Analysis

  • max time kernel
    143s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2024, 06:13

General

  • Target

    1229b010e67c524484f22a2a08c1f0be_JaffaCakes118.html

  • Size

    39KB

  • MD5

    1229b010e67c524484f22a2a08c1f0be

  • SHA1

    6b77552aef905d76230c387795c11c542d325968

  • SHA256

    794f372d261c92df1a1f0ab32119961993086d6fa6dd29c57b52c52bcf47c7b0

  • SHA512

    9b97b0bc6ee2d71576dbaca194c09f151842f74d1fcd81cce8dc64f7087b8970e7612af745fb16cbce6ae7155e696e573eb98df2df33aa1c8618da66d91a4859

  • SSDEEP

    768:EliBmvWHz/QzO/XIOG60klMcUL1jCgt/2XSTXuDG2zV:EliBmvSzIzOvKxklMJL1juXSTXuDG2zV

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1229b010e67c524484f22a2a08c1f0be_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2960
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2960 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2216

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    1KB

    MD5

    25c54fab7220ecfc73a988bf72d56cca

    SHA1

    5f0f0a726613fbd50006545ddde92110b971d614

    SHA256

    1bb22f0189b4f8002ce72f04ace06dbde14f8b6feded81e8c239faebdf11f513

    SHA512

    9f1c882105d0cfd2cfd3b1fd0b166d592ac2248c4d1322d85cf2b1d3c4b41c184a7312f0a0759e67c597829d9613a67595c89ff5320137dc89a77bc1dc639af0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    979B

    MD5

    9f3e8c2907cd62e912e00b6140bad286

    SHA1

    dd0af1509676dd3e9e41a80c605e9a79002ac547

    SHA256

    1fe2e880f935d802ca1ae4e5fcb0fd12ab600193d8400527a7a7079e6833ceba

    SHA512

    fb8d0e264d0b430be3a34dd910bf8d04485543bff0855b704ce6ee4be168553d4dc38397770b7c4e8eb9033dadfdea4d538f7743719fd763b35e2f35fdc08c7b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    5ab50880e624c604a35c152a352371fa

    SHA1

    32ec52c1accefaaccff00ebb51882c4cf7b93598

    SHA256

    4cff21fb97fe4c2a0979bcd110e6adf83aa6c66eedf51095ec3ea2a764ba711a

    SHA512

    70fe919dd50d576cc3d06a3f8327435affca062bc2a2001b922a53b023e3a38ba6165c809d88eab15ac2478ffd18b01d7e989ca8fbad3b3bb8ec42227c1c9d79

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37be23b58e9b1de3298a8e8cd1cf1f1e

    SHA1

    b16511ffd1abbd8f7375a9db122b79fce59997d0

    SHA256

    efae8cef96ca2cfba267ec4eb9eeaaf9c45f35e95b99d4bd26d230bd41459438

    SHA512

    d3ad0ae738bb1d3f627f46c0a9834b1d52e1046485cde1f9931d4b198a5dd7491b7bd8a521a28ab7c780a28d0568955d255905a920801db564ce7ea02f78cfce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6a5aff6747fac03d6dc138277082aa2a

    SHA1

    888ecb35d2201d4bebf0ea8101fd980ccf868757

    SHA256

    acee2aa1b7c04abc68ad0f6436b25b30fb67aea4dd72f500e3654e96a836aeb9

    SHA512

    3096065b9bb5976ea844c07a8e08523510106314ff05990c23c7e78ff5fb3306e7f12c2d892788ee92e540be151dad27f387dbfce15d7c0d9fcef386bc09f7b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6c80e2737d63b26667361075a1183d40

    SHA1

    012093fd9d03292b783e035e5e90b3f3ed3e7976

    SHA256

    10757ea3879daa1936176e46c716b3f6ebe6ce1644a4fd4ac3551a9b8b8fd009

    SHA512

    a911216a2adaf40141b551902b3ca8028968a162468aea7ee271cea6de60121637aa0442a92747254ccd087ab2982701e42b44499c0720b6c93bacd8393de534

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5480f897643116911d19f28f5f74d1d8

    SHA1

    a28166668e47bd8493fa14ae56190efc249e129c

    SHA256

    7ed292696530627c91fbd59e1e7317913f7d75f71111406d9500a4b12635fcea

    SHA512

    0a7317865e56781e54a0341bdff7048ab3e0955060b75ca121858d3428b053543471ea67715b0669f3343d584b2b9af5e2ff7a5dec4f1ab5522919299ad424c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4591142eb52bd29024e230b0ecb0582e

    SHA1

    27d281422386e7589a8407c442ed358e4250f0ec

    SHA256

    c127d2f95ef1b6d4c83e13d71b0025e275a72cd0964203b65ebef0662ebf90ee

    SHA512

    7239b09bcd267f5bc8a6c75e60d962e156df3b328732f5fc14a750a74f0f68a037db10d9ab62b5169955d264d32c3e2ac5eee5125aca8436cd8e1cd28d872364

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6d3109e1b8755dde041b8aeb11e6505a

    SHA1

    516b3602e621aa267ab33c5928dd42d919de456e

    SHA256

    173f48ed71339d2a0bf44ab14e93ce7dc7828d5ac82cfb27b192ce1b799ac657

    SHA512

    ace0ced634dff06ed41da88c4ed9fd12223375a233ed528d418305dd07de4aca9b39e67716291b0c32477213d86830154b88768cf40afafb1323f77ccf21d933

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2f7d358f2c8b81df478f0869bc1406b

    SHA1

    c7ab2f96595a216b8ece9b96171e1531414414c2

    SHA256

    5647ca8a871007c0e01c6ce335dba2f93f935428834e98367047b9dcbe1f7b85

    SHA512

    780563f2e2fd9e7799a8e4972e56b623026a4456899c655e41fd1c9570661669aa3b91d0d1cea41abac227acdba2bf72bb215c0c79419fa727a72ebc076a9042

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ea77066eed983a7aaee53af8ebf9b2bc

    SHA1

    f0dd4cb72464c50dd69bc9e4ae636a60e50833d8

    SHA256

    279b7280ad1cc2d1fd8a064a67489a7247cfbfa7a47aa1cefaf4879960682c0d

    SHA512

    ac659c31f85f5cfb9b419bdd81f33f089d7571c289c3e023692258485d73b56e824c430168ab96a7ffbaf6a53f3413eef41f03528e4ec9653ff5d7f17bcc9518

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60025e76baa2028663adb7a68b442c42

    SHA1

    0d9cf6f8846f138f11d8f543f90601579aad1c0e

    SHA256

    a5f7106eee4ef57bedea685b9264e1a5d4098392b75e3daff1b023d54a4c50da

    SHA512

    9bd5c02745f3f2108f61e328c012c295aa4735a583b9dc40c885ba6b0e00823c30157af57eceb3bf9c71714dfd8a3fb401e852c542372b95452015881e0aca95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    decb76e4bf12220711543187b9cd4d59

    SHA1

    cc7e192b7d15356c49f5eb3c542781be56d3f117

    SHA256

    1e35354e47342e4660191cab406f4f66536f391f888cc156ea038254214c5e72

    SHA512

    d0153f92a49709f9ea110e7db3d360cc260e19d1d68e712ee3e25607a32f44025cb2ae05557bdf39aa37a51bd43e41a15a1707f534036d6ad0483e52a3dbbd73

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca591c2de3385ba087317dd1a2a3520b

    SHA1

    1c5a46518cb5505b3610507556bac6c8b081f897

    SHA256

    34371f8d93c538ed2d8999d865961e9a79b46c2133fbc432c231d964776309d3

    SHA512

    d50706b2bb4603f7e021752a66f97401d9b1aee2a75f6ae34028616ec3ea1df0e197cee7e0cca9d90e28367dac07313d509166b619f73890b5bbd34d8e3529a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa95a71294dbbfc2c178df4b2256c0aa

    SHA1

    1a19d7be98b54d638568bf68ba408e46bf2086e5

    SHA256

    d754831f5e568e4a94e6bae1b7fdf79904e86dcd72615de13fa7202ea4ddfe0d

    SHA512

    25769f4fa676c64a58ae437a303942800c4d248fe711e127da8f851a42ae7717c121243c8d0e47ed0d35a34513627ed12b94567715057c420d261809832a8af4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2c47387c5c39521b5ca7c9a9223ef195

    SHA1

    07fcdf48c8839885570cf223907d484b5806049c

    SHA256

    8bdf066ceb178923b8727d4acfcd550aca7668384fedf1dc9052ddb88624b0a3

    SHA512

    4f885b50d336899d53a6b7167a616de20f1b6e50e1a19d431ec9ef82578cbf354a0d98a3b509861b9f6e769da607f74776c1a0ce4160f3646157e18a297ec18a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bb27ed99cd1e7708a999d0ea1c977302

    SHA1

    198774470ca66bb0aecaa2fa4d0f3eaafbc3ab51

    SHA256

    8262d8c88aebe0013117957b3b460210d1420d899d9e6bb7ff230f9cbfeb8537

    SHA512

    c4bde4186b909d9e43e5d4bccf0e634d47e96c3131f836e0902a162824f5b96d827e06e38667e658c5953e214d93617df03e926e4635f4e2261511d1ab4f963a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8e32b515468bd9b4fdb5846e87ab14f

    SHA1

    7bc63447c85f6e9f5bf78e8fcfc16e2ea4afea1b

    SHA256

    3908a1aac598cf5c122ba3b05602ff94eef6a6d6713a22d7e09737645fb6f183

    SHA512

    467fc1349e5f82dba2f263f20a089966455d394e5dc50badc03553d39f4ffcb92cc8c64b4f8ad83bdd5fed127037e6d0ac8d05ffd993b272433b92c9365a91df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0a220b46286ac0ce0190022acc72b820

    SHA1

    40806c87e70e402783de96ac47277f484183d27c

    SHA256

    4f9ae3ca540ed44bd3cb5d84cdf5f3745ebd7f380dc542eb9af1eea5aeffddec

    SHA512

    08055d6dc3a00658ed7730fa85cae016425c545047261c37870e96d3924b05ae49d0f246b98cf35b21298a27057faec2d3f985a7d63a6414b1d73263c4228ca0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d0394c846b3f8c937bb9a75b4e9cd29f

    SHA1

    df3397d8dc3c5bba592cd3fbd2283eee7953a234

    SHA256

    1b1e81d5af172f1c0e3ea1997282dc585dfa6dfc7dd85937c3f2a84fc8ee279a

    SHA512

    b1fd9f7d87a9082fa19910eaf5cda6cf263b1c34d14dbdf935c694c31cd4a164da1394b94cef20d8ca28436ec7ac0185760a91d4d7227798ed2ef45175486e34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0aaabb4a557143a5e500e0a1e0eee915

    SHA1

    6c8540b0825dc6647f94711406ea541ccfbc29fd

    SHA256

    773df47b108dfc035ef33b3a60b21b5b086fdaeca1ae93c75c28c224342c028f

    SHA512

    d8b9dc119f4f72d39fa44ee1c37ba1099a09673103202136931ba44155bd670d0be5c06c1c68baee95df7227c65a4dc5bc8ff54b54e47a84f6dd489fd0aaa6c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fd078d8f0ffd09d35da6ddc6d0489224

    SHA1

    f376d02bb168676c6cf68a1e058bf0214e4ab3cd

    SHA256

    e349d4491a966e957f3f6eaae70ab23bc9b92eb0c95a148cfa811daefbc165eb

    SHA512

    8e9e45bfbfea3653c00bae6a82af57ee4de05c8157a4a41c5ba2728e19fd4fdda1129ee6d1a99beb2afa9e30e5b11a1896355d71d520fc2b1a541fa5c1a2c1d0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f3fe0c0f6e338b0b18659831cb225522

    SHA1

    36fc087e4cca0a4442d4270f499ee227d92a6f4a

    SHA256

    1132d0ec62df1734be541b5d7bf2b4ff113900952bab8aed24f3e5865f87536d

    SHA512

    3fd1b11724413f7c9bb0b5929a9d429aa50a69315b0d33ad4fbe5d8aa7017591e1299944981e10a23fb78a4cbdd329141ff6f8685a5ef0e97509b68834560340

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c196797664e4913378bb907f39784678

    SHA1

    209ccb2458bcd6ac4c79926d79e6dfe210e4322d

    SHA256

    3418794f0d23003e8dbc55b8c28dac46ec8094b350224f22a950962723d4a65b

    SHA512

    ab7e87942962aa42dd055a1818c805f5c5c93b7c50ed7f415a49aa2acfe597cb88535621607047c07208d82886d9cd37eed525799810d4dd4c4bbd9e92b57728

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9111bc19bede717024e6cfa2677d7977

    SHA1

    6acdd01cc10713d87cf147568a6b4ab3c747bb76

    SHA256

    3cbd85fbc897326a08f810d2a6490aaf1f631c855b37816e39eecf1e8d7454e8

    SHA512

    5824bd5946e509e0c8f8086609b8273bf08291b255faa9005a0f006ebfee993ac3743fc62fa9a153133032e771e1b48e028da53db52e541562f5e9e473687003

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

    Filesize

    482B

    MD5

    431bf22cba8bf4ef98d6f8bdeb154299

    SHA1

    c9f70b86fde73b77d8c266d02a68c0d6f663715d

    SHA256

    a53ac7b3d2b0114b76fe0d0fd4caf5025b0c8243686171aaa8ac356220f68b23

    SHA512

    fd5697e471b1188311da2c3341373350d2ea8c0e3e5f28d8ce9d114ae9be922222f434a9aebe9117fecb4521870f2e6863a85b394771d2f2f8e3268c0d589dff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

    Filesize

    480B

    MD5

    c954bdfbc1b19c96290376cce78e4a88

    SHA1

    11829cdb760bfe26496e159185fa43b8b7cf2d0c

    SHA256

    68c747a97c13843b066a14304985301982f6ee504c49f41a74af537579a388ef

    SHA512

    e1281dac4a3769cbe918515397c63bf469ab7882e09df1dfeb45bad21d54c63b2cc6edf75428771226bdb73e3f1f5f1ec30e64573d06744a0742c0bf76db4a7a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    f9458e419bea3d4b07d7a5e3bea702ca

    SHA1

    3f4c9aa82220fc392cd8fe92e662f6d22061e28f

    SHA256

    3e82731d8ddfd24d99624a909349c59ef51fa01430becd4f8ae5dffb3e1a969c

    SHA512

    3de63e793ab82c6ca9be80cb80021d6b93f5a2606c99e280395ef2b0c7e98268006b69c1a11fd5c3197d34dd8a2ca0fe27ccb6e0b762cdcd9bfb88c0663c3997

  • C:\Users\Admin\AppData\Local\Temp\CabD6A2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarD6A6.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b