Analysis

  • max time kernel
    134s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    17-10-2024 20:28

General

  • Target

    539370a075a62e64e672f59b8efd7b5e_JaffaCakes118.html

  • Size

    138KB

  • MD5

    539370a075a62e64e672f59b8efd7b5e

  • SHA1

    55a6d39d9647627693db4e40fb3d80f631ca0b9e

  • SHA256

    aa71232a68255098d922ad62e70346f08ba2a74ca2e4bcec0183ae5758be34f8

  • SHA512

    65f4c254c7c18012017314d7fd3530f7e8c85ac095f10af9aacfdbdec5a7334600c274d9770ab95b02cff0ddebc9b71b42ef4dd21292610212ed9ffd04b49c61

  • SSDEEP

    3072:SC09eBiYdYEgA60todH59lvBL/r3bYtCEf1G9BNZ:SN9eBSBDrTE4b

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 31 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\539370a075a62e64e672f59b8efd7b5e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1224
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1224 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2536

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    63f8c9682976e6b4d380895f11d5094d

    SHA1

    661a09b380b79e3f2535d189a09ecdbe025bd58b

    SHA256

    7ca7f9dd6650f343295f46aece3ac7b7a43f350731ce521acc7c2f9e27b7562d

    SHA512

    df6c0b89e61467530b0f168cf884aa445bf1a770f10efec1a331dc0f2cb1cebc3c5d956e8e3d0185253c110d8e4447bf8d9bff782b13b9adf6eaa36c521a398e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5b9f26addbc69189f11a9243645865fe

    SHA1

    ab361d340fa5bb00e92543631ce97b8cbde98998

    SHA256

    3aee7a502299cf87d100ed989681f3745ba75cda186b082def3de88baa8eee0e

    SHA512

    98a25d18ba10b596301539002ab3e59ba8d885ae252a689c65cd6354bffc3e298bc017b2a945f9e7cc05dca11db85db7a8798abc6940920266c9732d853db2dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    80eec8792ca3fda4e544bc766fc02d21

    SHA1

    099fb63941b6f2a2a76bbbee7fb0e0ffe7acb18e

    SHA256

    1cb0935238d84147069e016f7a9ffcfe12f209cb96e145961638c87c26cf1e48

    SHA512

    ee06151b5ddde1174c50320dbdfe338ff97a1ec64586d47d5f0cb4fd49f7413245567f6593876ced5572ac3e5ad9c23a706cb6a3f6199164a4bb3f71438ce033

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8e1206d18141f5486370a1fa82c3970f

    SHA1

    aca6c5b877ce997484a7c12ca606d53e43eb2e77

    SHA256

    822d7cfacf0e276fd38d01aea3a6f3f9970e8a01950dde43e35d75be815727ca

    SHA512

    1873698fe922762ded771ccb4ad4413e293121668bb5f014828494a87541c81c21403135418f045daee2cfeb557a82c91b378792ab2ade9d08a696a5a85f0661

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5503f7d2669d1b80eb700601e23601ad

    SHA1

    8da7e2062b45cb47be73cc0d35bae99e557fdf2f

    SHA256

    2c2714e894b61e95f295eccb4f0e4f2c8707663b1dfe68331076ee1d0c8c3dc4

    SHA512

    424e5ad660ad1c55f5214aa1a6537c2b9c3a4870401034d87348219786c2826448fef42ab4e77ef382b9343405be97575cbdb876f370513b2390de4b9ac83549

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d15c880f54959fd3e9c71b34b7605d1d

    SHA1

    d36f8219a6f278f70437999a292fc48e9464b5b6

    SHA256

    e14240d173c2a74a696ff3049380d7551132e60657611e72d868c0b53b32ee68

    SHA512

    98b5b40df3173f8b0f95a4334f7b08b88fef1032f6fc6f230fd4eb1e4e6bcdf8ddb63091e090f28d9250eb8930f340aaf4e9d4a8b74b4cffe58e9417465b4f52

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    979b71532a6ccebd5fbd16bae022b0e7

    SHA1

    ff4d40742518d1ae6e94a1eb4beb3e450236d9bb

    SHA256

    97c0bbc1883fb04caf64d8edf8d88996a7fb5a07443e17f1d84c082f640eedf3

    SHA512

    349aa8a9d4bccd92865611f3cd466a83c26c75e67b6d75641ba85e2e0e669499967e6cc0ae524adae27f2dad8fec7bb9bb53ca6f52baebfbd93962212f31a16d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    99ab194021511a32a3905ded59e5287a

    SHA1

    6ba9810b13d85cf8cd8a2473ec5ee080bd49a17b

    SHA256

    ba1b60a7eb7e4f8a17ad3cf1d4b9c5f084d04c1d86c1fb642376c335d7b200ae

    SHA512

    cef7d9521b52890fb7b5c1efd6f145635818627d96d538a163c3dea9a9c0dafe30735074655dbe0333bd5fe5ce39f2ffd79d4c3225e2b0fe2fbcf926c233a797

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ba87a921feba1fdff4ced0b8e8d7e5d0

    SHA1

    1b98cec49ac3a35055131462fea04fe507f41c9a

    SHA256

    81fddcc2f5b8ca179d6eb8d9fafde216b5bfff6862a1df9c4d69f146c121898b

    SHA512

    31d45a5b8ff18465ecd3f70094f21d59808abafec56c4f7b53b071800773923cbccc01b05d0074837572b26f181bf0908e26cb4897bcbcf445ba0306e20c4ae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e236248a5d899acec062ee28429122e

    SHA1

    77c6a9db11d06fb3293e51086cfe06e4448ed76c

    SHA256

    5bcb3a4adf5d2539e7f8c6227487fe19500928a4f1008b010f143696dec975ba

    SHA512

    56b253e8cf131a2a80531489151609e8f38cf904dc27b896da0bcdf773691bfae873e8f6ecf5367beaa76326414a6d9302f07ca87fafd2f049b67beb1eb4c7d1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ce63295a250920a2408a2af3a8cc7709

    SHA1

    33d9d3622627a9af2e1db9db397fd29c912e3168

    SHA256

    6de764ad98fe04ee5afdea1a9e0cda1d4164c997c58c7ee82ed646930eb66341

    SHA512

    0a399b1f5f79d93afb1f2db9ed3698baff7de5ac1ebfc90ea6a9696a80cee872fb9a1631ebb9fa764c667c5cd95d7ea1193dd2ab498eed8a12ec16850fcdee8a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8b4fe620372c7294446608a734344603

    SHA1

    52a4cc0ff431532b9074e371edfbb827c498be67

    SHA256

    cffbf0becf4030d719015dd9f0162b946d839c221af6126556f7755d777ed21f

    SHA512

    459bb32c290c5a7ff32940590f953fab142eb590e9db6c19bed80bb26eeb40eddb2baa665c4c5ed45eb0bb5d6236a7fa185cd75eea9417903c741d3d79f47ed0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    317458d1770e501f00a72091ecd9e572

    SHA1

    449508e61b72a08ee5812b3059cd3a62f221bde7

    SHA256

    c03d19f76b41924a6e6767bceae06a3c7c7996c06027c89934411f175fb5e59e

    SHA512

    333f346d9d9af65cf108aa39b7128c6fd1e45af0625977246c33bf85480a8b7d6bcb7541ab3e410e263747df8bea26ee46237c6ab65c7f5b8721005ea5717fb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9f67b021f01f0b502a18509155a51440

    SHA1

    9efe02469e45fe60c465bc8a7d863e4d364668b6

    SHA256

    dfe997bb4951e3aa2aa59853f82d4a3233bc90f98fb5d4fb878b6ecfa9798811

    SHA512

    58bacfc11f90c5c545b6148943ff6fb7d3cfa92876a6293b687200cdc7a0646e11ae1470239df618a3ba7868e21cf3f000b43b928577b8718c3525529f4159e4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2c4a0e91aa8547c7af85785a17c522a

    SHA1

    c4c7d69ce5235cc2b907f42e082c529adb6ac974

    SHA256

    e6da89d730fee3e73f6363d573f4f8e699a96a669a200c2c356d6c054291c866

    SHA512

    4452868ac5359b8e66c7bfe6021072170ba3f01e82ead54630435a0b445f603d20dcab5be6cffcadc0266adc251e05301172b7c659e62035fdd740407b1a83ef

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4f0afff8d47a77ed5762b92c3418f33

    SHA1

    5f128d0936f396835b8bf750d9e9cba45af10449

    SHA256

    6d23124a9fcb067ccb037ba9ff02bd78f6da2e1fa1a3da80cde96eb1b4baac25

    SHA512

    efd958f4354819ec743cb34828877337a836050c16d37859470c4385b1e0e4e793e4188362fa36c9ac3a9e949215991225ab5aba48ff8f6c9ebcb697ae56086d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4e0e7c84317844a3d32f1ccdd25397b8

    SHA1

    d0f05a1f52c58ecbd01fcecea07063a4e7876745

    SHA256

    61f849d9c469c056f27e0234aba9ee7b1bc45be1478fef91ec68d18619c8f20b

    SHA512

    907cd7639389e4c2ab90ede7a5c010576b9838f4baaf0153c1e061f69d17ebcd2d1bbcc3bea19c4cd81e950e97becedab478c8b3f6eb946c812608599f42a73f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    53f2bbdcc5f5a73135b349f001bcc328

    SHA1

    3326b090e650c0898870a14fa926f026c7e96249

    SHA256

    92369924dfdf8a6fbcaa2bca8590dd328344b21c484a6e59acaa7c97cb537dd4

    SHA512

    0b476d1699f1a8e52c4f3c8be10b7a37dd57adeaa223ec965d8486d3966f36c26e34a0650a3fe3cada845bf0021e3904327316f58ddad47f9c4edc72bcd16073

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    64841ae11a942cf21ef99542f659c5ea

    SHA1

    b9852cf6e4a325b4490eac72d3eafacd2ee96837

    SHA256

    978da466ba06f8592301a4ce17c2819d83f33a1e11e57f54a6ac1429ceebdee7

    SHA512

    d029d14c452f380cc2e879a189f08553a9b1b03d84b8d40df22821883e7d06f7be83a0d919b2ac786accc6b067baf6b2dc0ae8bd1c7ff0476eba3047da552196

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    adb66154d01bdf9a52fefd77131d7c04

    SHA1

    6554d2fcc4efcd819f1c318173bdbe439d17d3de

    SHA256

    3502af2f4c1914db73a871aaa9eded6753042bc89875d64c22e5d8c06d12595f

    SHA512

    fc453b894a9b3f0efb5c395ed9d745d981ebe12309b0027f93855629a2368db5e5f5177eff6fbe0edbb98b75293d85f45db0b472c5aa00eda76f5491d0a56881

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BQQODH7V\ab77b6ea7f3fbf79[1].js

    Filesize

    478B

    MD5

    5dd27f8f2b042194c3cdabd62fd80110

    SHA1

    c035036a939799d4c29b9c0f7229ae1953d03109

    SHA256

    928131ab2183d971cdbfe2ed1329200212d0021db70574a35c89ae169c0f6e0a

    SHA512

    95c7b2dba57dd75e6120794c0ff14750258d8ca3c86e6efcf04790d347bda18e246e14d5fd8ce645e46e268f978132407bafa93ca97fa003103b59c6135334ba

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Y8UFEBH5\11.0.1[1].js

    Filesize

    106B

    MD5

    fdffada99a6e326385c9d6d22006b6c8

    SHA1

    f69101fdeeb5282659ebffa17ec82e89a0cd09f9

    SHA256

    c58c444af409b74761d5cb4a86fde4b48ee2d4701252b439834f01868c8cb955

    SHA512

    a7190172ebb6023d27a69629801b9b71cba77f7f4889aecb129ea8b8e84fef7bd1cc21ca3ee2fe327bd4d97f30bee5ed40927f2a54d45a13c66edca653a60f3d

  • C:\Users\Admin\AppData\Local\Temp\CabF7AA.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF7CC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b