Analysis

  • max time kernel
    142s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/09/2024, 16:31

General

  • Target

    d6b365d6a0b573ae9e07f6dc2d95db5a_JaffaCakes118.html

  • Size

    14KB

  • MD5

    d6b365d6a0b573ae9e07f6dc2d95db5a

  • SHA1

    8aebeaec83ac8a85387c4bbbb5a4bce08f2f8137

  • SHA256

    6a1062ff6664727ce48397f2f78eaeb08c6611215613016c0a91c6ecb541d7df

  • SHA512

    eb6953d1ce5966bcffcdd9428f5038f7473fa9941c7964ac21ecd6dc4da546563a1bca7f236bd026767c6ac9a817c63a338fccaa62eecf4fd23290e341115992

  • SSDEEP

    384:Cyi19Ji0m0vt0TQFAi7sy1wVME22Bf0470Su:Cyi6QFAi7sIiMcRW

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d6b365d6a0b573ae9e07f6dc2d95db5a_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1908
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1908 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1496

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91e0e74b0c02e811db168ecc65715554

    SHA1

    221d81febaca16aa28e52ffb5f76baba679a52ee

    SHA256

    8937580c32b32719518606056fe9c8beaa35f72aa878e131967b42eb59ee24e5

    SHA512

    5f9ba6abe72d5936bb2209449b0064fd387318549f9068780a7c596b8b8822d5ecdad05f6740fa196b28772e6bd7953035d382c5e912ec041e912514744c6c68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3c62a5295ded7f2c3f5ce2276badbff

    SHA1

    c7e13eac34f0b0e6a65d57f9bbe01ef91bdb39ec

    SHA256

    be58e01a7322f188be7c1524d465c81cdcc8afea1d75e866e36648b7bc111184

    SHA512

    cfa75f6d14819488511b4f8ec3dd4edcfe78989de085452f860acba0e12467cceb1db28a923bec6a1a3c12ec0ffa8cbd896863c7ae8c959f37e25a7c3492fe81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    609d314be83f23a46f661da4b6a84dd6

    SHA1

    c5f31ee7d493e514d1643a9a2913546161bfe040

    SHA256

    920c76f76add905a60f5dffc8d31705056450ad7c6d6a8773c8b5e1ca098501e

    SHA512

    ce4f491f5b35cfcb79e2f495ed4bb219fb58532cb99d8255865659552b1fa2ee453354e2aedbea17f5318019ad1cc679383b85886181f37196d5eff1da1da138

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30b536fdcba02821fcf7ec28d45600e3

    SHA1

    bc348d40995304fe1f06bda1912bee3ca786cedd

    SHA256

    8ec43ead7d34228a8098e318accc745c6ab700add42c859782fb1b1915b684ce

    SHA512

    b3a36c5cabac91c036c8a0041cf85910cab9081771a9fe5331d138058e18678b6bab3ca02af4a530599a8c9ec287a16f705931cc6a699e1b7d1bb675aba28151

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f36013c749b23821aa87ae8b3ec8b56f

    SHA1

    31378c51ba8f96a2f67a32710fdeb8d39ae8e9bf

    SHA256

    4ff51c34a2e7a0d6edc9abb0a412fd6f59bc7e6ebf9d4358a54361900455bd2f

    SHA512

    c511a0cc121df9363f4089e0853314b39d42d88f295ba42bae9963540dd9ea60ddfef2050208dae7f84b8f21e4f810d061c77cb862845f162c1387d5da788076

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d9d7c237d82838c0af2ed6d5c726ee8

    SHA1

    35e5f3d76efbe74d1962980875dda206c4f46797

    SHA256

    f7e8c8597f7c251b9a34c9b03a92d518fb882785236d5c8f7e3953cc88dad13b

    SHA512

    e0d5587bc35319584117bed732465ad80cb1de02fcfff3aabd29ae4012d1fa1a77be43be0e5d13900db46c6318441186e5b531e6f70541e0aedc3b3c6ca6343c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdc4ca6f1628e80e6196aaed408d8e71

    SHA1

    8a781163ea8ff1065cd3bb7af23b258be0e603d1

    SHA256

    d60c25adf70778465cf10a3892a596d40fd875e82e67079996fca6cba3084b8e

    SHA512

    e6a62c57e4fcd3c9dbb25a5af34b45aff317ab7a4b24c0954fe9df6fb7bbf8083f28aa7b9cb80969a7b22dd6b36e89d423f54d1a9cc264df0dc9cc5ca7706846

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d1c71383a68b59df18c99565bcc2fd1f

    SHA1

    2448523b6694c7fee5a41b4bf6d3a3d232493d25

    SHA256

    0755aeb33ce61afd384cda5e19c8b3953df4a0502c16f95c07f86d7a08175b58

    SHA512

    9a751eeb4bf9ff5fc2ebbe04226066cf96afd8c5510a94b444de07093cec8bcbdf59d5f523cd490c51227c4642806fd87b8f0d369ac5f8e598609f539f702836

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    16238478517a07e2989f22a02393df2a

    SHA1

    c7d63366d1c5c3332fb4db8e10d44d8623ffe7d0

    SHA256

    59d2f2d33534a47e71f1d2e24e1ed703a24f05f36271684d93f881128e8adfee

    SHA512

    5588f6b2483da8e7723d8de474e033d3b4048a125cb1516a5a2d56c20c91efef03ccb33b9dbabe4ad9b1afc1601e08cd04a88a216da48c5e907d2ccdc74780ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    545728cef792232cf394c29c2d22efc4

    SHA1

    bcbfd152583cf34a25eeb38d27fa41d746a4825f

    SHA256

    ff48a7f6e328d6322209e7cc56f5f4706d2a9b18b74094c72e301a3be3a2ecd8

    SHA512

    b30aa48bf63cd630511d279c101da9cf99cece467f02e02a6d7ba3beffad4f37d8983218a1b061c60138bed4de54f35dbee85173fe6c0180802897a35a748d30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08aa56f5b14b4ab673fde315426abc40

    SHA1

    c0bfab4e046fcff397f60754fa7b92495a3fdd78

    SHA256

    fa203af19af66cdf540570858abe9d85cef0f7d208ceb31235e302911ea2c673

    SHA512

    e07e6e61c2b1b15cfb631c83943ae8601c8409db66883cac6802aa822d13c145029ee808250a0fa5307cc6b7c8bd002ab74002a42d175a2d9e2bbcd4122433df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09acc29d855f151054e54e61a1fde028

    SHA1

    b78a7f9d8f8dd8314d56488d1169805e34b5f353

    SHA256

    5479a668b16ab82d072d51b40621c781075fc715bae465921f6e62c312837dcc

    SHA512

    45f94876f215a043fdb9caa3df5fea9d75f4bcbb5e19eaf743911ae3effb541e9f61703642a1b0c2e261581ac31038946cc798d9f14c713fae0cb3ac161ad27c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46faef23ec25fe91500d384641c91adc

    SHA1

    784c6d9e23fefc2ad6b0ce90ed7475950242a69e

    SHA256

    eeae16eecb3e9f4811b089cfcb04895b2f8968a344e093c2d7b3897e99b795df

    SHA512

    109779f7343e27cc41a7c88f028c1e23c8f1a29e76f0ebf8b0ce690ebd0157c9c4de9cb35916a6b9e91d5d69fb0f7cdf78b7b7d66345f9eca28c29c8f27c6c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0076c8430633ffaf81113ff50ca9f1ec

    SHA1

    aa2e489d5cad9f2af7c38e2116f7439fd3e8f564

    SHA256

    f861840aca7ac78ce399d9b2ec897f236c94a0c95e8a1daf0be5e7478aa96913

    SHA512

    db86ae2bf6eca274c802f49c7fe3972a335ac5efb1915f7a6fff038965490b58affb87441c2d94e4f170f95bf72f928e0c295eb607c3ebff2037305af9e04271

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7e79e19ccec5ee7b47da8c3b50e05fe

    SHA1

    84854f341466f2b11bf619837705d9cabb0ef426

    SHA256

    62d8c332244f0910622a331d6021c8f1da492b99c4bae6861891685430cbcefd

    SHA512

    6075f89d059af721552d8659c261c99876680a5e671c47cf4b5ddfd6e0d18f26c06afd981a01b726f3b995f884c0ce1d271a0baa26bbda59e892cd142eee2681

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38e79331048b026d84a0fc62d4d7c993

    SHA1

    2c3224406a12d98d95921b3c90e93a96bafbb8f1

    SHA256

    eb4a083bba7b7fff452c394d30eb5fc2f63447f209f07a1c6e8fe79c0eee2379

    SHA512

    5eee5a5f4f9f774496201e8eca0c32c3bac57f6e2afaba936175ac9e3d72caa3ae8dc0c3e6fbddea3e93c4536b345160a6ae19286e2d3daa2210acee723961ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    525d32a1440c9ba9770cd57d907623e1

    SHA1

    8c04618c46a9ec6ec18ac042fd99446aabf50425

    SHA256

    31c639e22b8b50974c3c9b022874e598ffc29c1ce6244381e8154c10ae021bc1

    SHA512

    6772c7be1bdd26e1488b052747a2efa0d0ae7163344d666d905955b77cde737e72a9e23510423b22e2fde4c6340b39836840f39d55b25839e163a0c502f3d831

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    004d9b652f507ed3ef2f26b81ef2795e

    SHA1

    6466d399e2bc8e76fcb26098c40ceb2f2d1cc410

    SHA256

    3597351fb23440817d8fc64afd0b00755fc75a35598e1e581bc7d269f9bfb7ea

    SHA512

    25544d8b4e4edf49755726382c20d0f58c2c7f968d5469383db9968a4e6005c77ef8df8364b11358d8430418162213ad28ecee839873633bbe9e658777c4dc69

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8872c80db141bd03569c786d00dfa5bc

    SHA1

    f11f28827bb1a67fe54796c5f141150048fb3c70

    SHA256

    54673a91a658a39ad2d27c458266d29deddb70647f783aace4cadb790f4998cc

    SHA512

    4c0d7de0e5d90a8afc5730c4cc3ce5722401e6dec3a5dc4391252c11290f37b4b1595c6fd00fa582f1e4683471e216a037eee853f62d4ecb5c884d782b4d1208

  • C:\Users\Admin\AppData\Local\Temp\CabD404.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD486.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b