Analysis

  • max time kernel
    135s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    07/09/2024, 15:28

General

  • Target

    d2402083874799a096a82e53f79a9a50_JaffaCakes118.html

  • Size

    267KB

  • MD5

    d2402083874799a096a82e53f79a9a50

  • SHA1

    9e79137f29459f4034fbf24eb50699dbbda6ccc4

  • SHA256

    b56abe4d69a9b2bd45975b48d68e8dbf139541a7de7434de742f686972038f3b

  • SHA512

    d6189ee6e864776ce22852427478e7bc596ce29e65b8881448c87f7f1a40248eb1a6b34b8429ccb029eb402db70c26c525cf40472921733a8f099fa40467d58e

  • SSDEEP

    3072:Zf5ZSyVVI+JJJsa2HTaSX9geJ1HgTWKIP5XbE6jsmnJX:F5ZSyzI+JJJsa2HTaSX9geN5bE6xnB

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d2402083874799a096a82e53f79a9a50_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1480
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1480 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    6f154dafc0252a93c9273b5bccd1b4bf

    SHA1

    19f85f26a59c4adfd245d48550469c7ca69c4e27

    SHA256

    d77c1795424bc0a120bae26a74b6b6e555b66ae5be6fd5ef320d0fd205046de9

    SHA512

    e155a040303c45145353b94967e1d738dee08ec8dee56532fcac9270d86ce0e9703c83a6f4b3c439f2d62731bc971f1f6106645b417d83cc273ed62924a8b5e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    519a3e4ab9632191a835b48c1c3a988c

    SHA1

    66d6e29293a654ed850478eae052e645c413eaae

    SHA256

    a2f6fe7ac32de17a4d6d1d838a6e8ba4e206fdb3760e9fbf84c91fc1a05b48b5

    SHA512

    c6852b199d75ca45d2bd3d66833c018a348b4ce691c687fe3fa7e37e221b8af37abd4dda92e3511c17d31918a38a0b10e13290e533cebe773760f1e3dcb557e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    936786c8482504db2bd1caaa138df1df

    SHA1

    1e27b63d701c9884b1a5c801aeaa3f43a02795ca

    SHA256

    91130d0e33096ca08b40ca22a54e69a11cda83551e9391f5de6dec53e158f461

    SHA512

    4db290b3bafbd339034c7202f4ba55199d88bd6aff58927f337ca0647bed37e503bfb0bb5fd869154fb34eb6168af12cdf78344440b6b9fef3740848201396fa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    6724f75c771497d6ca74d50610e2105f

    SHA1

    257c7002a9ebe6d677d2a72948a7389d6e89f0e2

    SHA256

    46794b288605fcc2ae75d767ef1e9f0e390567791a0fbbc381c792640c080504

    SHA512

    1fce3956f0c637ad5ca200d0ff72cfc32dd22257007aaa63c4f0aa7d633577a8e167d019dd8facd9df73320c2d8c23658f5d32d6ca29cf2a694de28fa83fdf95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    7a23ca8e9abb64405a1eac1aea5982dd

    SHA1

    c276d24877d848dfbc58ce8fb4e59f9cbc484082

    SHA256

    ad4508429c3c8e8d4c417bd238327e490a8c82686fdfb51463a6ba01483bed5b

    SHA512

    f7270224255374c8ce2cf782f05810106af8d3aa897a112c7ea8ed2bca2b9ed196830bff2d4835d1100a6f344a65db26741e5b5cc55621f0768aba2e1d979193

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc54cc480b1abc9718abb19f1643bd1e

    SHA1

    6d81a9722764aae376020a0dde69849e50d327e0

    SHA256

    d2f4a22dd35ba25aec7c1e67e0d9fcd929dc6eab4c726d4fb74a9ea3f504b606

    SHA512

    66e3cbc217b82580e1378806ccc5ebc72e113fbb6c18ab2e05bca54e0144d06171a875b8f1c7bed981a9322dfc9a8dc42685c94e319d0c04721194139f6841e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f9360b8abe02adbca2d3c3ae9e1a171

    SHA1

    f75a06b752478d15a1831fbb649cba64d3121c67

    SHA256

    9890203b320553a509b3bfa77942e93403133a66ead7f93c0682b7059e712548

    SHA512

    6c6b34c8368ddc5056d752faa740336818018faba469735f28c50c66130e961d09f8fcf8ee428430583c74556545ee33d3566923360273113189c8e9f5b9b47f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa2c0892c8ee45633ac90c0be9868a56

    SHA1

    63dce88e5696d289741f1d40df715307f5cc0d14

    SHA256

    911e45f827c80de18e8d1f75596c46a7f3ab6727b0eb73632c71b7f57390ad75

    SHA512

    11977bae888c18041250b87a3ac3f9df9abc3817427e8bd79a20c5099c5d43a6000688b461b7e9414d37ae2366378260995f9c59d197992bca384c8a1040ed62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea1212d49dfafb39fb555407f5856767

    SHA1

    5a5ef5c2b4a5e494800fa26673b2450f3b6e6f67

    SHA256

    ef4ab1ff58f85677fe61ca87c93531f78dab43ea903dfff7e645012b7d76b0ce

    SHA512

    5047dc495fa37bbfc719223495ad6c436b0874d4c3530f7f0ab1c0d44ce3d1916067505a1690f49871c923b381fd26ffa6645ffcca38a073e589bf22736793a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a881a3b4e496025281d567a9ebf16123

    SHA1

    a03da3cb5b872582d3845f3b636078101d0326d0

    SHA256

    bded43513be205d4cc844cea89a63168bef9443b7f380cf10d73fe1f668127ee

    SHA512

    fa2d04605f5664864f91ecbbd73108f2a091113c2783f8bf13f1bf4f720a64a7a27dbbce6b0f9447813872fed34037833eecdcbef99a69eff65beec5d34a83c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca095ed8f9c54d4c46bec6d2fa3b12ec

    SHA1

    38493340d44ad53b083d10dcad50822275a56381

    SHA256

    45a454d9f1db15a5527df20111c290a7fad01b3c764268950ea111c88e726ecd

    SHA512

    352aa2cd8d2c6b9c07421a66818e00f31abb4fe10639db1a49e8cc9d2eceb5164708c0a3963ec0098a5344fc5ba112e7a3660e2b1ea3bda8f83877b3a38c6c70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8bc78c784afd4a9cfceebf3acb93a105

    SHA1

    7ad3fa3ef220c69c39889ffd3bea72df6e2bee07

    SHA256

    a66e158161b9737dd4f69d021949bbbd7ba0e094df218a67bbbbbe2eaf6f6686

    SHA512

    3749e4061aa91d33e295b361b84ee389e65563aca54539b2985ed3dd18e4118545b5519ccdc076cdb16fb1ce6f421cb9cda12d7fda40035c70411a65be68b82b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92d7fdab00c590897167bbdb607c8768

    SHA1

    3c80c6e749277c2f70340fe85e633906101bb52b

    SHA256

    6c1bb577ad59721b407bbffc3b974a1616e20797ac923b6197d2730bdf1f9ed0

    SHA512

    c0af55332eb23e4d1e722ab20f77703f74daf53edd0f7516ee083ddcfbc0cb4025bc1fb6e2ac2731f106947f8152e29039b6a545b68fb828b187f5cf0d84e611

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6c505563cf43fbbfe0b82439c903367

    SHA1

    2575ab2faf7614552d3fffe20d118c5228d326d8

    SHA256

    fb164db6a675d2b2a269a966945a4f469e8768c094048b914ee8dbb13991bc94

    SHA512

    767ce9a3c48e5109534e330f4e9acc157a268d333f897bffcd9d61549e45316f237a65ce72a7f1c21b27c4ff5c6128a815986d83b980a4d9edf7ee99e95a7a36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b35a2be3a7e16fcd5c3038a2719de3a0

    SHA1

    eeb34ce33e6c6ac93cae9b1367320549e8963e51

    SHA256

    baacda6521ba80ac59f3aca7654f535839832bc1dc725d082112cc57c21f148a

    SHA512

    156616b61a2e72d02794ac2d9e4e4f7e512191817e4686efcf649c89c09490d298b517028e2363f1cb7b2e1f320d80834050ffe0beaa43a7b2e1f130c8941d1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f152fc4f21ac71ce3a405dab73f602de

    SHA1

    43b7d6255d7f33b014a3acd5234fcdc8fdbb1461

    SHA256

    aa63200e32ca9ff0fa8be8ae7facc18ba16e6e42377392786fdaaed27deeeabd

    SHA512

    90b89886ac8238831c135bbdf7f5f8631868a50d59374a6c6d0f83d7cc89856d801fb9866ab65a870703c786af16ff4ee7b86ca7e0e0889fa65d0e099b398369

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9627c7ffcb309be6f17799cac0b7e18

    SHA1

    eddc31bd871e6466d0cc2f0a9992cb58d475c44d

    SHA256

    5942c9b2f704b3e26256d7f515d075e5a7de743988e3afd857c48f47757e2466

    SHA512

    02d3e6652b4f607f4c219866ec91b3ae41774e8233f88cac7039f4d74c283e2d59c549498ca9b9ea9f0047a2b0ee37d414ddf56f4922c04ad204c85a0a666dd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4203bd51cfe20f1bdc1c5bcfdc6fd3b8

    SHA1

    5ae762b852494bbe76cff6503142749f6ebb7694

    SHA256

    d1d4172931d4e5394cf740f3f7ec7aee484fa978537ee0b0f5d9c6fa3f2410ac

    SHA512

    f4cf516d64b497b051ab239d6f74ff9415b770e6ccec405b811ad6c2125499e14695d339e41ce2e9cdb642786b6463cb41c2b6a474a5b08456a55a25be530c75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76690ab09ff90fd7bc6634f560b50738

    SHA1

    6ef3631519f7bfa264564ac3ea1dc772c6d6d09d

    SHA256

    e913e26a7b71a8981d10ac8b5e34957931b4ce7d2b55f02447ee0b6d87c5bd35

    SHA512

    fced15e398e6d4358b664d981f9b19670dd032493ccae08d9575d7d10bbab88af12daaee7812a4a7d80b9335cf01d1f80456599d37255dded13710c9923d95e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6b48ce257b59079027845fbf685fe77

    SHA1

    d6f742cd113ebade1bbaebd8127aa0531ab8d8de

    SHA256

    0fd873d29dd18e7916805f4d2983fd5155116574f98f2a635cc74fa8aedadcef

    SHA512

    147af0f6a9b6085ddcd308b89aea8d5747ac6774568d9e7fd749e0378c7bb92bff0d1b9031e0e90a664e835c466c70f45cf98f994774e3329592acc031d002b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87c80aad2662308774fda092564724ca

    SHA1

    8530e75a5d0a6c5b1efae8259cb59cecdd0199fc

    SHA256

    3a09fd6b0ea58829358c77e722d34e78599384a1f6e5f9ce53f53eb7a1d9388c

    SHA512

    33627aa0b2d315dd83aa36dabc1f6f9885c5b65aeb05a948ddfc2dd66a67a44616ed1305bc5eb2bfda6fdf3bd6a3169f17c0cb942534da6c237612023cd31106

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85c7b844c84ac784e01c59e2fc28d01d

    SHA1

    a5785669ca47f88ddf38566945c88b62a76c24ce

    SHA256

    4be6c3e8aca7f2439fac986b83177b6a7485723044871b4b692d3b8f98976c1d

    SHA512

    36c6dcecabdb20c403778f101297feb9d1fb6b416edd8b3ffaa38102fe6e8110901fbaec7a5a56e4f624e3f162bb8cbe4de6571ab6a03bb6755cd3ecf2ba2d42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    016f35990b02d417295a14e3cd135fb9

    SHA1

    24b61a6841eabc8e96936ecc68fb127f49009eed

    SHA256

    21320076da6dfa4e4409309cf4f7f6e18aecbcb46d6b15ae91355225d131f255

    SHA512

    904219027d2f9ac8b8d8befd35faf488a234afeda1a53948ed9fcc7d8580cbde7fa68d34d8c9a51c2cc3f12f3861be93c7e2da4fa2bd2b431bb9226abcd72f59

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb082da00eb5715aae6a8093359bbe69

    SHA1

    221b2b62e782870980995712e7ae2ffc61653376

    SHA256

    9a81bb4864f00b2404c231f6ff54ddb472aabb22198dcb6da6ba44f06415e81c

    SHA512

    9414b46658ceaec0a68c329bb1cc9f79c9fefe4fe37ba7a75639d0282f544ec92f40988ec46857f1fa5807e05bf0600584aa3a8a828d375272a312ceb1fa1f2a

  • C:\Users\Admin\AppData\Local\Temp\CabB8D7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB8D8.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b