Analysis

  • max time kernel
    145s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    29/09/2024, 00:33

General

  • Target

    fd74a95806674023b600f4dd3d0007b6_JaffaCakes118.html

  • Size

    57KB

  • MD5

    fd74a95806674023b600f4dd3d0007b6

  • SHA1

    b1492ac9549f1928badfb7bcd04cde19a57199ac

  • SHA256

    472209a97f9db4c2a64d86979e1eeaf4a0cad6fcfe3f419583e45f52355895fa

  • SHA512

    0546efa2e12c11576b1bbb5440d2dadb3339255992ff590eaf5288d64033a1c92598be3ef0a3764154a6798735fa15c87639101f4ae83e8ea06ec5b359933982

  • SSDEEP

    1536:ijEQvK8OPHdyA3o2vgyHJv0owbd6zKD6CDK2RVro9CwpDK2RVy:ijnOPHdyp2vgyHJutDK2RVro9CwpDK2m

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fd74a95806674023b600f4dd3d0007b6_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:784
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:784 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2440

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    ad7ff5e2b51c14836e6c202e99f87dab

    SHA1

    d61e7e025e1209074586c52600292171f16c898f

    SHA256

    eff074a2adb5a69cd4926f11b67195abc31ad024a42cf17999a0f4c170598dff

    SHA512

    90e47637b6f7136f84f32e81b1c16d665e367ab9c0aa0968672e1cc0d88bcb6e07cfc2b99ef4c9e1ff7047bc1ecce3239864ce057400e1f5ad012336a53e339f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf577257b91dbed67e7e55332d03bd46

    SHA1

    7eafa6ff73189bed0c8849b350be7d115da23d94

    SHA256

    b2eab41bc07f245cdf5b60cb259a19cc74b57f5660077753b7c7ad900368ff49

    SHA512

    638de778184ab1359f1bfe800b6f244221b6e9271b954cad707c73cb10f9f49ee0a76bcae610e92ecb00e3dd154197c6574728181325fb42fd34f18bae0decb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db98f1e27b0d3cad2e4b70390918e7f8

    SHA1

    38998c714fd20dea1cb55cbf2d579e9a7fb51dfe

    SHA256

    9c3fdb6b2fb418f5a76087111ac58c219508c7a53087bb1e77b925051ee89c1f

    SHA512

    32278d71c546bf02c4db2ca7910d7979dc1853c5d25628b4de468d5a1b80382349d6cd0117ac0b0070fc117067a3037851d6d236453e491d311155e426b7030d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    780ec5e192bf51d8d77119aa255205ff

    SHA1

    40ef0d0f02660b8c28474ae6a0bee06d149b3154

    SHA256

    07ebcadba43b04d87b3ad57b959df76de7dc45ebaf72cddb473fbe51da8729e6

    SHA512

    55236b79ba20376ff706b42ab4a87d7cd88fea90523f33a8fb85b00d104f434e2f8e3dc69bd90d40077a71b1f94f8ab7406eb85d2b6aa7956a442bb23b9e8b29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a3138cc8dc8e08cb1e99c31c6fd1fc0b

    SHA1

    55cc2a4da50067c826aadeffc51694b79f8fb8f0

    SHA256

    a4617199cfde246bb349477b2823e9eaa48e0b5e410591b16c5c24f4b714e7a3

    SHA512

    0545e9ab04f02cb8a199913cbdb4ca6cd08a941f54d9e3407a30cc412e1051844bd4c260a9e935770a24fd738975f365913c471bdd42f1c49b9a54b038c379dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f1953bca2d1c34d88db70931619a5e08

    SHA1

    ffd1aaf23a8b7d7dc5e972508991dd2b2c20af2c

    SHA256

    992f2a8bc91cfd43bcbd026f52416a46ac58cc2f39196020346cfb8c2fc6fb04

    SHA512

    5eb4cb4e510677e592af2571ad855d43ac44d2c3c85e4c8e7a23e4728c880f474004278b5a115abb89133abf770a24967af1b8c852dd2b85a248b278c45e1ccc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c0864cb650113a79cfe8686fbdb582f

    SHA1

    0e5bff38ebc2d456378eefeab39f7c9df7f9b1df

    SHA256

    0f9f95508df07062b7bcc98a6141064c3bc31a07ffb7eb23aa4cdb06ef803495

    SHA512

    2f42aeba37d7035dbe5d1d9f0986586a23cb5c56d5b9e027c6120511dce3be9ac5bebd316085536676c7ace9045bb89645c28c4a0375b355990960176561dcff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f36fcbdf3d974bf1e3232db5745144c

    SHA1

    95ad9dcd044515eb6986371a28cfd1dabf5f91b8

    SHA256

    2ea9c6736c98abb282467485dae37154555c1dcf7fc0d4a96f27ed98bc9c331a

    SHA512

    b5efaafbfd57053887eefac2e194528f2093306b1c30ede841a2d6434f038aa210ff042d4f763217f4aacb15f31566140aa650c6f18a82667b18a0f80296d6e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92471d733ca594a8feabab815a20f6ff

    SHA1

    cce12ab16a4b3b623ef504393ba7ff382115562d

    SHA256

    063fc8e3da0194f9ca05f7f9c8658db2fe00de0fc24ecdba01d07341ab7c0ca7

    SHA512

    3b7f89d74b237b3392b26494a7a05a5314eab7df17c005b51862928448c88bc1d31e308d3f679c85e5404ad74d6f5809bd01b6800eee30266c29690cff7f83e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f75fb660e12d8fe879624f6e5009b683

    SHA1

    f31b5ea561394f34d1feb15e1fa2a46fa266aa34

    SHA256

    b1539a6ba94b87f4929117e598f423cfa53b06a249c908302f5256b37f55860e

    SHA512

    872414b504febb2aa37742f2c68732df256cddd9febbd7c317ec4928f7133bafc9f0cbe53509d21ab19b81c4776345c5ee21cd1d5fc729bef2df43d25101bd1c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a37193b5c260c8b4ecef6ea34baa0ef4

    SHA1

    3cb61fa482a25904e72d6e418483ac5b800e436d

    SHA256

    53677ed4165f2068e6b0d741bfa330f8aaed740e6870bc551a06201885aa403b

    SHA512

    7babc53be4c11f1fb17942a64d7e749f698df3d01b81819cda4944906a84614a6583527e4b3a14976c3049a28e25713c8eda80791cba6a0e2f430a31df478c49

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    126006696c2f93d17fb4377171a14ecb

    SHA1

    6875e4edff683d31d2f8ed377ad8308463da775e

    SHA256

    d4e4d9178dc47615580287fae918bff00c65b81b8d6bd047d96ade3fa0584c68

    SHA512

    a82da8276f8b546741adb816f00d5b7337ccab074baddbd7f956ee05866a58d359e142f8850e47ee6aac1972be7e32e1481552fa07bfaab15f9747abaaa41b13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    604432dae2d560d12973dd7238a75f74

    SHA1

    4a03e4538994c7f83f62164429748ad19e983a16

    SHA256

    2aca7cf336bb806a189df9975217de1b4f842e80f63dbf1dd609eabb0aeaba20

    SHA512

    faf8b97b4294406aa20aa3be37c4d8fe456ad89d77604256603a66ca2adea1c2f7e06ca940ae8e20332f98751707ce57a6096b1d91f7546439cdd96d80fbb9ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3a37984e3ce21bd7631324f55e96d67

    SHA1

    60e9984e3637094bf1f98ebb3d533b8b85744533

    SHA256

    ed87e4a3e2327da65a12e52534a07c9bfc315271664322c4aa5a65edccb8aa17

    SHA512

    cd9ceb6e3a8ad937854c19fa326b3ec0d34c95e6414b10e09c44c8d18224fda7819db7560c881587d94595c6860ecff905e518443f01b6cc52015bde1e387582

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    661763f505edc7143a4b0f11ebe674a5

    SHA1

    b246588a06c8fd99dab1c17760eeb9e0abdd9a57

    SHA256

    6640687cd49ae673ada7537ccd72c9734d32dc6de24ff6578e428a6a9420245b

    SHA512

    ef293ce601602fa1a6c3f46818b82695e157eeec009f42666f0879cd4c582e181bc688093684c3bb2d092380f876abfbebb9d5812e8f6b2af9c1f9fbbf4699c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b592af26d038e33bc9a5915d6017d2c

    SHA1

    170305a2950e4178a259f07286a35ddbffa55001

    SHA256

    307166dc7f5d9091790a477962d90720cfd2ce9bc80e8063b46e7722e3900fe1

    SHA512

    22d0b45026bc4eea27fd8cf35ff0625def021df8a0bbb8386c0d4c8a79a3f884d042b3eb9dde70d6f2d3a3dbc0385f8a00d040102c8d8e6ab4e22c6f1892ed50

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6f79b4365ce59631c5c4a2d2fe4db80d

    SHA1

    00591156263c06620b26eff14ee5ae5785bcac17

    SHA256

    9aec595256f185138131dbcc26bcb640e2436daa5a5a9734ba596a340262ad17

    SHA512

    dfbc9e9646e1c845f45861880032e7942571d88bdebdc023e799a1e18053fbe74c48129a13abe92c0600050231572bd7dc766f0faaefbee3ed3f903cebafc7d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    73a0bb0d3ce269f22558075c823f9370

    SHA1

    bde2b25567621de1b6964859bfd36ca9e74c9934

    SHA256

    cc4b58935aeee09adf6192b8a6bd6b36bb6098d75943a65d56a55b1cf8f45236

    SHA512

    409a507794289d8f27dded5809ef95c1cd20801002c9f7d4baeb84e42204c513e60aa8a9e3a5041d1b34c000d8f493416d0de38f35a8aac95de989aaf91368b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5aaded166d8eb3f031139b4b240b94ce

    SHA1

    058af9a6eebbed29c0c1882e6f41ba9e5f3c0975

    SHA256

    a67dd0a8f304464ca0cb0bb5bd35d897074d710214056a1e9f4ca4e4a3df561d

    SHA512

    677eafc5bdbeca1d2276238c2791a5f0c7ef452fcdd9eced260af75008885ae03c2bfff1ab348d01eef16b571444917b81bd223269c51b010f386d9e16198021

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9d8eb0bbbeb762b3c76d57b4a8e0029

    SHA1

    767d39bb64726db42261f1680d58b72adccab7dc

    SHA256

    c259ca2e334e20f6493bfa46e8081931294cee0cfc12cf5dbe2f4c6db43143a1

    SHA512

    396dca8bb6879fcc37aa67a4a68c35555b50f8e74738f3b50abfefeaf11e4e4ccc8de8b1ad85dce22201af58428f7e3b7eac77ff1db5dc2947c40131bec0ee3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    328cc3edec698a41744ee6dbe982b349

    SHA1

    d469f7cea3280285056dfcb4a9ab62613edec4d4

    SHA256

    3201205d55d8c4addc7d40f3e2db5c91a303259cd27fa8e4b8f0c462b9bf5ece

    SHA512

    0fe5190d59232df8fb6c708b05936d6987b97188aac981ab5e5e6cc62b03a4ea92ad7aa2c14881a6c621fe34abaf39ae128219c24e696aa23f1916f3f396f6c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cd8f2c6aa21dc6090fc98f609d711559

    SHA1

    754cca0785d2c8e753ce449d4483f35d298edc3f

    SHA256

    6e12e2d99615bb175bc1786aea7e9577829c55ee95cc27a3caafb215172148a4

    SHA512

    3c73703e735b98d7b86b2ae3aa22f5ac5eb25af09887206f38a22107058752e2a3b5dd210f676e23c6b77fedffd58a5cde4d5f599cb2b8641252b12b29dcb655

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    115c207a55f53ebde740f8971017d1d9

    SHA1

    b41a8c3e2f8fa0eadec978cc01fee8300811698f

    SHA256

    743a1824380a60cd49bb88637b6cfd3007362f5e1e5b7363174257196bee25e1

    SHA512

    889925ad5e0b38a134b047ee4a9c9c19edc92831492e3ae3e943f49b4795f8de3c946a382f16cd0ddc5bdf7ff6b707d2802222ca0ca932db8953cea5f78cf0ce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c0e258d83ac9fcaccc4c7d6e1a16f007

    SHA1

    5661d08f4cf1f5efb66bb14af25580240229ff73

    SHA256

    219cea2f7f11bddd9d28ac7127737d3a1664edc86b4bdffbcd34b4456f0b564d

    SHA512

    2faaf503b0b3e210f3d9c98733f3f86a04a358bd29abb102279f93796038076ef8f8c5cf0357c73b44c6ffa880c9398446396d658fd5b85e8756d1a4f492fc5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5023fb4f7d001039f397bb3cda007bf3

    SHA1

    f5ae97db7118536e2d51811df7e2444655c844aa

    SHA256

    805db43962e5324093b4b7228daca2baf2eb3e03ef1e9c495214541e8dcbca87

    SHA512

    7c738576dda54383a73ff6a11e3412351ddfd857f326f2a26100e4c1e811fa004cd9e59e8500e9c5972f9fbe876e9b6177e4536ca7533b62944160235f8e6308

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c1ef822299ce5a7d985530d7dd42ce34

    SHA1

    607da1ed85422775db71a7f0a7d9753a151d0239

    SHA256

    583f94061b7a52946623d92f9c96ffbf52762292aec6b913c754eda2a8bb4814

    SHA512

    dd8f2ff9f762f78bafbe5519ddf4e896a1161aaae1d74361c60e17a3cb7d903a60b8ed58d3b9b0d01a14d2f2eefef341c439254b65d7fe6edc1124cf509fee63

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQFHO95Z\f[1].txt

    Filesize

    40KB

    MD5

    cdaedc8d91a8092d157731d3fa9c3953

    SHA1

    962a5edaca46dc5efaed58ab5781e59b92d3febc

    SHA256

    cc01419ea503ab002bae0a51f3951c65697f0efed3ced7e1410d6eba91d311f7

    SHA512

    095aed62ab549228a03032eca447f3ca1768f5dfbe534abd2ce2c37df90133f8383bd4ddbb40c9e7c2af590014ec6fbaf93a5f07129cd9bcdec3bd847804148a

  • C:\Users\Admin\AppData\Local\Temp\CabE18C.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE18D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b