ca8ad7dd0e2207c66e733a979219c46a6dbde1fafa594144576ed32fea098055

Analysis

max time kernel
143s
max time network
146s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
21/08/2024, 15:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b400174f749060005565c0cb79f892e2_JaffaCakes118.html
Size

55KB
MD5

b400174f749060005565c0cb79f892e2
SHA1

d8f725c739379b0248865a5dfcd2e117196341c7
SHA256

ca8ad7dd0e2207c66e733a979219c46a6dbde1fafa594144576ed32fea098055
SHA512

128e11767a8951d16c4f31460a25d2e8b87af8e901d4a16fe8c0f84ec51ac136f0b21644a7fd40f9dc6eb6206dac5a64c2b8c0170bc4f6a3ef611c79c630cca8
SSDEEP

1536:gQZBCCOds0IxCB7INvvYK98T8tl+uSucC4Fsfa7bKYFYmDSBd2mWsyXTjN8UCj2c:gk2G0IxZNvvYK98T8tl+uSucC4Fsfa7+

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "430415807"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002f8e41e3384fa749ac47329e409d990900000000020000000000106600000001000020000000c5c79594c5f45b39939fb5bf9bdd75ab54cef2e7fd44a4f295793ef10d07aa87000000000e80000000020000200000004f64c66327f79f63e2892ea3f758bd3f95a47997ba81ae6dfee3ecd98bc241d620000000837003f2622f8d12e6d0e0fc823094958a129cb6c38c572c34d14dc88b6e18f940000000d0d3af2d85d83df81ec4666f0b0497ac99edb7a3e107b69a755f7fca3dc61c0efc16a2a204b1a41211eec254607c37026ff854c55354fccfcb7440f8ed6db9b3	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{9F164881-5FD1-11EF-914F-526E148F5AD5} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f0bd4a76def3da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2692	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2692	iexplore.exe
2692	iexplore.exe
2700	IEXPLORE.EXE
2700	IEXPLORE.EXE
2700	IEXPLORE.EXE
2700	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2692 wrote to memory of 2700	2692	iexplore.exe	30
PID 2692 wrote to memory of 2700	2692	iexplore.exe	30
PID 2692 wrote to memory of 2700	2692	iexplore.exe	30
PID 2692 wrote to memory of 2700	2692	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b400174f749060005565c0cb79f892e2_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2692
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2692 CREDAT:275457 /prefetch:2
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2700

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
8f197da8c262fa88ae6c1404fad4b830

SHA1
26c873e124bf1ec8880a4f50e186204b09c1aa0e

SHA256
292e19a93ca89b33d978515f1f29dc5686073385b281ade6fd5017271d12f290

SHA512
175dcfa61fcf91908e9fa111fe7cb92885ed1ad29443e40d5a40a67e5c3b2d7551be59f254d2e63653cf3db943c7180c246a2945f691776a1fd2b95dafe8701d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8db4cc0b0059f5597fef00650c1b7b61

SHA1
dd3a2bf8bccded0c04bc2ec866a481f47ac4764b

SHA256
36b0966b536d539e9aa73598eba1c10100fa4881819d40b8aff23c2ffd4e4a35

SHA512
b04555c9f276e0294013c12683bae992e7afa4529f65b2b62c63d7d9d109f4fe4b98e071139591b9418b6393f0c0194c8425bdb84c63f260eb87cc15ccc389af

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b6f9225a9fa6116e6cbbae31703cdc90

SHA1
9ebaf79ca0f68c7db59a2faa9ad29a3ef8f07522

SHA256
e1f59b5ab90bc418e7345f19627eeaf7d02e4c5e48ce946a96a84a0ca1d5f786

SHA512
027f98e63230593a00f996d06f50b6f97054f3a903cd463a2b97b11f2cafce9e27a0f44d6e850175b49ecc9aefedff7056da6f6d99d29879750e5cf6a9ed0319

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f017809f8a59128c8d0ec3a5caf90eb7

SHA1
224253f9abef35f4d343f007c39ca735606a606e

SHA256
229b95f5c803e3b58fd585178210e156744e3bc9d5039a0a76446d80dfb39a83

SHA512
89941f78ef4b98a63bd6983bd77ed896ba9c131ef1c576028762e70dd2fadf0d434dd106cf83a78044fd1179a0d2b540ce22d56a322de878456fe019f3a91b6c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
269a9b1333c04f1363f8372b2dbcd651

SHA1
dde8d76f3da7bbae006e53e3a98d4a91df74198e

SHA256
8b9c54a06c17e3d755602285d07d611c90bc44d93ba3a63d23a9f395e0920c2a

SHA512
bc24d32ebc178e0209098df31158b705cc835e82d19e7ab3ebf43eacdebaa1e090eff25406aebbd8acedf80e05646c1353b806c08fa6dbb022e8b375230aa1f9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f07c8ff832684567d7df7de50a8edc65

SHA1
8fe6bd3e9a16834c2d2c9493bc07fcfbe8c63434

SHA256
f3319763bbac10b58275cff6652439a15844eaccd1b87c36affbcf8ed0834ef0

SHA512
35955d7e2c6da009ddad791e60e3798f7a095f401680227ad75dea888962a7cb31c6d01709b9ef48177eec6341a07086fdbd01ddd84812bb55859019e8eb8908

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
95809a4b10e2616bc377adb71e3d59cd

SHA1
9e95eaea7485f5bfc8ced781304eef9b30905590

SHA256
9b3a6a2e11d7212e61d0fedb0948aab8677f8e4779bda1cec6bc7d397fb50b35

SHA512
79086e188a078d62ac45d4547f50a152f9f2798a0fbeaba55e884c943ad2e736808f3711931dff833921cd03528a8d4695deb669b1c177df8637db1e8b381033

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
209fa31aa385fb1314e9e58834a5f87b

SHA1
4d5bdf16f6f1d5ebc5d5ed2bf35c1a4fd974b7c9

SHA256
d9fedc31632875d4fae5f486f2182fc15fdccfb52ca4281b180ba130a30552f8

SHA512
2c14d6f57a7b3f86ed0ba4ccf3741b9a4469e3cd47fb03e5bf8a5e2885795fe37e2a8c4a012c5f206f25c855e55ffb4fe3cba2e69ef16fe7608fd2cb7224e9dd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4c2e1e4db2e3a58fd66a770396e456bc

SHA1
cbfad51b31754c3073aba1c0bddd456f5d8812d3

SHA256
6ffb8b530a7ee93d4c7ffd87d06934abab29b31cdd86211ede41babf1939a24e

SHA512
a758b2b530ecd88aed53ea75893610f19b28738e9fedf6823502e52d76c0348c37cc4a5a5e7e8fa7c3fe2f577c0e5ae808851adedd186588fe5568c34a92a716

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a766140117973f250552bdfb1d1c66fa

SHA1
b19158366b9bbdb0894b07bcbd49de79eedac3e4

SHA256
9ba9ea9938196c5fbe1bfbafa153c5bccab9b7d6f60333ee3f383100b4f87346

SHA512
cf9aa45cfdb21a98c20db5f9b06ba9a09caafd8c1e20435824f5bb9e40eac620bc5bdc15f4372a021b41f8db28e6c5bbea82e4cb0106645efa74840a4ac2d7c6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
28c32bd995164036c7909e02900ab6eb

SHA1
c836971b69da477f8ce6036cc8f254a7029f306e

SHA256
2563909141254e0edc52b33ee0d20103b3784b42480a672bd2044741ad64237c

SHA512
b82c056e547271ff11c4df744253639ab0ec9f7dabfc272c72fc24e60fad1fdf720d39909b78bcba1bca4e77f35a24e5543737b5c4c1d518e012214950f3a1bb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e409777b3b9064ae2f1cf393211c9595

SHA1
1fdbd3f1b093ab2dfe16210a722784e67fc6c800

SHA256
1da006fb671af4978f49e2b639ef553fc1ff327a7e2314a39da41e5493811fae

SHA512
09f1aced01e26dbfa9a15c08c0f7d855d31d7ba5d195d719837e2b9c1541d8b9294e717943dcd5bb5b0844acfd1ea240755b59bc76f4098d7b8df3ee75b5baed

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
57e9a28fd001a1580895b64637f9d152

SHA1
d11311c27a40a9f4b9f46fa891867249f8697f9a

SHA256
07832212d626c55c49995342fe43d062bfec8c4f09252dd34e83134100fd3ebf

SHA512
caf92794b02dc2c6946ba2957556e17b5924132f495291798c320dab28a706be3e50e0479b44279b0b8f25fd3d3d9a68e4cc7d7acdb59f8981e1e87cb5a2ca34

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
27c85f572ba3c7b6803e10a184de4135

SHA1
88a322a2e3a6a761bebbc086cf9f79a9a456d6b9

SHA256
d8affad4649fe33f52743a6b53d364edbad0262310c1eff3a91397420c6a2e50

SHA512
2ba926df73d9716d5d38da01ef3196a6384c9b18442d20c2f12573152f4339cf9c05a359b16bbcf6d69dcfd851662d086f25c6ec660576caa40bbe58d815a15d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
da8d0d562882e27f77ac101dbcf36c0a

SHA1
ba7b7216aa5e953246593a4d73ac2dd7acc0aaf9

SHA256
b669ebb4884688357e98bcf9f976a82dac45a0c37f0a4006f319da331440accd

SHA512
f239860e339d58c977f07843c77709ebaa7d3f03bfcdc462b78394ef4ba88ef9b7b180a58aaa9c7a683369dd2a71d2ff11c3cda781794657673b643d48ac335c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab6B61.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar6CFA.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit