Analysis

  • max time kernel
    118s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    05/10/2024, 03:34

General

  • Target

    1600b3ff497390327af8b6f94a39983b_JaffaCakes118.html

  • Size

    68KB

  • MD5

    1600b3ff497390327af8b6f94a39983b

  • SHA1

    00f77fbb950306f40b97fe07bbac1d9e8db26d66

  • SHA256

    542f5db77d81ee124e207d548d6ffbf1c174cfd870dfe803ef91e90b97f47578

  • SHA512

    086862b47531268847b9364ea3a42799dfa40bffe0195654686da287c2d320f2b386c0d162d2b1eab3dfe195924abdccfc4a41e4289f8fda51247cdf109f3226

  • SSDEEP

    384:ed413zS2UlfYWFwSElBMapBM6Vsmhb1AHAYTz5mB/eEZT775jxH/eAingr/eWTPh:8YQElCapC6Vlhb1Ab4nHa2Cu

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1600b3ff497390327af8b6f94a39983b_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2412 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2876

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78fd4d28ba689f8705e28b51e2464a4c

    SHA1

    aa971fe93c769cd382eac5463d627734a2112d63

    SHA256

    68aa776ebd24af027988845ce84a63ad801154016e3a47522138a0932be8ce8c

    SHA512

    5a9c0445919e35ba12858621b4629af1d0acd7876f06b51096d610df497d2d79c6c78598cfa03326185f5257cc8d5c2c021b7f1c0f204a9b16cf1fc1dacb2207

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    56595a9915e9573f2a460d8d226cf93f

    SHA1

    31c8deb91b2c0b3a6bb534e3012ac754e1a7c12d

    SHA256

    4821c43709d0ff3d0b5b2b5d540ad256e685d1a1d90cf44c29f2d5b7cfedaa6a

    SHA512

    2af95c9d4bd7124ef043b2059f73b9b7e1d0bbb1cd4ff87558ed4d9150d91f129a9aa96c9c2b6281fd562e13bc079ceba4d882ed4ec008bdebcd4b6bf5baa957

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b51ef4680996ab005b6398a20493cf21

    SHA1

    e161b64b5b9137d51ab0d7b1740245ce71ce6b62

    SHA256

    67de75c073823c30f1e9f0bcaa4fd4a7338f1a1d39bd63a490478b320e652507

    SHA512

    c6d74c64612b14bed956cbb92e56be5e4d5625aaa1af7c439763860cda54fa32bfab479aab2c6c1ebb69dac8476d87402fbd1bf49ce6af79d9427bfc0b789e6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    886b778a0c020d580ba0992bd485cbe4

    SHA1

    a3a34434432afb267d2baa3e312286c98461ad30

    SHA256

    7150a64fbfcc02a6213412ab75481aa8ccd4ecb9121f63941607b18ee70a9565

    SHA512

    3e58ab81fd94878dbc6e34e81db52abd66332e9325f475ab89b484fe40d72ba94dd90c38bfd48bc2fc3454a4cdb416fb068ec6fa81d8ff52623bb868167d1fd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    951c05cda36ad09341d512b318eb7d5e

    SHA1

    68aa43d36cbf1a67ada11081377e7ae1b0d0d067

    SHA256

    79b168323d8b0aaa29278a4530f97c9145051d460a199a1a8792da61f8afe618

    SHA512

    7f2a9bfec5667a4882a9b06d64d86d16b1aad27c2ecafe9955d7162456dff45b413f2f505f1fe906dd4bb1bf00272880cf2954b4e37355da1fb72287cd2dfcbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45ff357d46b0612e2ee601c2d355ff2a

    SHA1

    c557dda7e98cc044c2ac9e6ebdc1d59b6ea5fcd7

    SHA256

    261ed1f071c9a71d8ee2a0a34ee387f0218d8cd0c7a64ce9362ba8c8695fd175

    SHA512

    bf332148c59f7d0058d35ab0f8479e890481ca251ac9058f95ea77d6aba0577def51b2f09de7e388572da1ad9ddbf35655173e4eaca34358cab44cce077f6ab7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e4a659888708f19d7cb5260df30c5fc9

    SHA1

    da099918c5a4c59cbc0150a5c19398139d582076

    SHA256

    f88be00d6ea64926ddccce64b295a0c9d02ceb503b4e050cc9f4cfc419524404

    SHA512

    4e04eb340aeb4640f5dd4e5406d9f901fe3a1a356b0267a8fa0fd6d9fa481026f71804d5eb891c43ac5aaede2823da419108220226a466fcd8ea4a0eb76ca277

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db834112d3d7bc3f13f9dc7e26dc5f58

    SHA1

    a8b1d0ee292b20593c479006a164667fd6ea2baf

    SHA256

    29637615b29fb22fcaeabaeeef444968c7c1f7fc3cbd40fe2bfb1d1b9a5f86ce

    SHA512

    1e62e85ac0343b797a508d5d7d01447d0bfa61d96f2e0b9dcfb6ff3dec45fd08ffab2e48284a5e85829630eb27b36627581c8024b5fce6fb5cfcf41db3a451bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    deebcea35f90c8116d363b6d8b26fb3d

    SHA1

    02051708a278bdf30dce1a0a38f9d1378925a074

    SHA256

    33dd3e940d4038d4fd126f16363fc0bf5c65981387fc305251fd2b212a7d0cc2

    SHA512

    51689ba3f87804228ad15d76d5c9d309b1e385224c4acfd8949fbc792519919c6610661a84eb2058f2ea0578eab5e96d70060db90e3b7fd0b0509f6e92e6241d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4de1c7820d24bae6bd671de54b6cf2ba

    SHA1

    2673d7b6b5700f5862e6818cf8985aea589ca363

    SHA256

    952d70e6ae4d5bc245438e9cc04a7320eed9b3e674f60046a75499d1fe45ffe8

    SHA512

    88376454d3980a1e28746a595ddba99457a5d7ef21ba67cc57df64a31fcc4a0a5ffbd460ecd03c08c144813eacd3342c53809c99c0da950c460eda667905ef3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6cf90cc9322c7d40be6c7ee43d45d89

    SHA1

    b60d3bef0c7cb4a63eb1f127fcde9546318990f9

    SHA256

    61de3d2a5c19f5aa0d27de42763cefa66beefae367cc31995e90f3d05306c611

    SHA512

    e8e49d2ec5c8a1ae67986c88046559a6d9c6bf5c14e50323a746564c28d9ee74420fe816e2f13ab48708fa10a2981a1f4b12a6ce7243e2b9a047420a99d59cac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b439e5cd7dd0651f9a3d38204863c5a0

    SHA1

    3ca01ac222a1f20fa58cc7961cbbab48c7dd8f4b

    SHA256

    8af3107c7060babbe6f80d93a83d540b86d4f529a3f237822c1db2c831a675d4

    SHA512

    b946f5f99c14c2be4131ff33ec405736dcd2a09110e10cc8e8e8bb0c206a9652526171c556689085de8c782f689bd43275a6bfe51ed9be92e83f10bdf07ea338

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c1bb814a5599c3b3dca6aef01089f0f0

    SHA1

    a56225f373c3d74c90c1bbbb185b30d835dc5829

    SHA256

    3fbd5e6bc5c157a561a2780f549ab302d5ef8b3678beeeba2f54d16679a9a8fe

    SHA512

    9ece5b5c7ee0c91bd59781696a4c4ba8abcff7122fd4551adde43a223e6b7594041760734ce5b6b59df1364f9cf69420ae11f85972e023b0445ccf8e7fbfee25

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e884b627940ae60c17c1f4a9a8734967

    SHA1

    e3c7185309f15ca52c4d1977ca77f157e1b1ef58

    SHA256

    c8deed880a731a969295f2588a0967b2013c7a21519e882f2be618d1836b53a1

    SHA512

    7efc24d4ceb90b257bf62ce965794ecdd5e1ab25dc4fe6abe3a77fe57492fd777000ce8b6298d3fdf2d1ef1497df3882f4178f328b33023642bf1aa3e91cf69e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32c7d18c20ebe5c6bfaab38f6ec7f2b2

    SHA1

    227fa351d96c081a25098f1b63eef1999f1a5490

    SHA256

    144875b7f257accd5bb2fb1a0c9dfd1540553adef0669738fc3614e35c88a3f6

    SHA512

    dc6b61dc1393fec3009f9fd52dc45c08b051a7ef2fc6b7d7cf8b22415e35d15809b4abbaa8c1873a2d45ed53b04ed94a314ce61fbe3bb181ae1c453cda2220be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffae2e72812b6964f6062388894cf4f0

    SHA1

    a4f13982d99228704609ae49d35948cd4cc1270e

    SHA256

    8b85299dd34520144a99bdbf3250b42e0bcb0a6112d1af22399f3f248a93f0df

    SHA512

    f4c34b57b1fc53cfeac713e43fb64a807b8472b02476d1e07aaf08ea92bd0cb74273b6f5753cda10875a5e0e3da32850a075373415204f2580670586ce4afbd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80038c1271648d43da978b220be8f15f

    SHA1

    b44d17890839be934eeaee9a52356299631799b8

    SHA256

    e746756499f28c761161f694693428bb89973533955f66020b1d790b40ab1a0c

    SHA512

    fd5ce5dad9776ec0de03ee6d08a5a6a2edb36482d9115eb9e0821352af868c0fb7edbbad3f8a8a044a3eebfaaa90507033c9bd5daaf539189a08b8b6ab7c97d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    064fde6c67fc5491a0901e0ae4ee75ab

    SHA1

    4a87db78dbe625a87341998115f28ffd0eca18e2

    SHA256

    cdb13c58224449163a65655b9ccaebbe2617e137d2384162b01de40851185532

    SHA512

    19725e06562e9450adfb7e185c3d00d3c4c5afd025d3a2d697922c6ac221fd19c305c092136280949734b6ed7e8b2becdceab860f2851f0f2c2ffe9212603451

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2defab39c1f0339c1574fc233ea23966

    SHA1

    4fb87b8026a8e72cea96f89df24a3f456a63c579

    SHA256

    73e5a88cc9f09e58e91beda421ce2be02d49e7888f2b9951ef0bfdb0c75ba509

    SHA512

    2822d307b1900fdcb488b7392bfb62c830f588c065c2a21208e6b0b167ccf6947e892a2eface0b2030c3fc1052d874e837349d53f69b243d5e4d84d9ffdc1e35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    84f27cb627517d591325b1484a1088e1

    SHA1

    16320c923d8a8324b57eff83589a486e15048694

    SHA256

    998b33853c68d6297579ccc16cd9003e614d05d089f449d4b556e0cf95f5e80a

    SHA512

    919a779e70538feadf6f93e4d39daebf2ef2f68fac3e8ed595e11b92ce090018067902c4e3a2fd19169d8796b99d612c7ebfa66cd3289c8d79b4a3ecb204a376

  • C:\Users\Admin\AppData\Local\Temp\CabCEE5.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarCF26.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b