Analysis

  • max time kernel
    133s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    28/09/2024, 11:17

General

  • Target

    fc3037e2ff2fb027ca0b7af6b60de082_JaffaCakes118.html

  • Size

    66KB

  • MD5

    fc3037e2ff2fb027ca0b7af6b60de082

  • SHA1

    7ac970f9ebf10de6b3dec6ab5f8f25d4ff68bd65

  • SHA256

    6a73268967fb03af30d884a8428da11ec24578862610f0a43b78f2ec0ab6de34

  • SHA512

    75b12db1d159148affd2f95472ad060abf529da573db65b8b2fa40746f95c3faa5c8d6699f40ecfe416358cdee03ec1874c6dd7b3728ad252a70c66e3856faff

  • SSDEEP

    768:JicEjgcM0St8tN99OIs/0R3RF9oTyOqhCZkoTnMdtbBnfBgN8/oycc8QFVG8sP/i:J0s+13RFaTIgec0tbrgaCcFNnzAC

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fc3037e2ff2fb027ca0b7af6b60de082_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2164
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2772

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67bbe76aeb3fde6e8af2d3008e48ada9

    SHA1

    08bb1207532fcfea7fe6d03ec9c43f6e2af1367f

    SHA256

    9f2944fd7bcb5360f34ea5b724e24bc46c67696a802d97e8333f3cc29a49f768

    SHA512

    e9f3600c276fbd7e1bbd11d2809d4fbf157dd0595bc7cd6fdb5ce90cca395ba0b2eefb3072f0dae0e499163e1826cb0f20346ad6c0f080adec9b8119c88dd468

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ac62df377a96ae5cee8c613dbad750a

    SHA1

    1390f74ff3b685ec95eae712fe04e17992c45170

    SHA256

    301d59eded051a15bf27cf2ecaae989bdef44c2f7d8ad96d64fbeb7a586e5117

    SHA512

    cf0930cc62171d6bc66f70a8853ec07ce99993f740dbd77d9f97a8c5a2674cda4ee89616020a6968337c1992d09a33f002fc88952c1c65ff48a86c5b66e2d254

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d0a9d067975d5ef4e114cfdf079d49c

    SHA1

    77f655b3d9ca0a834f6fb1e1888dd66c84dbe032

    SHA256

    8ec83c0f87525cb814065380dc726aba01c55b42fb5ff7956f24ef9028cdace2

    SHA512

    a94301daf97901b439eaf94be6bb004c7b251d6daf23c2840e4b4f8ec88e882808c0eec7d8dc963c50b9f68d01ea4ce15ad13d3c4c481be7131ecc04d2b9feb2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5d1940b956c85430420cb74fddbdb13a

    SHA1

    0b9b937d5d07816a43dc8a5f76f13a733dfac0ba

    SHA256

    d4e68949c7de804535c4bcba01189cc7ecb865cfc1dcbe80d52afb6da9837267

    SHA512

    2cddab2e2f8b1e9219a5c748c151fe993c6ca4bbe75ed424bcf5c41cd0949523e5263c06e34854fbc55518706fdf8203279bc6c2a4fdbe82efe5b0eaddd2db80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1c11f7c333402ed5e4401f5a3f2b633

    SHA1

    7f9cc6f57743e15135f23494e4e98b642b1c7501

    SHA256

    5559ca618739ca1b47791d8d1aafc7b96c53d81615ad0847d052a0bec8b4e0ea

    SHA512

    0bb9c644c7f66d0493c4b11b0250b6d8cb16d5a38aa94c419455c33a207dde36d07c3492fe74c2a6d1e4d72de89520f99b86aee960dcf84124971b636739c510

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dc3c73fb286a7e830f59ab186acb8a9c

    SHA1

    1fe0117db34c3c053503b048efcb03b4b774d56e

    SHA256

    d42f959966f06a0823edb9c1d971b56d4f7b0e524859a93dafd13980393ef0c6

    SHA512

    d43f29bd94520127c3c5edd422a627a254ee33c6e54a98a5544b1980fe321eb9b82cf35b3f5707c3d66e18d66005b37e4596d1652a432800c606d91e7de4523f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d487053c07b8971a073e65769d5af6f

    SHA1

    47660b8e71fc74abc87ff4b084607c9602b3fac2

    SHA256

    810c08a351fba53f2ac91a6b597da802af7196ad9c101c4b91a92dce535b7b7d

    SHA512

    8c76779e030fb06d9c388c7b9fcb980260352c38b2d22b2b6c2df65c40517b21bb583d09a56ec2837ea1a828c41c2107fcdc25d448c9a7bde556d4508c981171

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    40776fdee06f4963c30a2c247cc1c102

    SHA1

    36a3f1d31fa85187d1bf3570a2138fbd564b3d0e

    SHA256

    42eddbecc65bb2422c6365ffba067e9ce4a7f31837a65b6df45103297f03b69d

    SHA512

    b7271fffcca6705f7eed935dd43b4624ed4259708a9d693a50997a1af444a666e2701673d52ad69fb5baa4bbbc610e1e92c6dba585889f9fb9d100b8f46f1eed

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26067d2546dceb3db457d0104b7fe51d

    SHA1

    3f68b7ec0471b6bef02bf08924eab71f8b3ac48b

    SHA256

    933ff709be7c2e7d40a0a3ba6893245187ca27ec7bb3f4e0f2b24d544529e7cf

    SHA512

    a1842118ce6ae4a147c6854a9526b536e7a99295151dc48dae59486417b38456f84bf8633fb7e474906f1d1308b126101b76ac621296cfa6aa810344b29964af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f04fa7193545ecdd1f2fbfb05d515ba1

    SHA1

    ba5ab51765df5c945251fa718f0864adece371dd

    SHA256

    300b193db5a6f490e90fcdd02559ce65204c175475e6620d0e38c7578bb85d5d

    SHA512

    2d9794d34040672928b44ddeaf64d8733fd313605bbdf8079c0be4bc87e94dc554f6e79b263e3b9040f8e6954bdba456573320bb69a7db0338d57e916a4586b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09667e6245e529f7f28f1585dd250470

    SHA1

    69e332ebd3b37ea72efce1231f391537e1552627

    SHA256

    43f1734068f61a03065a16977f1944185106df6702a4b9e89fde47ee666353b5

    SHA512

    a0039c60a483fbdd83f6c1967e474d03c1a93599829c9fa2793809cf8aeea1940d6ce0350a7e9bb51ab7386225934b59b937abd4281a6b133e4f303591511196

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    681271003fb3bc2d83aba9bc6d4cbd3f

    SHA1

    7a36a6233680d044b73fe51e39db9f47d7f2965f

    SHA256

    0a0299803dd24a4e1e88746e4524b16478311313b3faa686e68170f173b2ea0a

    SHA512

    0461c9f56ac645e330e1f208a8d4d22e1d7a2b1dbf98627395eab4d177c387a011cfda462f25efbd342b2d6b9b64e3d8729f6fab83918f20108cc4dd58a91af4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    621100bf1f4692f75b57232f4d212264

    SHA1

    8960755c851d7ac54d8677615d1cabd8f858916e

    SHA256

    c910c2cc1bbc853cce7e2a9305b5a72b6ae2c85af42174b4a1449687bd56c765

    SHA512

    906f7b1a27e32500c4a0e7fa14e62c8c053745b797ff78a291a77d414cea8396f0539ef1c5eb206441fa6c1af279a910345f6bc1e39406337fd114f7af64159f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    004558d4237096969a07e719a7124352

    SHA1

    01ba3643a3dec73bbe34801b07486a8b44908921

    SHA256

    5e87887a49ac4dbc44248eae99bd44271e2284dbd540603ba0b3b5ede17cb13c

    SHA512

    55991178cb0b5a796a38b77bc0725a8890b917b7c9bf5d583f3e8493d365e054c421de18de4b199ddda788f6c246d7a9d02bba27a7de25f3fde3f3fd53382486

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66fb31b4f7880f639857d77bc9ba2f9f

    SHA1

    ef5e136b122dc703a7e2032365cfafeae61565d9

    SHA256

    1a88f37fff3e6cf58968a28cbe0a03b7d550cf83ba05e3e221e766a5ff41e032

    SHA512

    30c5c9a21401f2bdf95c176f1481b7e35a3370690810b0202931b711b9c4bd5bad409e3d7536d88ae653bdd05331537926f164a65ac172c6dc6ff430eae692ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3abc66357dab5f5b487c493d70cb67a6

    SHA1

    5df7a90d589cbafd5214873d961fe4bc517afb73

    SHA256

    79619b51f7fde7875c217b6d38ef8d3654b2046d6483810997ca209cb1efcea5

    SHA512

    77431cd6fad83f8d295f01444ffec966f1a5686ec6bc922967428947bf6273aa326a122aca96c5b9781b20cd1ebef8840178a1cd49e1fd973575b88066a2758e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0efc2deaae14b2ae69eb966d975cd5d

    SHA1

    a4e2b6f9695e1944dc99ea4970035a64f4163ccb

    SHA256

    6ecc9f33bc4e5d28483f870e0b2c50a1a4f66548ff2d87dd5d37dbd455434272

    SHA512

    f4f9933f267eda4df58396bc0e6e960420d6af9ed2f75a28f2254593b3a9f5dea0ec5f11ec7d9345c91e0084f53f7ca3cc74f96c502ad2a5d198934fb45fd785

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2496835ad1361a6fa0af43288ea97980

    SHA1

    a5a4a26d442b052fa5190b657389d5f0f158f2b4

    SHA256

    f83868612daa8bc7a62f7ae00980528704c5658519774987d0889ece1bb85b87

    SHA512

    d167e42bf9374e8d6b59b752199b926bdea43734b84389b2ec7a2239130a873505bf67d652411ed486b04908d8ea422b39edf0ef547fbee31890f6bc0014ed7f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6dbd0d96510a9dd295ce671e9e17cc4a

    SHA1

    8dfe0d18ae77f5263e44884bcf2846911729efd8

    SHA256

    2104e3dfc826a04fd98bb482f61e49c65bbbfeebeed7005cd8fbad93f06f036d

    SHA512

    2ac94a4d4228d1ce5ca5bc6bc210361eca2d8eb7bdfb3cabb8e15fbda4045238d3e0f1e55f17aa9d8751db188b8983a9ab2167341b5f6c0174c5a20c9a534f76

  • C:\Users\Admin\AppData\Local\Temp\CabE08.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarEA7.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b