Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 08:49

General

  • Target

    fbee0941dc6631498e41f2b4fddfeece_JaffaCakes118.html

  • Size

    4KB

  • MD5

    fbee0941dc6631498e41f2b4fddfeece

  • SHA1

    9dc1ebdb28e6d53e9c1cf741558991662efc916c

  • SHA256

    3215ee8ed9ebc9bbf92fdbc0784729020f719fdb6c0e9d4444a697f4e66c2ac9

  • SHA512

    7cc2f9dacf6c45aea9a13b1fc0ed03f3fce5fc5bcc64ad76cd97d3335902a7a2879ae405eaddb2d0fdd6b57795f197eaa8d3df96c0e25638a99a0399566f6e55

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oqjNovxd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDS

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fbee0941dc6631498e41f2b4fddfeece_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2180
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2740

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c32ffdb8f7ba87035c4fe03c08e87b0

    SHA1

    ae38b6cdd09761904820bb8f679eb92f8cd7177f

    SHA256

    de01dc857be25ea1ee561749166fdfdb75f0de587f21a3956fd9bb7883fde40e

    SHA512

    a667d425ec739bff1e1cccf112fcd2813dc8b072d341bf7d7ec1781fdb4b727700987f14c07ce11118965e17fe8d963ce21bda22ef489112eb21880b08ad1df0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2989efd735583538f5a6e535bf3829ce

    SHA1

    533d450713e14ed170f3327717a1ebb3541ab478

    SHA256

    ab3a15120fe6445349a974a20f354b90700cbf2b758299744f2dca6a0f48f778

    SHA512

    f629b90cecf47cbfda85e6023e92a3990ae5b41f284ae932784db49992b98911fb1c98bb839cd46a07afe72d50de9a719a1c8ce8e313fa3d318df60e091b24a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    52b77fab38380a1e84db3cc7ea40b535

    SHA1

    faa9f422c218709853aa5f9d4f758fb820fb11a9

    SHA256

    ba04acdde0346f2fa1ac201e86cffb61370a327516489fd0677335e844ddd67a

    SHA512

    9c5a6983c34244b0d2c104a8ec15ba253c9e1fdd1d87409ad63c700ebb3eff9627d9e66f0c6dfcaaea506c10de3861e29dc18b86b7295a3017243623f9e777c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db3211d5121d3417cc2de7e096b71698

    SHA1

    f2b744e4bcf9104c2cce63702b41ce62172f039b

    SHA256

    d062da4bc91f93ddcb1e93b4a1c244084bcaa524b74ad23ac4aa0a90191b73a8

    SHA512

    461c5fb01f37f6f41e46650b3489507b33b8062d37646bf68617bd65afa599b7015ea9954cd30d9ce4c9f5bd7d20855502b8c1afa9461d610c1d11005400d224

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8a16d62e97cca64ca230d9ce74abc60d

    SHA1

    2da1d602bcaac623ab1eb1d4ec2a828867ed92d6

    SHA256

    abe57a7f90960facff315f6c3673ace06844c3779d1b816bcef8a03df28a73cd

    SHA512

    652c1433a353d5d599597460674de01e57de1b3c5cec51083a7508156257b6043f3053dd6b60f3fca160c7aa4f9b5ac68d5acae2d0c993686b4f5329c41e2873

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    660960ebf748f42551f0d5888c1ca763

    SHA1

    cf5a44b9a758c0a2ce30bdb3108d565e5c93465a

    SHA256

    b7383c12def32c6fbad06f168d787de1aaf93381cfb9ab843da374cbb6488b00

    SHA512

    b66d64b83f8eb3829daeec9698523d487425209b55824d0631c25af72820e000a83278d9acc4689d4c241e3c0230eec55ddc6294bf37963fcd9f75c391e8e94f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7748929a6a7f6232d254926a3fe86659

    SHA1

    b251f034ad8f2fddbd530bab48ba375b877391df

    SHA256

    1325c058ca195c046b52d8a0af7dc1c17024641fd3165924b70eb2cb130ca555

    SHA512

    c199fcf29891b46400cdb150c95060f8d5deae447a8f7cf350775a1a00811bc9fdf587d824d927903e3c216c253f8d7d593a00a0557745aa3372aadf5a1f75d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3ac27df1d6bd44095a1d541a90e1d8c5

    SHA1

    ccda9c69f6af3e0133eaccb6af0052c524f11254

    SHA256

    fc5c9115a8fdb3c0f0b0bd28f8b212ccf5a2affb443b496fedfe048137a02c10

    SHA512

    4a9a08ddfbf4af40adb8e1b04d7cd8502993ff7f2548326a6432f8defbe62672e48e58cee4eda3626d43e7696c918919fd069f5a49a812800ed05bdad59e29a9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b2d7036221c7f249277dfde229bc380

    SHA1

    28a66474ad76c20fb0cd24e70e167cb82609548b

    SHA256

    3b99a2fb61da49f3e107b68ddb4285c1f41823d4d869ed11bc6294357aaabb7b

    SHA512

    8bea60bf4a5b4565dd36f8c45ed6ae845abd1af399b0098f1b14526556fda077cd792c2f4bfe4d9b311d75bff69b38d59f28cc8d1824a23a79a24fe17f442264

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8904fe916fb4f338f9a408594315cf01

    SHA1

    8863dd11a70a340a3f9330060c234099af0f4a9d

    SHA256

    7644ea28c4bbac85328a8dd77213001e7acf2e266e9b999e345a4c46e17c768a

    SHA512

    3b2605aac5452c69912933618e20341e632234c0858cfc86525d5d675b0c39b03db801f970ce8b89423c674bf63b5e5e83e7e2a38fd05f57b801aef43d4cbe71

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3adf34f5d55651e8989805bd7c78acc

    SHA1

    00323388909a37ee62b311cbc6758a5604ca9add

    SHA256

    3390e2a8f4a86409ce36f7a65d537ea8817d0f27e20582609bdcf70bc0103b23

    SHA512

    ffc52dd2ed521f38a53f6c195a9c7e9a6c7530708ec3b0e58a1e7f4eab003a60bcb53a64dc8f531621cf4ca429e20533775d1b7edf532782efd243240441c06e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e685d03b8f7674f383b6d47689be3b66

    SHA1

    e358d79ed8ea30341b51a9d9649be5a132bc2020

    SHA256

    0ad95a31c61c860c7317cb7abe766fea48ded08f092fabeb15bbbe574863ef5f

    SHA512

    ece49a4519d8801881998281881faa64df93fbedde8705ab7cf35b117bc618eaa0a5e10f174b74afa09497f4c989b8fa87cae53d858c59e2d151ff34332cf670

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f36eb5ccd878a5d606071e4957375a59

    SHA1

    33f0779029b3ceb7e07c9ae8d0775c0c362907a2

    SHA256

    9a062896f0d1f31c71c2835d498942384e1ff0ebe2d46a42f679ae5bb8472c08

    SHA512

    7ec001e061c6fba6016572f81e775ef41198f7c2b792ba83fae43ff573023ced03d5e134c92d09e69200121cf87f62f783c7c8e707b963c56be247d309f5bc50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b9b4e7b4bcd320a719f0df00bd9cdb64

    SHA1

    a0b80c7709994be49b21a6fd431b673bb0e65b0e

    SHA256

    32d21f4896fe253a7f39e69152d18f7a90a0be9bdc1e2dcdb38feafeca49fb31

    SHA512

    ed0d55ff829cd8e1716ad6c2b9a07935c09eecafba8bbf1557a0d0725a331e47942547ae2c3176cc078ef2d1d3c040b61fd8e7a9f10868de06b0b78a93d1dd3f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e0c01b75f33df8f2cfa24473a9393de8

    SHA1

    18721db6511a564ec3858d1acab89ca72e205533

    SHA256

    53855cdc49cee450e13ee1c33d3e02341e195ad451fdcffc5897f96b147fb46a

    SHA512

    24a0e29f9da3f355a4c6011f7baabfcac5d7e9e55d705ccb17c7a1cae2b68f13e98083f92e1d2b7a478c4e8c2ea442074f29ad49e9884efd7ff08f6b91631980

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    28d0c63e1ced3caf8bd476912dbfbde1

    SHA1

    d6e16cf67d0b6a88a09667de2e1ccc7549b4e434

    SHA256

    c7110e86ed071bef600b72eb2b5f5e21318197bbe6a8d9d3f4b4f2571afb5a7c

    SHA512

    ae4e26aab2d406578e8ff3b8317b9165dc0db79789416d47e3f3a6a45e5053dc72d850dfc684aa5d36bf8e56e23ac0b97098dedb5ec6aa10b07e9a6ac12b58ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d2f10c8c9e2feaca0cf26c8c3c6cf17

    SHA1

    98c2a5f83fc649c03cdf246959b58de8c74f08f9

    SHA256

    69f1058c3f915b56525eb8673e489697ad6af39e1c8a760678e61a867cd87fbb

    SHA512

    fdb9dd18ab1d2f384ef4eeeb185d55a7f4602832c39d1a845e85736c95ed50ab5ca24db37d13c313fd1ee7243657e2744c9256cbc480b1230c1696c11c745921

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    068342bef67052dfbcbf1241b6b6fd63

    SHA1

    fcf129ccfdd4a8c65b068bfd43f898ca1ade2c28

    SHA256

    43461bbca8c5a540911518e2319e29e677a8264c9e013f570e283b3e6acc2537

    SHA512

    243365547cb5a6b57a4d5bb88bf98c4eebdc123f2ca7f836eae4fdebc2cf7a7fa02cf8d9cadc654138d6fdabfdd3b4af040c76e822b0bc1b02b6471a0890ecb5

  • C:\Users\Admin\AppData\Local\Temp\Cab7014.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7075.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b