Analysis

  • max time kernel
    142s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    24/08/2024, 09:53

General

  • Target

    be586a9070d23a0fa862f4ba559d4a7b_JaffaCakes118.html

  • Size

    22KB

  • MD5

    be586a9070d23a0fa862f4ba559d4a7b

  • SHA1

    51c6ceec339a831e2a4939a541d44195d24ba934

  • SHA256

    2ee5b438b1d5670f9bc45af9c95087d78a99f1a42a307a1a934a86fd73bad8ae

  • SHA512

    11aa9ee6e1ecb0b375c72ac4a8d47399bf311fc08fd0e994cdb092771cfeb5e38880086cc5103785e8df86fced01cb437ea0dfbc72b72d4f63b482fe67d68759

  • SSDEEP

    384:k4w0/ewmTflanx9P5/PZmPff7+MLkpkrkTkipE0SKrEuO:y02wmTNujML08m1uKrEb

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\be586a9070d23a0fa862f4ba559d4a7b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2948 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    a6aff8c491dda700a12d326fdf5d8cc5

    SHA1

    973446f19f4567b36f264888bb131b55cce79cb8

    SHA256

    85f62327a5299b2f7a7655eb6c6dca2536141730c0fbb2b314b415fab0cd8e62

    SHA512

    8df5d33ccebcc6de9e2ac89a52b2c5b3ec79be8f95fc9a102bbc79da6113a94d8c89eb2a833ca4414189d270041241c382b13e561acac837d634d4b1d65e3315

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef2a70bd33d31e003e66136de5ee20dd

    SHA1

    99c5b0ca1755c9868af5bc99c2df5837f8ad0099

    SHA256

    61f77ca8e60b116737b74560dd36ccf021f0b546a1d5ad19debebd5a4c0516df

    SHA512

    52df4ff53bc33aa9ab4aeefa6e251a380910014d95f62344dca401a4e338759e9de6a39b79ea74ad4eb9d2439aad7fa9e74b8d263d14afae4d40a8eef7204ff8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1382788daeeec9ff735c6c4d3c03f6e6

    SHA1

    82863c264b02ad7d54ae2d7a0489d312f95cf528

    SHA256

    d94451bb4659c7d2e61b89ddc4b36216620f99426fc89a56c797af1bdc99632d

    SHA512

    735e840d9e62694bb046243ac82337e18d011515e3aaa15fd635e256000c0c02112b3bc0a99ec6b3175ce445689923cebbdaf86ac16dffbdc268188fefe83a28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c2a422bec733d6027353ebfc33bccce

    SHA1

    26685b148cc3dcae5d735c8eb73da88cfa7fd2af

    SHA256

    0b4fe65df8567f617782be0102f321840f9e6485186049746c7ec3075a61d72f

    SHA512

    81ed72c10c00db34d2471950511b94f58c559f32c373e3fe9dc89824b865940b24a57437e6db82f8db9317979c2cdc19edcc482bba055643b91f6e8fc5965b3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb99a40be7578c5bb55afd0628a0f560

    SHA1

    bcda724bbfa31cb93a0edf4bcb5229315fbe4660

    SHA256

    e920736dceca9f57ed2e3c1dcee308f895a79e3b2e6983dedb6ab6fa3a44999a

    SHA512

    7f84f6dfd0ffe1e37f2cb600f24466704a58defae89620635401b5700f5a904795ef8cb840e035d93e9fa7c8823ef327825cdfb469410dacc51f4b012871fed5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5247b8911f63e9eec7b3d2862a994c4

    SHA1

    70c71e584ea4b8bbc141e732b84b12130bf5ddcc

    SHA256

    e58a412a9937139293fd64747b7bee8db6dcbdab3fa75b98704d96259a79d353

    SHA512

    f5beeb20a62325927468be182917f961b1218199fdc20daa5915b00685e0d3d9e163574b72b00b830534387afa81e5e9af627a6ef931685ded6b7c1e48090c6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd2991039a88f58385891a5dd510ca82

    SHA1

    2234a041658be66151ed7da9cfc59757c3e14fd4

    SHA256

    d65b262e3947b063a7f02446a7d7354a546450d623c86d9ce4e111c4467a06d6

    SHA512

    457be6caf7639c0cea95e685b8af56510efcd1cd27d408c9549e849501958025f61d5fcfde07d62741eb7d556904cfff818477136288571c77bce7d668d923f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe9c205017c4dfbb2973c350b180809b

    SHA1

    e15cd64f96b371a60e5d5794a2ea9e0b12788615

    SHA256

    a5a0da61dec518429051c8c76fbec3fa10ddc090bfaa62403ba3b82531109083

    SHA512

    a95c570358df201d30b04be24671482d46a7a00db49aa6e411e7e6058592fb7c4e465269b6736c0b2dd75101e2fce6fe7c959b4c79fe34d9cc59d5fb5ce07cde

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7700c4af8d80a13a54f361213eec13d7

    SHA1

    eabdde3b2b1bc6147125ef84f4b4c96fd4dc3ed8

    SHA256

    751b6e32b38de1238b66ea0dfb4cdc6398419221fd2834ed74e0f1ec46c6b235

    SHA512

    26f3eded1ceb96795b0b951c6895204e4090b4fbb1acfa82f05babe7b8ca22b59d3ae90adf874db4e88b4ef631f63e7343544f697951650f9dd3879d4c2c8330

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0a9f1575a13c68468c8a23058ef2dea

    SHA1

    9ca20a9210b12b580df789867de612712540f9de

    SHA256

    c6d403e97e25c2a31a8ee88e44ba9e38b2d1354ea10a344ad132d7fe489b48f5

    SHA512

    4532962ae3f339765555b1a17ff7865ff8da3783434d6f118625d9d2a2da37047559e285935f844ed7f473b502d33828c16eb1c01ac279639e70ddb9efb01b28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d23a6518373e987c448d6a068067db2

    SHA1

    f22ea6310dd90877223f64d8a5e6fb17e6523a7b

    SHA256

    8f40b5459dfe3250b93dfb9a2f66c5cd26709bc7b2cd19fdc3cd29fa06967d74

    SHA512

    29da11c5aed94eeb7ab66f2db21c8ac5df4467b39cbcff1f6d5f23a6025b3a05e3253c7d44d679584a36ca504cabff201660fb8a8091cb27554180880adaf031

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b76d3cacdba3c9e0a7c98083d0ab1618

    SHA1

    1eb7ccd19504e71bf541f3677fcdab6e6fa3e23a

    SHA256

    f848cf7cb8c954e507f5dd7777c8e52f7340381bcea274fea16dea5189700fa9

    SHA512

    b6fc1d9ecae5a0689cf26f00b2c106668bc08d810de5e798bd019e324c23649363f483017c51a9821c0bf6d6a4b61fb94f91980de3be21748516fdbfbecb84da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    448d6c0f32570b8a1bc573f3f13f3e5f

    SHA1

    9cc1ef3a01d243f1579e2571f82c58c2a7f9b4ee

    SHA256

    87f1966d78ab913e984a492fdbb65375a63e531ba76800a1394c0fc4ec9fc2cc

    SHA512

    71484d9a9f3519f020d057367f8d5d8a7219992eb445ceebb92c141bc9ed1dd3cbc1faeec01a14645ede6a6cc0821e86584f15ccf03abfa0fae0e20deea1e61d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6638e9fa3436f6368e52077a94c0dfca

    SHA1

    cb3aa7db905139e8330a7806f727fcdc2a93ba8e

    SHA256

    a9981dbec93645b3fa297c449b16e9a8954de80912153b2820059a88e8765047

    SHA512

    6efb8245e65dc01db068d6e059ae805a339e99c44c97f0ab6373bea489ca90a6a481d2e1caeb42d6bbce5c4e86e9e03e07464f38bd8cf2e8fabfa8233dd41325

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdb0c1b90a02d37c0ea64fde2cecb390

    SHA1

    537e66dc4fff6b3ce93ed94a223c0b264166b806

    SHA256

    60c2db09c952e2244994ad8de02471aae7ca252b19253b0d5b928e4103a559cf

    SHA512

    351799d64365c70f77d3cbfab0e2c8d262b4b98d0e30cf83824b7b01055b1d38285dd96f7148ef999a04bce7b354dd30c7b6503db9d54165b0702d4f3be6185f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a68544b9b06e3af4168bba1c6b7cbe04

    SHA1

    e31c1eb885dea7d60cad6fe773556e4d8fbf43f2

    SHA256

    1d4a5c716d213cb1f330a588e979d2818be8b0cc382666b768032a7771518cf1

    SHA512

    9657345436ca7ed9668d118077796366b3b7c3d461842d2b03e7d54665cb7ba65e1bdee06d43f67d3b3e6f13c7220abc3838b46c75353372a21f132b7d94ca4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    432d86a8b1ea8d2d8482d27e1afc7a65

    SHA1

    7f02614aaefe2ba42b4ca82bf04b25003dba6613

    SHA256

    4f3159bfa594d590dc130d667f5758a8b969b46f1474e874af2744bcfbad08c1

    SHA512

    7492983441d0b9b15da91d33e217eeb704fa71d4919917e68e239c7cecaf0999b3e563028efc1bc628f83cdb5c6d219084eb34bc7c2a5df1602a89fa5dee9d5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adb44cccf3b284a10232cfac1981e4bb

    SHA1

    97e3c4b2fbe0883d1989ccd642352849713e9e2c

    SHA256

    081050fd05dc524d4de9e33f93d0e979e8db1f3eccb8503486e410c6cffb6e77

    SHA512

    bd82dbc02a941c762e825502fe035587268617362f7d527ceaea30e78dabd876e46432a98b140c4b08d6a6ea4f537b360f857b984f8e9a0c202a4dbc71e201b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    224c3187513e6c7f991c97215b22164c

    SHA1

    ac9b74bb409ee0fab2d53eceb6d399b072620701

    SHA256

    d02cd5b49fa7e8858fbe7605456ff0dfa65b521fb14eb894adf2b40f61772356

    SHA512

    48165b371475872bed302073ac2d0875011ab021c5abeef128d7fa8482bba0980cd9ec4a466cee1aa7c87b1c8d481fa95a2de3498f195af3a338ce7dcfc7082c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ddabbcdccffa19f928ed827ed67519a8

    SHA1

    e99cd15c93420841b522578384c245dd1242fad2

    SHA256

    e9c77e5a4ef987b52c7119bfa5cc2695e4602fee661b848ebae6ccb966d4a111

    SHA512

    2f5c23886da00ecdbb94bdc9c2105e1a564bb04e60444b9eb89102700d7cc54ef81b58e02b3b725b979d1bb8c058591b8082b8f090b16713ab678b8111f972e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f2e0781a406ee6537d729a56e718a324

    SHA1

    df4549284d48cabbbeac6e2adad05eb4de243be7

    SHA256

    f6564094805310fd719fcee56e8b7d4428f7013f641511e58e4f8a7ea06d482c

    SHA512

    5dc3fb0a5ea77f486f1ec46f7b47e7112d1340c8ad413deaf0279ae05a4ed0efc24ef067ef8943a3906f3387fb36a5779d03ac24dbdc1c55881be54e62443286

  • C:\Users\Admin\AppData\Local\Temp\Cab2202.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar2224.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b