Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 01:07

General

  • Target

    df383a3d9f8f09bcc605160f897efee7_JaffaCakes118.html

  • Size

    125KB

  • MD5

    df383a3d9f8f09bcc605160f897efee7

  • SHA1

    7e1423176e4c57ef0f88e6a0dfd524eefd059c8c

  • SHA256

    fc881ff5077d1a371247c4da20e81ceb798de659f26710eebbedba15307c4f20

  • SHA512

    f82246d905603abf6cefe91cdf658fad20026a629790aa4219a2182e7bdda80e69bbb25406223f78b7648abf310c2fc427b5a4cd23ca543caa17bce338592f3e

  • SSDEEP

    1536:StlfX+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dg:Sv+yfkMY+BES09JXAnyrZalI+YV+d

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\df383a3d9f8f09bcc605160f897efee7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2116
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2116 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2708

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52fd46044fdea63e7de9274118e20432

    SHA1

    af0bdbaec3a7b83d420c41f248057e7eb0558388

    SHA256

    dd7adb1fdc90e5ac4d0df993a891cb212b8a667871b8dfc18c61e6467e35de63

    SHA512

    73fb68b1bc987bf524a640676e1e0227d68c803d7f9d9b6548a48d669d79671ca9feda0a43448ec35fe2fb7e430c346cdde2f0573a0f0c3ffe9ccb63609e3271

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f90fa2ae983d0d3e846cf117825d344

    SHA1

    cb91478c3ecf26f48475fc94e95f7972a3eb26c2

    SHA256

    e45b83d1aa50868a714c2ef2a86f364fc60d3b2e90404095bb2b0a0e9cb2ffde

    SHA512

    271550efed4538ce6e766e25d7b8a9134bb6ecdb2a16fd5ebc0315dc2cd4fc08c48138bec4687dfebd5a354eabdd9573e3684b859360af7714391687d9181344

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a7dc6dc487ff99f4296a38cc3e65e00

    SHA1

    88a650171d6b7e18db26da4689e15507656d1d5a

    SHA256

    0c05e37392a5240548befda53acdda74586781ab74c56bd1027931d1fc02cde3

    SHA512

    3f8a6e7fad4302a6f74723e3b5a880e6dc22354243ef9f7f570d98ada400022432a8de3a3c0fb28ca3b0d76ab61cbe0a2458a1cbc450cdcfe369646d370ec446

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba359bea8604833512d51c7c1dd4de4b

    SHA1

    9aa446ee6aa4beb1e33f6c413dfdc33ba2113fba

    SHA256

    f181120f1319d0475a90bed3c83740b2447ea233d58c5fc65d9f4e46bfc5f9e6

    SHA512

    f2f3bb189a92dcd6f7575f97cd6ac830b0f0f60b6935eb937630e24985237ec1ca67cb84b8be81b5bcd47c23dd0909679cff1c50577f3bc0f1783d807350f957

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d01e8e9aad14e6dfb9b9c25f5e329a3b

    SHA1

    6665b5ec923882d015af3ba7f4a64077c19738fc

    SHA256

    af38a82d93a8221517bf88c218859faebe5055a690eaf8fff4677f2efd8c36eb

    SHA512

    bbcdd6b4ae6d9ab32e3b3bb5fd4e120df9477e693d1083310dd1dbe89a34d8a11bba183742b9db86cabbf930b1b7f9ff131c2712a0e37a8dd3a22a043230ae24

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    802cdf7715e944c1415af59d32ca4b66

    SHA1

    ada8bd2e526cbf6b985cb4289fb7dc3e940f0721

    SHA256

    dbe4a168dfd1156ba4566dc523fc2b621b25a9362e396b03842e177780617c19

    SHA512

    309afa70cbe66ed2e7fb9cf503df434713508858389f2a921cf2af56313d01b59e820a29c9b44bf4189b365b1f4523f98b307b51364b8ec8996c73da779dfc71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5290b0ce87457b1693f59be6e13b1ee0

    SHA1

    719c24bd25dbc221870be076c13bdc7d880f091a

    SHA256

    30036a1aab8e0e2702c15b445f5a0eb80221c1a7d2d729be2fc653f16bb58ed1

    SHA512

    0893eada0b5339e75765c0f3f80ae7d00f2f7e2f019800e31170e4a49016a43d1e88b344945d6fe1039d6a352afe7af5b7aef1610046ab5d0630e160b404b06a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1567fa7ac093cd254c88b7269a7a410

    SHA1

    33d759e240aef9f071b5fb759c53b0361be81d1e

    SHA256

    2edaf212349fe75eb8767ba56244e8b06415bb9a6c6fc43e29cd784ab49698d8

    SHA512

    1d5299eabaac1110c61961ffcf9947650b35c3f2cf61512f4fd5035dead4871a0d5375b0317d64dd60c3662c58759e54237bd08e9dfa7da6db75e6ae7b930812

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a6f1bed1b4ee966770269b8d427970c

    SHA1

    660ad2e5d797b7359fd56557259276010842cf11

    SHA256

    4878778a0415bdbd6fdfb8713cfc41ec69a25c55536d01c9aa28ba13011a8cb3

    SHA512

    675dcf5840ca37ef4c67dde8c67b99087c0a099ebe496e8f787fae13e53ab705e482e9f1e69a37b58d02eb20f0cf178bdca277a66c2e8b1f62950dfb67e734e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cfa713e22713b161a73ee5ef19726217

    SHA1

    f91ad053d5e8d3875ad975bb9229a119e87c765c

    SHA256

    ba4925850b483c299d06cffb2a0f4527c8f5610294504f161c121c243af53ff9

    SHA512

    3ddfa52d02be7c7e6f60fd273709a5da75182397a1a4aab2aec03837e2300e983a325d7e8bfe78b203c5ab0361e834f68a55b59fd861696d4013353544c5d009

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de13aab4dbd23422a30c60395c9dae35

    SHA1

    20e5b141a1208ef970df1fe225852d33d4eca4f6

    SHA256

    a34864958f27c928c3deeb05c4d2a62d9e416c5db07acbb321073a01bd135c17

    SHA512

    9923dbfbc006a583006ddf3778ce401dab578066c07814c2cc1799e63834a2fe256b15a398587d989849f1f14bad7fe2d172bf9b4be157913911bf3867e52085

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9d622c319b5cd25c2b67dccb72e26f3

    SHA1

    8f46d0f46c135004653a28d2d31e77987c7f2be9

    SHA256

    f82f26cf0ad671c0517f296b23724012e642f2d6dabb338a60be099897c5c7fb

    SHA512

    c7dea8c446f14856d5546d378ce4abf65aa802cc38d7de6ec575837e12fe5f290c034c1549d3f32a5ce08be8ef3dcc314445080eee76ef94be084a2e636185d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3e0016bd175f89cb9d4abd3016ace2a

    SHA1

    4c578ba9c4636cec23e3a3cce925af17e0c72512

    SHA256

    5d6e76802d73937c77c123473bd7f9910639ce17f41f8837f6fc18c2f88dd0fa

    SHA512

    b35935d8994954d67e2fbb0bc3fd0b6757b226ab8a35ddfb6b46e03ff6ad24d30a1006974ac0fcb3ae325232610c68aaf82bd0720a8d5421a87d57f14790b133

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfde6de5bc7d72c8c70cd997dc459fcb

    SHA1

    265d4d423e2253612e0b7732cf6d9617bd459307

    SHA256

    91bf048567bf2076ce16247ab451ae59f216cfb0cea50f9dacb7e00f35998bfc

    SHA512

    7e89fd90e85fdf472725a1f0cfb05cc8907f3829d47d6f477e4486717a9722253590c0924026fd9c396680c599c27f503d7ae04347bbf084287c0781133e53f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05bde97816eed5f254bd42c18af967d2

    SHA1

    fb8d4404106819e224236eaef92493cad2def6c4

    SHA256

    2fe3d1c7aedabebe10cb68860e08b197a9769b384b72705ed45bc0a3bcb45742

    SHA512

    035168e538c3adb036bf26acf3abc04921fabebffc5a1fd6e34f20e49a153f9e8fe809e1c26d3b5467040eff26ab0f47a38862055c2092df9454c785dc74130c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc03f3d2c623fc2a4ced32bbb3daedcd

    SHA1

    3cab51dd131d483896a0ee9cc336584bf91499d6

    SHA256

    1a3a711b32bd385c7067e043098d0e342af4aabad8c844ace46b7815d204e0ea

    SHA512

    9d14b74e251beee69b83dcdb926e502d9b5081c805084a6d5f048e299312a902e3b539a312644b9824fc8c444824652edfa25ed62cb3166faea2dd319f7a1100

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74de7600daecc41ed5cf58d3b1ce6b6c

    SHA1

    619daccb8f5d0a4bb087b694d5f2875ab1f0a542

    SHA256

    115bae7e11763e96f1d7de03bbc5c8391545396a7a2258b2cc31fd850a39db4d

    SHA512

    b6747a9463a44701715f60fa36dccdba6666fbed50adf43072a585e9f94978d926305cc69ed787d5bfec08deeb2f68852af3a6050c86d3bb05901621e5d78709

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9d3cd972307759bb1a954b98fada962

    SHA1

    79315f236b95e2be28fab43e7ec7fdc5762d2560

    SHA256

    1c68f46c90a84ee107542608916ac25b7bb01540ee13bf7e237988b1b53ef762

    SHA512

    98cac2362d546e40bfaa70014e3f82b125b6d0af698243baf7ca1cc5e3bea1ce7363e1fda4dc2cefe09cb4e189cdfcd7efd7ab2181069fd8d51f245bdd5fe137

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e782eaf52a6ca646404da259f212511

    SHA1

    5e6dc9d7fb4877dede3fb92d0788e1be559c7a6c

    SHA256

    9fdabf2401bd661c7746649d48475e3582dc1fd1b4d3890992d2e338fb414378

    SHA512

    44bf447455b218477c94d5d4461934e3bdeaa061673f1371d1ae7a7f8c73eaf9004e0645254c1fc05a898c09e3df3cc98ea36377bc7c9493d5eac021c713682d

  • C:\Users\Admin\AppData\Local\Temp\Cab207F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar212D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b