Analysis

  • max time kernel
    143s
  • max time network
    146s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 20:12

General

  • Target

    c98d7e3935f39414a063e1da00e0d241_JaffaCakes118.html

  • Size

    58KB

  • MD5

    c98d7e3935f39414a063e1da00e0d241

  • SHA1

    9990098b974ff0a91a07dd9a4ff47991a8f6289a

  • SHA256

    8603ed3146fbc3144a8ef11d76a611cf259148f3306ad093c9a7c148f4b5010a

  • SHA512

    76c145a0b8c308de9ebe056ce63d8e6cf214915bd0e8fc5fcbd6f10c397fdaa81ca2b0d7230c03bd656805f02d04976c670f7565b0ad28c5c57c3b2845676a8a

  • SSDEEP

    1536:RFSk4hMZtwmHtDbHv7om0aPAcD1PFHMS3fXxMwOa1tZ:RFkhMZtwmHtDbHT/TPAcD1Bl3fXhOa1P

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c98d7e3935f39414a063e1da00e0d241_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2876
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2892

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    b41c9dd76c8c2b93fde34e093164e5f6

    SHA1

    276d9907d61cebd050302dd4bae1027b5f896d4d

    SHA256

    edbdce0593d0d2c44eecef19948e02a3d2726597d2ac7ab09c2468e314b32624

    SHA512

    12b3a3f18d5c13386067964efcc59b0a7acb09808c5a2b16f83ec4624aa38c7b9a14bfd013267d33e310b8c85329db2e02e96a21cda2199fe67c85e4109e1104

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    b510469c8e69691fa00ec5db368bb196

    SHA1

    71ce37cdee28ea4012a93884bb5b1f96d8ed2ea5

    SHA256

    3dcff0edd6cf3790a0a7aefff540b07d8fe114f7745e267f354885b839202bdd

    SHA512

    0fb4f06077df126b6fe98cf3109d9b7994b3820deed60ccee45c3bbf5051eacbc592841f7586ce323d61259057999ebd67de401e39761fc0625e32cc6bc857f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    a633ab07dbc7d9fa46d1086ac318e070

    SHA1

    8b564905cd8a2ffe3ee9ba95da1e27ed69d77231

    SHA256

    5b45beba0589a3072ef87c6b6a09991a6f34cb14d476cbbd25d31831816c863e

    SHA512

    5de3cf3f014b4c5a8e020344e3b5cfa76966843906ee73dca4f7314ff477e3f59233358b662987230fe7b99a528b146823d6e4022690d68c7e2a39051f950dee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc85ad8c9e5c4362207e97839e80756a

    SHA1

    28f73d3736dd865604c464b35bcd2ccecf31df59

    SHA256

    e3ea9b04bc050801a7dcd3e017706ca2d0e8052199d8131b4bef78f9b52acddb

    SHA512

    24af7d0cc1b4e708cfc9d9f749731283d66f50d5f85f4ffc1e180e132b0ca10723aec3ab35d5276cdf40702253d4a0f241c2d0cde214c12756b4c6b911e7286d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f2f904f82ac5a012406f259d890ca64

    SHA1

    6fb0d0e7a3d3be1e34887984d5569ff51c695b2f

    SHA256

    5d7ab41843cbc81a073cf078dfa767d2c50f1b5911d43c32539df3d2fee39924

    SHA512

    7f9a361775a87daf1f11629e4071310e8337de36d9d19b1ddad4cb15cd419a63dd6a16c9ae0a79b1deb49863d0ebab731c31f0e0ca85102ee37786568b2ccde0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1806c52e279d0f0749836f56af92a326

    SHA1

    85b7d8e76562aaa6b8d45ac1ed9efa3350f7483d

    SHA256

    ff4e15101d8680ed696296819c34e50d15238ed0ee544c8131ed9d04bea9988f

    SHA512

    5771de71691d1ab51e105f913353e0295621bb2fbb70ef88f0038e70d1cafe5c46e98c3c1ed19e226b393cc5d21d0b747731d3402a459627e2d17602e1ad1b3d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3d81308fca2b2a18d732f58468e32f2

    SHA1

    5d5acf957b13c6fe9f76461d54e11304d640cdd3

    SHA256

    333862f3a23c9f33412be6c4f0468121b47f01f7277ad5fba7ea648368da5de5

    SHA512

    ea690bfb2dfce2fed9a1ed94546925ea557f025351f9223659fc546bcc8265ded75764fdbae91e990ce5bd91cbc12230b1eea5391888b7d5cfc42e98a75ad405

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26b21942cf61b207669f1849049900a4

    SHA1

    074dfeca0a5d9e05085f53a77a108a9566b2ca77

    SHA256

    af2d02cfb382fd02dd4b14dfe682945b2fa0f64672a68d1fcd9827fe898e4a83

    SHA512

    500c46b29bb4f25eb5a2767d052af2bdf50cff2446ddb3355565754cb86e9cbc87911f62b8aa86ea606f662cb3deec39b8647e3175f1f104b83b3c5a31b18353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09e460a8304e83c0863f8fef1cdafd8e

    SHA1

    dafea572de8ba76c27f674adc0b8c0fd7f8f9414

    SHA256

    c4aed26ea5836111208dc477372b353d334d48934e05071bcfa58861ed39dfe0

    SHA512

    d6b44719b1413d3f33641ad8c329850d27c25696d0aa4cb681db1dfcd28762432018b9bf5eb9f222c1bf42d7be1ac6b706b1c55437a3c4e44ff93ddaa80b89eb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5cb4c27668434a5d18c5f39f86ac8be

    SHA1

    c8890dfa6f163d687d02d771f899448ef7ac777b

    SHA256

    810130ba1cfc1a6d575b6107641736d5f24628d830bd7b1735ede90f9c6f82ac

    SHA512

    7eff68538ff706628e5aa15d40ac924238dc2d4f853aa08b6f73c1865d67d9a0813b9e89f90ba7ceab3d23d785a930351d8875d71b09479f8c53a56485c48b3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a6ae91a611d2b6f01be7f1bf821aa42

    SHA1

    4e9719018b0ad0d6c17c6aa68cac40fbfad54afb

    SHA256

    ddf97e443b3ffb774a1b496712a1e85447b919f28157193c706b4c823568e6a5

    SHA512

    fe64442de78e086c2452586f96a2e9896e273508a284b09be0d6f6a726a8e7026464e552da4e8f585756a328b052a23c090ac007d6e4960ce606ea98ec44a1c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c56d1ae5e3a8392a24e93dae62ff23e

    SHA1

    a041084b960d9e31381281f544623c298833cbad

    SHA256

    715dff126fa2720598908aa46f5770ff94fb45d4c3a5183059f428bca18d74c4

    SHA512

    7bc8e6b3c77a39739135f681131b37bc2116a012de2e3881a7ed7f7457fc0f2cca67696c54968b79bc51a2886304e702df335819885308730bd73772bc95f812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b20834f1e12014248f334920326a72b0

    SHA1

    1c8ce50dad082250cbe7d1c300b324d9431f6648

    SHA256

    b067b65babb590914cc324852970e20633938c2b826f989c75107d4227df9062

    SHA512

    3d5a00a2049ad9c212e0ae9181429d5719a2503f0e6868886a6cedfa9c517c19b148dedcd0b1a01dc90be984bb50fed04ba75a735b8dcae2b7f734383e4ce24a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bb9c065b5451754c20493a73260c86d

    SHA1

    e240ed8ba83e1f81783611ab97a830b669098c0e

    SHA256

    ce6a6f494f2476cdace2879dd910c2b515ec12893d25c28d62f8588c3eb2499d

    SHA512

    9f4235ead80ac3b1d45884eb5ec831a0bdcd53886157d5b5ea1b42bc9f461ada966a16cad44b229597df86559ae8205b3ebf5d2df37a42f5bf3a26b5a245927a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0a3612c3b8fbac3a011799baed9ec1b

    SHA1

    32a1717b32f8bfb084196b372fefa2e8c0676bd2

    SHA256

    c8e6133ee73f51a10901b242413ea7fd382f62e656b1a798cf28a3287959e1dc

    SHA512

    090413fa0a5122855388071c88da1e7efe8549f7e561eadcc3aaaa07a3003c67aa8a1ffeb0349b74f4890b87c90215d726b4efa4423bae49bd4e78f333f47df4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07fda14522953eb98151f4412ee87434

    SHA1

    81c9d323d0c59163135269cf182e665bafe92d6f

    SHA256

    b63f880108199d6df8d49f31450f6075638e723d0f09f7a20074b889792927c5

    SHA512

    a1a422fd7e66d5523945cd08b44402624e87ed3d0e7e222d477e9b6daa464861c426aeef2ffa82fcbfcbb8e2dacc749c71444befbaee4046670016a595643a59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e04dca85ccb151297d0ee3db6619afe0

    SHA1

    59f12808736e4c6dff40e778bba31a7fa011b534

    SHA256

    fbd5d2b05669e350e7e7ef85866090c83d2be021d19002bc5788fd26afa14d09

    SHA512

    fbce3c0cffe6f9ba700bcd811ec0fcc05e5fb35b85dc2ce2b6ba48e7c0e446594534091289ca800321f12004d666ebe3dab6d9b82cda52675df75f0b4159ef80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    1f44c24df15577f640f3e805703886f9

    SHA1

    989d0594fd4196877aacfa2dc618e74f53ebca05

    SHA256

    707516407448762e801fe08a16fb1873abd6396dfc3ec4022e42b349f9383986

    SHA512

    a168854d5c8a2b5a2e6fffbe4ed9da29c8da3fcfe79971bb033b929d867593f5b27425886e97a5940664b5facab1ecce97a7115eed9485170c7b66d1a671e251

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    e0184fe22274f85a8c835b3a71da8220

    SHA1

    5e5f77e09e0170449c7965a2d4716d473ff538c4

    SHA256

    8111383ea9653fe37384ab3c5db06631611ac2d2b752c3bc03c676958fc29729

    SHA512

    708c405cd2203c04df77d508e230089fa0f783e24f308256216b4c58b40811cfff59fc5c06d96d5e4aa63d694e12c9b9557ad67f72902566d3fe98c998ec33d0

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6XUZ2JLF\2080820689-widgets[1].js

    Filesize

    142KB

    MD5

    6236cc70e862af3784102ccec6563719

    SHA1

    f07dca5ced72cacb33020fefca94b08bae82a328

    SHA256

    54101ac05b6045cf011eecd0c6ffcbbc98b84391f68af8bf4885d69f956f67f9

    SHA512

    4d82cbfc78c56e5da67949eee0174d5e4b05b150dea61c2ca45fa3879db0f0608272d4228433931c38c6e5f5a6b6f9e5829adb57b431abe54608483f392b6764

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6XUZ2JLF\jquery.min[1].js

    Filesize

    90KB

    MD5

    397754ba49e9e0cf4e7c190da78dda05

    SHA1

    ae49e56999d82802727455f0ba83b63acd90a22b

    SHA256

    c12f6098e641aaca96c60215800f18f5671039aecf812217fab3c0d152f6adb4

    SHA512

    8c64754f77507ab2c24a6fc818419b9dd3f0ceccc9065290e41afdbee0743f0da2cb13b2fbb00afa525c082f1e697cb3ffd76ef9b902cb81d7c41ca1c641dffb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WHDSWW5V\plusone[1].js

    Filesize

    63KB

    MD5

    65d165a4d38bfc0c83b38d98e488f063

    SHA1

    1c4ed17c5598a07358f88018a4872aa37ae8bc07

    SHA256

    b1320e0dda0858c87971f7baa0d53063ad2a429d232fd06b0067bda8b9eeb0ec

    SHA512

    abf4c755d88193e7e05398b6f934fc561d8e2adbee7d2170af399e145e54a4a8a93988e4af4e28d6240c0bd1bda7035ae97f67a85a471088820baae8d89f3d41

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YW15VCHK\3416767676-css_bundle_v2[1].css

    Filesize

    36KB

    MD5

    0bef7c3d549ca15e5fe23315fc211990

    SHA1

    28e3a4693a8f0212850a38303a037a6ddbc14d2e

    SHA256

    c91afadbe63dd834aac00b49bc715795da58970e7d500c4bd8f50ed713c77880

    SHA512

    6a255013a987fffae23b8af3a19471cbc4e51f747f41e1341596829fb3316b74882b43f281a9f0741faec345f92c6a784ee6c9beb28d23f211d099d32c597961

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YW15VCHK\3858658042-comment_from_post_iframe[1].js

    Filesize

    13KB

    MD5

    ee77ab1c7ca023a501e4da28ccc2915f

    SHA1

    f309fb6b570041ee11c830aba4dd58d586d193b6

    SHA256

    a09131f2885086eb3dea6a379c43e58c88e683b99fb7cf9cefde399dfd68d0ff

    SHA512

    de42c9f444dc0d617ee12fbace43f8eb659fbb461a6b03ad851a21fed5b44721d63d66a0802915da387f0fd1fdd2bc06aa9a4e00fc18e2125b89a3d2238be6a9

  • C:\Users\Admin\AppData\Local\Temp\Cab6C0E.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar6D39.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b