Analysis

  • max time kernel
    122s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    09/10/2024, 01:48 UTC

General

  • Target

    28ac902630f034f4c38f38d0e07fa262_JaffaCakes118.html

  • Size

    29KB

  • MD5

    28ac902630f034f4c38f38d0e07fa262

  • SHA1

    7f9538922b25e6c3c3280ccf006196ffef23be0c

  • SHA256

    68530f1928b0eba807021d3bacf1246003624b6ed35fa44982fa5d643cd2f2a6

  • SHA512

    90ed78686a117b43d07cd0767091506b3dc4fa6dfeebf69c4fca539a9c1cf086f685f39cfbe723119a7215aed09faaa0454c004954e73e4c493a92937da1b323

  • SSDEEP

    192:SIXpgcj0dB8qWwHMJz55SQfzF8QVGdSzoOIHfD52tzkg9PyL/guA:SIXWcj0d2FH8QAd6oOIHfDYzko6L/guA

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\28ac902630f034f4c38f38d0e07fa262_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2868
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2868 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2016

Network

    No results found
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.8kB
    9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.8kB
    9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    779 B
    7.8kB
    9
    12
No results found

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6422c2c007dabbd426f8bec6e0a41f42

    SHA1

    1f98b0f9401f5bc4fc5a22f9781bf2fc8e76e2dd

    SHA256

    b698544de25236cdd47ee5c2198489448e2250e6fd4907e1e61136e1ca15b592

    SHA512

    206af947504b28f5a4f5a8e297d931c7c95eb96444fff165f251b1ed0489d3baa303b287497acb5565138f59c31b5a283344bd4960f85415c1788520c7c90a3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9394b7b7cb73ffe47437d704f640e3ce

    SHA1

    65210f9ed6356e9a96a37b4f8ec27e5ad8672fe7

    SHA256

    761c1ee2ab6251dc590a3a1798a468f253144dd54446f07dde604733397b84b2

    SHA512

    5e91916b8e4b6a003e26c7ecd0e512a3feb9fb62dcf863a640bf8f87ff0f7058063197353086373547e85c3f410ee14d6b85ee4f5500d3066d0b03ecf3c176ff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dd94e439845e385867c3d384d048265e

    SHA1

    9848e6c9eacaaa5bb0e6eafb6d9f725135a37121

    SHA256

    2a229a457fad482a405408a20e8e450f6bca1d38e1a4f112b6e5efbc6dd5126a

    SHA512

    0e75d4bbe9c743fd5edc79f36b2c8ffd7e2edec99546c2c4cb4ee609500f6d91661f05cf85383ef237fa2d180cee39f3020d7fdba3f9786719100822186b1afd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    54760b2ebf72728032b91f384f2c78d6

    SHA1

    9e7e20a318fa2f7578721f8fafe1a94c48538b2f

    SHA256

    2502eca68330a615a04a76f52c16f913347fbf37bce3ef7bad070f9f8024fca5

    SHA512

    c4de6083b293db17f807a330edced10c2a853d4967e7b9cd01065866ab703a5ea93c709e6d29c262d17094e269fa4be918b4d7003f0b6c29ea01d1267d1c024e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc7d7b9adb45c3b68a679df09c59a306

    SHA1

    74e31208755bb76d694f4f486bd277f55b84bad5

    SHA256

    0af46d2788e07a6cd578dadc53181285488247e2f0dff33406ce7c16a74f4b11

    SHA512

    2ea45968264ba3ad2cee10c0b7f7b74e21cb4bbdafc2a8f1f80fa7d65f3a6caaa6c2953ceb9ff9a72a636078ddc7fdb27e9555941aa40daabcbee0d0a1be2369

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    13347c7e07085831d5b7496864990b59

    SHA1

    fec7cf1205ea18895090dae2c6fde527f7464971

    SHA256

    ad43f8abde921e8f2e14c4ef14c6c58cc29a49a22ff9752eb9ec9c672e0cbd3d

    SHA512

    39aeed3338ea8e18f39fc025b668433d732ce75c4e6c3e673dd6f5e2f012236f93b8a508d5e03d2f4f779b1b245800a3b3edc8ed4ee555ebdc0d64a30b2deabf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a084e96e37b38aa57c87a8ad45899c53

    SHA1

    0aad8c27e7a3c0f9d9a3923e54d7313f66dfc877

    SHA256

    ddceaa358b7e73470aaf8b1c3fb0adc810bd405902630ad4d54122914a00737d

    SHA512

    fa4568f249ae1a6c68ab1b5e08177ffaa73b984bab93c3a1886c214a1e15b479ee3eee70176e392ebb25c6d013cd870439460d459b36bb0c32122fecc923c444

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b964fc7df4c734be094a1b53f5e6ad8e

    SHA1

    a86aa3d5ca2cce4160f6e71db861bf0da8323300

    SHA256

    c3e18eaa6ed07427f6840f3655fc9e4ae5e89d7e05f9c2f60833c478eb7f7a05

    SHA512

    aebba9fe2b909da9a91a1e6728373263129a8bacbb951eefe41939d5ec26fa020c34922b5fe646a74bf5e7ce32bd8434ba46bf2ccfef519177b73cbdd6545ac4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    68239c657b4c349527d062226bf2f9f2

    SHA1

    042c51d922aac8010d4bda1c170bf13873467cbb

    SHA256

    890da116cfe5ca1ce25ee956f7e119c28a2c87b5649e11a3d9102e4be33eba8f

    SHA512

    a5f4afd72cda4ec2a550b79c3c08a026c19c11589df70f0b662c268529a1968b9c4f6af987abf706c25e1b38a410df5a7a2aea336f176ed0a87847c42477bcd5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    044bc8785514be686f6de38322035d05

    SHA1

    a60927cc50a2e6e2cf41bd32870527ed01762d7e

    SHA256

    9d2cc2bc8fcef11d72ab9b7d608fb47844666d0c2a3cc83b869b64207815cf12

    SHA512

    2ab36c9fc856e65f15ee5d3e7b8c27538c7105b5a273b9e73fa7dc884472d51bfe44d479aedaf5cfa25614cf71e54a8229a290e168414cb83f34d234bd444535

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4bdbb9373b66100820c398d3ba8168d7

    SHA1

    687b13417ff2cb9d48f046af039f5e6cf64d097d

    SHA256

    d709ea275aece572381ac82a3244eeabbe665268fc9a5d872b7a12dfd3b9d391

    SHA512

    08d8107c3ffbda6c11f4ccdefef6af6d2e84900a2c69ab2e0445ed6c2cb1d264f13e885303547f1901710fca47b271e743f4c9d511b4103e51e5d1f6c4b3aad3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    35e82bf11d6cb08e14fbc79cf5f6a614

    SHA1

    311966345f59d0d08dfbee4b43138931a691a713

    SHA256

    54142de9355ad75cf1a1963d5c1500420ae79b46b0eb40c6c7b1eec80cc0d08a

    SHA512

    255ccb8ec2e49b8cb42053448c1ce0403d30d26891c2afad773cd543d9dd1b4fcd1e4dcea7216e2364dbbf8174ccbaa0e2620b7ced65ba17df9083a296bdf353

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2928a80f872130127b58ea712166fb08

    SHA1

    f4efb9e0354ec638bf3dc08231ff79098bc1a3be

    SHA256

    a7eb58cfce45a8ed6762177325e3d867266e576ebd0b533a5ad49dc4e6b5ef11

    SHA512

    32a042638f62cffd122698dcf3e1e316f8c4176a942c065a302ee5abdbfa8844156efcedee2d256fdd51e84a51feb01b4bf564deb0aa73a73bc5cb6522ff04e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1ba30909e79d6f6e9d65de8219e9d47e

    SHA1

    4028944185fc6fdd580fe382ab19ad9d607ec665

    SHA256

    00179a7faa125b3ee18dea5ce6083a7803178fbac289e4e60da3598ea87309ba

    SHA512

    98d29181a379f8899af25d11102d4c14f886a23a9fd1548b78ddc71375a2c23414bb3ed744885e0905c3f8eff01f82411cdfebf02d4b30eeae4233e487542b54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    14526fca0fc16adfd854dae7f52d9206

    SHA1

    f3bc0a386d71f590d7ec430ae30f6558035bfeee

    SHA256

    20787fecb2efdf6af08e2dde04c5bcfaf230cc7147d855ddf2c1e67c9b94df82

    SHA512

    3aa5f4b0e91dfefb1c541d491902f5f31d934d3847b61c830a764613c5375f08d664189b2376a62eb6d76e3fea738c67e91b06e892e8f416c456c2d6a94edc6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5eaf8025de436c20b7a18a43562aab75

    SHA1

    deb0881249faa147a1b5f801587b3336c5c00865

    SHA256

    a60081d06984c5680b7b29f0cc439af18a08c30198f11544e8b36282aa5c76f7

    SHA512

    57b36f11d5945f0572b1ff6bebd4b379f97d14b7b9d4854c74e15c64306fe094660cf250f636ce428ec6fce0c00d80e8a754d6891eaa74314e534f19dcfa4e7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32fa125fc2aa4c5fb581e9207bccc15d

    SHA1

    cc990e59ba87fe8520c91451f8c4e0a70208be94

    SHA256

    855a017e8940d58ea18a218f850e504a373a82c23302e22cd0c349725433442d

    SHA512

    38309454a88a5d384ab3c678afdc9910e74e089b693a3e01f24542699169a98619d81d4c0965f2ceae21c9c98011023d6828ed3f3a23dfd65c7985cdb0a9d396

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    283c8a9a8ab3e04a654af69058121e22

    SHA1

    51a01b95fd5db066cafcc23405840f66e5f249ff

    SHA256

    817e0577a62f6ac6db240005d68be5091d98104b76ac16d328a75a0ebad5c3ba

    SHA512

    922809012055e364f6fcabd340acca268643a50ea0c3a50ca41e090335b7fefb0502d0b309de7d4601d220fd733cd980ce81ab0c90c0d108a55d399ce8c05226

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ca8d09da3611ce918e47d76d3ccd2502

    SHA1

    3d8c8b502a265d7d825eb31881a64dd4223c1e8d

    SHA256

    85a84993b50a70436e46c29c0c42414d9f8b7880122184dba8f5e7c6c3341c27

    SHA512

    47d177475019d5f18606119bd77518b251dfaacdcf83dbf65720893310d4811fd6931d34d4d6b46319fc01f8bb8a0520804864e95cbdd3c5f7c9c10d9f8ce952

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EB0KZ1Y4\httpErrorPagesScripts[1]

    Filesize

    8KB

    MD5

    3f57b781cb3ef114dd0b665151571b7b

    SHA1

    ce6a63f996df3a1cccb81720e21204b825e0238c

    SHA256

    46e019fa34465f4ed096a9665d1827b54553931ad82e98be01edb1ddbc94d3ad

    SHA512

    8cbf4ef582332ae7ea605f910ad6f8a4bc28513482409fa84f08943a72cac2cf0fa32b6af4c20c697e1fac2c5ba16b5a64a23af0c11eefbf69625b8f9f90c8fa

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WCATT3E5\dnserrordiagoff[1]

    Filesize

    1KB

    MD5

    47f581b112d58eda23ea8b2e08cf0ff0

    SHA1

    6ec1df5eaec1439573aef0fb96dabfc953305e5b

    SHA256

    b1c947d00db5fce43314c56c663dbeae0ffa13407c9c16225c17ccefc3afa928

    SHA512

    187383eef3d646091e9f68eff680a11c7947b3d9b54a78cc6de4a04629d7037e9c97673ac054a6f1cf591235c110ca181a6b69ecba0e5032168f56f4486fff92

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZOGPI1N2\errorPageStrings[2]

    Filesize

    2KB

    MD5

    e3e4a98353f119b80b323302f26b78fa

    SHA1

    20ee35a370cdd3a8a7d04b506410300fd0a6a864

    SHA256

    9466d620dc57835a2475f8f71e304f54aee7160e134ba160baae0f19e5e71e66

    SHA512

    d8e4d73c76804a5abebd5dbc3a86dcdb6e73107b873175a8de67332c113fb7c4899890bf7972e467866fa4cd100a7e2a10a770e5a9c41cbf23b54351b771dcee

  • C:\Users\Admin\AppData\Local\Temp\CabA9F8.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarAA49.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.