Analysis

  • max time kernel
    145s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 10:51

General

  • Target

    eb2e1e77520e6d749b7c287a8e7db136_JaffaCakes118.html

  • Size

    107KB

  • MD5

    eb2e1e77520e6d749b7c287a8e7db136

  • SHA1

    3f71ebc3931e4f50c97ed3ff449f89f77faea07b

  • SHA256

    1ab31e63367c39ac27025d29b66d3f7902c76eacf50aff27cc6b1b764de7032a

  • SHA512

    0469a3f996a9b0631fbaafc916a112d4ecbc2be379627fd9d627638375de4669d5de0c22afed7564efa368e9cbb815bbafca8c6f1c767f2fa703b6ac7d080756

  • SSDEEP

    3072:dICPC8mgCzjQAET2E4oxTmMJdxtgvY7lhnhH66z4:VC/n42EL5W

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eb2e1e77520e6d749b7c287a8e7db136_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2752

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4FA45AE1010E09657982D8D28B3BD38E_4B65292BF8E4474E2D57D38A629C5318

    Filesize

    471B

    MD5

    f395d47bbc67186879baa8a5d46ee5df

    SHA1

    07e79ad7f4a7c378c8804593e22d9c6d960bd4f4

    SHA256

    bbe30d891f4b57290da56244d4a1db03915e290fed8a603701cebf69be7e271f

    SHA512

    7825f8eb311c2bf06dca6ad833e6e9f16d7becfd3c28b51c12016022c4769d8608e6e4030f5b3c6977f8df5dbe10a4dae1f1b4ca7ae2a9dba2423d915f5a37b8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    07023dcfffb872aeb57b6e9aea70505d

    SHA1

    b831f8a705b179e1f6c4cf0d951cb7a8cfa599ab

    SHA256

    7237796142cdaa19703a4ae75ba97bc42d3b4638aa1b32018f566c174a78f57e

    SHA512

    318dd3272e73aefa6d71b3bab1b11c0a4e6285ec7609df74a4ff2a44b86ec831a3d19389a42845f585e93fe059d6ebf47471af055234c91a2095c4892b55b3e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4FA45AE1010E09657982D8D28B3BD38E_4B65292BF8E4474E2D57D38A629C5318

    Filesize

    402B

    MD5

    194597cae9d694ab5295641f57d89e7c

    SHA1

    481a5c6291d7936cf1a8eaa7219c885004011d97

    SHA256

    1374f35f27d7d88c437c17bbbb2114917a2c0198f557fba541079fbbcbaf10f0

    SHA512

    d303b1908dfa2fc336cab7be310693770a8f8147fcb97b6d29d5075c881732a74e232e2091fedd1287fa207a4630c8fb8e38845326f14fd523517e168b0f34c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5437e27b744643b951a7d8fa3d9603e

    SHA1

    db4f9071c8fcd9061cb9aa26f3a3631824b6c466

    SHA256

    8b1a31ea1fe3b92ffa843d8c3708b87cf24bbcdf769b54c5da81c97a3b3f1095

    SHA512

    234d7b8ab8c8809de34081c468d044f1bbb612ef9c66182373cda316635eb6174fceef50314e93ae6a37535c16169d1b29d2f70547851c35038e6c3d07d162f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a6ed162ba18858d1623171ade965352

    SHA1

    6e1124432f19e5b8321b91f80009582423288c01

    SHA256

    616d12008dccecb8deaa229246d24a018739b1ff2dd92cf71bad8992b9602387

    SHA512

    477387d486ddacc3072d8f456b9af3354c607c47b4c1b6f68ea964cdcbcd1ac4b092670ad65272ceed3b217c32e2cd48867a4f1dfdb1062c5ace623d7000d336

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ed82e59e3d0ea083f1f0a6662ca533f

    SHA1

    61c90982fd1f869b58da43af6df9ea959260add3

    SHA256

    c97cd23fb86f798bc47b1271cbfcdcfaad266b8d8cb3a449f1b0e948323a61c1

    SHA512

    d71bad7df4a3c6fcdfb3da1a379ed14f8265cbca01ccf4775659010ad71f30db36bb6869fad9f8c1b424af71c0da97ce5da9031a57f77566d2f9e358233ceb7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdb04334183289537e56287b201e0cba

    SHA1

    f853a362da97b2b755f3ba173b3fffccdea57f95

    SHA256

    d2e548ec103fa42b28ac99f3df83b9458e5cf7e2f71364054da138270a6108ba

    SHA512

    d361574be69e2b0950378ec85ec6cb307719e135a4339c4170dd0afa4df3287631838a8ff354f28bbeea87706859efb427ee8b7d228942164615049f3233f3bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfe418ff273a8374b8b024fe769cf351

    SHA1

    77f9383428231b5f8447ea23d322b6c74821ee88

    SHA256

    d53f89473272ea0729d63cb06f7ec64f19cd7a8cf02c0e84d6afd3f4008668bf

    SHA512

    0539acaebd9f604c7d2525afbd05101907852d7534c0162a0b15804ecb937aee68b94faeb0be049259a1c909eac9eed2106bd13048f44c8a361bed15aa5133c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d68d0dc93f47e2dbbd1ac243edb5a55a

    SHA1

    07bf50289cef1efe2a0b2e042cc43019e4bc783a

    SHA256

    33503ecc5afedd14d676b1f0e0f8f0f6c77f90a463b8c800a48e8dac4de51bfa

    SHA512

    58179239f7c71245b191669926144cb833c5b604cd89917069848047e50fd09220f063dd1361d0cf66b83efc7da538621cd27ca0b54a5a06dcdceb43cb8db23c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a6d3c7c0c0e33e5780f7865d6660ce7a

    SHA1

    295aa7cc45f3791a89a7578a7afc4cc2ff7c5822

    SHA256

    7efa7f4bc91773bffc481445dac18e4d15c5fea576ad14f3b56ff1bed049cd8d

    SHA512

    c6f29b0142e5d87ab122d6766ffac4af5fea1bbc8f685e2b4028318d849f6ca775872dd3ac840f63a49dc65e7543bb9e968745b02644cd31918f2156a95e6b0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d7edc29c1ed8f444d45664432442e11

    SHA1

    c27737afdf45181fcd683420a60a8ea5faf33c93

    SHA256

    5d698ace1355f12894ec3563f9266640f1207e0701e5ab71f34fd294479e4fd5

    SHA512

    bbad21c66795295f21a07e3e562338c476f47ff337b57c0ccbf6b5a0c346ed1312b3c5cabe8d59600fbd291adb249fb1c2adf5700a95271e16155e64787fc7f7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba717cabaebeb76082693fd7a3cb6011

    SHA1

    1b7a0e1b99697bbb1e084f3cd41cf1a2d32d3b62

    SHA256

    aee12ecdc6ff8e2275e3fe00a230022c931b8eadd3312c1da14b29375b016def

    SHA512

    7ed17984338ef0e1f08b2ca6dcb998a55971c35fdcdcd99f4106c69766d6c6546e59af2e9ff8716b66335b49d6252d971ac897798bb3f5ba2d23d61df72c2e18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    583309369064a807e43a998c4fa86030

    SHA1

    47d39baf2a686d85c9ae44dff30d78e59fbcd408

    SHA256

    e144c5e82f1fff81f12a23ed7c2da6134a6efab934d8968732aeb12bd55dc99f

    SHA512

    11c226d5c0220314a55a4949047b1ce56a011911f9e6ad6b7881462f1d343464aa2f12d5eeed0795c4e0412f208c44e2d7900b10ad16e1700c893d750570cad3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    70507b831aa228aa7b410eecf75504e2

    SHA1

    420e06a44b3dd1555430f23da2529be848937e79

    SHA256

    ff34aace419dba47498dec52d9faee81badecc86732649f5b6019573715bc096

    SHA512

    50b772c2e03825a16640ec56c9a549bd26347540fed423f74361a5ce7baa8a64e8826b7b2dadb95f9b3d9fe403a019d79285a944e8f8777705b0cd42aa5d4784

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    df5d15034cdee7bfa63756e1e4a35a3c

    SHA1

    194ba8abde9e93a8a45736387189eab0523b08bf

    SHA256

    92336038f9086f9ea253f2003929f2d85ec97ea487534d9de84230530e49aad9

    SHA512

    c9308fcfb5653154a8e0bfdd908ba4c134e33410ed9082ec8083512ad289c6c520900ad007e613d7285432d47b6f01e21311ad9980f396876346c5d3c9e575ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42cf68a4304c8c7239c79d9e119dff01

    SHA1

    86cb202c8319ad09e47884a13e0aa08a87ac2f52

    SHA256

    b3c7d70a8fbc68bde87cbb36979d347734b2ac83931632163366e7fbee5b1141

    SHA512

    c024478d0929bd3071f87993ab7f24fd01be07f16e1e90d8ef4102c7cbf95a4efd1b124a5ab86c98304062a521e1eee83332500f6084d31b1e2ab633eb54fa9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cb082ca4ba526cfff4e869107243bab6

    SHA1

    80c6ef69bf4b461065323d771b3145e36acad282

    SHA256

    0b2872680f924a053ed5e5a958e1e902be4d1e481921e0c48ff225d2e0fbe63c

    SHA512

    127892c99a305fbee852782e0d2fdf052b097552c4bf350067852be6a91910608137617a5ffa61c72d66ee50b9b3bf644f0f7f4206c899bf908db456def52603

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    57ab99b873902f5920abe6af8bb7ec03

    SHA1

    7938d1d8e8c7fff592008421c2d8a4a0b4ad176b

    SHA256

    117573846844c9ec152cae3016759870e01070c87cde68116f5d3c737608eaf7

    SHA512

    f289dde65a112a4260f38c912644d70a23d3f737c6b20d671205a97b22d566844e1220bfb37f4bf4ea068a412fb30b6b0b7430aec2f84f21890670f4d7b745f1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3815e3567651a60f75b3e57aa465bf29

    SHA1

    c7b6149916bea83ec823ac66fb2e784649a20623

    SHA256

    9072ea23a107abb68cc31554f8e76dd1c2ebd96a40f6d638c87f6e58afd835e5

    SHA512

    c6b65d13bf5b0252ebd1989eed8939352bf4e61bc5feac3a88e1eb803ede3f2e3fbb916196640b1ad7a9056616ff53b89525e940d358619fe169c54a29ed73e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f88ee0df96cef70094c9f9e3b1f1a25a

    SHA1

    1162698de4f425da5045e76ccd954d6bdae28698

    SHA256

    206ac816962fdb79a5d85ce27a84bec6512bc2cc7dfa21ccbb40f61d3e4cc4a1

    SHA512

    19d9779119cf612ad90b906b645699353f711e12988fe5771ef809c396dcda8c4369728d51e3e477d22e6ca18294b1447e99010ad7ad26de3917e7e8dea64343

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1249694ccebb85bec800b9648f10943a

    SHA1

    edd05b41a226c635c7c538fe02493ed67c7c2874

    SHA256

    d40c859b0e4440dc96f7bbae5284634b6da7df7d7ad9e7a275ebd11063fa23cd

    SHA512

    23e64d0ae6a45d3f3089c8741a8a45d8b38258b4047032ac527afb098f60b1e20c98bf331c43f5092159dbc71d48d031e192cb06423fd6f2ba44984077c93907

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37e6cd9adf53c02f56f824f89801350d

    SHA1

    e92fdd6640b63151fed7e87fa20204decc137aae

    SHA256

    191a4e010ffe5cc713fe41ce4f11106e46d212f8066ce5a95a534df90c16cd68

    SHA512

    7d081badb9ab6dc117cf0268c81f12374d7bb83f2c30b322663f34b891491b58aafa80466f56214a2a1c16177b3878a57f1a3262a20246e56eedcc6be61af585

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c18370cc517efdb5d54c957687eed256

    SHA1

    052c8d517c8c6f6d3c98af21afbdb8e1ec2f11bd

    SHA256

    d71d040a689b8043e5f9739d14c665e3bfbba559abf8ddf20239924200250db8

    SHA512

    94756bd745b61e528379a88e27f8238dbb4fa35717109140a48e152bc3d89b4fa68c37c6f20dd0efbcc2b2806d189bfdbbf4eb243d3b9c143f0c38232085c8a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    8692a9a4e3cc9dff5123b2aab0caa22d

    SHA1

    f7055d80c478b2df713c78b00630df26c46dff80

    SHA256

    a5660c7ed76fbfaab17b4c4e6f353b7d97e508e058939c76ed3ef9d086c05e82

    SHA512

    3fee086482e34bc3bc2325375afd4aeaff6568746651a1f53a4a3e2d8b3c50a3e1250a4a4b864496b03e2f4021e9a1373c4da9494e0278bdaa57697570b609bb

  • C:\Users\Admin\AppData\Local\Temp\Cab8077.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8089.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b