Analysis

  • max time kernel
    68s
  • max time network
    133s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27/09/2024, 12:30

General

  • Target

    fa69534edf4838a97b59045cd7ab0c07_JaffaCakes118.html

  • Size

    460KB

  • MD5

    fa69534edf4838a97b59045cd7ab0c07

  • SHA1

    b285b2ce4b1f295465b4d53e4da7fb86951d7aeb

  • SHA256

    17a5fcc249f5ebcea6c4c2a9da7a85727ef2950f6146e171e1f39889147f48c0

  • SHA512

    5e1330f7e1e79c7ca31fd4ffbee3b3523b53deb12ba3384cdb2606792c50c1d12fd01a09ceec88a361764075608ad3f7a9ad4e70f0256d0ffe716da53d38f366

  • SSDEEP

    6144:SIsMYod+X3oI+YOsMYod+X3oI+YusMYod+X3oI+YLsMYod+X3oI+YQ:Z5d+X3e5d+X3i5d+X315d+X3+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fa69534edf4838a97b59045cd7ab0c07_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2256
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2256 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3064

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b5f87be7c9928330d6ff8ca580dbbd6b

    SHA1

    7b54fd8751e67c93499854861d7cde74d22484a4

    SHA256

    981be6545b4dc1d5f2f6950005e1946fe9b4b9caeb26a734da3fb834124f89f2

    SHA512

    d4910f6cce81f271937b8a100af1232416497b044a09d335ee502f4f1d64281ea8542147be60eaf1240ef2d31e1dd3a380c57162fe416511a3ceb239431d6d95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f40df27cdab23416843a69fbd3f033e3

    SHA1

    46f4916ec42be399c9986f97b72e2470a9d6b3dc

    SHA256

    43e266f0a7a086e20da668c5df9009683f3a9b0b7b0a21381dc153f84a02f718

    SHA512

    5e9ff71bcb3ae8e45de38de8062300cbd6c3f377e9ece894d0474c23a06cd4b3d1698b47326e3469371ff8555e340a48a7e4a1dea3a408bedb96365dd9138e92

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    208287cd84fa803102dd91be3ca0b3cb

    SHA1

    62a03bde53b31f07dfa949a9cb0e02bb5991ab0d

    SHA256

    3a900d800efc9bc84efeae4fc0154c57b40d48e5ef34447141be4e64b30427a8

    SHA512

    a2db81efddb8094ddb16d12e35984cb2b0fc1bf2e51a19e8a987b422bf9444460a2ac15382c3ed7089dc842a8ea7a3c2aaaeed6e4bb8f20204d4472e8dc2469d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f5bf36ac67d0cbe0b3e4e0e2e4522bd2

    SHA1

    d874c20f17dca4eaa68ace71395264a5959c5ca4

    SHA256

    61e9465413ab84975f83086fce50568b68efc284343be2d66d9386b3495814f6

    SHA512

    383d20555f0dfee1b5400ec5570999945680442c0f53172dfb166c52c17689c294dce0657be3c575885567df38d8f3cb47daf61e2c6cd31de47580bf28d67559

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a922e2826926798845ebf3a4e4fcd94

    SHA1

    701baa407a2324ffaa9afece7be3713f1b6884a7

    SHA256

    4491cc88acd34009f84ea76811b5f1b638458d3571080e012e984be19fa2219e

    SHA512

    586b21b983babf1f373adbfaf8f88ee43be44e48fad53b6fbaa841ed036e5698adcc275e74920c7e06f9b0f357ba72acfc084e5d50b3bc27f42c5c74a82ba3f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c64bca9c80b34b26868b30e24c8d3381

    SHA1

    c25d32aaa55a8683c684cbb7f58147c0e02b85f6

    SHA256

    1ff0ba612f1104f9981637a71f174db9d58613ca607d5a13591843f96a3ec5c4

    SHA512

    45c8ef8f64dbdaab3fc07689070a9773bb19dbfc1a8e98849cdbf4e197de70e0af8bb608bfc5a528cf0b09eda910f4f10f5fa65fea1559f6fd465f82ab09fb97

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f5e0a5a3dae78ee5c762aa33eca10ee

    SHA1

    a831664c805aa19d6effe3482daab71196f86da5

    SHA256

    e0842300a0fdce6c0f13654bce503dce8a06848e07c8df45169c7cf5b26cbaec

    SHA512

    17fd2a89abda2c6ab93b50f02fc754226cbe35ed644336560893280b1478710acc185160769457bbe6af31d9177e8aa3967153b2f3d362da7b1e78268c915bba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4a612e3480877f6c4bb7492b607d21b1

    SHA1

    b06444d2808cd2bf3f160b60ff8e58aa17c63872

    SHA256

    c130f4cd42b2b8c1046226bebb5e9d467560d68d1a6c730ce7e467e4847b5aeb

    SHA512

    b15b4a36bd082ce83d46d5863cbec728a24d7146c863fd4707af9c089676e0740b7f357a01c3183ff39e17f46b3a3685aca6bb3b822d6ea928608d8692c60f21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    904d6b94626846d7c4cb795c3e74d043

    SHA1

    f79ae5c0f9c3f94500234d6478abc955f113c7a3

    SHA256

    0bced8c3a13c39901e988f5191cc17ce830ea0d0f4e59c0677bbe3eb7fb5ca22

    SHA512

    54387f3eccd9dbb2cac47ea7b6f68ce2c086164c375b8bfbf3bc846ae6d94396e1693743ecb3967818d44b45d96178a5d21c4973babc3f759fb30b70cdec33ca

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    07e4344f5c7a8d21f81da925d9996239

    SHA1

    684ad07a7edd832b1c6db7ede53bec5a1548136c

    SHA256

    fd24d6adad7570beaf5caf8cdb8ac6ebeafd20ff97d08004d72aabb5bb3d9020

    SHA512

    cc5f4a3d9a834e894720d315a6c49acde6eee13a13340dbea564a1e968e09e972c3862e6f6c11570fc53cd8d28faf29e484ca5e6c6f07797789f3cc2e60d2317

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    42088c42fc9428109c6bd7bc16235e6f

    SHA1

    704716f5f5c939bca8aff609fa87200878879e10

    SHA256

    933924b8732d860fcb033b512f2079328eac8ecd7d668fe062897595eaa17fd6

    SHA512

    5ed1219b133b29885837cce465fb4a86d3a64de8a0fbb717410923284884cac5f8dbeade99bdc250b48a0b5fcbd5c0a7b0e4f928e1f8504c73b52e24791ea30d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9371439c18b7197007f5510cd613d60f

    SHA1

    0e354e2777cd7d435a99b42a50eaaf905020288f

    SHA256

    212f3419ca06d3f3a16709c5c3024c6fa2c8fcdf3c7dab7a5dbb0beb56ec6e5f

    SHA512

    e9bcde9abb8fe543c40b395b3fb6c06158b64ff83298d1b5e18cf0f09ba107147eb2f0cbf14ea6b14e0f93ec644f9dd3e535e65d8d31a5112b56f2635c4230d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cf66da0804e309e5f46a4b63ff3f0d6b

    SHA1

    7ab3ee011e8ceafc88b3e5983f9cf6aba7dfa5fb

    SHA256

    ddaf09c431900b5f50f2360a6ae0ce079dae86316ab749b40fe2d0ad4c486fcb

    SHA512

    3b012957a2e1fa29bae7c61fa49d67d8dd188483ccaf86ab9e640d6ab12ded7068b51979a3c34c555bf0e2639291541393c23031c597fc984b367f35f10f73ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    98b720ccd881c014a2047e897dded5e3

    SHA1

    1d782399aee28545a6ea84697d08ea99b3beb26d

    SHA256

    5fc45b1b4a85773d2bc837af5d91fe1cd37ed4f8f06b08c7507577bb5bbba618

    SHA512

    b1bf7ba4440fe66bff3801dc05b3b619ca15fb6ea0da58c6526eac2b0035d45b5536858e39f21d07b6e327d328240544ab58e711366eaa656f5c88a847449544

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0303bb67749b6fe69950c43ef5b1132

    SHA1

    49416a7d4b36eb721e1164b0045ffdaa25f7e457

    SHA256

    b4e7dcb710baa50578f405235c4866f11e9d344e8c19ac7ea214faaf750d5148

    SHA512

    9d7e8ad51434d28cb58bf28c8e305ed58d101a30fbac782bd486dd2af4a0b3afc57f9746c263589e7a2a92c1430ef2ce650cc0d4100e76ed8429b8d72152e1f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fe259065d9c51014f1b90d304e81a0c3

    SHA1

    cd788d767f6efb8df172d43663154d8d70a149cf

    SHA256

    2d9396977ed62b66df22909e9af0c916d6a1c6018daecd5c70c547841b5ef3b1

    SHA512

    b5db066d4d3f7fcbe41df3fcbe7f649764599275a6878897f93058ca8c85ca8b41a293273f620f4fef180335e713961025e87adf72421853ea2dfd491c5095d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ecebefd945872a174af779779db0c173

    SHA1

    1ed6ad8f26cccbb7d8440c756d70c919ff94d4f5

    SHA256

    3859b0f97b8266c1d5a26b1158e6dbbc28f134e45391c0cfaf31488b32131898

    SHA512

    4883262a0a62fa158ed197830d748da7704fbca87472cc546bd94b4528fc3d8c49e45dfcae1ea1e0f4896db3a7356b3f2f04ad16d8e7ec7ff7a89a0d48a809a8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    51127c591f374202652903f37c279ca1

    SHA1

    d607146b6db586ddb1cc3026a8fb58ebeb9ab803

    SHA256

    e44a2e988b6b5e4a0d03550991696f245e876ee229fce88d58a5ce6f124c78c0

    SHA512

    dc809ca9d9464dd79eccb5bb13ad76a4da0cad7621b372e0e63455bf1e13f7f3dbc339e0e641d795e0c389db906bfd7422b83eeedc8ce59ea2477b30b85bf774

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44795cf4dd6fad496117e425838d82e3

    SHA1

    85806dd2a7373353c7b9a9866975e04ff34b4bf2

    SHA256

    87fc31ccfac378366e1482677ab5745cff4bde25ffe04cff1d26c0639aa68a87

    SHA512

    80ddbb18027ac3456b07e0059deb85fd85e651df85e664527c3fc9a633ef0ea81d9ff31dd976a5dc613d3d195122439656c8f3a9d3494247eb1dffab5fc6a825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0d5d4c49e67ca8e2357361de53a4623

    SHA1

    85e1884476dc0255f865f48bf415b375c2ae0cf0

    SHA256

    f3d3ae5e89b2d7918f7af965ccf6e8ee2ff533a7c1183f82d09f75c74d725d03

    SHA512

    16a3be037caf70de807ddecc1c9f9202204a6192eebf02ffd6ae30ab8098db2572b40b7eadb59c87e7b921244ea175bee13bf5bc542f3a3c3cdf5d2d7e5f473f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9abcc09c0d907e9c828ac142a7822edf

    SHA1

    cb322a6dca821799186d615f892f8b2cde898d4b

    SHA256

    3b1191dfc956ff556f3bd8aa68961643ccadc924b62f1e8658700472a4e117eb

    SHA512

    ca4bb913ec953dbe5d3da2238f5fc33dc2a615e72e6c35b393ed8caecf157b2b94a357903cf00a840175a06ea3bb9e81bd125790dbc359af73003320cc05c12e

  • C:\Users\Admin\AppData\Local\Temp\CabC2C6.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC394.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b