Analysis

  • max time kernel
    122s
  • max time network
    142s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    05/10/2024, 07:12

General

  • Target

    16ac4d0900d3beeace47f8dd19cca493_JaffaCakes118.html

  • Size

    32KB

  • MD5

    16ac4d0900d3beeace47f8dd19cca493

  • SHA1

    3a24cbc78bbbc68c25fdbbdd28d3f3ddbe6de7ce

  • SHA256

    7c62fddc8277b487701bb36abf9e52f26acc4259938d8218eff384c63edce369

  • SHA512

    9828b43fa8926fe1990ec402990b03e1ec5a78cc2f7a515c7dc5add4762d62fde797bfd6a8ab1136991c8107a5d21bbc989572d9ec8574ce94a781003844d492

  • SSDEEP

    384:sKLlIcytn4PWGTHVWl1NeCI1lm5nakto9IATGJTHlSqIh12/gc4B0fnt4+glS0sC:V3NWHrylWnaEJEEguQ0ExLZ

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\16ac4d0900d3beeace47f8dd19cca493_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2112
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2112 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1712

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3a33f6c99b37bc90b1439f847985737d

          SHA1

          2baf2e8a5a98e7cbe4ee6ee8a8258c5f392114ea

          SHA256

          4df6cc6a51380267b57c4a55864e1b7e1de5e4c65f0e40a053bd930106ba405d

          SHA512

          2ab09540de91e25056adf5d147b94d679072d9890948fab461c839cf2d79bc21459b26f660054c8aa100494a829fbfd5c2ea0c4f4a3005722b7af9c00c3806ba

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d2248fb08d7710a519ca4e66449171d0

          SHA1

          accd1c83b386b1d645d2d05e9e8ca831d918c3db

          SHA256

          6a801510b54d335bb1a03037f53bef284ab735b3eadcda2234cb750646d1a73c

          SHA512

          c289f60a9a80f10320c7d547bbcbac96c00833f14b4415c0584b3dca821f9e9f2d44e2a6ef3f05aefe3aa917c6ec64b6bbe266a4808cce1720336c88f4697165

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          157d229212936aa90082f1d92d194968

          SHA1

          081de814f999c777759e0bdb69a71d2e5c1ff1b4

          SHA256

          cad4b597017df5d04a8461d0d0b25e9313c5e1cd582eb2664ae37a464b6ef331

          SHA512

          c1417832ad9b6cbfb1ee3cf3af4ddf136115330873bc195f21ffa3df9c11de2089f0d162e50ddb374abbaf9bbc7317ac44c23828baf8f3c357355a7c55ca5aec

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          95b1a3674de98ba9de2d519fe7e64663

          SHA1

          51220db5f7d3deeb15210403f28d632c38c6336a

          SHA256

          22a640c857bfd006632f341ff5688b2c2466896e8c810e125d90cfb00f68d543

          SHA512

          b59ed994fbb72721eae68dde5a1170cd7c62bc4dd6c426055fd3385b1bfe476c08a82c5da408e3c8d03bf69532055d64cd5de14767d479f341904ec62c2491f7

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2933d59a639352d33b5bc9fc59e19ecf

          SHA1

          1774699f1adf3b917de3c1736f3e2597a0611033

          SHA256

          c3f6d1bddc8bb3a47b626e2b17237b8417a31be44dfb6ec5344c76b377bbc455

          SHA512

          b54d907889dfff5e2b05dabdd0d2a16c6608822f4edb6b20df30055ea97ef75b4e4822f7d2b06b99e3ef3ea326bac17eca7135aeca624bca6f43483feaea9784

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          b55c6430d1a9d505e3ace86df6d8a5b7

          SHA1

          b86b6f8640f6d071f2437766fa8bd63f440946f5

          SHA256

          de38abf5480a0e5500bd422fd6b3fd4490c4379cb1dab5a636228043e1c5f1aa

          SHA512

          808da5a26d98c368a218f13da75a01bb023f847868c11c82bab0aeb50e85557ca069335a15e29bd220a793b4080f02a6dc69cad246a4e2bc653d23199cd765a3

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          0f5cabded6769ef3a1ac5b4c16fa4714

          SHA1

          643dfe815f1f75322b69647acfc1322e0347fd69

          SHA256

          397a6d5fd4545bcc2f1c3b87d2afd7329f1a619967d44c08333d86784153d732

          SHA512

          d90e9c2583d62be3c17e174c1a6b0af61e9dad2c66aca829a67bcc404e43abb610104f51e03cb0c00659ec6beb0873ff08883a9af63f7a4ebf56668a3a74fe44

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f7a73679582ec3179c7a430ab041ec35

          SHA1

          9e7ec8908681e285df76160a01951f1563a15e38

          SHA256

          4be0ae77bd05b4f209762368295a01ae80c9293bffb432c345316721a7fde51b

          SHA512

          bb4c24225bcd1058e56cdb5a122b59fe21a44eb9d47bc1ccc933f0720be867fdb4bfabeac1c9a973745e718f41cbfd433366335beb5976c73c12c5d516abcde9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          4db4b0aaaf6b3313f3a8f3f4ee495591

          SHA1

          a120d477cc581dc1b0153129d2e7419ae250cb7a

          SHA256

          16570245c76ee47d8e9247d3a980dd0bea13a1fe07aa23dfc4cdd2d581804144

          SHA512

          15f3ad887420cae07d013ecbf972817746f871cf68ba7df3abff9539c9d00f937ece82e5fa653a480ae74ddd065ec108030d0098045e8043e50fb42a90766c30

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          3c3df92db39ef2e3b110754d149f7ee3

          SHA1

          7084c942a601fda941e6b6e5c00aeeae2a86a4f0

          SHA256

          83f699856d230eadf47d80807ef148ed4fd2778992512aeeae603fb1a254d882

          SHA512

          d40312a9d732a9020d3583d40c12179f46cee4de5d3a21de96cd5951444360c0bc6dbc595590e6a47896049e857e1a2d32a2b782b6f1c5206868ed00767b8d75

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          bcbe5de466375966d38cce1c69fc4b17

          SHA1

          08e697fb8330c39028333b2a18756c5228eea891

          SHA256

          1edbf65a6a111780f90fe3d2b37d523e10b2efc8cc74b0a49fe2b0b9af92a6bb

          SHA512

          752bbe7ed4a5928c33ffb0a874bcbb28a4533e22b800c6ab020926d5685a7482feb9de72cfc805cb6749dbfb29c436e99a7ec03c096dba5eb850704715bc023f

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          d74b4222b02441c10a4594bf12c7182f

          SHA1

          1607006f077481146a6b69f98e07f6b2cb6d4aa8

          SHA256

          e4ffd85a96711c16206daf41998bf62f174c1b2818cbc840310185304df90dc0

          SHA512

          cfca931e1272936034f5226ab530746c61ff9e6e38c3a6896ae86d0e665c37ea308304b4a6604d30f47e4597130185b1a7ac2bf5b5e1b0d9bd57d75c7ac332c4

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          f840a4e6d910b4bcb71f0ef027e88ae3

          SHA1

          a1a6437fd9cd008e77c86c1ac876d08743527f52

          SHA256

          ebbcebfdf19dabf9ee49846dbdceeec363c90edb07a3830578e61a0fd4f1090f

          SHA512

          e195f6ba81e26f937fa4f9e9cde29c9338586e56ea77faeb94646b83c344cebf39c62a5fe24d72844df9df8b0c2d421f37f85f4c8ff3b0ce63a6ba2223762373

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          127af2d74e4573a60c3099e35bc03c2d

          SHA1

          5eb2cdf22211dc3b17343575eed1594c2b58fba9

          SHA256

          e028c1206f592396b608fe9861a7ce294abff288a622b7292c0170f64aed4afc

          SHA512

          f353c2c0bcdb6b9e694c01124d23b2426b016b59a9eba9601ded644c017b14aeb4280548f1bf712cac8044fd13f9c8ebb19aeccef65bd28d22265f8304ed1fdd

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          00eea55d9ca4bdf4743df744a0aa4dbb

          SHA1

          3b5b007ca8d9fc513dbc912bd63bb6361ccf7b46

          SHA256

          eaffa9637000ab67e6293936a21a261f72f8c0beda33140bd021fe62c5a512d7

          SHA512

          c05b593f595955b2a0ef2039145fe97279a0ae4e4627bb7747e9f1aa8709d4256180409f6afcfcdad8c7ebd29800c5d9439c32029f98fea3d1fa16bb456356ce

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          95db5307c079f811a8ab295e5c2909da

          SHA1

          e30d32a1d5ab3f26451d8a350873171a8e25e9be

          SHA256

          b0729af8249eeaab341ae84299cafa0929cfd9f6523167408bd9b14beb156b16

          SHA512

          f78968bf903692a89c532a7940bdd9ee3b8620491aa654d574c85b54a4851195c49d6e5adf875a4dce4bca5790e31623be6392bc3637afae4ee518557c9dc368

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          8fc7b20c0906b9901a402c2f056359f9

          SHA1

          876a6b841568163a07cd405f6ffbef7085b090ab

          SHA256

          3b746964895a256b8d8634f7b45e5fdc98c4c3f89a63e671144b21b8d3de496f

          SHA512

          930b9266b5e37dcf25936c6fe04b9e7a703720841a628e092d8186d83a28a940602dc7834c7cd0b4b6d248944feb455137c0d4f068491d729428f9f8d98660a9

        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

          Filesize

          342B

          MD5

          2017a8173e07ae5caf85f25c7db9a492

          SHA1

          18e73736b89fb9ede3eedac8ad53454fd3e2d037

          SHA256

          0ae02765238a28963d9cc5218e5346c4b7af3a36ca628a39cf60bb6c353e0714

          SHA512

          c5d3bab5a9dcc7706ddf4439562e4a902c3b4096bb1499718ecea2f6a9caac615f9c7204fdfc7a4be76790af28914be538974b24bcaf0f6f0c612961583a63c0

        • C:\Users\Admin\AppData\Local\Temp\CabC42B.tmp

          Filesize

          70KB

          MD5

          49aebf8cbd62d92ac215b2923fb1b9f5

          SHA1

          1723be06719828dda65ad804298d0431f6aff976

          SHA256

          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

          SHA512

          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

        • C:\Users\Admin\AppData\Local\Temp\TarC48C.tmp

          Filesize

          181KB

          MD5

          4ea6026cf93ec6338144661bf1202cd1

          SHA1

          a1dec9044f750ad887935a01430bf49322fbdcb7

          SHA256

          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

          SHA512

          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b