Analysis

  • max time kernel
    121s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 15:47

General

  • Target

    0f72f96c9ea2ace0d8919852eb77d160_JaffaCakes118.html

  • Size

    12KB

  • MD5

    0f72f96c9ea2ace0d8919852eb77d160

  • SHA1

    33fcbc65db1c4129cc41c9b4178399383fb2d798

  • SHA256

    70af0b88cd369bacca3bd6fb3b01d1b8da0886bd53226ac92322669ee9a56e18

  • SHA512

    f45caaa1256058308aadab59302603d3aeedb8e2c061865a7e251e54e0dec4e80f9118b9ce5617c7470bca926a318c3464c18ffeae1a659456e57520b94bda26

  • SSDEEP

    192:2VZalIsr0KXyJJVCqN5CH8k/w1wvqVkZMBDZznxMCpm01LauBuLbdU8d:s4lIc+VrjCh/gYMBDZznxMCpm0LaguLZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0f72f96c9ea2ace0d8919852eb77d160_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2312
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2312 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2836

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1c3595abb660a9fd27eda4ab260cfdba

    SHA1

    a0ea7628e31e85a6e53cb7d669ae92d0262232fd

    SHA256

    dcae72e7b2cd42fbf03832024961ec140a875b3fac521086b08a96c01b2c1a88

    SHA512

    44d9d96ed4876ad16b0999418022a97837b323de5a36b6af470b6c12bf1aacd08534dc5150814fea71067e7ad246bd9cfcc42ecb26b67811f7aa7a2d9b0f214b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4b2f92ae379045165708e55c8ae2451

    SHA1

    2b21caed18852eaa81e027e3547d319682d70142

    SHA256

    5eb7653e339a430b9ff995a1b58a30ff8162ca5092e3c014d52a5b54b3d8af53

    SHA512

    99a7250d67b1821fa7f68d95a651f1bc9d1a52524325f59de7741b488f34379395b134c76f0fbb62081491e8462ba9e4f939142f0adf544a586edd3209196978

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d31ff5749bec5e81896a644d53306447

    SHA1

    f10882aeaecfa1c0f3849068a54ed9d385de6e67

    SHA256

    3aebe93f6f29f27977a17158c4ec4c49fb12e3b115b6ea127b2172e456f3490a

    SHA512

    a8388377dd2e5fc1212567f42cb7e5e10e7b1cfb5371065fa5506bfaa6b9034c1856712ac03b60620c5f7d96dbe6d4fc0f04e7dee4f9e99461fe4eb578fd65a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5853d95a01a4479db6154302671690a3

    SHA1

    f3fd1761e6e154517a136eb28d4585b84f9926c9

    SHA256

    06047c2ae40c9274377b19920db620c6d729cbd196f7acc0109a7a57c94da30e

    SHA512

    cf358ba18333d7a0aae7902b5d9988253d9bea7eff5cf0e3230feb6a0509b837f7fa155165cf4df19a3fed3c2e6580dc274f9e1388cea101be75b1241522293f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4514d03783b4f1cffa9069415e4ac49e

    SHA1

    a5a43dc86c7c1e761e0815a7b093fa34d111d57e

    SHA256

    1b1f79e1494228f9ca31f21469e6c919bf43a56d2f5f2c8d5a75ae3f19764166

    SHA512

    d3e9e25713065f024e645c57569a52a3515b995fbc8561c34f767114efdeb8c119d83585d4356430bb6570f9b1939681ab18d2acdd852f5a5e8ea2587ae7da5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58a99af6823afa4533b3fe727e3532f1

    SHA1

    9ef6cc4802ce0851fee6f7b6799f1e96a02953e0

    SHA256

    1a64bb017e0c8e9dee2dd136fc9b475b684c15ecdc12b1a8e4fa1fa533e71447

    SHA512

    4f060594a0c95c47004996a2c0822ccc84dcefb9d248884de3ace407e03e42a35cf23452f2a8a0274451b09c45fb04b551eb79ab4af8868f1fe3b2d0a6467069

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c91d81280a9fb56aefa77e137f6cb972

    SHA1

    b0a9018d4ac3718baef9e9ad757614d74904c22b

    SHA256

    b4c16ebe88a699a39d7c3072e29f9dd24b3701330ec99e49abaade7d10217a44

    SHA512

    b24a4a70dd804fe9713c54dabda861117c44465a71058edd24a34f760d2a1bad137f781801a1c0cb3fb54e2ede7e65aa4035b9a1b978b916ca82ce982b7f98e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b29bd3ea59842a844b023910cefb9ce7

    SHA1

    a96393e471158b741aa7548f49ee700d75aa8ffe

    SHA256

    18f0af9688f7c853cbf570186c08b34814f88ef9aa61bfbb32cdc7bc006507aa

    SHA512

    314a7258d9f5c0b1c5df504ed185f6749794b2c65b0b35fde9606be250f4f5fde2241d871188b9a97b0dc142409b095aa9312e7a6842153a7e26a196ed1a4c80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61f5f585565a3ba54b465554209d9ae7

    SHA1

    8c7599cd8414070d96bde2d9373e5d06715d1bf1

    SHA256

    825331fe36e520d693b0bc1cf7f3d8fd8a7a90f94f75bba56e3575099659eee2

    SHA512

    f58e91fff1e91cf1bac31bc4fd8661f6e78b79f32f3ab731cd08011656ee2b4bcb82db2d05d3c6c140c12baccc9cd1749a4a870f6fe185aa9c4188a8b93e1e73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    af19fae6f4d4d2f3e097903a0043a88d

    SHA1

    1ed6baad85980ec0ccd42c8333b6857f0056f6f5

    SHA256

    d4c8773c4fc6a22ed8f6a7778bfdba4a3af2f2af91c41a8d4bb9a153206e8718

    SHA512

    f8a3c1bf93df63a36d734178ab47c7da90922b3c011e184b46b2892f0f853195bcffb1d605110f06e213372f2809010c5c4345f3b096def25fb989164e527d73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    18820f1bb83b4eae5ac8afaba82629b7

    SHA1

    2cbaeefd4458b5c47f3308b61a63c765dedf77ad

    SHA256

    5c4f3db0b10787f36dfc0df27ba21981e6a063dfe8e30561b9b44ebbfe78e8fa

    SHA512

    ceae453cd173cba550a6ff594f93716a0521e254963ac76f8e92b63a26f3de8764da55e81a74964e8c54cb0d2455d05a86137bf41a16e426033fc4d87c4a10ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7739e8884553abc5fec68d7f60c05bcd

    SHA1

    24ec591bafc6e92973f33a357fbd3d1037c0070c

    SHA256

    9a9a859c268b332caa3beb4e1d4fa44d767d7100d3ba85db57b1adf539347338

    SHA512

    e71e158a54f24d0d2d243ba3ef8853add581d1c1fa554f7ea09fc9adb9d35873dbc6ac058f3b186190b96993dc922911b664323ee5125e7723fc83434add7cfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    33ef63c00dd279c1f4f0baacfba2ab74

    SHA1

    8b18e29a3461a93e1e7afe248fdb31cf08aafd68

    SHA256

    3061ac1ed3ce5bf4719f8dbc35d724ddca21fad1eb75d3d38d2a5540cac803ae

    SHA512

    77930582f735986075910bea1202f8b3e49b64c1e7a16a555a4aae867113acab2209d7eebacd74d937fea59382f15e614b6ed196d95b422afef67676c6fbe1e8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09515dbb32b39ded5b1482e25beed561

    SHA1

    7155f7598e319b2cc698893d69d285dc3f875878

    SHA256

    a931e5e082e9c67f35c521ca6ccb48ebd9ebd5d615e257bf4bcd4d719dde65d7

    SHA512

    c5f639cb3860191afd455b46c05725aca2eda126e9b439b6b90bae816e4267ca7d14d4f5e4d1fc3c20db70b902dee5a80306435463d7b04d2d340f263e1b8246

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    04dcae57670d6924dbb2e2426947ae45

    SHA1

    e601a3274a8a8e1cc7314f673a8698a5df7dcd26

    SHA256

    6ae62cd161c4aebf5f376192ec3c25cb12fd59349857ca77990dc00dbc75cee4

    SHA512

    a6089ac2ecd28244e0ee64e3745fa69512cc6b548c55a7490cd53372187f74575d62d4634b512eef2cbf14c47faa4d0d599366ab40ac9f4822eea2d9de1839c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0f99a14da68dc0435859224ac38f42af

    SHA1

    ef3b091cc70ba0cc9eeb3ccbb46b9645dac398d7

    SHA256

    94200b509ead60c58f3bc1fc336d9f481ab9e201421b2e53de251fc5ad3c6572

    SHA512

    2e62247f7a4703579e7f199cac3c886044e3a064bc0e5e7b692e330548b6753a039020b0b009ee6c9b4134023679b7503420e2684bde56c19f830f2530c6f694

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66d3d1b037562f1331bbd2f61d801d98

    SHA1

    7847fb5d111257c89ac6bf65d676a24bbb21f969

    SHA256

    6893de629719414e48a33f7440ffa6e8695e8f6bb75e6d8e34839c25bedb25ef

    SHA512

    b331b517afbf2c4145b05156f991e077a96e800d0fa6ad6ad1fe399bd0c9d1be693670b59dcdbe1c89a16211687752364de01e3b4a699c7e18c0a9efa094305c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    26f28f98276e7b28a2338c68599686df

    SHA1

    9ff6363e10fbc3ebbcf7541363d9fe09065d37da

    SHA256

    eb0699d7af28e138f2324b97fe4d19e174743746ac98cde38f40d32c1e33c99a

    SHA512

    c30558f8257550593f84b09c51f07aed41de5036df4b8de2c4bd1717bf4a459e5ea6df6923a8e3fbfb35febf1e4571cee81aae63438896312b2da308885ee234

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e1c376e18bd3c0a59ffb1dc8a5a2eb88

    SHA1

    7525f5787dee74605e3ae42ff512fca7bc983823

    SHA256

    09ff608fa6d0e72567462280ecac5ba56e29baa0106e91278f4bc84da7047868

    SHA512

    f867f0f739d5eccdc88067d5bd649656e8dcad2b8333735da1cfcf047f0505fbb7cf6f06c93e9e49c4e867b8e536feaa889c55944e9b5bf8d3f83e92714a7b4a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00825f2e11deb33e21aa9569d4909504

    SHA1

    18ad810a17c827947559495eb0f2791a68a06e66

    SHA256

    2256952fea01b492b42d98e4025e6aafa7f9ee1d2ab47b5fd23467bffd8c2d69

    SHA512

    0274aaa2e82998d3e5c3e2c43a442fa5d42fe723643d4db9b0d7de3b781f966843e542fcde41b28e0000f30472adfd8a5d063368df9fb24746d454614d70f966

  • C:\Users\Admin\AppData\Local\Temp\Cab584F.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar58EF.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b