Analysis

  • max time kernel
    122s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 05:33

General

  • Target

    d9b55e4cde03430c4a5fef02b996e318_JaffaCakes118.html

  • Size

    4KB

  • MD5

    d9b55e4cde03430c4a5fef02b996e318

  • SHA1

    cd9e747fdda24cf40dcf40af35d59d69ee142632

  • SHA256

    a11a40df175e8cbc646ad12ce557392b8124b1ce65d8b9091ff71f3450d8abae

  • SHA512

    5192560515201d8047bc82f3b56979b465d4a9b6848d944f8708fe12bfe29a26d9ac8a13429677a3affdaaa2da4562b6d5099dcb545b5f4306477ce95081b77b

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8ofebad:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDi

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\d9b55e4cde03430c4a5fef02b996e318_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2992 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1392

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    430a8dad88e2d67f71f7d1bc463b1ec4

    SHA1

    030a93a88f767a40c0e45a90152e8d9d74abaed3

    SHA256

    5c1d99f9005712191f7dfb0f7d14a035413f203ef02a41e2399472058ebfc5bf

    SHA512

    c5dde23385f853db833dc08201182ce7202b7f76c0f9edd610dfb158cbe107ab384249a48b2ca383518c67fb0fa6b22288baf746e169b6e1ccd202b12e8717ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbd30daef7823fb4b35b5b566ce4c66e

    SHA1

    6bf93e36efca52aa42eae3ae57a4a1b9052aee47

    SHA256

    1553edd2840e9cc4d9bd109c0c106236e2f9a36ec8eaeb719b8efc6a12377a1a

    SHA512

    de0214f84d8ab5455faa60966ec762f65dde4461fc30768b4099d95459eca1c864c28dfc10d30804e6568cb4f7d295df101c88d96ad12afae6297691af9b26d6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45143098b56af6a5d107be611bd82cbb

    SHA1

    10976f08bc2b4940443eea2a62c95f5778de61ae

    SHA256

    ce4846681c063342c648221e315de2418e0cb0fe2d0662e6f9772259ff904d2e

    SHA512

    254aa29c18c99388c6439ea736f410743685491a46beb4c6c5f8240d3d74f20171e26ec7699ffc714aef431bef441a3bff5df70b16aab82ab5a6f5b901089bd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    211ad81b510fccee76c8a558b5da8403

    SHA1

    cab129f0fe8f5643894090b3acbf238b64e88d65

    SHA256

    91cdef3fc40259dfc54e1a22d330f7247cea999f76c05f712a5b5a617de2eab0

    SHA512

    fd87494b89c9454110981bdae2997c62fa94eb6c13a55fad4fd5dd65952dc2f71588abfd4619518eae357776d56e8f4f631769dc33511814e749123b94df79ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    23a22b4ed7689bb6b39170ec6db2ba33

    SHA1

    fa0977fb4a7416fbb10bbbfadd36843ed7c7f79e

    SHA256

    6c15ceae8438218e8e6276634672fd11535d062c308d87675675d1d8d7a2b83e

    SHA512

    aabfe0f4303c5f6569fb1c346a2844311e1819b131cd94a1cf074d211df155b6333bbeea6c0648a488b586ad55c76ac954e9883800ad775d67123c1637f8c478

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0651a94291b857272242729af7064340

    SHA1

    7151628d9897ae0ff4f96dc0895fc41b2c884ebf

    SHA256

    f00532cb9a1a298e2c929470ef97918946520eeaca0d685c8ac2a87e3cd4cb16

    SHA512

    ef71db4d3d0075c854030d6ec581710a2455b94dee1a23230034c0f73e152eaae34340191b825cecf9931a12cd6fa8cd1c97e37d43bfcb487e3901d39fd83f12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bdb1aa2b8ce3f4af2ff1ddcfa73098a

    SHA1

    0151f8b0c1cb29dc74e833db00bc31c9f4565184

    SHA256

    3b5a4c0eaeb1b30874fbf935db56407f55591440c25845077749ca5375bd4e0f

    SHA512

    3049add90791b0d091745841416d4b8d39a9945b60580ec61fdc854edc9bcb11d25ac5e2da68c9141d2f413b48bbf2b3222ba2aa2e8e26a51ff92b31d1d6eac4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb55bd36008408350224bb0da4133657

    SHA1

    0e16b00c187d3c1ad999a46c3cd22e6db892b80a

    SHA256

    e439ade093a8cb6e28a381b2a63270650d55954be672ef80a0509a8b7a0aea24

    SHA512

    104ad12f8400daa17962d9864c6065663c21927b107f6fb7c85712e2f1cc26dddc654585b36708dda3ac70d6c5bbc6d6edbba12747589bec40b8c570bc85ba71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64b8d5193a261dc837532436ad7b5ddf

    SHA1

    97d664df6c2a8e10b39d210f927c0fde941a4ebb

    SHA256

    685dd18e8dc7661d8a117e641f4b75ad39d7aa2ff49f2d6af9203fc276e0e503

    SHA512

    6e3cbf2d771c6324ee9c3a8eecbce2edb107728f18df9d55e534f7d070b40ac07d4a66eaf9cc71429f2e14cf5013bb34cd4202bd5ad2d2b043a45d552a5d7da7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d1a5c962ccad0bffa6d39b140c7bfea

    SHA1

    50033505bf105a3ddfa1ed9a1a160d69f32af7b9

    SHA256

    a230ff54a391cbe0a460f2bb745af13fcf4c57f0d5f1a1cdbe42a468fe2deb70

    SHA512

    9e9d846688e00e0d621a6022bbe00b3f11a39242fd7ef2c1c207fea0c20f6eef991b60ef9afed63d4525570bcafd9e5bd64f6d7429fc12d8cb5868ee57916330

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    880722ccf562121476eef2fbb1528b88

    SHA1

    dbe2fa4d453277024e277a3ae276afe3163b1a2b

    SHA256

    58bfac6ad2473633e96803c41d2dee51f38778472bb0177c014162b62551e71c

    SHA512

    c430e34ca79bd064666cba27c09217530e496ce889de21aa14596a7db29668e052c1524d1d30015221059b54cac8c37bdd4bcb9ff7be2d6a4afc81a310bb2ad7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa7a1669bd22da14778d464756fc483a

    SHA1

    0da89139e6f032c23fb5a4e4f50d72a8c9180bcd

    SHA256

    1a811d1736bd3a498d8f0349cec4dfa5f2967c7b8d976e467870d5d957d4127f

    SHA512

    6f7dcfd192700eb4c554552b537f803cf3aacabd7da2d285d8b60232ad47b707e1726f8db8a59f6a9bb7ffeabd032864c908ab157350669bb4876f718d64d934

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5970076eb075b6f9671fd92bc7905f02

    SHA1

    21fc6b96c3da870157f3eb1f8b6dcd0dace8facd

    SHA256

    9ab15984788b3bfe306a23c7ee4be960f53e1ac74579e1867360b1201930c05f

    SHA512

    bb900fbe6485a8c5dff168b71677eac025fcec926602dfc25b9169a5fc9c5d4ac0079fe4e5ab4a9732dbc3759f542e8cf1311043740eb1648cf8ed1e348d2369

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ed4eae09f139e10ee2c45f5218bb9a7

    SHA1

    e10cbf875a75ffaa00e5d535b4b73ceb10413654

    SHA256

    28b11466dfd34b56759ea25a989948b2675cb181409ac622ce71b7b8903d9383

    SHA512

    906af70c8262cb189ed061d1ea3eedebb550c19e06f34a9690e7c711e0c9570eaecc4befc2e13ded13a8d963a5b4b95aca1ff1497579786fe81e5c70ace5fafd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e71535fe5c1481f7245cdbd3eef07db6

    SHA1

    00317c81c9bf53099062708f6dc0f6da1cf6803b

    SHA256

    d6379914a7727bbc1d031ccfd8a422864b5a8736d4bf18eff3b373756a002065

    SHA512

    02a910e9b517981143ce2d3561adf437e98d25ee7ef30321095750066ef8d114cd693ea6c83e31a0ae85409f091edb04e03d3ce0ffc83d09a1cf922919079079

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    87998f0f41103124aec2eb342285fb49

    SHA1

    457a639150d8b0c3589ff3a23f011097fd7a5d29

    SHA256

    0924f1e1535db45455bbad498b7e96d05fc26fc89680581622a8f47357f9d559

    SHA512

    0ea8af07c71ed8e5e726e4a862e3a04622168304e2980a024089f6b014d49c96caa83b650c0fecac538e25ea231181ecb137bf5f6be528f3bb89fb745bc56c4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68f3e30ed8c637b69720ffe6db641763

    SHA1

    0b4a3fc769a5f375cfff054f1fb86f9fe5841661

    SHA256

    517fc446c0083e4cd806ee19ee9b47c12f8fc8619f88c8e1c4d464ef7913ed00

    SHA512

    c1bd28fb2babdd54af702449239525b15b43fa628c6cc7485fda46b889c5b80646ecadefdf390e3e4a7befebb766b02bb60dc645ad48495fc7d175e6333855b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89439df49691a4fe4e474d014e726743

    SHA1

    17c56413074cc2b3662af990e0c8a0f3ffa9d19c

    SHA256

    21c17b66f5651967bfbf37f0ab71fbcb95c1829c41a12e5ab37ebcae7e3cbeba

    SHA512

    2544545955d8730fdef6ae2815f76b4df3a377d27c65ba9c5a23c0ccd6a40437865747f0eebc6b2cb6399bd96faad9558ed6ec05379d76a5f5d0530f63116ebe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da04122a192039b439441d14fb91e4c9

    SHA1

    4f569dabbb0f37d5734124795eb449fcf52d3c9b

    SHA256

    e45402dc5f832d8aa27780f3b89f8da7cd3158f004ea04415a921239b7047ce9

    SHA512

    042202a68d33f6943e764686bda180533c3f592fd925781a568376a7953b361358b0cecc67279eabd383319285c1c701a393177ca6685aca274b196a2d615caa

  • C:\Users\Admin\AppData\Local\Temp\Cab95DA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar96D9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b