Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 10:15

General

  • Target

    cf4f96e6e19fcc2a1a399826eb0f9388_JaffaCakes118.html

  • Size

    4KB

  • MD5

    cf4f96e6e19fcc2a1a399826eb0f9388

  • SHA1

    3c98fa8fa728db0a33d28dd34957a38efed7f0ce

  • SHA256

    02a5053fd02b084d6722f00e0fbc66faf84c6b7df4fca25f025dcc7ab6e34836

  • SHA512

    cca2bc983e6a5667545dafec145af6ca8627fa5732440cda72d7a564669c91f1b5e0501d6dc66c3661ffdfa26f7c5b3ffd5e19361c8bc0bac3d27fa00b0c5b46

  • SSDEEP

    96:VGWjLUx2TmyY+H2LTp9Txg9t9+KEhp462YVJbo2:0yUx26na9tpIu2

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cf4f96e6e19fcc2a1a399826eb0f9388_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2280
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2280 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2664

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2203a5d0fa109a2b24cd7e1f4e24bf3c

    SHA1

    ff33c3e950f359373b4c11f8327d0b55c219a544

    SHA256

    5dff60a415722eb3339787e33fbeae1d5c8f33b707a051704fd3e37f62557869

    SHA512

    89f3961056a2d4d51a19375d3fa4dd017ecd4d48b37e1e264dbe7a9a848c4d8b0cd7223413749e0865fdaf1756eca7ab98191b7636c02734057ed1cbc550cbf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    225c558e1efabe2741ac86f723817552

    SHA1

    284d29952bbcd3f3f95ce266f1fb378b7f233071

    SHA256

    04fcaef909b9a4307ee4ea90e2875f01680b3d515e0f602f5afe248dc57d9dc1

    SHA512

    32d22db131c484d0654159664ec23616fc0350620dea212689516a619a9f6d7bd3c176d520e215c90e95cfbc835be4925c4f4c49b278b2a69577af0f6e0404ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    279459211351f7f16f6314d1226199ed

    SHA1

    82cda02de5344e00b0123139bff06c53dbb5bdf5

    SHA256

    4e3a3cf8cb30f914dbadc4d811a6f22d4f6c24e99203ff80c095e5f0535f3e15

    SHA512

    4558744ddd5a99663ce54c1d2e068f9a360dd2fbcb93015bb208fd7033e5a03e3504841f8dfcfb514690ced7ce57e5b97c00d0fd3ccb67379f3ff3e718360b87

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb111da3f374611f44277365d4380ce6

    SHA1

    3ddfeb6364b19492a3f3e35052f6fe604de75006

    SHA256

    03875436967fb25274ff899fc0f0c7e9c1295bbcb06afe21cf24bdb5e8ece673

    SHA512

    14ff5280c9914c095326be82c5b564624308eee0a918d8b48ee4b95538488bfd77ff3cd8128b14bae8c46ebe1a033f0479d28b3eabc08121ae86f52c0c5b2143

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba7543e85109f6eb5883a5547221a689

    SHA1

    5a86dff5558bafdfbf3f94835015bdbb7818713a

    SHA256

    5e1997218de005be5f0b84f1f0019d6c55d150984d8d67120fcc8c999b380033

    SHA512

    ccc43eaea327818e18077a6648c421537025fc5a81cb734df4193f08c72bf5a4e42b89e4e3e5e235219bd52c496211a006d203763f404289c44cabf9a290554e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04747ddd7f83beeabe069a97a69fad00

    SHA1

    c1bcfa12eb6a02b10089e02d89d75e74cfb8e70d

    SHA256

    6e69d538687c162d7f52d4caedbcd2cb049d2a5a7815aa9d9148c80d140887ea

    SHA512

    dbda5de92a82c9b649f19424967538c384c4f33238a9fec46101c6b73c8c236aa9724609e275a838ee944e9fd4d37f7c6d1d7c67399294fb4a97680aa393349c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96f293631418865c09d3d3c96a2cbffb

    SHA1

    99db799b5528f1604d63f8ce0b4491edbcbfd78f

    SHA256

    afbdd29183498951e641cf7e50bb249c02fda23771e379d170731e6fa0d21453

    SHA512

    dbb5a5ff9a3e3be4f27406f47293bbb6656c2eb9c52c3d8b7295d35d091ff9fa944abc630a23e95d3275fc10916f254452a44bb7c83f9d1d8b3012443cdc234a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    97fdb6a18fef5319ecd862c0f4e4a20f

    SHA1

    c5d8dc26cf39084c6be543d1103233e4f678a275

    SHA256

    d4f91dae7a9693b20aee312b7e30706bd2c28c1a83fbd7be743ae4d90cf4f40b

    SHA512

    fd745296f716c781e2378aa53025dc1fdd79c89adda77b50d31a20fe69531edf863b8f78a038e6e9c872a4a23a68778619dfac89f56a16dc0b2716646c5b82df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    22b5e7dc8732dd426eb73aad30c43123

    SHA1

    5e1755718432349efad73537f9228dd48a2764cc

    SHA256

    887d0f6d99c7616de5608492b1c0b3b026c7b0796715e0321fe3e082b3ed84b0

    SHA512

    7bc4dc3c020d4c9269701230e97e5251b95fe407680b765a80931072d857354e7bb7c234b6eb8350b216963f2eb85a5a7257faff6c1cdc6c70354cddf88e246e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9834c5ec407f7efca34ab4f673b2fcb1

    SHA1

    c13cd66b7427cbf36ebe869762797a903be2f48b

    SHA256

    fa327a1f253d5c96cceed938f1bfadb397660152236709b1d9f558d6164cf64b

    SHA512

    f52eed747bb18bdf02911eae3851d3810de92ab763483d8e51dcf38458990bf96ef08b69d3df9e5e9d6e1a9d98417005f66db00916ff8ad9743e6e5522e95b4f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7462efdb69220277d6c0c61fd962f041

    SHA1

    10fad012a8de4de2e67e27e2d6ede80ad256e16d

    SHA256

    5d74fca4b29813a3200b5fe32ba690a9f35d84df315acbc455bad32b78bee8de

    SHA512

    59bd823842a2721a8a7e59897a30b29b79279cbe3912c31d40ca0d4e631ef97958f84a943bf0d8c8ca0f0f849a5cacb896942fa94574f8f0134df1ae5e38808f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e35a34b79d901474e8a4485f5d277fb

    SHA1

    7fb2828e96336b92be305ab59d3d11e8e6ff6b7f

    SHA256

    833309aa46d593a6197dbc4cdc97d803b0d4c2f4723c7b236afa474aaf77d8ed

    SHA512

    a03985fed9319955d874a43ddc00f6d4d8aec6dff7618fd6d2ff650c7925906955c74502efc7051d8db652825cf2e9a2ae7ee66f08dc5211cb310677fe497194

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cddb1152a5cb449171898e5862d6c9e

    SHA1

    e3f854cfe9c0848cdd2a3f5f172dd8344d69033e

    SHA256

    b3810698fd58881fd86c9519c1a770720fa80c3d2802fc655102fe4b98368b5f

    SHA512

    8d2d604c68d244cf265e2eb2227edc71a751af95187ef1be73d1cf608aca48285046b65281ba042359d96f10f89f050514679529367ba4472eee26dfb3d5b829

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    446d3ca5e910eee4b643a21736dcb640

    SHA1

    32e570459e71c11a33554527bafd1fe120a631a0

    SHA256

    2ab012694c5965aa3eebdcafbcb50e809d30e2340833bdcbaf26d98d50f29307

    SHA512

    658ea1ff7d949d689ed6d7708e04eade542914b0a977fd551695dee4246a5a28e7f89286b6ae1538bbe268995d9d10bcdce0b469add00aa487efe94eee03c4b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ba48bd758d9fc7957a5c8122ff2661d

    SHA1

    3a8dc1a8b2c39e87b39b1e0681873ab185ba1920

    SHA256

    1c6afcd4933874f89db323b4e0d86f239a9aafafc29bd169d495f97cdd5acb5e

    SHA512

    932d5296e20f7092c6e2c6757a71d97da892ac5c5376d040d1ce01be5d1ec102727ab677c6c0ee422ae9a339f6e46306630f1ecb91efdb6dbf9373b390765d73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a33e56bf1f6eafd330f7ff91e172ed42

    SHA1

    fdf11a2d33de06b58262ac7b3430d4db1c702bea

    SHA256

    8ce0fc4a9a45390faac219089219ea89777d5c5dd4850f05cc7eded9ce8f8f41

    SHA512

    34316cbf8d19c9edb7c8f0875b6e9cf429c1bcddd48c3fc44d92a1454bfd500dc0fce04c57ca39578b7df059cfd69520545dc58ae9d1f3e33654270d8049ec97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    680933a02d8edf6290cc621f2ba4b66c

    SHA1

    4e0774262937103db77d6b59abc92db292f5fe47

    SHA256

    8b3dd0a26a36ac7b5711022da770115d9f9c8706e8911426afa6cf869ea965e7

    SHA512

    97fc9cf43f15503bd47a1c4598de9f929a7d0e2db8a186726fb058d5031e819d6220e2d3c4b8036ef2a845f061dc171c93ab95e9caf7383b36c71098ec20fa6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    625f3cf2249826c99b7b1fde1cde317d

    SHA1

    a561a9a06071d7946070d653b2f562736812e3ca

    SHA256

    b27f8f079ba5a33f31ce80985a972289020c68b5ba98e95a2a717e0c3cec357d

    SHA512

    a63b21e1252701f7044bd0a4d1a4a49cd8f9e40ca248067a5805c4d5c37d81aed7cc1658914c8627e28d52c33115ac5e8a0dcb13d951af11ebfbec3dc597e738

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    223468b80dcc3ff8c4209e8613c84c06

    SHA1

    52f25d470f3fd90b8975360b53d06548d553278e

    SHA256

    22892cf617b2456972db6648df6f28ea49289829a37ef6c4ff95008563f34915

    SHA512

    133c131ba0a75e33b69600f2a4e82aa8c2120ab980826e30feb7ff67db501dfa4a88002a9c9d74cea811aad5cce1c0174b765bc0e1b9fbc9179b78b28fc0dd2a

  • C:\Users\Admin\AppData\Local\Temp\Cab1603.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar16B2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b