Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    13/09/2024, 17:48

General

  • Target

    de99ab50249c1c8ed15f09896c033095_JaffaCakes118.html

  • Size

    94KB

  • MD5

    de99ab50249c1c8ed15f09896c033095

  • SHA1

    1e3bd486a402801da131c0bbf6f93df2deafd78f

  • SHA256

    6397e9f061ec332810402109e9fcd132939e6968afa1df0b6bbcdc808e128b98

  • SHA512

    a976778a5afba01e5eb8bd2996eee6b01fda88ce120e8109cf8c4c2d9a2a60cb5e96dc9c941fff118c4da626b4f8eb46cbd81688dc25c2bf862e6d9473f281b0

  • SSDEEP

    1536:WMLiN1UVS8FLp2tvA7LeDEqrlupnyAf2p3yDZW8BdkrY8mgHC+qpEyW:WAiIeaBdkrY8mgHC+qpEyW

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\de99ab50249c1c8ed15f09896c033095_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2280
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2280 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2252

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78f9eec576acac3aa1323b06dc064ca0

    SHA1

    36762eb0934e6fc874563d8e1f4cf70dd995f63c

    SHA256

    1152a3ed01c90fdf8018a6360689bf166a5ee4b2667f2d6bd3626b90ba86ecf2

    SHA512

    4ce770622d1d72c43e2f4fb18dd69a0e548657d7c95081bb1e0e4a8f459f6db6714a7645cfcb945cd5d67617a28cd7000e1f414938775cb1cda746b5fa729908

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53f930c1ed13f6ca9f53076d4affeb97

    SHA1

    e38430bd5cbf69abeaadbf1c9629092ca95644ac

    SHA256

    76e2b93b30fbcf9c052046e6a14f4779d941989655caa83f7b7bd8666526244b

    SHA512

    e8961c7829523e91e8e6ecc408fa9b10e3082526fdcb0c7f21bfd8da892975c870e65977a940d05984d767498b3d75a00618c781584c81fd1a9bb54cf626444d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4cb9489b216686c4930a43372c6d5658

    SHA1

    13a77b0f7c63a2faa2c968573940f2d11a334048

    SHA256

    34035e1393fa5f7fd04bb938e20362c0601512357b32e88c9a59863cf0f45a29

    SHA512

    92bb9ccc147037f9329614641e6eecdf01d78d1d76901b40f71e436fa3ad305f344a02a21dcfe171b945a551c6b05158edac6f5aa6bef8969a48da9a446d704c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    297bc9ec3fe3ac090f86235095a14555

    SHA1

    8f66768f9e1e752a58279f4500f7da3f1e3bb8be

    SHA256

    8c7c3b6e6d006e63577b95464d1f5ae224743c0bc49ccc3bfca2654acbe8097d

    SHA512

    65e5f41e6901bbdfd3c1c9fc96a44134761eda756efbbd4eda1df4b804a18aea0fe468540014233f65c9a0eadbf1f7a44f8ab0c0398103a5ebc77ede0b895422

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2dcf83307a08ef71134724f29c63870f

    SHA1

    0bd999f4686d1a64cbcb07d3d81cad660e0b54b7

    SHA256

    b78acc0f259259fb3f9d0b58a7b5a116e64fa21529fea2d0b1ae48ee531184d8

    SHA512

    bb3c0cb31d1523fcc04f1115a480e97cce17796b52f2cb3ff00369672ef90148357412bc56303859e1e7f622da8b5172f17cd8f08c8fe7746a0a6ae3edc4d417

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f123ba67070881de76ba4c54a57999e0

    SHA1

    4ade1c7d69a29b025556fba94ac4db71724a7f41

    SHA256

    0428f817329ac45faae58c5d6360f70b9a9ad700358eb19aa67743953a23054e

    SHA512

    9fd504d2981fc023172fb10d8f339d3a0f63ed07de3db5f689283de89e184da9c32672b3203bf6ea57183df966462f95fe4348ec9f329397ac416f089e279047

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd3bea352afa742e9005e763b9fbad28

    SHA1

    3ed3d340937580e027327a9e418c69ac931134ab

    SHA256

    1660c45e439ab00a65cc6dab706db394175be355af29e324453af972b995485b

    SHA512

    9b6a97df0f1180ee2eba0ae6edb30c77a26509f4e20a814ccae6ce2f6532e78f05ba075703366d990d166b231be83d3c605a5f4bc5bf2a86cfdc7bcdcee6bd92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e7ddddd20319387192d7ab206ac03a7

    SHA1

    70af3f55bf680c12c1a378edff54e1bce5776eaa

    SHA256

    f2b63864266bf1f8bef452ec7be4ea9ee28b13f3b79a5bb9450329482d0a1c38

    SHA512

    88b777f47ddc3886b9cdab17e395cb5bfe110c05eb02d3e832a131125c1f6aa3d737449734699af11e3f7bee5aa49e4724272dc1576a33eb355f4b1d6dbcb1e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11e1f8d77ab0f427593d5d5fd0d17c63

    SHA1

    fd119a73420fa6738ecb6f4badbbdfa9192501a2

    SHA256

    93f9dcaeae84c581d3423e7b89822f848f80132d7ddc150d6f2a7d6e9f8c751d

    SHA512

    c5d6e25ec4747600e86bbed49d5b9ead1e76b2bcc67c898578affe70d1593a20a5946dab8ff5cc733c2cafbae88ed219b416ed65c99388304f66781e37cfae96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ca97226bf03f2096c8c0d616a43289a

    SHA1

    ed5ca335631483273d1c7011507469bb069ff124

    SHA256

    d2532bc632ab93bf712e107d545f13c261a34f977b868c4e236b45c1772cf23e

    SHA512

    b2cf407797c68319d20a803e10d7256283b964da5265e11a9103151758937fec7d567f9f418ce2ad53b988f238aca4a58bd9ce2ae60041cc19651b88f1538c96

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    110e0e59fc73104b16b8e16a3dc41eb6

    SHA1

    b7c9c451202a870ec756cbcee39662881f46c4c9

    SHA256

    98f854e65e057b403573432f64acb17b2a1c6543c2367badaf6c0acf594ea97c

    SHA512

    25c22e23899b80878ebd478beb751a9dc04889d7be2b3a9bb276b59da0ba1ea7ab835bb009f171e2f1feba0f4acf429cd883bd0aa8e34f9c2d11d848467b92c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec5d0cfd19881b72ec5d6247c74b2313

    SHA1

    61514ae83fa86d219e7fcbc463b542c8c4e5611c

    SHA256

    f93aa7ff52f09cd30c9c85b1147fe520a30e61651c717aa1f696851e372165d5

    SHA512

    aa9b16cdbd75b1cd9932cfb83515fd00ab2d29375013f96ca7f90b352935027411d08f65857b427391da5b3c02a4ec0953d1366b43ab8d6e8b0a027758694773

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec921ace070f4c49a0070017680afe1a

    SHA1

    961e7dccf8aaba165c64c3db92556550f771146b

    SHA256

    8a67a7a2cbd099fc2c5e232962fc64bfb94bffe16512392c86624c8f4e9a2345

    SHA512

    8840c62fee2990026571ec6e3fb1945aec2eac6bd932906dad05641a8740c37b0c7e24f8b033175bff56c200bc4229f7dd3eda10b78df1b52f93382c8b5c54a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc8adb28d8ace4854020e3eae834ea8b

    SHA1

    619012ccb36a56ae2682298e08928b292cdf712a

    SHA256

    76e8e1ac3cb25a8d993e1511828e50ef85fbbe0e6fdb38c2ab9919b7e729e766

    SHA512

    d7e4912bd1805ef099e10dad00ff15082e8dc8efd9c3e34a9b02ed17ae173e1af2e21faa7d5747b4b27fda3eb9aa23363ec6b6825f7a11594b54c7f9b5514481

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d84b2f3d05a2ec3726c274eff32da1c

    SHA1

    a6c9ec31c6373fcb705daa3a31bd231c88ca018c

    SHA256

    ef21d124e99e13fcb7c4cfdb8cefeff31c087d066c8aedce40194cde95f7679b

    SHA512

    699cc735480c472d20a296933d8c847c551ec3d67f558d8349fc85c0e4587ac8063ea943f8401f32356cc5cd3bcfbc3c22ba6ce0a8f288506b0aa8b4345bdc22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d90bd4c9173ae87601d13f45a1f1020a

    SHA1

    a5661ebdc6a121c5b451064a8a2c636f7afa31a0

    SHA256

    c577b14969d3308e10e0194badd1c039dc063d8358aa4b06acd191135bb8a7ba

    SHA512

    58fafcade00f8233c1788f935ee1accdef256f52021a8f717c72cc12717738a10c1c76633bdd471ea937df2d0a5463dac5452ccef899f58d4b49177cac561309

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ccd14b74102c83b56bb4f11e756575d

    SHA1

    26d9af07ada1a514e18bc248548ba686953a2e17

    SHA256

    99bce8dcc49d0ce6c3bee11ef834ed134dfb11c307b3b08915a4687ff6feaeea

    SHA512

    b360185c0d8d5980d68791dc2fc2c416cec05b47778b305fb9796abc1a9871b267910d7647520dbfe5ecf59d1e4278c4af891b934fa0d0b8e43d44e122105dff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ddd53e79588993cb671bc83635b061e

    SHA1

    9ef517bdce210ed0636cfca7423af236b27e0a8a

    SHA256

    8c05e32bf14add9b95f2ddb25871761438eca09b220f392c967d65a7a1f05ad4

    SHA512

    2c1a049ac76b546b8f115ae98958533ed82726872bb5910d1b66da606bd60149c28de46cb83ce0d10820cd0dd60bae3976eea31415c4b90f8844afd7a0ac652e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    145cc4e5645557f1934fcb30b4043d9e

    SHA1

    0130f748484785649d58138cfcd9a73445e2c210

    SHA256

    89803365a3dd2b0bb0d3cf10093a8a9047f058c82a9d54764496875df2786731

    SHA512

    94957a9280476ac390bceb94012ce070312198d3506725c0c6246467ec814b586d89cf5a0ac96e0f4d6143a31bd7395eeddee0051a080c0103f97d71347da4e8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PLSLTMYI\jquery-migrate.min[1].htm

    Filesize

    162B

    MD5

    4f8e702cc244ec5d4de32740c0ecbd97

    SHA1

    3adb1f02d5b6054de0046e367c1d687b6cdf7aff

    SHA256

    9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

    SHA512

    21047fea5269fee75a2a187aa09316519e35068cb2f2f76cfaf371e5224445e9d5c98497bd76fb9608d2b73e9dac1a3f5bfadfdc4623c479d53ecf93d81d3c9f

  • C:\Users\Admin\AppData\Local\Temp\CabFB72.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarFBE2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b