Analysis

  • max time kernel
    141s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    23-08-2024 02:18

General

  • Target

    b9fb1f5076afa735a5fc70054a848e4f_JaffaCakes118.html

  • Size

    52KB

  • MD5

    b9fb1f5076afa735a5fc70054a848e4f

  • SHA1

    68306db77575adedab37f3461071a8ea9b4ab1d5

  • SHA256

    ab2aecf83b955b1693c2d45a09ab56965fd199623253eaf647812692ecff3663

  • SHA512

    d115ebd21243f8400ab554ae19db383f393cff3aa18e03d6ce61fe8c2e18d911720ba69ec4482a69b5460c1a0163ee0abc46fffc0e4670db596d7590fa7e6178

  • SSDEEP

    1536:xaOuUzB1MtFh3U2qKwuYkSN+ItNHNrNsmnvfd:xaxFh3U2qvuYkSN+I4mnvfd

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b9fb1f5076afa735a5fc70054a848e4f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3024
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3024 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2900

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    7c677c5ca92b057e471cff7a2a2f5e5a

    SHA1

    a11a1bcc4d03281ddeb14f160dcc3a8fc916ac56

    SHA256

    d2b61f9ccd693e853ec4f4322b2cf25e23e45625956c45444c409c9583517178

    SHA512

    eed9b1bfcdfa2f7a4bd97b83b3b77eeb6fd0999fad79c8d5982e0371af6c3e29e5835a1c2b059ffdbec7a77a461f4b925628bd0ae8d6e3a3f4fcf55dd1932e2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B3513D73A177A2707D910183759B389B_147AB4536A182B9FCE88E194D59F3B22

    Filesize

    471B

    MD5

    c647e7b34d1a1d4f892fe6316a872164

    SHA1

    b7412222c631b97797c1808b442c453624464593

    SHA256

    2e64a911e0d0eaba4a4c439ab2548db14d7bd1d4da50f281784137595ab3f78e

    SHA512

    97391a1a57f520d2c330d12dd0fe7f9c40c3a6272c0e11c4a3e0826571f8241442f2c1f5927f921c29f9dbe42ab5bf22674bd5bc85e2b51293f7fb401aba779f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04

    Filesize

    471B

    MD5

    ef59543c5e9d6ce4f1d784823feac557

    SHA1

    80b9731ce5a6056ec78f27db238113be20f940a3

    SHA256

    51cfa30dc4df15dba4ef62be16a1d486a427df74684af2249e5aa27aa997be52

    SHA512

    03b4c6ccf06402c1d7c6abfe854d3ef50713f6c974abddb47162770682c204b8113f71e3d96748ff0c18db305edd059494f6a45d412cab650f03453fc2c43835

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    473f87f0bccafc5efdc31be41b4478b8

    SHA1

    8ea43313718685acabe459a5e7a5e7a807f8ac45

    SHA256

    3d52c4298ee15bf79478910d8d831a780ff6eacc4795dcf05996c34dd3fc1397

    SHA512

    00487fdc9f5e973135abf5c91f77932e85d58eb170edf983bb4630e5d77f70c301125658bd7f5b38748325e0f8a7b0212793648b256451d6111ba86532874179

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    72a22470ce3cda26e75930697b894c25

    SHA1

    d219d0f96915624ad52afd90189de87788002a66

    SHA256

    01a1d440e747b75cc58fb8515fbb5a1b8095d673ecc74e077b513c374e1399b2

    SHA512

    718f906bcfcab1e15b18e057d9d6e86bae126c898a9e9c80a7b94426bccdb4ee65320e93045c46a9001d48a65f3998a1d5fd6da051b8534797167ee4c560a988

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    f173d09d302e031873da977cfb76bf47

    SHA1

    a4e027ed28025300169314c08908b05551b1ab1a

    SHA256

    779b75f5c6efb289369b1b9ac26f61e8d6dcd591792b144507eda8561543c145

    SHA512

    c58cb9fcf2dfef2926f426b41baf5fe6b5a22491cd388f8b47fef32407b509890b729c301535f468fa0e5885ecb779f41ce45a3a60f48fd0c119843ff989cff2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    a8d9a11dff1c091746b9daeb1c39f8e9

    SHA1

    aeb6a40e1a61dd6e8ab3820b71e39907bb12e058

    SHA256

    92b11a00487c29eb882cf00cf91727c9138277c541523019cc265ea30c1a1a3c

    SHA512

    675c4c2b1c4fad31a785ae17e1810a08c765baad6dc439b2c211f317937b6a150ccebe67512f48d8d1cee137a5b9599b2e318ed34edec693d105aabca848b698

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e3b5275668babfdfe8148441718d1d8

    SHA1

    1244e40cb6f62e5c24059f44333f107131e5ec26

    SHA256

    6f9de1b4d08fe3d8bfcaf1982229591a3cee9dba6cd14b47e702892cef49d857

    SHA512

    665e7044ae470b0d3ac14c8bf968430806aee7281f2d486adcaa8d0910260cf13f135ca11b0464379e662f2aa781d1a49ba6f4d8ed607cc2b62891eb1393c864

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6627a645741045524852bd5be0336065

    SHA1

    bbd9e20471620543c54d4a791a4beb5b844c8fed

    SHA256

    f0ec97e247d5fe0f46967f1e5f89ddca0715490b97fbcae2f4a077d4adc48e54

    SHA512

    377ae954c4262fef29db73aec73423103c72db7f5a4131e46b9a4231ac67a8dc2a8bd62e66a9812f87aaff1b05d60107c3ae45f6a7de850e7eba1a305d933134

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41e540e166e92e24e2258753db79f269

    SHA1

    43a2af7479b90e00b7a974e9210dab5d117ceaa2

    SHA256

    1676346c3c9e7757432317e7ca5f1a3460a2f2129018857ff0df74b4480c2d62

    SHA512

    4e6eeb6bf2eeb232022922045af592a25346670d70ddfc936f89bc5dbfad967ebedeb8202dfe34f2d9a66124a6db8415045129e0d4dffc86d7b1f3770d70fa0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ebfb04fb291f0f70f9d9358153a84e0e

    SHA1

    5a7ac7e99cbf4e0b76f5ea51002341f8ae8824a1

    SHA256

    3d0ec17f1f5768af3e5984ba9265b592efb4eec4312af33185f70aa9593d3b92

    SHA512

    cb823964b17e961a128d92b610c52fcefcd2b40ce76079355fae2544e13a1c906d5e0b71c975f8b24af701c1c0ab946464893253c99277ab3f043b6b3cd78c73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abcaa98c53bb7e4cc98a6741210ba3db

    SHA1

    54009730458321cbb6381ca983280bc1839a1944

    SHA256

    739918b6d384abeabc892ca8aabd08670e20b17987e8abccea3f1071cffb278d

    SHA512

    222bb85cdce8aa525942a17e2a8a2ebafb71b982431bc8f3f10bfe671d72eeab2ba5659bf4ce00427d238788f7060e4b15a803c11de1c974fcdfa2e8ac4792fc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    290f179ad979a3284d3daac5be5ee1d3

    SHA1

    c592eb392931cc7c53c38e019e5b8f241b813427

    SHA256

    08c7fdbabb9515f87b44b47baf234addd76e4514f64fa84ac83e804489a8d892

    SHA512

    a81c718fad74ca3879db914d4b21e0e7ce03712a1a1c10fde1cd51157a3079b438fd7b8fcc663725d2ca0f7bcef9d00dd34e5aeb222a1d9128457f4a0d7fe5d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a438d41eb4478b2950463205e6ebd71

    SHA1

    63401a397480ff3d3cfcd7b9164fde3a2d9fa150

    SHA256

    289bfa0a9f5dc0529150760acf2efbdcc3569275eb11f1ba2890d3600576605c

    SHA512

    b78f8bbc4d4e495d741e9f1fa523f564a6f500c9dab2371d5ac90feb273c1a7473bff6781e3c75e0dfdc4efe897edd98399e3100f3c5a8321434ed75d7f7fb9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5aa5c7a80314b85e0175f182187eb553

    SHA1

    b5117bc661ea92fa6b9751fe7159024376f3f1a7

    SHA256

    ec0f0bc13a6bc1c5cb8425d3eedb4934191df72ce161f02b00f22d66568aeec0

    SHA512

    e6fe9545b324c6e557cae7bed509db1f87e0a9a6233325348040069e665032ad80b5e7271bdff3b23c9229be284bf39ea6dcd76027349e68a38acd3efff5d79e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1395a98c94711aedef98f63924930fc

    SHA1

    cf3fd545f6809d324b7d093402c280a730dd5dbe

    SHA256

    ed5d1185266f73313d3cfd157f78476c61f1dadd995530771b856d3ec8b62512

    SHA512

    997238412329206d395632682f8f0b4731b18c096dbbc1c517a2db9fe777619c9c9ddb5777ccd78a62265e926f4279863eb3bef237ea601ee15ce3ffdd0cf306

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04c7480587a314750a6655e7b8d63d28

    SHA1

    cf8e8bf48c9726c6a7f4adff1b24097aca83d8ed

    SHA256

    8670b33b498c2f8452d484e99d0d69e158ab77a3b9f63181da274cfd44581ace

    SHA512

    d81002f444f68c79eb930364f9d983b66eb023f2f07797c2378d6e913c9395f1b5e8cb7e235fdccae0203a79c12531fdde2aaa4622d04a04bf96cf0fe95036e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53b42e179316d1eeba00354d1cb522ab

    SHA1

    02986ae1cded9662ae6eff3b7fa4a92c2b2fc587

    SHA256

    8ee642c7cea037e87486a53a29c71cd4f71205ed4708988ead0956834bd6f2db

    SHA512

    796e4328aebfbe8a63e603fb504a81a3ee66189004439777320c028f0966060ad6025aa76430084947d6b33d9da5a15a0b88f8d9a01941c9a7cf625b0dfbc78d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3513D73A177A2707D910183759B389B_147AB4536A182B9FCE88E194D59F3B22

    Filesize

    402B

    MD5

    5ec3c93ef633d1f442e4bbb30ad39593

    SHA1

    2a7e2346449080c0ab191b77b1c69ae97373a1b5

    SHA256

    a3a922946088527086de32511bc6e5a2805d5f2b82abcb974cf9fe950f497ddb

    SHA512

    10a54e797157206fad67029af7f95ebae4c719b686ee3bbee30547639b27430b9dd3287cd7b7da8a45745c164bc77ae42dab667b60a87d54d4ce50ab96b176c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E573CDF4C6D731D56A665145182FD759_E7AFBAB1045CF53D322BC26D3E9BEB05

    Filesize

    396B

    MD5

    1c6b93878b8fbdfb9d4158c161637244

    SHA1

    46a7139ac3425d0b41b215cd560452d645b69cc4

    SHA256

    f647872125a3949e1f9b5f83e994d9a249c82a5f39503f01437607e223f02a18

    SHA512

    722583d0d64c8d6f8b8562f9d28c7e5c6c7b30875d3160d1192c48f02291846700cfbd7d3614491745dd90a9f8e5866e63534b4b11c5b983e851b6cd12b043cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b605a6be00f5cc1652bebac538b5f4ff

    SHA1

    42e9f01193fcaaee6be55febacff08d303391072

    SHA256

    fe48ecd9fdcdb8e1d702f6a40e3a91f1f19da89036a86e19f053f08941f57fe6

    SHA512

    f9b776c5aeea4562910b2fa0eab9345db95a5e7bc6b2b07d516cc6b569d65a36a633e7e9e126fdf14532f7ef48afa7811f6c3ee149202133e93650e70e30ac61

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WHDSWW5V\55013136-widget_css_bundle[1].css

    Filesize

    29KB

    MD5

    e3f09df1bc175f411d1ec3dfb5afb17b

    SHA1

    3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9

    SHA256

    1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617

    SHA512

    16164d66d452d7d343b1902fe5b864ffdee42811ee90952cbfe9efa9847c58c0403f944c8e29db2bc2384ccd516b629cb8765e5e51de37da6efd75962cf82530

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WHDSWW5V\cb=gapi[1].js

    Filesize

    135KB

    MD5

    cb98a2420cd89f7b7b25807f75543061

    SHA1

    b9bc2a7430debbe52bce03aa3c7916bedfd12e44

    SHA256

    bea369fc5bdd5b9b473441583c46b9939232bf1f98c1cedf6bc2241c4f5068d4

    SHA512

    49ccede4596d1e5640a9c8e8be333f9c18812d58f02b2b15adb54172df1387439e9dc5afc4ccd9d8f0f75f092318bed68d3cd577338e88ef4f9373de8a07c44e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YW15VCHK\platform_gapi.iframes.style.common[1].js

    Filesize

    55KB

    MD5

    aada98a5b22ec7188655c2c17a083c57

    SHA1

    7c3c2fb8744e7412d8097e28f588788d91b9cd9b

    SHA256

    f2f09baa213dd3dd95edb5a30c7764e4a44d9a79c0831f90b1ad8ebedec9dab8

    SHA512

    a780aa3b9e36f61be8240487e75c19a96fe26d54abf9006680a00af9d1d394e81e517f0bbbc13edff3a7190679260ecd56fd5cdd7c2d2f416ab8982c3277b953

  • C:\Users\Admin\AppData\Local\Temp\Cab514B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar5768.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b