Analysis

  • max time kernel
    138s
  • max time network
    137s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    24/08/2024, 13:55

General

  • Target

    bebbc98c01189b52f8e29dd8167fc32f_JaffaCakes118.html

  • Size

    1KB

  • MD5

    bebbc98c01189b52f8e29dd8167fc32f

  • SHA1

    ed546377423535f76c78eb4e257b3f5445464c29

  • SHA256

    7d1f28fbdfa2e9fac945e77a238570321537d5af74fe4fe2cbf95cebe734022d

  • SHA512

    36e142de9c9e3b1e217d989dd98577b1fa85731f43fcc87171ea419395d72c2a76be38fc70874785affe41880093323cfdf6b2a398f4481e2f66eab2797bdc8e

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bebbc98c01189b52f8e29dd8167fc32f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2336
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2336 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2092

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92eaf899ccaad639475b430d91a7ca8b

    SHA1

    e24630ea56cdbfa1172d8b57bba0235536c18e60

    SHA256

    04b10964738da8d0a7e70816777c40ca28a312c6529ddad1d812ad4c7ed46ea0

    SHA512

    b3fe3e74e1f3fe782f9bc3d353e75622a5594d442f626fc4b92aa5c80fef484a8575abd77f53ed102988536b73e90505371cf1f49bf3274d1f242e48aabb755c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f63e7cb5fa5e43eee7a5c08f5a88457f

    SHA1

    16d2da348debc3a8846f17373bf1067eeed0242a

    SHA256

    457e93e90ef0a85dd9f8f665405dd940f7a3a25c55aeab847c44b4ca2b47c658

    SHA512

    235a2e1e4763a6cc857f3ca33bcd6bdb0811df01adc5540a142d7083fe88a9139c62266718d8355466a224e01eb37d987cd3c69a40ea9dd864bfdffde36f8e52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41dad607c84442179333ea9462565534

    SHA1

    5986bd125773a6832296cf35f4231311de1f1127

    SHA256

    98f2f1e9d2581d9a179e47649e8a2a5fe3079d9d647b71063742473abf8d8435

    SHA512

    bcc7818120859b2cd22a5c408dfb070011c241b0ddccdcbb6c51c51e126a1851c1911ee8c8fb720836d9f224f296fd43ef4445d3b6caf4c6f32b28e9db9d9379

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d172dfb504c676a02dfeb4229f44046

    SHA1

    1b5b34fc06f7b55fbf0e1c0aa602c34a1c6a4ddf

    SHA256

    f2fabb571b72bba473d31c0d16986074832562e9a616d51b9443309eb5ad6912

    SHA512

    1ec48418dbe6f7a2299de8cccbf5d8e9e00805e564aa92979e68c29df178540a8829bd8e67a26591e3f5c8c7aa882800cae4f463af125aee687398292d887ef2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03b111f5a0be82df10873565d26e453d

    SHA1

    51c02fef92fdcb25a7a5c4defb5cdecc5f805783

    SHA256

    a2e0e9b9bd0d0e7ab865d4f5a7d48693d43ca0051e56c039aa6f9d71f7b19298

    SHA512

    3a4b099adf63f2d66ea0d599fef32fdf78ef8141742747f2d6b85f67cbb27b9e074ec7498c72f6665dfbfcb205821dc22940d73322d0ccd40efeab6e3a6a89d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c02e7db1770f61dd4ac0b0c89a97e5a3

    SHA1

    59c46512c03b3ee232c67aeef6d75260f1000a73

    SHA256

    06a1aedae2e9fd021c327fa45826848f4b322a6f26e5f8c61fdafd495301112c

    SHA512

    59ac411eacc5ed7ea4e1bf43276b6fef7f12e2623c889dbf5b2f20448f338a0425a03d01ab887db0dd76ac6db8694f7aa5ea0d4ecbc3ced40538a8224ca841a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    860af0ad24dec44a557a2069493d0cd4

    SHA1

    260b6ec3819fceb3225577b5fa115c341f1219bb

    SHA256

    e767564ba259946f2c82c0ab970534b4da4ad2b5614162e0f8b6864094c8f9fd

    SHA512

    426b814fc6f31c74c5370437bc6d6aae08c02f950a43dc5acfb45bba19ce2a28c54c8e23f909072104cb43f3ab39ae6de3043d18fece1cbade90b17c03b84e37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37c64051bd8b37701c36895c11803dbb

    SHA1

    8c9db03d81710c810acc0c6ac004e955474eb599

    SHA256

    3d700ecee49b9503ef1fa04dd7f58b0fc462ab79e9c01713864b6306c045e13e

    SHA512

    91a00bda279708925271b905303728ebda223aa418a31362404b9e56d7664744bb00c343e794f81b20c78826d76ee4fc7e4709b0c02f0964a6d34bd01f725dfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b7a4d9c82b5ae7ee6a4aa7e46c64d779

    SHA1

    44ef37db5d3e9b9752232266b04271784903f025

    SHA256

    f3515fef460136d2e2a6d35fab6646ad7cf15dd5bbddec5f1082d3ae95dee5c4

    SHA512

    592b323e741c6ef590a0af8e926e2fb139e294f390c104592977191c01d2d3c1afaf3c753eb2e2f2afa02057f30ea66e203161a9eef4c861c390a70801bc07c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    068e1ac98eeb6fae1cdcd7a38be32ecf

    SHA1

    bb8afe02c0ac0c3a0062f58f8ec66cdd29be4cf7

    SHA256

    d44dc58b94819636d48c861eba273d85f8ede2fc56a31001cd995e7f93f240b1

    SHA512

    9b21a8f6d6208a21f4a6c2feb6b1daef8a0375dd3274d574bb08e09f35969eaf73440fba3857333e975442c376210c273154623b8b16837cd940d61af2655628

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0bc1f39ccd7cbb3549c0fb3e05bb5ef

    SHA1

    59cf38094007c3854bf84b48f107dcabb9db9e9a

    SHA256

    36a5bbb116663545a36f45698c2779441fa37a7f695bf6fe69c6f18dc91f267a

    SHA512

    bdad324f430b05015d4bd8d539ffa944eccff62616bdbe0ace9694a3c3926f7846d25befee4a519997535f257f3fb1b97225185804a150701cd0feddd3a852cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0253b8d7040ff57bbe500e030200939c

    SHA1

    ca13a2426f54153505f64753fc5201b6f9cd4e75

    SHA256

    53e7e1f86eeee5d5852f1b795ad06acb5a891a88d23121ec2854f8411755745c

    SHA512

    0686a27b204eca14659ef0835e4728adef5f79e4f1454df0c4e35a16ce86bf7c8e09f02e9213c15872a49c734a495874b3799a69b75375263ad944e55c75358f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cb261ced66ab1eba2a59723df419bfc

    SHA1

    ca0e96b8ff7eb700b09485c2125462d523c45c8f

    SHA256

    1b4cba8babc748a4d6aa5ef5c160c3a0d2d430f7bffbcf465ae6ecca82ccdceb

    SHA512

    df492a7c82652f02d3c08ccbb46609ae01982d661071807f47aa5178dcd13aac8e6284f5de327f26af254def78ebd41177f76a58a22d1bf72bb0903af29a85b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdbbd3dfb4accde296c304a4c887b683

    SHA1

    a909b88b7cbbcf335925813840e577a78ba54d33

    SHA256

    623ac891ab8ba6aca8e1ea08d49b0fde49a4eda7f0fe159ea14f1f9fce1d4e8c

    SHA512

    384179ddb12a5ed88f21a0dc5503aa82637bbad2b88e24fb630b5399176603b2ffd9cd915768507bea6482f1794d2cbd25eae820f9bd2ea9c9953adb599e869b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c930f0d99172f55fbbb63ddc26d9ac62

    SHA1

    2105294abb8b012159348b80e58164ddd6399d86

    SHA256

    7e7181c3a5104f5e98eb8160498b073929fb4270020455764c2f5777a551ba79

    SHA512

    98544c4430784c3531ca1a464f7e55ec9322653182d9bc9f5c4e9c0606fbaa8c4b01b70bd4199aba05540d2ec04dacd67eaea6ca97ddf97e43742a45f093fd43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6af2e6a0c2638735fc10b362ece9cb12

    SHA1

    b7d1a68d425c35cbf3f0dba8843c7441a318d996

    SHA256

    0d1ddaf47575648e887aa757dafef82a7e7f8555d9c23fa2d81647cc8d29dfa8

    SHA512

    9cbae6be2a27b9955c154b9c68b88849069ad9a7da5e7a5ffb2a61416dc9fec7bf9c325d7743166f349b2b75e50a906dda43ab0633c586a48bcb67614dbad64d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c509dc13621ec7f4b86af60f2fc5ebe

    SHA1

    fd5cd175f2ff52a732543583e33818490fb82b82

    SHA256

    a2b51c58d2c6b101137f6b2070f08c0c4253285d28c8792092d5a3f3d70b4194

    SHA512

    b87f0b4e5294a185ab4b85787e70cd7b5767f8d27b000a8a239071b9c70d99206e684afaf46e9fa744c52512c078ce1992abf7163418a6fae768c403c3c15b0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd8555b8913308df5ec4ba57fc0b2eaa

    SHA1

    79056b2505c8380c8f6351f82bd46cce9a2d7801

    SHA256

    3c5fbe85c965eab536b2e6bcb42ec21f5f41064db992002ccc855605a7af6b4e

    SHA512

    507b0e8f90230abc50b80742dc6d9602a1acc46be65440f0ad092dac905fd1ea958fcfd0ae6c9dba4c6a6e0b521db89ef97f307367e19036b5d39a2b7502c446

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adb7ff309fcc9111710a5ca0e208d635

    SHA1

    ba4cf9b316ad62937f4205d89021560e835b288a

    SHA256

    66a48decdd371e0c6c978d4b86192265855ddecbc2338c40d31d6d0fdb8a1f23

    SHA512

    06e295b0e843f26b0aaae1b8c50d012517bb734068ead8430abfeb1085887456551cf6f44553f9464782a380703d7e24929203dd775f99e7124a351a9b871852

  • C:\Users\Admin\AppData\Local\Temp\CabCDDC.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCEBA.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b