Analysis

  • max time kernel
    117s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    25-09-2024 15:58

General

  • Target

    f65b8f8fd286b506570481198394c78c_JaffaCakes118.html

  • Size

    271KB

  • MD5

    f65b8f8fd286b506570481198394c78c

  • SHA1

    751f1b7fb6d3d8ed828180f931e2594e939b6bde

  • SHA256

    5042ebf0d3a0272dc8c4b6b8cc594a9993a01c5be0748206307464c09bbb0e7e

  • SHA512

    605987afde57f5f648458cfe833f6f036f28826cfc0ad35af69969cf083d84ea5bc12a7d0c3ade74d58a19d16cd7a4f109c056954caefb9a048d4c8d3693635b

  • SSDEEP

    6144:e4yBGBFBQBeB2BBFqJjxBIa5IVz7ESXXDyJuCxx2:ryBGBFBQBeB2Br+mzlyV2

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f65b8f8fd286b506570481198394c78c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2672
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2672 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2320

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    c2a211ec07b48c5f2d7015e1c03c133c

    SHA1

    e743fba945bba750b04309cfd9f2139a5d2d2998

    SHA256

    7cc3b8dc753a31dedae1cd382da7476546f8f8159de138c789533b235f466967

    SHA512

    b0297adf57ffa8270688079a69f18388a9e69def17b0448f343e73ea50c937e851168388172c44b779693b69ab07fed6a3c81e1ba7a9616b40d8105211b09e78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    abd6a9acc4360e8d855e572b2af59ee2

    SHA1

    1d4794daafb8ef86423d0b327879590ee57d46b9

    SHA256

    d9ab79a1ff42345e659acb65f275709b1560da3af31ad7f2277f130b0b82e6bc

    SHA512

    05ad978e68605f55731013df29eba42f6b7d9c1421c12f2017e9962b782e5281457574c5d2ce922de7b400c0b059bedfb34ca9ed2661a94f8b004a08f9ad1744

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cc1d6ee46605864a07e74d730b88cf2

    SHA1

    aed0297397d3dcb10fde904c9d827f57d8e95150

    SHA256

    f6c31d625aa2dd99f0333f6f417c5cfa56fb91dea2917b01ab51df815b950e97

    SHA512

    e1bfd6779719820ebc24125baa3fe13e7a9fcc3a4043c380f901b4f52dd585ad649317a10f4d2ce3830446ddb9486d993c960e15ccf4b29c9ccdf272dfc8d34f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b3a2c6bc57342befc144a6dfb077b091

    SHA1

    b4d913b18f6bb8653a80b06c80203d987ccfdb8c

    SHA256

    ad063580fa4a2ca5a58f94487e75ecb7fb6d749ec8e46c7a7acd1c28d1f2affe

    SHA512

    ebeb8494fe74c2c7882453a87746f6ed04c49cfbf75d8d43a35130b51a0f854a282c8e189b40f23d6c9a143235a384cdd4d3cfdd56dc07f650dbe883bf04c258

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4ccb64638d621a25559c367ea9e0652

    SHA1

    e5edd14c5169356f5b820c26ca09f294cd131b2a

    SHA256

    45261b9fe90169add0ea78ad3d3fd8c5d0817bb7e2ec47ea263958412c4c8b5f

    SHA512

    bd2b5c597efa0e6bfdf8571f21c18aa7c64d3b4854cfad3b9176dacfac182c5ee204203dd449433dfa1c45a8895680932019950ce43b24bfd21a24d5bac25fa9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d177a02f79241460a8f05900940b7b73

    SHA1

    174b8d12f4e860a100a059891de6bb534062c335

    SHA256

    e0d649ac9d16c96b4fdd6fe003702312cef0cd0e57594abb1e984fc8c269f8ab

    SHA512

    f4d825b82109cc00573c6faad1baaec49ab73b7943b0ce6713066956d39b32a877053b36fd30002c15fbf779809a7eb74e423be1411c40711b1b9c08072a2baa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b47fe67389ee896f4ef4c321ed5da3a3

    SHA1

    d2c8eb494ee54d562bbf4440a5dfc29267465f4c

    SHA256

    356ecb18e41223faf6d65d6d283c09e5e132599ad10851740871ed6fd09f7b71

    SHA512

    4bf0363668015819f41856076200058da56635b6813ebd69a7cc1c98d9daa4118a8d2eee2fba2038590fde32e742919f8b6f9893ab190328a43d705e49dd6eb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a65687c487f54ff5d6b426d641623d8

    SHA1

    17dc4264d0cd088ffad4b20cd200b80db3c2ab54

    SHA256

    cf78a9fee9b80fc7368ea0283868c4e5cea3dd2d245634689306913f24aad8b5

    SHA512

    d8c3cfebc9dcdc6281c4a17ef7fba4dea6ee82f9cdba86d474b6f12c201017d4343903cb541973b442121061084eaeb35d8107e37d492b5804ece685e83ed361

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6391fb550cf42af7b21454b6ff93879c

    SHA1

    5d6fe36d79cd557f42fbc6a75328176cce94b5cc

    SHA256

    339b935b567e3fc4c6c4d1f857ea094b808c48f4d804aaa0836fca5dcb18c773

    SHA512

    2e775c95572b0c17b571330a25e96a3eec286dc7b4183856f43fa7255736500c690a81aa7dea69f9f0409525fbf5590a822d82cd7758d9dc36f367aaf574aa02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5485d1927ea3fdb64eaca77e209bf280

    SHA1

    8fe25bc75c68be2cda16334ee6be1aebb1e125b8

    SHA256

    ac331f0f873f960d089f23ffc74e2d1ed5eaef364eccd939889dfcfc140c494c

    SHA512

    cd73a91ec3aff9e1804c8754c96e0f6becc4ea48bf10b74962e52cdc6cb982c4014801ec4b9c666dc51e79ed70b44dbcc60208e2e8587f2c2ca3f47aa9f20fe0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e99b511d5026fec2d1b0672e2decca9

    SHA1

    e915422849a7c52e90342cf14f875e7d394517e3

    SHA256

    df0374a6c1731165784b2a6af36c3d3a4b0f6adaf2fec26e27db80b19d5fa57f

    SHA512

    410049e7a56c4e35a6145ca6dcc5c630ea866a551c18b4db343902b3d4803d4def1dab106dfbf9840aa8b228ad999308f0440471f7931851c393b10ab4ab4796

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ad78f5d7ad8fd69db12d44178a1b7c7b

    SHA1

    e1fcc30c0e63a82b1fa622b633ffdaef19a7b57d

    SHA256

    2b756d0c9ee11cc929cc77e9e344b05dbcb72187d16e4e66e138baa08afdc8f6

    SHA512

    683b1d3bda19d0827d0daf89b6cede309175a9a07fbbeb1fc12c01b5b4d148abab810f7ccdf760551738ca2dbf0461ab5f376b5350491f68892361ba45550949

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    41178faeeafe24a259cc30b511bbeb88

    SHA1

    82eb3e0ee39a2dd2f1fc4218bf8c19f4818226aa

    SHA256

    03f116ed201fbae08df197b468e3891ddcffcd75a6f329df10c522196fd1a2ee

    SHA512

    8405ce61fccbaa5c36672dc88dad1bde87057892a0a6f9fb5604a4b06810affa3425b916cd6e1433134e0bc100d40985ac46fe950ddba1fc6439d7f87e2366e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8796abb5bdaabb319eb339bc2c803367

    SHA1

    00c43dcfbe3e306abaaabb03a7b150461a4d27f1

    SHA256

    4d291603c1b53e10c3ce80179ae6fb34cf04a9e42524f50be75f3f1a405f88f4

    SHA512

    b08c790d160f1bb91615ffc1f9cfa2f71840a006ed29abac8fb9b20c277aecdc8e569eefa7740c54bfcde9ebc9fc2e7539ced46990bf1607e87ed7cda332a6b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5bcb483dc6fcc5cc0be8f8379a70e43

    SHA1

    4ec938f9733366c0576b2cc68f2c3cfc5324275a

    SHA256

    90ef818b0c10ed73727a10485f8d93bf045a389e784d1411c3838357d2551db2

    SHA512

    8f733f56f939fa5cbf0a5333fde23a24cc6965bb19fc5b54a9f2de56da508a5b296e09e4e350a5fd16d606fe76a57b78f603f37d543e94e852f3dd43d024823f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f437d0f45350252230d11bd670d55de

    SHA1

    db447343aab25f849111d404fcfc11762f91ccd1

    SHA256

    beb0c5b065ed901ce0607147d86a0f27444ef22ff2bf95bc8f7e62def41a5403

    SHA512

    b5353f3588ff9d183543dc1211886c2dddbd6fb993750a65182318a2c1525972960690e04d35e20b6cef3fd150dd75e2595aafdabbae0aeceeb83b614e63944e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdebe6f20ef6d4db8161d472b3ce80c7

    SHA1

    c4577d96003e870109ee8ee22f1ae2453ef76db2

    SHA256

    989e24d4fb52bface7268ef4cf971b0a4d8d4ab1376911337adddf3b22a7acd6

    SHA512

    bb7a45525ea8096b0500829d4963510ff527e1efb157b1596b9fb0c7665510aefec50c3ebb98230b47d881ea7aa49a875c216b0022c47ed138d2dd566604acbf

  • C:\Users\Admin\AppData\Local\Temp\Cab64AE.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar652E.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b