Analysis

  • max time kernel
    113s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    19/09/2024, 19:25

General

  • Target

    ec08d8d1f68b2aa531060bca84a794b3_JaffaCakes118.html

  • Size

    461KB

  • MD5

    ec08d8d1f68b2aa531060bca84a794b3

  • SHA1

    e84b36fe7ac0aaefd81f173e950a2ad2e222f3ce

  • SHA256

    d8bf967cadf7b45ed357003f8d62e1028270b3ec682923ae386101fd48e29e26

  • SHA512

    fbdd71353744275cf79f6d7886e008e5e2a099a04fbb16f3fc44be3f0184f689546c94a43c3d3f4ec91fa00a2fc921e1f8bc837d3c9a87416628464451a65265

  • SSDEEP

    6144:SRsMYod+X3oI+YIsMYod+X3oI+YWQsMYod+X3oI+YLsMYod+X3oI+YQ:e5d+X3Y5d+X3F5d+X315d+X3+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ec08d8d1f68b2aa531060bca84a794b3_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2364
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2364 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    06ba14423d5c0f5fe198a99abe43d04f

    SHA1

    d496e4bc19da90345671e1af7104bf56bdee3699

    SHA256

    c01f4cf0d6b9c14e8e10ade66e86d15113a18b201de266ac004ffb4e9650beb5

    SHA512

    852323d8686a0895e6af1e0aa683f30d3bb993a3a0e7f076e33381045fce79ba54f85715eef88cd18e7606d7afbd48bbe47d6cda7506b10fe55c3f6cfcde048c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5a27a9e6afd5aa32ee2e82644fdee520

    SHA1

    814e59b427b2a235d2fc15b7d2550104c882444a

    SHA256

    fa30456b316f650c6c6da663cebb42019bb1a5ede2db81c7cdbab0707a60ae9f

    SHA512

    df549ab4efff7e74b1ac678ab8325547ddd9e17e43ec1c57a7ddd5a8a8f7bc50506aaedbfd2bcb20bae8d0c8166fafe98122a3813b69806a8371ff990275682a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    17d57ac560cc86925a6e5dff7bfc1aec

    SHA1

    1d8285d01275c390f5dc998e55ab32d84e3fd932

    SHA256

    2b9c8277138bf82cd3277e74b818cbb20ec549e82e2589cfd9350fc25c76da94

    SHA512

    d1e01c95242a18595c640415c86d8d23e3dca14529cf49cdde748d8f36c65bfe7ce21e02dba8fff6963862eca2af5dd04a8f1a122965e8b725dee248978fa4dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c10177986cf4858a586eafb3b3024228

    SHA1

    41189caf207885959736f71e2b1fcc4792e3cb45

    SHA256

    4e6878558c52be74a9e72a22a017e59ded639f2f74ef3c162ef758701065baf7

    SHA512

    a64ead81e43e4d4d7f5c7453ae339b167bed940b4330b61fc7cbd8b86011ef51d7a22b1a9281df0c0a73cd3cf93eb0658ed46ac74431333b52177eb8b9c6df22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47683549c0726f2ad64271667092a9f5

    SHA1

    664692db136fbc75fd9f5bf894d03d4f8ad65c90

    SHA256

    3ef5e88921ae059e26d616f4655daaf24f60bf400031eda24505ef084677cea0

    SHA512

    16085c1ee92867ff67cf4754ac5a8abca02586e89a50a6e9d773d108b9cba3e0afbb8a163b3ad6b67c1afa831258d10f46ee419f2de773041d7a85df698cf1ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3621743f0df789c18cb921957a1a47a

    SHA1

    73aa40dad1234ba58402b7bffe88089a68e241b7

    SHA256

    f88faf2fa5667fb72a1bd81d473e07c0c75415adc106b2164d39ad80888c13be

    SHA512

    bd4e8eba704bd71c05cb2688211e47dc0c2cccb34dc59900e4dda7406329d557945093ed2d54f2d582e864e24634039e8fd93d5e118de4ab0c31beb942112fc7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c8e9cdfc4aaa3749459db297dc4eb973

    SHA1

    f0b8c2ef7b91f970765e97da075f1e0cce69699b

    SHA256

    fb9eb60fb96d52cd805d09d040afcaa22e265a117ac9610d13788935ee0e2622

    SHA512

    9427a37a804aa9e9ed65c31547bc48100e3edb33af711620a348b7c01f4cbd42ff6ba3b14c097951e288b0f71fbdb0fe77b5057c5c43336f2d10aac7c80bbbd8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b66fce4ce928d65092d9decc9da31f6a

    SHA1

    8c3b94a83ac69df2d22ad23a3ac9614370aba986

    SHA256

    e1041f26bf50b3fc1592d48804f852b33692789d1bba64db443d3453723aa7d2

    SHA512

    9df6bf420c3b18d5a8a7f6392aa05498beebc8afbfb1b5fe1f3d8d5b37c3cdc00483017204743253ecd55c9e07a9ebb761f64f7a67a79f5315450c6ee5dc483a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4678737f913506f933406429c985d51c

    SHA1

    48a73b697ce2818c4852481080c5d5d67d1bb289

    SHA256

    2b991bac6c464dddebd637a2ba94d3170b42316bf5890205aed44c900ef1b97b

    SHA512

    d441ef7e4693fa4520043173611e33e01254ed197995e508c65c09a9a95f6562bac34baa6b37ec835189b36d640e90f9bc3dfa14eae6e780121f84346ba3579a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    617a0c2295502d695f16666be59fdaaf

    SHA1

    34d545ca47e577c5cdec7313a75dcb582d968455

    SHA256

    4aeec84d8377cdc8078bd1aba052d9f3577198d06fa250711e160ebd24d652ad

    SHA512

    0708a4553b1bf5a148f7aa76b7e28dbbcd06b8a11ae1842326e4fc92ebbf50775abe74e7aba3f5444f62c77a96e0b1758ddd58b754301e72b1bc65c18a1f3b44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3c78523c890843e19b97ed3613a3f020

    SHA1

    e9998cec659a3d2ff837fe0ae865f8cbddedf044

    SHA256

    077248109c521d89333b05e0ae7f4e623dccf52f7250856b689a235b7926f376

    SHA512

    9c868521261a01b0c640633932d2341c38407ec1206f4296a0e6d0650355a162f7ccab583e57f1ad08a3fd2f71796e67629996f4e0c03ddb5a1b138134e36d2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68bb185859a136a17914c7f63219c5b4

    SHA1

    de60bf7d20159edb97afbd0ed778fd129d133b9a

    SHA256

    a64223afd8d6816a2916b3acf851364e52083fe8af51db3a6a1b9ea86018c656

    SHA512

    2fe725501f919d1b004e259ff9a0e45cef2e9c2fb74bbf5c6d525217bb652b1d8f701f179f46523b6b5e4bb5db743aa981cfc5a9d823234e1958a3d88a39830b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be7b8a2a391ac7641df23aa8db63f7f7

    SHA1

    4319e486d151425294f1309498ee17c021556ccf

    SHA256

    5a774c68319975aee57663a3e201e183cfe73b9e3e428fe82af3dcc17a91dd09

    SHA512

    4666d81889a66481c2eebf83a6a1a3eeebb5d51b7a043940286fccbc2fbb915898a9fc4cb17cccc9a8355d89724bcd37557645cc6dc5e63efba97185dfb701c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    343996a02aac7f51b2be8f9379855f28

    SHA1

    b4f81eeb93039484ab8b72a97b993d8ca5c7d0c5

    SHA256

    d7255a7ab1ccae10dc1ce5be857dd1e5de1a3c3bbc205d409aef7964aca8e63b

    SHA512

    b5b4197e270960472e7660b5cc479d7e1699de447c34fb463830a79edb66c576b1cf7ba4d924fd5235466be69b8eb7668a52cc29719867eff68fa7cd58c9f722

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    171cbafcb30296603205ae8fc8390b05

    SHA1

    188a595534710000f7e409beafae39cabe81ce7e

    SHA256

    0cb326df1feb813ee3ac16681ad8cce0a95b48e40a43edf419c78d34c68dd572

    SHA512

    99cc8cb8d4f4c4f70c23ddf01fe712ee7a285541aa93aa1bbf5f4c71df4213f1fe8ce873039bafcadb3d4f06ccb446ec5aeaf915fbb8684252a86f371dc7bba1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74793458643a8e8643b7924b00453763

    SHA1

    7afe8e48e30c3862d4e52462091cde51e2cc8f35

    SHA256

    e8660081fe00431c4914aa039799b4b30b30fedaf9929f58ade9ec3aa4a33ad7

    SHA512

    b19828bde8c9c175a618c8289742cfedadf21ff9c84a85ed5b24ff0760abebede9d6b649f128b7a8d34b609b8a5586f2967c350343c64b71309e917015fa079a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3f095ca8a356f374b1960af5ac88aa2c

    SHA1

    7c96f5975de0fbe6bf72da1a80f355e77d770674

    SHA256

    b71a7ecea75c0fdee2d0934f05cc79c090335487218a00c15e711808afcf3a8f

    SHA512

    56eea7367fbf068305119c3eeb92a4cad154f9729318e7762ece9f17f38ae8748da404bab0a54419feb305473b01a233ab9fe5fd10b8cd451ac64a1952dd3760

  • C:\Users\Admin\AppData\Local\Temp\CabC6D9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC7A9.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b