Analysis

  • max time kernel
    133s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 02:25

General

  • Target

    dd7b0ced86400152f66cd0ff01eaa600_JaffaCakes118.html

  • Size

    2KB

  • MD5

    dd7b0ced86400152f66cd0ff01eaa600

  • SHA1

    13aff1a67aa73621ac1944bfefa55bf35cb05189

  • SHA256

    dd012f52490e0653fdce23e255ef603ea7b733252bcadd5f345fa4935459f314

  • SHA512

    589155c0b7bc1e42f696a326cef544f9b7cec2c9daa4f1d29428b4de6fd9186f161c8eb97e95d5c604a2577417e90c0764f982635a39b9036306238a1c96c066

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dd7b0ced86400152f66cd0ff01eaa600_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2704
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2704 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2700

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ad5640069a97baaf81c03878adbb5cb

    SHA1

    642c04812231bd7ece203997a21138afb707e1cf

    SHA256

    25e3b3ab87224e6dee029364d9f6769f2f391c3fe934faa494ee068a5f22ba78

    SHA512

    11d8f0a219102df8565a862f81be77deb0c6b8fdd63ee817c83f0cf90599b315ed7c77d9ebd978d614dca6a0265ce5e7aed5bfbca65847fe5cf0d73c58aaec9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4ae5497e8e61cde121bc1f6590af4972

    SHA1

    45254a1d4e5e5c486a3a4c34e47aa624ce006129

    SHA256

    e196894afca8d0f95133eb7fa5a84b67f7e63071918fdd4ceaf6c53b8b40df8f

    SHA512

    1133005442dcbb4cf232d926e17b8d8ddbab5c99cf743031333e0f1951676fd09e305f50dcc8185a302ddfd403709eb71312ba52824437d7c52a38fcdbbf14fd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec78053170f14da3525654c6122e1e47

    SHA1

    f3a5aa71fed3af1ef3fae352ffcdcd8c8c7148a3

    SHA256

    51bbb51a136cd597fdaa014275665f01ad6ab41c1bdbe04c169840a923df3cda

    SHA512

    8649e0d58c1f747e2dc54d949c847466057be368d8ee1d87ba0693bfbacc134c3d318fafb82d552ed2eb43ea924dcfc21c628586440b75c28900d65741fc105b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37cf21a6d83a12e37a88696efd0ca672

    SHA1

    64d44d1364d012f776e001773e1f1ef9b692efa9

    SHA256

    5726e8cb2dffc184eb6d9b160c55626de3a2adad06a1f137b8590a13e377e08b

    SHA512

    d680fe04f4a1c87d0b48c44cc5a1585f5ad40b6a1fd48c8dbbec067777d6a68a7a4b3487c0bc9c40e9d876b822bf5a6e6cbc6f07c8de769193f00b13b9074616

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ca3ff0ca8e32d4fc7fad6a7e63118a3

    SHA1

    b9ef1e65262da08e0da5ec2de7b38ba4d5c84bd2

    SHA256

    143248b738b6717c9eba7f47cc6651790a78795a5df0423a5a723c72d5086d71

    SHA512

    2fee2981f8f475b57a6a5e0900b8b4ddb4ae7a6f5772c81c58f31ea43ebb7bf1acad27d9df95b30e2693cd16b01c52c8e552a70a97a176fb49c63f0032642bd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d178cede3ff99d118f2d76d552d10652

    SHA1

    b300d6a3b3363b624958d4216a7c730b5c9f954d

    SHA256

    697c80a95128b45e686fb9bfb54965647da9af63cfe989dc796da1fccd2ec923

    SHA512

    c9480f34be7476edef205ea9ca0f11b9416181e25b99b8cd190c7a038fcfaba96dc018f6504c9c855de03db7de01bc14beda4045d179af1191230c881bf2f2d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db8f24bcbe0afca7f1afa1d6cb5e91e1

    SHA1

    2eb3b8f9eae8de03d7a878e554784bea6476ab18

    SHA256

    5d2cdc67a782999058a71f68cd4c4ecaca53bd5931df0c356ab3afd75f435ed5

    SHA512

    8106f49333258cb20af36136e3f84af884073fcd74ec7a8cbadfd2fa3ffba21def948ab35e1e0d7d470b06c15e0832b643f308fa6fe952ec01c076f3aa2f642b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a2249014e044b26feb21076e9e879ff

    SHA1

    e0f0e9b438a80e749528f24f10549b46b5fa5708

    SHA256

    be8fa516ab76658685a47f461f7741d4169ecd766b827cb3e17b63d11722e119

    SHA512

    d4aaa0856a10ec4f6a873597280224fa381f33cb05fb031d6470bec02f3c07be2de48f139345752434616924c801f2fba3f8b028230c857b05887c0c4e782d85

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    213216b09ab931cb7579ea5ce2c1a027

    SHA1

    0cabbd20a79e74e1887e5ab97d50e64dbc8e61cf

    SHA256

    882419852d63ef172f4ebb14459f5970c91414f6015fc112787db46661863006

    SHA512

    6a4230b91f722b89bdc3ca7447e7be5f34fc80f436f2782849e282f7c1e41cb263b49fc21d79852bb9f2179f975ef53b3295d4ad31a6a79d2f0758f9d0320e79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    90194ba1844764fa29a56e7b03ac7307

    SHA1

    2d83e469fabc8a650c774fa7fba357c2c7df5aec

    SHA256

    19a7066d58a21c63d6f35c1f5066c9f8b6f534e8db05dc84aaaa8e10d4914808

    SHA512

    b7caf69fe3a9764fb6d7826236c36ba144a12409e4fb138f12205f71f4c52b403309c2d6f495bc8ad77fe8b740c5f8e89168b1999f1e8200cb3d9fc7e776798a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1af6b7280aa5b9f781c302a8c292bdd9

    SHA1

    44c9091ea064fa30b9b71532d3494b85d07c635c

    SHA256

    4f74d180b7287bad8637c3f8d8a3c8cc09c62ccd8163684426f2985436bb370d

    SHA512

    be2e1efd4002d8d1de803fd7a8624f8e3b348e32d79eacea3e64090a536e80d63aa54e0ee7b930700dd65a526ad91d369122b58b000a678a87bb5520ef4c350f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    08eea63ac4ffade4631b2ad896ad5f79

    SHA1

    5e7e82ad803f691bbfe67d2721b7a938f6873421

    SHA256

    1521211d5db20aec089c689e10bb2cc65c2a07170a775b50a9fac2bc56b2d96e

    SHA512

    7cb6d01cc9965d781ed35effe349489457cfa6706b55e981d2ca0674a49670230aba7060e9e2fecf6e4d7e5403275ccdf1a61c7425e23ac603bc0246351e59a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3e524f093a6b240ee7b6e5c092b5ff1

    SHA1

    0d5573f07014294a2da1630624721e92adde80ad

    SHA256

    e9357da86699bfc46edfdf45459ee07a3973d1ee90a9652028c917e646070546

    SHA512

    5ab88d8df354ee937b6ed53c60a5518c76ec4d5237ea3b8c026c60488decef9073eb8fb87da5da04958fe1cc95e7cc2146f73213768988d43627216a12c53a12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d449b37e930e1cbdf219bd2e60225941

    SHA1

    6c14f7e3a9f82b5918f342632110fbf6b8f77d0d

    SHA256

    76c3b23f65b0c412186667dd787ba3b37786440c417c899f5370cfcfe1d6b547

    SHA512

    ede0229ce162f43801a0795fe671e0cc4940b462dee556624e725df4a505823ab5584c8554dc8e32b4f4940bcb9cf339f906d4e5ca6136ea7b153674ab26efe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43d7f3f405ac1b2c18ac843eb95c4085

    SHA1

    f385b1d695a7ef951505d54c76c448ebdbde71fa

    SHA256

    0f09dfbd824abb67ad43ab08ea4a43819df463ebf9b8a34c64a8ee951ddc5c94

    SHA512

    849e8fa5bc02f7996a88e3a235548e73c11c1cbde9a46b9e97c23fc53b50e9bb2e9576a56f82aabdaa8812b6fb1a544bceb6a5eaf35ebab825b4605834fef9aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a0ee40e0ac66825fe9ae2e66460a22b

    SHA1

    08ad194109d8fd911fb47138c381ee431194d0f0

    SHA256

    9d486481b8c0053ae1b0b5edeedef4ee16f64b672d5ebc8f420892c9002425f9

    SHA512

    64986965e30b8dd29f2e437234828c2d53a6702eefecae4bc3c409e9df0db4d2a14ba6e7db189fe4380015a590cda2b89e6bc9f1e8525932870f32beb20101be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e2d5262f9f9befd6878b9785f29747c

    SHA1

    efb4c3a833451b3f39bc2dd9c6752f99bf3a4fa6

    SHA256

    11ffb8663e4c782a16ffd89879ae213363d0aa0739f6538168bf64441d3be284

    SHA512

    5d22aa9029d4796855e555079eefd43875e9fd8c028b20a85b391144c316e77ed1a8950ae37f5eb1e7cf1987a3e5802ce3a68127c6202c0b3947cfbd710b12b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a6a144771f62ce12fafd014c2e803b7

    SHA1

    27200f80ca503707ee64c5df3b893cbeede399b3

    SHA256

    8bd64ffb051a1ff088c898b9d4d6b5936facadc5af3f75c45a31d242c9d1fa81

    SHA512

    e3701e8b45e5317acfbf9109eaa7032bb5b8bff4b57fdc11f3d147c05341f4cdec25d5c66902cf3ac59980784dd75796692ea683988ca6149780d1bd26c0c291

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8cc8533282250866fc11bc0d58297b1d

    SHA1

    b92353ae383f93627d8097532a67f0edb86f716d

    SHA256

    388ca07c7629836ae197617e02ac7552f95b73867a2e03e6e8ca26461e1bc735

    SHA512

    d17742a3e9be40de8287170755aee96d61be56f69396015905e69433e29fa9aaca5a7b62daee3c08c2d8ccfd4529e7867ef864f8e7c4ab8bc388c990bd089fd3

  • C:\Users\Admin\AppData\Local\Temp\Cab4EA0.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4F20.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b