Analysis

  • max time kernel
    118s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    15/10/2024, 01:02

General

  • Target

    450f8a5372ed764638b7a8add12f164d_JaffaCakes118.html

  • Size

    53KB

  • MD5

    450f8a5372ed764638b7a8add12f164d

  • SHA1

    51afe762ff541f8f00c175b91f29626800ea3233

  • SHA256

    a324216da13e8bd74c8a1e632af9fcafcdd7be6ca03a6307a302f85581c6fe74

  • SHA512

    7f650be8fd472d7ea79281ac7d09aa28999e47cfdec9ab95dbd822aa422183aaafbcf45e5328f63cd4a00e8476d810d7dab6b750b76c0079d6e1822cc0fa5953

  • SSDEEP

    1536:CkgUiIakTqGivi+PyULrunlYG63Nj+q5VyvR0w2AzTICbbHoP/t9M/dNwIUTDmD6:CkgUiIakTqGivi+PyULrunlYG63Nj+qF

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\450f8a5372ed764638b7a8add12f164d_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1576
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1576 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2076

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bfa6830a4ba46d480ca129d4e1f48c43

    SHA1

    808bf8cddf49909e2952baeb2bfc8df5618f9b1c

    SHA256

    307bf21853f10fd278f0d4fd0ffb0f51339f0fefe391b9f82b01f7f46cab54cf

    SHA512

    4a3b8d229ee65e6a0c2007e6b618a84e6eb6e0edb1d6c875edd170829d7cb377251dda0fc7f0876cfa040bcccf0b1e3e0639308e11edc9b66288913689fe1984

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    995b87ab299d505c45a3f0ab1d5c1359

    SHA1

    f4e186eceec9ff2b3f79d91831fa5c5b1ef2cc3f

    SHA256

    80131c184cc5c019c9c010b43787f490a75a7f66718c259bcd0dc4e576a851c1

    SHA512

    9d020a729681d79fd6a53eb574873435270a3fe5750ce35c3b1e8f1e1d4d491825d72625a5ea4e7e360201013b920ccac0223254615cca1c93402feb99c28bdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9c5728ccbe3c5c91d95bb2d869fe3b5c

    SHA1

    1e09a92a23d85108c86a4fc354b1b98b37fc874a

    SHA256

    3b0b6212ee081da3c828ba6f81415fe158e8c1a475fe100c7a5910a6a9ad6b55

    SHA512

    75d620e4af640a404744ed8fc875c8003b5f7c95f47825e2469f3537647c8ab57c1457704f54467637e5d78fdde23825b7cdab21f70bd9fd459174ccfe26515b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    36e39177665f9e42f8628ed4afb48015

    SHA1

    c2f774a353267881b2d7af31c223aa7ef44af0b3

    SHA256

    08fc01c8bb0ef203e585115774e1b3109ba8932193bbbd171cb5fb38ce9689b3

    SHA512

    0a9ce767a6f9b4394c61e6b53c35b47bdca23b258772b7f8f1a5c37e03d5aa7b7908645a70d77f8b09e41fa864d36c57326d08e52275dfe5047e858b93aff29a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfaa0d820e89f0d59480d90e50bbbbb7

    SHA1

    46ec58aa302ce8df8fd28a0926ef1bf40e83ac7f

    SHA256

    7a82b6c5be4246b15e98cacb4b20936ea59e378fb22b8e3d95967e0ced7d8c02

    SHA512

    f22994be586950339cf40dc56473475f654f679341107d5bf23202840f0d6e0774e155ebbdde9452a6db4e045385bebe74b7b8c2939c0daaf07956bcc24081fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fc30958a8fd0e0b491048a890c1762b

    SHA1

    42addd5e2b19cfb1686bc50fee05741ed481f642

    SHA256

    43ef6ebecd885ece2fece101f36f74e37b118a2098801292dacc67534b945f45

    SHA512

    02cee757d048fb78d1e78e5057d4bfad6040faf7f8516995859caa2a8f051d091470cd9f9786133494cc32170101e401b16e11c8cb559c9da6db82023cd6182e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2424bc12537b44a16dff4a36464ba360

    SHA1

    612b5b0dca41a12d48f7e7cd3888f04a91e0b3bf

    SHA256

    84c0f555aeb06c9a2f464c5bfd741bdd36751aa438d8cd60367ed8c3ad8794e5

    SHA512

    fed42d6596bf1f376f24f76a4a85651ebe8c16d6d54cc7ab3a59b1c736cd65b41ace3dd9bbcdbbd1d5141a91568ab6950dc568c618066f48f1bf808a266c2736

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    aae0eed14b87f60a0f86981439cd5401

    SHA1

    89e1315065b6c364c10be2c17af4a5aeeb01e1d7

    SHA256

    bffc93e92e49dbb395c11735f28aa7959d80faa625f78769df7612fd10ec614f

    SHA512

    61cc3b4d222b9bde9507647c43816be4859195d8ccadc65fa80cdcf793ff13af3dd9b98502f34f452c844ceb71c4369dec076b73471812a89d31e693d6694665

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e2457c1f0b40ffeeb9451f96fcacf06

    SHA1

    9b969e816102eb876c0f64518a7b1886f595fdac

    SHA256

    7267d68696bfa4440811fa58d610245611dffad89acdd0664493bcec4a1dcd69

    SHA512

    11e198a7e98fc0c5ed82d431eaa367186e7aed186a96c62005043351853d33b6baf1bcae71b4844b78fa588863f353f8df19577d915ece546df4631a3fb6a714

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2f6c0e14aee3e08b5fc8e1bd88331f8e

    SHA1

    6959ebf79678dd397347be41fd73e044fe937a9b

    SHA256

    79378e59ff6dccfd66a46a90665659eabdfed22fb6998bf63f8e4a91f1b0b967

    SHA512

    8bdb50fd46a68c524376c720f2ced40ac1594ba8ea337ec9f11480f2f440055d854ce3828ebb84c732616fc7bef5aa8ebd0b357f6c25a2e856bb7df3dafe600a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ce7096086256a5a12bb2b2228e6816e

    SHA1

    4c3af634398f98e59fedb0abc856005fb941a593

    SHA256

    c9a50b50def52e104a83ccf2141f4ee5a00d6fb00ecae73cbf484585575afe44

    SHA512

    4dceef2f631f7117d0ef49a4930377811695233bab350bd6148cad07f5202d1303eda09b4b8a768a70f156c216db7d76246e22f9bf106bbafb8d5796b805d248

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    883fea71e0970fff26318d7085940a0d

    SHA1

    e843b7782a1e8691f319cdb4f55db9a8df4c560f

    SHA256

    9e62d647b90597b4c108397779eb8246cbe6c1ccb68cd2f2e28d97985c4ace50

    SHA512

    e9a84369350603a8cf60f10c1c5783d59456d1545ef912c1055ab45500f05fe0521a1914bec06f96f2fb4bfb72bd920bedfc4213c14ee34a8ce0386aa5c3a4d7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdcc87c94b4229dbfdccbf8ef6f0c47c

    SHA1

    0d0830cc10bf9955671760c6bd3561752f77d319

    SHA256

    408532a82d520b0d7a7f853c40e8608e0844839f4d046911672ea56bbe0d41fa

    SHA512

    616b030f4c51e663c2b474e293bfe3993e1d32dcbc304a3cf77a9467cbd3462a17c743e309e1cfe2b42e2566822e39f3d0c50389b26e01e13e809e1ed97b7ca1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    74f3a49d45efacea7230858df128d10f

    SHA1

    118fbbaeef49535ee8b5b21e78051c827bfd7ce4

    SHA256

    e66b8b44818068ae24b11f9d96640af7890b63c41c83c1d5bdb8e26db622484c

    SHA512

    ff565dbf4c5ed7092e94c454eb2fa7510f2b8425ead5f8555169ef45497e1a379e5f5380d9a7afc41b7c255dc0ea96aa612307a129d196a4b3655cbbe9c59fdf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    61154efa60aa0c31bbd7ac00fd19e954

    SHA1

    a38c1cdc16534e273cf9733c077f5f0289036b89

    SHA256

    c0f23479f9da37f15a3458a7b7ef9ef7305b8cf797a5c2552fcfb0665c9d2ef2

    SHA512

    82ff52810c5f5af0222ebf4cc507f89a5d2aef8c7630de5b7518a36df6bae78522efa74bf53e0568e71f0431c51d25f0a043ba06e4ecf332b00e3670e1e9a992

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4da2778bfa696126ffbd19f47be847f5

    SHA1

    2392a8b79d617fd5ec89d15ea14384f267072ac7

    SHA256

    feaf0bd27001fb33d8f3c520e2c2fba729088319c8033a49f50a55eb4af66b09

    SHA512

    cc3482e6382cd954c622b6318ddf6968cca49d7e599ce3c5791b851c7f66f14724248f5940aff25935b51f9c33e7a66245e4ca44ac578be9457b2f38b89fbd23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96bf4a7211241cab93522e97be068412

    SHA1

    1c86efee8ec9b64e9cafaac20ef9290d759ce1ef

    SHA256

    db7d837d0ba3afa210e7fa137a31b82358bf158a350f95a92c461c3ec02cced0

    SHA512

    cfc26fe519991afd0e9a34bec2e17d2a33a95ffd9daf022c35f6fed07cc03f85ab502c3d1bb54e5fa36193f442ff9ebeaa177957308182cae12c75c124de890d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fb99ade8a1c871380dd3f128ec832b16

    SHA1

    2e893cfbc3067e5dc0b7c4cf528c4f810e3026e0

    SHA256

    4f8c86174980a8eccbceb7b9cc5a90023d591bd71f168aabb7ae6738c454a106

    SHA512

    733756ad3cc74685e1e6ace73ea772535db8ddffbb836c2ec7f32b0286fc77744bb033a249d855c96350f32ca3b7162f4da6c4e51fc6b85b03a4f43d038b5b06

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    752e12e828e17760516accbecdffd22b

    SHA1

    2587efae9231c738658596f4dbedd7e8e38425d9

    SHA256

    310f96fd776cccd132a20036fc6bf794bef81732d3a3a5761a6a8c06abddcc2d

    SHA512

    601cf0dce95b08eb2f70d532abb75df55b610f13158684b099df68ba7c605531a12612e607740c3784f23e59af79472c2bf97b41a248120a204bf519933c92bf

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y8UFEBH5\print[1].htm

    Filesize

    706B

    MD5

    67f3a5933c17b3ab044826d3927d0ba9

    SHA1

    5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

    SHA256

    97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

    SHA512

    03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

  • C:\Users\Admin\AppData\Local\Temp\Cab446.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar506.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b