Analysis

  • max time kernel
    117s
  • max time network
    128s
  • platform
    windows7_x64
  • resource
    win7-20240708-en
  • resource tags

    arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 20:24

General

  • Target

    3be0a9dd012961270d154f7f2ffa4948_JaffaCakes118.html

  • Size

    96KB

  • MD5

    3be0a9dd012961270d154f7f2ffa4948

  • SHA1

    d9f381da50dddaaf396f78de60dfaca2b0297ee6

  • SHA256

    cc0d4480b9cee69615fabb6c3548ab1f017542f7acfa57957a86effff12c97d1

  • SHA512

    754af57c30be407cafe40c729535a2ae96f3437ec32f09c756a44f6630e0e39788023c700951b9492ff9cf266b4a7849352090f41aca2a2af67b11a6bc1b9c37

  • SSDEEP

    1536:5FtosvguEcRXNupAKIVpkXTtEpokRWstcLIUvftlOBwCVvofVDiyYaWX:Gk/u8pkuW4u4

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3be0a9dd012961270d154f7f2ffa4948_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2624
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2624 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2788

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e27d8b8b487d8e4d394cba76a42d00f

    SHA1

    7d5522b92f751f1c739024cf5f60493cfbdf8a35

    SHA256

    5b4aad21335dd64ffb50afb64eb9e5ffa8e2ab7afd6788eb78477bdc943bd352

    SHA512

    c375cfbcc54d7ec135462b05c32139b3e66e20fa4f07c44ba9ee4e0973fb867ee04632a49830f36a2c3782d433c950833218f9a69817bd211b8028aed6ac14fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78bbd0c5ca782c8ae19c4f351b630842

    SHA1

    fa967fbb689396da01cba101ede8b08a9ac693b3

    SHA256

    d6e6d7b0c194f0e83dd0e7e4bd9120aad9f766203621845e9e85d3005d829631

    SHA512

    a2d4e3c21833587e6ad9143bcdb0fc856e176e1889767c306405982671e0a9479d7a52c62df32645f5726ca0b79ecb0f44b09015e3da7b2ad43ff3623f2b5343

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5210bc3f6e5841ee6dac4fd443dd4eb4

    SHA1

    7d07b2bab562864235ce0fe29fb1c3f7bc3444c8

    SHA256

    93f00775c26f374b725733afd4f674feedf9f2ffc60a30219bcc80732c42c17f

    SHA512

    9dbbf544b4573f05765b893382707c150ecc108377f210487bc64abed16fa2a9b60c7557cf68d16d83612bc062afdf292373e06cb2fff8685f849cd8e2a3bd13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3e71507ae76efadf9dfb6242db349d0f

    SHA1

    51644a5b0f188f1fafc9e3ca4d2f584f659fc560

    SHA256

    5cff872c9f6a4b7317168f011bd4419919d16ff6feafa0dbab1d4e21cf670af8

    SHA512

    60a5fc867575c53d5b4d03e6154d7e71fb9fedc3be184b3e3a1a5f213a194f8e8a3a4b0e5393f0ef28626d8ffff4cc9b2f5c0216444e102b23f7ba1c5356869b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bf204b09888409e00ff8b00c3a9e852c

    SHA1

    408937ee6e23689286caf6fd84046adb907a4786

    SHA256

    9b0982d9b7465f9a8d69b2cad55d81846d31533243c59321b1e492686db5d77a

    SHA512

    00d4c7aaba94c4172665892faf02c03785c5e0eb4bbd4fea84ed54ac766697ab3bc57ff23f0be3ee605816ef9a7ce5a62f62a2746aee47eaf26e69d41d8e8c62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3d86b07832e60700797ab1d566947466

    SHA1

    ebba50d48b01210387545c04dced39fb345e1ccd

    SHA256

    85695bede9336a5c7417e4b4ab140b2e400dfa9b4937ec4e8329407b3b663874

    SHA512

    1161bba3870227681384609a22bb916c99768f2f189caf8e94cc46dd4d60e14d1f0a6e071e0182c8062cfafccc9c5fedbea1a8bc3f4bc352207591e414369a02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b2b68096af31d25c2d73c04be0a8f7a8

    SHA1

    b6c0623ebcbcec6e77954e5766b0c873fa3901ac

    SHA256

    fae264390f5119c0263f22300cdd0ae6ca49192aeb5df5e490d46e47e953907b

    SHA512

    6dad2912c752b0900716b5c30d5929e17000f14237cb337c257ab51ab8f4c88fad2a6690cf31ae641256bd9f70014cebba50cf28bc7645444542a0df8ca2e989

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f8ef6ab96b4370702874aa58db4620fc

    SHA1

    bbb34943adee35c189c17e136371a09df7081db9

    SHA256

    7dce48ff989f0b2cbc040d59b9951ad457db11b0840dc1a5ba86b2ef0a0d3867

    SHA512

    31415c67725c56d89842a05e5dcb89ba5f0ac2f6b3eee67ddc2c256beb136709542280bc27b2f96562ce26eaf9cb02269159865a750d20498a209508c7c6a7b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be5e29cac9dc174b34e9979f6ad2f3c0

    SHA1

    c9256668814f8f4c5f755dcece9288db8601a628

    SHA256

    fd5a44678838a4a69472ae92df5097b0f5134eb44a9b73e32ca5a6f649ea6eca

    SHA512

    ae71e55334a9b91791a332339857c1d60247d505ca481e33bfd6c7df0d876d1c343b7db314e682cdcd51afceab842fa8835415df79ed0e1454fbdf28bdaa99f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9db41980cfa0e9cd681a029bc876d95c

    SHA1

    ef03c96f096187b847110ec6e07ca604e6a06204

    SHA256

    7df22dd0f50d693c2a5a8b14aefd992f4d2afacb302732a333abdaea8055cfb5

    SHA512

    90d32027a3946d644c708c8317ecda67fe2bcbf51f0291c90f9bc3b186bdacbca502932bd3f1e1952d0fb91059a90583d371b9e6d6618434bc5137de7c93e493

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2c3e3a9a2e71bbe7993cea64d86f635

    SHA1

    a765bf3b5d06d6f7a54cfe5dee1849c033d50677

    SHA256

    3fbd216788aeac20635bff4c29084521eb218953632eb031fb9b03cc80bfc401

    SHA512

    38b8c95764be448dc88a6b3f56d7379f82c46b3d7ccef33043cd0d9263ad4bdddfe4df3e0621edbe143ef31557b88ffabbcbbd573ff9c6b9c37f9fe32dc4d11a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9fe7f0516d12727c9877891e91653d1

    SHA1

    a77ef55264a6cf735bc279fdd02b484f33cab49b

    SHA256

    066293b7f106ec89e765af422c91ad70777055baaedbe6440cb846e48dcbb01b

    SHA512

    3337b9964387ddb1d745f225116c3bd19476054e99a5542a88211a72fa156d9181607ca6c436bede3705cc142306c317c5595883d6377da86046b7292a1e6d40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    37eb1f40021a7083bb2191c3f0621eb8

    SHA1

    4f40e9dac37018acd9ea88d4cb48ab673ddb5d3e

    SHA256

    89352e89e98563999f0300b0a7634602b7152ad183ebb76724e5a6d8836aa46c

    SHA512

    eecfb290d7c632746647b95de5ffacb32344750572891659d00c1e2ec33b192501384c256f4f44c3b185bf8ade59d8bf567e2d2d6157ab73d756dc42a2d32065

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a7d1e3e1ae27ccd00b2ac7d175026865

    SHA1

    a37f3099410d08740b4600f8350ac4f1df67753c

    SHA256

    c20019afb68a524b231676484f1eb2e0e46237c642bfba0974f8be8938445097

    SHA512

    ca9e4574c5c3814b25b5b76ad4ccc689e8999ced92d34a8a0f615329844805cb2613cfb38c130e06e4f5f4a3be98b9975835f00973248141d328c9867ff0fd32

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e6c776b6d518ffccb77987a43eed04d0

    SHA1

    0867c2cb0995e5fef30c115a4b21b1bf3a17549f

    SHA256

    9a3e0b8c26734c345cc43786ef7b58f852c199fd6916fc7dbc317bd6f7ada252

    SHA512

    c0dba266116b81b5f6298fcaa703fdb8c8e79cc537a86f82354088ab6abb79d8824e17a03304791ef69795e532b7624eafbc965f65e998ff7f297f130f7218b9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    886efa75b550dff59715fde4c6cb6a53

    SHA1

    79b5934f9057d44dfafba2fdce0a2cd911c38ce7

    SHA256

    7a727ef1bc4056def9d34e398d4de715a091b1318fb37e5c932dadad9b3decec

    SHA512

    a077c0790f8321126e6e4bbb14275176233263e6b60665a13ba82b1f094efd9bf6dc6a1f27de3bfdb80f2a5e77c2197c85abb7a2d210246f9a9b2c56789b7cd6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    976a6fe10a3f3004c1ce1f437109e1f8

    SHA1

    7923312a816b009c6821acb178e5bdd35774d246

    SHA256

    60671324b2bc1b66d06d7dcb8871a96e98906e60ef78edf07cfe7500895e6d4a

    SHA512

    4c5806dcff83ec44e14c587de2fb0d5172c6a32abc2599cbd5df33402425b091c56f76e8ee8a8a06389854fe17de94d9bde5a19688232f4006da3000c5d3eaf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    44c71ade7ec626db9ca78a7c9be2b4bc

    SHA1

    cbe30ca639af5730859af0501f03ed66e07c1725

    SHA256

    5ba7ba985acea288644231951a8562c2382b7f211e6c310593dc683e54ad1ccb

    SHA512

    324d2055743a6c45310c95998ef813ab5d3407af096196289431bd81283fac5894cb08f3faffc87a6191544460428b1fcc22841adba7f78450a5fdf9fc650cfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    258455877af30e2366edc0d88f3c2231

    SHA1

    c59270891e736912dae3542f7dcec8332e44d6d4

    SHA256

    e941cc2f19cda6d2854a10f932e5d31675fa2676b722a4cfbcd75e9a3ccab074

    SHA512

    8d61725dd58f8a56e0bb4f6bb1870a9c2f92e0ddb4bd54c42c9ccd2ed44799a17bf904d55d6eae9e904b881154ff6dc2c5b4082fca6a463f6aef3f0e82d1cf40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f2b31c3e8f0e9a0355116c2c19db16a2

    SHA1

    d34b12f7b32aa9719f331c580166721a97a327ae

    SHA256

    bc4fea3b6ae4b6009f023f9764cf9e6c799597b7fbc6946e2390271837e3ff1c

    SHA512

    ee8a55d9fcba9eafbe34893eb86d280060368307e27b92235e83d5096af50968e9c2ad4cd6f066178661d9972a35a879e0d42768375144ea9774fdf0a6956e23

  • C:\Users\Admin\AppData\Local\Temp\Cab5D20.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar5DC2.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b