Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 05:56

General

  • Target

    eab62409bf70a0b2da2aea42d1810cae_JaffaCakes118.html

  • Size

    183KB

  • MD5

    eab62409bf70a0b2da2aea42d1810cae

  • SHA1

    bacb46f0cb0f501724e1568f2b338261a57149da

  • SHA256

    46048ad1a1cc1860c062ffdfde8b42b8f26ad9dfd7f1cb09253e28fa2fa8921b

  • SHA512

    03bfb96b99912f9ae61f8a266b536f51dd678d3f7b948157d939001fec44e4efd4fa94a3783cd491e9c906d33503574b6ce2dba3d877a3f337a25b1be8ec0dfe

  • SSDEEP

    3072:cGb/qscWV/ZmCuCEtWl5DASPDbWscdRXrXN3AtBAgG:3ZmCuCEtFX5Atu5

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eab62409bf70a0b2da2aea42d1810cae_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2024
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2024 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1704

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ed12aab0838e87bcb0bb08d2801bd3e

    SHA1

    268381e5a95c367c58e76418c3c32b968159b4aa

    SHA256

    dc738d6d06424639f9dca6f2179236fffbe33662d072c51b078c5541ff48922b

    SHA512

    d01c9306d644190fc464dac48c016dca318437e0c504bbccd60cbbbcb592c6c2c45ba554f7af0d632e96e43523317a8140e4a55ab7ecf0665467d785dd145878

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    88a7984d9ddde3fbbcb628d95432309d

    SHA1

    af4001e45703be6297bad47fc9e4a351509e38ed

    SHA256

    cee1865264fc9bf42a90a4d8b6550b2fd313a56683cbbc1f2870934bdba9f6c4

    SHA512

    0dc8f06b8bcef96c37e05328a6c41bb897f80b8178e34392141462f0f003e07ef3c7319193eb620cc40ea5884fb521d6c37708c2cd2215f5a126d25518204629

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf5fa37caac916500b12d320b7916437

    SHA1

    dc5f3b04d4e3c63da5791aeadeb058cb198b8b1d

    SHA256

    5b0c42e5e57160c59dad7f426705a2bf92077c71946204e5722fb625a113770a

    SHA512

    3f1a863afc986a7be84b1d51815d01794af5bd2e9a5c557caf37968790e7e3aec47e97626632eca59cc0f9b2e167eeb3cf4454c8e20b10a8dcefec5641397e9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f46e0a8959e72acde0d78d87cbf9807f

    SHA1

    9eea561044e34bd2f1f2b499e31d5d5394405807

    SHA256

    5a43d411f005c8236f870c31edd54616bc5e4f82de3eb74ad650d46e50a179f0

    SHA512

    605f34c3598b927475e35c15d8e25be7edb18dd946bc849797ca685caa8772428bf6ddaea7503200cdb52f8cc6f1e0fd7bebcd33b73c424e1fb2bc14d2c065a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ac338341cfcfb67ce5a33a1c95bdf0c

    SHA1

    76b7b3dff19c6999b121bc181062ec4c132d5b30

    SHA256

    ef0827627ecdacd0a20ac51271d1b534c81036c3534580ce519cd5aec44b0883

    SHA512

    b12300aa10ec89089e53390d67f0c8a3afc167bf61c4a4608ceb4a138bade08ab55d95021b5fc364a79753e20b09e011020ead88a8bfd7ca7b22d4fce1751c77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5078079f7a82580c9a8608573a6fdbd9

    SHA1

    aa1f7a8ddb49851b6cba37d7b13bfb6c24bc76b4

    SHA256

    87e15e94e9383721e37e406299b4a2a4b0a7a0f15f8de58630aa7e18a6dafd9e

    SHA512

    c9c451ea00b9787bd6054d438a0bbe40a1a0bd19bd36f500d0029cdc0f65ba48a239fb7c3dc15dc42b1b70e1e945ac42d6a423ff3304afa0ad9c68b057b8bf65

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f03d5d511e8d87634a474365fc3de249

    SHA1

    dee9802a17023c1c8a6a8806bd7ff8bd369d3a32

    SHA256

    e92de07fa7600b59518ba027d7f052e8fa0930e81e0dddc009a7b1b0e236c3ed

    SHA512

    de3c704eeea17dfff5d812ccf94d5673b333d412175a27e501518fc2b2ff1f5bc0e0b591d08b2b4a4ccad2afd52e6eedb376c20ddbb2e179a5bc5166ac0eac9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec01bc3a1eb425a3be842add79165df0

    SHA1

    75ca4ebaf1c17026d3970c5e48c3d3edda2c361a

    SHA256

    c7fb45658c09d027a80914a3526fa09e50d9fe75fa7fb088c5d6f4d7a6b8185a

    SHA512

    d112b8025fecb2400cd37af149fd9e85660b08175a5b8e0c43603444984296737c40f5f2df60836354b770981037cd8b12d35c88422c4eee563677ac58cc1841

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6890a7595db3d6dc53fddf9ad96929c8

    SHA1

    2f58b9dadc9adbfa5709ec6dadcf0966c1beef3b

    SHA256

    4c4c1041d01a0ba5039df5ef8ddec38a315571dd38f45422b3462672e1e61698

    SHA512

    8874a834228ddd03ad7d882d2879d447acd9675fd44b5be9373cf0940fd1605b015d929a76b0ddeb7386bb43167afd1d1d9d965e08dab79087801bf6ce61cee4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25f8f8f1f96d44bc4736a66f91aa6e07

    SHA1

    d6794b746dfc828e8927a891314984a7c73bf3f5

    SHA256

    c4364c34a9526ae5097f5eb65d376da0c2a7f247f32a2603bace3c626eca013e

    SHA512

    ed415c9462f80a66411a6f4632206548941502f4b92b16a2c98d7e52c804127fd812ae15564853aa6d18065f4155ca0a369974b28db3539b2135343146753772

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d608dc3000552d4e819d14a14e4274f5

    SHA1

    0b62e3d912c2241712904388ea7dfa9bb7984c79

    SHA256

    1fc0bc0fd5284869f3b453e0b62ed113dab82c7de838f9fc9af3dc224879d5ed

    SHA512

    efe14c73ced9301844117b41dcd377e563c484bdd05b0527d30da998cf19e33499dd51a9618ec0a8bf0787295547271441f46d9c3849468ffc8542cd5b19e261

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5cca6060cdcb762feb633d688965a4b4

    SHA1

    03e89664b98d4f74e44e1453eafe1dd236474de2

    SHA256

    f268d7312538000686e18fbe65eaa274e14e00911f8eb46cfcd3e4b14280c8dd

    SHA512

    0603c86a4ad82d53b5e927099d6bdcf028ea66addd8dbf106b8dd9c9b962265f40578a0249785bac648f0bae711b62a11b7c928a30bb131bb9a19957679a0d12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55d369cc75906e0f852949227dfe3d39

    SHA1

    c98dae3c7e1bcedce07c364066e63a6031a0a4f1

    SHA256

    cd87cf9a068304f289247ed748ea2bb66f0caa443ad23e9833b8ba352a189a2b

    SHA512

    fc864b9c81f1011c78264503453e799aa18aa5860b3f4d6d5ae9f805579e5b40af92e7648305ce22d72d86480666bc9bf11ab198bb68eac5494253fbe43b45e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b17dcc921ca455e4cbb1446b9b97cb42

    SHA1

    a16fe860e35169bc0dfc54ac329449ee9b2704fe

    SHA256

    9b1f93860aad45f70ac8e14408f2a021376957a8cbbf18199c1fadfdd5b9ff3c

    SHA512

    2abb81f4ab47809d97064443c278895903bbcd9db7bf6876dc9dcb4299484d5933a68aa48a75aa1381250d06622ba0860c5e05b17c66f3dd5299b8164ef8eb83

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a042301ac1582ea8c3ed95b633126d94

    SHA1

    390bcf120dbf0b5fc4fc611702746a7b1cabc491

    SHA256

    0535325130e7692db6b928430e8ad892fb3a50f9074ed9ce2305c246655901e3

    SHA512

    e162f67932ccd54203e03362f630f40f6c33ae9f8ea47c6bc0d769b716c4fa17e8cda2f5286a32d5d656540164c195737a624bfd58fd6737de861a3b0a5409c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    541d7ba7eb8d7bbed4044fb0eeb85fed

    SHA1

    2e5ae75df90a639391db1a511bcda936d0537307

    SHA256

    b17fc0f40bc648dbdf77f689013128811064de0135e71e584f981df268795523

    SHA512

    47728fe2fc587d42c936cc2158577158e318259800fe267bf75a68defb35c43c954f0b9108570ce01c46ea0e48e6d3709e728b379dfb892facee58e0f82e3a8b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bac2fce05f0dc1bcd436037e0af04f26

    SHA1

    7f8d4b71923566cb7442ba1e27dc0588efa9e0f3

    SHA256

    fc89c9db3fa53a024cdb63d450753089d95f870c9a9c1784c31c4204e8152f84

    SHA512

    c1d9fa92bbe4e83b6023a9dbd8697c1171a04e78946eb1085fa78f15bd422dff665300c208bcfd0a3b75e385629f4f3fe3ae675e8460d501eadfa4e2edaf1bd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31de30898ca97e6bffae892d79e2f56b

    SHA1

    8942f0abd6f69f0491435b9e8c0cee16bdaa8933

    SHA256

    51352b66f19eb34e335c9d22ba871dadbf8b6a111ca5bb17f742d9a69eeeca4d

    SHA512

    d441c4811ff6494c4cc190bcb6d1a7f6fc5dc39c79275cd5d373904ac9c4d88ae064c54816d409d81b41296f7b6abc7cab604a7843eccec374874ccc625244c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69e5ad475b85e38e893d7274052191d0

    SHA1

    dc01a912b09212df978a069abd985ade593d5ff0

    SHA256

    61e2dc830a6b10f3f848f4b188cf06a29394941072d68f7f8c16b47975977ea2

    SHA512

    0f52d1bfc19dd66c72498b0e23071f1ae17d575d3d572fda0461bc2950d7720234fb8ab5c8bea9844d1ed58464e4ff175b3709cadbd7490b58d45bb3abc7b3dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47c92d2d2817c4c4dade88aea1c2843c

    SHA1

    6254e323a56e1edee6710015f095d0d5d6b82e68

    SHA256

    00b24ff728dbe1ebe8f72c934f9ee04d2b2ff94bb3e26797086e05f3cbf2ad5e

    SHA512

    2099d0bd0b6a750a0f8d31df371b3318684af72970c3d11026695834317648fe35a5e50d46d378c10388f2035cb66651f6f2bc1f0d928c2656c5a46cccdaf975

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6fcae8ffb28c9f1076315a52a8de06d

    SHA1

    7c7c0989372762b765f1d79e5347705b422e033f

    SHA256

    28ed62ec76de0f44d2cc2ae5c122ef73457c2a15526ba34e8b3ced34194762e2

    SHA512

    28b90334c966c5220e6c43702f31593ae529b8054f91024668a46c47416a1218015670097efe132222b89797badbdcbcb1faa14fadc05cabdb8c7791c5a7394a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WCATT3E5\errorPageStrings[1]

    Filesize

    2KB

    MD5

    e3e4a98353f119b80b323302f26b78fa

    SHA1

    20ee35a370cdd3a8a7d04b506410300fd0a6a864

    SHA256

    9466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66

    SHA512

    d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WUBCGJ0A\httpErrorPagesScripts[1]

    Filesize

    8KB

    MD5

    3f57b781cb3ef114dd0b665151571b7b

    SHA1

    ce6a63f996df3a1cccb81720e21204b825e0238c

    SHA256

    46e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad

    SHA512

    8cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZOGPI1N2\dnserrordiagoff[1]

    Filesize

    1KB

    MD5

    47f581b112d58eda23ea8b2e08cf0ff0

    SHA1

    6ec1df5eaec1439573aef0fb96dabfc953305e5b

    SHA256

    b1c947d00db5fce43314c56c663dbeae0ffa13407c9c16225c17ccefc3afa928

    SHA512

    187383eef3d646091e9f68eff680a11c7947b3d9b54a78cc6de4a04629d7037e9c97673ac054a6f1cf591235c110ca181a6b69ecba0e5032168f56f4486fff92

  • C:\Users\Admin\AppData\Local\Temp\CabE8BA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar13B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b