Analysis

  • max time kernel
    141s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 18:47

General

  • Target

    101f31825bf8bdeac61426df0d6ae7f8_JaffaCakes118.html

  • Size

    18KB

  • MD5

    101f31825bf8bdeac61426df0d6ae7f8

  • SHA1

    0e5c1b434fe2f7ed9fac9807fca3f413b0571892

  • SHA256

    f78d060a04e64c443388cb64b447b77204d59876548fed20340f97117d387415

  • SHA512

    197c017fde3ed75661cc0d2b10672230c14b6923397b1070847e7cd5d07ff92ab30ca32407199be16374567c5bb36ecaf569d00cba5f90235f5c771b76990f4c

  • SSDEEP

    384:m94giVo4gXrRleG7ngdpQkCftEkLjK1IaGuLpxpb+u9+QTOdu+0qQaB134X:HTe4g7RdgXtCj5uLpxpb+u/BqQaB132

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\101f31825bf8bdeac61426df0d6ae7f8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1852
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1852 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1488

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    e4438a2b2ef1f26c0f790699b6f3dc8a

    SHA1

    cfdf805a0dcc844cb3174c917d9c8520bf2efdc6

    SHA256

    654ac702e9f7ccec75d008265d8cc56597b587dcfe1f67829326b34c50b8f5ed

    SHA512

    44d52f4e6bffa74631c4a9a905a38957f5c66481208d0a043b798e359f207468c3c224b1f5dd7785482d53250921cc3c2254048aee37df57df93f754a2254f6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ae4ef94e09b7355f65dabd27517c3382

    SHA1

    1df76d880c8c49fe946ebb75c3264b36ff80d4f3

    SHA256

    984a216aac086b3e3c272b222475206789918d856e4b10d45263d9549039a976

    SHA512

    f56f1c54d75a16f93d7b88058516f8b6d76b95039f5852fd0583646ecfd5da6487d79407eb03466ba6c6f362205b2ffedeeda1f8673288d4c8d088b740c083f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1127b34acb858e93e94dfc4437a3c264

    SHA1

    57b7f5aeea74b113d0f7f6fadb93339e5abba6d3

    SHA256

    23e8722cf9f4f37b29e0648d24a365cf4b5333d9b067452903c1426fa17b6190

    SHA512

    103095adc69adc5f816777c7c510d2384cb22acf25d2f23c499e292808cb279b995b235da48153f881aa07ee6b5574de1520041da10a602b083ca58d7f8285c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c277b83d89263461ebb1a26fad29d574

    SHA1

    52e47dd4d3855e98041a18a8225deb4409120ec5

    SHA256

    bb5ad03e69d605ba79fd265d786ab4a1272f2c09a313e93d68cced3f89cdafe8

    SHA512

    214dd0bc9ee4fcc140703e0de1339c6aae5117a7b952fe50fa3c138ebfd09d96effe2e9831edf8cb5d1c77ea5f49f5c61e390dca2ceecb938d5d62cb13a59c78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0b4e8a94503e1175634b89c19e1c5015

    SHA1

    9e8669e97f1eee3c2696524d75462865a65937a1

    SHA256

    d90c85acd05746f613eb22c52312a9ddc4262e53658e073c3e44728ffd0fa046

    SHA512

    c9b231a58be0e44566bd23d5415319a46dbc22324b2b59be181be0b8690a38791048722764319ecb22135b271fc48d2d5ce031f32cac2f395313796092c326db

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35a00aa1177d30dba55c53187d5da01d

    SHA1

    6c71ea8d8516e87174582e9f3c7dbd58bf572b2b

    SHA256

    e68c740c357d8e6b5019d2e9fb37ea8e18c2f7a8dfd87841a9db46579bd6249c

    SHA512

    bc509ddb8223e9d2c69f00ac62aaba7aac81d5233b77db9a03370307d3ad958aea79fb624543d3064007f5c6bad14edbda6ada6b3a8c819ecd8dbef86caca16a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6e19344eb5955c5aacb9826da7773350

    SHA1

    fcb3b240b20f3041bf55d6549e6197acbdf9370e

    SHA256

    734c8c06727a7a5f991a5048c6180238e932b44ea409c6367ddf05dba9a5064c

    SHA512

    aa1ddc00088c4c41aa056a136128eac7a6bdbc96dcdebf5e243fd98f7a32261daaf9dbe71aeb310c24174e1bcf610c987279246bf0a6ea415de3aedaf47bdb12

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a97baeee42073d7003bd8038844b447b

    SHA1

    1afb92b0e581527ee7efb011d1548a6e556e73f3

    SHA256

    e240e4fefc51ce618067e546a00efeeafdbe6614686bc1b4b5f744f5d55f48a2

    SHA512

    952e4996b8a85e16d5a980eadee2ffd749f6ff8edefbb1207affff9a775e4ae8a4af70a6a98e52ba690fd46846e93f61bd106ccf482847ad82378b287415d55f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    65460405bf34d0de6404aeb04e9a62e0

    SHA1

    adedd86b2c5878ca6a45dfea5c5ee2dc19d3fa25

    SHA256

    8f369e2dfe1121baebb88b443b40d48d77c452c4f06063f92808dd0f9d4744b7

    SHA512

    dd726fa40b0975e5df3332b0d518cd95c4a69333e2d977b76255133256ea8ee644e7e5117ee7ad464f091e60ab30243e65607756f7a4be3c5f5630fbf4dbcc84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68ff1ac5eb7b1b30861217659fb5256a

    SHA1

    280a7bcb2afb0e9fac3c062591beab0924850576

    SHA256

    fd6baaa47204d653a425720460a41882ff223659f4e51727abdc62860637b1b7

    SHA512

    0d0ffe53a19c479f9c2ecae1e91f4ae45c4f88fab837a958656b326b3b4e7b4065186f245023f96d13a3d5cd30358c0271ebe3fefdef69dc4457cd583635dbe9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9b90db2b49af59339902d66c911ac4d2

    SHA1

    812b8db41aac582866f70161fca10f2002a9641c

    SHA256

    a547a4a044e384c75d02f8a08ab508d02005500cd466c5a0a250a8d2f235951c

    SHA512

    6f06e4fa777c328b20a5c0e0a4df2918290a0916f8ef3cf0610530ce3d4e1e77a30549b0cde3e6932968c92c4ecae36891392cb6f98ce44656aab1e9d29aa88e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aedfc30aa39b0a9809b24d56e4d7dab5

    SHA1

    2c29eb11059795b906a0c08752fc489734c5f286

    SHA256

    af1fc047aa8d0e7eed37fffe596c18e6bcf454751483e68810e9d3d15dde14c1

    SHA512

    be28eb96d6279ff30d8140b0a464417ead32c6d0a1af5bb6a243165440a6fb7c225e505d34216827a8e5bca9d8d5d35e630a6443cadfb8b5cf86a5e41f7512d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    492eeb5662380e6d64ceed4dcc5301d1

    SHA1

    1f4244f2d2ad885b8f68af6ae47722499f36d479

    SHA256

    e25da47dbb382b0e4d860157bba7cb8290a91cf8d2ab1d1cdcf0a1aad42cd9bb

    SHA512

    c2a2b809a5045d112fd0392989847e64e2155010d08757fcf1ed627699849ae54c6f7b87bcf342efe5ab8aa3e0b50566233e87ee4f275f0002d9735120e18896

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    11949cfaf6e647bad7a3377465c15922

    SHA1

    7cedf856e15a89c0b579e11389eb759696e62726

    SHA256

    76b430264ee6d4f8379301d6ab051e845366b2ce808c6ad97e2e2e6ea20a4466

    SHA512

    b0f372b844af4d15b42bdedcc1ab4b1230d39577e3afad20e5a0c8a65dba5ddb5ce8cd074dd0f7d4bf2d0bac71d9bba1ca827fd943e605db0b29f0768bff1c4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4dda02ec9ae4f2be757e8be3457ab931

    SHA1

    1b0bc21d59049104044a69688fda5a59c2fa102a

    SHA256

    d8aea9e07deabaced59bd5ce90136073d6485b88908fd7d572a5a7cb21f77adc

    SHA512

    3ac58f2ef3c0ba90164a7af45e6349fcd5ffa896f21b70910e7fa97474934b5fea468dd5cfa010ba877472e4f1c013125195e41e6a6002b51f473cd1659fe496

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9fab5b0e4762e7473d458b3333790fa0

    SHA1

    d4be7e61740ec865a2cd32060039ed807b77c7f5

    SHA256

    129db320f820d7c74331cfbe5a84c4815155b76ce9737bfdbd46a5e812089cda

    SHA512

    eefb5ab4d48f55f08977aab35a010c5c23f9852e9db240d180517389b4a8b8b7ac92cd4598675d49fee3551755d3cc38e95763cc76eb010ebb6d4e8d3259fb0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fefd65ee6497739814f7ac98d394cb08

    SHA1

    8c0090dbdcbf1fc83eae3c5c3e37d6835d954454

    SHA256

    2118273200e92f78858e9b0bd5b484126a2bc03677f8fdda05fdb760f8a2df07

    SHA512

    01277c9b279db827e1a7cf6928c37a2d65265ff73993c7f3433337ed3870a1fa835a5547c838267e9175301b4bb823ece702ed2444cc8a4909ac35e3e68b721c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbc192062650e1e58251e9fb8fd47fee

    SHA1

    f0c1045ec99acf46da8e03b526f9c21a1e37fbaf

    SHA256

    628f9e32261d78690a1ae2933d06864f7909ce30e8bea22c5190b51c4b0b5f3d

    SHA512

    827102f7ac406e7facabc7d97b0b53dae9d58a44ab16887070ee63746b6e49b15ad0e185f9a0178ac6098dbd758e8a87f3bfcd8ee7d8741603184c7558aeea5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba2943077d5b0c7bb95baca1158c159f

    SHA1

    511a059901812b14cd843e556fbb025992f40073

    SHA256

    4926822f4c303924d8c0a11df7be728a236f4c2a4ca21858888f239480e27032

    SHA512

    657726c1da35ad4bfe195394097096c7d08af053c56cece787b105ea04a712ec9d5cd624a38fdc3a4afb88dff81e02a5a50ac54068c147f3aec7792dab0b9add

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    1f36565911570df3c4b524253a6e6852

    SHA1

    24727f56840d0b89cd9ee00eef0fb89142a2b6e6

    SHA256

    6813a3b7853363d0d2f3b7f56e8180fd4bf08caa861d889671a5888f6d662825

    SHA512

    f4d29589b650dc24ba5448247ed0fc18f446799f7035fc7a0a8586e255e15b2931aa757a0ca7848e8b1bf33369bdb98bc88e0d6761f74a2ff59281961a7200a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    91cc3b7737b8f29ae70531c03d330aac

    SHA1

    5225295b18eb1b0bff03c39cd0e761dbc62c080d

    SHA256

    02f102fb21676a955373dd02099a55623a7960f59b8b3c1c8b45385530eb2346

    SHA512

    9b78f5aa8882a105efc05b5ae7f27fe129a1a030b856447bdd9668f87beb85512472d7702e0b5f418e696cc9ddb43c0ea6d1621f548184001cfd439d680ef0af

  • C:\Users\Admin\AppData\Local\Temp\CabBB63.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD27D.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b