Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 05:28

General

  • Target

    d5b8e785def87df1b2efe6c5681b1109_JaffaCakes118.html

  • Size

    2KB

  • MD5

    d5b8e785def87df1b2efe6c5681b1109

  • SHA1

    e6e84daaf2faa9ff29f03f85f8fc711c15c6404a

  • SHA256

    86b3fe5d7a948f15b2429422090765627a5139173def4f6ed00d9cb8ef418bb4

  • SHA512

    2e109eb08e190cb7782d3762947645d8722bcb0e0ab491094a1a6c134c8c9fff7e417e488bd1c11e5d49ebfed2fd18d826cc93abed01236c785a3083425b0dff

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d5b8e785def87df1b2efe6c5681b1109_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2036
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1484

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2a566e15ae928e494284ff0f5601622c

    SHA1

    f2930f54de887662ee83c560ce2e6ac13216a4d3

    SHA256

    9f9ee2629cbf03d9f1db12f7b9d086c99fbc306c201b6485b369087d31a1a534

    SHA512

    b027e064c84e388d086c8313810eb18f8a3a9aecf72ca8568a36eb0a8c6ec9c9ee83ca1d2dd4a8e9d04cf259a8983e9848355ca3fc9e4ff591d069515fbe44d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    81f33d337c42434f0e88b5fefc1f24a8

    SHA1

    de237e5ab3ebf56e357cb0d4b45d955ac6a8b782

    SHA256

    e15a1b6453df33a196e849c8c0df2102cc6f02ca1dca5460a000d069393b58a0

    SHA512

    1153424650cf4d36e9f3a75a5942ed763097d43697d0d10f011f0a9af100711055bdeeb071ec14075d103fef6ddb11cfebbe7491d20016251c25a99ae17f2f86

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1615b42c081adf90a9b6db7e85131bd8

    SHA1

    dcf46184da0838d026b06a672be4b1796833c5b1

    SHA256

    824261989a5efd6d429795f1afae002237c55fd3876cc6302032707d674c2d6e

    SHA512

    48e19af83c99f27024e17ffce9c5a46457d5e4da12a13f9f07b77c7129d269d926781672056c47fbe52653c37b1b78a64d902729cd76622c143034e08e8301df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0e65310e50e8c19f7b5ed7dbb4213726

    SHA1

    749cc5ad1993308f5b1c9458899367334957b443

    SHA256

    1114376d6cf4346705674b92889f70c85fbaad081b1372875c9b5b0b4df3de01

    SHA512

    69e68ede91018d6ad1d547b724cd1151c3e09d8a5f5c13a3511e3c50898e63d535da608081ea37c3808dfdaac9495fc6c6c11e395532eed4534268538707308c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a17f02d49c0ac1208c84ac90531daf5d

    SHA1

    77a5569a4fa55d07c62443ea02b682a59b6c50b1

    SHA256

    aea03b78e73d0a9dd09473697e122e8d36175937a848ea4e5d6928b715c74d48

    SHA512

    d02c4437563fe16e521e8efa3b64bacee0098156bb1f21c244cefed273add4d4a12af12e585b7dd5b30ec0b8654815aaa50f305aba08a3bb4f445fadb2f6f4d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b79ab5925cba6fb1dfa5a1936f2e0845

    SHA1

    36a6e76ab7ce52dc06aac2c0958f3d35ff6449b6

    SHA256

    372c8ea75767402de8b46075b5fcd14a984939af94bcfbab8945fbae18435b39

    SHA512

    1ee49040dc514861fe46e68f5a00eed6100cb347d28edacb628876fc03b904f72c6be854e406dc57286613c1ec3a2cf61cf341fcc45e6a3998d38f1147c839b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9949c409092907bd7e4276ff2848169d

    SHA1

    34a967e5388d131b728f17c5b10b070d363d1a60

    SHA256

    45441293f0a58748d666c6b21a651c4eff19286cfbc5f3d3b8c90c4d5ffe0f75

    SHA512

    278cf190da141e12e3d222f957be05441be685cccf035964ef2becb74c12f968d6cbdd064f47e405bb78954004bf134fc42aef5e3fe9ce7d10c2d2b36e2f6a61

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    737bf04aa9f1a8437a42eb2196391fd3

    SHA1

    f2771cc3330c4a28f439bef2f960e0bc6e6e5c18

    SHA256

    8b8d12377377a07446ca0605fc5f9fd783903eece330debb6b8cf35fd2a94134

    SHA512

    6d8338187159b5fa5a8a9370c56dfe2a00d51012eb7846a0b85753f7b157591548dbcb22a003521f7d9c808388b9ab51612f2168e54e5804d4371abd1f48ddf5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47f3b79751de191cac6a1bf9cab37bda

    SHA1

    ef367585d859224a13762806c17bef6032097c7e

    SHA256

    62d86a44e93777721b6acb0576fb6af0bbba789042992b3d4ca5aa8d5b929567

    SHA512

    e36c99c6fc63ce81f67144f570f9435c81591ae0d1890fe46d0e110dc901a3b5e2448c19acfe6f785a683cad598aa503bb84196e0ac89bf3eaccd20d5735c55a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9f0b653236bb6ad527a732cf7030b1c

    SHA1

    4a3e05b0f217c9a45ab6357763a60e846f446f00

    SHA256

    37a29f412098b68ecb4f88973aa3b87041658bb0e5fc30c4f8f2df782716a28b

    SHA512

    3a475474465ef5e9f68f6783a1889444174422dcde53c05fa404d76d2f998fb20d8215ceb9ec2ba7d6b6562e8ede21a9ea5aee60e1ca8b9c0fa0bc59e4571489

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55629d28ac78e863ee3fbd8a0b16ef9e

    SHA1

    3e7c3ac2541add703e28fcd3321560d9a15346fc

    SHA256

    34f06ddcf80dd821c2eef7704a3592c3215cf50bb11c6dbc528fc92a564e5ecb

    SHA512

    c6f8befb1f20c96f4ec6d70e18aa088f3249cb170ed7e7cd013f429a01cf42fe92e84b587f6f679d6a6d8e17ed45e805f03f85f166f91b6790dd057d4f2d5463

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7eebbc4f3623b7139f3e503d0ee8d3ae

    SHA1

    adff57042919c9b00948e1241fb4fa2691c206be

    SHA256

    a727f85a3f196942722b9f7bb0d92b631f4ae39f1bb4d05a3f83e84451a76061

    SHA512

    a571917c528a8025811f52642e584e13065546fdb669b03f3c02086e27a844bdfaba22f1e2ba56bee0b56250dd070b6b9814582c08f9c6c5f792c3c8f6f723f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdfb00901aa5f905b7208f867dbe89b9

    SHA1

    76827503005b7a8d28d3fffd22f7235adbccd1c3

    SHA256

    3e3809d018a03e29a512b6f40db7fbf2d2358e8c16070a539987ababa3f8be3a

    SHA512

    37a398ed1cf7f07391f317fe0d6704e1c00b61c44da3190fd5288a2d33edaebf6089216ab7852f03ed6b6668d42d571e741567ea68a4c1f135ad5f195f65eb85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80d30ee1a5e995ece9cce32f026497e2

    SHA1

    c38134e8cf90025348d63a2908ced43883824c76

    SHA256

    60e238e31ecc05dbb52ca3f1b078c34a950d6bc425e838c9069d7265a894c831

    SHA512

    8f76519b2d9e9bcf304cebf1c68413c009a2e7b0679098bec4031236b5640040e992b2443f19a7c49be3b2ef1859bcf5f4c042349af8f3fe6da5db690fd2ec25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3dfb638f7cd461deb0fff82003c22471

    SHA1

    7ce985b208e0b01764b322096933d547901cdb9b

    SHA256

    06eb0c5f148281f9ddd3d040e5e6f7f8a0b5cd3243a0dc5df6338eb24757b0b2

    SHA512

    f578f190a6b551d9382ddd43c1e2d110c504d71f7c72888247c5cc4bf6e9ce24a692ecb90aa9bcd1b655822326c12f4fe8e4ebcbf42e4d220290c20ba03adaeb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23d7c420014c8dd9807b146d7329ab92

    SHA1

    bbf1a858f2eb6712d36515127839d5fa4495e2f7

    SHA256

    ec453db6732876db08537ab5f35b5c7a28dd6002d568f5dbcde22166d639d2fe

    SHA512

    4c87b1b126d5f0ffdb9de635cb51b99313fa8728c54177517903a5f757b553bbc02559dd70524c0cf1730f21b864873bc8bcadc7d1aa7299f199641aaaac1938

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4de40d2953071e45875a1146d553010

    SHA1

    9ce0929b6593bc627a5d79d91a0e0ed07a9b019b

    SHA256

    fe3bb6ae2879caed2bbec593783b1aa5746e38d74e707f0832bcde6dd12064f3

    SHA512

    bbf49e4de60282ae25739706fc56abc6759c45a27530a5ce5f6bbe5cf98cd9c6cee86afdd0059de725954017e1457c3ef9a8a0fd6eb8808cb797adb128e84952

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f916b5a321e01b328c0745c5f73631d0

    SHA1

    98a5ad5b53234456c7eec9fa62b7d1f666cf2465

    SHA256

    2a658561186a749b1404204bc8c32d5abce172eec826283c75417dc4ff2b8a41

    SHA512

    0ce4f561ddbf91b167a1efd348704d9410bc4c0ef5df9c86713c8aee7d70d76751e611c0d5fac4a5c71b15739abf08075b37b4648830aee48db0b05ecfefcdae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb5b5bc7305850c84f7561a71d9dd393

    SHA1

    6c313426034d2fbd6db88bf585186ccaee812fd1

    SHA256

    fe87575d59b901331bc3a87e2abd2e10859a3446ec87247052b41b31be5c347c

    SHA512

    8f3cca58befd62007f4d6b12ccb311ea3f4e9bdfcc9d6d0165ba0b891f253c1c01c626bca6fe4c9147008b2d60b1ac3c1fcb659705b0bb2b1555e069e591b618

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfa049e512f275f34f07222842d063ff

    SHA1

    dbb9c126080f17c6877d0cc55f8997433927e2aa

    SHA256

    30bfaaa3fb37473f604d20c1e846942f6351619aa4ceba7d1967d6ff3feffcdc

    SHA512

    455e5e9505d3c008e8c43a230b357aefff560edb041e594369cf35053638ceb541e458a446db6fb6cbabfe375353206a92222cc180b33fbc194677ef36cabff1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7bc61859d88cb15f4051bc0c724109e6

    SHA1

    5bc4ca3faf900c2f997965fc60c5c75437e2b1d3

    SHA256

    6d5733cafa1d125ce60c49bd692e2b38b4e24797eae62a7158cf4ac7d8ec91d8

    SHA512

    75ab29843641b99bf67a24c759fd9322ed6c6f6a5f0c1a393553599137e483c5055ac6a28a4c423efc7e025f249b5e4af47f22428451e09704b44a36c2d90331

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    743610b97e8a268e698a94fc96b5bebd

    SHA1

    fdb91632e094f0ab906fb83fa68a2fc097403461

    SHA256

    d1eecfff946c06a6ec6295e835f4a8c15af138bffab17c254104c46f60e74103

    SHA512

    86a33ff9f2076859aca35e454abe519ef139434c9082ace136f9a636ee3e04e2712b6644add12d8d8f039765463146298724a016cc60b0400e995d5d00d79cfc

  • C:\Users\Admin\AppData\Local\Temp\CabF895.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF8B7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b