Analysis

  • max time kernel
    118s
  • max time network
    134s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19-09-2024 06:00

General

  • Target

    eab7a1cb7c85ceba352a12f2d84e0bb8_JaffaCakes118.html

  • Size

    68KB

  • MD5

    eab7a1cb7c85ceba352a12f2d84e0bb8

  • SHA1

    ef1c9f2003d6a2392eef8693d302797377b162e2

  • SHA256

    2067ec020492941befb5a2010e5de1aa0b2641cfc6a530c6260b6aec8353f805

  • SHA512

    3334893cb44b20af7230e2acf4aafd4742f0a4c4155d8e478d843ad9abfb53149d573bf0d7f293b65803968d3eddd16439b1983c3e3651740bd8acd053622e3d

  • SSDEEP

    768:JiZgcMsSZ8tN99OIs0mMWoT2SqQCZkoTnMdtbBnfBgN8/oygcRWQFVGys//IjkKc:J3WHTEPec0tbrga6crNnz8PJ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eab7a1cb7c85ceba352a12f2d84e0bb8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1992 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47abc261e0a31aea5d7d1b321739f4a2

    SHA1

    5b3d93305908d414449a69b1544c5f958b821fb1

    SHA256

    cb6659cabdc7db943b6931bcd7f141858ed6b3b39688e7a8a029ec34ef601d6a

    SHA512

    c0277398b725c4ab33cefd331219d279ee23d7c09cb428af3cc3c2ad9c798334e3f174f9a8f3f4c6fea1e44e6fea2f3e85bca744f438d46e999d8c4be7aa93c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e5ee31642cb12ba5778f4a1d5e5ccf76

    SHA1

    3dbaccf76e0a5a79df4b17449d296994a24ae8e0

    SHA256

    94a06e71679a55d92105db9233b50abea1b1859cce43a8e988e5665e54be5ddf

    SHA512

    3a29826ed584963ad3c909e259a6a3650c1128b36792d683596563c08297a3a7992678dd619fca4ffa31d6604ec327afe29b29406b8cb24f4c71a52a9d996014

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d430687c25fa4503486648eb9f67ea09

    SHA1

    37f425cb88001dc5963d4cd2356db34685f93716

    SHA256

    8c2f2f1b0fc87f8cedb32bd9cbb32f4e2f4ca938662eb14fbec5045a9f5f4c3d

    SHA512

    cbd0cf4c556ade9983f41f7641a1d3d98842b72a531057ba8c4bb888818cde3c71fe0aadf645d2ac35e90e5e5c52dd89546b2fb801f1775f13d48dd6dbc4193b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c354a47d3867a7be66362ffb571eca8e

    SHA1

    95241da9a6eacc9455e1acee4c468c06a31f9233

    SHA256

    94ef70d1c15205d2ab78a66890db33654016d0913aab864ee192cd30c9aaca53

    SHA512

    555afd30e95546dda0874c6f83b4b5a1e5d7af4699261bf9a61ac4c0c1e910558c413b05ed300044f21f7ac64696d46eba0bd711bcf5876acf18a49ef5b80c76

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31f46f0648219b7ba2718a591145fb61

    SHA1

    88cbcf62bc97d72abdbc78f64856ed146aafdabd

    SHA256

    c0eec4c4970d055e3967fa947ed28ecb942c5920a0fe17d9c83d355abf71fb5b

    SHA512

    a12e2815b93205c49d9b72d041685ddf7b5ba8f18c835459e8a8fe24f5348285a8c89c8b34020335dc7d41c3b014343d23ce35d413258d88a2ed314b5816d282

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f28ba556bd9c71a9e8da6a08e6acf588

    SHA1

    fa3e3f8a07f413c52d3787e81918826eece9dd8e

    SHA256

    b955ce910a7567d786d4f1f128e49350c35d886c488641cb66d3bb797128a682

    SHA512

    167d2092a51562a67d95e0ac70d41d334d1db6fb09bdb697416a1f4749e9924a54768856f4cdaccff4e21e940a6273620a8d07475c25f0700e768ec0ce5589bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ec1adfdea7e564bd411c6ecccbc74ae

    SHA1

    5154eb3e35bd8c46995d37352e3c7bdc777ddb4c

    SHA256

    f7f0fe980d535c95cd66f095c9c0072ef2dc0d7e569e6e9a0780b20955d6581a

    SHA512

    a2409b00a297988420c916efbbee877095a2ef0e4b2751535a5b535192f4b40d31026b2839c3ae375426d9df53003a48d8554b0e8c909399d1825a74e1ec850e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dad4b8fc71b9e97aa169118eb5819fa6

    SHA1

    4d7e8607a52a77c99bff3ea8b48be86006888f3d

    SHA256

    5a5ed86450e63c3cf4887b0b226bb26a591b3933640aff7db94b932038e2f392

    SHA512

    8882d52b585fe71f66c27ce01adb404e240c6983bd6ccd3a51f2565049416655a2d1ccc5723d521eb9bdaeebf170b1418da91ecd5da08f9c9c6c46093807add4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a606d1e1cbb8212cdb333b6d09f4db68

    SHA1

    4d81bd79046d53f5434b7537c6e6631c211cc32b

    SHA256

    54b824b4d1103995f6f595c8b55fbd4d669d468a698b096756d372408f8f41dd

    SHA512

    440e4a8228751073757de6650c24faad7167b9b9eecd17afaa35b32c1352c82ff0ec6a2fcb83fac4c520bb2984aa3d5b370fec21962bffa53a91a028354d5d97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae6b67b91234a8f0a3e9f0196323de7b

    SHA1

    96405964413d318c95134bcd343d6acb9c7506b1

    SHA256

    d792e6c09d5d87a4e8a36134cb6299d3aa63b686584cfcbbe77ab30ab8cd60fc

    SHA512

    e44c3a94bf99d3c4b1890a86071dd1b7fe35fd4a07b81f7c23cb288f1d07da2a9517b55b3fcf904dc19f412e63a43e8f95d6a8b62c79484ca6bd99bd7135debc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae087b2e78dff5517425edbe96b87b71

    SHA1

    9d8cd199cee50355d253d491b2947635905ab085

    SHA256

    a6f489b9dbe6434ba89e7bbee06b127e8793175502e87437c2e4c38a445dcc9c

    SHA512

    37e8a2243b92a2581e9e53fd6d42ad374729bb16c2d1cc5c727d869bca439048a9df14e06c170d3db75522db5932e6000bba2ca0a8daaeee3e4e2b134f3d5ab3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    172e135f7eddb68444ff642660072ab9

    SHA1

    4517f646ef13b7e1051ec2d02df8e2335219b75f

    SHA256

    fdb9a303e0e100c1cf87e3032dd836d3f6093a2b1280b92c59e92a19ecf56bac

    SHA512

    ace8e3fb43656d643eaf25e2ba0f927225888ff6cba65bee4233196736898eba69247926bf24b7c871fadcd38b1e2a41c6519eda03a52367b746fb038b59d196

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca9dd643a36ecb41247ed16a3458f76c

    SHA1

    c71283f5ed23480299ea16ef55151a735c330e58

    SHA256

    aed6de35ffd01928eff61465e4720164baab83a6b0d7f48fed757f5d9ad592bd

    SHA512

    58e460cf9aaf08776f98d6545ec4ec45af6b428723c950cae747b7c0621a009ad5c4e01d41be4d7be6ecaa207780e386a32036327e7181e412752fd39719ab15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a61aeac9590c8f8e87558d78e8cc080

    SHA1

    2f15d598edbc4be6f570862e0dfa9daf83ccadf9

    SHA256

    27eed96b224ceea167a9db8111d08489c896f7c4677f53be7e9e73d42e2a0d2b

    SHA512

    85c8e9820b10c6def33885fc07f2efafd743ba947280915a596fadbdd76b60df312deec4d5779b4ec95897f8c7388b465d11a853b014552fe83672b3da57f466

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c44855c09db65ed2e48e2e3f9f67a87a

    SHA1

    bf6a708d0d9ad1d08f83b842e4cdfe2a8e3b0bc7

    SHA256

    7ab008802ea4c47d31974283abd997ffbf699a73b3d0135f545a16d22fa493a8

    SHA512

    a3f3fa147ed3a0381a78a25cd63561b437cb7554f4e275d09322a1233db977fa04e61774380aaeab0c1b490da6ec52535bdeabf9c76d66f3b5a7324cd1f0b632

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e95eff568ae4066a8b605e04c9566b88

    SHA1

    e92d700f1cc0af33f157a41710bcee0bb5308f78

    SHA256

    d2cca5860352424f387b6a2664e8d91fda0113dd3a08ba4c3133fbe241535c8a

    SHA512

    6f491789a247a4fabc4158f30889f6bdf433d40b31df0c5ae6e3a4ccd9fcdaf3644c59dafce0237b52422e771e61d81f09b4347fe779bfbe93fdd3ba12a67b30

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d54ee3916aad786c51c8e8ea9b8eda53

    SHA1

    f656a3042766c74a098d8a01e9bd21e585293821

    SHA256

    18c025124fab3518c4ccb63a41c4705d92546e400eeaefeb0cea6713b828503d

    SHA512

    21ccae20f759c8d509cc5175e937d060b3c900587e0dc315a7c710151daac56b8627b592512048bf5371eb11f3fc217f4b483efae7041e902dd1d2984bfe7e97

  • C:\Users\Admin\AppData\Local\Temp\CabA99B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAA59.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b