Analysis

  • max time kernel
    122s
  • max time network
    130s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 11:06

General

  • Target

    d1c9b078ca9ef2d9bbbd46182f8aff43_JaffaCakes118.html

  • Size

    57KB

  • MD5

    d1c9b078ca9ef2d9bbbd46182f8aff43

  • SHA1

    1e4b8822277a1aa105917858e219e08e454b1fa6

  • SHA256

    b5d0a8995c53c115020b204b126384d052f35999588865f822a751d8789afdca

  • SHA512

    389948ff40723a9cedd74d745951e20dc85aec86c8215d8b74a9e2b34511cc8ccfdcaab7761385cfc2e19c4188d471be723fd90523af33f1c4aa2e25a9edb374

  • SSDEEP

    768:spkEkeRSDw2UcU+o/MHcAQzQzQzkdQGQSQYQ2lD3GsKMtL229PD:FU+CMFQsKMtLD

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d1c9b078ca9ef2d9bbbd46182f8aff43_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2692
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2692 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2668

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    6f154dafc0252a93c9273b5bccd1b4bf

    SHA1

    19f85f26a59c4adfd245d48550469c7ca69c4e27

    SHA256

    d77c1795424bc0a120bae26a74b6b6e555b66ae5be6fd5ef320d0fd205046de9

    SHA512

    e155a040303c45145353b94967e1d738dee08ec8dee56532fcac9270d86ce0e9703c83a6f4b3c439f2d62731bc971f1f6106645b417d83cc273ed62924a8b5e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_F968CA97A68F4E6D5C104EC7FE3DFDEA

    Filesize

    471B

    MD5

    7e39ff496edfe3dfdb85dcd49da2a777

    SHA1

    32e828e1df87c0e0626525ea6614cb5cde671069

    SHA256

    5b443aa82793c5f4ce5ff89a5547b54a2a49d7d7babc473b8f0e6ba224c6d21c

    SHA512

    38b427b15103458361af67d3c2b4098d65cdb5272e52ead50f6a8dca319b05aa7c8cca2ddbbe10820caf2c55d9f9fe99a62d38fe38e9acbcabef857c74e338c8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    0505c5ed1756883ff5eafcde70444f9a

    SHA1

    4b25857b689d87955cf0f1f1af6ade1c014ba40f

    SHA256

    21611f78fdcc06e1f5fbb94187c208f080b87e30dc9b94311f789b34e0c6dd7e

    SHA512

    6f0dcecca4f2549ad70b5657fe6c4fb0e9cc3f8b43c17a069f0eb5cb317bf4a6878f419a3e5f837d467948a48ca277fbd4848774b13dde4178ff3a1e0faf53d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    7813283461e3c262d71f1c1c45662676

    SHA1

    c1285743c8334f62679bf5ac793a829c241abb5b

    SHA256

    5389d6e2e8fb8fe11631aeedd3da39f7b9a74f1785abad36d345e9653bc05f85

    SHA512

    60b1fabc232d7f001bfbb0155c1081e99c1d80d31cbb46ce4dedf2f1297d3c16e0fd3d46457551276520f940600e32bee72ef5b9f56b38d68cf336aa6306b391

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3346e3059f74e76db33f5bfd946c07ad

    SHA1

    3da4e41e0863c8fff3c302d11433baffa965c5d4

    SHA256

    fc262cf326a3f89dc6ffb1f7dca094a7c1c0b8776b2750c63a69fd02fce74018

    SHA512

    79717a5f59f5ba032efebe10a2b15a78c9d178c2e34ee6e8a1c54332fff6284a3bd7645ac5bff783f4ec432054a43284357936454d1bd99d708197e51ee1a7ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15c543bb1ae56963d78baf021fba08a2

    SHA1

    a175134ad0a6f58f405757131f75c4f42bffbc40

    SHA256

    2f9e767bd5a7c24557e0a3b02447e9ca102c82d358bd1edabd316d0114193925

    SHA512

    4c38719f753eaa384753a6916c4c3b6999d1e9d65385cdaf17a9324b6d8dfb884388755cbf833b782f38c0a2a028eb692777a1f2eb2a78f872868b97f6766a5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2e8ea28fe46f0da77c124d9519f1c1c

    SHA1

    d53520c4b579a57eff813c1cab9559ae5caddfed

    SHA256

    4dac3c68a881b4af8f9fc7c63103a517e808dacd554365273962761e1c800409

    SHA512

    28233862bb57be57feb00095ba2c83eb10f648ca4569307a4a85d20896f269ee3e1a47f365a0d327afaa2f51d377aa76985df98366ad86e74327545808b5b2b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff47384f62083a057d6947007d5f9faf

    SHA1

    612b903000ae7cd0b9ce40ec8c908b4ec0615cbb

    SHA256

    b8a650324c76967ed50466446ef5ddfb364cbfeeb54ca49c2909308c78523c23

    SHA512

    9876bb529c2bf484e838f7467438d0c2bdc53b6a6f61ae9f034446d6b412fe67f29788c6e95c007059f192e1a8b57f1dc47480231fd7fbe4203e10fbc81ac9ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4831fe5b5320a2dadf0e8fc940f046ff

    SHA1

    a0868a588c19d989df0e438a68da8521233f9f12

    SHA256

    be21cc53a01aa6807c2db7e4262b4dd18b21aff37bb3bb3b4c3e1b7c84abd815

    SHA512

    f6e22a1966c43279bdfde3afacfab558de677b18d8a0a3f3db13061bd12ddc08f152a9bf6acd68a4f4b803a7d302b84dba1a8c365656f0726d7c61a53aadeb77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    638ee6f1823a7b39ba259da620951a97

    SHA1

    ab850c4dd839c6158034d40739dc0bf0faf26057

    SHA256

    50439d7493a81dc95035e43be8df36b34c49cd891de347f9a87c9250d508ac60

    SHA512

    8f3f41100a3c0b41483abe7093f8937230b8010226da2472f6b2e80953146266c35350447d9bbf6e9e44f1f4902cba0f9110a8d2f99bb9027c2ae55a9cb33a75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfa9d18ab8fd50c723ecbeadf6368978

    SHA1

    35a6de27e26e386d031704ddc7725d94e9f98673

    SHA256

    8b64d05681c723950c2a3767cf87902fc3c4890b91743fd82318b8f583c54fa9

    SHA512

    a66c5a21968331e631c2da1950ea1ec38b76c716dad30373c0b83dc99f57bd3680782a90f5a54999f750eef3b70a053855d141e269d31ea3fb40e4f919344a91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6bcc274ee95fb88477fb0e011db45dd9

    SHA1

    b02aa3eb8ac33c03d3ca96e6b1c129d2463532a5

    SHA256

    ba3e92256355ca4e6570fe36d672bc149f2d359f56ad9c591ab0d2f3e334ddb9

    SHA512

    2864bdeacebf2b25ffed98fdd7bb4d8da788bdd933186c02038d1c0cd709d3b0c7e78f2512e873bcfebaac40e284f6f279ed11dc46778fa724fd9aefceff015f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c581a40423fbdb5376d32712ee5da145

    SHA1

    1ebedbd664621bd213da16703c2863ad4289b1dc

    SHA256

    b07b871a76b63301deeb467b760f193ea20d1ba8e3021a1561dc3dce76a1401a

    SHA512

    e23af7ddb35366ccec753936f2c83e57f0e3b87d7804f8de39510b2bfd9aaf816a811693d57628b14de9a789f0828b9fca62224cd3ab944b0fe291892b9fec5a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8444b1f96d979eb22b6e3df001afa9a3

    SHA1

    c608badcac6c0ee0e177db469057f9704ec43c6f

    SHA256

    7ae72a41230fedac458ce13a789e49b28f910fd5474bf673161f51ad5e0b9b5c

    SHA512

    07a0fdc14b4a4a8bd0e5ebd651b58845d9ef16450ac22e951e0821d4665ab9a1ecc11029f4dbf09c3a32913a896ffae7187d3ce0ded558e93dbfd58d8b28c73d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    caf8cc5dde9cd1059a7897b250fb7bf7

    SHA1

    887f8fb03c8e335cb620346a9d0a73aefaf39a20

    SHA256

    a5821a300f045f82c69627458c3322b8e03882b02d9b1974e9898f62ebc30545

    SHA512

    c4354957608100809f5c5149ed36918a398f2d80a1fcd23dfb1b0b9bc0bbf772bf88cc7c10e08672330097279a6d5db8c68516e236bf289d6ded2655694a3b0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    109fbe7641d284ab9a88eab748a56173

    SHA1

    a45bdf71dcf005a11e5fecaefd45858a5fd77e79

    SHA256

    28798e5b8c747283d2cb19468cd4cd0e0c60029d9ec9e93e0682d111d92f1147

    SHA512

    3518025d96c78a93696090d5b4f358ee3eb0b3d613c5e7e5a1ed844218b9347742473750fcecf99a23ee434ea853c65762fec8c1c05a76f906dd528ec90d9605

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca6c92e79bb30ce21f69e3341cf3e910

    SHA1

    179e8aa100b10ed46f5d922ed855baa42f1ea532

    SHA256

    6465c1c5cb828fec29f03bfe4e9c90fc365d9983d4f35ff14488cd51877b2dbf

    SHA512

    e55c6c8759bbd0f1f75e52b5cbc38042f146f9e8fdf036119438639bcb221e0b2f40d8eac9f3d5e339f1073c7a5dc12df60f18875adf396956fb3183401cfc0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a6f48ae307ee70099db960cc1901a3a

    SHA1

    fb5aaa385e44f0def373c219ecff2034f4d7a926

    SHA256

    cc8ac184f8b0bf8c988b7769e74b15f2928dd21718a3f6013a65c49365c0584f

    SHA512

    60236c5473b91855d7b16bc3f71d13d3181bbd35bc0f900119e2ab27aa971d81ae515a099de4b013748cc72ea5f9e6b4609a4769de70b53b3afd63a12a853220

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    446c9055b989bc103b7bf7b3b1542f00

    SHA1

    0dd0983383862efebdb0422fa0bcdec83ddf5c5c

    SHA256

    9208658f035077a09a1f775c1081b0085d9df83e805a7b6de6ff582046e722fe

    SHA512

    2dda2dd38a93455c543f82215e797f4de10977639060dce931d5503af3a436020af93870fb2d7a9d43aace14c44b28d12dc8ab463b707525a5bf71e606b998b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc6ed55effbd51d6404cd448d72c48a0

    SHA1

    15aecf69829175df2160a96ef9d91a1fb6e9a8a9

    SHA256

    af1d8323f191fe2ab68613f80b1976fe0af97a6e51f8519790f7de1738b6f491

    SHA512

    b9b9f25d1cdb13671a2def685f04711f1b027ee10ee0856f1582ae1f8f326bf3b822b5bee70cac6b91fbb85b89642af4c2d96ff2d586d60559b420d7aad2720b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b8b31a683f70039bfadf72b0fdb0840

    SHA1

    3d13ddbc8869f03eb0442c5bee0c7773100c4108

    SHA256

    56ca499fa8c5a93acb35f17a335cb8f931415ddde145dca93fa1a6aaaad01a64

    SHA512

    f644eda2fdebc3c0f5a9af86f412513eeeea53f0734c30dc75177bc822920f38b2e01683d2d6b3fde4036f4c55378bca8ff997886b693ca72851b6385884c59a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0020166fdda92f203597405790150d81

    SHA1

    09682d733db395045efa19321410d88a18ec2998

    SHA256

    78c137cd9c2c1fc71b5ce69ddd28e011f5632817cabea07981e36755b993a472

    SHA512

    e6eb1170d52025dfe3acf4658d8354b486bbc47c2209c58d61fa7d5b0b544d815a188c11d95c045da381d951c53e6c52780d1e628766d72e901adb5e64acf041

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44152a8671a1017df8554496a0022c0c

    SHA1

    68a82ad17c193de6ec6e445dd8e7962d388ab29b

    SHA256

    f8193cc38e5a697f267f610a02b1f5de28ce5a713b9c436da9ff8eaa0b442133

    SHA512

    097b3086a89f62ca097a42696e4bec14e906eb57ce11400dc814d702c778c388dc69ad83deb4a61c6079bbd587be6958443a108355c2d8d3b1898347668d7c74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36d824aaa8d3276e7ddb3ec18ca80706

    SHA1

    50bf7bb524ce7ad9fbe36281c89cb44a949b798d

    SHA256

    f603b270e6e07345fe7005439cfe31f53d93a0eb85617a83e63a91d5340fa5cd

    SHA512

    f47d7919182c27763c260269d172ece9671460167a5a481c06d13d1121e3fae6bf482d7c91c87427b96ef8b63f06c3d9f17e20a6203883943891a47fdb79811c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9dcd950efbf2bad2382ca6c388cc7314

    SHA1

    032cba9c2995b520df9ea3506b27fb457c63b413

    SHA256

    93aa7972c8a9356b36c1256a7d41c3db0eec42061a44cc27132e9468cc3f7d60

    SHA512

    d5111f5750d86324d44e7fdeafc070729a44c51a4295fa2de9ca68672f87ef0be39bca2de5d10b771dd732c4eab80d34ca7579947b5551e6136db51b063f8f90

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BQQODH7V\errorPageStrings[1]

    Filesize

    2KB

    MD5

    e3e4a98353f119b80b323302f26b78fa

    SHA1

    20ee35a370cdd3a8a7d04b506410300fd0a6a864

    SHA256

    9466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66

    SHA512

    d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y8UFEBH5\dnserrordiagoff[1]

    Filesize

    1KB

    MD5

    47f581b112d58eda23ea8b2e08cf0ff0

    SHA1

    6ec1df5eaec1439573aef0fb96dabfc953305e5b

    SHA256

    b1c947d00db5fce43314c56c663dbeae0ffa13407c9c16225c17ccefc3afa928

    SHA512

    187383eef3d646091e9f68eff680a11c7947b3d9b54a78cc6de4a04629d7037e9c97673ac054a6f1cf591235c110ca181a6b69ecba0e5032168f56f4486fff92

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y8UFEBH5\httpErrorPagesScripts[1]

    Filesize

    8KB

    MD5

    3f57b781cb3ef114dd0b665151571b7b

    SHA1

    ce6a63f996df3a1cccb81720e21204b825e0238c

    SHA256

    46e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad

    SHA512

    8cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa

  • C:\Users\Admin\AppData\Local\Temp\CabFA1A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFAC8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b