Analysis

  • max time kernel
    134s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 00:21

General

  • Target

    d3228346ac4fec0b9f23f28027be065a_JaffaCakes118.html

  • Size

    249KB

  • MD5

    d3228346ac4fec0b9f23f28027be065a

  • SHA1

    81ab7e381fee42e8e8336b4fa0382d7acc3ea266

  • SHA256

    a1eab105857c046a64e47de3caa08ebbee82dde7f4bb3255944826f1a09cc9c9

  • SHA512

    482b12465461b2b91658639fc65cbcb89e7a683f120956eba1f95b6043e8bcffc17babccf497f762cd1417255649f8516a124462e7341ab9a3fb84716e2b3b8d

  • SSDEEP

    3072:SRyfkMY+BES09JXAnyrZalI+YhyfkMY+BES09JXAnyrZalI+Ywsg:SUsMYod+X3oI+YksMYod+X3oI+Ywsg

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d3228346ac4fec0b9f23f28027be065a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2668
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2668 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3217AAECE20956500C22BDB70A7D005F

    Filesize

    5B

    MD5

    5bfa51f3a417b98e7443eca90fc94703

    SHA1

    8c015d80b8a23f780bdd215dc842b0f5551f63bd

    SHA256

    bebe2853a3485d1c2e5c5be4249183e0ddaff9f87de71652371700a89d937128

    SHA512

    4cd03686254bb28754cbaa635ae1264723e2be80ce1dd0f78d1ab7aee72232f5b285f79e488e9c5c49ff343015bd07bb8433d6cee08ae3cea8c317303e3ac399

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_D14B79B440CDC26D7D21C81855E2C04D

    Filesize

    471B

    MD5

    a3787e521dcb2a5a1a08da3888911f43

    SHA1

    22c6f14b092a1d8b43347f3b9bd3c44510c36bcc

    SHA256

    660d98a16e0ff195709561aab6ca75f65c838662d490fdf5f68fea1c32e4d69f

    SHA512

    2c586769a4d19d0a0cb79f48c6e1f2269cc60cb6f5afd3145ef37321540860bb99294230a6817c2c9be098f64cc6e389c478944f8852057bd93c6bcd73be9441

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3217AAECE20956500C22BDB70A7D005F

    Filesize

    400B

    MD5

    beeefefa754cb651e2164e757e920a6b

    SHA1

    4f7e4db6f01c42597393d5c3e20a6d81158958a7

    SHA256

    ecee887da3ded0780c9b70d76f9a800eff474eee70630755e110aad06a3d5e2a

    SHA512

    6c3acfb25101b9fa52ed15dc1b228b202223914a6df46e2721b6c6e15a5205e3e8935ae15c74a802d679eeaa09e14e0ce09e22d9a0311a57e5e073a730fe4547

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3217AAECE20956500C22BDB70A7D005F

    Filesize

    400B

    MD5

    3ab3696e2fc0f6c7020d7e63246e52e8

    SHA1

    147efd99405b2b43b82f4fa99f6fe5b34ec0c628

    SHA256

    3922f6a92515c3291883e221396d49a8c2541cd7a995ea34a94c24b8b5286b0d

    SHA512

    d5d729efcecc831cf4698af5949896fdd81b02abd95cc42c6ce5da0599cd9880222361f53631fcbcae9d0dad81f8c93529d75196739e62a9baba6039d17241d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3217AAECE20956500C22BDB70A7D005F

    Filesize

    400B

    MD5

    8580dc5b7efd0c69b58e9540aece8df8

    SHA1

    f33b550996e91f9d8b3e9bda5a86967cccafac34

    SHA256

    eaff78a3bd8daeb0e9ecfb10df44704f42a737f1d693e7ce95a7ea2a1c16bf78

    SHA512

    be429ad3c41d51295e3e61f4249293ea193a3dc75c61db884cf16408991afdbe4b5f649c1bed6995da67dc1297b85de3394cc65c2ba7b8665edbe624c25f7a31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3217AAECE20956500C22BDB70A7D005F

    Filesize

    400B

    MD5

    7af8b4d5be84f13b6fb09670dbf3823a

    SHA1

    47185908760f0cf4dc65339922860355a5c0a9d5

    SHA256

    8d15234519c4526293c36edf3c7601e7d68dda862f980ab60d7fa3701e557ad3

    SHA512

    10b8a8e9fda771a45fd09143563e197c50afd18a9ba64a1a602fca1eba7f2109cd680ca1486f004cb74d8f4b6a843418179bf2422fdf41482a32183ebf3d32d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3217AAECE20956500C22BDB70A7D005F

    Filesize

    400B

    MD5

    714426a37081a1bf23a35c4887129522

    SHA1

    8d7483776b7b4b92643b745604a1adf3941d608f

    SHA256

    63a7421e5832eb6f2202b7bffcee171f596e8a6e98d5dfaac5ac9a4a661f7ff3

    SHA512

    ee43aeebda4db2a9d34a1b1756ae41f90129b0dd4f608d23e30bf0786ff85ed87771120be0f528929171ff55c6dc4bfac8991cb04be4383099bd39cd88056b23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fac9bdc78b8f44c71f54d5053cbea22

    SHA1

    146135217d3fd9ee1684c0b6ad41e3d854d80b55

    SHA256

    c0382f93743fde506c258f0eba3f2c3b6db2b7fdeb6261461be491d368ada5a9

    SHA512

    f7bfd958c1cfeb6225599c96d39bbc7aada1da37ef2a6768d1f4c7950b4033caaa02d416b4de87a716a806beae4c9651713035140fd17700f856c4a13bc97e29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d19eb0cd6c6b71175893f33ccfe1ea9a

    SHA1

    bc739bb5bd79738461ddc4108ce1fb00fd969f97

    SHA256

    78b1c775f050885f5bd83abd4cec465f98b79fb5b3cab0dbd4348f0ce1585303

    SHA512

    82edea19c19827f36eefdc161cf3c352a2175db8f235f6b4359778511c308cd5f7de3b0ecab815a7ca356bcb962d0890fd936e2110c08317e05ec77eebde8cee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4f29755f6cd2db7c60ab87968313bd15

    SHA1

    e6763e2f74c7dd103871f2a2946b67051b990642

    SHA256

    42c9c68fde0a620df3f3488d8f335518a95e737ff8af8fd947dd92694a951d13

    SHA512

    91e86d192853d6d4a9795b7af053867be9a71f6c9bfcabe8294ad718b35bbfe2f4847a2e4076e3beab5428ca2670a46cf05f7387ffdddaf621ed3ade0aadcab1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d16eb4754b862ab6f6aafa2516859a5f

    SHA1

    7de6c03e91b38495a1c2789421e30ae5ed90300e

    SHA256

    e4c06370348ded04629f728e710cf9dff099a58aba84921bbf198374821ff4f6

    SHA512

    dff80564896923c332d1400f98f0b2539c14bfa6c523b1b285d3c0db834b8b6ba4b27306f5c85b1b8eae48cd64fdd2a49cb70aa93e579710114c9d64ed833dd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    76bede1dfde6e00bc8c3e0cc59a74973

    SHA1

    217ea5d9e2e562429d3f0520c9e56205377d1a14

    SHA256

    99862e0c8dc9dcc29df41b78033f2ca91b24b40c03d7eabd45f3189a3394c404

    SHA512

    c8c6fd5aca2b229b9227fb2224698d8683a3958a8442e3c210b828a6e4d6916a884436d240e440a0dce8d0d0668d8f8ab062d5c2f37fab83c93f78fb7e4c335f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33cb59ef467091c22f00bfe201d477e6

    SHA1

    fc4725196115b09934c3507857cf2841241f0e32

    SHA256

    2789340cb6519a9c55a19550c257d6866edbd22c4d1ec0aae9f71c0281bb64e8

    SHA512

    25c8db900034ef9586407a5ad4b30b3b8f861c9341f0e925aa6b9f6df90f6a886aae2e5263c1d0ecd3f92e5ac60b07162245f0dc56d863746ce953eaf7a8cbfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    10ad6b7e10f70df9e8046903ae98555a

    SHA1

    29f93be8cfe0583ee79e0dddfb06c2ed1185bd38

    SHA256

    757e8bf1b28862a5c277da15adca365a235763079b599372865c3f7de8e74647

    SHA512

    d3f51f42820bd856b18eecb2e2ecdbcefc71f6c8a1a6637b0133715e16a061be78c508f6eb01a8fb6ccd2c10a2905a5dcfae090e9bd82580164d593e242eb620

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87ce79230a06084225ecade1746949ec

    SHA1

    7f188706f0e680e74ab125e7241f95e38d7bec3f

    SHA256

    f1db2016ca8d1e0163765b17abcffdb444d12dcbb43a0515bba4bce52b71af77

    SHA512

    aeb499d50efb1bf614349b4879555be127dba328687117c5544ee5f558a43685839ced0350247275b3b4a01ece3e9a5ca450bae0dd0aea22f3d851c37b7540c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a1cfe7b68befebcdc59b1acd67a0500

    SHA1

    962d4abb1b09cefe39220ad0046bd1425ba1d1a7

    SHA256

    f1605b476c02a2702c180f3d7af18150a7b4abe5854047bb31209d2f4c648262

    SHA512

    432d5c82bd1cf822503a58ca209c36557ae3042f49b89182a063cb6b6120541edbf6fca8aea600f37bc96f839d430443b19d3bc459d8e298e5f9b817e7c7bf0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e19b18e850fd0f4763979e0bf1319509

    SHA1

    9aa17b43a02b908c031b13acf62d602862f6958e

    SHA256

    a25c8845bc3e83295ad40d2fe3bf35fa42a731086244c893e86ffcbea7a223d2

    SHA512

    36bec5d605c0ac758298af24497e40f5c93990f7c324cf9459b3ab19fcab195dff90432f2fe31872cf6ca0590930e78c8906ec37ce908d96106ab3ab17d49920

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60c4201b64d73dafdc4290f6d6cd8a11

    SHA1

    4a4fd091babebc076b65ebab742dda09e973040d

    SHA256

    33166644d0be1017a9370bac6c20c307d93d375097cf6b21050e023312c79441

    SHA512

    efafaecaf96ed639a3b859cff907badfceba7a744d395824cb9a6ce594d2c3c2eac901847c55856947bdf22338e4b85b782870b80545c7531a43e9450136412c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9325b5d652129c6a43d105c25e9c1d3c

    SHA1

    d4bef8a8b93b7929fcbd75e028decf0b2f852e3b

    SHA256

    bebac1c90ad44807ce8e6d3cf814b3c3e54acd70d93b471add416a618e733300

    SHA512

    782a33b1fd7d99cb5ee0f21aeac582fddd2ed1240c1396f59183063138010efc00021ceb9f2b3e28bf2002859e01bebe47362cb0e6e211a4815c74b226aeb64a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84f1546b4a90f19ed3b4dee107ab8560

    SHA1

    719dbea48c2046ffa1cee1176f10b968044969a4

    SHA256

    6b67cfee0221d35ee108c4cccdb5a6cefd7630a87a1064bb2968bfd88fa5291e

    SHA512

    e7889c3b6804c62897b0ddd8811a7e45a45c14574d3b51563b96d6fe2658b6a0fc3d08b8de097ef7cc2766e47ca87e37d218f4f68f927d3f373ad829ed9982aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3b2af263587448575bee30b60f2b77a

    SHA1

    d06bac7e9051b739a795854be24522e295c628c9

    SHA256

    e5628cf5e844761e1fa4e0b706154020211c588a6f47b61c37137c02cd5fb7a1

    SHA512

    eeb63a6fd181e2cf9c33ec06f3c005c6d71de7c2333e4aec6f95cd3395fcc5cc73788194474a6d9b4e3893d95b18edf791b4368ced9f454e39095ceb62197f24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e757a93a55bedd21dc8d5bf98e012a8b

    SHA1

    d06a5be4a6d1e6dddccc174ee050862ad825c7b9

    SHA256

    7977e0e978cab650fb6aa743eb5e6cc6d6ca8a9150ec50cb7176a5da7831751d

    SHA512

    0c06ce2ef2710d7df67671892be8a6f22da28b020c037fe941f18bdb89e9408d4e5b0af9c9f3a6d22c270342631263b27d4dbbb7c5670bbcafed5555426dc3e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    332129f0cfb31ede01fc67b019c16dc3

    SHA1

    55358d0ffc5265c6d5a3d95340559910cafc2dcb

    SHA256

    771c7267b043ea29fc71bbc7375bc17ecd70bfba9496a60ddc2765aee54158d3

    SHA512

    79c9e59df5f986d153e97cb10cf150ec8a2c85b38aae82f0afefe15977432b37e8f539451e513be167f64ae0a83277a046d42d1ad56f9c3909062b78acad8646

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e54c358ba26748ed7334b1fe3d30d75d

    SHA1

    65cab53b82f981e952a5a25db64f3bab7aa4faf3

    SHA256

    c52dc3b1a93d30cd1a1d11063ffc60251ee1ce51b7f73bb159fc06f7ca88f10d

    SHA512

    8c107356f37264a6ab7fd98801ff0add34d592372fd3b06472857368c529e69a856980da54508c056574f8d40e03c15ce42d7d129231badf66961e017d8edd92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e43cae49ee8828e030d35ca3e4d83ba

    SHA1

    b05e8e35a091eebdf7d22790d36e3f49d3f1c53a

    SHA256

    8bf4d27b07df7820c24ba86e41a3399dba2fe6f8ddea290477c8db7c3b540451

    SHA512

    1dbfb5f5fbaa0006e0b79d661bad1f55d53ea2969ce05bc04e434f86152e8910a93334233bcb202393917609a79513bdf6758522f93c3ab2f5d73ef86a19d88e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_D14B79B440CDC26D7D21C81855E2C04D

    Filesize

    404B

    MD5

    2e954622102a2fe78645be462a4547fa

    SHA1

    4a5ff50139b5aa7b6ea02706d066baa5bb06134f

    SHA256

    1be07c5b23b7c7b1950368953a782dd4374d3713ff57f81d2e39a710b16cd986

    SHA512

    7bebe7332e51c58adb2ddc4e77e498cca76519f535647c2b71c2ef3195388c21b13251954ea10489d4fa65a644362999f86da58bba5c4bf400ef84ebe6e2f0c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_D14B79B440CDC26D7D21C81855E2C04D

    Filesize

    404B

    MD5

    3d6fb4fac3a05a50e63e501e82e4f1de

    SHA1

    2a6e147db512ab6be889e22581b95ed5df7d13e9

    SHA256

    16aabbb4461a26cc655ee68070072e69e1274fa0ece0483e6ce289c5a6e7098f

    SHA512

    f71d1f1bd3144897c002baeeff25bc96d630e6fdd1847a3011254844018b2232c8862aba6d2e95368c234502e842f22084a0f5e50740c3545fe6704b970ee438

  • C:\Users\Admin\AppData\Local\Temp\Cab1C4A.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1C49.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b