Analysis

  • max time kernel
    145s
  • max time network
    153s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 07:07

General

  • Target

    cef5925340dde65df322a24c56ae96bc_JaffaCakes118.html

  • Size

    5KB

  • MD5

    cef5925340dde65df322a24c56ae96bc

  • SHA1

    b1a1e6b873e7944d065aee85c9d287b82c439864

  • SHA256

    956a19275d5683fe7a82042160bd26ef9dc0869e139f925dcd03b4153f39bae5

  • SHA512

    270b42e3b43e84b4d5f287a5fa3f9f0e7e6afcbf320ac46e19b21467b8743c4cff88231a674162f7318d25c7e40be132ff691525256dfc3cc68d7960562c4613

  • SSDEEP

    96:xXNBSLkPgtPq0NxgF5mfuuz994OVMGvIQmtJm03:pNEk6Pqv5euuhmOuJ5tJm03

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cef5925340dde65df322a24c56ae96bc_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2432
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2432 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2552

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3822ea50255c3122537c1b2b176c995

    SHA1

    8b605ebce84d266a1e5ace879a9e6e3b2ebd7cc1

    SHA256

    cf330372ee85fbd514e45f16f80351a6d929bee785ede2cd0a2a5029d187f97a

    SHA512

    559d769f381c4f1beee5a593f3c57f584a8b2fb98685006c58fcca44b7f8b86ee4d3a2eba86cce29128550d481b1db48e279fe1c4322d230d42f3fbb6504e8a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3ab759fda0844d1e87a271efa310b0e

    SHA1

    8dc1da37f3f7b1e5ba77d3bbd65e84d345d6c8cf

    SHA256

    4ad26b9bb74384b1faf8b6a88b380133285d2ceabe89f975555381c1cd11432d

    SHA512

    8be43a467879dc982b594d2b8e967459530584002d418bb37ba64477dc2dfbd5249cad44224a7999a4976641d905ddd74e742ebb68eb7e095d347e65d83f1457

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7c1cf3cbe05b61ad8f88f8b253ef64d

    SHA1

    534288ca464fefb8b02e9ec26be55123e6106537

    SHA256

    4cf622510179995b65a0406fa5ea06114a6823ff872915e0f97384d2899da289

    SHA512

    e59f862e401cd2b338249c49ca7f956f95201a109c1d38eb63f2904cba576feeb149c254e9cdb2890c07fe9338b52414ad39eaed4164d55f2a3f42f03c591f37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45d02f151df770ac26cfee9019837fc3

    SHA1

    66ce5133a7a155e079c642c6d9302046f71a699f

    SHA256

    f7be9d7e8233d58f67bd4fc6a3e43068d3cfc1ebaf467eedfe3716dc691739a3

    SHA512

    8b142d65d726b32209bc89a92c9a6f06670cc78f7bebdc0d17d5cf6bc1e649e0fcb6443def476d8a38e78995e9830ed56c15dc4757fbc802532ea66fa68990f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a3a0809806a52c6f0b2df7364b4ae63

    SHA1

    6da7fff8ccd0136b086bd024163ba7c1a81b87d7

    SHA256

    da1d3a0a4f4ac8c93ea32fdcda08be0b2167f90c8c16ef889a81b8d2b7efecb9

    SHA512

    57d8e194a716210524822d21cbd9781cbccc2470617386814501c439eea38f2605418b20e70b5428874b80c527b1ab13701319d5543c885cc7f5839a430cc501

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad99b51ca83821a034a29fcf91e1643b

    SHA1

    2bfc8326f4634a21ea9876c06dd299bd0e9c280e

    SHA256

    d486a370a337cf73738c44bc6bc6ee47816e94e2f2895d7be2fcb004cab2815c

    SHA512

    26d50246a366c382c88ce4556293bc52b31a0487766eed0645685b986c4149d9ead9dcac1890095ae4399f2a61ee4c83b389de591711bc3ab5ac3933be36c25f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ea91d5597ee6393269677e8eb215dc3

    SHA1

    3b2d9633240cbc1792541c30493158b44e0a6790

    SHA256

    37a3481ad18d244f6720cfda19cdfa09187b8b6034192732f58160934e5169d7

    SHA512

    23ebeb07aa7e763028ce62d42a6ca1501bfd8fa8d970358fe3d6f711f98e7ad034e92c89c88eff22f8daef269095dd58554b0e2d47d96ca12561f950d25eed57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b9b4458e77043a3a58309a16427abf3

    SHA1

    7a46f9b5a82ff29ef64b3c4ad7483f5c0c9dc309

    SHA256

    e60424e6bcd249ca06ee914f91b887caf9c9ef2c830fae89360872e9b3248cbe

    SHA512

    bef8f673c4e973aac6ccd16e6f1c52df16da291a7a7c88a2d94eabb4a3525afdb737c9712735f6cd50a6222d47431c5ef07e8aa2d0bc7cac3018b42809486c7e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99df4ee69aebaf8cdd0ffdfa9893ea45

    SHA1

    f460207a79395e6341c88cc3270deed40c321b0f

    SHA256

    e2e78f70579476dfe488778e9c987f74efdc7752ca18c96c693ff49be82d78b7

    SHA512

    c2655dc3636d422fa3093ed5642f9b9004467bb87a305b3f028d44da32d5548b03a34122e63684a46b635333b686600d7add431cf5bf993839fb67986225a9a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5cd679c09f80df7696d27c2278a179c2

    SHA1

    35afa2b4fade9b8bb9a85c800b9385172dbf1bdb

    SHA256

    630eb8f9be10e2409389ca346a870ad9c4fad056540e63bd6b3d111a1e68de65

    SHA512

    47a51b9380cde2562e13966ffe38f23b8f899d10ac768814e08c2306337932da6bf56458bd0e2c24e4caf121488746b1ad18a40e80c16c7b7745dc4f5f167fda

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09443c4e159ab27561e78260c1d39420

    SHA1

    4c966c0e2f3ba0e1a9dc5a33f830bf6ede045929

    SHA256

    2313cef1b816cdf76827f918e42b016ab360bd9a7c9d3052bee167ab8f970b3c

    SHA512

    b769b0ef6f7efd99e9e944988e63b5624a77c6924df990450447c5923e94b48018d0b4618cc052b211fd52e04c4a76bb6397dd000d47f46cbe8a3c91b584f1f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7e9a62e3f35db8da80e6ea3de177c9e

    SHA1

    aeb94118357ea4fc556f21054eb6fbc4e84c02e4

    SHA256

    df347b014e9a43d2000410082316d41ab80a353f0e3c08251d9b57d39ce28a0a

    SHA512

    7b28d6afca5c13b415caf7f3b3413f488a4640f71886b6de47f1db2fca7a2ffa4c23c7be9ba294b939228041b900b487f6e715a826887cae0a77162cb5c6c9c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f079101937d03e5b3c239dc8c502bd6e

    SHA1

    3424873a2222d790dcb8d0243e4287152957a9fa

    SHA256

    173035ad3f850bfe39eace28e2c888f504021874486c8c7c1733f9dd6ba0b1c9

    SHA512

    5c37d071d78dd812cfd51d4d12fddf93d3873bbbe8610a96db1f2935d7723a56272302dc5b4dd98efbf75328b1c0a793f0bdd8c1fd3b337e7fb8fdced7c62c34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea4df05fbf13ef6c1b382771947ad688

    SHA1

    c7983c892c83142fb495b0632cca515311d34fbf

    SHA256

    bda8d3e7a023288eec1560b2de0a144461cee8065eeef3ae059be9bc217771ad

    SHA512

    33b0ffbe1a6df499f83646be451f2c9ccd1474703bd0ef0415fe39a8c972f743183557bc046260b63a110ec86ca5f45cefcbfc5f05e8ea99812b1983a2131e56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0cea652013b809bd1d40d6d1228e88c7

    SHA1

    e6ef6f3c1b6b80b193b788ad1f5e3832b46db5e9

    SHA256

    5e768179d85a8dfd88a8d20152cd107c87cfaea73f348a4c4985c5e070642efb

    SHA512

    344f1af3bec482000c1aa33f0dc58178ee276bf82fc53f5d456ceb8f06e22051062bd147a1c8a4b0ca660672631ff7c5d619399a06527f22f64f94882ad7b094

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1bc5db3d1a09025e433388db1ba0af6

    SHA1

    3a04daa93176540692f31370726c71161b0253fa

    SHA256

    81907c6db18a4a294b9c13108746a0092b9e49ca28dfc532d7b398d35fae79e9

    SHA512

    442ba2a38ba76d4e04642cfa4efa0e922d136c23ef61db56f557686583d0d7149b1d16de8c7ebb01eda712ef05c49e3b82c5b760e63c2cd7df6edc34b74979e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa8b88329c6dc7788e20cc8a69e5ae92

    SHA1

    7a6f468ed3f466522a5e817b73249d099891f79f

    SHA256

    a1974b41444a7bd269cabc23b850e1b2a170fffb0207d1002b1dc1c9f2123777

    SHA512

    888024cafef1c8d6e9927c7749a04a26b38d1a9f6a081ce9cc090a02df3d8b470c939c3df8d5c71dd37f379450126513fd2a9180be2cb64be8c03795dcb02c3b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1326bed0fb640c06a14521f018ea377c

    SHA1

    553cc682cfe396777ed6f764a0530e4abd84dc4b

    SHA256

    db25f1703d0322372e4770a964a8aad0cb35734c06b2047eb5fdb14d3cbe6c43

    SHA512

    fe57433cda5eb7c1400e1e9594ca0a061c7cbd6b27db05f2e58878c5f911a65898591b80542e319524ee5eff26da4daada9847a296b06d253d3d697f2e36c496

  • C:\Users\Admin\AppData\Local\Temp\CabB703.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB7B1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b