Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 09:16

General

  • Target

    c06b7c40fa8c10dcdd47eb75738a189a_JaffaCakes118.html

  • Size

    41KB

  • MD5

    c06b7c40fa8c10dcdd47eb75738a189a

  • SHA1

    e501f3f35b8394f5a0a9de7f1a3956c63b959772

  • SHA256

    04800ad4f55d8d21bc2f048601261d5d603bce443b72916fb102892ca8e123f4

  • SHA512

    fbaaed365c28508513782682c1d450f8a34d4fe4e7aeafde0cbd12d86049502ff0b8e4d8ed57b238619e8fff50dbf94b74f5df7abaa0f3ab49fcc37a02427cd5

  • SSDEEP

    768:2lk4NfQAyOwgIGG4OGmwsamde+MMAbVLV9FqqiGULZ/7ECLE7KT1Z+482EgZh8h0:Ak4NfQAyOwgIV4hmwsamde+MMAJJ9Fqd

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c06b7c40fa8c10dcdd47eb75738a189a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2436
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2436 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2116

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8653af065a0078a3d186c864b637e8ef

          SHA1

          ff9ab115c22d02b646ad5931e0cfca5ede0d74b9

          SHA256

          af40886f7e997a74cf7d5943c25cc2b9d80c3ed14aafd139820bb9095b6c3c94

          SHA512

          ededb13358a30d6996bf4896fa297746e350d1c526662cf9b15b77b159c8ea6a62af3c3bf30be6eada713b832abefe19db785238d5f05f7c591eb44e1650b9f3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2e6cdc8eed19c1e8f1a2b09f0f6ab675

          SHA1

          086d9b38de8bebb0fd4d423f3f8564a9b17397d5

          SHA256

          c3144389b2bfc84403a6ac5e86a827e36b15c601762433f188209a6d20ce1f51

          SHA512

          6e24c0d0d144bba889e7b6090334275976fcb2298753a638ab54a9a60d2ac23c6d53b5663b1768291336f040f2af3ec0a12f0df585e4a5137620bc15b157051e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          e7c5121895ec140c0d22ed2ea433fcdd

          SHA1

          6d08eaa796497a432175efd64d7061a3b61e6809

          SHA256

          36e8ce428c10a610898d3e3f869fca325df3f04c1fd63d97cb0f52f39b7cc501

          SHA512

          19824c1b6d95e838c069abcb2934cf91bacd6032fb73d54d4e177de75e831017506a24bab3d51406a6f88a3be0f6f61387cc190ec4b13a945bc4ed4ce172f32c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a2ff55a18add3d1642c5ef09ec1346c7

          SHA1

          3b5e48e51d2a612f8668ae39e39ca0400cc1f26f

          SHA256

          172b730692660c0fa1df982c25108e1454470436b47a3e60220cdf1db4945708

          SHA512

          95bc981a2789d968fc6f29867947f5d50f12d9e8946b8c4a52d79817122302543573ce9d193fed557a6f8573544ce7af50471aacff3a18a123fc61d39aec1aaf

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          933b7bbe877003c754b1c045e8112281

          SHA1

          58025c4a98664eefb0b324f2c598498ec293613a

          SHA256

          f766fd4e957425e3f0e6874ebfc5cb19134dd7c725530b9bb17cde32e6ebca99

          SHA512

          929d987559e46bf74465d4658863e45d0171b8dc32c8d1f657fb78af53577a1aedb39c2073bf565391885d9fafa0cee3d537504ab84c33e8f38f4c792c4ba246

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          104903ed657dfca8e338d0539ca1ba8a

          SHA1

          77f05c0a452c099bb1134ba1bffea61054e57005

          SHA256

          8c3afed73c410be2c4c9ca0b973d0089b761e13d7949acce5b7041cae0b5fa28

          SHA512

          a5116b94a57343d0a6a41299093863c90de114cd6327a5cdb53d5c39c62c36d8180d7449ce16c9d3e3e0dbe7be58d70d9a0125868192c01d2148ee1f87e77192

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          9d18cebb5384954bc342f11a50d762db

          SHA1

          4e34f0b960d0eb7828834b0d04235de17365557e

          SHA256

          e189f64f452c483cd7b288bd4201a536df872df7aeb281dc59f82ebeb580ed00

          SHA512

          4740f51a6fa7b52b868c532e5dc41f5ef7ba2674bb9b589b8924a0c76fd2dbfd9fc3a35ef5d9d0d34469d82507b29d6ca78e1571c8abe45e4a6cc88e2b0598b5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          a991e74bb028a3efb554062a80f22670

          SHA1

          9d71610507c46de83ea6b0aad848cd1428d0a9f9

          SHA256

          53a5021f7d05a5a6be45fadd0ba658163903e258eff70169460b9ed42baf34e0

          SHA512

          4e5eb1d461fe787f83ccea9cbe85cc61741f2cb77df84b1b5d1630f235ed889f804cc664efa8b3bb32ad0e3da4df23ce0e4213dd276164796f58b6c2ea933de5

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2f4075338314f0a2f69a2a5690d2b790

          SHA1

          25af2ed8694763880b7623b0c4a7e41efb40b752

          SHA256

          7d9e128950f59498dc2b4fa06260e68c744d114ed3af5b1f5cb55053e2b2787a

          SHA512

          8274c02a8a39804147de5bae51923f16392e16355291debccde6a69f6c0e0996bdbe84cddcbf9137d7d5cd2568d9a322a2b74e770fb44d2a58ed3a04cec71e98

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c4e06b02dca4f4b3172da7a3db1828e9

          SHA1

          69e6967207c40defe989330c438173adfd1060c0

          SHA256

          1dd403041f7a7514f9a3cfd63e8b1fe9c29603e882d0a8b192b072ff1188ccf0

          SHA512

          6f1bf653e6b1f8f89b703f5dda4cdf6100a25abf652507afe4f81dd6e38d87b4540f55c0c54104c732c354dd7e21c1bc2406da490ba43bfbce6ef338965517eb

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fdb3802f719631e7f47666ac3be6083f

          SHA1

          7936f39e208f4b853fc3a18a3052f5be90b05512

          SHA256

          b3e31cbb87628b87c0b5b91f28d9fc52bd55b99a04eb6679683204ef26a8a0d6

          SHA512

          297bcce1cf46939d03612615af2d1faa2cab3c5a01ed94060b098bff3411394ef7f15b46ae31b275f39cd408cb5bb589f10161300c2a69f1b5bdd1edd92faf1f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          49a1fe91f71a9d0a3e0bcff6e1d80f16

          SHA1

          ca1d47ad55d8ac5d8e445de63bcb8cfcda118fef

          SHA256

          6355140751894c741327f639e714919b4ce6021ae579c81d54778f4ef7339932

          SHA512

          37d1162153111dd1800cddf0c38a5f8fe83f4f5f044396f942b2394b364f113045a6fd8754ad69379d7e3f7cbadfa79f69d2a0f27815d411feb87bfe87538aa8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          895fcb68c8796e41db51c8f5cbca0dd8

          SHA1

          cbb6cf0db955a69a0df20c027dee8ce130bb7e54

          SHA256

          ccbb7639678e0c8bf6ce0b1cf17cfc0dfbe37ee4906c525aac7bd26fe945c1c0

          SHA512

          654cbccbc31921202b8ad054c11299e508fed4c451cb4fb6420c41506ba5d35daa312a83018afba9ee2e0f5f0477994a01cfde1bd16d0b742daec06868fa55e7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ced3dfd1ce6e75998b50bef01f1ddf19

          SHA1

          2be609322df434b19c7f75bf922b617d41252aa6

          SHA256

          4d61ff4970e4ad93ae6b65eb4a1c8a9644a80343771880a7925181b017ae3e0b

          SHA512

          4a1649787a3670cdf8656030925e4eb2e1b1ec2de990a238dbc2b3fba7eef435c327707eacf029b9e6c8429e5c4325de513f475ecaa4a746d99b039c5f32441f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          98501c27fdbf7728b84fc2c1bafae5c0

          SHA1

          baa9c3d34c107e41bf0c74da15eca2b75a3c13d5

          SHA256

          54349c324e23346f926ffcdb55ce065f37feb422f85ad6d0049341972a82491b

          SHA512

          84c0f2a9a0d09ee5e1300323ec50c35d4c1696942ec40676c8f4b265ad775fb09b9d75674dffa1a3b7782f781197679a22835e9f9f5f9e44e61abaad91199dad

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0e439030df792dab4d7ef1f19ac8d0f2

          SHA1

          eadf2900cd1df374ec31d508f5b1eae7ebee0540

          SHA256

          728da25906cae2a1ef94418ca89ce3247fbd8c0b562eed3a8b3eef05daf99822

          SHA512

          2e74871054e4560cde4061894613c76ef76d3a620f8b2d579e2290f17ad5d52cfdff4ba61663db9522c175829a02569c427f0fd51c72249a6836541d23becace

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fb474fd8b6f09250bc49e84717719492

          SHA1

          66e9d5f701e2f4a22ee12962848c2546870aaa06

          SHA256

          63ca97f0ce383ad645b76eb29f1fd351b609251dc5e5ea239eb903a22e5cb42c

          SHA512

          2b82ac27f32142a0a08869bdff8dde7a975c66853326ba98c299a87e02791757d3af033ae6494cd297b962186ea3179285d2eaafbc7b1c5f736e5491efdbf337

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          ea61d26c18fcde8fd826905399e57463

          SHA1

          047378b8d4b2985b4755b99a1bc86be44bf01d9a

          SHA256

          2abea6da1baf8cefde016009051e7a7bd01b4fde5db2d235e97dac9efa49487b

          SHA512

          ffb06791e3d244589f18cdc64abc08258cf981b38c7d57445ca7601ce4f16ccb7b52146e8bd9b9ac839ca0397efe9c07ab6941e59551241a9224fe78d882d477

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          57ceb53f5c51777fc598238f9bde1f0d

          SHA1

          629b54f1cc82a65b23bfd2600588a666c60c41a5

          SHA256

          7588f91647875a0e8c1dc09cc0f725b5c4023115ca2292259483b36aa2391abc

          SHA512

          5e3c8fc262e1fd3f087685a11f559f2fc69fb8a0a0de9df45113cd4d50b51f2631fc86fdabcd481e3afcebdac30c71398b28432aca329c65ce1eb84fbb05feed

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          79584c82c12895e5381e8f72a237d848

          SHA1

          9a818573f5c818d0036c8c073e7ab1227fea0509

          SHA256

          d65a1ef1ab2f657142ccd5f3c67f5ad0875133e191343642343efe53d1813906

          SHA512

          d9905c032a1f8b110199566dfebd74ba372c6d52fdbdc6b38d7525f15f82e33ade3a0542f7b6883aec2f2bbcec5f88b8f830a58e15e659b031db9b0650baed1c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          310f5902161d941f21a16666739c3cd8

          SHA1

          6a3f55105b684a1e7c5d526d8e129dc20d30aa8e

          SHA256

          bc9c8ae0af8b0b57afc2cfe46d47fed3ddb8f845db91634921b4dcb6498b1822

          SHA512

          6582a4150b7ac4e1e90174c956adf9deb51804c2a561940c9e4cb19f484d4d814befdfc47dced49806c61d0822c6640e00528c17c823ef74d14ff16bd6933260

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\40WV1DY9\cb=gapi[2].js

          Filesize

          67KB

          MD5

          b4b711f3e747704ffe02b49791ce8cac

          SHA1

          ac7ce4cbd3c8ee66e3c8d9d209c1352c160c3b89

          SHA256

          f65bf40e2f0ce993b54772f703f72d53f0fa925457346fa8ec2031879ffa91d1

          SHA512

          b738deba57337a9147927f7dd35eab7c999dea6d2ff11f57fdc2e5b6f64326028a54778886548ba128a3f03ee333cc9e43de5162d8b578b85c290626577042db

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BDDDRHWK\1380534674-postmessagerelay[1].js

          Filesize

          10KB

          MD5

          c1d4d816ecb8889abf691542c9c69f6a

          SHA1

          27907b46be6f9fe5886a75ee3c97f020f8365e20

          SHA256

          01a956fa0b3ea8cb90d7032608512bc289c4170bf92759352e40062d5be2946f

          SHA512

          f534f057e46998bd1ff2c423ad2cf04a880c4a5259e95aee5c6ae34ce7121ccd07ad1bce5d4c3a51ad04f7411b0625da78808326b13d2aeefec502988e113113

        • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LW44N8OS\rpc_shindig_random[1].js

          Filesize

          14KB

          MD5

          9e5f0b21584389dc1c7b5da4a900879f

          SHA1

          191b84e0f5644398ba99e0aa141a6778c14b83bf

          SHA256

          3e21bdafa913fa25276358db1269238db3012ffd8748626cdad442f838e890e3

          SHA512

          c1720a420df680bcc46625355ed6d5c35ae280a813692a0fa293f3ba113a023808a781f1b8c9dfeb3ffba29606e1f4bb4be4233983089602e2d2c20786fb0427

        • C:\Users\Admin\AppData\Local\Temp\CabF27C.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarF28E.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b