Analysis

  • max time kernel
    121s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 10:54

General

  • Target

    c8aef41f88224a0799a910d19b855258_JaffaCakes118.html

  • Size

    29KB

  • MD5

    c8aef41f88224a0799a910d19b855258

  • SHA1

    fbdeabc2654e25fff335ba9aa6592ca0bb3e74be

  • SHA256

    ca1cf27f1cb92d55900c73c73d232d168738fadbe12ce2216da79f3f75de61f3

  • SHA512

    3b6a84bfbd65c3f41c9558f936c605ed0e01f6e5f01e0248c45c4ba1ce0984d81186b4b573ed55e26845bf633d3354f4b091a380493da1b85034ba38cc936bdc

  • SSDEEP

    768:a1eT7VhL3BjIDCNL+um7LvYxr3jIRVhApoEimEG2VzWyxAesnobGR0MG7xsEqFEc:a1eT7VhL3BjIDYxrTqooEimEG2VzWyxS

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c8aef41f88224a0799a910d19b855258_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2240
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2524

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    2bc87b8597a9c95613b0ab0e94e2eaf4

    SHA1

    0186c1523c77e08870cc011a80180e9a01daf60a

    SHA256

    bf41ffe8f5ecda15a8901b7fe6099652012ea34302956a4f21647c8d6de54b5a

    SHA512

    746dc6c8f7ba34675ec74ef5d22435cb921b2656d2e7c8ef984b72d3a0f346e9580872a6581dc2f81bfc6d2b6d64e491f043361ef08c1ffd8f723654bd760056

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edb3a8b44c1ad9ff7e2469b467d9c8a1

    SHA1

    ced27a5df394459e4a1a4f75c1fbbc1094e5945f

    SHA256

    f2e9e8a14e7a023078cb48f98b963e587f2d1344cd885c50922e8046024935ef

    SHA512

    fa60df694318954b387408247996385eca81446ab00b2ed278b2f22f726298ab12e36bd5cc130acd7f6371f8815c3cf46b1203fc8787e4f9436aaba9218df275

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40853ff2fa16cc66adb63fee2f8b7ab0

    SHA1

    e4818a462ceaa9f54613fb28738a2606247099bc

    SHA256

    4ad9ee32becd7ead11e0337171c78f4fbea06ba0bb92cb4e132c127b57502690

    SHA512

    c5b63b27afcb99519e24b83300b746a04078f4c3d9eab1eec9fb93dbca9d87a40b857c5ca7b13de34d7635a50b37191ff4ad296a9ce224a460de18201b7a6271

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d29e1d18aa64a5fba0aef245e241396

    SHA1

    6c77bd1c1b47c1d2a2608cf885cd7bcce74b4b0b

    SHA256

    c4aa03372fa0ee5ca597ae2ee94902c7745bbb33024a57141cf83a6953609034

    SHA512

    2224580c05a4aaa0db165eddfdbf9542f378960a63c1e72b00458de2fea2e13561a6c3f9997510de02597a1c920a6e188f9c239162d5388368de72e94ad96083

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa281e41fa9974a5997ccc093826fc2a

    SHA1

    104ab67b49dbe51160616a4d5168169bb2d6b8ad

    SHA256

    88f4ceab40fd669ff5bf05248e8ad267898d4ac1026d5c64da3b7292fe5db35b

    SHA512

    14ebcc26ffde57a1312854d671f15e39f00479658c61f27e1c6616c6a81de4028ef155d9e3f9a9e437ca16f4076307eb55f7f5716f2ce73dc4863b8d352b3b69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5714cdfe859a50f2eba1ebe7a062131c

    SHA1

    cc7222252996eada219517f464dc0155f74fbac9

    SHA256

    82ecc249be509c626e9138e3162b000805c3f60e67dcd456fd8c4d655a37ee00

    SHA512

    69ea3b2d6f274dc8f2ceef7b75b9ef29d5aeab90c0f07f0a2251253900d1caaf671279763eea856c689c81998a15c4fade6b9f6aa8d1a7241157cfbfcb01aa15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0faec487428c22150997bc176aaa5df

    SHA1

    3226cd5eeb5ce2dd513cffba2a4a2259fe8f7549

    SHA256

    00c521c01a140a67451ee74f6a01946c43f24237ee5cffcb3f2c75de260f07a1

    SHA512

    a13b7c1d3b631f1b620028553d2a1b7a9339d0c16a794132f3cdb6ee40efef1ab9298bbcd89c877ff7a2407e58d9749326af13b6745770951b3dd46e1ed38931

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a756c367099e2a859ab255ab1d53ff8c

    SHA1

    ce16ef7242cea33b641cda9e2c0cb0aaf58ccd09

    SHA256

    877349daf3f13c9bdc15db9a2b26ce2fd16e824a1deaaf2f1ce3d6d76dcd9012

    SHA512

    cbbcbb2c1e8f24c154a888632f5808835936c4c4dd462ef4253c4aa54440f4191f8ee2978c35407a3c7bfd5aef17f7cc4e6edc3ca972ee3fb70d1f4f599b957a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    176d0bf608dcd272f335eab48f089134

    SHA1

    0e1661ba67e25cfc75868d549647afc891c47909

    SHA256

    883fd7b372bfbd8cedf4400ab4dda5b987d70999fbc41d9f653dbcef925a6ec4

    SHA512

    e0b52a16236d53c75991427b82d98079b7789c657ead6066f1fee30cd543a51bbbecac123c663a09da25b14b81e18e34577c5cd991cc68a53610256a0e80313b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    483fd8d1817b763f613be123d692f8a2

    SHA1

    da2d2b66aff5bfa7885c713634a08369114b01ba

    SHA256

    7eb5eaae4eeebbf5bdca4b5d658c41bf9de52fd934b1bdb2b48554e62209aad4

    SHA512

    4070641cba5a970913e8537fa83ff61c6aa126aa2e5261a9757b359526d61830c8fdaa461067088519075e655066ba080c7f2d13f0c3676d65d427a8019c954e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91f2c8f36860fb75ebe505c64479b4b2

    SHA1

    d529c8b6373cd19a67797f553c480ae2d4f25790

    SHA256

    4999905786db946e38aaacf1ec099afa2a22e91e53cfd446858a27e3e6e12adf

    SHA512

    07fbf874732840f28c312792b5504878d30c8b5e452658fa256dce513341264d784f65b0e10b49f14200710f36f2729a1e6b32a216ad8286e57df998830ea574

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d461f1d3a85ca28cb2922edcbe048d88

    SHA1

    2c2eb49824fc17a4dfafd32ad1efdb1b33ec7731

    SHA256

    6cea535c76cb28091ea4a8d4e1fbb74b7dcf58738fbe25b158c3dadc761a6232

    SHA512

    40e89751825a2cc849f8621899076fe244492c3d3c40ca1568d7a78059382b2003cfec3a73407366532bdc85610baaa510ef0acf931adcc3112ff157c84986cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58dd3bc480138abd0a09f02bd45c024e

    SHA1

    7e60bd6fd68cba36dd197c1eeab1c5abaa618c34

    SHA256

    b9d439cb444b992437098ce0033e37f2b3e320ef2bc90a34ae0e07f6ceb7889e

    SHA512

    53f77bf3812449b1d9e9dc624a837583b5f4ea8521262438c6f3cfc14222192950060e1173998b749379035410654a80ad267793461ba2f1e91165c46dd082ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    831ae8a74f5cbeeb79eccf68082cdd30

    SHA1

    1f25c01ad4b7828bdb528972fb6491caaf9a8fda

    SHA256

    1de57c5eaf215ba859c7684eb35e444d5c1725c829868a0fdc0ffcf75816a420

    SHA512

    f213f5267b45ea3de8526aaa097f632bd89a3f6f7bc83c342a9c6376b8d1f89ee9cb6bc1d2a5f82d95a60077476d450a2f7196b3b19b18de54f388503b491da4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    367769e00a601b909ade76c604a3f167

    SHA1

    99f3c57fe881537f0037af16a1217e58a51530fd

    SHA256

    61f72f8cc7b93d0d4528c1294e6b2a9bc6153b6859edd47b7665435844ce0fc3

    SHA512

    d2561f84a4e12c535cc5e8d0da71b3e7fa88865ea7802d8b0d442cab8c7894368c881f6fe8354da7e6a045b79c626119bf1343bbbe4238f2fe78eb6d76381831

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a6d47ce635ce9e97a0e95a11f93c73a

    SHA1

    05a319843e7404ed52116c9efeee0631f745de45

    SHA256

    db54c6f6fa80c6b701935009e181e095fda098cef0eaa20fb6bf4f9dbdb60bd3

    SHA512

    84a27aa15403b912f9a8d8d2b6e0b265cd8d698647ee64e3d094e31a73abb9fe20bdc841d61758ce19ff871747008465b4e9200d465b7e8c29d8a108ee9195a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    794babfee739cf6030d02239e2cdd3c5

    SHA1

    df1ed0501cc36298cff5887c24f0877b65c1c26a

    SHA256

    5a7141b470b6783f540b5f828f4e3fe0e0c824b748ec384bf83e51db9b85b750

    SHA512

    5cedb66abb8861d530d4c5ef13a9d171ee7260188c9edfd33448fecfca3fd1d3398afb54da229b370fe6cce7f514475f5bbc1592bd7c2aca9b6724af69a623cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f331106ae6d92c8e304aa251a5cb3ee3

    SHA1

    4b0a0110da8593695123d40a8fe7700f847fb63a

    SHA256

    c180663b5338a0f5df185295d6cb9cee17de944d539ecbd1a6c3bd168c4b4243

    SHA512

    73ac7d6f6b533cefaf43d18a5abdb0c4c76f093f8b6b7950b52e65c555d583f1713609d245125b08daee5764ce29ea76b1c447404a0cbf82ccdb2524e2f1f7b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4af582bf38e4e312078ac86d8782a8ff

    SHA1

    2c5541ac797f601d9b4799eecb356cc617ea2855

    SHA256

    0d39b0e40ae9dea712dbae013ef987e4dac3d848da37f7fd2a023e75164ae0d7

    SHA512

    a7b8261aa6f58fff605c8de54ca10dc623ad203955e68f3be397e1dcfb2e2c8915ace68f24a7a0c73b7a839855ecb669069234937d94078da0480820db446206

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b34c918db62e1246066488abf88d6410

    SHA1

    d83ea86601c9d083fd832ae7f6efa24d4489c606

    SHA256

    51c41c656747a12fe0a5f5c15ec595d442dd1d9f77fc604001471b5e6896b018

    SHA512

    1876ce402a3630204d8ac5bede2148b7339b559c7c8d8abc858f7ab6d4a6ddcba8bb1412424fcd37bdcffde609804d400da41970817c1beb509362843c7b42bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    a63ff04151e76a91031221430de309f0

    SHA1

    c4642fd02c034faec60e08a53d8fbef00bd64b95

    SHA256

    d0f440855a713bf6058da892609b05c25c9d70ac588ff555aebddf9d1ca48327

    SHA512

    5cb40f8899be2044e40195848be42ef606794664374a2178075deb975e8bba40512658edee3f7eb0a0126f2c5392b9f986c1c74ba1ff1a6744e6618dee7bdcdb

  • C:\Users\Admin\AppData\Local\Temp\CabD26D.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD270.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b