Analysis

  • max time kernel
    119s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 09:17

General

  • Target

    05391dcfb44f63524bea2bda97e4755c_JaffaCakes118.html

  • Size

    26KB

  • MD5

    05391dcfb44f63524bea2bda97e4755c

  • SHA1

    7683f73d79baaa71778192d5a5a34def5b6fae70

  • SHA256

    008acc21fb27981f4fb7d1325477e3143272aeaab31c59342d08c0c004989bde

  • SHA512

    c1818d9f56c2251911b6774bc306e6fb45b8d1c45203262c0dac788433cc7076d2db53da7434b0651cbf5f93f5a9a60f0b0c87fb0cc7a8b252742de71d4aeb11

  • SSDEEP

    768:SrxtAUka1L3PtsbTkbuTXqXM6qr/uTaENDrrItI6B8p56m:Srxt2eL3PtsbTMuTXqXM6qrmTaENDrrh

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\05391dcfb44f63524bea2bda97e4755c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1328
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1328 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1480

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    971c99420d86f7313a5367c215154d8d

    SHA1

    763ca3fd37ff4920ecbaa988016a82c0bba6dd33

    SHA256

    78e642531ad4239f1a3b5a798ba515b38b184897bde4ee8c759375f0ef973464

    SHA512

    2f1557bc7338edf9c07bc2578e7f271351c8b7c9dd3e9cce3a741422aa06f99dcc705ad71d6ddbec2d732d21b74ed6dcfe9c03b5374a76513f2f453ead1cadc0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ec8d52324f8d4842ffbb118b539f62b

    SHA1

    9ca0991fa3e4ccc3df66e92ebc7819ef4d38bebe

    SHA256

    220275f67b442d3bf7d39dc5101a748a242a088b49cde94d70bf3576fcd3ca86

    SHA512

    b41b40c14108fef7deafe76cc70bb1c8019467d3f650067731ca4a5195a95d8ad093d8f9cc5c1ce54cff4f2fb93bd40d26a7105870b5b184643f549c03bf8688

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ebff25107c7f5ffc2666596311c2991

    SHA1

    62aced7c327c62219446af34be600baf69fb41d4

    SHA256

    4bfd62589742f7fa1a0d2fd0feada16a1894342c883e1f4856f8ddeb0b931892

    SHA512

    d4d65eeba73c97e7d9fbb2a65f25913fa371348d0923a4acb5861cedd0e6a94d33f87217359e80024c76076e26180d1484d9047874ce08629ad94e77e952d25f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a1e3d47f2508741efdccd37f0172f10c

    SHA1

    f93097f91dc62341acb3160e448f6814554a640b

    SHA256

    224d7786f5df6df2b79e0e5191652be6599d26278e878ce908fda4649a198552

    SHA512

    3c5b887db4a58284c80f1c6955e74dd50363b813ce3cdce794cdc4f1b406013b2da75448cce2e63afd87e5af1a0c489b775059810f037e5b6f81db0b652377b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf3f67f2328800910845055fc5181a0a

    SHA1

    a6812b7cdb98ccf585755e7bdabeff71a644939d

    SHA256

    ee143f435ff71be11ff4afcedb5bbdf6d14603514c62bae5d6ba152995838309

    SHA512

    8626428f9bddebcc205b4db9d24deceb04758e86b24e70db991531bd115d72a16e920886e7225b97214525c35c22fad7c70b6e0ae1de6d77fa4ac689145bda74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5cd5bad5a89027efe7f3786932fe31a1

    SHA1

    8c2d5fe576cf98b7986190db1ed2f27f068ae806

    SHA256

    9ac61fe431d57d1861f8eceec0ffd7d3c4654f56ef92d75f68cbea85118c1433

    SHA512

    49a977e93319055084dbc68ddb6d983a844a6d3a51bf002a6f87a30fc8ad79cc72f0f65eb4e456f1b6c7cc72883978c17dd8cafa1f8bd183cb38ef40e8423b47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35f18fbd83ba20e90548e5f8443737f1

    SHA1

    13438e7496c7acd28d66546e442048f8a4ca4d04

    SHA256

    66358f7cb80d064e114f1b51320910dd6368e0717f7f8c9f69d403463fcd579b

    SHA512

    391d169f809fbd5a57013fa97b047ebfee380ebba4bf524798d8d901689cef646c39fbc03e9764671e3c63bcbaed236c173b38c9219095b1b20ad3a1c9e1eacc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5e02f220ca7fe93b7c6abfe2b36feace

    SHA1

    da83868aac7137894906ae24f351d556d8286047

    SHA256

    aa6a4dac0e733664242b1d022b3ad8821ccc49d4af54036acc29a6cf052c3247

    SHA512

    3cfd0647286b6a2ea3ef4c477d4b70edb61776c992de73d0c17a3d35ffb3c4074959103e71e050b95b40af958aa88c434bb788a2921a46eef296a8969cf9b6c6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92dab068df5b1a79b357b5812c1df355

    SHA1

    1920dbcd01204640e4deb5228249a3f50f4038e9

    SHA256

    3012d6d876100f5d034fafc3da62384adb7cf706fd5b94cc1342e45caf139960

    SHA512

    d07323ff01eeb061fdcf3afee973fcb1dbc8151e98d8042f8873e09b1b8692d08a2bce829aeb5ee6414c00a9b4c75937971fc6cfb31a331073310b38d9d7e780

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2a7c73ecd29cbc93bc7a2e5b9e98d79

    SHA1

    2ca2506101236b3e8d53ec2356b51b6ab17821d9

    SHA256

    3726a3f1f8f5a584e29b69d923ef17ab52fa050e8acea059234b46d51152b477

    SHA512

    f5b0dfeb29f8002287b5b231b54e76df6d2e2988901607af7435f6b2cff65208307f7e98567e6356f8a830dd2c4214ab71f6a12e6b41bcef8eca7309af492031

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d8093b4970de940c60cf743ec0c197cc

    SHA1

    df9200cf6e6b9dbcd2be84f861c46712e5a9b9b1

    SHA256

    9f6cd77bd461bcfd35a2270d17fdf9626cad6ced1728a98ca519c84163828557

    SHA512

    e440859fa1f0f3131bc0b1da807fdf90c569cde29ae4d6c19376d23536d1e84c78cfdbb72d31f06f29c3772ab61b2fadf19430afb2c45a7c59838b1c0751b17b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7f5e0cb763435dd7feafdd7764c72ce0

    SHA1

    2c97f4ceb395960c6683d6472c955f874b761768

    SHA256

    be6867e737828e5971670b12ec1868a661fa8fa3c71fb7c993b8a236fc2bd90f

    SHA512

    bead310616010abab8589113c2dddbe9385a64931e31b980cc9bd3a04517aedeea02441808d5d0416a42832dd4f0400f7ce9472192cd620f42cb6a776f2d02d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de241d02371374346563d30687241346

    SHA1

    cde7ea0495c358b98ce16aad609629ef5c7fddb5

    SHA256

    e00b2eaaf734b603713be62dd6bb3184e932574408084272cfa9cb162e8e3d89

    SHA512

    b7bcd66724737d7c4f91d2a05c0454ce9ac425b6412914b1f8ad09bf39480245628e6a30b9d9ca6b54fde08919ad8fb69d0dc24be125275ca0f8615ef6d1eb7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f722c8b42aba3bfd7959d10d514aade3

    SHA1

    4411b6a5312fa43e3972d8368e09fb6d45149ae7

    SHA256

    0d9e9838b1e507d42eb9c91b2d38f15bd1404eff2b26af6d9778b75b81e262f8

    SHA512

    712fe606971ac893c94afe929a9ddb21d6b01cc474f5be1d46f6a13b0a56a9d1d71db0dcda5590287ff4bc9489381ee6d75c32316908bd5d92d39d69e9a98335

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd601fafc140055fe700ae59ff29f03b

    SHA1

    749234ce6e71b64d545b90075aeb5ad0a2bcd884

    SHA256

    646acc88ac766a5251d932305e7800b2300689207191ee108c62827ea9160833

    SHA512

    f24d547ede5dc0fbb1b213a0f4e514d63a92be11050a88af77c702e0353c3957276d8a6460259c446dc446f98546b7228f7db79d171d209df7cff4bb2230888a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11f3f7f29a35984910a12e4fbd59855f

    SHA1

    5a030754a3e14400ff23417a41d96e100f701f53

    SHA256

    ccc74b663701836a1b8922ba8509ef4943ee4f8ef1496b26a9de3f7536bed8a2

    SHA512

    f39b982a73c406f6053db85bc297c71f363fe9e0cb611f54e244fe3f61b66d14e66a3d47224751fa2ef15d38113cb28292e2b0ee673cdd67aa43fce1bbaadd84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    806876055da67d5fd36df7fe1b0161ee

    SHA1

    307a407b102ad0ed9b0b1b5bec30e0eda070978e

    SHA256

    e1368c2a7da4cd8b02eb498ddc00fd81315bad1e358d6aac2d643e3faee6e228

    SHA512

    c4d054604a6a08f4242010cea8d489ad5523043200bf3379d90d92522c225e70098702cbd6a7cb969b0bbe0a68d6af04fbc7b9649e49125a9084a2d3798fad28

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8843c25daed2ec9e3368a6e7e5f7f656

    SHA1

    948f8149be1ec1942b127a09beb35de34ec4909e

    SHA256

    81ed74e66170d47327ba7936f0823de3314d36ddf6db601a8f9d37e3f894c037

    SHA512

    fae9cd0ba95e56b122b24e0f4b3155769b3c727287f0168f793cc6a6c6a78bf53cf66098689dfcd2ec598c87aa80afe67415579018813e1d36888a1b1160b5f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7a8a69badc328991d1bdaa0d554f03b5

    SHA1

    b1ba7a7f7274c6ce0a212c86387b579a29f46817

    SHA256

    0a4373756d50d9cecdbc0ba211f0bf6ea99fed190eb673f15bf03fd83dacfb26

    SHA512

    3715bdd030b80ed49f13fbac7a5148e48d1f6b8882f4994a90da60413e4bc5a5a79c3fe6e8b29a23320d5f731515e354f3f8583711e323e5d0d6c0de19ce57d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f97e330ac41788146a3845e81676582

    SHA1

    0c29b1d0156753f480084d45ad8d124d9c145efa

    SHA256

    d096c52c4ff1bec4ff4951ce6c9c88ece400d20ef079757e0b848a88af8ed9c9

    SHA512

    b4df068beb46ed9d43f01ac0b5d8155d3f9bc315a4e61c37b5097d67a1e2caaaa94e8a38435a9ab57f41038c746579f6b4c567cc79b3c777df613cdd9960da39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    fbfaf4dbf7aa91488374224a8db49459

    SHA1

    1057866375f9fb2631faaf85dfa1cb173f8b7e97

    SHA256

    66a691ae899d55389024958d7c15b9e965a3a6994b00d83e10506a02a7711217

    SHA512

    389976a595deb3bb3303876e14178415ca96342562d6cd1b4ae02afcb02cde1e77944e570b789c581c6760260f0f86c7d7eefca74d36dc8899effdf782e7cbfa

  • C:\Users\Admin\AppData\Local\Temp\Cab7EE.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar800.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b