Analysis

  • max time kernel
    143s
  • max time network
    148s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 05:05

General

  • Target

    dbdd3ad920e70dd9078dad6b226d3801_JaffaCakes118.html

  • Size

    934KB

  • MD5

    dbdd3ad920e70dd9078dad6b226d3801

  • SHA1

    15dd808f5f97be77cabc5781e51d6b9d7cd15bc7

  • SHA256

    bfc90b51f2ac70f8ec61eb11c97a603f0a4434a91b557e112482a48728ee20dd

  • SHA512

    2ad089b276a080e1570b7381eee12a5d865ce71388758c6e341ce4b25356ab9fdbba61939a50d777b7c72522c83d3b7b6477dad0a129d8781be08a53e0fb95ec

  • SSDEEP

    6144:AqfnN0EMgEOMNpSIgsM2tdYyYjMysM2tdYyYjM9/:AqfnN0EMgEOO4I5M2jYxYfM2jYxY9

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dbdd3ad920e70dd9078dad6b226d3801_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1756 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2216

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35f645b2d851af46bb4b9a6a7a4a88d5

    SHA1

    8aa90e93dffb86ab12cf2c90c0dbf9f75d0a8c20

    SHA256

    8c9f6e9818354da33bab834d6e7efbce522345f1f906482a1ff61c72b5bf188e

    SHA512

    6b2b7ebe5818d6a0c532cc1352e7c67767a4b5632ac4b9210c342c4092183ee23d6e25ee01d073aa7d21863cac18ff5525f5c161b73889b8dbbb58a3554415d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8e105bc5dd290a7bb67084461d99784

    SHA1

    15f0a9bc1645bb770d872d9212275c65f80ee3aa

    SHA256

    6e4ef1d7c2475521333e9022b3f7299985d75c44e2dd8ff95ab97e85f7da10fa

    SHA512

    2f7c9c179e6a9148a15ec9d00b355baea33ff1acb067385b1e8ec9abfec03695c5b0e38824fa06d656ae4213c514649f0ecc226b2aa7adcf4ea6bad31a428505

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2eceaf71bc75fba7fe61c40d5f296e31

    SHA1

    b6d131467a4200287c0ee3c2b0e2c9c4f4d6a9af

    SHA256

    6806c94f1b257287ca943fc5856ce845772c3ce24750f69080c054e6a9db82f4

    SHA512

    e14ab6a5bc88cf738c5606dd62f7cb0ff9e2dd58a9cec39be30c9a59057746dc3a16cfe2fd4666cfa5c21f7767f6100392bcfb7cfec5ac63272e1e330f366e55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a12c0e9bb1a41d6d2faef90cabb4797

    SHA1

    db8c76063a8c93909c96b50fadb11cb6a5952daf

    SHA256

    58cc41cb8adf742c85b42a9fc1576f3f3594d0c198c961a547ef89b36e62081b

    SHA512

    a3b2e19f77ca9494b42b81add0bec52cef071d9f74186215ec91972dde6f9010d7c7b2aac1b606e261bbf294022f2fe75ad7493f03f678e89030d64711f4c3c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bebc0f4b0998a135e95b73f7f7b86ad9

    SHA1

    66bf72d154e54e9bab708050ef6255a46c637c8d

    SHA256

    07d3de44dcf57d631a2a92a520a0990f44493d1379dc5388097935890ab4771d

    SHA512

    5f4c4726df0c9805c18f3c77e0f09ad20df2aa116da3ec4bf96f9a830a16782817ef7c7a0c64ab50c469b58a38dcd6d88b2a88395fcc7e1097bc41f0097f8fdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0debb00762ff93fa235ccfa0e9373018

    SHA1

    2e3260fa5f917ccd5382a597a9b13bd1227163d5

    SHA256

    fbdcd9a39d638795bef2d11f8599cf9ee6a5ddba9090b27b46820b1294443521

    SHA512

    850236ef67d93ca00eae19ae7ec29df997757d4aa603587bda5f342d4e683f1aa466984c09760461404e53ffc0dc872936ef755746e740ba0091cd8900d837fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8882e4786268a58daa7626c99eaa09e

    SHA1

    0298adf4b728088ce9454d45644efa5efb042200

    SHA256

    db800a0223103a8ec52298e746411a70f626e013763730aade305887ea8093ea

    SHA512

    5af49c2462dd665e81471034f5b1871a2934956fab9e288e194b7a475eb8d8ad09578b4040314194ba9a18a641e13157a779fc059cef5898dd6c087087450651

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2dc60dec18f60e714e6e97f8fc44096a

    SHA1

    a5ab7f48c2ac050fa97a79084c75c6b887f04778

    SHA256

    7b8e039ed237e1241769bf9a4b04e8b1c16e340e0fbda133d76916450da54e86

    SHA512

    069d52805db47bcee2a120b3b6a242c5e21669f3610f5b5581770d39285ba107bfb214ab967138a61dddaf26c9f55cda25716a31a10ed2ce5bc39418c4b78147

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f68ee26060ffc3cf90047325c8affee

    SHA1

    1ac33b6c4f7f165844a00a2bee07e2a2b5b13fa3

    SHA256

    c9bac4c38044cb2b87f2e3005d60667b00078dc20cf3d8b9c1e1c6c2690ab73e

    SHA512

    ebad524f6b10f72880c87d10cef979f91653226ed79fb021ae39d2838f62229284a2386742a33745fa0b24fbd65912649eb3901c0fba02552aed96b81accefad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96799cafe0fe068b9429d78fdebcf815

    SHA1

    15c60730a404aa3affc5a66e39c402ecd680a8d3

    SHA256

    bbaef3f3f663dec09ac0cbd1f044979fde21b045f3a82892d81a74808c5ab100

    SHA512

    e0b8209632ed4ae7cad7a1d665717d540008ef6eabe0e5335346e54c7515d3a54c546103ce902fe7e3fe7c5130ec4e3fa076c1b8d25dc6b231d999563d631cf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cba0238acfe1bccd81c9cf7143c51e99

    SHA1

    f5f5b2e6431551a47241e2f5434f5758173cdd30

    SHA256

    d85640eeee08bac803027536a90a8141a5f4da85434dc4a942571635660f57fe

    SHA512

    0bdaa9598adea2e39c5f272cdf4e7966e6537c1f1848a7a386ddb0cd8125123015894d32024cdf0a554b0fde974f8df20f2628e2cbf9ae72fc71b4fb8790281a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b52ab22799746f6e9d20402d61fc107c

    SHA1

    0998383c853271dfa28a587ae5d026e95386bb31

    SHA256

    872e1dd2559b4435b43c91014ffd3333d9bdfb6e1b3b323498be7558ff58dab6

    SHA512

    67bd7d7a3d9a41c124831526069d1d90d7e16e3cf231507dd04634e1b73df6af008d84e0109f1bcbd708214ca043f32ebe9b683f5d438bad66c6682a4bb2dd31

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ced29673e591f8180892391a681212d3

    SHA1

    e8f0ed36465372b35ad59211040454f6f0ecd954

    SHA256

    eb8dabdd0ad88d126d7df1cdf1f756ea015b944dcd8805cc3005a93d078a883a

    SHA512

    857a6f83a55debaea9949814571d22c3300372d578e32f5109031e11c5d98b19a43dd1e174dc7e6593cd8b5bb31be697e6fe154015604feff1cb621669d36419

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e63ddcb1ef8b7a2fb397621eb8c8761

    SHA1

    a8b1e76dcebfbcd76f785c54ec2340c9b1ad3256

    SHA256

    4b0bf133b62c6c6d682b96864ac4c196801babeec56a911a3cca071647bd7d43

    SHA512

    33ce476d3256f14adf328c8dfbca28e411c9ba3d11e9b1421b5d303f2a33e39a9a2df0b0d3429ed7d4d3514a6d66755680261fb9045e7a6f475c2ec2f8eb1cdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cc76122bfb7b8020bf807f5e7aa2d3f6

    SHA1

    36b925de8fd91699287344bccf9e8e882a2bff95

    SHA256

    b40dcd6e308f2deb39441d7ddd66329a02b0544863f4c6ebb9a95e93f8b945b6

    SHA512

    5497ebb76d42b6e23d797291a48d200873953bd8448ee44697fa19b733c53cf63fb61dda25a60355bdd6fd9f568c9706f5de92529d573559ea872ef94e7aaa83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f59ceefa4e0eae8c0604b02bae5005b

    SHA1

    f3b2a9fce10e80b015705fa7824f5e26fce8e7e4

    SHA256

    9bec221db7883754687b18feb077829fc0d738c6559ac7db7422a589541c97f8

    SHA512

    7703cb230832b71b86e2665576fef94423c8b96d6c88564cf860b5502790ac0729dc67ccd85b577d0b7b7815b5a7d4ec1c2339fd510207c8fd7a0b2d4a0a8c73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0223bbba2148e5885e446aa2d8a1357

    SHA1

    0d2091e0a16959ed311222f8dbe3e46b3bf699b3

    SHA256

    931ad49e07a9a217f8692a863020340170804d49243a92702159d532f6ed4b8b

    SHA512

    10a80f30abad76a28d9dff0109e8684aa11c9bb338fb982ada976ec55c88910617fa0383266665d12250077d3103f459c81c7189dcc05bd5b43f778ac3381d8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cec4d572de2c16f98a950d68e477d939

    SHA1

    489390b3f4b65789a68b75a88b8cd970096730ff

    SHA256

    ecd8e33a1ec07f519ced8e5326a2673b1ec0f565d1771ba9c6dd9e2bddf239ef

    SHA512

    5974e204aea2a400bb1779845e9f6871ab5bd178827c7373f3a9dd153209c2783f5d70aad610f20c39bca435121e3ec605a00d305c46788dfd0dfcd7449b7278

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f29f0a1c8a8aeda9ecca4de8b89e3490

    SHA1

    6daa7e5b27586e3eae41622fd2d1021c831eb779

    SHA256

    4685db10cafefde77abfd629b5efe44e065efaca3c2f54230f857cd1e3c5e1f9

    SHA512

    95c99dc0c1e42d293e65d992daa9da44b95452a7b778007a505af067a897c3d4619978a99f13dcf7aed02b029e61dcac2308ec6b4e272755ca9985833157aa8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57dbc77a93f45f5b6f98cf2fbdb89564

    SHA1

    0c7dd54e12cd2e3c7d0d0c6492a9ef52bebaa7ce

    SHA256

    f1b07f76a883789367af4a6d88be20579f2a348bc2e5060094f62a3003602c3c

    SHA512

    8ea9083b140ce6babbd02d0b5be385ef0df70a84e0b9325f4a9ee14175c154db1771e082482c37acf0fecee72b9df79bd458f9b595fe37d55893dd87d1a70c6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2e5b424c5d34dbf685b990b1773825fd

    SHA1

    a115dd83cab67b28afc5115744abb70359a7b5c0

    SHA256

    210d5208dd0998084faac0a906c002aaa249646929dfc6f775626223fa41e603

    SHA512

    ae2de3b142f9f620e321ca25bf2394e26bb2ab081620f5b3632b9d444b41384f6df970d16beb7040725cf484441424ed93369912a9b81a1d0ba7a466aef62016

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    969e157b556b560d0ee5f8bae433a2df

    SHA1

    4493f9c7e435ed2af206933f520fe101fdf76a88

    SHA256

    cba096490ff21a7fb7ae953dbfb92c97ef4dc21bee54439c39485b117730abc1

    SHA512

    8362928717ad266ad6cfa1d52f2d77fbcf5759b52e6004be00158e0f3bcf83593e98037fe312004fd96352f6df26de3625ed4c97e36b68cf67d208919b7e5358

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74f9274b79ea5fb1ff345537a6ee9efd

    SHA1

    385ffad651ae7af8f9b721f06e8bfe188336b0f9

    SHA256

    d8555572490a45cde84262426e4512597f908c6ac45a23e7b6d72cf00408cb78

    SHA512

    f841fcf5a61ce79618003e087f6c78dbf0545952fdff85174f3fc030e9b91323c456ac877e013d813c5a0a14c4e5838ee6b68c713547a988cef8b72bfcb59bbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc8b61f383dabdd5e61cc74c8f324d38

    SHA1

    b407f3fbeed1cc72c4c608782f95b24e97d9fb19

    SHA256

    58a37fadea9a01096b7acdfb551e52d9bab9539d7bfaf57cbe8cea0c7463d870

    SHA512

    f3b3278710e9e2e8210cfdcd1f0e642914d7334ac03197d2c695287f6661f4c1c6c72dd9a0d9605b95175c2b14403e550b06fba1d3ff274214477dc6d5ac11df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e2fb602135e03966545932643b58231

    SHA1

    52c6464e74c49b0ff641dae409c2bd092d9a4812

    SHA256

    433a1a9dfb658b4cda232238ff6a8ea508a265d9251c0f5430060314d0d4ffde

    SHA512

    3440183fe0095498598f53caf026ffbb13e91089c306a5c61e61af577494b5c7443095124a845c8d2279c148d8bac0e7dba31ca22f2c6f351c914c07510bac9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b79ab0dbf4d9d1a960d29a094ff179b6

    SHA1

    dcd4cc34fc86637c9c04f3fec2b7626ce8d49dc7

    SHA256

    17b8f3b52620ddf369db2ee12957bc00961ad09ccdeed8a2e01fd3b4b2dc4cef

    SHA512

    cf69d5cc2b7d8c593f165ce4419b87038ede197025ae5937de72bc93ec2c223fcb0f93f4e6c6106447b3df906bfd1932070ca4465be55db6b0f9f7daca26c808

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    15346da7baca86acdcb3c3eabead2f03

    SHA1

    9aea2a71f166f402b46a4d160cb64842e42b92e6

    SHA256

    e27debba6bc482bc2b0d1832d7438a5637d0d4e76e113b1fedd4a1dc80fee35d

    SHA512

    1bb2a7d93ef86d35d67d08ec16501694e99e08fb9086511cd3a961db26e12fe04dd4a6ae4166865f607a28e5c0b1c7e5f2697f71789fd52d2fa01367975c60d3

  • C:\Users\Admin\AppData\Local\Temp\Cab1D33.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1D55.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b