Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 23:30

General

  • Target

    fd5bf1a3660ba2da5be70277de43ea9b_JaffaCakes118.html

  • Size

    19KB

  • MD5

    fd5bf1a3660ba2da5be70277de43ea9b

  • SHA1

    d4fb21b38a15ac6e2e0695bcd301ba513b3ef4dc

  • SHA256

    b1b64b2b574338a2e132ed062917df984ee4b96d9fcf6da9364cd3fc36658dd7

  • SHA512

    39dfc076db7216eba24d92040b478e46c31629d262f5af3c5a1141c1bb0a376c5c0271c6a4f932c3309594433bf859a27d41652ed17a59a3cfd181dc1275e04a

  • SSDEEP

    192:uwfVb5nbDPnQjxn5Q/GnQielNnGnQOkEntmEnQTbnxnQmSgHMBFqnYnQ5cNnlnQ1:UQ/lqGL7

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fd5bf1a3660ba2da5be70277de43ea9b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2192
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2780

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0bf29119b75a411b670a6de92f357a92

    SHA1

    662b0e10510efd753302ed7568894dcb85ad30e3

    SHA256

    18f49d2a9bb74c97b7fb449ad72974c87a0a4af4ebaca81d2c5f1e2db29554a1

    SHA512

    78a4035b54b660f4bb78fb2304117502402881fe5b526ac7c0a2d6f5046987e930ad9680ab2462a5b93bfb0a1cc52de026cb5eb0fba923022d06560d02f0a825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9e58a37ac7bbea02efee0d92801d75b

    SHA1

    8fc48891a26e2bd460c71fdf290030a0ca7d81d7

    SHA256

    48a27d8dd41102fbd6c16647b028221b19e7557545cb456dd0c714167cf175b8

    SHA512

    5d59e49ddf125d8ef79dff54cf7e80b01a79b6d36108f8b635987d73055d820e44e5f29a6eec3b6895c15107f6b4546179451bfd969c0fdf7339063f2e4226e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dec28546269472aeabe8767c5f6aa671

    SHA1

    946439d218528ab287aab4f6af9606f83273a250

    SHA256

    a90c6d85a745a34ed47f9db1b1eb854d0a6fa73b4948cc47b6d3e21843b56e3b

    SHA512

    9df7b2d6a1818dc2fa4c797f6509fd220e1f431792a0c1f758277461ad0d07ea829d545b91069561ad24425096a7363d79a0e850f9fd190bc3fc9ac76d23eaf6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b92eff5a08810693e4ed49d5b431833

    SHA1

    683196d507f22066c8bae945133cc09cacf4498b

    SHA256

    0a20f7ee01aeb160453574d9dcbdffbe8f42a4131b6a6650188da2b04824face

    SHA512

    1ca5b736ab1b9ba12639c6e6fc3f96f9e448fba10b2fae2c2f5a4ec9473283b1f2cc7e3f6118d50d17aad601e33fb5a0d870937410842a4f04faea76b0ee5b4c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b266e6d9120d7ad45eef91a306510917

    SHA1

    0fab6a123c11544d000bbe0e4c4d069adc1eaf9c

    SHA256

    8052ca79bcb7d5bc0f99b5eb7f0dc91a896a22d8cefea6ee272046f84891f684

    SHA512

    4259c472681b6309e7cd0f3a22bebd57ad6c3d596703de0b2bf830f4b4801f27aac015bbc86dd1dd0b4a4d03c8de38d9ef36291446b28cb1e9b1b1e2a93b707f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e249682e7292d0e06509128d96208b2

    SHA1

    a5fa9e38102cb079115af0a55a6842897462d1a6

    SHA256

    ac6ab5d58e78c9a4ab7203981b470dbb4de01fea35ffd34a0b8c8b36f3061c24

    SHA512

    0864ebe2a3b4e002e27275d2f072da0da5931eab6619ab73805afd6720623e3c80c8c35d11d7b9283c60e52bbbcca3bad7adbeeeb166253726bf1f6a8e5e2cbf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3353e2f54d9780c827b3841ff421a8dc

    SHA1

    728452c4a8aae21740db9f19b5399d5e9660927c

    SHA256

    14e768033cf5759109839dacf637cf5c650c87e987e528730e7e9b0ddf16fb43

    SHA512

    fbc6dbf900ea50d5ff95610cae48c74473f47230490f1971006b013f388e38aa2814a06de8fd16c25fd5e441153c0b60a88b5297ed2f966ef6dfb0a0df885e3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    62f03c4c36a4db5801557f93b578acf9

    SHA1

    84524f1264214c76150c3b3b665f5cfe06488b85

    SHA256

    bcef5c8aa8a3184632c42975e21d4caf29895fe88b6288d98bb1af34b61417d5

    SHA512

    428bc4fee391f8a7eb437049538f119ebd70fc847d33606831b86ca69be5fa53c26505202975009c95fdd80cf5a7e393bdbd5334457b6923fc370f2b54f26fed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ec390c2a883a1e1887f6a6b0194638ed

    SHA1

    840f4696d01e2dc95f8637a94cd8cde3e2c3f80a

    SHA256

    7be3ca2b52ea79eefcaaf5a2daf319008da79ed399e40f4c7ccbc45e13c61a6e

    SHA512

    3ad1014576d43fb2b8ca13a1182f1af45970696ba7f68769dd42b454af51bda017488b40c662d7da2d38d282d52bd5c459df10730872fb5cc03d2c65cc7c37ed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84c91e0c7db809e398e5868f32da9f73

    SHA1

    3b95f351e31fbdadd1b942ab0c135c0759f9c267

    SHA256

    7da8a525e640cac649a438e41c00d8a9f355f165d343f07634d1bc8cd227e936

    SHA512

    dcd2bdef2e8975cced6b488b4fa75846231c8488532ec2a2e982fbf25df672fe6f7b421b5e4bf1c6e0504002970f80fe72a387e6565abba4fa39ab3a32caf47e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c894cad499cb7558908b559c44c488fa

    SHA1

    ab70315a6ecc919d44c57d77927228535131ca8f

    SHA256

    440bced96bb7467b7b9b63a257ee3a041911e9091b97b0e27d35fc6d5108e9e0

    SHA512

    287b1ef357794395928c1dc2d1de18ad9c4ce4c4ffe56e2d8558f5e2a0b93206706cd5f8d4fb444491135f471582cdd35296cbe806ad9424135459ac7f92e576

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b4b79fc6cb375bc77f10ee64c650e32a

    SHA1

    77ad8115a98bffc48a9f75ab994eff1208f39a33

    SHA256

    6bc40df6ab38aa113d4e0ef115695fb78e7d2cb93bf0b8b6c4e337be3ea16d81

    SHA512

    2a9657c156f5a5211779c2837946e0d970fd88d6c43c1f47e41c9eb6b5a3ff3c60a8deda4f27e1b9b629a316dfe78863136bcf30c4ddf6c10cb59e13055b08fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a80fe4b3dc3fef4ca81600f7b5b74f2

    SHA1

    03090594f21f3441ab83dc0ad782004834a16fe4

    SHA256

    aae4a1d0ad2dd495c6162aaa346ff9cc0d8c49d4922098d9516e8352e9bae483

    SHA512

    0b7c844232eaab8c20be97f837d51e57df73a583491bad38f9eac6bf3ed0b59ac4e01f5474a966b714d23888c055f9bb301271469631026c78bfd4e2736e47e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0eef5273ad61f880879990b2186a78fb

    SHA1

    6a1fec6fe318943c357993adc0c289c234bfde48

    SHA256

    139c609e25bcbc6e1f7446120e1888d9924e840dfccc32ab68b625c6ceb9bc43

    SHA512

    ff4a1066fa09eade99cc7442d59f0f473f4d14a01e392ea2dc823236872b61296d903ed47997b214fadbd9300bc222bfb0f70d454aefd4f5111e08436560c4b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c7fb7f4a9a87e541ae8e62b14a7b3e96

    SHA1

    2dfd7dc1c9eff1d0d588f68592bf443353f7bab8

    SHA256

    938ca6ffc37786c9092890bc6a589e75769329b39bf1d3291bad5c9520dbfe96

    SHA512

    032ec04db8858a503ec14d127575c231727053709a425ea94aa0278fe03fd9d4536199e3e67631ceeff810b86a66c444581655ec1be340b49991e180a66182dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce968adcc644e5810c7c10512d264a7e

    SHA1

    6ff2a3e385f894ef3dcbc11d139cbb503b3cecbf

    SHA256

    23a1f8685d0ef95bde6956db622765e9ab142c6169f0ac319f111eb196713294

    SHA512

    4c8af400e4f3f9f2bb83df97b015cf9e75488b8c3f7ee952ea92eefba5854a1586e1e32376c0971565e4c438425d7af2787da8a4a8b95e49d93ee0c219428d89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    71e43e9ec24ba49646ebfe834a658129

    SHA1

    f358d47b3a1d401cac7d45eb150e0143b80c65a7

    SHA256

    b02d7106f59b077483304f332c0e692bf46e2e8681e0d3342a6f34cd98c2eaa4

    SHA512

    f91508ba0cbf803fcb9a01552a9d9ec385eefc169ef69275ce7cdfc65d125c0dc59cec6b84f59edd6ef4f89b9e882c25a3bfedf005479d8a98a4157dc4c1800f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    24c0ee2ef5e17887c1ec094c6e0d5878

    SHA1

    a91986e99b042f39f2d3998121663bdaa80c6688

    SHA256

    191a2eaeac8960164d66de41fbee52a73304bd06ae2538466342dd686e3e47b9

    SHA512

    e512b60c4fb2fbe9b2ca786fe37e2569f0671ec251e58e206323b1f2d2ab37c8edad4ac4a07bf91bc0e0bdf42f20501c1f9a02317003497d63586527fb3438a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55db5437bf77d5f69401b2410c4aa547

    SHA1

    f40d2ce1a35d8e90f80b8c4a26aaf5e840945ea9

    SHA256

    b3dd83c272c1855e738d2c33c22158b58c1c949c1567810757b4d3310e16d17f

    SHA512

    43c0e0e873cb4fab3f78d811a717a9d021e873424302795a204b4ee51512ae49eb6d4d75165b3e30cfd4c34cadbd942ae4fce1bba1d67f7e2e117cf6b9d99e6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b76743a7fff14b165ee74686665693cf

    SHA1

    580186a5ae1352199eb45e05b3449f75b8130ba8

    SHA256

    af170e866cfe5444e3b0c4e3ee7e9aaa447aa2735ba40361132479eaf4a87cc8

    SHA512

    05e62239998d81cbeb209a05d44482ac1fdc57a7cb13d5076e48121838b5d0acd27dfc1b798869ce401f4cd13832e1b2d020a9c62f4f76dd904412798b7bf1ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83e1bd3709eec9535c5da00a1f99d794

    SHA1

    705afb8aae30574ccbbb8527cc69cf45e3f69c50

    SHA256

    a8051ba26cdafb8373c10bdd34ee6a2610e7eba039ae56067d70150549d2e766

    SHA512

    64c84b3f87a483567baefb5bfe1a2cf06ac44bf38f5ff9dfae7975da1ff9f549425da38be13d3c6963f54c5e716c5356df7367f89da33a057bd6a4c591571925

  • C:\Users\Admin\AppData\Local\Temp\Cab8B13.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar8B64.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b