Analysis

  • max time kernel
    147s
  • max time network
    152s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    11/09/2024, 16:19

General

  • Target

    dabe16108a0fbf8d00c1517904d95a30_JaffaCakes118.html

  • Size

    309KB

  • MD5

    dabe16108a0fbf8d00c1517904d95a30

  • SHA1

    a28cae923e328f21cd79cb54c9427c54149e1340

  • SHA256

    a801e7661bb6f4fb39015181c7360af99a2b148e685f6f0b715f92bc3fe54d9e

  • SHA512

    45341d843a699ce2eee0bdc7cd6a2c3d254a2ff425f7bf6dc05ad2a850031789f8e635bec20312d5c65e8903a6ce0fd221cbf83fcc32d989624e4d0c93768616

  • SSDEEP

    3072:CFxTjvG83m/GXmNJUzC34yQQ3du3+7rRLKPWzcmAZmBHluW8mqOW2WY6VX:C3BXmNJx3du3+7rRLKP4AZA/nW9

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dabe16108a0fbf8d00c1517904d95a30_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2784
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2784 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1512

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    61cd5dc79825a2860817d9b3494ac116

    SHA1

    4db211856f8329620190afeab4f32def6d842ac4

    SHA256

    ea22e59fcb773324f5e0ecfba6453ee9f77f3d542d510a917904ede2bc4fc7d3

    SHA512

    8435cd087969f38c746f309df5cabb90d2d2addf6635df8f091edd8bfdfbdfc0b62997a4a68ffbf41c1c24a3ce9672c7dcb03ee2e5711c6673f0a445d2c8d4f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_F968CA97A68F4E6D5C104EC7FE3DFDEA

    Filesize

    471B

    MD5

    e8bea1b1395eef077c9457140e0c8224

    SHA1

    08b79767fd6eb532141bb1c47dc80b94ef1f7f14

    SHA256

    3b79b11ddafbeac29c754a90673fbf2ff69071e694314188dd5cec0cd047144e

    SHA512

    efcd33ae640fb78776a3115836771442803fb38101ce5ad3c022c7401d1b82cab9cc56d3d104c8720d5777abd73f0aaf0b5ea44e21b2996c5169997e751a020e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    bdbe910c4b79cbd5562216e6b5e10644

    SHA1

    9febb344e11d08b4e3f28af25ddb884102c89c3d

    SHA256

    a6503b4777e2a7a382ef45d1547c1f1315c2cd688b503c61b718554133c9cfe7

    SHA512

    ff47e3793d3287facb2cf4af22c0b7eb74a708174591c9e510938ab7406696c6c37e29f6073bc6259e742cddeddee74884f47acd4bb942c7e85a31cbf0223e53

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    70a413a873c57e63a95487083a8222b1

    SHA1

    836763c72f323224b63ba8d24e681d9865fce78c

    SHA256

    939ea5194ed359c69d8ba067bbc5466a851f6787f08bc2720245dce3737186aa

    SHA512

    f22c81012f4c1e3f75eb981ead2d3ec59eed063604d4bb6829a1c9354ccc9feaadaae63ee9c0c35bd715a7df3b8e242cb168b13e8ae3dc6bd5249b2b934fe6d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    4c4856b97d1f67815106709504a4a8eb

    SHA1

    10c5a52acb2d5382bb7e0ba0e38a307194e038ce

    SHA256

    1487c808a1161f98619c728cfe68aa2d07fec30eca88972d533624bc98d87122

    SHA512

    6fa3af984dc53017ca7bb99edc18b5b034f15b4c2dd416f6c3b28f9273baddd92c42a52293cc10e8f4a2f119015e00fad04838ef8f1f1deb1a0229d7fcc4c792

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    624095c9b9276f40da32530773892126

    SHA1

    bc45ffbd901e189decc4286845704b386e7a128f

    SHA256

    d735c52efa19e0c844309f310f64947d9ac04af76cdf3c8b67f9bb69a92e2826

    SHA512

    125fa55f83afcbcf4b7088adfa048bcec79a7c2e34505414ebbbd6a24dcbbcef5d5cdd5cbb09709081442d9f8549c5a82b8bc59b231e520ed1e415f1e892099f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    edc9b5e75642711e346bdf090f4575b0

    SHA1

    697797aa9230e1913546a1ea184a09281bee3f73

    SHA256

    17a31811624a738f574babe54bf32637105b9b06cb76adb20758cb5f828fd547

    SHA512

    77e756ffa4091ceb92704844cf494aaff97eaed6ab3ab8d885610a8274daaf1909b5069ff3c1895b717090176e825eca83c68287ee8bc7d2dd0a567922d0eb32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdff6329308a9fd7a0476fc59ba7a02d

    SHA1

    71d131371471be2b94989a54edf3c9be49286149

    SHA256

    6004b58448b87d8771d0e4b5bba43bd5d2dd89f129cc45e3c8f11ee3864926ce

    SHA512

    cd15ddf6bfd14871328608d72a53a490fdfa18a7c77a39a969757b00b11c5cdcc587e8c118d2e3a26366b395d2ec0472e34405f819f84fd634f32d817fbfc837

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e72eea3df046f3cffb828897bc88ae13

    SHA1

    340a332375a3773932aff18f24bfe9699beb04dd

    SHA256

    8b5a4b815bb68d8673b836e03da3f5536951cd807b07d2cdffceb287b38f3ee4

    SHA512

    6cac5a10fb0a87166a94ae9d5284f5b7054ffeb81f07a970953d4a3d7f67177eb0ab94caf48cef8bb1a9df33c55ce6a6794641a8d8be2c1b324264876c192e5e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abb79d40432c9a2c1029673caab5f737

    SHA1

    c8881d517e747532d9f4f5d99ca0b3106be54f56

    SHA256

    36b6da4634a4965f572dfca1a88c29eac092f7b757cdd2ba61e8e6cb18fac7fb

    SHA512

    31fc56527a556f53874fdababbcfac7f16f9a73ed9d27f40bc2fdb79408b2b74f3850e4e1c6728be3b89bba53aaeb1f31a90fc5498966ced0aca05401b5c2dbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ab03c76948aaecc55a711649c2d906c

    SHA1

    1cb0c29011cf04a0c22d84483ea33aee83e16d5c

    SHA256

    287c93fc56874086759a714af2cd45be61c9bbd690edccaf2e1f4dc706787f54

    SHA512

    c6f9ac2bff82ed35ee91f7541e63d12b9edc60cbc93062cb3d62f9a7a86c132bb9b52662a3cbe2b8324779edb43cfdfcf640a4d03791413860580645b9af22f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18a74d038c396bce0eb0f55803489db4

    SHA1

    b65981b0a912ab0e500432945fbcf8cbf5dcf855

    SHA256

    2df03ff9eaf80facafd5c50429abd597090f981ff0de48764f76759f50dd73e5

    SHA512

    2ca043df26d459dfa936502f88851ab0a268d42e60d583f9440fe44524efcab155996eb56ddc47a37a2f12e50be6f5c41d7884329f3b4578f5f47d8989bca30f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62913d1927c14245fda016c1e9b39a3c

    SHA1

    df371e2a36c90d0bb8a17e767e53314572e95b98

    SHA256

    d145475f24e22fa509593f870aeecf5aba3659aee57caab88ade57f1da339622

    SHA512

    757551bae68a4852041e97594abadb59ed58a8df3f12020e91074a6b20e8286ac9258e6ad0278c252032d2eb9abbe495bd4fb62076dcf6ca7ab110771bc19795

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1f7d55f74562a93c593016ccf40f04c

    SHA1

    53d2478457f7b04a3d32abc2554c13d9d3a86e42

    SHA256

    dbad231f8cb9c74e843c32b42999b067acbb8f198aadfa1560334d5fb9c65e5e

    SHA512

    c7e086104580b65a306775a44f4daf551e231a8207bb007671522f9e00b76a35ded8a81af1eed6f1b5a6cb6073ee5ad8a4f9c7b979be1b7819a27dce4678242b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de1eddb897f68ffac223a668bb7b7221

    SHA1

    67023b7310cad779ef33dcdc3a0bd576acf14494

    SHA256

    7211053bb762ded5af74596446d3d98164281ac3d809c7e64235015f92947ce6

    SHA512

    983fd40e93bee7c1466513c29f6b185245c668da5dbe6f4a1a61d0ab6e3cc34a5932b0ab01e9e4a4c1fcf4aec8b35061547327e42b6ccd9c3acc199863381812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    059cfd72317bb319f890f1dee84f5a7c

    SHA1

    fb68f1e2fc11928dff95e88ba9ad48430ca24404

    SHA256

    41e76ab604b3fdf9fa221e6ee8aa2e60348a628ed47c8342b61837369079377c

    SHA512

    bc58458b029983d026b700e20128b3845deee2c160da2e4353186a08672d517c4441e7644882e8d820d58ca2a894fa017f2ad54ef90e07cd0ffae0adb1ed5260

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    38941ee9ca8744cdf5617cc55dd26c36

    SHA1

    d393831b5e6744cce48278e2f64ac655414b38c0

    SHA256

    df0e9aca86d4ce40073ff6776b13e054c193d8fe6b05dc059b04fae815997cea

    SHA512

    2df3911ebe2e834e21d8d05388ff2d499c71e86429696c7712464e4421023c158985e363014bd31326d54120bd06fcdaa6d9282ebd86bc4af084150dcf858892

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a515e39bd99a8d5c91a8b5b73e5b6c8

    SHA1

    8cc39817c20886ed4cf6d9d37308c00a5e65b86e

    SHA256

    da97e155daacdbc7c10ddc674f2f50972337b9a89b1d336a91812d9e5db77dc7

    SHA512

    888d9baea36b6c1f85f7d89971790ce69207c08390dd42f5857ee319c1b8fa6a5ce5b80bbd0d6d2e57389f6efb391f78d8394db60915cbbf6ab5a1bb7fdae840

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca7cb56f33d18f7cc93f2259ebfb26d7

    SHA1

    b91186b2c9d19bf27e691bfbe3f5cf6d2074adb0

    SHA256

    0464497ae5f30d8f0d2870cf538f6cc76dfcb2a3d56a721eee1a8b437ca404b3

    SHA512

    ba7e8db07c3a8454a0d836bc57ca132b65caa65a480eb1dfbc758ea9fd6eb3d4a5bcd343052659828ac5d1c7b393008d70e2e0e794adfcc5eeecb6fd33861e44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e37902513f439686606aa04a3771ea9

    SHA1

    196b6bf4578136609ad1790ffec18b6872e25a13

    SHA256

    80b3bf7be9bc629cceef2d8307e0e75ff2645da0eed1b862869a3ea05a221a11

    SHA512

    b7f3f83cb6b3351b03a1c890e4bc2299e1c4f30e764a654200216f41f5e9cb123bd38a895f6525dec905f54d429b4dadafbfada85ace883624c79cbb46e73752

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f57dd6a149712f5be7c122189c428686

    SHA1

    2b02eaf6907a6172535dfc83146746f1eb27defc

    SHA256

    1ae341348713723c285c00b4c3f60e849fae7df13b57a91223ae73028c32a42d

    SHA512

    f2350c87030ffefc0d9c0d0b4c0b6b7cc70ece6db57abe675674bd4ebebeebdf3d0d546a4f342b59b210ce1a07a3ce7fc11f6db0a12473fbd140169b52a65953

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fbf17e8acc0cfa4a3984a9dcb90d4d2

    SHA1

    ace9992cd140de3ab06b9f54fa748788eb3640fd

    SHA256

    7a4352d39a57c0fe0bee3b6c2a3216facc6f263f70e720cdb06feca3bd2d6817

    SHA512

    981ca05e73ce7125085ee73529e5591a33fccd1f4affbd24448b4d55073d708f0b27be0abf26a8cf3af85a98f56456d78ac13a6562ad10a9305c277f1f6c93cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1dec4210710a5b71f7ba121ca7bcfdcc

    SHA1

    e46ae76252bf3e63480bad766b2b42983a0a780d

    SHA256

    06584f966c37a840ea61aa525780a23225f2254b4769ca9485851452f1e0a388

    SHA512

    2c8292013398c1b073c62e2a42ae3472c78533b57d64fb6fb4badcb47e7571a52e800e63efe4171bd327b6791407c211011e3f4e668add6e0e918a18df830804

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    969fd7ebb497978e5cebb6636627c03e

    SHA1

    95e97abddd75df4c3f2d625b32aa155f31c6836d

    SHA256

    f50aaad3bbad7a3aab916589f6bf063ebda975ba60274f29353028a2b8d36d79

    SHA512

    71fd36935ca117eacec8bd38e3bb066bbdb20a3f9f22c9482f92d0172c03fa45e2b75a61e48ad6b381358c8dc9d4186159756e4e84bf2fc6914091b1577bc3ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f7906adb6f57fba1504371683ea6b94

    SHA1

    b03f3b6c4f8300db291ea1e9416a499fea6e710d

    SHA256

    e491f14eac85d1cb658a4f31ee95c580779f5fbdd1d03bf5dbfb449a84a7f294

    SHA512

    18210eb34d1184ae882e419df2370b17fcadfafa3f2f81756754b99d65d3c435fa32529759ae1ffd1b0e22c2c90e2088dd7a437cb4cac5ff87f14b29486b6d83

  • C:\Users\Admin\AppData\Local\Temp\Cab5311.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar5314.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b