Analysis

  • max time kernel
    120s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    28-09-2024 04:06

General

  • Target

    fb7816ca200324d91a015ddf85483964_JaffaCakes118.html

  • Size

    460KB

  • MD5

    fb7816ca200324d91a015ddf85483964

  • SHA1

    b245c1b0598bdd06ea6bf542ca75b4b502cadca0

  • SHA256

    79c38d71074900a18d1c66a03b9207450846cf1a518da7a48861edc828b8adab

  • SHA512

    dc34543d2dc37bd7a7be5461aa91b4f4323ea873f1973e72eb843af3b8bb2e74a0483abfd8eb600046cace9e9791d51d500bdaf77fbe640efed7d77da678b7ad

  • SSDEEP

    6144:SOsMYod+X3oI+YwzQRsMYod+X3oI+YAsMYod+X3oI+YLsMYod+X3oI+YQ:h5d+X3qw5d+X3U5d+X315d+X3+

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fb7816ca200324d91a015ddf85483964_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2188
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2188 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2732

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d3b55a5f589351bd4db23fcd9b8587f2

    SHA1

    c6640c239dfb9f277be76e84f5c80ca06d57732d

    SHA256

    30a9ea27713f5e81f17ad3e7cd56f3bad8554e39c7d8538f5e6528ef27ed529e

    SHA512

    b0f7b58b3d848b933067c96913432a3b240db499bc70c9123a2f755c40aaba4f677b51d5eb76b26cd9a93d6788c6c9cea8a21cb6faaff639379e7434b9f94ca3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    47ec18e95f5fde29f0a1a0cc69359d69

    SHA1

    1264118b829e82917e6b41a4c99721daef993126

    SHA256

    ec7296e1871f1bebaaee8b1b5bf4c067b53d13f725b7b68b5498b2cd0e611bce

    SHA512

    6a1602401e37f7c94e4592abd7319fdac40f26aa6ff63140525f182982a307a5111c550d2a29c2c86941802afccd56bf512d023512557d58ce55fe8652c4cd09

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a399a975896debc35d8f3b1d08af6e79

    SHA1

    e83c8343c0a7b1aa014e5003b6291a0bfd94e676

    SHA256

    932a52fd4750bd4cc24b13e643751f3ef15e2a3faed83a4a914758dd22ade9f1

    SHA512

    bc5d19dfd921a9f3bb30326af35fd47a9f1c1c71bc48d63a629c1ba5fda38078b39dc47669f6b32f5d9e0a4a0f2bb714a9d22c3a591bfe83ee259c9d174e4ae8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    817c1641ec97968d6098cec5940c9c81

    SHA1

    98efd9ec3a8fadfad4a41804a4cbcb29a6269f8d

    SHA256

    ef8f4a659bdd70b71fba84a7c8ed7105f496cf8e72de43644135008434445fae

    SHA512

    1e77901f5be2e8d57df55ab167a7137210b3bcf858f324123decd6dfc1708ba7c5af6db825a517b641df15af76a429f352e831759e277f8adab9fa77db83bac9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c45fce5d5eb3586fac2653d7e9af3817

    SHA1

    9668195df823cd849c671fbb2783246e62d3700d

    SHA256

    b546fbb0260b68efa3dc1ed8cc5664994978550d4c4bf53ec7da49ed9ece8980

    SHA512

    5e3f7a1be1cbbc38f2be2ed2050854eadfb98405057be8d56c117764ebff4c6eabe8b25e66ce50b92b5a5687d7ba4391e741b131de4f33523760785652ae2353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e7a08db4e272a5205ec4c21548c8aeab

    SHA1

    da7b6fffa6ffec2e9ab450444efbb02fcf36efda

    SHA256

    c357d79d97cefdc8763c6488f37d69d9bcaba009f5563da1255465ad727b8eed

    SHA512

    5b8a245adfd2cc17248de00fd7c3eb1e42859453a705e0a6f2a132daa7e998adc4e6d574076a866498424ea59e83cdca1b11d497d7cbd49e8222ed1fdde6b989

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a21732b8d8eeb7cbc3d741a072c196f8

    SHA1

    faf0462ff8cb701b6a98db9ae8d59687032933ea

    SHA256

    a6834957b4a13be8aee55fcb2573a0bc26ffaba1cbd038fc8db05ba7f242c9e3

    SHA512

    a979198c96c408848183608a7a946527b5cb1ee607335b3a6e0a325ecfe4513df0294255cb62953d567a1bdafa47d60576d53f35a17664df49306a0fc8983a2f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f7d1cfe27a74a07af5edd59683cb97c0

    SHA1

    c521b54e5d1eafee47b93c7e28b0173465a7c7c3

    SHA256

    e5ee4c2c243f99ebc543a81621587444f0409fa64e8929603419f3e28a351550

    SHA512

    699b6c45f3027dc663fbbc2a8afa47c40f5a795777b8a7097c8f383483e2670589a6992dee55dde725033cbcab92d629d14939181ab3fe4d14a74306d79acf35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b0dcb5d9850a69b723eb46c404f496e

    SHA1

    920a9de50b6297138d1f7b6576f792077e5ad6b2

    SHA256

    a3dc1490450aecaba2ca47b8a75b4cfcb09c1a24413a05b5f19835402bcd3b22

    SHA512

    08422e7611ba0eb84dfdb2d3c6b5ebb726f90de0536387c9c8d0b1691ffe7650ef95c238682af2a970a0f89e00709428a0a353b9107659becd2687a8d2a87544

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6ca5470f6d294e71e82fa983260b283

    SHA1

    ca317477251bcc0d57485ef88cec58e996e6b011

    SHA256

    03358f98c0bf2d9aadacb20d1f78effed020c7f13b70e54302711b4652448799

    SHA512

    882f9d24f081427ace2766e5b7b2d8aca39b3fabb486fe27766093eb2fa7eb3dc48d71014740c27ceaaa7298381af4c7dab375b61ab73479393b75323e52c8be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c4bdf0de20f861d069dde1a3cab1ed46

    SHA1

    bacad84d8b94cca09ab2f9e6d6aa6eebc2881ae5

    SHA256

    b8e94a1f4dbd94ab488a8e1c5610dc5b8373c62ffdf6e4dadbd0563e0a1a0598

    SHA512

    e923be8ea0bad43252d38325c66863e8c307889b3e7168019b4823f567d98783ae9e2842342d0526039d44944ec148f98dc6056cd0bb5743ebf361e18da51d05

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    83320f1f9eb9ad4c0160aeba5dae531c

    SHA1

    672d471355338bd331a0dc66f6645ec928dafa0d

    SHA256

    4207ab4b1cd31cccfe646621b444af660379f77a9a62b6ea3288eb3293a0fd80

    SHA512

    078a2041ae219b3d7406097e2ffa00be735c845eacbffda8005a991d86f7e4ca357d5ef78dda8ba9438fc94854f3f5c2d5334e673fa8f5c8f840a760f39907d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6de54485ac2475c70082897bf9f779b4

    SHA1

    9f793be14b171d19d3daee9b0642502a04b4d236

    SHA256

    69bc6e936299abd74b10bed4aef8863d2722113a6656f5c7a0e1c03e8a1aa5b3

    SHA512

    e577792f73ed2907c6a6a0ab335c25324e9b97083a8ea4cc022469b56ac5aaa89b81d7a2f71c332e03bb5cc46d05d4bc48bf1e60e66a1c7a6002496dfa0f0598

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e42723c0658364b489c9698112f0c61e

    SHA1

    e25546c6c5711adedb59a07437e3ef8771e7b996

    SHA256

    65081f527b79ab6c92f89e7f1a3279dd08014d4010b3340608de957a1cc7d23e

    SHA512

    ab22ffea7dd33bc806ddb78c2bd81ba38116eaeb1fcf0f80d44ef33f6c38d8ba1af8d6d7baea7c84feb617431ec0615fef96e579bf43c01305467c460eb5d99b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db645e3bb13bf54dda2684c4af3034eb

    SHA1

    bd718d496c38a20e0a1846b546096db52f3f3fd5

    SHA256

    ed680a1a143560b3c3370952e3370e667c918cdedb8422d80150bb07ebc54a93

    SHA512

    039d13c9c495b7a640609ef44274c92f07938ddc8b8fa923bd55a8a9776d64553d389841c87c51c8ca9c3e5904fb01078dd34923d484b7f7d59fe3d3cb69942f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e17b3a05b982ddd50ce7c1a63d65068

    SHA1

    79478f74c95c8c8f5ed178a8a2a1987dac883e86

    SHA256

    e78e9d85c6f8c6e1a6e48232c67cc38b39a982440166a5fea61ba2137119860c

    SHA512

    afcf38c03511ffe8647c24e673ca09817fabc2019a0b3c455a4d21fd6fcbfc07dc6fe77393f524fd440392d14bb1b446fa89b62342130e601e30439522e21b08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3a3976204af38b2d82cf2d3b3b6deb26

    SHA1

    19e019a77515eb512a84ac6d31bf225f9d142ef4

    SHA256

    bd8a8674f3be792e24b941d56bb831b133b74e586146aaa3873982ecf62ad755

    SHA512

    13c83aeee7504dbe601b3b516d31b458f172ed86c7568456f76825102bd9821f6ea3430252196dd54365bda038315e8ed6fcd6e177bd405dd2b83b0a77d646ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7ed03ed1b10d0e535a4f566b94c7ad4b

    SHA1

    741cd5f34bd5bb3297a10394cf833f27bd769ec4

    SHA256

    8b13ce00fc26b0b7928fd9fee21a03c7f4039dfa3c5237eb54cb642228c39bef

    SHA512

    d3d46d2391ceb3ad83c26c35f0ef65172f82afe8b909c5ab2c37b620d3144da14ef42c15f42e90d1ab1efb70a05ca72d2140e886eb4676bc154c24352248dbab

  • C:\Users\Admin\AppData\Local\Temp\Cab4C20.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar4C81.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b