Analysis

  • max time kernel
    140s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 15:45

General

  • Target

    c91f869da4ef8acc9cb64510bcfdb5ae_JaffaCakes118.html

  • Size

    16KB

  • MD5

    c91f869da4ef8acc9cb64510bcfdb5ae

  • SHA1

    28a4c550814cf9ad7d33a0252e3c0163e0c3832f

  • SHA256

    1c33c4fafc34b8a24a5b4634f52f86a5a85fef4e44221c00a61eac84e2d99bf2

  • SHA512

    6ae348888f45e34e7902e8a9f85f4e4aa2f1017e317f9da2ba74bffff6d5c0f8efae1a9cdb653204489fc45701168d89c64d4a023fee4d001a93596467a542d2

  • SSDEEP

    192:VdPfBJni3tD1Mx0wvuGS5P5EyLFHO5XI0m4+mgYB2lzyTM7Kucbk8LzhnEm0Uh5g:DAx140wvpchEyLFHlS/wnVxQ9w3

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c91f869da4ef8acc9cb64510bcfdb5ae_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2716
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2716 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2724

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3a2a00cdfc29e4dc40b134cbcb52f85b

    SHA1

    960646f9be57e62d4660c01748bbff63842821f5

    SHA256

    c9f9f4af8d622d02d02c0d65d4f785cdc588539fc161e38e24d9326d0ad50c1a

    SHA512

    2ecd142da9f699f4c44151979d5e2ff218d7ef1661111487fbdd49eb98a944db57ca0b89a8283f854dad039b32b533ea127bd20ce72a31c408ed70134e557c0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d40be9a74b0ac2cd63c899046fce6582

    SHA1

    fe46c2c5731b71c7e4fadbe11f76bc2b7b6a6b2b

    SHA256

    c5bbbe8466f0ca6e9287f180984071d485d46421a74eefc0450501ce7b8f6f7c

    SHA512

    0a31275e14527ec3d51b4bb21ec2854832adb2c43ad484179a5946a8abcec023d325b84768989c2833f675e216a49c5c63ebd007e9156919c2f1035fda94877a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c90f90bf15949bc8165d1cde5caaea4f

    SHA1

    e98e9a4ed956f96563f1bf9b5178d0d7b0ab0fa9

    SHA256

    d345d4f3ebd9ccb7b57dd905e86113c97c8802f937baace7a3758e10abce9f4c

    SHA512

    d5a32b8315958a24c85876fbf4bfb2d58c4cb6a43fbde3649f48f558acdf9e105e4e38ef113884a351bd4fa356e80c51450957da912080f1b16904e170c1d3bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f18843dc08026b02333f51ce07146d01

    SHA1

    a7c8a454fbca8b7725a7fcfea065d8465440b1b7

    SHA256

    9747df786d761a84bbc51fdf2adccc408f279fadbff67e4e378a61963964c0ca

    SHA512

    42512dccf850bc88b7147e36c4221c337ab10bd0093117e9795c88daef385d5d30a0127607d20552253fb2a2893a6dc793c4954a574439a679e4f49459dafc6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35d58c7c3419f71a4251a1702ed80a7b

    SHA1

    8287437d2f47e8c993935605690b8a2d86b62d77

    SHA256

    d507366ff0ee941381f37fda75693c516d5f5924f6a3590ad53ead856d7e1deb

    SHA512

    c75168c0fa60de6019de40c79d9cc76818ee401677c12cce0ecb57afc962e175db491a250f7c19319e069c2242b39a92fa4fde2e03a3d722ab6898d88943ec07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cb87b2905977e9cbee8f1c429ae974e

    SHA1

    4a7ced6671cba059052fe52c8e826094162d187e

    SHA256

    fdfcaa07ade4daad75c82bb039debb99fbaf9a414686353fb7be589f505df787

    SHA512

    eb1b74141bc7cb9967890f8ea97d24634b1b7347cae24c3948405b2cced57029f7b6bd4ca7eeef22a576ff1623c39c168f83b50b25b95988e9eebaf097d04309

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25caebd89d5e1669db5a751e6145e325

    SHA1

    e2e257b2ad8cd010b90d10b41937a42cd7b0e567

    SHA256

    6e468906848438c2463a429b9ac4aa30ec9e7bfa72b22ad07456396fc29c3d5b

    SHA512

    70a6779bbda1870916d00e3d8be075fa24946bd36e3dd4c072a39d7a9302b572b69e42f1ae76a60935acb723ebbd28f30d324f8e25b7a8ffcd066e89900abbfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a2985fc8a6cc7ac6188e27a3ab574f6

    SHA1

    bdc2606a475b5cc5846c413e25c174303686cc6a

    SHA256

    dc6f24d861fdf793769911477cfda85d147c758cd14849cb929d98f07fdc5829

    SHA512

    580870cc455e2feb8e2ce90ed5f36fb50398701a686b0c48f23221052d73ef19a5f727d306f843c90c96ea9ab7d43f2f5956d4a1e8f5d980edff87014c4b30f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa89655a7f821d0bd3010454f5ce5fd7

    SHA1

    a245b4614605a3ee2caca29256022ad031bf845c

    SHA256

    538a76177a3fa4afd3b1b8c51169f73fa0dd8704f130afa2974bcf90be259e42

    SHA512

    8bf59ffc7592624d6915f29a151f1cf69be8c150efa72b7abb31b081eb3c5231fdc06ccdbecbcc70ab19b4114717ad887c6846371b9ac179ac8fb699d75367e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b48743e4ebe2a73c69f3620aeb82efb

    SHA1

    2c5cbfb56128ee23d78f7342ff0839b02e059a48

    SHA256

    3329de4d1d11c7117db7d1e6a3fd381c79b1f94b18384900341e890bb2fb71f1

    SHA512

    646a5548a3c9aee37e3d0496241bf7741cc79b8baaf3129d05db4b75629c0dac4df8022b4ccaefe6bb2a1af1e95f97d789e8d6e2924b903665ebc43e95c8a03a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bdf99bea11fde331806f2a23617892a4

    SHA1

    7e319a738ecd22c96dc764ec1ef066d47ce02a4f

    SHA256

    e15166c46e3eea9b63eff677942866ee570bcb4a01c9c96af336e0cb1aaec08e

    SHA512

    15524a9762ebe7f381608cdd13fcd4df83928d04fecbdbf53554355e0b4e32e9f92962f997bbf67c24e89c6f8056581875d98e7e592bd33b6c7cd85d7b65b5c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1529ca98786b861f5aaec00bb50ae17b

    SHA1

    988563ffce3012fcd56968a0bb13d38b88a094ed

    SHA256

    8637f1738c2e9845152f0d694fa0336fd5bc6b2ca7c01e760fe281ba171717a4

    SHA512

    e216b53c4c46c9e3e35c253ca58b3179746169897773d6ebb6f8f52bdf00aaededdb41fc4f0bde73323fce016f3740ff272659ff54f041cc0ec5b6c10d3355e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6cdc546e4a2dde09cff7d5c60745626

    SHA1

    520530ce90ec8f7646a5f06bd5fd1ec44616ca7f

    SHA256

    0323161282d64bc566e0cdd5b36421d9395b39bfae7e404be2d26095d2643d9b

    SHA512

    4cffc381e82574f68dfab98071386fc50a2abc1f45444cd51f297f3e80e3f56ae0ed2a87e985cb32c90433fc4f3e4e78e6c503e5672e934126374fc4fbeab17f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4ff88efba67450ae7dfba4283e5890b

    SHA1

    4e6748b9bb87c33b2d6ae492f3538e744c1c5649

    SHA256

    f53ba141de4fd2990dbf5c9be2031353252bcc51cc9f420e01747c76f09c7ffb

    SHA512

    224b31880eb1568bde168f3babafa235acf05cf1cec3cc4ea11c8edba49ff67a47938a3c52668e93ee24759d2abf2f533335c6b41d9436c2e99d7f34ac0ae8c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57752eb82872784aff161968a0df2d6f

    SHA1

    83e7661b839285cf2c7fdd7c53462cbe87a46b02

    SHA256

    2b08826a178f7dad039e1139ea7cb1f8d804a710572d923eb5023696ec580b37

    SHA512

    90ac34031050552decc6506dba2e6b94661c5de256273ac6864db84a900b7884b713f188a2ee8fcbddd377abca8b72844979eace3d6092482303791d2323cd20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed6b82d24deb331abaef885282b77f7d

    SHA1

    706ce97065def47a29011fbc87f8cefe12f85bf3

    SHA256

    a261dcce06e3edd940f86607a27cd9aa332687a9eca4ebcbf9261963dd83c1f7

    SHA512

    34a3a944efa9f3707f1939c88c1436ca161dbd9888638ad47b2a775eb339217691c2e87cbfd6ddc40044499b2b438aa68bfaeb87ab6e8ca7026769134e99e443

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e046b19f6f735cea68c9eb3f796bbd4c

    SHA1

    365d8a023ea7dd608be20832976c78c95aec4803

    SHA256

    7d2315796ecd3761aa3f3a7331de3239227242ef9ce15468adb1df9555ec7651

    SHA512

    c47fdf247761f2b84099318767aa614b095d3562afd75a9322a92cb1d232109d9b17675db373a810c569a869d4f88a7b05f54ac764ec0fb6696cc67a5f1aa2d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c15290bc40c8524dbde1b724296facf

    SHA1

    cf05c0bcc3337bb29adaa5d42e2c766e4f6b787b

    SHA256

    cb02c0d2656a05a0355d36b50fb5ae26004a0cff2bd90f072c64f36c3b3459a2

    SHA512

    9821b42d5da9c97fe2613769a29209d566e397dd1d51185a3631d8295da9f6d24a8c0f1db27ffb9603fbd50ba58907384ace280fca5f58233a281874321701a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    852255d5997af2e18bd419a4583638da

    SHA1

    21375c14421de9d3d4699965ed5ea824149b3821

    SHA256

    ac7e06aebc25a0c1cda4469567b665bd0c386c9ccfa23a84167bc72cd13070ba

    SHA512

    24f809a15eb39f23ac6ee382641e0c4868159d6b2e65c04f18955ecdb4e58208bb4d72057c5f0f846ce2ec40499e3d45f2effea2f591d8e60b8b6b686570dfd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e4c8fbdc1b080d78fa669c6e6bb3adf

    SHA1

    36950360bd932578f2c3c341bd9eba525e4e9ede

    SHA256

    da05dc099265934950772ff58d2a660d375d4cec43a47340a897e6135be18d01

    SHA512

    a65e345e018b000d66a93f49be01b7091e5dd0f782e981d3e8ad5127d1b74e71da777dffc117335da67f29f20c5bb5ea657caf66f8d762a456542500c6cb93be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    217d43667328af6334cc3bdc606504b1

    SHA1

    d21c38eb4d54e84c9e8138498a9eaca7893c1a67

    SHA256

    0738805e0ccbe4dfcc995f7aea63c53169dde1ef33819cfa8fcb510081b844b1

    SHA512

    7f0bdea1312026f3bc76477d081a13e82e963d981f28b3044306a8a2177e7adc64f21b09123eaca1d7f17de271b726a6546753640071e8fe4284b9ec51f6b070

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa544ef8c9cb86312daa2286489cdebc

    SHA1

    eb1d02c7d661bdb12c32b611421f57a64372a6ea

    SHA256

    c481b6e1848ffbe552561847051b7646f5287c63bc9d51e24581ad623c11dcc5

    SHA512

    71617541220c767732895cdb085c0bff2f4772c1a4ec2afe91e402baed4bd0543c52593a3df487fadb07a244bceb0dd235b2a7f0d8c69e4cece6ca8f577efb93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6534b13d727d9dab06a2a3221ee0e37

    SHA1

    27bdc0f7c801df2179f9fb21503e6cb3b61bf48d

    SHA256

    a865a87a1140dcb1aecffc0bb049e2dd203f37afeb15491ab94c97c8f791cbba

    SHA512

    4bf2415c361d33267808bafa7429a1fbbf627d31704c76cb44b35d195276831d85bde253080a77bd7bf0007c1dec51cbfbefc80480520470f544615a6b4469ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e58cfce3792a8e382106d5b6142264d0

    SHA1

    06dd3f0f1601b9e13c5314cb94544bfc809f056e

    SHA256

    636ee8965741657a29a8147eaec1e5a6377b010b168e7d1a7684187bce8e49b2

    SHA512

    c4bcc69a1efa370b98141ed996a9953d87fb65b86967a83f4a66e7880b96119c7735325f658b62e288fd58991b017c89cde84cda9906dbf25ba50df3bf1cccdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e910f4e5de496f698513e80d9dfe9d72

    SHA1

    19bba18e1dbbb94023ae0499b8f1fb0ed5d12f32

    SHA256

    647cf50a134db8cd81bef89f7267c1a09f3ff8810202e4be6d096f76e055d144

    SHA512

    5d8c3a9ff1858042aa07b7acf4be9de31a4dfabd82cae2d5527061c1f130cbbb2bf1b4eb11a72961fbe80ec1b84f408c2b1685d5333849c67a5e3026bc36705e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f3b5d0bcd72c47aaea39bbd197a9ad1

    SHA1

    d08ad3daa4a22d83e11dd1e81537a45767aa2616

    SHA256

    7fa88e8fe44207fdf43c491ba6755a265dd0625a9b9c24a9aa7ec9affb533020

    SHA512

    f0ea0561ffb2caeb4db7a6e3f4d1a4c02e803eae7079a73b110a9a235ac6f85e390532e9ca48cbd5cfe6b62770535b0f510a4be81a2679ec75b5663d32d51ed7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    ef6984e9b5c46631937a4ec48d498498

    SHA1

    0d221c3541b86210b8d1afbb8d53c4c385ecb09b

    SHA256

    906822a3c8b72b00b9ee7afb9d6baf4956a0f8fb2151b00b87cd3f6c36083205

    SHA512

    0d7c865db69c80de2b33cd3d026876532ed6dd7445707ed87ce3c00f2cfdbe3be095a8f644f078be1c87d65621b98050d12859841bc14414e1125ca4c47e2d95

  • C:\Users\Admin\AppData\Local\Temp\Cab7255.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7256.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b