Analysis

  • max time kernel
    136s
  • max time network
    114s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    12/10/2024, 20:11

General

  • Target

    3bd791b36bfc5bb378e2012b30af1feb_JaffaCakes118.html

  • Size

    214KB

  • MD5

    3bd791b36bfc5bb378e2012b30af1feb

  • SHA1

    79e79ae00fc122de975355228a7f68c2f94b6370

  • SHA256

    a91d7e49d20c86313330db2a644bd97ec20233ad8235d17f7decf0f356117b17

  • SHA512

    2b9a9a20d06a024ee084aeea02cf9e86c3d993f2dda39e296d76ea775af578e854916c3013703eba92bc00000db06b9b0a096fe8df39718439129e7a63b28ff0

  • SSDEEP

    3072:QrhB9CyHxX7Be7iAvtLPbAwuBNKifXTJwp:Iz9VxLY7iAVLTBQJlwp

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3bd791b36bfc5bb378e2012b30af1feb_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:528
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:528 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2180

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7297d1ecc2da0c638f0cc03b8365302c

    SHA1

    ba05e31ea43659d6d6bc158cfc2987aeb5289074

    SHA256

    5fd9b490e95cc8a00170cd0b93083e7ae8b3842cff52aefd68fc02a51e734292

    SHA512

    e58d510eb5841294c1a656ea275287bef507fd385383c08f1ec4299aaeb4fd117518a4f0431bfd0d025eab99e8f08abacc789952575ad2894a9e09ada3e3217c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    43eee587197f56e66f246958d9b8dfcb

    SHA1

    02258d1c8896d7dd0f2b548feb7db1407cc9e862

    SHA256

    4409cf421308214ca280e843424ee10fd376b575eff72e44e85a720b5da4b38b

    SHA512

    31a5c45b94964568773158e6a3d382d47659f4269eec9f72514a2ff6f74e978c09abd95b94844cc433d060bc191011bb9807651b265dc1a5d1e480638631cc72

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    192733bae127c51b6a332d01deafa398

    SHA1

    7e8186c0209735d66d90da915953f12901e332ec

    SHA256

    85d030f5aa367afb3970669f64ab001da2f40c5e067462b8cd8996a5f8a117c7

    SHA512

    cdd105787721f12011ccb3081688bedfe630539b49d64d595129ebf2d3d16cb469f41a6e92fb453f855e8cdde0ce967bdafc2f2081d9327c8374dbeb2ba39b54

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c051651b0093640015655b11e06bbd5b

    SHA1

    40c8ecc87740178614523db6dc917984b26d2f6a

    SHA256

    efe955e60fbb7c51911dd391a486d9c82e2c357f2e202402fca1c40ee40319a5

    SHA512

    dee9521f1521812826898ffd51add61d3b4f3d3bbe44e75c01238e4c3bcdff56abdb1f77dc7d8df53e3fd453f1657b9c36c2b1f57263de442ff063c3cf0f9ecc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58f749a21f8a2593cf570b622cfea5cb

    SHA1

    3cf1599209175a7fa523515e2e6c841550753404

    SHA256

    1ce844843b2c48e7ce4eae92d5c0dc71b0f0efb2b8a0d268aa8e23bfc3484044

    SHA512

    8aa12affe297d7d45552291640dff825bb70683d919506a8becda262bffeda42364de73e28ed915fae74182c9d9b681251fa688a435e3ded8faf6f30cc56f6c4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f2ac8838939a8f27b0a5e3bbb698a19

    SHA1

    e847db6ef800f28f0b1790d3895fefce0495897e

    SHA256

    8720faa2e98d0e73c0c3c79a2012fbc650b0ffbab536de708256e749b38d1e36

    SHA512

    46d2757b9f4d57bb4be4b4d8b26bf7fbf06a15e434b8cc4cb1e5f557140674ad132b4275a6c3ead2d73457e7ddab603cd1ac161e2c032acfded6ee513365fee7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    69b18996dd593a7bb0c4d35ce7d57ba1

    SHA1

    279aadd79d6ace3312e8d7df2fcccf40b70e8f11

    SHA256

    0d4a5baad9a425130e2e347762f30764463465449970e1be0a9ac6be5dbad8d2

    SHA512

    048eae33649e0e2b7ecf47f1ca01d4f23a92b49cc1809dbbfbfe59ac8aee1581f31e1ad518f492dce3acae10db55d80977c6f138654c73acdb153b4ce2db8727

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    faed141a8f35f8d5cdeeee7dad5b9fd6

    SHA1

    f7b1fabc798e0b0b8595f7b4402f54dfcfde7ac2

    SHA256

    54ef927e675238056dcaa6cd7736bfdcdbea2e170131943eec905f6a5ab33aeb

    SHA512

    c0288d5b899041146696a9f227ab9b27fc99728ee9a2814df883fda340b0ee022b225d7f4d98f1f05f33d48f4c949fd3192382a2374203acf0a5c784c334cd80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d443f13d97a0ada613cfbc898e5661dd

    SHA1

    c31632626e4c4d7bc080ba1042b82e17e76783f7

    SHA256

    aa2aeb920c2d8eaeb2f36c38d9604bfffab2e29bd84440f9456aa61541f231b4

    SHA512

    ce0b16a55e0c06acb196b97078442b484f947821dffc8ca36ea7bb4799230eac7a885c6c6792c2e52de9f74b9df2884e98a5436e70d29c6b71549494425f7720

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fffaa8c355745cacabab62949616b3b0

    SHA1

    abff5d2720bc86ad816f810f5c4def72e867a892

    SHA256

    03113e9dc3e4455414a369d76a33c10a0409cb24a60ac7e818e15b6d8592ed9c

    SHA512

    889bc24bb196adf02d97c755044043ec079467f8febe5c620ff1beac7d810e90a6c30ff5ed845227f065bd7bc4bfd791fceeef5a7266a37196c2cc78b6db517c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    853868befd49ee0d756475b1f1c9173d

    SHA1

    08d3361796019914360e2786938bab2db13a14dc

    SHA256

    f441d0e04bfe0380e7012ade4766eb246e374a0be2db90ac75b93e6b53c2563e

    SHA512

    2f35b9a422ae1ea8ab48e657f071d94d4c89263bd60fb21938717a508a172a5bec96b35c17d3d891f2d229ae8d35a35d4cd030c8c78666a1eded7a10db472b81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93c0d687166cb5977e9fd7fd8b1eb3be

    SHA1

    1d32f15005b863f08da562fbcb44fec77bd3bc42

    SHA256

    287c45f5c0eb11fc5fa80675c47e8cdd97bc4570d268ad07f7e7abfe1e988097

    SHA512

    462d2b49c25103d648fadd85270bec783b6601c8590f4f6e0031cd92ee6b4816d6187e4d160389887c3f839e99adacc6a8a2c853d40d636044e03b558b441efd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2bf120857df7eb63af61e80ba801313f

    SHA1

    85dc53a831c97499eb885372c0ef11f0c3734a89

    SHA256

    dbe76fd92ff642dee25b724ce2cc2c32d837b396618e6d41e3691fbc3af335e1

    SHA512

    272d6150db63847a82585e207dad9a819807b03e9139748b858db1c845473817adc70a3d563f2e25e73f42065a3c484746b8a3c00d8cff6a49954125c8ac0ef2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    447e4e14f6697c40d0d16c721713e355

    SHA1

    f3c974e587d16b7b73a73d5bef2416395e8e464d

    SHA256

    5e4d9105af9637e63f62960ca9928ff6d1e201d418e5dcd84657a8c8aa44f112

    SHA512

    d1cefee7299db432d23f6faa561107d94610270f43dc33c5b8875e8e29578e3ecac8520e04bcc6fedc705d628e24752166f4375542cf808e6baf773de660af15

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    eaf2e34949a4d226e3d0c321bdec710d

    SHA1

    43e3509986f3d99fdc9a7fb9b72133a6a3c92207

    SHA256

    2e57d9bc7e67c77c42c07af713adaa8958c0efa58042114839263afce4969e2f

    SHA512

    3d302f1807c8bf7d81d524847a58bd7db4857ce2557fd45797db8e6aff8273e600da77af0d63ca16e0cac951e432c0903e28b8ca3370498c476d20cc292e26f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    caf7ee401e599039be7edaf7728cec9e

    SHA1

    27c538ef12a688dfa15621eec2c744cfc0893dd0

    SHA256

    9508e0baa1a9c393a1685e0206fa5d8c9f33351aec83620abfd64362b0d580a2

    SHA512

    88ff25270094b0106e50a5c10ba107cb14277a59ac1cdd229b6f0a08cbc67c7ab946aae687678a3256b5b4bdc207ad912b78a81644ebafa21310eac75ab91222

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    32dfac9e6998bf4b0224007bb9553f29

    SHA1

    d696441774ea7e45869c630ac60cc5b2ad75a6d1

    SHA256

    a9d9a90a7e2518cf7401978731d6762c2399cdb64d3f2a2c792acd2727ce7119

    SHA512

    ccfa2f1eac29ea41f18843e715588369366d6a5bf1cb7e4dc48cfc56f2f7cc0961882cb9cbbb6be47e12ab7671efe66b4d6c83f91aeffcd369bf21d40f5d2bdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c42ad0a4238155b0721a92d5c0c2b8cd

    SHA1

    740f7939cc27a3cf594702fa187528718d1f8a21

    SHA256

    114c5e08bd4d4000ab5ec7147692707bf6d600be47ab8bfa459fc9e61bd3d1aa

    SHA512

    216a86a05e1c369b38abc325c0353e65e1acea3e5747ca92de4b10c79100ecbf9bfdcb88fa8939171fd1c95b4ad9aceee4fbc9cf451b7b731e37562388f0050f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6cd4a13781c5d064c30fe19ff5c354a7

    SHA1

    a54fcb45c2b2ac2c31a5112bafa1d27f793633ed

    SHA256

    df3504a906aa564f62afc6503c506649f9f82844f601f026c9148621f3f0fc2a

    SHA512

    f56d59c2bf40844f01c70e238ed3110777047366a03a1f8e8894c31727f85d6e5f7cfc4c90ae28a20e64a3aaa86b70fdceca80640d1ffb0d0822792b4cba8fb3

  • C:\Users\Admin\AppData\Local\Temp\Cab7D9B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar7DFB.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b