023bfa0a4bfc96566f32620aeb818e19da9c6f2734ab207b7ea29b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    77b430be1c2f30b0370d4dc641dfee9d

    SHA1

    9c04495cecd3f4747b3a81404e55fbfa8cf98193

    SHA256

    7c269eb18a8f1dd87229722979f1d567a6c74fb5866674656b7bf7a99c050c2c

    SHA512

    a7c90a497ff303d6aece2d6264bfa54ce2cde8480897dd63aca5345e93c362ba8113064cfeeffcc1e18d25d5ba9d399185b9b8356f9a103ff3fa3defc619881b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    144a36224975df36cfce625901401229

    SHA1

    e5e1d7438d034e379900c77d48277f23022721cb

    SHA256

    404d3e1aabaaa89125cd5e41e028f7a403a790d75ba9c7b17d2b7523162a6a1c

    SHA512

    a2d6d04079859e102c21c6a66897918a23843d743ba78ddad879d05a1d978dc037d6e92de8a3bfb64e94329186f5c9615e85c3eae5c4f9c981db61bc7b471570

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f200dc1ef5fefa9cf1e68572284d933

    SHA1

    0713df271b23352eef38ce67e8fae7db14586c19

    SHA256

    f798ab61ba868418eedc9bec78359340aefcbe8850a993a9c1e5cc722cf01631

    SHA512

    c52c68e5e6523d1198ae3d88c28c6f3912d80593032e000a757dfd2df8427594fd948120b34f5a904706c27fb5826733da9b69083d8a1aea2cb347b1d5cf4f1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68c4e603180fff85b8e40a34d2a3ab36

    SHA1

    8e8e09dfd1419c9baff28b5df62f8b5bb456c690

    SHA256

    8bc0ddc0c11f7211585ee0357bbb212498a3fe186526ea8fcb5953ef196efbef

    SHA512

    b1887910dcfd80d98dcd74f60e25a480d6279713004c57b2a090ab941c239e431c65bb6467e700bfbe4e71d7d0fa31a8a72c5437a0da4666c8347ae3ca0e398f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee0757da6a4f7d039e66fc74b3bc957d

    SHA1

    f47995343c720a1f72202e0c5263094865565323

    SHA256

    0587413f2fbec8a513de21ae870edc428f3e7123a60b332b2a00b163c77f2ced

    SHA512

    cf18099f6da00e72487ae729f446b9518cd8bec40abfb29e52a2815d00ff14a9c4b205df748e2e3aeedbb3421dc6dda753e628872b4484ff0d1efbc39ada068d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b37ab11ff4afa3df106700937e37ff6

    SHA1

    1d258963eb3648a728abebb36eb49d9c9f7e33b1

    SHA256

    2ab6d8166cde2cf8f2449025ecf572728b2906ce935be6aa27fa91c3c074bd7f

    SHA512

    26373a4b21a7477c90e326f7a9b899b0cd58e565db4a988a3ce5ef56956e220d1ca299b99205e3640ea398178779cb78ba598dc0251c397b7c96d19c348ca2bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f33f68b024d66ddd518722f43fd9dba7

    SHA1

    dc266c843e0a376b7250e55fcdb93b446e0b0967

    SHA256

    df92c9cba47164978ed779f26b624e285db890c41d4f064a7ff275157341a9c9

    SHA512

    84ac2b1d4cc72492a4703024a6aa6f4dc15639d9eec7ab13d258894da4e2a64baf8b3ee12573bd91073780033c5e2e5a2790c387e367d7e80f6dc0942399de25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfe7e02f62356cdcc05496ecfe0a6aa1

    SHA1

    3829e8ec89dd38cbab59200649fddf5a6a5ca689

    SHA256

    9bc5843a25e8d2431d57902ef960aa81a6eb8230440a0788c4ae5d760cf67ee3

    SHA512

    b46aeb3bbed2bcf89f266c8e19019d8091625ba496b3780431601e9097fe99db5616fb40dc0c9120c2f089cdf82b6ace309594b498717f8816c0135dc55a20fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c049ff37602704f764d8c60e0cba427

    SHA1

    8ec12dfb861ac84956197e69fa1ed892512bfde2

    SHA256

    6744153ed19e234bdf4ca933a794676cde8ac0491e8c303315c8995f808fa7fb

    SHA512

    bc7f0b66f640dbb2ff372224316403534811d5ce3c449d38ded9f783390cead84d19c6d58e2bbdd76cb6e37b307b0d8e058c2caa4fe611f3085825ceda0e9acf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b94cfe5b8ca563d93e286249995f12a

    SHA1

    168016fbb36b440d71c33cb3fabdfe9e53e282f4

    SHA256

    652569377e04d419987a251f4d844f7e8aa3cc02cb6ee2a23f6ca6f081966736

    SHA512

    aea08556ee0593ae4e72ffb3291b0e6d6a44069900b9ff79d80cddfb37f2ddb98722683e9cbfabb86b55df762d4da01f484dd9fdcb0b02c2a00c7256a29473bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6b19207579fc194d47a95cc14fd21888

    SHA1

    eecbb3e1fbedfe6b5dc4a052dbc0159260ef3370

    SHA256

    85fd9ccb0e8e6821ec1930061e2702016bf375c8153f9c1f3d0b4fd4b078a7f6

    SHA512

    d35d15d1a7f52c97de19f1a1318306926bb767e9e6efef8c3d7fac384e28c4675b76a9d8a73ddb8bb514b82a22de24c611d4e1d175a6e02b200de806ea239dbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    857d46078097a1f2b2e75c128782d161

    SHA1

    099f0385aa367db4842a09d9d244dae0a17a70a3

    SHA256

    14f70fab1f8eb50ea80ee6b39648a01b110b472ba6891edad6278669998f75b5

    SHA512

    1a91c567c3eeb4abc2020c560b1f9f50fbe138574cd502880bf7a91c781793497a8259304d083685afa317ffaa1e6a0408c314d9405173eba4169b396a03c946

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc076372ba09db11ba84cb1ecbac566e

    SHA1

    1e3d7c31db4e2038723d327b2865f4545e6b4a2e

    SHA256

    1894c9fea90b3bc743c9f4aba7e10da022ed1eb2aee40af946b383f4c4ebb19b

    SHA512

    f42cf9a48b7c2824bc87f10a954bdeb6f88c11afccec22305ab751c3041431a35a9cd1116ba48bc02d9c71adb89146c5a2098afdf214233204dc43f1440d2af2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99f18a7e220b63c3e67caee73ae2cb19

    SHA1

    32f4c2e5df35d35a572165cc18d9fb8e3732402b

    SHA256

    7ef4acb6b63b29a7627ebb6af1e15aca49b13cece73487e990d962dec3046042

    SHA512

    d007165fa1f84443527a29d64f30a726263606b2d9be2c7f5a4ecf1680704d81c845bf1354764eea24aa059c79e2d1e18232f780c3ea04423cfd99dc9122d9ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a45d75b0bcf55c4a331872532ec07df

    SHA1

    086facbdc73a2f607e6bb104df5f3d0b91896f91

    SHA256

    91d409db76501afeb136fd5a917d27977196a7b779b618eb223ac6d2559bd074

    SHA512

    14e5397b5fe5c4b04ffa8f85bc9b40ce545a339aa3ad112289496d68e5c30e908041fc7c1c9994bd248457e07ceaa149586c56f1d50a2d73824a1f514775f5ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e46bd19aa7d52564a67eb616542a8241

    SHA1

    0298c0049feec5f421e6d15f54035731f83964ed

    SHA256

    c6ad79016efeb421dde880ba51cc3b0fe71d0e1018513a16826080560452b95a

    SHA512

    c3fe514cc41a6f4253c40b706848837d94d8975483cc8650b4dff8831e3fe2876f1df95e00f122134119908ebd9c166fbd668f452c21de99ebbd88c1df6fc6ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a42e6d4dbd0d4bf81b758e4692daa5f

    SHA1

    b34cd1c8475fad0225db386f768f50c215f6d950

    SHA256

    f4c03638608525637728ebd0dcadfc5064be507763b95340ae33007629efed77

    SHA512

    abc6e082705b84b80f1d1c663e3e2e0145f69104b727c255b49e3b7dee677c32c18cc8447bb1fd1b9fb27d60b3849d0194ff561d794c531aa99fcf5456424496

  • C:\Users\Admin\AppData\Local\Temp\Cab1D34.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1DF2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b