Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    29/09/2024, 02:07

General

  • Target

    fd9703a1e1d913ae9d240407c67225c9_JaffaCakes118.html

  • Size

    2KB

  • MD5

    fd9703a1e1d913ae9d240407c67225c9

  • SHA1

    334d0b664a3122f0cfc430eaa1e72a382952583f

  • SHA256

    33a3d76c820cfd5f0ccf01fad8e9672269bd516591bc6bd9b118612972341845

  • SHA512

    4170d8364257c3ad428a496ad51a929778c4d54b982973e09be0a31f26b1bbdb0eaa578ad1ec08505304934f33b87275020f49103b7be419ef249ec046395d71

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fd9703a1e1d913ae9d240407c67225c9_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1076
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1076 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2576

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    25c05f7678c84630f0be378a33041f0f

    SHA1

    a47662b3c5aad48c9ffd2128b9e5610baeb9fc25

    SHA256

    76b71b496169634b7901c69164432f5325de8daf595dd53ca93e85dc74925210

    SHA512

    0436a063feda724afcdd595c2d3efe5f48d32d8852956043c909b17eeb1bf89cf903f8c229007f22508b645466346526c400995ee5e748b6bfc1d6653e2983c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd802d1cfe2149e76186db7e1c3d625a

    SHA1

    6bf6cc9c50cbb37e4c2a735aa82ca0f8601247c5

    SHA256

    a0d46a1d46e3651a8696b8f5f27a08b8a44b14db8101e91e5cb366740bc3680e

    SHA512

    6d73ae690f0fed33d89d075061b9f84a4427fc641c7e0d4609eb17030833f589ede96cd509281a0f44e624722f1a1fcc841bc889b3caea192ae135f7db7a0207

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2288df7feefc10eeed9dee92d1b58c84

    SHA1

    d785243751ae78ab226ebe8bfe8429d815f38a32

    SHA256

    1c67a770e3d7d661ba42e58ee7352be748bfafc10827cd4820f2826426246145

    SHA512

    697d0f8904cf742bcf35afc0aa42ad16356fe3cca1f592cf3b03844f7db4f99364afc11b6c6b805e980c2d32ac4cc120e9ec236357f45bcffcc347443b958b44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1a8457cb1c25d3e1cb82bc477de3db4a

    SHA1

    5617aa2ff15345c10064d33f07bfb1c200d770c4

    SHA256

    7bd48d7276398d1ac99ca52c08e6616fbf93b9c43c17f550c8cabb45b7e0f284

    SHA512

    1b43d3135fca4da73778d40fa3ea5e84176025265acfe39a3fa5eb1ec2407ee33d44a91283ad5c2f4d9886951143e7e154d9333ddeda8dd697546f682c55fdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46d020f23398fc749c0bc22ed96e9315

    SHA1

    144547a246cd37f684258f226259229375a1b70c

    SHA256

    eefbfc60f654505322d17730f692775a6588c83d3ced1b72d484ad2042c434f5

    SHA512

    76c2d1648ea062bb0c12ee415827b4aee0043e07faa0c766bc2865b091b75dbd7c53cd33763556319b8699c588433cd0f174de3de7ad3b731561fc1ed13a6c2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea736322ff727637c7f207a3b35693cc

    SHA1

    49f40a844453f8f04aca51761b4ff0f97fd24d39

    SHA256

    72408d75453830195092d1507f74a2ee1c05b3f771292c9c24a5f350c846bc10

    SHA512

    3342602be9f8bea5fd42aa18d635ce34a3ec1f53ecbda8fb4511e97bf5b8c42fe7f08ea511ac1060361af38c36ddc72ccbb41c15f38792cc17760bea5aca340c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a2fac705f5ad8ed01d77de106822b318

    SHA1

    4ed84529ca1349d3be4184f916642c57811fc05c

    SHA256

    31fab602c98324444de3e76d6497e31b102f20698d14967d10c39313bd4304ee

    SHA512

    46a421a584399ba6cd69ddf63745adb0ff6bd13d94ace8f834916050353c3e942b9b52d29b96b08891696242a8ed0f63848e330a72b580a147fa014047e22b6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13c3d09478ef550049091634532edc67

    SHA1

    bcbc0be39a17f4b51418e01d509768bf43546f57

    SHA256

    14befdb73594a30c1f2bb6ad6d6381bdae01eb09be13d62ce98cbddb117a7e2a

    SHA512

    0fe2bef584cba210cad60e4a7c19d8e7276ae79d23661a2d19c5d9d0f59cb8b9f741a7d3b093d901e26a6ece4bde4aa9ee4205e189d735684de5a2625f2a33ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e014846b117c3df4cb9376866d07fbf9

    SHA1

    8de40c9dfb0996f50f904054fab639be61fe9a2b

    SHA256

    4e14cdfd329287febeab2fd9bdfe2f5c90ac75791b966dde65ca153aa503f69c

    SHA512

    4218de5a83eec566596efc486a766dc243806f6dfb701e8428fe54fea039a9e053cd0d159ecacb43dc60ea2ac6ef0cb43938c36dd364f8f4f725c458ce392450

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    27db4cc86e3b3e3d1857cd044670d2a9

    SHA1

    9ddb7acd60e92237b4e63146a2a237f61af51d55

    SHA256

    5a07d03375eeb4640ca2b45570fc0c55704da502999a3663f407024f7e90346e

    SHA512

    3d9af6c9a450be50873573484bc308ee68644102e1c6987cb1dbda9ef259d5573f610516f6f7676504292a9d6b9540682bedf8a54ed958c3e12b46fb51d21e12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0d5cf2315f58b56c7803bcc584d33683

    SHA1

    0746a71108406577c5830792d90c38c753c2def0

    SHA256

    d193b206de2b1c4cee93c0fa772e708bbebd497edc2d472005c7e123788f5249

    SHA512

    423ea932ec65348d3f6889c65266b2530243fc626e07b6f30961d59cfc96a0914779ffca56dd3e03f48fc63e97937176f2c3c505815195c739c16ddfd2354860

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    255064e2d3f0eb8c9d0753bcee0dcd45

    SHA1

    7f5f55971c5f436ff9957fce816c90e952b7bc0b

    SHA256

    d5948d703b8e549a49dfb9c20b55dbbc52709e3ac5749514c9ab1fad7566eea2

    SHA512

    3c38d2bf832bb433ae746f6292b5173b19041259a390b8c68bc72b454337f0e025be27537fa78aea7610f542e3b529c6f7e26e6f0c1865515df7c1f1baa8e326

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b63dfab09694538d9447459f02ede13

    SHA1

    190d9d52335ebadaf5d2a4901f7ebeabe6b0d333

    SHA256

    95ea60a9031ffc259408fe3acc2c97b742ed29855a96d7fecc50ac488ee4dbb2

    SHA512

    a0994aff14d9679aae3c4ba1aa4e81ebed4a6f36ff2c197a2c656f4c218c32d28aa007658e4691428737a92f2e931dcbad208c896e2c58638cd98c68277045c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2d8b1e7551a2c1706fbc22068ba44b8

    SHA1

    80c8e06cfeffd7ce82762a30d47d272e4fc1bd3a

    SHA256

    8e85f8b997a9807da7d4e7cf6e164fdb01df0f1bb825aaa3abab7b98c7b2e9c5

    SHA512

    f6fa01d27e43728a25f67512e86cb8c811f8244437072474ddc5323a5496d53eda1527b7dc783fad27b82ade7178b9c2e647214457df8f8250b27b33e03aa14e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7856332102e29dfca2ffa792b78205bb

    SHA1

    6f3cd09c7639b77f2bf51561c700bc7bc0c16830

    SHA256

    6ef14109968e87b6381f9a0334c710fb09ce8999e718cd8b9fce81cdf44c0202

    SHA512

    29fd0f61ca8b258a2172f1fe061db5557c2523ed2edfb9d2eb2a51aab7f197a631fffc1bf7a4f376a2610f54dbdf8b04e6f54750bf71cb51b30ecb4345bb1af1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    30cb052dc94373ddf1f8f4e5324129a6

    SHA1

    ad3e08e2506f31bff753b1a9f3ae28008e88167b

    SHA256

    bceba1572d50f4a13c0c86f9f59a3f01bd36c2a55b312689180c7b3896e573af

    SHA512

    f1763170254d46c75efd3e0cb66a0e469de91aa148dae94f83b33b0c42066de24907c76458d75c2155bd63c9f489b74f53fa0bfcd8a56f12819c54d6c3a3682e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4973b862e96a69ef90012e6bc682ea13

    SHA1

    223f303cbfeb3458604be963914eb2e61d0153d6

    SHA256

    61db37b9f127a5154a7df224b347e595e45d84cbc98f2da2f172533ce49a30a4

    SHA512

    c5e38f112481c416908055dae89c2d680a30febc98a9fd136e11e08a757573ff3b8b8d5fb9e2f4a71c24e75a0d8c104418f4a855b4bf9a4eface57f92eb499aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1b052df044d61d77e6ab005ea93014d

    SHA1

    65e9addecd8183d72a71491911448839866f115c

    SHA256

    3c3adec1f30a21b8e0de02580d31542d4aaf780c28f8b017eeeec73106fe551f

    SHA512

    e149522c8ee87c6e8322beb45665533d0affdeac2b069ef1311b4d960986182c231ca0175e7e532a138453e3baec660621883ad1ab5901c65e782a31497db561

  • C:\Users\Admin\AppData\Local\Temp\CabC2E5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC345.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b