Analysis

  • max time kernel
    120s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    18/10/2024, 07:40

General

  • Target

    563910fba4919269133f3684bf8d6d99_JaffaCakes118.html

  • Size

    7KB

  • MD5

    563910fba4919269133f3684bf8d6d99

  • SHA1

    ebbaf35bc416d4a87602bfe100627b176148db97

  • SHA256

    e22f888844d74338bfe4745731471b4361a118d0e45961a74fdf7a6c76b44bdf

  • SHA512

    cc9a9dad73f6bcb38e35ea528df6371177296089f14a749ee5a4b9397d3d02564176f8b98bb22a629e85dc78fc0eb60493801b73e6f9698da4ebc3a982900e07

  • SSDEEP

    48:ImMq1Up8vmbBssgAiEgVr+CflxYOZAyNGWBXtz44xt5YWDrWN8VKSeK5Iakq/jxT:SIbf9NBXYwoIkO017gz1dRrcRC

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\563910fba4919269133f3684bf8d6d99_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2520
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2520 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2180

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7d21583bf448d9844a01dd318d723c0b

    SHA1

    343964d3518c63dc61d49ea5a2d4d58d241af4dd

    SHA256

    f8f6d43a94b5d1ee0e6aad313e268920f1455074e454f1a658e50bdd90310eb1

    SHA512

    1b070e1eb9b8edec00702333b13b7a13be48d21a89cf31dd3ba62848c03d6a7e32362ce25db572ff47a8218b249f2b5ecd4de099a24a7ef6222afe4272c62da4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e3f1df9707ab4ff180b1a7d2b4d6b03a

    SHA1

    ab062f21c99254a23c9e3280f6f65bc168f792fb

    SHA256

    903a818d80342d0ce87caf0bea11f03b24aac1505b4a3d4d9b6673fccdd2661c

    SHA512

    f4b8bdba74c6ae810abfcf47003ef75923591e817a6d1fc6fd5d56b6e22f88fe3bc74ac691736e73cf4bef95122ce848b42526fc4bf3d9f73943ca974be0c3c2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2517a020d5a018dbdd479fefa3b4d983

    SHA1

    344769f7820e2898a536c2e1c4be0bce6a447a06

    SHA256

    60f32c0edc611dfa933abb4e48ff8a9fcf36d9e5623e1bd2215b8ac8e72d7435

    SHA512

    e62c55816731e7b6fc41d3af8ad4bce76b440b5d407af0f2611431ca560249957e83e4b1ad6fb265d3fc2409dd22c70b2ce42f64ccdcdb9c50f7c7f53ad35e84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7c520163267209fa43027efed9a4ed77

    SHA1

    221f259de8e98fb022ebe9a4301a00294dd3658a

    SHA256

    27c1360612cbc0d2ecad459bf04b3a8c91f714da7b2b3f29306b3c1cc27441a9

    SHA512

    084cbc7941c3dc86b9e481ede58f3d6fae4b4ee8d505b5574bc40873886843864d3831247cdfdfc6da1326f6f0e5e14b1d9e44d5eb5679914b99328d4e99ccb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    45132e591856eb4b307e28ba2b462381

    SHA1

    5e79b26bf8d5db7c672fcfa3204dc5a53f8906f2

    SHA256

    5e963fb03ee1f0222baaed75aba6c94ec2615cd8288aa2fe574be4f6ce41a972

    SHA512

    c4bcf13f0ee6f6844b3e1a5639ce8a78a25721c883c70caa611e683283bf07b6aeed200b220b35df00937916a8ab14aee53b0d9d44cd15078f7c2e447be9ffc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a5077877ea46f1b6f4a355d2c7564c43

    SHA1

    b886ec152141fa0b72d95d9b1baddb1727ecef6e

    SHA256

    f6687f6599896fbb6b21f2b79e7945df86743e417243427fc816fcbedae590a3

    SHA512

    7eeb384d01067350d3a816d5f44efa20bc0758b87cea31731dbb201bec1bbcaee9fa4345a9cc6f44316a09f88d75a3a48296096d5ef284c45928789c35fcc3de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ac220d6bf9b00a97f674fda60f6bb56d

    SHA1

    248a3e53afb279cb806404385332914b38a1c955

    SHA256

    c47b4ec85103f3d94c2a78e686814f3c577d426d7c3afedc6ad67a955b2a3d50

    SHA512

    9f4c0eacd88c474ca7dfb9c82c63f022911b62a349ba8c8e9820b3ab397a68c2e44115b888f158a0e8a45d5fd2ae237df6961359cbf2e0ca7204545fb0039c1a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e156191bbd0ac8a607957d6bf6fc347e

    SHA1

    7265963103e970c1355781b2cbd658b1d8677ae8

    SHA256

    15c6519aa642bd0f4f288cbad1dfffa4e52095c7bcbb1d9228fb839348d1083b

    SHA512

    416368db00de0939f1e3ead1bdab31870b2d120524826a670be9b14a1767962de8de9361c766635ffe9a35dc526b087456d7ccfffba5adcb579e12a6ae11785c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b6914da6ce5da44673145da217d84940

    SHA1

    21d2b6ef9542abfabe422230e6169cc0445598cf

    SHA256

    db19b7a1c66fe982476ba6c922738e0fb9c9b8b3dc209782da4346b9b140283d

    SHA512

    9765ec7a9c5e23a32cbb0c16026ffd6ee130c8593922d87656b5a3b9f4d83255c0c8557610f877a430a30b50c600a7255da77ce11e914ddb3f92c9e0359f29bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9ee5691c072192cecb6ec161846fc689

    SHA1

    584ec653bd19db47dcef64459b7aceb8efb905ed

    SHA256

    5805de1da59880c25d875fa2d23fb944976e6a6fb279b792b3b65ccd4c5c8cc7

    SHA512

    8f432b7d6403e3e6934ca054fec601f891feac5211e30c447152961dedf664c1a6c29676f86094b242e5a0dce7b4eeb0becbf92518610400430f7df0aefb0d3a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19b0d210e6c48eacea3a1a1ae1683233

    SHA1

    0bde600429874bbd6c078197f186b357b4fa38a3

    SHA256

    dcb2347510585669504bf712f91a22bc517cbd669044836bc66a933c1153c270

    SHA512

    7d616c08f03a9b404f6fbb622e090885f47c4ef6cd6b0e14edd4ea4a2f8bf56c8e10416d5da5b76fd65e18328ab4654f5a99cf5e664690d1444f15abe843e15b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    575ecd367e999a10a935e08c4dbe311f

    SHA1

    3aff4505ea0576772c76ee4a4d2fae00972bd742

    SHA256

    4e5cc9d082c1fdf63eb91abd3806e8057d74c1a24d32e2a98f3a7d05b6920f8b

    SHA512

    59d3f3f2adb3cd4be64f2d0a6ad6d94e8cd036d07d0f9a6a4ba66638e17ab6d79d889b00d51d7af968331aff14d1a76dde3338ee48420705f5d3d079355fab22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7911d1dd7dc198cb32a024dc5a64a2a9

    SHA1

    c74ad1cecc1557e939d154d1089ea49abaecb717

    SHA256

    7f4e313ea095a5cae9c3b1d4b68cd51128427075d462090f0f6c614ea93ce8a8

    SHA512

    0b5161be8908f43f1ba10badfd9b1a0213ccc31002b929ccf4425c8a7cd778a533b078f6fb30e901883808d6aa7887df161e8f50988c0df4e79dae0c726b2fa3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ce92c605faa8882c47048624db70eae

    SHA1

    8d8bac598fe0f97cd45814fe8862be0b2ae5a135

    SHA256

    ca32ba4e79aa62a99b89cf4f8669754f76774a787c0ae6f98ff9980fba2b769c

    SHA512

    9598089e6ab7e52f261d84b3d7fbe0befafb9e52d4018754e14164691f09df83f25d933c43ce57b2c5294fb3cb2f1fe538c21cfd8225a7b6d521a85d1c33198a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8d97472976972d4c8c71791b724e4c1a

    SHA1

    019cb0c010e260697819606a26afdbc2971b17b6

    SHA256

    e0515dc627e476bc8ae69892bd599ce7d88b7b414b75cfdfc622c90150aafc0c

    SHA512

    684aec9e9ad0e38c106535dba3d60bc30ed14f3df6cef2acc60bd18f2a7f83f463be831082d16fc0e0b699d50962b388517c006da2280aa3ffceafdf606740ee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dbce9f720ce06912b2f06b0c6a259a9a

    SHA1

    22d822bef629ade38549b9d5af98bc46ff0586fe

    SHA256

    547b6257eb761f911b85e9df027045f6df69444c3dc33b8bd982ff3e9e28fa59

    SHA512

    362db4c84967d0bee987de0e199dd318bb14e4aac9b4d0964c32d8137af29ee4a2daf7108e3946e97e9a30e70b8ab88932aa948f5ec74915ec3d712303cc919c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c6a2ff890733356ccbb4c9b783f5c255

    SHA1

    34fe203aa67697d1d6be41ee5bbb266b766fca75

    SHA256

    e15b3cd3998d48341f08f634a97be2ff912e62417ea9f12e08f7f353b2e665c1

    SHA512

    ec22ebfc13b30ba8f3eae04bbbc60029f3d890b234b1b952a602d52d395ea41ab6e4f6bc08638655a5274d3cd8d88ce75eb537a82f3ff4d3c9896494047d8075

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f4828d989791c382d552af8834c1ccd6

    SHA1

    0d4f48af58cb47cd8d1562472806b77f16ad4574

    SHA256

    74993d433e17ac5a0654927af0a0e6539c9a3d7abd77b9c50b77022009f18ad5

    SHA512

    7afa3988ef4c3606320cb6684104f719307972e07c766d204943c5b4b4a5446ad6d17d560d6925c4fbb8d2aa186a83923312a5c0894b8f1ab35b79af6970598f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a09644d06ffde643380f64a1ba7d9fcd

    SHA1

    ed2db581e675f94b20eb3846282bd9ead46175aa

    SHA256

    65046136ab5c69824353f932cd7bd50c93f431ee4c55e96c806c905847abfe3f

    SHA512

    f4ff7a08d133d7ecae811cc9ccfedd8536eaaeff171ca843b355b3f6d440f4c6ae2a932340f20317c6402f35e37f892275a30f6d6ebe86de5b355cbcb34e1707

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c3288135322981b5eab339dc7d412438

    SHA1

    bf61bacf6cc804811cdb005d58de52d09842b55f

    SHA256

    0e68048fcdeb4a108287d315d7f7eaa87884046b0026e46184f86ff4612f673f

    SHA512

    b3a58b906fe8009f11d8ac771f9d7198df7125faac75386708cfd7d8ec8e63c51dacea9aae96910c2e600d9254c370b6300cf3c84f4565a7121e9bc8850fb2b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    92dde00e5ffca53f6a3db8af50f90c20

    SHA1

    0eb4c97b08e38a156d8de5026843e71a14a4f1c2

    SHA256

    5e2d5facfee014626759b38be362b712901ed2a78fe6e94a649b7b04c561427b

    SHA512

    f5379fb9021d73c6a2f6973791227e82ca249234b9794cc5963bfe4b78eb4a60dad023755d4661769da30378c926ce0fbf70b842e0a377faf53f62db6e73fd36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ffc1da9d72e91962e9bf403f2a496b5e

    SHA1

    cd5a5ab78f373e8eea593859110804b4ee4620c9

    SHA256

    b355faf497fd2f7aae842bda050275fdc3b89ade37d5383bb9e38dc1708211ac

    SHA512

    e2951e532937a0b51e65972c968780f6375441daec42b3489e218531b35bbca6ec0da76acaa4b846ce064301966b34e46d1a772b286d8cf1f874a2ff8866d3ec

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a446c97bceca6d4798970839de217f44

    SHA1

    9ad2d48bb0550a4017f48396356d8d9672d1e537

    SHA256

    3274dfbd425995762980c602e7f8f1c5e2ebe23591605ec866f8ef581051a5a8

    SHA512

    4c13f49da588ecd19c1ebae73d2384d7e44d96bcba5738f9951178d81df1da8435a98b14990b073cb9bef4b0c57227802c0e3fb2ee3e591630cd1e4b1fabb03a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96faa14b09f764c3d1227be0b2615cd1

    SHA1

    51318d4cdbc63bde68785e52e2847d0193d3ff87

    SHA256

    67c60e646141b1266ce2261336420a5cbd7e87a79c7e7c85998c96f6d604778e

    SHA512

    c8e2fdcc8fd781e4a559b8996d624726ed48257707137439f6c84356bfd90db01661a3e4740a54329b22fe9d6a8e0c05167d4ef1342c8ad180df1105e51eb8b0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    00148b0ec169f7f31ff253844c54e691

    SHA1

    74faf81070c9b31f7727084a497f9c665dbe0cbf

    SHA256

    b5af15f8dc4d33f2620eda6dbe61234a6970cfe8027bbd11ca03b59277cab344

    SHA512

    5c6e966406403cb664e2e7f03933277277c208352658cac232acf958fde4e88404c2e22e9b367e23fd63753425784abb6b8643e4d3ad9702222660b9ff64a63f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    283a3cda42977075d8168f9cdb5e9b3a

    SHA1

    80d93868396dd4f6a18e972e3ce34524f1d924f6

    SHA256

    8eeda42b08a8f3f7c1120f1d92e68558762cf4d4d653e96435b7f6458da3b60f

    SHA512

    5e7c246068a4dda5a7d9b194a3a6cc52e6bd87e125dcb971f48853f63c91beb2c130fc518c389cda463e052d33097881d4b853db54fb11ebac2b6c97958b4b35

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    613b6b30a50e3a6125a9c8c5aede1cd4

    SHA1

    2b2b4479bfcdab64d2735c3dd02a8aa209e144de

    SHA256

    80042aa4ac72b9ecfaa2cc4df05417a509d336137bfceec3903bbda77c02d88b

    SHA512

    d8954e803c36a9f1c612af020ddbdb6be5a2bcbf762fb7e237be5d3d40e4daa0b63f69cfba8d0dfc9374569fba2027e32913d1ec52dbb67b27076f500d25afce

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d30971d7f708f7df8b6d3757fdb44643

    SHA1

    62c4708dcece6b3727a1a619b2cf32f879d675d1

    SHA256

    d4d8dd3b3f44ec0477b6cc5c3ec35f9f2834f422ebcd83fcf40e11840e162f81

    SHA512

    d7ae68e17d1a3d18da102b2a0499388db02dad4b0ffc7055c4a967f789ba3815618a7bb287021be553ef6fec8e6207d8b8bd0bcd3c5546788c9f465d2286da6e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67046e3eef83184a2813a43fac56cb97

    SHA1

    20fd6939703c61a372ebd66b384a1dda5db3f2bc

    SHA256

    3f53ef78055da6a19a65a4175a84cdc5be74ae61f9ff413ff6045481e62c9fa1

    SHA512

    0ca067e1fcedb402d72599122d1e0ad00e67b040481c6ac0ae4c86de0bd00932ad900ab066eb280099f410bc8dd71bdb557c6d7c4b8e860f306f09ad1b57707d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    96da631fceb4c3de2802b918b117c51c

    SHA1

    68eaccdcc762622ea57f1be27f4a3376dbd24642

    SHA256

    ae686695790b3ca30707f1b031a86ca39de20fdaff950a0b3add6ee4576111da

    SHA512

    699584cdabbef9c2a09deed258fe7e755ec27aca0cbd5723615697804c94591b28100e0bbd4bceb26d916e44a231ffd058a21da7b4668ba636d10e05ce93a635

  • C:\Users\Admin\AppData\Local\Temp\CabA102.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarA1B1.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b