Analysis

  • max time kernel
    140s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    21/09/2024, 13:59

General

  • Target

    eff29add22f67bb0a9021386cb99e58f_JaffaCakes118.html

  • Size

    53KB

  • MD5

    eff29add22f67bb0a9021386cb99e58f

  • SHA1

    012b1f3234a80ac7a2240aee95d9642f592b4f11

  • SHA256

    cd1bd99c19f14921b0d35af1ad3f7d92f102d6bc8237b0151517b6e0cd325ba1

  • SHA512

    7e782d385a6c66b939f73f6debabdc4eb121637a5ba9a3bb7aa7df67b6c2589c63e15e1619140df29e3af6b6facd350fec11aefd8cb10c77adfcaa5db7b9e639

  • SSDEEP

    768:5cT0EipBLHbg2e2qOrOpN0GzqHv/e+2WPCvZvxD+T5v2:6TupBLHbg2eROrOpcP2Bvn

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eff29add22f67bb0a9021386cb99e58f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2168
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2428

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

    Filesize

    1KB

    MD5

    55540a230bdab55187a841cfe1aa1545

    SHA1

    363e4734f757bdeb89868efe94907774a327695e

    SHA256

    d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

    SHA512

    c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    4261f2993d162f5b47e28562d5628282

    SHA1

    72eca6f86b4428dd2f2ded92e055681a2bba0148

    SHA256

    749dd5f8774fb6f6daf5dfd9cbc774b353e0fc1f8428d590d6df6bb2668229de

    SHA512

    f45e04b9835e9c7eb66eeb4f7cb967e1d35bee6b1a234884d568abf264dd4979e4aabdf6969960721d75ad554ae69556c1a82c4096395020afc68650069c9845

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C02877841121CC45139CB51404116B25_0BE30C8E6128C0BC8455FF6A9904D7CF

    Filesize

    471B

    MD5

    6b7380045e6bc9047b11ec996d72bd86

    SHA1

    2decc0caa8d57938af893b75c54ce89ce3d49273

    SHA256

    5c78f0c98613c9b4ba1c9b3f68c1be4428fdf113cc33bacde8eca0b4850c924d

    SHA512

    26432777fd2986bd893ccd18cd2462135f891ae204a7acb427e042c49e2e999b79e7dc6eac8f43bcfa00e3e7f2efbca2c8345c463fdcaf3f72e434d392bcfe8e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

    Filesize

    230B

    MD5

    05cb83d9279c8cc37ed13a2da732e305

    SHA1

    c311188b1d111f9de78354f6fbf15a768853fe16

    SHA256

    425cdd3ed6c947390813014bc44dc7d2da42f5983b737a89deb8b75f76b2758f

    SHA512

    e3c865ea7df97f0d391e3bdac4fbdc2de512f8df9366513c0a93ca0d411c4c56690cb811ccaae38549873babc263b30fee5d222333f146372f1aba84288e102e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    234f9a8dd89618470a5467447ce19070

    SHA1

    f7ab0cf3ecd20c53ff133f9bb0575daa45403216

    SHA256

    abdfaeb20da12de20f0a26a30882e348ce206a4f78bef1659cac90353a7229a7

    SHA512

    a686ddb6e755ba9366fe9c2cfd6b0ac80be9b9e399eb76bbc8c046183b8270f15d99b0e7a821de148b7d40f53206bf7e85c884402eb25ba7328d7bbb2bec8533

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    918d675167f3eb84e76ad57e5a33088f

    SHA1

    43815faa3850d9c330aeaaf8878a85b7252e91c7

    SHA256

    4f7c8cf9257fe02515521d427035911d9e9b5a0a3852a3bebd8105acca5ce2e8

    SHA512

    7b4c17ae5bb7292cd7cf20831e3a247622a4669a279cbc8a98e44052e7d74dd24496a171d41dfe372f1400870221e0ed26fb3cc090b6fa5a978264e253954c9c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fbee172885e6306bcec304bad592f751

    SHA1

    44de6f070a7be5ef8034832e16e4469b891c2caf

    SHA256

    e3457ab698a3b4200740e87f5d05766b043ccc39f954e52304909fdad7d874fb

    SHA512

    1c242a8d57916b169a1f211dc9c8c1b84de097db1fbb4b2cd160e78d92d706d8685b025d8f619c3cb967313910ac54821755b9499f39ad50651bea81281f3c32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18da70a018cf2cccba2b376d14dc437b

    SHA1

    5876f16189af6f825b011407147f867b02887c63

    SHA256

    1d5c945690be89e20f95382947c71620bd235d9bad2ae1ea591b809ee6d7a8c2

    SHA512

    b33e3a5df9b74233a6a956ec6bc08014689474240ceff7c463206eff780047d982f1f4eecb092bb1a4b7c8d01052038a720c2fd147a31fea2040322eed702d21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b6d516669c059da72c83118520287be

    SHA1

    06aa0b0e008e762c6c3a600d4de5eb9881323613

    SHA256

    a9e9877f7d890551dd5a2513963d84207d71c783c78b464fccd8caee29b624d4

    SHA512

    93b35e11b39eedec45f1399850999eed619840014555e3e5c6d85b494dddba2e6b79017911c3274f8b554c5af796d374ded6d980d7717a81e05c6cbc736b14c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffd8eadf41b9919f3f860cefefa9ac58

    SHA1

    696039a0b3bf4056278ea683f5683af4333806cf

    SHA256

    3e8e65e56dad09743495e63a7d41c85eed257e6caabbfde09e7be0077e6ad98c

    SHA512

    1408860db79efd36e8bc778c14dcf247c212cbed01ca531a2f7f632d3d7fbe643622c0d4595bce3f9bc05a72e45bcefc61664e2d369d5c9c4ac01024f57d2012

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00323aa2c501a936a47e7a2c04fb753a

    SHA1

    bd63466fd18a0e61a9dab55dda6a38019449fa3c

    SHA256

    f1634959c7e6e5983bceb0153459bd6d102aed401d67daefb5374694becf016a

    SHA512

    935bdfc76606f3474ddefd50b4502378bb5cd83231b1f5350c5231799d7ab2318b5a6b62645d2a3b4d58661e9e2fc1b2d0f8308bd3d64b7d6628d19900c48ab3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    128e26b8cdc605cdae2c3a4861565e65

    SHA1

    d8205e05847371d6bad1f881352a12d8623500ff

    SHA256

    4ef5d004b4e9f543707256075687813c9922fdac16b11c754ccee03a51593ba5

    SHA512

    bac293c84a29e34eaaeb740d966712608c352716772e63b81d6cfd0c7b06bd306335210e63fcf53e14b548d5f9a576ba13a5ae62e0981ae7fcf70b4bf6c254d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8596b4a6fe32e8af4ce120e18fad1809

    SHA1

    506934b91a4a68b50211ee21886e567c10ecfee5

    SHA256

    3828e9ac328f0879ce541cc8175bea47727422d0b859311718826a929f1f74a7

    SHA512

    2701628ed9191a52484cd5cb2e283b77efea0f0169ffe3ac23a8aaa1e12ed10e245945151f8c2ce827f39c24741b7e1d85f15e6a2364bc5c2a6f96e3a421a5bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be38507a4c19f6cade01c4cc2cb975d2

    SHA1

    4414b6b08cb355b6fe5d57de2648f55ab24826f8

    SHA256

    6ef72b68e38e925757c238e4a27739492e2708802592751e041c90d7a8d6b429

    SHA512

    7952f7071f06423f8dbcd64a0d54fbf78514874b795aa4ec42ff180f4a8b8fd8a64eacdda1aeed4a5c822f144841d594758545fc6523e65fe8151a0f78517dce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bb388bf2c912c5ad7927ce132a55806

    SHA1

    2266865206c1f79a03a5d37b9bf5927367a0f6e0

    SHA256

    8b1b0872b85f46879156015724662359411b6b46cdec059163eb5077c1443086

    SHA512

    ec6b74024963ff45d68aecafc7bc3b1b9c0ca42a797df51ea9586403c022df4342f6ef4af529d114459a5327040c4a50b92282e0bbd02ae664ea3359467ee3e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    898223026da9ceb2472676dcac13a003

    SHA1

    bde70f3356b2afe240e695e2a1dff24d35f33dae

    SHA256

    905b279a7a1d1dc8c8829e4ad7a4aa454478d814ba4fe0140aa662e721ee38e1

    SHA512

    35b9a45db98e693dbfb40355af52b1adb4d9be0d6e2dd21971d3a629f5b8ba7864fbe1ad9d0d28ab7f242642a56b72f80763e8db9867e6387e0370535da546b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dea9d0d22923e8ea9dcfc55c2e41dbe6

    SHA1

    bfff1b3d589ea3c0aa462f4e2049f520b9620cd3

    SHA256

    aae74231220a121f6dac27a6b3da065520c2962c90921150110e9eb6f23a76a1

    SHA512

    b2390b4f8cf2d27c32ae7b5c7f0077837b14ab129b69f2ef85de41cd032b9c751fb611d0eedc46a5a31b9aabcc2fb0535475e5e6a00b998bc04a3df913cf9ba9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f9d05b302fb52e75efc65ed4a724e8a

    SHA1

    04812dd02342d2fe12ddb5998c2533dd54eb981a

    SHA256

    a86e696ef404e542ce0364ba4f5e6847b8fac71a94855f92d8c45039a46f94cd

    SHA512

    88b121e1d53c6eab231cdc47a7c35a8d2573b97442e734c038c5a94d8dddd9f51529486a2042aad9012694c43b16bea03961d98fba51d37ada7d65e0d4e3520a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5dc79ad66cb7211a1d1b94b679ef6afd

    SHA1

    3ea97ee4344d824ee6d8a8eb9691319220f16598

    SHA256

    a8cd3e282b7f65490ddce87cea8d690596496c4dd48fc483756c617dad42db6b

    SHA512

    48af2ae1c4c7e78b3f10c483fa0ecf506f141ae1c1055ea8f7ae34f3d6dbadd72aa1d27fb4c3d6ce9dea37ca003afacec5be5322c9c940a2d67a64bb54a6c216

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee349b2bc028cf5438e9210fd11d386f

    SHA1

    d24399d644fdc57014703e5e60f587fe846ea6a1

    SHA256

    db0b95137c43b10fb5e0cd42bdadcc0437e37c5865c0a9bb070b7e623d38ab98

    SHA512

    410586b836604e4ea5c319c234e67f84590000ec4d874d695240fb239aada058f61eef62b1fb335e4732dae3cf8f891e05eeafa09f330507c7f0d39edd030b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0ccbb3ddbe1a92b582766a3467d0026

    SHA1

    7280b49bb81693e3a41ab658a6d4fcdf5915a9eb

    SHA256

    9ecb9760c12d8bdbaea2082971cd20796ca241bf4dc13c34c6fd3ee6c1bc4b20

    SHA512

    0053d14ca4ca4a1a8663fbcc4f23b5b85ac48c6a35568274f2a6bf89e5c524e5f220d7a9f8529bd81353b6166d1112deb6e922f5ed404a67999c3ddcd9e3cf20

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\D6V88JEY\plusone[1].js

    Filesize

    62KB

    MD5

    2b72da5279576c62e6e3bcdadcfb86af

    SHA1

    93255909ac2892a54fcbb2a4445ec1aff46cac55

    SHA256

    4243c6d726cd3e7056a4ee7efe04d9eb84ee713bae54f0374d6f8d71d0822481

    SHA512

    51954e78603f08d4eadcfb58593624100eb8ecff1bf3f7cf4c6c43b5cdb317daec90e6919a71f12e850f424e8ec7e0bf51a9c782beb5a3b7ca6a8c604a522872

  • C:\Users\Admin\AppData\Local\Temp\CabB666.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB706.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b