Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 22:17

General

  • Target

    d2f288a5332beeefc7ce004ab4f22198_JaffaCakes118.html

  • Size

    36KB

  • MD5

    d2f288a5332beeefc7ce004ab4f22198

  • SHA1

    222065e63fc5c39e0d50dd6f526ae12da651f937

  • SHA256

    ccc6ba1d6d5e10b2efd6833d3c3d51098c67d51da4ec6286b9b21b159e16ea31

  • SHA512

    11e8979a0da65bd86375c0165c29fcb22e5f5e7eb9022c12082a7ab7a80e876807bd5d2af47fa064f9d4da0eae1b3a85395a35b888103d63557faa1cea7be6ee

  • SSDEEP

    768:zwx/MDTHIS88hARAZPXXE1XnXrFLxNLlDNoPqkPTHlnkM3Gr6TyZO+6cLV6OxJyv:Q/XbJxNV0u6SF/j8AK

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d2f288a5332beeefc7ce004ab4f22198_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1732
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1732 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2492

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    1KB

    MD5

    7fb5fa1534dcf77f2125b2403b30a0ee

    SHA1

    365d96812a69ac0a4611ea4b70a3f306576cc3ea

    SHA256

    33a39e9ec2133230533a686ec43760026e014a3828c703707acbc150fe40fd6f

    SHA512

    a9279fd60505a1bfeef6fb07834cad0fd5be02fd405573fc1a5f59b991e9f88f5e81c32fe910f69bdc6585e71f02559895149eaf49c25b8ff955459fd60c0d2e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    7d91c88126c70dc9565c911978538144

    SHA1

    cf60fd2999685542b417c10f64e70def65b2a012

    SHA256

    b2ae0a833a31cac552d8077e99fdc92a9f61272d8cfe7616b26b4c2299d7bd89

    SHA512

    c00b7f92b4c4f2ced132c50d8c74d7b39b54d67d8e898fceb29dd4e4b0c798f1298aa2a02f4b23795f6dfd70a09ba1a84cfc0c2c176fc87bd34a610624ca29fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B46811C17859FFB409CF0E904A4AA8F8

    Filesize

    436B

    MD5

    971c514f84bba0785f80aa1c23edfd79

    SHA1

    732acea710a87530c6b08ecdf32a110d254a54c8

    SHA256

    f157ed17fcaf8837fa82f8b69973848c9b10a02636848f995698212a08f31895

    SHA512

    43dc1425d80e170c645a3e3bb56da8c3acd31bd637329e9e37094ac346ac85434df4edcdbefc05ae00aea33a80a88e2af695997a495611217fe6706075a63c58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    979B

    MD5

    1d66ea642a8e8e591ec726e952bd8ec2

    SHA1

    28102ecc3cf184e93f4b95f3eeb19e026e34e242

    SHA256

    ad36361c8d4daac6ab3422a50d43321904ad455fcc9b5ebc5e0191893ab6b28c

    SHA512

    9dba0738c32a1ec93878a3799cb03b92f15e596286fcc7d9f1104a7a01a6fafa1633a416f21af0d4d5ea98c6828be548d80731961ba00a18e42b727b58a0edf2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8B2B9A00839EED1DFDCCC3BFC2F5DF12

    Filesize

    174B

    MD5

    f5f7826a1e03d4ee0e4e6e0af62cf343

    SHA1

    b0967705e52a078d68acf718d1ead3eb731ec89b

    SHA256

    e7f64ae90fa4fba0aa57c5f11440806b688624794c6907ab15c4ea6b86ff80a9

    SHA512

    57a4a08c24a0a2eff69187fc810a889d792c4e4bc0d2682575d7e761cde8d72e9304e160e0d34d6e5be5debbf7c7e3c40de90cf6620cc814133390db7135d234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b972604ea7c40fcb3f9361dcd8cddb63

    SHA1

    3db2fcf5bf96d2e3b118bc9c86f9b9fe3d1913de

    SHA256

    c88b42831838f6e459bca65be0715018ecd1f90f43d8466ff0cff1377de14c91

    SHA512

    473a405e5e128ff66dc7b50d2f4bd9bcf3bb99dc8a722950184b77e948a5da27cb1e8625512c4051116b126f23a9202f81dd07b668677b58365872ea5b721210

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c82a43f88ba04d887878efb32b76044a

    SHA1

    0db57e0f6abd90c57fda9e5f0ccc3591f8aea59d

    SHA256

    76440f950584cf1e4507b74cbe429f489d53c2655a4c753268dbf8fac2e3ec3c

    SHA512

    d36ff7e984ad1b764af8bbcf3f4d30a9db9574c19484e1d32a27a2826470ad7b8aba70de82b1810dbf52f53db95aa061690bcca509460afbf52cb98917d160a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa43252256cb6b4143238a2359388d7f

    SHA1

    3ae590f332a41f27494c6577d74b06b2f33da3e0

    SHA256

    ae8f1f1b10bc6c042a29d334d11b3c66518693fef6705fa1d943dca1da2615ca

    SHA512

    3eb81175f1ee92d93bc61b4f215d375e06ef0e76d59cebed4a634fa483d340efeb875a8c4b07dc96f6eb1d5463a56d80cefa19b2527176af860b7ed728a192e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c272344f1563bac9c2451f08b7dedb98

    SHA1

    b2ba2d0e2ed2559ef21f2786d02050db4692f884

    SHA256

    7223b5a52153eaa4209966e57e26bf2685f15c53beaa116183a851d3f1959043

    SHA512

    de0f757eabda56a475076619aff407ea9b998ab9da7f69242cc602e735bed2d2ddaa91d089b37b4357d9104bbe289cc9df26678a9bfe43054c4cfa454f3a99e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a26b43cc0576f0defe3edd7ed987fff

    SHA1

    4f8bbeada1dbb0db589535d5ea473d5f9c570c63

    SHA256

    2aa6cb33d6ccea41279f52599662e9fe05fde0d89f3b4b1fda09ae784dfcb729

    SHA512

    a9eb41e14df74d06474b96f5c54727deb85feac818cd4f62b1d3490d75e0251b95e710cb074d8110af834cf845924238f0b7daa5826abd589aa5c98bc2c67e1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3a30c7eaf943b5e6699d6f4805dfd15

    SHA1

    725d5abf5f741f4dc6cccb019db8cc3b5bbe0f08

    SHA256

    132a103549e6178d43ac19471a9ed5959af16d5836e1dcf334e4e4803061749a

    SHA512

    0a4dd59ba6c11433bc81a1d7557586fa6e0c405de32a8b4e5dd5f9c01255f3a7619df4b0d24f93ebc2c60cce5277db7ff5ccf5f5618af34a9e636b0e1f09b7bd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3b98502ae3e8cf3c94fe73c630b1e448

    SHA1

    19f5a467b27597abdce77cfdac200ba929c02afb

    SHA256

    f91bd3925477c5c1518f869e5a63bfb3861b4b5bb16148ecc892b53427c1ea7a

    SHA512

    47bbf45d476956c457184981f681efaa850e345834dbc49df673f730f38325a945ebeff2dc2faa856d1f1844e5d3b38954f0bde4bab53c71cf510c124ec2e074

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7220d3230155802abf1e1cd0507dd284

    SHA1

    b7777c0a2aff51c2b0846bc854a9e1fd3c4e48e1

    SHA256

    3e5455cfa0f9e96e4d8c8f8e15d0a3291c8d3f5081610b497b7383ad23a668d2

    SHA512

    939c720a334f66dc66dfd86f4d7e58ac4c74a013b91f0392e6aefba2a2993e7a5ecce20707f8a0995284041928ff5e5201ff1628a797ad3cda8f4e4348b00967

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e634fea444fc6aacbe20ab4a36701760

    SHA1

    2b17e1356323349aa013ac0579f8d3050d24f45f

    SHA256

    515aa2e5254a9fb66e612a1d13815eca98c463ccd74058880b868f6623f8b2e5

    SHA512

    803bae7cd2b878d8e53c18be0041bcc24f641499a39e5c65e4f3077b478859528b86a3f1af638610f7ecc029b05e1c08c858cb4e233925c0168010a13f1e1171

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c37b43642ec6287fe9eb28671eb43b5f

    SHA1

    e4fdab2d942d31d1d61d1e6b70e628b49e803d7f

    SHA256

    628145d9a2319bc17d084934dd19527b201334c33c46829298786cf32d3332ba

    SHA512

    7cad9dc88306d06e2e85a07d7a97d774a9cd7ca2c4ac02d6aecb271fa22b11787553b2f75e9e84e0fbfd31aacfd44ff082a670634d5edd7f4b639789c4db8cc9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1b68bbb72e6196bb62c5307f57fda0a

    SHA1

    3ed5ff9586083ddec85642a78ad5294cd73fc5f4

    SHA256

    ef40080b76cbe4c69969e90050d9917119b711a48b5b3b1a22a8e18823f5f36e

    SHA512

    91a4cc841c45e077b31ef5c3f8298d2332d4782ced77632d3471be0fec72e4220ab6bf281adb45470038fb6d5b2e3a272571a6602d8fd09d222e6a6b226561f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bebb23d3b0d6233777155c65af632e2b

    SHA1

    30ab319020f47624d86aaeb759d7648ef5af4552

    SHA256

    90373648c621e092f1c39438924e5b0e94b0a57df8c38cae0c22f55cdea95aee

    SHA512

    33ff0ca7e2f3a9354ff66780bbfa1603b1cdeaae2c6a0d7e2eaf57fc2c8f3c547a696a9152e6c051ef97214fbce99c6d091ea3cfbfb6fd7e5b389d4c5e47d05b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    baeb3ad9c72af780a37483cbc9ed3986

    SHA1

    8b5724e2d1f861960bfa56f2c1787eb09dd54646

    SHA256

    6c3158c6f1139d579eab8e1a7fc9525d9ad7d3c494297094c5903f1069940e51

    SHA512

    6af951b68726c16e34e1d20010c0fcfafe0587cad46f20f88a4463f59c7477c0eccea0370a1d7808a8af81a33f5ca2ad5a0b40520c471f8f067fbb6e776b4559

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f560b16a92cd951d66244d1551cc75b

    SHA1

    a43ae472cf7400ce84389ec9adb1d02783ea325e

    SHA256

    22cd6b7caea3f06977e26daf5d3e198aa4dfd66353ac5db490e18674780965b6

    SHA512

    26978f24d1b16e5856c3d52f7191bb7024ce7ce82015927b113f7474178c19b7e3139ff91a654c0cdfe97ebf6189db9c5f90be22da571b7616ed9c30b8a841dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15e9c61b0ad5ce1fdb7e4bf1239bdf41

    SHA1

    630aa96589985d41cc6458f0cc9bb30ce10c7507

    SHA256

    48767d0fd4c105a1ace44e76c6490538f9cac81346bc6f122e560264fe097b76

    SHA512

    6005c6244e523200acafce3efcf0de5eaca5b8d4283f1a213b1d2a3f8c5fe481735e3a2f5c9600497783dede28f87254ff9f6cb046f86c076558f0772b83c27e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5f80d6e0d2d6dd308501ae5b5e67beb

    SHA1

    33de8c092fd960e6c400e0cde040ae473a3caaaf

    SHA256

    55745da476888b4e496c54b31bafffd4b53509556407415a478f93711083b5a0

    SHA512

    ef516766e5c1cd3bb884a94d013dd97bd47f98975033026ebd13fc21a907b7f7b5a9ab4312ecd97e293f374c4f9ed8d535532647fc3c4e82f6b550ad6a034595

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b352c9bcd739f9762e8c365677c7c2b

    SHA1

    a0c4258c59c1136710fa0315cc5f2191e57f3dd7

    SHA256

    75df5881ae70fe37655c63b86a1f8a7c82192dd8e34fcc98e8dc2aa440bc885c

    SHA512

    fcefc73484eca691730aae97b731d3fc29484503081b590708a70f008787a1a658e74d8b14b5598d577feb2ab749c0eab34ca571e4d9e21016cdd232ad0823d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b57756179604cc0f45eb8b59f12c87e

    SHA1

    8ddb25f58f242c3867c7445ae440945fb9b64533

    SHA256

    be3874137048e625068496bc0763a8c4d71090a541201cdb7e1a90da53e74508

    SHA512

    68707a6852a137b1e703210293feb2c4d0df378a5c0bc853f324d2e643f78156097c33774520b893b3ab4f3acb8962e74761bd1cb4226024e6e1d65a6f66cf57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    007e1f0420ec94f7137ced9db1c42e58

    SHA1

    1ca5c157ea40e24afe3e396f294403d402a44d37

    SHA256

    5f3f0c5410dab05f7e5ea4ae24642aeb99acc793feb74449e65a5a530edaa9b5

    SHA512

    d799fdf0ddb159bf91775b989f15d2942c647edcc2399f153a108afb9856bf19b1847301e730467b08f1db13bf1c16fe2cb9dc82ab179ed1f6009538ddd384d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ccd2e2391b900a23e2a9706663272ef0

    SHA1

    51efa654b5c9de24362a3fa843d1fa9f90657433

    SHA256

    f5baa45079d61eb1fbab6e128fdbb17c14ffbed82538dfd11c0fb049222a4c45

    SHA512

    9de745a3fe66eb94ebf1caaeaea1028fc92ba67310ef067ec7d8c7f45df241b8648a162330ca919783758e2e19c27f0f864ccef0e3d13462494eb5c8396110c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7b49aea6acfc78e90a118d6a13a80fe

    SHA1

    ab164d53bc217fd8b3a0d7e4163ee567b7b2f101

    SHA256

    b29a43e8ab8d3a7b2f10adf9f2f1e40503287d00fa7fd9277da9f72a44a94cb3

    SHA512

    80cdcadd6dd05ddbfa8552fb42fa29cbe61547b4bdd8009b0b2edb204c0de76c64077c983471d457a3bb996684fc472302a2f63c4aa86cf130909f903549e7b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83dc53f8afffbc91d0c64fd216496c59

    SHA1

    59c6e0701635b40a9577c1fb6f82645ad01e165e

    SHA256

    4e59da7ebe9bce7e5e9adfe964cf981ee7da1496f0af26b4f6cce0fe71e2e126

    SHA512

    cb2d5f75bafedae09400f29ee5f5c773f6114e2205a665d7c0a3dc67b59d44586da3bab6cd5d28fde49f8ab0dbc80d90d91549b255bfc51492da2340c15b0cfe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    482B

    MD5

    27ea70c2d621295283ee96ac9e16e2bb

    SHA1

    97dd1af1d6ca7fa90aac73ec5110377857689420

    SHA256

    cd255963aae3e29fe3387dfa3fec86175889fb2a795ea39a31615c39052e38a1

    SHA512

    9c07a7a6d28d303187d63416bff6cdc48ab99150f5a369235edcf80859c2d918e47faa56124a9baa75d05136a9d1b9b835c8d4e95869aff339a3ad0d020303f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    37167881e1320b809f0f58f133d53604

    SHA1

    1ad5e415cc241c2b6eaa85f8e3fa932e50ad5409

    SHA256

    c54a9deaf818e6cb1e75436694f8bc8ce3d95aaf6be911c150a0289cda7f92a8

    SHA512

    890b6b2761faea1aeabaebc8edec3a13be3e9e1f693d01dd97775f57895cf7c78d144eabe717c2f043c251d0623d8bdc47f36f9cd7cd83b8e53f79444e11e070

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\DJB1KT77\b71d23686a2b9fd830dc8796151752bd[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\Cab9879.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar988D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b