Analysis

  • max time kernel
    121s
  • max time network
    135s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 08:19

General

  • Target

    eaee5096b4420ec3bcc6fc7f857c86b1_JaffaCakes118.html

  • Size

    34KB

  • MD5

    eaee5096b4420ec3bcc6fc7f857c86b1

  • SHA1

    7ea5b86b82c01beb2e6779ebb81d3c9613911bbb

  • SHA256

    25b01e37808c3c22ce763d773eb6ee7da0e221d6b2b474a4fac12e3111224d2e

  • SHA512

    2d055f62a1168478ed25b2299bd4c4bff0330ec530896a9275cc563ab41ba52df623da9c1b6b666f6c322509957f2cf126d66bc9b86c331dfe47413556147a5b

  • SSDEEP

    768:yhSeE85FW1Z1TNuxMwkMcL02TXOAQ9d5hJBzZf7dhM8k7zBAvgkRC1X1nzK:yhdEyFW1Z1TNuxMwkMcL0sXOLdBzB7d1

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eaee5096b4420ec3bcc6fc7f857c86b1_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1880
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1880 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3056

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4774671cfe9cf3368634963894f63b98

    SHA1

    0978cbd3fca5949813ab778a89508176cbc8b9ee

    SHA256

    fa7242a0af51d45ef9b35ad9227feeecc784b4db6f67e994feba16a0fadfc770

    SHA512

    2d6783f0be2562b0fbc7f8097e35db2d8d6aed350a27d32e7429ea184639630c7cda2befd16202a265f5bb7995f647bf1fe115377844dbcd90d9f35d98671fdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b54f35e07326fc976f788638e1f0c67c

    SHA1

    357aa1709a8099d9c3bc5a15f9db7d4129a25de4

    SHA256

    0603d091e29139a67aa0124c66785ef02e7d5966c5fd8686443ac0bd1317250f

    SHA512

    0b972eb89ff2f1d718a7696d1d18a2c27191996a4e486a4176f5edb2e9dfb6b632a37706b5d5468dd0b15b1b01c3bfc86ec4f1229e36899a436ace756a9303fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ef58cd190ea2726dd41b52db8a81959d

    SHA1

    2ce2b1571c92eb6fc6764ac28a45f83d2d0999de

    SHA256

    fbd377b788fe58b30b5c600b1592df3906283a6f3b6eb5ec046a96b524f46efa

    SHA512

    72beaf96260ef4cfda97c1e79909efebd968f31bb31863ce3ae9169c1d6944f1a57468ec5724265d661be40620110d2886baf36a3f45472ad777584352518b17

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13f98cc5566f27f957346080567ec8d1

    SHA1

    fac1dd4cc83685e5f77a4532e3db485f008b0112

    SHA256

    d74cca00b536f46ccb970df9a8f3f6ada385d30158935431e1995de1085327e5

    SHA512

    8b90c9f24adeee04f47923995715e8ffae5077de741652d9a07abb2e91e6b27bda1ca1e3ede02fa0081c33fd547aa2f67349ea47d7bd383ee71490207451fe74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fea67f9d7a095d7d71b40194ca78285c

    SHA1

    adf4280783ef003cf42a8b0de1ac854f8d44d046

    SHA256

    d5d7a0d6a2bf0585cbc918b069d2be7b6c4d750b955bf79b4ba9829b7d7190c4

    SHA512

    c9ffe42a2c1e8dd5ea2295cd15f2fa8f0e0fcc52928b9c4ef649c0c7a170692429fd6e1d8934fd472bdda19c567a1c9898869c9fc2df6162ab38115a46dba602

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c67177d45a733301f9de4a79f8006f69

    SHA1

    73a2cac6bea919bbd77380267f8ac1fba6794f64

    SHA256

    8a1588eb9a5921c4dbd75351561f486e999467c2b90971b73396b1f6ce8f327a

    SHA512

    4dfcbe7dad0809394fddf58775453fcf2edf5add3123129cd7a4c8c732419ec07adcc7339b4e6067e82d9c54a258d8aea0de43567f8275e9ed41701ff45504cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ced18b1726d81bd78dc10bb22b23e8a4

    SHA1

    661f00518c24e23a1464cfdea46c3b057efc1b82

    SHA256

    fc3d2ff8709ee4cf7b9fe76b4007bc001eda445accf1a5878be124fcfd65e524

    SHA512

    bcbd91ed863ed158f30ac6c72e3bdd82229bdb302907866547bb3249daff4a17793571557d61d779107f4d5c2e7e52e839b95570a218d1e1bc19fbfcab4aa46f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    289e0fcb1d1e050abad0c5ca045c6dff

    SHA1

    0a69a395f776fe85ba8a928a84dd6bcbee55e6e4

    SHA256

    036af2c9f47af414a5a645b7a5eb02359a71ee379ea19f8c0e045a21baee982e

    SHA512

    2b84e281629d0662d5643deb67ea15512634d7c0ec1b358b5f7060454e2debd50c71dba2ce0f62f557dc5bc72dcce10947259ed0d5a37e0d8ebf3b3f9f953412

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfa0aae91ef9b8d4f983dd4a3f52e26b

    SHA1

    e088942d6538d5a4863f3e93fa715836dd8ce649

    SHA256

    77b81cc7894f8146f1f1802c858cf2dd98da6d23af2337e2bcbda51013283c62

    SHA512

    8d5e17b25bb0054800c8e426b966f86b9ca23a5745f54ecd970d4f9159c6cf8026ea02fa1b347ddf3a10857e355fc0eca6eda30a904fc5ec5824a5e98042b285

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e215acaa8f31c481b8dc633831d615e4

    SHA1

    4ca1faec918c699ec7ee9ab3dde4b12c6f60a96f

    SHA256

    4e39aae9601abdb9b5efaf3bf88f52cdcc956217c36df86b39d77e06f8d1eacf

    SHA512

    41224b3a7407ed05394fd84cf531913101e7fa7141d5b2b9de432bcc4200c621da2612526dec5124485db7eaf8ae3e68479791dced5962662cce45481c18d9cb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8a134a4fa08d1ccbbc55241b023bd6c

    SHA1

    b367bc355bd82c09adacb0f1185c9f35842772dd

    SHA256

    7a7c8e77ab41532b6f13e5ff342fdd73a6e81b0c263fd3a2d7af612b4bc65a1c

    SHA512

    b8fdb502bfcd855d39315bef46f117baa93929fa7b64535312fca84f716e9688efe683324e1e15030bd2a710265e2b6c98e61954b25e53435429d55c6fb59fab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdd69fa96283876e4a97b043e9e838b2

    SHA1

    930fd049ae9ee25624418a2b4c60c595f027f551

    SHA256

    f496672107d84628d816e9ffc74857881d4868fd0b4421fa337b5b287f0fdbdf

    SHA512

    c1a1be7fbbdee1a7a1202a489fab6e96be6e944f19d56626419a1dda3a80f5ddc231f25493fa05f81131e0ef170d2113f26782a88a254a8b0ea55e3888e0db4e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6ddda0e44bc521ef2419fea19d71c22

    SHA1

    bb63b06059b47c6e7f5e6010a7d11f048a240003

    SHA256

    c7b5c48e5582987b4aac102abd9de098a497005b097566d5193591ebb38a4413

    SHA512

    d130d396193b3da3bb2d803893df05e495c76b78fc4f8f50da6cffdc84dc0bdf9c2a0faa22465e7d2267e889e8009327dfe8097301eb01365c8ecfed8b52c427

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d82a898db77bf2e1f8bde780cd91ebe

    SHA1

    ebf069d6a20c9ce7ff93247a50b9e9cd00bd5487

    SHA256

    06b48a16be2615c97edfca2636274f09de14b8e65a5b4790fb73a6f6d4e9798d

    SHA512

    fda0a3d631061bbe7bdc8e7b708f44c0288093f915803f2f38ae7bcfcf7b11ab0c307ed3bf7a258ec710e07aa806d82eb35052999e26b81deea9e6cb61f5bd9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    264b96eeb592c24aebbabab201744f1a

    SHA1

    2b78ac4de485b2f1d4a8b89472b36a0a1b0395c1

    SHA256

    c80bb744849c28f64dcd575f7069d3a87c0786240e4489cbd4c78f3a6fbe7ea1

    SHA512

    fc6111e6837298fe1586431f3882339e1f9fc47baf89aaed5e3197b4c1d5e0831cb8ec315330028e169eaedd2fa7afd7ca2510451ce8b0914e4ea9dfbabcd429

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb3ce7c71a6f3e9342dbfbbffe1c7017

    SHA1

    8b3879d8897bdc610c07956ac1d840c31c8c8073

    SHA256

    21a9df2e06f14f48b6c3d13a2ffa72736ad10245ee9934fea2d4877ac0a4eda3

    SHA512

    7a8faca40f19b38d07d9a4a3f1dd81b2436c962ba860157fd49059697a3071b80a849446ac208edd9e756820a6be66539634a59711377ee12a4ae378f0e3f01b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d9e9aaa9a565027f79837f00ca1f90d

    SHA1

    2bb7408caca3b7e8006a1056ff508f91573e0dbb

    SHA256

    9949ad644abe581bd7114148946774e64264a402bdb9775c7e4a566bf96b6047

    SHA512

    130f9ffddaed20455561fc1a3a4939b3e0768f469ed09cb62e81fa66605ba9c73115c67a4af21934a0f291dd007d137ffcf51283e5ce43277cdd542045a7f22d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ca48320f23a7c5a7247cadbb149c221

    SHA1

    49ba3f647c0ab99362a875761863b465967b307c

    SHA256

    e34024c24db9e4bb5c7dedc6f3b16f6026b2dae5e6536bdd8eee8288522a89fc

    SHA512

    ac36bc0427631ecab8e97395db25a4cefb6ac9aa8245b29bada8cf5e89ab7a619fc6488d85b67061e3fa7c05e95982cb46f25c67ec3cc69849c5df1700c521df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1c241933a141964070cdb9bec2214b3

    SHA1

    1204508e7f8d0167cfc7aed6f5f46b1774a597d9

    SHA256

    898e46b77f3bf3bb5c16d2c95b58362690ccd7548f5cb0461c3c4fbf79a0dfba

    SHA512

    85ed875e1c6fd9195b7aa4619682d2103b455938dee0e6947682a6711c8cb149ba731a31439365f250673678ddae7e56853e676b9ea8430d1e54c0ef3fa027bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d60a44c15318a8d191b4dc82f30d39f

    SHA1

    d76b31587770e80e4b114d2c84a01110e2a12095

    SHA256

    40ad125624fb1b8f9c1f0c8d76b06f0221329ab3e5b8161bce26ff894e08706f

    SHA512

    75a28c58dc1a00756726e29d849ee50c516579272d7d240337ca9bed6e6db25fabb731c9940a1e160aa2f08bba28fb8dff392e30f7d5dc58a8b2c969c8094c0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91e3ec9dac8a7575404f0c26c2516d3a

    SHA1

    baddc9fcf684e7662ae1bc452b0fea8e6dc4ed50

    SHA256

    296fed2fc75582dd44978e452e47f88e60dc19279d3c1270488fdde6020fbc27

    SHA512

    3cf07aa87e4b0faad03ec054e5893c618975a980dba2d77a8d63c38153d2a438f0b4874538694ac5f34ecd9b99db58114e231ad3aa9e55c32cabd1fa3c3fdb57

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ca2857c4495265ed97dee79f4b481e3

    SHA1

    9de8360bd272b745c460ab8f746dfd8b16388408

    SHA256

    5f1c88efa929d8266d7589b93609ddd850bb30c688642e115dcde79d475779ca

    SHA512

    146759fd2a6b35b6a801f8ba05964771fd1606b3b60be2db4573690ec64fac48ee189ba83a3c60848e8ed092381c41a3bf6679998476672bdb8adfb71dcad09b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    731fb37a46a8b40bdedad425b218d7ae

    SHA1

    67dafd1c6307f5f7851e3eabb0e8db1e013de92d

    SHA256

    53ac4fd3a6480df45d78f53d3e523b68983014ef1b1db66bf10857494b31ff44

    SHA512

    2697cada14485f68cb32a4ec29ed4f0932647cb2133e9efd414c6308297312e208b3d8a887ddde34aced9595b63c263281765a9b7d4277281c15d1fbd738d2ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1fab073ad5b04017aa0e1d63194a8f1

    SHA1

    7cf53718b4c0b76fa0fecdcca235486130335666

    SHA256

    cbb8276cfba43c32e6f9a43766605738df379ba770a6c253e8dfc5d16c59c530

    SHA512

    dbcac5cc11c7d71d2a83b939a6887ac328588a08d14a63b3c735a25d46d0ae4e857c8ae04c796efd27d232e15acfcd1ca942428dddace17c4d2fb11b4e6ddbad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    351690d1eb4624196348f9821709c7c0

    SHA1

    57e9ed4f5eea3dbb251d37f9886d089110130926

    SHA256

    fe6a7356ff1abc586b9d7f4288c2ca3dccfcd771d03f5bcd9ca6074e6583f727

    SHA512

    fcb57fc8c9d5a4b2e0df40132535b0a2a8e645e4c0a990bd464798744e74c3b77cb5a9d70ef62c4af195fd0e7dad0dd94520890416e7517aaf21e2ed4781d0ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    72db0d8a79c272510a1ab61200c90c26

    SHA1

    95d5fe7cd3a88a4b20ef3f9da577d7206e8f55eb

    SHA256

    d7066effaf7172afd6c680f435f1e0c122316cd9a6f3739f77c53a59e279ed32

    SHA512

    6b85d2ccc9425cc8ad2617b6f98f230bb6abb1855939d8cab1e28e31f8d37688b759a4a8a076afd5299a0c375b226ec7fd57435ca4f73f35ce3cf29f25b21af8

  • C:\Users\Admin\AppData\Local\Temp\CabAAF1.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAB13.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b