Analysis

  • max time kernel
    144s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2024, 13:53

General

  • Target

    b7e43e9788e30ea10b4f049eb0788278_JaffaCakes118.html

  • Size

    35KB

  • MD5

    b7e43e9788e30ea10b4f049eb0788278

  • SHA1

    68463033e19229e591dc0478192c8825aa1f441d

  • SHA256

    c0ce338a8ed570125049d55ddbceaa07adf5e739579f76d8b357806c18f4fcbc

  • SHA512

    f668f9bb2003570e226e0c3ef5da127a23ec1e04c498cb38dd83be7cd5790d6fcd787328283e0d6f5695126bf3e5668f1d20ff11a06f92bc867b3b583b00c31d

  • SSDEEP

    768:Zcd9QZBC7mOdM3PYDq1QsDD7b9F4vo1mebkDn/FQpC5I9nC4ekRFAeLKP81/K63H:gQZBCCOdWPGq1QsDD7b9F4vo1mebkDnu

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b7e43e9788e30ea10b4f049eb0788278_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2232
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2232 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2524

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    02b1a6162733972d6e1f3c79d62f4b86

    SHA1

    4e881beb8e3e57a72d43e71d1e40d94df359b023

    SHA256

    80d7305cc68b179f208b4bc91a29eeabb193b7b4e785f623399978b73af1655e

    SHA512

    13eae0e8818a6240207a3aa5a60043ddabb0d189e61e8fc33a7f967c50b9b10b843b12c8c89cac2e3e6bbfc6fe3eb13fb654db0107bfc7decf57477ee7141c12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f647e562dac0b24ad5eacc2f496429c5

    SHA1

    6c0fe9a32a3990e1c2ef6af554b7626ab0150048

    SHA256

    21bf69e5b43fd99005fdc1836422b88bf36fb8a756ccb819411a9880394e0026

    SHA512

    bb7ba4580774e02daebc802e3da882c3bb22e9dc903e0d90d0d22981cc11ac0dc5e4148f63ede0a5233896b5c1d89c92ecd19def9475964b3a6ffcf1e12a2c0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3b03457bd8ed88247dbb59d25f38466

    SHA1

    42e0af63b04f8856de732bd5ef2ab773ef6d532e

    SHA256

    657fc1f717f928068c4e5a398572059306b4d40495834e3677565379b78c06f0

    SHA512

    dae2d367dc441393de2029ddf38a5b085ce3aad67935de370976f9220ef9c441a5616e4d5676e338372bd89801ebadd5ed32d1d0f760f05f4c865913cfdd57b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d980c454129bfdda8b029b68a3d25dc

    SHA1

    9cedc8d316e6e59cf94499c51ff16b4eecd61e72

    SHA256

    2cdd493707ec31c899d45bfa81845589e1d6e3a2660d6d6f0931d67b009e4c7d

    SHA512

    5001dcac74951866e74fa93fb209cbeb3b679ac51b46c4c34abfe29978a439f56cb5b2e19bb7381395d1b9b123e027a3766991a4da2679e74ccdebc0acf25159

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    887b2e08c18f84dd16bef96e4219d5a1

    SHA1

    2fcdb4d7dadeb93d80d9df11c862871e4cf3a544

    SHA256

    079cc263337f7ebe392808c158d77c627efd2213e9a99f4bece4f23d3d31196b

    SHA512

    36723bf64295f35aa12da17726682732b74229f9de0925f2e839dc012c8737ada0db58b870679a3d8e994bb982c7829bd75736676410c76a2b86eb064947cf5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b3acbb4baa354eedd3489d9d3ec69e9

    SHA1

    5899414495e6cc37e4aa0c41210640491178c2e8

    SHA256

    f0d10ed7eeac8462c6cd0b39c08b6ea85b1bf1c70bf3f26383bba0029828467c

    SHA512

    b16d478ab3abb043e0bd2a0fef85f4bce44f51b34a71d451a123b6d4444000ae822fbc0a07512882c5668fe5b79fa48209247354504f068d56c8b9b697c3ad57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73eed940427bbc2f8d3379061e900963

    SHA1

    c12b7e5504b6e231326f7fa6fcbe8699dd8f0ae8

    SHA256

    b96e572ee2058a1a363d4be957f405e8726c5c3b1905ed6d305b7a027a094f2c

    SHA512

    7bdd0a8ddd8470701df6cb09c3dfe402d240282ec7d2d1d40956fb2112d25178ffc6a0a917bfbc01723b226f5bf4a9f2e22eba182451b1141960211e61e0e3ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    720e730649bc110e14234d58dafb56b4

    SHA1

    bbf35e5fb117b9cace995d7174cb1a37501669d2

    SHA256

    18799a6a9e0df1c40fbcc76b21e21bd1b3267afd1137847b37df2f31cb845cf5

    SHA512

    8aefdb5262ef8db1f593714d7bf4c94f3fe5a4ee74cc1cc6d9f37cf85f47af1398260575611f0f9f00fe2c8bb84b0532f5320e5b019774b4219e3d247932167a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc0d49a6aebefb0eee1acb1b78a871f1

    SHA1

    48f835ce5b97f609d0fe5e12a4ffc0063a31cac9

    SHA256

    9285d3563d654fe32a017c97c2767088ade05d21966d53854be56efaf5304e53

    SHA512

    b64677083c3182a0a83f104cd97c260463d295ec56bb9bf44f329b24a851fe8976ecebdf68903f6772590d41ee906e41d1eafd6971dfbe01d987a5ecef504f8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    101086663fca2dce9e60e4e95ef67aa1

    SHA1

    f04a264f46fd2cf5ba9aeeec919f9ca1ec01749e

    SHA256

    1275e2aea68fa9dfae9124d391c0eda5e19418f9e397346fa7ba257106fa13d6

    SHA512

    ec1cbb9eb9c7ae05550ca4f66d29a26af728a1ef8ceb465c50a7026e594810cf1b19de8b21aea16bcd745ff3a09fdcac165d7cd445be66ea420a79ebd8e9f9e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b955401f05ac861868db23465aedefe

    SHA1

    c9e72a2b7286e2ad6fadab9579cb0938c906a427

    SHA256

    ffc050d49c04a3d821180a8767905af0d5d4e912acbdb1009a7fe58c5b1f43cd

    SHA512

    c411e2d06593d6a6bbf02e641f1dc4a9e63d8ce8a2a83b92e020fd596902d53a830bb49f09537eef743459990d293c9218e842102d909c06926649d99398d19c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4190b2341b9726f9c39b7b1fc3599e3

    SHA1

    450afbc3f91749f9bd292343133e695c1c1efbd0

    SHA256

    bf05ddd53939e27aaf996306f26343a69a8b96a810ff23c2f64f4e10ce4dba74

    SHA512

    91f48dd03b07bd92b6ee74ae3e3e0263fb4412172e9f4af3a5db6b19419f0e23e7cbcdca7075e076a1cd8d2e0de01448202613ca68b8a78d12c7ccd4764d9823

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9b9a5f9d290cd665903efcf77566c98

    SHA1

    042a42c7178e2a5e6a7d06c0286b71b23562223c

    SHA256

    a615e3f36da3350586f4850c5548a6ac337815daff3bffe272a19abe4e2a3b95

    SHA512

    2c8e1af2a93f8badf3edc6d5af407df1a28fd9af0bcb998f97e13d20d34c87659a491a7e3d9c3f4706264d297669e7c36c6a95373b041f9b7bdcf68b06b06231

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb0db21dedf0b8b643000f1631de4d8e

    SHA1

    6244277467804d9553f4f2eb98223d9073ca91db

    SHA256

    5d6dd6285ba2efb57e0fcfa5ae4a273f016a0dde99f2d443e0807f8cea3a4d78

    SHA512

    22af7e425b7248f57ff712d5bdb51f6895d9cf9af241534728f5ec7e3bdf61a9b4e4c029c2f046c39417cbbffb683a77c65a006d22df4340b8c87f1cae1a09f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b0405f5de6054778c680ec0dfa08525

    SHA1

    1d0d83a3b903877c65a9cec8e0fc002a1ce603f9

    SHA256

    a414cdc20923f41f8db9d8bb8f56af436804f82315974edb1037a5393ffca422

    SHA512

    bf309799ae5da9fee91abfeca82625795cc84df53a35b7a45d09b915c4cb2c6c52ce4b7f18345eb57ce5fc898d62d4b0707aa68e2fd37c227601a6e35eb35e55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    79d20b57347a72e6c65ac4aab4941b5c

    SHA1

    47a0914a71ba95ad8cbed6b2a0841ff7d18df3b9

    SHA256

    bc5dab612772f0607a12c847b776878a19c7548ee956279652777a217b95aa6a

    SHA512

    49c5a54bc9896f321690ca34e130d29335040a03928d1d15065d18db52d5023ff6001caf4a7cec28a065e0e297a789b084728a4588d6d6a81c67d9c24281223a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6ee639ace870ae64f92fa1537c6a15a

    SHA1

    1926cbab9a19c8c5f262fa9a1b0d84a2dcca3ea5

    SHA256

    8f2175c35817cbd8c482d242fe2bd3c4995d478ab153df398ecf37f558d5476d

    SHA512

    ef5c0ddfb3e0e076bb757608ce4ade71d849d7d6d72802f8870b9a567d8b7d0772ab7d76a744e89da9459dbc4085959e498018ce7dc4a9d7b35d00ffd3aa661f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    737089fcd75946bf3464e6efe6a667d8

    SHA1

    e882dbf88a7a3f8f365699ca94127c32ed010bf3

    SHA256

    221bebcae99a1c5776ccdc87bb1b55f2d66a118e62ca81cb2ccb94cc28888374

    SHA512

    ac60b79985b3dd27d395774b48881417764663467ded63e1043528f620c271564a81f1bd2caeb0b0e7175f15850b7aa21d38df7df91844d78b9e4b8bc5e59eac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d02a4f2fb2b8e1275d0cdb31acde8adb

    SHA1

    bb79f798692e9f91be2df7f2cd4412f712e0c08e

    SHA256

    b3367aee908fd6920de418b47b1629470b1fcf31c9539780842f3d4e3a1507f7

    SHA512

    d8a2c5df5435fd5bc7003b58f8638e6cc39d209ec6f3ebf722444c90ee1b42fd9ae319cc0aac88fa412a955b21ca95fc7857106e6348ede68ab9536a63ed7be9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4319d06db43e08e9d13dade7727555c

    SHA1

    84e1135dd9e9109e9361f8be54b378e5475817d7

    SHA256

    eff8763d1414850e7d86970fe90821e8ee3ba7833c8fdda9778b5f7f73aa5e7c

    SHA512

    9c346356355b433efb6a0c0ca3b2558bdcb8944e01684edc3c956acc2efcf29fdf02eaca15058bf210cc9ef1f5b934f4ca26f1e3699e229e0152d6dbabfa6a54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c81155c45ac752fa649717c6af96218c

    SHA1

    b2a1427fd911a4f35e182123c22d39c62153ce13

    SHA256

    97194fe8d893cc97a2b4ce046a0518da7a3d9e2edb5073c7c629d73b66eeb92c

    SHA512

    fc2a95a84aa540bf427a361672b0d098680cc6b15a31f7d260f1629dfcb0d323f062a5d4c299fcba46ce2c162c2ef5d70e05a80ed922b65c981cf05f5d96ebfe

  • C:\Users\Admin\AppData\Local\Temp\CabE570.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE583.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b