Analysis

  • max time kernel
    144s
  • max time network
    145s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    04/10/2024, 07:47

General

  • Target

    12746f3423a2543d15e0f7a31def918c_JaffaCakes118.html

  • Size

    8KB

  • MD5

    12746f3423a2543d15e0f7a31def918c

  • SHA1

    6d675502a0b9f83884a6918a21157408429f3781

  • SHA256

    d5add9c13a577c861884d3ed77db858640a9809f26341488547da715876d66c0

  • SHA512

    3ee0ac39a773d13e357c2e7826733fee36f70757fa34b9771312e65fa4b09d1d0fc9029f34e32cd668c34ae45700bbea71904bc3cc42b95ae6e5e85020c6ff3e

  • SSDEEP

    96:5J3mZAUgYNMIjxuYr4OaPdzsPkDDOeO9unx3YUdslqhrpSh/T7mwNdP:5EbZxhrCYqVO9unxoqsWpShL7mwv

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\12746f3423a2543d15e0f7a31def918c_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2096
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2096 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2820

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    28b1e624461dfc8b1f12e1eb486fafee

    SHA1

    17c16a5bae586a4658faf35b6029fff2e96e2ec8

    SHA256

    7dd1654de17aa6ec8b0bebb167ce59393d5b8b543c6b8aab22ae1d850b39390b

    SHA512

    5c4568a0441df1cd73b184cee3e25a9af6b10520a219de88545fbcac877b6cce6cb6719e85b00da155680d5097334ab7807ab49ef98e190906f8e61166e83b8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    3c1433692cbc381617af67f9419324de

    SHA1

    b2780aa6299747ceeee08811deab9e296484256c

    SHA256

    a4627d80c068a1abfb46bfe12c079bb09aa304103dd80e45c4d11fb7d1dfed85

    SHA512

    6c083ed16b035d7abdf82e3193c41a0e54dbe10cbb132828d4cbc9487bd117977c125538863c5f9fab1b92133333399e465f21d7d5cb5ac0cabf801697b00ebc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    5428839bff18b4d1aa61a76e44bd90b1

    SHA1

    05aa9b7d2e8d89a7915f44e669397b9e2cc454ba

    SHA256

    45eb742ec442c89d5f5f2f009ea3aacae44fa86cf235e04ccd409ba69121e3e8

    SHA512

    5c8b209699dbe0ab8bdbc8f87a21fbc6ccad1c5255aa2df2e4df58d381778cb64aa08d5ba463a2a194fd2594119af884cdcbf7f079b6db571c71661348ef4806

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    afd0895bf10794acba00154e117fad03

    SHA1

    c109a0379c42574a9abde29161ff93603073e8c1

    SHA256

    ddbdaaf47f92c59d2c24f746f7def932e0c04979d17795c35a6180560845720f

    SHA512

    2c893e3bb58e3065affc0b0c56c1792733bc024b5cdc821229b9144a75c9dd5429938c883305c5324c7da6401a250391fe9e5664b8f144915ddd0c4bf53481f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db92f6991eea4c28187e8bc73c5e2065

    SHA1

    5d8c1a70927272c40ba531fff55ad85070c72862

    SHA256

    bfbeb2ff33e0dc4a90f74f932948371b6815676d04cdb9e37df7e56e68a50366

    SHA512

    6022ff0b91a02b88d1a954a0d71614e3d1dfcb1e04a305028b81b7e63bbc90e946e30a8599fb3e9a6fffc7d29221535a6eed6ee470f1b45d2265d22a9b6ca2d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    0765254df6590af90fc98d6f04145fbd

    SHA1

    ca9e63a5ced960adaaa6aefc029f3ea1f3f13710

    SHA256

    b0fd0f82cea4670cfcc967a8e4ee69450179cc3a71885dbdf33c9047791264ea

    SHA512

    7253af2ea5cfbf86d429f278262e399c67fa0acc5b245220fd50d7e3d86292a76b2c29ed0d857683653e1967f5a89b26cdd8619c6136454d18fb2bf5e468cc91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5f41765c3309ef1625b6454507429ee4

    SHA1

    4fa64dddbf4414b7ddbe3ef6eeb180654eea3587

    SHA256

    5cb94da5698e71c402d0cd5fd2f6ddbe80dbbb13e127aabe970231370740e34f

    SHA512

    f417390d5c24fdf4bf184c53a25027c4c4c3c423d7a0642da52f38ba7390ad15bd7e999d54770debb58d3788a8b3e11b9fb74c7593a1b2575cfc845df4230776

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a0affbd0d6617f4895a51f7c38936ce9

    SHA1

    2c52eae5b31e1db1bad80dfa551089071dce8aef

    SHA256

    d0801c57d0d891364d9af882e16dfb9834b2a52e25757ced466a326f62d841ca

    SHA512

    02e0d42b645908be4e3df7c85714c0d25b995d8793365cb598fa8b2f5add45a1e318826cc2339fa67b3292ef2f782efc7cecb9cc1f9b7b8b9a65b1e323a6a45b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f9ac81e3d1fa5f1ab654712d69158a4b

    SHA1

    ffb2f52e28d8fc794bbf648a25ca01a7652e52b1

    SHA256

    6f7fe5a33f2d7ea2b016e15395a7abef111de4220f7cc531576abbfef9a06940

    SHA512

    2d49d9aa34d786cb0a318162c714bf7688fd62307418a8b9d72182358afd9a9285b4a745179b2edbfb5bdfa0d6274dddd922d7b709c654ce652769aa5cd4ffd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9a8c0d4e98ed20108284cc2643df034b

    SHA1

    e8ee14c334a5a477ab8124a78cc654ba870d3c55

    SHA256

    2eaa5f9da5b21dcb7338fd8e9bb7c3e6fcbe737b9b1e8a9f7e5925d95f9c7dca

    SHA512

    06758f5cca1cb6eeeda9edc8fee25f5c33873836403bb791d81e86bf9bfc4b18cdda1ff09d14817a49cd5df31d02d1163fb6aa1c4599ccb40eb62735371b0810

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    20ebdd6999f7acc6b169f72071b0155e

    SHA1

    c4981c2dd57a99ff6487b4b2f02784a4598683e4

    SHA256

    d1a01962201f5454a426230f5b84dd030c87a83ac333307cb6fd74883793a46d

    SHA512

    17730b50150511d9b4e07f08cfec93b4fe0563de998d085b04085ee650818030e68a1de6daeb7a384c54b557935de9295538f745ac2dd57fbfabdf88beb46927

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7deeca78edaf44e5576cd40d33478e9c

    SHA1

    2eaf4629873f73f3e48fac2cd39c429064adda4b

    SHA256

    1f9e0b2c476632cc804896724c573bce4f7ef0b756ebc81a043b5f7bba18db79

    SHA512

    b7edf675c00bb832fab6a39d45aaee83776378344062c9122ddbc86b8f4516714e5b9a9e7074119646bd9685833a3d444d49ded6940f9506acffa2f663775d43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2d54a5971354121ad84aa3db324043f5

    SHA1

    c7e41f129fb010aa8439ae1fe5f9c3e302cb47ea

    SHA256

    610a3899c771c925587c94cd4c6009ffb90da2125878d228a900eb8554e16ce8

    SHA512

    1565639ff264ca10261a06d70392cd5cafc949def9b334e3bdcdec1ac8d42158e3b6d7f2ebbe3f7ffd413e4ef1fe8d7b839d7ead79f429ae56435a50c266803a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d829bcd09958afe93ebe27f99f37fd10

    SHA1

    718827ba4e6867b1b7bcfa64c4f39af418733023

    SHA256

    6b9886ea629da43f3c00a9c09b44b82dcb254b91e52f1bd13af6886e4f5609f3

    SHA512

    c0e05a5cca32d01ac8fffa8d2724c9dbf3f4883a12a3ec37d3ef9cae1ba9d1e060d56544dae6391f36b1a38e3e8987e14ebc5c236270da66c932f388354d0241

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c13c2b1f8d9ffdb6fa49007832435257

    SHA1

    1f4b14e01ef2119194a414cccc822afa1dab9c71

    SHA256

    fae586610908fc6ac4ad5957a3ef6f48adf86755961c15a5f33190d1862f82c1

    SHA512

    29ed9c870fd0e6be9ebd13de141f3d324d71f8d64774948c15262e8488c2d1a558110c6a6e42f8e06611bcef7b69d8ae20aaf7d5e8b889fffe8e39886a505301

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5995f1236d1c1b955b377955bc234429

    SHA1

    be29acece659bc7b451a9f4f078ae0abccef3fa5

    SHA256

    8f380c2a7841f0814a728b7c2018b77041ee5ed20648d725bab49e8e0535c31a

    SHA512

    869a98cdf6e21e8e7f6644a04a4e7b119835233e8a09d4162860f4c00c37abdfda8c4aea65e9cbf6b7231d37c594ec537ca5720d6bccb03e5e5cbeef526f7f00

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eb18cba42d7276dc175b4a1f6427a80c

    SHA1

    0698b8bd50125c5036e93f46b0b0cd6f6456dcdb

    SHA256

    2c78df3f17e5e9c7038c49d1e5eb9f07174af0c73999556ddb53e38c1032bce2

    SHA512

    e3a778262ff2edea1209a08b390172dd05ee0b96d5e70d31f91bf0397890544f539afd80510e696930a53b6ac57da70ea1960f7bce0702dbcbb06b4ea9061769

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    407f4411aee5b711ec4ac98c13afc1e6

    SHA1

    ae5ff4cba262f7b6dcc86509e47de46383dfb1e1

    SHA256

    ff00c08293fb5674ddf74f50d38d177e707ec05cba7309b4639cbdba4deba439

    SHA512

    a8e0192ebf04b552ddab2e9dd1d3bf7a7db5c6f5c86b5a009d4abd410a6f8b83f57bcba0b27df386e0ad5fa0ddf79d5eed5bea4903580e7ff1bc19162c317843

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1973a700b5b760d1704dfef9ea5bc6a6

    SHA1

    1f8be636c8c355a0063eff1d9aaa1582cf6a31db

    SHA256

    a4a8776b922731152a4813569e3023b836f933eba2112a276153ab9a6ec7e357

    SHA512

    3531e943ce9307622db4598fb6d71073c5f67a2a63f69ba7e072728dcf5ed670774045af0d4cee9a2f66c1c6ae9cabdbda21ab840906fe33585597ca2879161d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e534ef56b51c6377921220465d56992

    SHA1

    e2faf206f27138a83d94f9804ee6ba8d9c945fa3

    SHA256

    e6cfcb65af0db2f1405ee500bed2bfed5a4735aab70a00caa8984fc37ac1dbdf

    SHA512

    8335550d3be7766aa2b3ce8587c29d4b39ae2ebcc53cc59b04f7804676957798925ad54ca57248e6ab5c7778eb722535acd6ab9f4162abdc9ed8074703beff0f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    39cd5ccadd27dc5045ceb382e529fa80

    SHA1

    785505ec5dadcedf5e56d06598e2bd6ba1aba636

    SHA256

    5c02bd31275ab3143d5cc7a78b06d866cfdc76e0dd82fee26d620ce58fdacedb

    SHA512

    e28c5eec0e49a648bcff3471601979b0edf4bf9ac3bb1099ae1abf775fe1bf3d17d17577ddcede0c335525310dc529e4fe883db0d98f93d22cb208e5d18e2eb1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    89bca368230d9ab705235707b8a419ad

    SHA1

    af29aa8dfd1ac04e0d2df0babdf2eea53885fe7c

    SHA256

    f226f8262e4297fa85faf1f29cd47e413d9f59c878809c4bb80a79da6d732dad

    SHA512

    24a2fde45a60d954007deaebb2f9b5ffbf7b163f0b70e6bc95f7cf6329a09b5a160a56b657c81a8ed2e8618971e05da202485c0aacc1df0ed7650ef82d0544e3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    018eb392678163d91d58b054954d76a1

    SHA1

    d273a580fa41449055380771f46ee11aee0355d0

    SHA256

    e84957e4d42bb97363686181d389dec3e21c4aa7a84a38bf6b8803360897b6d2

    SHA512

    f56edddb2902cd541cf5aa84447e1f82e51b48e9a2e630774890eaef4d112ba3c81a15218fcbde1a7ca5a865b13e3978053dc62b37b4c19823eef5c6f613c5d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    7978c8d98a74667bcd4543de28678abd

    SHA1

    03e5917ace3ef16c5b6c7ce78dfa52ddfaf59261

    SHA256

    bccfdc0f3f20cd299c2ac27319e37745397e65b307ed5939419a383e605efba6

    SHA512

    ce08a78ddf4bbb1da1cb266f8ea9de073c18e2cf1a28a07a496c408dba67c3d0093de1b4c8aa70fcf55a1f2d26be9f649f81eb569e1e4da68aa52605997c59e0

  • C:\Users\Admin\AppData\Local\Temp\Cab7DE7.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar936B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b