Analysis

  • max time kernel
    132s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    14/09/2024, 06:03

General

  • Target

    df9eae61d9e9c3417236d6af44cb07d9_JaffaCakes118.html

  • Size

    920B

  • MD5

    df9eae61d9e9c3417236d6af44cb07d9

  • SHA1

    6e82632c0725e2f4c2ccaa819fbb8d6c839ff996

  • SHA256

    0856898409b7208fc8a50e053208e288b52184baaf603f3fa27d3e6e5ab039b0

  • SHA512

    4638dec229608b592a40ceb15f2c045556667631fbbe9e431eb32657bbd45803a901acb259cb0f1a6d83c4deededae395975320f83608d4b13afee12a0612a43

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\df9eae61d9e9c3417236d6af44cb07d9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1388
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1388 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2812

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3a1dc8102ec19058b1aef68c29c8f89d

          SHA1

          5b87324ed1523e5ea72c79f8177430215e888233

          SHA256

          8f82f999290634be5dd263250cde78679ec34c67237a1ae76646d008b30b8977

          SHA512

          306e6fe8a606ccbb447768bd91eb5654afcc53fd981089609875d938c7f7d7c20a2ff8167efd90af24f0d2b106d9337581b826e5b5149ba16f0c5e56e44ae4f9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3fa2726c3eba4e71b19904ffdc52f78f

          SHA1

          acc0189fcde512d9ce4cbe7c47b7ebff5356d551

          SHA256

          9b109c6501e6a008d4dd2afb5d59d5e41204f933bd5aa40f85d62addebf3b58d

          SHA512

          7c9d5651a3c3d65c9594f856523845112a969cf2dc9b0fd592568b6770f9e031cb252d319afe5691d2af837e41075d085c1b9ef82f2cb0656a8728995610c577

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          496a0f3b4c511a8f71b60588be85efc1

          SHA1

          6b8e1a395a0139e788fa87343934b1568728483e

          SHA256

          527f30b3986fbec5461ddb8130716d7c8fbc95646653e6c617e7cdda7b800d0a

          SHA512

          64fb9fae77b2deab20a0e4e17efb54821a19afba4996d30e12ac26b6972da271a5b3498758b2e0cf753a2a590f45617aa6a40526a6094b6f3bf1f3ef0bbb5bb6

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          062b0d23884385f499f046c84521948e

          SHA1

          ed545a8153cbe8d55b8a596dc14beecbaef1bb31

          SHA256

          7f25b101bf4c4d8b1761ec5888881596efa9bee210928784ea75c73db6639713

          SHA512

          ffcf1b693a1f58c4d6f580d710546dd6e71c5095a5a10e61671a0aa09c7816426fc998637f0be9d04c529a78da7d676382ac61f922d2320ec508f550963a063e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0e149ceadee6b138ed093b0657227d80

          SHA1

          697c81eaafc51d7f1efecaffd6e77abb8f3c25bc

          SHA256

          c28730afc9972cb706a7501f6e309a2f541484611b043dafbdfa657f4393de23

          SHA512

          ab5f087ed152a6ee4392aec6f32097e8acbf57f370504a940ca8a926a5d8b735d61ffc7ac1ad3d63577b8d8f609da5b1f08d3e375998dd9abae7bb747c09587c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5387b8e4af7a1bc37bb1be011a3b00ac

          SHA1

          8375318685e8b47894c574ce84c594e796c96040

          SHA256

          fd81a84c8a7e4e15bd5e1f681fbc99056d775b0a8888b360c1a4c2a41e61bdc4

          SHA512

          b01c9a4b304e41d8623f4c37e91a6bc3a90f9b76bddf08e0694fa484512ed21a6cd10e204263345f96f0369c2cac74a78119208ead1b15d0d5bd3107efe6cb41

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          830b7461029001a940780b65b75cd944

          SHA1

          575a19f6d1309119afd6c85d052df69d91342702

          SHA256

          292d54e7b1390b79de09646aca8511ed1d1eff18087fb4d6e90675f8cbfcb4cd

          SHA512

          d4449ded0540196cea59048155f6bfc4013f81f29084a442e1ca3955430aa2bfeb1e7de68434a9769c6390a23ad4d1af13b76175bec618f827e4f1d300fe6cba

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5efdf98d6be5782228f1f33f0aae2cd7

          SHA1

          0f13595c1e98985feb48d626a8738aca298b6b0e

          SHA256

          6a17b14bc07dc44c03073df582e0e6856d22fc99a291b19b7aaed43f576ecb5d

          SHA512

          8f46e8b2ee6b043c055a9383273a38c546ed5e01884a68980f4475d412c767f4608d8f9b72250855f785be857c556bac4c0947089f963d848897a4aff5539cdc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          cc984882fe20f74524eee3738b54d8fb

          SHA1

          8f80ddc290e4ae380ea857180356d0dbc9ec9797

          SHA256

          b841f76094579d262173490399d861f6bc5bf3b052fef524798d4fd5232a300e

          SHA512

          906ba6fcae261c79667530c0fd70ad2f68f5204fe8fdc00e2be20df9ee7a491c5b7ae2b8f1b1ae86c9a6b80d9e76fbc41587efced0dce339179b7aa94c552c1e

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8dfe08f771ab50d46e5d5e035cb71899

          SHA1

          987bead2559be75b212a3018194861bd93e7ff08

          SHA256

          23917e1fbc48034c429f4e9938fa1e88419616caae175eeeddfdaf2b018801a2

          SHA512

          5491911df8c7e7cab260639320c796b8b1186646e5ac74218a1c7f3bce76949763b04b1f75a418040a48be5022096a8dbd3d9de7c15557e21d6bea42b117b78c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c5a71272b54474cc886df632b28ecdcb

          SHA1

          61d8577a6ccb0aa87283b71f1de6f48d9c4c3056

          SHA256

          48165bc8328bd9556ff91ad22b787993b21a9d04de99b7bbcef7be25c6dcb149

          SHA512

          3d2e34f5a086059cd78e1bf6cb0152f6d97155ee74cc60434095bdf5525a75899b70820032e90e2a4291c6b3eefc1a54d25aa738d885631931a3baba4c36dfa1

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b1b5b99ff1b1caf8a89cc4db3fb61d8a

          SHA1

          448c45f7ad405bffa7bd2376a406974b557f4317

          SHA256

          125f1b1a5e6b0b16cd4233b96550d48f72f478bfe7d03dc6743fe2cab5d3005e

          SHA512

          1d3b66df71f8eba1b857d93af51782576f9388ed61df801bbd1ac22a7481285b4821ef5a65964d07f3aba5ec6a90e5061c3a6fce17c29fe4f98c6c62d3fa6e6f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          381aa5533445e9ca25a11aef94e88463

          SHA1

          69f37e46dccc32b71f5519422671a599f029b88b

          SHA256

          fe63271fbb15db8c2055dbda12f8d6244a9fade797321228ae3c67a83406b065

          SHA512

          3b6ec631b1d48f8e5d261d27eb8710cdfaad2d15d0cf378d3c9629d77dc650a302ba78066ebdcd6803d823f255a59eb976ddd3edc5ac7f3c78a8627cddc4bae8

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c2e592710f987ec615b00bbe5cf14f21

          SHA1

          b89c70ecb944b5e8c9d551df3596cc09c1e5f0ee

          SHA256

          99261f66c43d76596852d621d0138833f84c6bba6523608c76add94c96d07466

          SHA512

          9f64d985e68173c68647bc8d5e12ebd18330f2b7a400a71d6b1cd7225582be228eebfbd2e547de119a8f1dd2ce37b87f4c8281dbe41056f89fed6f647e4a1e74

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          033d45e68a7789059c2740a06620840f

          SHA1

          fa75a3652cb3d0a78ab84c8fbc78ba06661a56ad

          SHA256

          264586f3962abeabd133efb986a545a9ab0264d5b76c60c31f489d1275d2114b

          SHA512

          5ef989502c61daa652bc9f0a2df8a554b6de684a258872fd112535eb7bef6c4360fc8766102d6597f8db53421c06f590fcf0042dd451a709b15f08471eed8b2b

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          c1abf79e111b687e17f5940ac149c9ca

          SHA1

          9a2ac0da84eac81883a0ae42676e42f4778715b2

          SHA256

          c25e35a73bdf39f41e504103aeefb5114b411dd1d043cc2be358bbc3468c1b56

          SHA512

          134e5a457fd38edd8691c21b50a76e517b456e1ad4cdad4c8e3a5faa3498d48f079f2c4d5bff6f725d017f71e4861ead258568ca81b0ec022d0714d80cd097bc

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          5d77e73cac267b9e6dfcb128d069ad59

          SHA1

          1ced9167cc8d1c49da9c85d31e3b0cd84703ef07

          SHA256

          b72674ca5990a508632472b28012220f7fd79f61cebaf99d0c85362919fd1293

          SHA512

          96e34ca38f1629b99ca9046ab28d1b18390e9054585409b80ef2bc6ed0cd4af82b85c985602dedfc8272addf826a30c94d85f9e6ab75a3a42b0224890c2af16f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          196b57de00b16dd71ac603a7ff1ac4db

          SHA1

          3633047b563b59b4711b916e7b3c7a3df606bfa4

          SHA256

          7b7d5b0e5b5caf179d37114edafdb84b799a42ed218e9e2d3a46bd9ab14306b6

          SHA512

          120bf5c41b4ecad60b718b9f78e2ae534504e9863549308515bab08766f3a4548325c0a7e520b2e37d0ad336023f3257b29f21a915475913bf38a81af2c9d39c

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          fd2c509b109c5ccd9fd77a8b5e793509

          SHA1

          8d8f4b9d41c5ce24ce7c33ad26b7f03448ef3bc2

          SHA256

          526150cdb22ee8299094d0dda515b51349010a15fc6bf3e4cab53791f10980e8

          SHA512

          5d5255e460e22411830b38a4543661d4b698c765585552e410d3d5671b8e5c41ffcefb77c359aede65e60b48aa40a41340490b32ee1b872e54e288fc2c71793f

        • C:\Users\Admin\AppData\Local\Temp\CabFD83.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarFDE5.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b