Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    08/10/2024, 23:00

General

  • Target

    26c11639b86f2befcf1a3256c2ac91b4_JaffaCakes118.html

  • Size

    32KB

  • MD5

    26c11639b86f2befcf1a3256c2ac91b4

  • SHA1

    50596687dbbcbba23f3c02a39c2d3b3b5832a676

  • SHA256

    cbc6b41ca8e17c2abcb04489e04fa7128c67d75ff04675a7a347a489bec87fd9

  • SHA512

    9ab370f80c46de09ecd3ac484a429cb1b6eacf778c8580aeea16300d2d0c1797c9cfaeff1289f2c61d35ff5ab5f9701a6347197aa975ad6946ef1d606384e75b

  • SSDEEP

    384:ACk3GDG7GaGNG9qG8GtnQ/Eh0WS8EQ/jQz:ACk3GDG7GaGNGQG8Gtph8

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26c11639b86f2befcf1a3256c2ac91b4_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1864
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1864 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2348

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aa2efc39da80530d2de460df6a566327

    SHA1

    c5875569b960edc0a0812253699ece26addd25db

    SHA256

    8335e5175236169a092b9d0605a5fc033565ec853a929ae6d329ca931e729365

    SHA512

    b3af1bc21943c26833b5cdced304652983eb082deb83e33a2c9a8aa21c053e8f894847fe002a8bd71f205de75a892df4a2525376dc5b1d0da8729990cafc7b94

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    027499cc1a15fbe1fb03de59467f0d20

    SHA1

    92a06b5538f6abd6a272504c98ea682d67a20716

    SHA256

    c24c9e4eceb8672de476f43d54bf218f7b3372083eab9aea1720acbb73413ae3

    SHA512

    37f04de8fad43de5c3497c1394a017db72647ce4cb8dbfeb49af81526c37b39b474f7683537623a53317c44aa6230fe3178e5852bbb9f009ce7722e9b12360f9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dee60ebec3e2f96000956eb6b04cfcc6

    SHA1

    90389682cf2a141eb3c971a125257590892fe339

    SHA256

    bba4bb8af078453d9d8e46f804bfbf472db468ed97a1730bbc352a45b44ba10f

    SHA512

    c7e47df23b6e061ed26322fe07ec6b73132775f9e817fccd01e700e9b01910c787487a6d0034cfd6fd638319f752da7cd46863dbb2bbfe5c6a45c5b70e615e89

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    880d636f3678c7ea23cd405a08bf19ab

    SHA1

    b8220a5eca261d84b5a0eed530ef8bc3b68b76f6

    SHA256

    c6b53afba942c88d6f01078dd9a2729bd5b3b9f1d5edb7dca18ec9e3934d1ec5

    SHA512

    57b604051da676625c4301a149e873ecb6e0a29c0565ac62907c9d72bce1aca903823a91d6aa1e4d4ff7a5345c8ffaacd2ab169ed027ec8fa47108d8e8cf31cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e918031c5b1736c1db846ca5ce5ccd6e

    SHA1

    19ae7285255371cc4e34b2ecd67a89f92e99b89e

    SHA256

    b205e9294bb97382b0b06cc5463f885f78be3aa044fa8846ad3d3e350e1fd43b

    SHA512

    e8009ebfdf38c67b15844c3ce715908967fe85f9e5e03b55f9f3699205b5d95dd24a38d043feb5d1880f76109761cf2cd1bc3384156748b7317e3d939a757797

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c84b110935101bf71146c65a357007d5

    SHA1

    ca1bc748966c5c4e0c894da2483a84bf4735e134

    SHA256

    264bd9b50604ac0c063003ee9d7517634b842082a87f5ff410dab2cf98892b3d

    SHA512

    f63eea3b6743adfcbb5420f854f4fb4db850b63076e1064c215945c2282a0b9b22dc4cfe5bef58f8db8bb1bcaa6e152331ece4390023d3d008617495e27ce5ea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09c251d0786a31af4d499d478a10d833

    SHA1

    6fa7751588ecc0d67a043f0af7b150412b539465

    SHA256

    8965681037d14d0115f59e0040aa24e4ae60473de51e9cd1aa46f15d1c409b76

    SHA512

    0879e5e08cbff75a3a3e77b687d5cd04a2c0c8f587c2363273d3cb3bfffa30db48595f0bb7fd7983d02f0287c8356658a0efe0d93c999460749353851a6a78ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ca75cf489d1f7518ce353199ea636ee

    SHA1

    835c10e48c22af3fc7fd4286f45ef84baa55f87a

    SHA256

    3592de87138a3aaa7951e08071150200b32b007b33c8683ede39f8476dd33ad1

    SHA512

    05060cc1080baf61a7603c9482b56cd70dc74b47323cf04fda0be23e21e693bcdd904d932e58ef2728889b37ac775dc7400e3d2c7323381f485c5e4231a61fa2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69aa0e4b4a608a5975b33ab252cbb735

    SHA1

    163ea4bcc4877733bbb6eb36bc62c7e5d190bc7f

    SHA256

    fbd15b570648010eb8ee39416a34cf28f9fffe94b2e0b8289c427ef6170a0b75

    SHA512

    c8b1c9b8c2d9e6c93101e8c31c9b0a5720816137f96d54477e52faf7d0ccbc2dccf2aea0cf79c448bb158076fc4181c156cd227399ab0bd9d42554b834020aee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aaf7bd346530ecab13fb476b25aa5560

    SHA1

    33116725e436971d471244f69cd9ffbf5b45046e

    SHA256

    4f4984a636ea106be1d1d6fcf58dcdcb2cd0033bab96a4d564c12730eb3b86c9

    SHA512

    088e8f338eae87c67dcfd07e9a73dc6ec34ccd963cecd94f53af0f78bb18ca5241d7db10619ee0c28165384fee6c4d346f2b6e66121ffd7ae8b455ccb4dae20b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    365bd6516d1464588b8476d232bec349

    SHA1

    ad4e7aa2d1c08acc4ccbb789f7c426216f8ba8a3

    SHA256

    a69fe5cea1a464dfd8a8c12da118226ea609a2bf1444a42e204f4fe840386a16

    SHA512

    06ad30c55ea0a2b0fff67c995aa6f769731dc1aec958fa8563ceff85be6852bd3436f9973c44bf3a4b6eb44f9d0c7c0763c0514c841289ce3bdb20c3b3316422

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78ee4c14388e659a40a3fb78874f8b66

    SHA1

    e7a788a8a61e9900c9ffb6001da0617037327277

    SHA256

    4e299264acf43631502d7a96b221ab383e31f37430207c0c607aee8be17e35ca

    SHA512

    2353817f6f8ec99e7ac38b1eac9d3017a5ea18aa6b05ef743d0fd1225f394784b216540a29c8ec1e41d3ca5a3f7fa3a19793898a330c3a5cf767f4b8d978b23f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    741b83dd3ad44f08aecb4145731918d1

    SHA1

    358121789c660c68f1ec7275fdc53cf15c404827

    SHA256

    1e753781b877ebd95f8b4a0b300c6dfdf527a6390e9dee626c7dd374c35271e2

    SHA512

    b9c6baa3eea56855752ea33bba1556a5c47a2b9462660f9a51cde2fdf59e10b4eda55df28ad068c781d5fbcca80eca9c8407c76f8b8d01f2200da4acb3c0807f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    09ea7ea980d1c4f347b021df81d3f292

    SHA1

    be661dc9bb315a6d42d31b1a34cace9d990dae04

    SHA256

    830f691ef0d587978b6e09bb0df6cf7914e81d84a65aff8697e5a6da13caf642

    SHA512

    8a7666fdc7aec11e7bcd491b11cc3a26bb0f7ce9f11f6185ec36e2a44722a8c40f31fb71f7ac4d794e4cd8c0197ff6c1e32f03ac32a40e5359779cd70a6a2ad1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80c18b31c02b1eb8fe3932d6f1e640d2

    SHA1

    c211a11d69950dbb018aec21bf4ab20f773fbd1c

    SHA256

    00ee79005e2b5313235fcdb20a1697a41da9f7220b68cd1805c9833a4f758d27

    SHA512

    dcfc35408e61f9a8a407e568ee684bb7b3d5dfb6b068a87556fe40135eb3a49a3d77a66b464ceb3247de95126cbd3848e5b1076a7f5ebb0b837bf51f9c4f30b1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d5b2eead2fc2daeee3bf2f0f9eeff664

    SHA1

    628a4996c53ca0bbf464d13990c89c1f0c1ba729

    SHA256

    28dfaf63f6e2345eb577b277108c8b435a28553e83c6f05b0fe21b984132779e

    SHA512

    55e4df5adb89ce12fe93658c5356ec18395be29774cf583f71d195615a4c71233e6f137092cecf1a907c349c02efd8f2c5906f5d686b521a068301c0107863e1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    03822f4f6a5759a4b6ac207de8aecabf

    SHA1

    c92419b61b0f176fc803fe5e8dd70d9b1803115b

    SHA256

    a10aa311526f1b51f737a3217de3bae717a7ac121168cb8e1f359ac13df9e518

    SHA512

    f7c241c9570474b49a0ae973c032ca147467b46d1c916b2e86c0ad72123f90fa6cd7e1919febd8070a0d9ea6ac05e968fc349e7f79653c37b53eed938484560c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4b92f72adad66261df70a31f8e9965c4

    SHA1

    cc1e4447a8b78892cf485c8273db9739fe822886

    SHA256

    f5d3a7b7055f21ab6ed6ba4a1a7129083a4fa21d3d9e51d67b123076ed15852c

    SHA512

    79b781a78dcad96bd49efd5b04fe8511e9aec7b4ca6f0e551daaf63fa131222c4865c41d7e18d085244684b1fb9d36de16384927b1405fe8f97df7ff7a708a9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c434bdfe2c1484351b5bc32d18428bb7

    SHA1

    8ad9312c3972148ae95286c75922aee94b52897c

    SHA256

    40087c2da66e938fda09f7f4ef52cfae6d82b9d19726b80de8a4a41b96728b8f

    SHA512

    1ee6c2574b48983051d1c94a459df7492601eafe912951b9a0ee3e858c73f87879d67d2e0fd22a720842c264841a9d5fe02215107f3c0b035e96c397443db294

  • C:\Users\Admin\AppData\Local\Temp\CabECD2.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarED90.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b