Analysis

  • max time kernel
    145s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    25/08/2024, 18:03

General

  • Target

    c146e76e9b3ec2f5af1b233bcfd961c9_JaffaCakes118.html

  • Size

    16KB

  • MD5

    c146e76e9b3ec2f5af1b233bcfd961c9

  • SHA1

    369e0447d40cb85ae27eb82f2a4f87e2e7449444

  • SHA256

    40e70abd669bfee4f6b76f806750cc38994e79a9770494640f2cc547c7327126

  • SHA512

    d1e411b341d2874f999e613d7deddcf3d418e7e281c5f318b230cd5793c1dc5eabad528ab17d337caed0ea1895e1bfaf6b17715fc8f14a6ba27748a98788a7b0

  • SSDEEP

    384:SJnT3na6Edg7EPI9Q1QTcP4omNx3p7O/+6y1EJa56Hvuq:SJTLEdg7EPI9Q16cANx2Q56HvJ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c146e76e9b3ec2f5af1b233bcfd961c9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2680
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2680 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2816

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4cd7cc439d50590caf5b7b05971cc1d

    SHA1

    433eab511028d2489f15711d23de9b387a649050

    SHA256

    a1c5c3043d8f7e774e14ae5ee3cbcb2a1460acfe8473a1a6de72cdd29f95b807

    SHA512

    eaf736f28bb9d69838a352449ac07b473ddfc048e423f0c76f3d1152db50c98e88536013a1a99e41307f3e00b9d349ab8cc3bbfc8359f791e1833e11aabd1b47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    650894f45c333b26e8893ea495dfc86d

    SHA1

    0caad003daec5728b4e5136bc633e4bdf2312723

    SHA256

    af2e81b23029f6f6327ba5dd3fb15df88da0896e6e2ebfb8078ce26ff19555fe

    SHA512

    2aad938c5a9d1b8c37a91bc10912a128126f5c50df61d433741b670c308d14c4197892a120cecb07d68c31e5be1d1c0e1b869053bcec54a4506ca08891418c69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1fa7651ad9fb46094de1f1448c7551b

    SHA1

    62af5e47e7f0c0cc338f387b1846c8d5d8c0daaf

    SHA256

    ae57a4c9670a77d6727daa8f8bff7e22b62a36ad1aa68a8d9dd3c74ae314d3db

    SHA512

    def74da226d84e789abc6c19d36b31e24039d7a645157db497911fc2c322b4809035b25de1deab2b15f7f6668e1895fac584fa61cb52add6be2b435ac7d1a71e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c54a35abd2491bc0e7eb9081076673ba

    SHA1

    2370a131d8eaf65112340b3982212087173efb16

    SHA256

    41dba0d772b5f3eccadccae3a9d2b6953d71383631f7dedc5bad84bfa9ed4d3b

    SHA512

    ad8ea8b4c0a9d254b2569a5e66224dbe0d7232cbcad8ec0e02d40da353ffbcde6e09ca6982dbecbc7acafabb7a4c657b6d16ba17d86b103dc5b2a5f2f42d2673

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3dceb4c432aa00b15e2e58e97b491be2

    SHA1

    6d6b2a868901df88c172fb01715e72d94a6c35ae

    SHA256

    1ac4ae4e80357121d9ee646ebc5f69b9b357fe6b509cee89ba15dc195938fc55

    SHA512

    9b592e7510810e7548496f7f95dbbb23f9b71eb486deb29e8aa8893a2d31e516801e7dad486ba44dcae898bb66a43be209b836c786431ee517fe56ec85042000

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5172c5005e68cb20765716d920f33f3f

    SHA1

    e0c92828f59c7b417980ba368f1558affd082c91

    SHA256

    a040ea24787c06b7d9c65fde8a3f0cde30586e243741b4270a3eb20648533682

    SHA512

    fa6b61bdd625c7f3518478178366a7ffce520e4e1b944dcc3c7347c22722b939385bea2f85a869faa38dec345f8f727fffbecffae2ee0dec81dca6ecdcb37ff3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee1cc2b3466c06d1ce66f2bacc778069

    SHA1

    3b6b6ecf9dbd90c1d54692bc45bf7f0ecc4397a5

    SHA256

    451ba9060f6f8046c4df60e7f14958d3bf17bd435e5f6fb38b9370d6d407f7a8

    SHA512

    41c9dc3ec178a072f928572bee96cdbc81e7d3c54168bbf2bd11acf730ea9f2bf0176df9b786ef3005838cb985e484f67c2b5955a584cce1ffdf883219f21eef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dedf0ee2e0ba9283af9cebd61874890a

    SHA1

    9d916b8e33d7843d1cd51e8493f0383812044b4e

    SHA256

    5327fd9d0070cc0bd0177e8aa9b491ca03252fa77977a8747a2d40bed61dee9b

    SHA512

    62df37867371c2301554ab78e5d0768dccb6b27635247933fa38613c9038926638e15c905d5aa52530af8a70db5777b9db32e528dd3b42b2de146758b556399d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2759fcdd4e5564007b30e49be4014ec8

    SHA1

    46518f00e1838f20a8ff936065f362bc896ae20c

    SHA256

    6b749b089fbde01b3602b21da7df01fd8c43a2ae475e9f7f08322433e02177c5

    SHA512

    7ee6fbf2f6876f479643b1785a9839d14fec0baf47e64fac775274dae2149a2217f30ecb547dde5576328ee81e07fa366f332856660afe64d2058b2a3b37ec4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b8492b91b210589861820ffbc28eb8c

    SHA1

    d1ac4a64c57ecaefe237cae9a715f4328021a489

    SHA256

    c693ac9bb7c4edf5209b94f56975b3609c28a1e4f171e1ccc8e7688da36d7005

    SHA512

    c7b147c54b62b867a2f5d7612a0153e8c94a987a1955b8c1d513af2f0055a91152397955b12e956caddef8cf471d178b210084bd1d98f8658397cc60e3c09dd7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b10a79fb8d9fd29885d90bf325bbfbc6

    SHA1

    2f24b2cf702d5b6a131c6de848f22c848a2de696

    SHA256

    eca3ce6cef4de71d6fb1c7d6826082111fcae80a57712bddbb42e945a8074a41

    SHA512

    3f4ee00210434012c4009b142b7b45af610a5f2950dfca98bbaa65277a46ba23a678d50e7354be992e023bfe9a5ac92b78ed02e0ff530f79234361af2ab3455c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c6b27fdaf067b630360b4690a226ec8

    SHA1

    28ae467c949efea311301fb80b74f79d70344cbf

    SHA256

    2fe8ae8244f5924daa9ef0f249c2721cf2b753e3de8178346d7c7dff3b1bf9f5

    SHA512

    bc8bb6ace54279b6d02a834f42742bdd8ab38406cc2665f4b9025fd8dfbe5a993cb0586194306c4229463294ba03585e8261e2664ef0d9f17e4e63d4d24ad0ba

  • C:\Users\Admin\AppData\Local\Temp\Cab933E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar93AE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b