Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/09/2024, 14:53

General

  • Target

    cfcb8f9c91d74181c40839af661d4d79_JaffaCakes118.html

  • Size

    36KB

  • MD5

    cfcb8f9c91d74181c40839af661d4d79

  • SHA1

    1112ea6ef7cbd1732d7f6cb4e297f4beabebed0e

  • SHA256

    f8f80fb1d991f595f454ad075a969ce59f6408b278d8b412de342e2d243bc8a8

  • SHA512

    217580e0f1234ca4344c39dcdf397eaec0dc0eb4fdf029de1b84bc4c364e818bb69ea63f17d4bbe6e6071414408a2947d30b9a91d4c7c40ee7ca4702a6bda0f9

  • SSDEEP

    768:64FQW81D4RA+vEOjz6rdG2Gil54RZfPGnf3Gu34aNi6781DdRA4vEOjq6h8aRlR9:JFQW81D4RA+vEOjz6raA7Ia4C81DdRAW

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cfcb8f9c91d74181c40839af661d4d79_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2088
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2088 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2708

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b0d6bbbf2a695b72973a2edb080bc9f

    SHA1

    f8a525199ae26b6b4eff9937870df25a084f5875

    SHA256

    d7fef647e70ed2ab38c3eaf98f230fe972a004d75af41b6047497564e6c50a21

    SHA512

    8b726d909501f3561f550da1e55170ea967f552175889e205a421a388e433ab30c2ba1fc1f2f2ef04c9eb1a790807d581dde7b9e4eda82534b5b42faa79cffe5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c019ac8ef5616a4bd1417b4f24039665

    SHA1

    eca22fc7553ba299ec4ee8153f5514123f3901f0

    SHA256

    6f84866dd9af0d189bea918a6c5f7076d620d3559af12ed65cd8e56fa75b1812

    SHA512

    98d0bc86e284b40428ebf754d1c843570c39dd6e3a1ec2b369653f3a92ed35d87330a58935fb4622c5a95beab46f9d6522ce7b5be0a37503c55e5b45408ccd8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d765b71c32208425c0967a28e1cbe320

    SHA1

    1da2caab8e574aa8a7a15b3ded66ab6f2c4fa553

    SHA256

    1b7a7ea451d40fbbd69f56f92037dc15a51dbf27409b6b384589d40f2e162f0d

    SHA512

    15585eea58fc7d35910f54680dcd7027ffd1c1f59e2651ae2746d43245a5735e741b46234064dc5a5bd22c24b0e2bc7b2ed7dff247c9ddb6ab572754dd9fd313

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e835f3c38a0834a126290c043076d9b9

    SHA1

    fb3572e14610627bfed2ea94c90e013acc5f0c23

    SHA256

    6c4c3e4a047d5f5f898c8d92d34dd3f428ca1280623b98174470e2df4202fd43

    SHA512

    8d490358897de5c88c34695b38b0246548a58424381dfc564018a207d2c477ae9fba065df82584ecef6e5bdae9fcacae1f5d8433b3405df9bbb5c04977da69ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    594c8183f44ae7c62e0abc215c62fda1

    SHA1

    b8f0e057943d8177fc2d3644c1882119b0182ee9

    SHA256

    d71ee7390607cbef02468c5a9178b3def1e1913a35cfaf27f8093f2a0b5b7647

    SHA512

    2e71e7b0495a7a8c13c0b17c334c1befb39d6598bd5f48fa1f1827d97cf4219d8d1803bb1855abc5bbdcf324de64b436ee7e5d25b21b787967f0f4f68a177e3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df51708df56443d4e82fd7967784088f

    SHA1

    28c22c1f39348ab7567d40a92eafce2aa236bdb9

    SHA256

    864bbaaf86dba07f7d19be1ad21376e2ed3637b324e93d9d3201327b40e3f119

    SHA512

    381127bf3abecd8f5702477fc03c1338303b2e91407e1f6b9dfa1372656218169f32e77ecdfe6b52095642b28e644a84bb05c104b3f8d8f07c1d918078904f98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac290fe8568c9e1baba863cdac8220c3

    SHA1

    685e567878459e46c36dc3d830f2c0cd23af57b1

    SHA256

    5cb1651f7fdb22edb0e9e61f6e8e151380ee067089a2c0bec7bf155cdb210e2f

    SHA512

    b08503118f6b1db9823769593daad456b4c5a9345ad9a5e794877f15f4bcdf87d111a772c2f7583709a3e5021b8b67355c8e15d3115ec048a5ff24011a03b20d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28da6c581397f86619f1da7762c53ece

    SHA1

    8ce64cef4f9661f39d240a9cb52d68f6cefa2e27

    SHA256

    a91321ffb303665d9ef49c613859679ccacfad479c454ad11b67a55445ee9c15

    SHA512

    5683915ebb18ed2a82e195f9f9d46183e71599592b4c04bdf6382f74484ccae5616e16b68f73d86a77be2a4f33121b1cc031a86b6874c70ea2fb04280bb1e0e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e296294d325ba39cbdd6e32662cf11e5

    SHA1

    a35c967d68ae66840b62cda7fab8f9105feeeee7

    SHA256

    0e98973738db6df97146e2816a7ba1dbf3b8400129d35065b82f3ae0dbb9062a

    SHA512

    6ba8e76ee8a2701139048d018239a67e47e911f9f100a89acd2a0c85cd79b5b39c6e7b9bfae8b5d1e5b808421ed7e307f3b4519b7e4fdd352b6e8114d169ad20

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e711e87e86e2add79d5cae3230f1f747

    SHA1

    8a61bfcf84822eaa876901f7138da4cded81fe34

    SHA256

    8f95620f8eed9f096be185efe6158852b0c2b5832e1be500d996b6e4da5a2c4c

    SHA512

    3e9f7ae1d9792a1216db8d6d01f3ab993e236eec15203154fd5ce8829f0e29a19dc9cea3769abc32ea131a52b3cc01b381c2bbccb73641726b5f0e06c29bb321

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    029ef19169138caeddc6e2e812216034

    SHA1

    7631a008ba09bd98c897d6ea416424b2cfdbd2de

    SHA256

    94185c45445f81c278a38f7fa595fe04458d6c2b090b0f18be0efd0eba0cf0ef

    SHA512

    ada0c73f94a30bb368eca1972a62ffc8266a03abbf71a65133a1c91f0e99bc68e523a267663c67aa00748919df30cf6e59090d724e343701860f0ea4ec0d63ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b22066d96c8cf681c06e11a9c93e9f68

    SHA1

    c826b7a97194c5b429229963c4f2a9027fd06be6

    SHA256

    2634d68bb7e6a3df1901145f5d030e3a1476ab48ad6e4236975c4f26760a8be8

    SHA512

    58186e5c89cd5413243b54e690a90b09901e1c9df5b26c203b2ba2b672cc513384b2735198b7063a53468463bef603123501704fc9b84de5b98a4847ef00a0cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de342b038032ccbbb8921bf09ad38fc6

    SHA1

    0a0e6807af58048c108468859fd092a48792c93d

    SHA256

    83e1a49b4804b6096c578ce0a616d46e70c6bd752478b9feaf6c917d141ee9fd

    SHA512

    c69221e8b181b620c8415d938c4306ee3a560da419552ce0ba41ede361815bfc15bd16692c9a6f9d476c5a58cc1b5deb01781f84c8f8578edfe8d3e0fa5cadbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57d07f563be0402ed3a9720b89292396

    SHA1

    e764ea605136f2b14275225c90fceddd758e980f

    SHA256

    ebd34d62ebdb45f9d9719fd367070d90fcaada97fcd26369206a28c24eba9471

    SHA512

    2c673457c934442cdb428a8ec8a9e2d0eb66f7e4f7d0e715e7d407c78a2bc9396b074502ab59b5175cc650435d1ab5a2a5178d2fbfd2c424942cd04c0de1afa1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6d613b1a44bb10feefb79cafae74a33

    SHA1

    ba85737d42c12fc9399659c35e1ce46c2997f23b

    SHA256

    06750bc9bcafda1e7bd317a4c63658d7586e794b7c59b087cef6fe9eab08e492

    SHA512

    a1e4ea5c9d5d6e501073b8606a152454b5754255302b08e67e75ebccaa16892a9aa3091c2c53d9c9129fb83cbbfaf5cc5e7a9645b57c79c89b32a77cb4e6fb1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    937c10db448e4415257b532bbfdc0e86

    SHA1

    9fa5a95a2c06f2251a331679c9cb11714ddcf7f0

    SHA256

    71242b4f7a3616c47308cd43b380f73da5c9fa306fc5ee7e6b7200b1cfa89109

    SHA512

    162721cae1aaf86ee76a1a959bcf36e2b135d518e8a7b9a5125d71c1dbfe360b123259dd09484cdef28e8f0dcf2e9c1cc9dedeae751eb256d8a8355cb7fc240a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf61fe6df5ffce9e0cb4944025a34d58

    SHA1

    93256c9fd77146651ad3f009b26921f66995abbb

    SHA256

    22f690f4043797af7e144fd97cbad997eda9dab4b16800a207484ca0b7584cf5

    SHA512

    3d595a74847bbe56d91ac447727f0121d45d5e954006de28341a152981927a309401942464bd4a7ee5e2908249324e99972b81f7e4f5d777ba44bcfa6dd60de1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e358d1bb10223d2658f5b30d683bccac

    SHA1

    ef9b1ecb264460aad9b3c13fb9159fa7b8008b16

    SHA256

    cc8262ff328032c2e412afa9c990f6bfdeecb207f9510d103438c01158b83d0c

    SHA512

    34ea98c1793d12e27a6e6750f457533f619c0bedd66425ec7a47f1cb2bcd4f0a3a9d7c6812c39c20975ea5dbd706714b3c40263c4b31768fbd1053d3df2d5501

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfb5dfa0116dd17e1a5c5210e27f7b2c

    SHA1

    1e7f870947498b7881b1dad40b872eca96ac1d76

    SHA256

    0ea6dc3448ebfacfeaf90dba21bd746fad7076077c84ccfc69ceaeb92ecbcd26

    SHA512

    e2ea6d13863fe94408d8341204c8c8a04ad0d8a502007fc2eda05e9f03d4edd484fcb2bf0223fcb22a45b3764cb00e10fe17a69c120780fef999db5a6816d714

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0ed85d5a623d3633b0f675a96dc2769

    SHA1

    2864623fae250c68abb947b5afcde02ea7e6ee55

    SHA256

    d3fb5bc1a4ad2c702f9a801b9755ad63677ed50b187e973e7c4cd69cc0390aba

    SHA512

    2ba8235dfd4eee1909a7e7a5ae6b3c2934d6b7fc97879b82f093406ae705340c8cb4e6b714a6cf6508fb43099a907762f76857b0211b5d5be07c04c979c90479

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2c71ece3ea506a79fc0307d6cab4c42

    SHA1

    edb6bf030a0f81271b990c61fb51121773287e16

    SHA256

    f20e0b7994031e143304646aab6b59c8a8a323a8b5d7ac5c81acd6d3a2551497

    SHA512

    08dbc234a388cb36d8af1a8317d0fd502994cff537d51feafd4ab1f9977ca8711eeaa5fd9fc5bdf2e158e44d6c5fa25f7e9471916d5896747182ae24c00b69cf

  • C:\Users\Admin\AppData\Local\Temp\CabF04A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF04C.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b