Analysis

  • max time kernel
    149s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 05:31

General

  • Target

    d3a7501b8c03c7bdc97ffb48edc93f3a_JaffaCakes118.html

  • Size

    139KB

  • MD5

    d3a7501b8c03c7bdc97ffb48edc93f3a

  • SHA1

    2f9546d5c4f7126e3318be12e641132a212dd5f2

  • SHA256

    439680a2238edc788b628710e3d5f78d8d4d5811995fd67b2abbc32491a89c41

  • SHA512

    366ad140109ea6c79f75a62d6c8b588cdc0b355d7657251334fc7b1825bc0a49f572b53d47e76e79de41808332e8f119aa7053224e113ab92f576fa09cc07c6f

  • SSDEEP

    1536:SfvzT0fl1yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:SfwyfkMY+BES09JXAnyrZalI+YQ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d3a7501b8c03c7bdc97ffb48edc93f3a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2120
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2120 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2524

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    448e32f11a10afbf8086492f8155f963

    SHA1

    9efea579c17c0d903d179aa363a21e7f112bb102

    SHA256

    79eb865bc9929e7bc5ee6b83e3761affce320ef909ea4ab65764c87bd4f52d77

    SHA512

    0486993e6cbee9b44c16347ad1197485f60649f7c504c29c3da75f4e44800b16667f7f8728d4bb6964fb32ff8dee8a125829f0b3a747edd03612529e8bd68015

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    055e1b56a6c103d1245d5c71a0b59443

    SHA1

    29b8fcac0d0d722a841e5ae94aa02241e33aaba0

    SHA256

    ce6cb5d90604a3c15c70c4e3dc5945e6963a91f51960c6354c4304cad63c18f6

    SHA512

    12f7a04bd6f105ac8b61075c13c7b32429ba108cd39f2d4b5123c2b396d72ed67e6d3fcc9ff3e8197595aa970dad0746b87e7c5653b105135243251ef20bb0cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6549f1adb49fbc21ace32918e0a0c13c

    SHA1

    571e3be55feb1bc254565dbdb5edd3e6eb4993c6

    SHA256

    e7b1c1b3009285a420dfc1b31a0d0875932421faa70a1e297eeac75fc4904878

    SHA512

    4f0465ef36a2f2060a9429f87359f6ef90491aefa030fba37de9681b314dd41c4279176aae7521c30542f1125f981500211fab1dc547cd7b868bc90fb7f1fd7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dae1b7d6cb27fabf4dfd0e2690b01879

    SHA1

    3fafd1c202e3ad64a628ae0be9e537cc8d62c033

    SHA256

    f8913ba29381f66bbb7d697874a2c495c5f09323d59dd2c18f3fb9f4f935566c

    SHA512

    1becbe6b2ab99795791c38ec7834579f54cc41a1a4f837435b324ef5b5f16fffd3be49023a610e2955097941471295513b8e9b8ce63cb4b53623db1b2054ae8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c91f73d28be2cd5996725cdaeebe40cf

    SHA1

    ead94af13b657d6b587aadbd9be0dead8830a64f

    SHA256

    7fe6bf23091b1344bd12af9add147c00abb331a4a0e11b7fe98c0f53ac339e3b

    SHA512

    5c26fb9ff0660bb595d78fe9836ec9d85eaa259ac7f1db95d3e602f6b7a197bf973af85b69458ed3514fda054d90449df6ad239a2d649e09b3c9552d0731c75c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c616c837d82716543b8eb00964a6f5e8

    SHA1

    201a473861eb3138292956c209c8097d0992e400

    SHA256

    0289734a11a94df37c58e18d521647081e11909bd07830d752a3bf16140eee4d

    SHA512

    a27d6bdd35e11cafc6ff5ebdbdb52b550336096086bd2af91941e784734456e4f6b74864c9a014f4a6603832c35ce4ad1c2cc4d81effe8f2ec743d46a890046a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dedd1a3aaf9c34f7da19ec374f093d2e

    SHA1

    8764a2f3be1d234a14f56f58adc097b77bae5c1d

    SHA256

    3ddce8636cf4bd09fdb03b574ab09419d36cf9077615b38f90562a3d5ece1d1d

    SHA512

    27e0632e5c7bfcf6ffbf9b03550f67ae00efbc8ed5af694782d028e98daf213e420340defa21c685031d93ee9171fe1108c0f2d209789eefa9a5bffa5c5c9199

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c4c1d11ccd296c9dd521832636974e0

    SHA1

    9cd688b1f571e473ab86da48b2b2ada75ec11120

    SHA256

    98459a913de06ef3aca2c9747003e3079b0bff1827beab351b15e667117e0bb2

    SHA512

    98f549ecbc0a345c3f4bb2c83ff7d4f3ed664d0b128c4c97210b093f2a2e2829f17a1244dd29e718c0807fa1307284b4619435adc6ad7bec37d22c0712769af4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88fa5a685f6c90933d772f247b069653

    SHA1

    8ade264bc5629a5392089dd787416abe986c863d

    SHA256

    4a3110d52f5726e442b13c220ad20447fe9747dd469709c00bcde5ef8b42afc7

    SHA512

    412ae6fad3c4a81ec2358f0455792a52724f0501b802520d3914fbe571f556dfc148fd4e20de1f635613515617aa1213f5a78189dda71e7f9414f3e791260922

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30a429a93590dd3ddffd2a08a2dd1ca4

    SHA1

    b423be9369fa6b375243eed7e45a1ca34a81e1ba

    SHA256

    871e2d462009fe394a366b69a1ba9bdb0c3ad2ec140640706e0aacdcb8601458

    SHA512

    badca7352e5cb0a5eea3f72806fc67e961cd7641df0e27b2f9f3114b9ae77d9f5f40ebd40d962f024024eb3f22f28357ae532fdb2d30a8097b02f3834c724094

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1905004280f401844cac501a610e278f

    SHA1

    b659a5e788a98150783ee7ae3e4760ee241aec8e

    SHA256

    a0987b55ad17dc7bdae3df785d60d255dda316ac04f2c6d0ac73033ac7055b04

    SHA512

    f243e671d144b00ee52bde1603a040fc9757f71476baf78169f7cc4cab39483aded4fd0604813e800409d098367a94672baa5e6d546b2335628f810e2351aaff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f6cd1aaf7fa7035604bae47e0451d47c

    SHA1

    555bb58f543098bde0adb6718fc7c5b1c4c442c0

    SHA256

    54247c3032f7e27bbe444311780cf2ab5b4c190aa0a83f9fd68476ba67debf8a

    SHA512

    a821a27cb064a7420bdfc66c1e2c458a04b5804445ff33994b3b25f1c3970ca5be561dd5fdbf4493499f737396fb912967a9b4b7f9b1bcfefba40b1ab83b177f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0be5c607413d71c54a279522d18a803

    SHA1

    28ad16703c1b94f0e49d809366accaa58862d621

    SHA256

    0c713b99cd20b609d75732ed39f386a25e2e6b7dcc51bfc8dbffc68f6e8a30f8

    SHA512

    7df1b3240b14b81f102047fd37877c87b024cbbe73a8ef4e5aa35308a55517efa634cb6c48065c0d9c25897a23e50d947839e56f18ed15864ad8a452cb8d2275

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b841c4f2f062ed735366ad135ce60ad7

    SHA1

    74421ee6c058ec437d352333372145d4f068b670

    SHA256

    8457ef62549baf3e27d43c72acaf22a54ef94e21d3f100ec6d7ad0a0b2d8b766

    SHA512

    447885c415a7be09f0e4c4b3b02f2bf2c7b0408ccfa2e5df09dc3b2716ad33dbe268c36b7ad95a85b3155a53626cbf55993c04f757c660e9d24a74ed96f81340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    250ac05225fdb7bcd3a1ca877ca16761

    SHA1

    e4ac91467deb839b7e8cf0eaabf6378fd348eae7

    SHA256

    7232098c3f3e2db06228fbf8283e149996ccde7f6c7b435102ec811c672c71ff

    SHA512

    ed87607c7b069d1a850e2f531275ff830544a9a3b30d102d9f94a43951724334052a20e61e7839a23d1f1edbe034fdab2e5efaeb777bfa3b77fa3f4bac7230cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4079d0f738cdf38a36819fb8581ee83

    SHA1

    493cb04c1dfe3b3b3d093666d45f99fc24b9ac78

    SHA256

    e1f74e1a676d1b3c26b7d7e028eed40f8455f6e53cdf09ebaff6986cf0e890d3

    SHA512

    13e83d8f7354cd6927a7544b7808b4b646a9f1ab36a0a2f6398b0fff478c16fe20cc9064a4b9db5425caf9293a5a53a93bd5b9bbcd5437b9c7ed8c4cfb3caf56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0c1712933ce60ebcab856e591e57478a

    SHA1

    b40857233da56475d97b01c1887db098807d09d0

    SHA256

    910837ea6f3dc7a6b2f24cc3271360364ddf5b7bbabc279cdf45016446478810

    SHA512

    9f578fdbc59f9864f230620d07a8f194284f37d4582ed2799d325ad11318f7e4cf0db6cd51129f54acfbd910a163f03179bdf9d42d269bf0aec5e8041c74cd5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9d0f8093ddde6ac2d3e6579f0eed1e83

    SHA1

    d9c06ad3ffa108e7cf4e48b662d74c2856708d82

    SHA256

    168f39784a978190bdccb18f8c0c9152857045f545a3144f3eff17d63c5db5ef

    SHA512

    1ff00ffa87aae285ab9e9a8254b4dba4b4cd51649efedf657a83e605462240b5ed4e2c74283a7a59f0cf208069e0476896da4d43a07fd18fda73893ae609f61f

  • C:\Users\Admin\AppData\Local\Temp\CabB6C3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB762.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b