Analysis

  • max time kernel
    137s
  • max time network
    138s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    12/09/2024, 20:11

General

  • Target

    dcf92136776d680a78bcaf96dfffd5e5_JaffaCakes118.html

  • Size

    57KB

  • MD5

    dcf92136776d680a78bcaf96dfffd5e5

  • SHA1

    2c366f14b139b4ebecf01eebb09335bc5ec24263

  • SHA256

    1dfc3a51f172ef4fdc1f761693ea2a1055f80324d6c465d89238fe9baaa62954

  • SHA512

    2d4d72a0e017f2e0ed7982752c213193ba9226e337142162c01a7c6946bc3d0cca33bdc36f05cd75065c7a9bff3842e11d7f6ea6100c0ce9d3d46cb2689bc862

  • SSDEEP

    1536:ijEQvK8OPHdsAMo2vgyHJv0owbd6zKD6CDK2RVro5NwpDK2RVy:ijnOPHdsC2vgyHJutDK2RVro5NwpDK2m

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dcf92136776d680a78bcaf96dfffd5e5_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2936
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    8fa3c09af7510ee41fdb03c9b625bb98

    SHA1

    931f704de4b0dc48c3edfed0fd7bb51ff446743d

    SHA256

    f0c1783760dfee3d6751294177424c7d6b3735cadf18747952f77e11580e016b

    SHA512

    69c51117f27cb6b2a7785efeb2c39d63b5f1a3096f41e9db2e5843cbb67748074abeb303fc46a45468218373d32208408daf26f1f564569f560d2790637ebb01

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bbb297c091a62792c434be0ee6329519

    SHA1

    6fb234796c2e203dd53e0c348a73b6e36899f400

    SHA256

    58125c6c1980da26e69a6ad26a80edc51f01d89a58c3088afa51636964be00ad

    SHA512

    666415e21ac5c9d7aa69b28d8bb0a0a87eed1ecb051fb5a218afa4facba6fe5167be6d3a157b56fcdd4e43d725947b8205322fb93762ff1642f9f112e8b41f75

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91ba9423f3c3e17015e7c85729e0b9b2

    SHA1

    6384d9a28fd155205b1c3082b08e6dbd46eeaa2e

    SHA256

    9dadd0a2be12fd31049aa2e5c86a614e5d6f9712a855ce6fbd31098420310741

    SHA512

    b32fd21f48d3b635355c573a88e66007294eead463698c5b8186900c000f056d6a2342f5386926dfd36437675bcd05538109ec6e76a98d9add7412e2cac329f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44a99d5e1bac5769c97744df3066226a

    SHA1

    6e118b21d0556f4063b150b3815d9413daf7bb21

    SHA256

    077b65fcc2d25965c10489517fa54c5007fe12dbf07a365821811ef598d138d2

    SHA512

    46febe477f17d8a895eb526391dfae8de06d34f5ba73c87497af191fcd471beb93749648aea9ab6a742924bd4dba7d3d7357d995f428796ce71499cb4f14bafe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fdc2f8ea1bc14d291270c5c6a95af44

    SHA1

    7a64e5351c92ea19e6ebe2351377c4561e320741

    SHA256

    8052887a5a403911aa9e989788cb543576342665acba807aff3464b8d66d0d7f

    SHA512

    5b299d74e8e17888d07356881b31e6ff896d22d36d17fb9efa47f1bac8f90b38386683f9f11dc1987a7944a7655c692756c6df8e63da28e51b4e2005de2dd307

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a54dbe39be40f9de0d63b3186473f07

    SHA1

    4e75c25eb6ef020b4a717b62afc55625524b0a74

    SHA256

    3eadd14dd2a3f6663783ddff120987b42f2ff49e961d837b0d849da64abbc289

    SHA512

    536415018f3dfcd428524e1a577cd155f06b79adc3807fde955c6477b564c88ffef282e23db9d18ca969ac3dda5eedd0987d972d2849c4a2604826f314c38f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b165af65095b30a701fe17bbdca77beb

    SHA1

    be62338bbf103173ea1ad32e4fa0fb2c84a6f563

    SHA256

    fb0ba56b46be7e50183164851fab34dc902ca576c773f0149ea4b8a1d2d4d21c

    SHA512

    6964d8400fc05114ee51342926c7aba2223230d6c79b237d2986ccacc4aa1eccf47d6aa005b70cbc5347ca72f5d457924363b4faec4207038ad898785685a1ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7a6fe31922431266bccfe6d1b066039

    SHA1

    4b489f23564a3c8e4622e15594e32eba059db670

    SHA256

    629ec413ae54a0902146e1cdc9d598eea293ac8115d852b30c7e1abd3fd9c6d5

    SHA512

    8e7390bcd9ae31847f78b8c91bc4aa6dd8b44d3872592ddb27230f56ce64d89639ca2766e8ac6aaec111d03f20743fe1b490d3ca9c0b642106194e49db30a655

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd994a9fc59ae6edd51fda7d81778594

    SHA1

    7fe7598493d3d77cee45e6a6bbae64f86e10b8c3

    SHA256

    947a432a43d0bea95d6dd0a586512c82361c9c76a997ca55ce5fa0496380069e

    SHA512

    7c10fdc1163b41fe0de104ed48d84e5ddc6d3265049982d65de4dc295ef1a0d99f98f49db184130d134db138593af22300d1f9319aaa4be5331923968220fa40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2fcacd88d402d331dbb1b52d9cfdc607

    SHA1

    a8855b6e7f7c056d8a9daf457c1f46f73839f86e

    SHA256

    5946747ad930dc3d11f056e4e5e6b0cbcb8f2fc7d2b35008c31142d6c203adbf

    SHA512

    b851c55287943c12261fe8381884a7af5ebefec612b76e01160c26056f0ef7107737367541b45cf65e085d51dbe05cea4cc2d59bd30957d55591cd5d598339e2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31a33591e0f9b7c52ef5de9f4e77ef3a

    SHA1

    b5cca2fad8df93df00a0a33be45e50b33b57f655

    SHA256

    f8bb897ddbf44c4cc948e46ddea165256c909d3cc143b6d8a33316909eef73eb

    SHA512

    1bd1ae1781076c555d1d6a12bc1a189bd4e1f09fa64aeb98ebf457ab1ba74a5912916229ff6f04a4a09daaff72745fbc9eb934c78cadd21df35e4db47bd883b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ff10ec94c42205e453e766a86d140928

    SHA1

    88f39eeae934ff24f262360c223a94c79790f99d

    SHA256

    f7d2ae4ac4aeb0ac817017347e7e433cc5124cd9371cd3e066ea60f6a9d8ba0d

    SHA512

    1ddf4eabb27e93c0dbc7b87ce780561524f6964f86e2c729dc09b4b250282c5d1146924d7fd301081d0ba08192eb999a6f1dcf6a387ceb9f6e4782efa56c88a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5c01ff17bdae3b25f73c29688b6b7064

    SHA1

    bcb73873b2ab0ba3817563d9dd498123b41cd8d2

    SHA256

    a918df60d408385b99060859f97d5c7be78de90eb60c50e38d4d5684e893fb2a

    SHA512

    c5b11d13a03400c3fffc0dbd2ffe665e06186801d543838ff20af26137abc4b2486ece1c5fe0d754ded0bd0dff28bd4235efe9f7e6e2b1d3fd68428491e73a1b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6a3edd0383c641d6658680956dcb27c

    SHA1

    4ece7d75b8bcb793454f90f8542326f7a3ba743b

    SHA256

    b69a33a53404b7d12984de518715187c10d8be17ac51c27135faa873fcf28ad9

    SHA512

    608aa426e5538fa3e74dc0bb08faf378df82f4d26793a5e936d9a9ede32aa85d1ad41dca4ec69e8cd67ce579294ea3dcc6d17aa2bdea073456448f7d37be7cbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f7c0d75c94b45473098f67df1d4d8d0

    SHA1

    87c4244472a22bdcbb0a0d56930f21823ae36f33

    SHA256

    410f807d4e74c6e1c0ba5d08952dc1c2c5a1877089332343fe5d68f40d396d43

    SHA512

    0e2fbca7b042b94336f5bd01bc57b2f5aea28397ccb58757f1ce1868d11333e60cdf018ce1521b0720b4c23842ec9d1c7975a3c63adec07162622e1d811798ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17fc2bc032e69a7f35e2b4ee0f5563d9

    SHA1

    96338f69c2393e6cc6a946b4b1f5bdf37822cd7e

    SHA256

    79d35f4d50afd757e994f3adbecff420e02834c21026cb576d91dff0c528d8a6

    SHA512

    1d75e36a589338cb1d3ecf0a330c73641acdcc7c6a62111c5b984343afb7a14989b585f36bcd37c99b2b63c5405e78a5298fd2e5ef72ca206f41b90e3d283b0b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b3df97b747c279d247333298a50039d

    SHA1

    977bcbc30b66d3895d432b0328eb77417c702b81

    SHA256

    cb4943e75071c58a592875f77aed99cbc85b97aa5db8980240da8675083fe5be

    SHA512

    906d623bd4512504714e27336b1198a1eafc2c18ba60bdba0b1af816f08c730e316ea66d6f9ec3f69bdc813dbe86a4226266ced54d944d80fed8e730f77702c9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    748135eef130d59fb68b0a6763e65835

    SHA1

    d980ed4b230ec23cde9d5ca12f26da21e809da18

    SHA256

    97d7bed87576e9760db7e198322292596981851d8fc8a1c8d2e908b13664af9b

    SHA512

    825ff039ac22a64ce2bdda990c918f54aa84085228a2237598e0ccd679d9387b410534b0d2fb906292546343e13b0e5615adb9fa853557c747b6521920812321

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9007bea85b26466f764eaf328a0ddfb6

    SHA1

    55c0a711a4705ad4000f76f757937facb8db449a

    SHA256

    b8eee6c437a9dec72ee62c5e7029002e3d3154efe57d9f9e7dc122aa43a092bb

    SHA512

    437b05e9cb746e97021209c86a480bf11130df61eaa9e2ae1f1c4330912002db9aa62c5cf5c1f5ac0ca10c0c2f1dc8b79ee8712dff1c89e831f763f9f37ad2d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    da0bec2903d9ca7223b8724b827f21b4

    SHA1

    fc24754005ed1f4718edafc8580009daabf94391

    SHA256

    0b335d7ce33c007a83522eccbad707b93e53badb41f2940802bbb8f54779f45a

    SHA512

    0686a45db99bb37c883e4c980b49889b8374e50a60b929accbd4ca0fee49999dc9f94be7ab662be55ddba47e382a69a236d2c318860734676935693f7c07cce8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K3VL8XEP\f[1].txt

    Filesize

    40KB

    MD5

    9673541caec6d479c442e20b6a979f71

    SHA1

    3df74b329a76219062404fad72a81513c554208f

    SHA256

    006ae4de8c2bb4398a370e870a75a5fa32d10fe48e157b97dcb3df4568e98260

    SHA512

    eab3b7641904540918c208d9081d1b8eb0d73a92942961372ade84dfed38038163afcedc08427da3d8c2af87dadba45f7e9940f51c4b5a78c72369985dbad3b6

  • C:\Users\Admin\AppData\Local\Temp\CabE12F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE130.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b