Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 17:50

General

  • Target

    d4ea5eceb68fcf1844a56f6fb3c9a113_JaffaCakes118.html

  • Size

    72KB

  • MD5

    d4ea5eceb68fcf1844a56f6fb3c9a113

  • SHA1

    c5d81f893b2eec7381187e74964660e3657c8aad

  • SHA256

    81c04ed20a8552f8e06a78dd2722fc322e3ff0a3defd80af07b9c01f5395c837

  • SHA512

    122ee005f61de3ab0d192d71f45a6238fc6452fd3239b4e7c5689fe12eb578cf69d7822025727caa9100e1ead72f7887d0a77d1241fa867aef917391e074cb4b

  • SSDEEP

    1536:JcA0zhRzI9I+/BIhaT8ec0tbrgaWcMNnRzT:J8RmyaT8RxcMZZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 44 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d4ea5eceb68fcf1844a56f6fb3c9a113_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2676
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2676 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2360

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    71bf60f50339eb66227c4cdb7a7ee349

    SHA1

    61c5d2dde570347928827d01f93e2ccc674158a8

    SHA256

    a055e9813438198ae3c3b25495f0ad9002d710db7097881446a361974ed6f663

    SHA512

    29964014ea90996117e2699412e30ee96fc6b08550e723fa360cdebdd42624ae8b070df94dfb1bfe217a619a3ff0492b93f7ac772f764c9e21697293ee5c8fad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    9f75259f9174e2f54d8983cbedfb4a13

    SHA1

    0549859771db6f28aa7fad130b52313c0b3b9916

    SHA256

    9ed2352cf74ae5e873f78d18b758ded3f9a8f23829228c3860bcfc4bbd66d29a

    SHA512

    6b139d474dd623964c851e823ca09dea37431435b6d291e1e4791bbdc9a38f7714f947469d8de58f2b2f0ef498c1e0469a06d43d71c44c6ad2ea6a62391b74ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    10782ac3a781109513327559d44c1b71

    SHA1

    96c395374d50ab056fed563edfddbdfc03ef93e7

    SHA256

    ae7b29b77bd21e7a55e69f9c3ffbb0807190b364d9a02b0bc4529cb530380ab5

    SHA512

    d1dbd0c6ada77939291286f747cf5a7b33d48600ef76b547633ed65de275d50ae8bde79eb0bd4bef66100e275ef199b4b6d1ccee8c106694ff7e387d07a7e35f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6DA548C7E5915679F87E910D6581DEF1_CAD310021439BA76C6C953874639998E

    Filesize

    406B

    MD5

    bbd24ac55c20f30304a0fc688ed90069

    SHA1

    32d407f8265ac0d4fdb1266bdceec3e2bb7fda59

    SHA256

    f7102a04a8c0842933905d09835e6ea4a90179b503a3771c0a052504f9371eb6

    SHA512

    5ef6e7e20059b455e518f13c4797426f262afdb300251df2abcae58afb5ec09677149a8ff2b67685019238f2ae80c4ca3c87efefc2652ec293d4f0a50cf3be65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    969c625c8fe79b0f8b99b7c475f4bad6

    SHA1

    904579b4257cd0dfef18631510a046b07dbf9d37

    SHA256

    1e4d7753925310df0b0895fa5b01bc80293ff80a90b20fd999b773eb0cb6fcb3

    SHA512

    82858764e37df6c5e2187b25337fd6582e40f92ca27f9f42610a9d0523d26aef45074820f12986712162fd982f855b7a0c22f7b4977cc446d7b50ea0f46afec2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    593db8b1adcf6bdb2398af71ec9b7c1a

    SHA1

    174a699ff2d4e18e1995e3aeb3c99aa523a83b79

    SHA256

    fd3162d99efcd51ad0aac1fefda3c13d971463fcbec8cfb6c3056c5263942ee5

    SHA512

    8a5eb3c65f7cb7aa2928265d1b64628dccdacb18cb7ec598bb0bdfc99c8d2610b32b8900149361a08170d5a21a5aeb6722a4a52fb8cf24331c2e357223d6fb45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6a9ecabc12aa426b3ff09998037a546

    SHA1

    e57d1050e79cb87adc99a43ea3ce39a06bfd064b

    SHA256

    ae428fe01a347d5a2b55fadd4f86dc0cbea212b383e29d09e1c66b3a8277bb69

    SHA512

    aa94a5db05a66d32e7d7c191b991f2bddead52825e23a35a52846f49cc974458809e990a72254df59da5f00b437947e120e4ac7f687cc3b482618b2dc0b449a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee5baeaead864216293364c1df61402a

    SHA1

    6807895594b663a9d34ced953904ca4ce32ca565

    SHA256

    0312e6d4e1bf31c030ad31619979e5a8f3e9be945156421cd58278d46e01d873

    SHA512

    ced21607572b3eb768f0c40bb1062a09b389ece17f2bfc0bd916dc0d4b9f571eb105e0ee1dd4182bfe157e9cee37530b1707ef622c8a63fb61ee93822417bd5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff0ede35b396b3cc27103bb421459951

    SHA1

    081da550087c322c330b2c7229e765f4315fa144

    SHA256

    c9a8bd2bb5989ee05271a5637ce9ff871c6dcc9a4e1468874f84a90154a6a214

    SHA512

    7aeb1a13a38693850e7551a2f56825839cc218105b6f42530c92576c9af1ff90730740296844e161bb7aba547d3e8ae0deb9bc72b2b0bcb9f03df460a20d5bb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6755dcfb43d7e50a45cc6c1c7ef2191f

    SHA1

    e04dd68b88f7e39173cb6c8a4b1e80fc8377e101

    SHA256

    009d5995125fb024974966627301d105dd8b3c6fe2a3452d9cd1501974c95f70

    SHA512

    bac5edb2d7fd53aea878d0c6275ef8191220dd6e71ae250a0c147c9f5ec6801b3802b860c83afae7f714c857329980a79b2a9586d4c9957b68195fb33fb1e13c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a12eb4c9cc9bda76a083f87d298d6527

    SHA1

    5922ccf03ef7c878d672ed02a6bfdfbf0c60d54c

    SHA256

    7329e55bf4bd11e37bdb6c189cf3f5e6ecd7ae413595c8ca937877631136fda6

    SHA512

    92467c1f861b358b27335ae1c2b997960f5b932728e8c34fafacc280f06c8dc6e814c30beb490d6099a2c6cd312e1a474b7141b062ed3d9f48f53bc11b4c6681

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b283f43fbcb10c2fd1fb9105944295db

    SHA1

    ac0ac8c8ad576fc7da885383003db9660d23fff9

    SHA256

    ab1771fbd470559db246b4a0945b61f01da601336345a27cc13bafe6b44cfa90

    SHA512

    2600abaf5529e597997f25b3786086843028cba04c8b2a8c40a462dab629706ffc33ada3b6c3a12632f486267369f72703e6d74010478d4a3cb38392bd379fee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ffba1e2e22b4daf4f2012a7e64385f3

    SHA1

    90622100a9417d5ab3d80253d897ac31ca31f785

    SHA256

    78bda40363a0d4ae2ff0e41c4447a4dc57663873167a3402a042bb0e7b156775

    SHA512

    2c7b5195cd1824c21c7a80937ff9c680c4569268e9d0541bcc55e14544debe5e7c04c668a17efc1fe412580420602285c0fa98890e50939f86740fbd47e21332

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    773901944d672a9ccf5f7861fa31387a

    SHA1

    f2705c8dbd89b3d08ff84f06ff42c66fbc9b8523

    SHA256

    bf0f7cf536c2f16e0423fd8e8ebc70b0fe720067cd402f3d1d042c61503dd717

    SHA512

    f06d0a55165ad9d0abc99cccea95f3f7934ca63a5f0f6c4d8e62253a7e50e40cacf58005e41987dde37c57b17898b114cbe69076c8f00a783853f857c6613c30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    49c227fcd250f4c5240a1c4d219c3564

    SHA1

    48b16727fe5219ccbd8de7897710fd7d73307ca3

    SHA256

    c1831a459909af0c750ceef469f7bc69be8223b9857cb701028392ad6ed33e1e

    SHA512

    3620ef5cac7d24964443a43570fa6e2303de25d827d7ca6a67ef35e6e6f444593e358ad45a94ce473dbfcdfc9202435cb57aa99f628cab46af93543447c84b95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7814f964f184fac4d39d992ee101d224

    SHA1

    29d42c44deefb5b1fc3ff231954657c0dc898c6d

    SHA256

    ef4ed525a0d5cb35c8b741112cbb15d3dbcce226c7ff15e95b29d4d121b91ed4

    SHA512

    ebf6355b13a8a5ddf6c95be84e426e91024551661ec81aa6f7ff88864d4bcbcd2a282f2a9e39a593a4abc039c3654a8e9c8be23b621d6d467f744d4ab5b8a4a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8150d4887909e1e4e39e4df607c7cd17

    SHA1

    92fa2e5cd7fa486eb1b54fc418fef97790bd22c9

    SHA256

    d6b260f1b3d9fdde8926de6e0bb2f47381c3352857800f144bf357071a0e3abf

    SHA512

    0e0b0d9faa8ec7b0da2bd76307f20bfb55f45997d451006e39415f138c882836a111c7ca839daac7c62914d66b5a2a51f2069827ae4a01ffb25a6ce456ce53d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    284e2abec14ba2aff5bbff71630c6c33

    SHA1

    be39a7d16c9a88a5f964fbbbdd98e986f679afe3

    SHA256

    d0e9ae3151140a30aa95144b4ba930e1d2d5b4e573de08fd7a53f3ef9bb1b926

    SHA512

    c76c49d7ff8b7a31d4862b5f44186a47aabb0688128edf9a14d9fe05dabea2cdb9dca09a87a7da15941f58694e5a90180e02b1b57140ff683b9fdd26b9bb4e65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16e31e7f73b523c09e83aba9fd1dbbff

    SHA1

    25ddfc59c2b434e73cdaece733d27b9c33813d66

    SHA256

    4264b9d293e92c251778b25500fc65b49c528b21ad6ba2fc3d0eeb98bac89d67

    SHA512

    ac834a4ef2a385a5c9f26f5a4914e9d8b09f9c41f6d820c2002927101263bf109abf2d0e18bd5c7d63250123f38d9ab585d87c2756df4bffc78c7e503d952838

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5c2da0cd266413ef7b9f7c047dcd848

    SHA1

    3724e9d240c5de39efe538600026372feb770e9e

    SHA256

    f8a23252ac6ada82457490f761d277d4dc89e2883faa3d681dccfd2d71f09eb1

    SHA512

    180c3451d3626dcdc8cf8df3b2528801f50e5f425b437e641fec0e2979bea7f366b88a5b22a061400b633ef0901d5159bdca7e0992dff2075ecbb19ee21c161b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    504b756575f13aacf074f4a7184bc085

    SHA1

    55e6b63c3b744c7731f149cad44fd6aed3b6621f

    SHA256

    e2981dccb26f2a26f777f1053402c190302cc02fd99defc27cbd2771a25a7e36

    SHA512

    3a5e5f8434038449eb97307c79a4cef11225d2f57e7450c4df5a3c002d33d0ebf324eb9b4dd68d6aa9086bd3a1df649e46e306ff9a6d6874a4241d1482242e8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a4d190048d8f30abeb58d355eb5d9db

    SHA1

    2e40d131f73f27f651b33b4a9fde427d03b93aa4

    SHA256

    d728e19965fe4d4ba6d3fb152b5191a7d2e8bac5e33956ef0c4d9a2b200af469

    SHA512

    f7a939eb1aa3d4613edbfac4a02160236f4341c3aa756b1d161ceb68b55d77b12112904cc80c2071dbe7b165e9c20aa2eab1dfe395ca4a35ccbab401bd44a53e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    402840c43be72f72ca64c2d137b86bf2

    SHA1

    6ff300d9083e577e406d2cbaf81700e436e4c9b3

    SHA256

    e85f2494cef8c60d35144b3aea9b79286d64ae8fc5afcb196fd36f79ec99e365

    SHA512

    8200318143bf21cb1344639c5c379a6d0a347b67469fa83bd12e3200049e47250c195605fb6cc10872d0704d3c345bc073a733f586806f8266cd0a5f60ae04a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ab8838d2ebff0b77fdbab537ba64007

    SHA1

    8d08ef37a7f547b488403fedf7d1380f1affd3f2

    SHA256

    76dd58535a40c15c24ff6d11dfdd245bc2cf26df55489b0ab5c588d88fbe333c

    SHA512

    fa48d178b5131fe976a7fcc543cb7579cdfdac123de04dfd5189ce7bbe72890b39da6c60510ebae24029e4692a8ef0e660ff1668ff258734774211103749abc9

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1LNUKNV0\recaptcha__en[1].js

    Filesize

    537KB

    MD5

    c7be68088b0a823f1a4c1f77c702d1b4

    SHA1

    05d42d754afd21681c0e815799b88fbe1fbabf4e

    SHA256

    4943e91f7f53318d481ca07297395abbc52541c2be55d7276ecda152cd7ad9c3

    SHA512

    cb76505845e7fc0988ade0598e6ea80636713e20209e1260ee4413423b45235f57cb0a33fca7baf223e829835cb76a52244c3197e4c0c166dad9b946b9285222

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\8452S9S3\styles__ltr[1].css

    Filesize

    55KB

    MD5

    4adccf70587477c74e2fcd636e4ec895

    SHA1

    af63034901c98e2d93faa7737f9c8f52e302d88b

    SHA256

    0e04cd9eec042868e190cbdabf2f8f0c7172dcc54ab87eb616eca14258307b4d

    SHA512

    d3f071c0a0aa7f2d3b8e584c67d4a1adf1a9a99595cffc204bf43b99f5b19c4b98cec8b31e65a46c01509fc7af8787bd7839299a683d028e388fdc4ded678cb3

  • C:\Users\Admin\AppData\Local\Temp\Cab48F3.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar48F5.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b