Analysis

  • max time kernel
    141s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    01/10/2024, 17:39

General

  • Target

    06c3720a92a5c79ff434be210f6533d0_JaffaCakes118.html

  • Size

    57KB

  • MD5

    06c3720a92a5c79ff434be210f6533d0

  • SHA1

    fe26f0253fef6e45856315c7c19377c5cc385763

  • SHA256

    af57343524daea58e822f78d6ebe1bc044f29d3820075bce3707a8bc754ceb35

  • SHA512

    f8f5b7b9503694e0c761793f991ab4b56288957c3c0f7b042ea5c9b88e11d0daefdfda88e433e90bf9ac18d551b5b52a8c7a9149c15ec2e203ff8fd323ea9369

  • SSDEEP

    1536:ijEQvK8OPHdsAuo2vgyHJv0owbd6zKD6CDK2RVrot1wpDK2RVy:ijnOPHds22vgyHJutDK2RVrot1wpDK2m

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\06c3720a92a5c79ff434be210f6533d0_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2996
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2996 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2776

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    423281f98a3c8d98ced64ad1f415fd4e

    SHA1

    e0a2e8cb7e9e242bdb7844eb8c6cc23bd51f6c8a

    SHA256

    979fd88cbbb84794f5e68692f24ea66d45fcaacedacede9880463f9274e06d57

    SHA512

    8de62429100854ae8edeb7f0681c99622432d9035f64199ea4dc11825475c48bf9530a07fe316a75b3906d921a943652d115c6d0c8edd746d15c73d85bd6cf14

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e572fa254371eaaecd1597364f5e626a

    SHA1

    fa08197e55c071d957ae3b9b6f3b7e66d6770062

    SHA256

    0c77ea2eacd82dd0bd6ac223cd22e9564ea4bb51018962a379b4bcc2dec68410

    SHA512

    5d423ffd4bc4bf4103aded09a81d8ea782653585600ef91770e0c68c19f95f256354023bafae095aeaa26a234809c7c6d8be4a0baa74fc481c1c92269da0722e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b75c520314dcccecfc603d025548cc08

    SHA1

    3a80ddcd050ae42d81ff07642f14dbbc6604af4f

    SHA256

    1d8895f621dbdb6e273a0a4bae212322c3d2d20f6ead6fb11782a58db7973a87

    SHA512

    c4f0d7c26830b07ef75e5729ff3f24cc32b694e7aa2f21da7d7e9e2e031413bce5e05ebe7822d8f8942fc8e7bb3037b67eb4b5d309d3a680440cfdeb2811b2fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32491b5aec37714f0fad9208ea06a19b

    SHA1

    b701d6add3e116e1446783353e473d59085fa877

    SHA256

    195529d3fd99e9a064085f75e32cd5043797ef161718555842895830230090f2

    SHA512

    8b7d3215a7fc4af5ff14087e374a9826d6d6b99c60f114dfceffe955aaa04569b3e31454f2842e72b6a9a4ce6a0b2bc8c94b513afd14949189efdbbc3dd35a6a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    de5268160979916d30edfc11b19cb30e

    SHA1

    5dfee8250fdf46518ff0944fb043aa472cafd273

    SHA256

    775bbe937fdafc2fbb0bd17c66844db9141ecf6b251c46cbe33a84102ccc74e2

    SHA512

    a52a5f4f2cfa30bc64eaae4dededaf4df71c1693e09db35263edcabe9f0cc436f187e4794c040782f9198ede8e55d9e39a570e55ca900c9cc7f3116f08241df5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a71c0f1b1f2a613a0ffe7e69efbaaf0

    SHA1

    18230424292eae69733be25ea7a3eadfb575c975

    SHA256

    493d82feae142a1c08fed380bf4e9089e6a3691e9382e4008ae58a4c4c9d10c6

    SHA512

    5f11bcb859de9c7959ae60833608e67cf42e56e432c5f8cc995588b22c0632fd31b26ef870832894b5632ed09dc190bafe0ab81d16542e4d7b7b15779f5972b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2cd7841e4444883f35aec49e4e109752

    SHA1

    93ed4a32a61078ad9718afc063f64dc6a6c10399

    SHA256

    144a992cdeaab3633c92c64d82b4da5a9e068fe029b07e586b5ae9da866bb94d

    SHA512

    3133bdf19f02da92902a7ac0ab6965e1c66401b7ecf684b46435c6308b7e7e74a7c9c00d40547376647a5467d3eb607366277bc9cb8c28860bf87bf09cfcd8e7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7b363d3710adb727675bfbb29c81b8a3

    SHA1

    988a1176f4e82a4d6b21ef7fe0da0d48fba7f091

    SHA256

    d4f23727a2cb6e8c1e1eea191e12ba7f8d9adfe9924102bc4c4574df4a656b3b

    SHA512

    6aa89c62b69fad57191eb10ee2278bee9e267df73038605c9a29d3d1b6d01fea8b339036fcbf8f791bb288e31003fc647edcc16591a68ee5d8cedac897a65cfd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b1029b40fc2701eb4ad9ab140134de14

    SHA1

    7046ab02624acfd5391c70c7f023a0d98c6a6d6d

    SHA256

    8dfad921cc9132854dce8048ecd2cd8d71efafe22d7d0552bf464ac33a3e951b

    SHA512

    19a91ddb2d173fd2e61764d9cf6e48bb86f6d0b10a9a0a75b1b026888a29f170a76fae00ffa67436c1fbe79182af4d41d2da838441c2a91f016b2b6f3154a140

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b31d8f5a76c08d074d6a7e37db565366

    SHA1

    dc93583251259c44ca9c32f5d312ea7dfc5cddf1

    SHA256

    ed8c9ce1a7c4ab7152d79b21916549796951ca55301a5d9cfd4ca2fb65df8bc0

    SHA512

    410a6a4b114cfe30354f0c386d127aa4610d13789b5f94994080b4eff5c36fdd2e29e29075dcb10070729e61d96542f277f3903a05553dcb2d293b2eb841185d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfe9e385a82143bd066dde09a03e4ab5

    SHA1

    5ce8f08e998c964e3cf4446115906259941340b2

    SHA256

    802773e1ce3facaebb0e08a016f0153db5425c2acb9c4ec2170e20d01a48b841

    SHA512

    82b36e3bfbcc6b5ff3a3a76e1d6d3fbe5cda6b39112663f1e6faed47a7bd2e4fd91c61daa90dbbec32959ffcb3b7c5bbbc61c1418a4f31119453cbeb27355126

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c54c00a8f8903b2c91391b5a287b2fd3

    SHA1

    092f39e85f2e8b678f058ab3e0b80f045962fee0

    SHA256

    78b2bde14af6121816ee645d2ca84008b97773bc3d40a6b02ac672048c469d22

    SHA512

    73e3cb6b3b16f03f3b8a6dcf982859f9c908150e72d3959199ad108742f9bb909d05389fdcf61bdcb19c1a59afc6b7268e16f9e59dd6bb073662cbb40eda62b2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    31f6e886b95ac2c7b7cb7f9d0a28eea1

    SHA1

    cf70b7f5e0084c7b1f27c698d0e5a16e27426d81

    SHA256

    d3bada35211daac0ec1718edba84fef5ffed4d3ceea6e704916a3b273b6d88d6

    SHA512

    fcfe0dd773a01be207dc96b5c30b1655dd397bdf331f6457cb5995543e4c3c4904a98735efe92d773642d8a76068e175e9dfefafec4c185a01c8c7425f701de0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c47830a90aabbd481dc38e6ead0284ed

    SHA1

    e9e4236d094fc2a9bd9e3ac5e6991c6691cb1976

    SHA256

    c8b57166fb02e101202ce01e7c65cb5e813741ef18b6a8afe004dd7b4e604004

    SHA512

    7fe58c4d882e8cb49bf6f8d254cbe2f7271da9f5f39c9d0476e2fb3c154649e0f78a67fb4607de2be14bbc6e64df49314370d916a24c5f928eaee2a358a6330f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20dd613422671cb2456fffa632411a63

    SHA1

    742d69b18b8babbab46c2dc1eb67ccd2350666e6

    SHA256

    ec9811b2e01e643878fb220a861d841a81a5d95174caf992b914bdeb7f2d4e69

    SHA512

    c473d9a519b36af8d84ab155996690661d0299657f2809d04435ede60059c93592b3b4e0537644472882ad4a4f03507bd3093819ba41d7da7c0c07c1dfa6bb51

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5df94df124c55df1a7488fa37dc878a2

    SHA1

    7649b38435aa1d1a410c778fe0593544a3a263d1

    SHA256

    d7949e1c81ad111c0ca2f776b6ec905033b5eccb2566dd59cb70a9bedc95c05e

    SHA512

    3a63a8a2666817650bc479ecfe5ef1bea5c91c67ba9f2b41775659b6c732d05cb24a67bf05c25f6ebdff02b270ac3e628be7781c75d786ce615ed4b8a0549ae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5ccbb2a62586631e5f7edf1a2fbf406

    SHA1

    b22f20946c3a4b94c080e953964485fe5297feb1

    SHA256

    60eb0d28822f2d1a3de0754998fc2c96e3cde11f8dd0f48f7d0ab97d4d78db21

    SHA512

    7aeca261b9433cce6ea1a5be00105afd9f0bd7be06d74df25a701ce4e3172bfffff8c7eecf1dfb776f41fb9f07f543f3f6655ac32cb89b15a7b89ac3e8724380

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c857c901c0db5940685dd0697e015697

    SHA1

    8d8c0d651889d73b594198e7db246dc72a6a4c73

    SHA256

    2dfe490d5d2ab36ab886bbd946581e58b234ebb819a0d6514e638940b7295362

    SHA512

    9e010c6708532925ec924dacc3448e6e0753852e3cfe0840ca705f0255a182f1a122d34a51eda2e0895507d5b78effcaefe8b6eedcd4956d8d1eef253a5dc467

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ea0f1717939c2ddd75deea6354a9867

    SHA1

    19af0c150916cb61946d4708bf89269766c37e19

    SHA256

    17e8e6856740d98d9654ac5438d9dec4253739078d1354de74a699a250072677

    SHA512

    5d1a51569eb135fe0666b5ad6cfa1e1b68ba3dc6c25239f2e4aaa5d9ef20702a36d167970d8533dea2ed6498f95f0a898de179fecf2c9b688b690d87379646c5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc777a61aeb42f349bc4afff7fd9cd91

    SHA1

    f72137cac1c291d413a54e5b23834c0a66659741

    SHA256

    8c81d6552dd908f268ba59017dd96b112f24789c6b1d33d5a033d2b09f73ee86

    SHA512

    538994f12447b8de61cdc55975092c4a4a1f418573ac470490a7355491dedb1628b8ed390c10f7951e8060b45ac9fe17ac890f507415bdbb60636851048141a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3381fa8c46015aa8fe2fb58dda8dce99

    SHA1

    0bb77a27cd7c99c8429dd79d7afe300c840c543c

    SHA256

    5015279dd9afba96eccc81ede66ffd58c0a0fdee5b3d0553e04c16e4f1df5cc5

    SHA512

    1df1ea96a46655753528eb4adb7567dd76e6e908f8068aaedb76a59aeeba6823f8acc5878fb12149131448c85c354005863b2b78c08a94c26f9de93c2f9c7e42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    130ba080035324d8cc9ce84d8c9bedb7

    SHA1

    960eab4773180e0465ca67a9fd21e0c56a662456

    SHA256

    1233ab9238b058c6b8fb1cb860d5f40ee93fcf1f5fb148f01f688bccf23e8cac

    SHA512

    0ae31660d2ea17aa665d48117a7a7b89e5bdde0aaccba24b66366009820adc559b978248f15ffecf8851a37b2e8002387cf7804daf229ed535f113078372ebba

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1d80fa7b5e591aadc14ba40ed2b2afaa

    SHA1

    2dfa6647f8cb4df48fc9cdbebfc9b98b8b28bc67

    SHA256

    49f2c1c6bb37ebeee372693700e87cd99e714e9aef77b5629a3489aeb25de74e

    SHA512

    bbff00a4000aa0be2b685e9781cf10db3352c848474681ec16714a62244b208d5bb92ed23d720bb3218f7c32aa94cdacb148d568b3394463ac5ff2b206880a34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    428efbda9948e6ea9d89fa8d3465542c

    SHA1

    04cc3668bcc3e21bbd8a144032af90f5a9bd7272

    SHA256

    53e9b9c5fe9c65d2416e15f3f79524056badf2bd2905ecdba2c56af7f17adad2

    SHA512

    02ecdaecdb94af6c834c164ddad52f8979eec82870d801cafb89757b2c305b94a19d3e58f78a34be1e05436c1ed4974e75e84b49de92976513968e9dd86ce2a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2b47b117a294f58554852047234c5f66

    SHA1

    86865d15155dbf3d15a67eed9a0cff05a47767e0

    SHA256

    5271e42ca000b9defbfc6cce1b1994aee3665c7385ea08feb28ca0e29fa436a7

    SHA512

    f39a6fd3e570f39b0d9c484dd378953385823f86c3744f5353c33181beafb20cfda034d7cbd152a02f6d91a332636291ebefc0bc7a88e0542966d162d9a2cb78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    c8b4ba7e1e9c032ee283d89208de8d2d

    SHA1

    25fc7b0437354539e7d7fc255b1e0fbd7c205f02

    SHA256

    59438377110bb96be56f5d02bee1982ea8e3b11d95caa9d27ba1c37cd8d170ec

    SHA512

    4320144afc95e27cc94cd208eef896603e981ba354b76cac3aa24f79631a222186e7c246ba7d7921cd763b0e52097df3c308c8175c92332e51d96f702f54c5ae

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K3VL8XEP\f[1].txt

    Filesize

    40KB

    MD5

    b7fbd1ff97364a77e02772b1b5bcfbd1

    SHA1

    d91383ff56ec110480f818b4b086000de214ac0d

    SHA256

    ba5e4a82471569bbf286a0b8e57dbc68de93567c005e60b397ae0b2e34a2f196

    SHA512

    7e4aeb8e3d8663aea77e7a8d27ae5a6f3d9172f67195801c34c427e3111cadd074c6e4cbb9be9c7bd49635a22df0c5b7207084ca9328ea8074d3b50fdd080a25

  • C:\Users\Admin\AppData\Local\Temp\CabF633.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF646.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b