Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    28/08/2024, 21:15

General

  • Target

    c7aa74db49db2f0003396da7acf55145_JaffaCakes118.html

  • Size

    75KB

  • MD5

    c7aa74db49db2f0003396da7acf55145

  • SHA1

    e29b411a906530e45ad728476c3be089cfec2b0c

  • SHA256

    5c98cdcd6db210c313cb2f1d5f4bd3f0dea21919a6755418f9317f1759c2167c

  • SHA512

    a7fa1d29b2d22cb5fbe1a8575f6b2d30635b0d2d30450c32a011e9a4a7a9ecd0c3fb90859569d0a9363569eab330702ee9eca43b029d694684fd1a03414115ce

  • SSDEEP

    768:JivKgcMiR3sI2PDDnX0g6sJ6uuVAgtgkpipNoTyS1wCZkoTyMdtbBnfBgN8/lboz:Jq9Xgtgk4cTzNen0tbrga94hcuNnQC

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c7aa74db49db2f0003396da7acf55145_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2152
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2152 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2800

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    252f8262aae9cceb3e6b09ea83f61aeb

    SHA1

    48ce1577baba94af2ef23591b70ffeba0954564e

    SHA256

    c885e23b5800f016930c45ee87e59ae006d92bf1b6e856407df14118ad06caf9

    SHA512

    ec4517cce1f35f8b9813a142a5c6b078ffe4b3d6990cc5feebf5bd00729d69c46bd1b5d39191135bda8ecdddd4a0bd07675ccd9acc5ce6cde24f5523ba735c3e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3cbe73622ce0898f0f36a33b5bc51938

    SHA1

    4112a6e2f95dbef2bce0e02ce207fb47afad5d13

    SHA256

    f0a38e533b09e066ea4483ce3f784b049808a6201dfc0d40c72a054edf84fb30

    SHA512

    b978e19c0ad5b1644c45538ea851751496aaf9c3d88e9506813972997ee45409878f03c168c41bfe856534f8506a68a3f5a89afe40b06852084e0cb017fd5c03

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    823b6c06f0394b5adfcdca7eb7a252fe

    SHA1

    e655f6525eb54a5ad7726be1b884963d2e43d492

    SHA256

    9c02594f078a5647d1167482a84bff74319ab43dc6c742d89b1244c8a181cf6a

    SHA512

    79aa6a75871dce54b74bc2c7b00ec1e6ce34bcca6538b98ff08d650acbd8f299caf71f7b7c2f50b5e57cf14e4aa1ef4d8c9077250c2409619043645d3b615dc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8750eb8da3a859f0237cab4573a67057

    SHA1

    cfb24ca64352f1a2029909f730d497291b783cf6

    SHA256

    1968e2816057775e6cc41f18c7ed52671c8cf322ee321670c089787992d842fb

    SHA512

    ca4d5622c1823062a227b0aaefca3e6310737ab070a710c52943a62d71a73e483ef5841c2616b7351d843c86250d0a716b18fc7ea9978d6a24f366ce2f023dc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8edb6acd543abdac8f77aa355cc62412

    SHA1

    044c3f6e963e72f2b904c73429031c3a61c59eff

    SHA256

    cb76f82b8d18166bb19358b60989a0b338c29f486271d70d61bd644e41e0f84e

    SHA512

    3b3e501d59855b18ff299ca5943ddb87ea56bb44302bc8dc177ce60d4413cc15497675c177b888dd2b2b454ff941343fbcf71dfb9fee5744db4dce1595852937

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c66f780fdfb1c19bf1e8f9a4338edd94

    SHA1

    12c069d96fea5bb571291e57a0198b2d4cccde0f

    SHA256

    5c71f29b2e0d5b7648429d734600ee966fea34ef507cb447c3bc8bff3dc48aac

    SHA512

    904c486d88200e276f0c2c6f4604f07cbad7aff05ce1d6a87234378218ba3cfd92d7db7532046cc127c0455889f6c33ad2bb105d8320b74b7b7295bd7a1a32e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7226ef3de2123f967abb27b8ab142a51

    SHA1

    68a63b3cd737977362e661b0a4b3e27050f8fd09

    SHA256

    ecc7e4e9817e71d40f0e5b38d69d55d9109b8390c8e6222952454dfc9ca2749c

    SHA512

    0ff974341805e3a02826f94c5cd74863c847c007f6b5b8c540fab4d5e7a317640adc285e7c59aa822edba467ec26314b261015eb3de5cba25ce72c95f48e9239

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    719fe3bd5cbba4880ed94f2607caf5f5

    SHA1

    a7525898ce2d244b724902e0539fb327529eea07

    SHA256

    7a2c8d35b3e051e1ed4b63c60d9f7924247fb802002badcd60d767b8bfe74044

    SHA512

    13c20b0731543188c91923b709659b1084404fac5e6a8ec8050bcd1c0df7031c4e480bfe7e79535e52a9226cb6ac597d7b1bd83fcc9244e5cbd57166b0c52daf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cda14fe9ecb1c35fa8210346d78e3b3a

    SHA1

    5b5ac7d3423649e3e2df3725bac9e6e773d7776e

    SHA256

    dbc691d1c13c940924d6979a3a54303656822453520f74fca5a51c2be6fe2f67

    SHA512

    3a2be4ee0ea2aac6fe8733eb7459e6f3417cc726d4addd6e73456fa81bf7d88a7c7d633a5cdd026e20739e212757432dd6e769882875d8c051d40bdb896c0734

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a146e21843c63252e2cdc43fa21392bb

    SHA1

    6497e788c544258e98f4546b46712d512becc97b

    SHA256

    d1e8ff86a55830ff250f28e2e39d9d4eb3697dcf95390013258afcee843de045

    SHA512

    bb9cd5bb435b20a960f4790793d5a623fe68b174d40d9e51baa4a369c321b4f76ee0de1d03bced0ba377fb0eec906c04eb3402c751d59a2618aa2a0c361a1127

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16115d97bb896653c0636fb038ec146d

    SHA1

    645e48578369703ed32dc186a3ac722fee6d54bb

    SHA256

    b6ee3e896e963a621bb8bd48cc9acc4bded771b3879c457b949c9a25b26dbd2b

    SHA512

    059c524e4e1c0fc393df3ccf80ee0944b11d19a12ee4da5628618ed7f7c16fe96042d4b03958ceda24980534b9252647ca3e0f8b8419930fcf939aae96b78db8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a140999f9cefbe17e9e2775f8f2356f

    SHA1

    4bd9bd4625a6666fead323a62ca3d12baba4bdc5

    SHA256

    7973b7ba55695565d7344904aecd7bc65f1ae29c52a4d16e69192f63299ea2f9

    SHA512

    7c24f1eb37dc97608c5f20ac51c3bda2c0842300302700c167a5788e7da6b2c6e0dd803a747ecbf0821b2a1e4f200df577a2ec813a0daa0fa359742cb815a852

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    512c7fe3c27896cee67ca87f3b1fe247

    SHA1

    566548c734094e36d6125bf4c8a4ed5def275829

    SHA256

    f68ceb17af438c9774302a5a56dac877cb944605e9bb1a213cf9df2e81d29bac

    SHA512

    da0d97bd04b85a4d1586c1a3ef0391e803cc666796b3a8dd5c77ca934c96e7358bf53f14d7989aafee4745d8281082f56a335109c1187306f3e1cb4567dc292b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd83b97e3b4702e7d2b9fbe558fb3df0

    SHA1

    de38bd1d5cc1b8416a2a1a6f89a6834e4c5e020d

    SHA256

    e848d66dc4750631200a7230b672bd682f6bcc0e1761df3181271c76ccfda950

    SHA512

    2c97b2d225a4add812dc032a0dabe1e8afb717173a1eb37d9e53bd12aca61c6d9b008f7afa036ca37c3d9908dff99d96cff4a31f43ae3e0ee06582d0dfd7abe1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4578c6240f1bf58fd78cdb2bd5872b4c

    SHA1

    178c854f9ce3d9908156fac2116b6b5e02ab6462

    SHA256

    5e2f7732629b0f5fd5c1e2e0b13727f32f6322e03af6034fb64b82850d6391a8

    SHA512

    cac83867102951a1b00094d1c3266551e7b4dfc1183af342c0a8594529980f594705e04f88e7ff86b31a901d88b01f53c7f31f99a1e8929d6b67921ebd62a782

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46ac8d25160f401702239adbfab5e18d

    SHA1

    a5e9407170e13ef148dca1de178ed346fdf50e05

    SHA256

    bd52b266c5216f3ee4792e551e1f9ac0aa61ae44771904b2d53d5e58dfecdc54

    SHA512

    95fe655fead0ef1ff0a99478f982de51337941d8554624f3956af4512f2d720d917d62a75de2949398e56dd9855e6fb165ede2bd72d653689ab4df9528b539f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3f40cb009ca2d2b2a628894abbcd161

    SHA1

    6a54e6a3e44775e50c54fa8b383d80444b4cf6cf

    SHA256

    9cec31c8b52ee38642c379381428e2823bacc563d1316047ef7430ec47b03f94

    SHA512

    903caf99fc97af9abb8d39b64edd7b48e6ae61c881ebbb69db7a8a676d6e9f422606c02aa3042adbdc8f91d6e6fd549f18fbf0a2c942d8b3bb675629d860705a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    211a4209139312897836a581cf30750a

    SHA1

    23901d15f8e0adfdd88173f8a7688884e6a3e908

    SHA256

    c0a8dd90ecd10743906daa33cf2cd503d6850a0f7f36c76cf637717d4c3b3051

    SHA512

    52e5427aa29f6e1e0736aace4a378f3c07b81a402191c9570bf4ddf18b23f35616128e0bb73270ada1f539253a5f819add07090a2044e987dc06c8dfa65b526a

  • C:\Users\Admin\AppData\Local\Temp\Cab199.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar24A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b