Analysis

  • max time kernel
    117s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    30/09/2024, 01:08

General

  • Target

    ffa609f834721d404e5acdd1b0342829_JaffaCakes118.html

  • Size

    68KB

  • MD5

    ffa609f834721d404e5acdd1b0342829

  • SHA1

    20faec69296e1f32bd6e206dcbed801d8c3e2981

  • SHA256

    ba179a98d3175231e38f9d7655877ec1911162f4bc73142c58284581a4c1aaa8

  • SHA512

    4e2b64cfc36beed68f09f1574ca73eeb7614d411e1efb6c72b6ceb1207853eadf20628ff1015afa077758d26296de666461dae3c82044640bf17d0217adb6a14

  • SSDEEP

    768:Ji5gcMiR3sI2PDDnX0g6IM3LXTnLhoTyv1wCZkoTyMdtbBnfBgN8/lboi2hcpQFf:JnK/6TcNen0tbrga94hcuNnQC

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ffa609f834721d404e5acdd1b0342829_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3064
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3064 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3068

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6d90c980d6af93041b0a2bb4482563a

    SHA1

    e06ac82e7ca1d5e007f228379f652ac48d8bacd0

    SHA256

    c427c34d12e3c2b14462763b1abd5ae1f7d5428da785f834485ead198dffd488

    SHA512

    081f785c1eb307b1e6ec469874b214e484ed5ff1025b2628aff42d366bb94eb57c05e9390e53523ee5774263d45a46503e42b1c11d5d82fc6c64e3e33f60f7e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34a187daaf9e9286d298528cfbb98b7b

    SHA1

    2424968ad0804ac6633084404a2d3c4f80179747

    SHA256

    cdd59cf014ab279b858e33c13b8dd37c8d47922e51ddc0dd1d0c7b4b185f470f

    SHA512

    c4f4696e86107959b3e93149af5d9543660f32a568671ec75c17a2d2176a7784c2770ecb36cc92f39b7469db0970d190793b8f06ea66486534572c1db7ae3a1d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f0a6263791a431dba46001abce755742

    SHA1

    f97debaee888cb3740892009db1e0de13c46bd19

    SHA256

    503f5b23d882a2e8aebf68f8a43bc329f363bfce404d9701c30387b95dfe8538

    SHA512

    169be3edf0e8b1e65a2f39201e83cd205075816405a3c86f69070d3fd41e673daed50aa01d4e5d8283e94ead0b51ac0489c6a5009b988757efacc60e4a488923

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e8ab2391ae0db47b7b3f8444a68aaaa9

    SHA1

    38c24df27dc2dfe2c9f3e3388fd5b6913a0e9411

    SHA256

    dbfb93b9543ef36ada562cdfca377f8614debf32580e68a58eeff8fdf3b43edf

    SHA512

    1c67c9505a90a724962a88abc123fc9318ac1a2fe8ff61a9e38fd0f2d5591c8b286e71b8d76b895164a5833ccd3056efe3d2e16eff68c73964e7d6abf3372449

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bd9fb97d771cf67a428aec0888a9a54d

    SHA1

    c29f49d1db1ce88ca6dc26c21a1ab7b44ea9d6f7

    SHA256

    748a2b11455bebcf0fd61b868a780722349e33f113900a9cdc88944451ced900

    SHA512

    e9af915fdfea3e4e2c48893261c8d323022c676c86872938505041c9b50bdf2651679e60a889db35b5ff7ff80c8cef5f24bc21368e23e27c81f631101a8abf7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    511531bfa3d71406819ae27604c5168d

    SHA1

    6b78d58b53c36afd77229d84788d0feef4dd957f

    SHA256

    6851aab722062d56bc01bbb03aa266113f99eb3c79118b7117da449b08683173

    SHA512

    5f7bae11e6e982b8124818782b6e7cc231ec43da0852d74911b3e6c40befc87b51b4316930886eb6f30d448ed6ed59ad8acd072cb87dedc2d2b43c9911ed767c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    227b960c58626691a8cdaf556c0b9019

    SHA1

    068c97d177c4cd7782611e7aa4337c42699cfb09

    SHA256

    cbef1721eda7902579b3da17ba6fb8e0cf1aaaa4646cc291f4b2feb82c43d107

    SHA512

    bc8df73bc15fb81d27ad0f1a431daaafbfeacfd3e4ede02b8a99bae6f64ab8a1e02705c23661becfb5b75e30d030947ab2b2a0e92290aec5f2bae12643db8b28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    149e518c20ecfddac2e282b502029171

    SHA1

    0f4ba0643d36c2dedd94851941e1fa0f62737319

    SHA256

    88f9e4e8b8adb1d0c8d165c424bcef6304e15243974e7e4a53fe168342d20e17

    SHA512

    8ad5338024c3e9233d34053e63b94fe647bafd07cfe302866156caf044246c1ca18bbcf0012a287ecb76c52df217933c800a7f29c973d65ed0e4c502f53bdf68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c65385c757649398eb4eda01131caf92

    SHA1

    906c965784ad2fcef8c1234ed5c7854ed36b5ca9

    SHA256

    6c98c317e9a997d57581fb6f8441bae1c38e7872041ef3ee54a3da1bbc0c2fe5

    SHA512

    3951e11551d760e8ee6c3552a06124727938a0470af28199e6844ac576806254eec80bb4756e641723b8b6a90202624e47046c7fb053a42d23e6536f01ab31d3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3815eadbcfaf8e8a3f10d2796596e2bc

    SHA1

    73161c5824000cb7a642267d764ae18a8657e362

    SHA256

    c2c93c60d701f6730c7a0b9207d5f2ede3d021b46480ce97bad3afa820e23bfe

    SHA512

    1df5eb70681821d117c800e1ef038c3ad63d21733262f5a7c870e3fd87395749c115e13b5f45bb6555981b98215c17750792358481ad049de1a5c7118634aa7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ed0faa0124c3242c8613d8d3cbefa50c

    SHA1

    835e338c44d633de055a23611a7f9b511ddf4144

    SHA256

    c29c96fbf501e37e56595d3223bbc805f6a4332dc733fa8d91957863baafac84

    SHA512

    6c37135194da7ea6cb7b7913a4f8f96cb8a87e6daee452a8fb3f0dbec45f857630b17bbd151b4886405ed19e6e4e01aafdf043fb0e70fdb7e5937bc38f90bcbc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0ddfca5bdc632d444f2a125907e3940e

    SHA1

    1ae2cc14e2aafa615ba5200b1ff46267ac1a3917

    SHA256

    342ba8654fdef045186277a49afbddf0a3136b495d04d6018eb04464bd87ab0c

    SHA512

    682693c0a5dfd0afb8a1cbf716eb3f52fd2af15f7df5d57741531d61a67b7ea7c1f43c1194f3189a4b1ff24264cece43024f4de4e191841b0c3540cc901709c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bc2ba6d6f77c4222eddbb3dd74c84072

    SHA1

    56d74461e738a053734c367edd0fbe5c4b402545

    SHA256

    88ea300bd1b0ed08eed6238d950ce02b666e6d22198d56bb4a8b1eefc033afc5

    SHA512

    b4d0c049970db6cf69ff65c13a83660a4bef16a2165d3bb252b6c641ac2be1db5051df52ac2eebf26c29e54729ce4bb89e80b810deaa994b99f950f4ffd97164

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7684d5e5be2d3676ef5c538b19c4bab1

    SHA1

    7017dd269f69797e7a0dc28aa7eebbe165674975

    SHA256

    c0681777caa68b64756665d40c920b6bcaa53222d8e4143105430fa2916acf6a

    SHA512

    e566517f5deb95851f773367668d4d0867f363c819f5b5905b464b0a1cd8db7fc2cd5c6a1a3a8c3ef04d886a035fb0c1dc12852695ccc3f367159155cd9350a4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e618bf71001de47029a75e95978060cb

    SHA1

    300f8405cf610f265e42b50243fbe4915c508189

    SHA256

    6095f5192206092d949a8eedb0bcb9add9988e73963b84210396e7b707822492

    SHA512

    a37caa942c97e6b34a27e26c2994d2e74c7983322a141e4e917458b2710dde5840da1dcfe8f0a525557de1f7798eaeb069d36816dd74fcb4548e28311c8b26d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4da74f6044871a9c42fc1f6301f8b89

    SHA1

    c53654b2ad6f87e43a2d3f15432050485fd86eec

    SHA256

    c34f60e1b4029f5e4abe1293d41250b10f8aa8ecbf85835b18b238ee4edd1ad1

    SHA512

    51d9a4df57339a42a415d4b3add91bdae9c91a025404ed2813e6c9d22132b16ba3d8eda52dd169f4313fcb0fd77677c9660794d622187240e48d2177bc902a19

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    554c7738e247e0eabf40bea39794f28a

    SHA1

    5f21bdf228707379f94e895ad6f9e583fa3d937b

    SHA256

    b46bc5c54c39bf7e823a5af15e693fedd8186d068de21f1461e2a28d587704b9

    SHA512

    5cb60e53c9ee70c8329bd79d7e364d8b8541b4e3829d208e8fbe1700249d5763290f51c14841d159895bb31937140f0f2c95fbc8f7ce01b33d453b46ddf4f656

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    669402d6286c0857cfd9ab51a6b9447a

    SHA1

    3a970a677c0115561dd0a927cf60aab7f6ffc5e8

    SHA256

    e8939f5da53b32ce8bbd10c882ae532fa56eeccc7a238d3ae2a65d7a811e43bd

    SHA512

    995fcd1ba21ba75000a7350a7173b368719ec696576c2b3c07ac0f8b94243f6195984957a250411b4ba979d93ad573b21201222e789e43ff039ab77b2e281ad1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    867c8e32c699d0ad6d4d292385976350

    SHA1

    963cc1a335bb795076c0806f245871cfdd803259

    SHA256

    942f3436b0b88583ce0ad132b51366847d59c5f5299f288e524e378350e82f8d

    SHA512

    1ea91c0d0d73508d02da6f4537742d57531724ed116cb6ddbc8ec0fb6c58bd24563e0d4d4aba979385b13e6e00bc8a67126ddfb9832327155862284e2ff266ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d6a064e51f92d4b7e2a523292a80ff54

    SHA1

    06b12008b3016d942fbc81ea6bffc0aae33778a0

    SHA256

    0cf4ea0166e211d3091d0566e0635ad3fba22d2e2bd01f0751e65cdee3863c1a

    SHA512

    bf1abab21415909cfe0dc7ec990730830fe69d2115636a92cd92d8efdeefdd5147046650e06d003414a53b8f0dc1e639386c9eaef57d4344648bd8ef77a8a19a

  • C:\Users\Admin\AppData\Local\Temp\CabC63F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarC6DE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b