d06a2c1e645129bb39e9b941ff06d3f72d4dbceae799c8d7b88087813e6ccdd2

Analysis

max time kernel
121s
max time network
149s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
12-09-2024 22:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dd2f3260fbac0208971bedfe422d4639_JaffaCakes118.html
Size

11KB
MD5

dd2f3260fbac0208971bedfe422d4639
SHA1

038a7276d51d2b409498f8b3aa00af4a46ce212e
SHA256

d06a2c1e645129bb39e9b941ff06d3f72d4dbceae799c8d7b88087813e6ccdd2
SHA512

79f895cc8ff4fe71a5415024aa05fb98a915d43e2390ee0979965381e0927a0a86f0dde4e34af69e364d829180d58dbd87917293f9345d25a9ecfd9de08bd451
SSDEEP

192:2VFlIsr03q/8k/w1wvqyDBNbrnwdrIT018LOXuBuLbdU8d:sFlIcuqZ/gcDBNbrnwdrIT08LOXguLZ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{0C3A7B51-7159-11EF-9109-7694D31B45CA} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "432343147"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0d1a6116605db01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000953bd8210872ea40aad5946cc0771cd3000000000200000000001066000000010000200000003b2231abd5cb2df60b01c27386f20131458e27dffdabce32386f422a42f1cad6000000000e800000000200002000000089181a5ee2c25730aa4c260cd07a676487a030559b8345d1e6427e8d8f3b17a020000000bc1eaac4934418221aad756c6ed7ec2c7bb02460e2b0d402713ba49f3aebbd2640000000593fe369f60f6a7dca031f42a0c6abaddc544039a2c9b5abef28f2fc6cb0c7e134c67c290003dc172a3ed9924b4436c444c8afbf4612053347bb46f6aad714f4	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2420	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2420	iexplore.exe
2420	iexplore.exe
2256	IEXPLORE.EXE
2256	IEXPLORE.EXE
2256	IEXPLORE.EXE
2256	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2420 wrote to memory of 2256	2420	iexplore.exe	30
PID 2420 wrote to memory of 2256	2420	iexplore.exe	30
PID 2420 wrote to memory of 2256	2420	iexplore.exe	30
PID 2420 wrote to memory of 2256	2420	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dd2f3260fbac0208971bedfe422d4639_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2420
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2420 CREDAT:275457 /prefetch:2
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2256

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f60672b905e1ea37f8284f5af392b154

SHA1
7b01a83990d40db7ff3e1669e04a74668d5b50ec

SHA256
7587949eb1598a7c233ad518f390b6658edc02fe8c98341c954122948b12f2cd

SHA512
da6f10bed7b29b62257901b79e67ba4ea02cd8ea62f7b72cc48f7fa6b1d594dd96ad833568b951cc18c94ad54fba6885f0e956e25a5f5882aed83e4b7633ea92

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bde8607850c66f157e863ac4160cadfc

SHA1
71d7201a8c445fe4686b6102006bb3709f514a16

SHA256
ea4c6263c4fbd9ddf01d58fb0a75c3904ab76b5027c2652417a8cf34fe9a766b

SHA512
eea08400c780afa4a79bdb3bebeb160287fa87b560184ee89f3e99099bc5ee729cf3e6a439fce4d51d5e99734e961d458958daf62a181e6893fdbd37d93319a0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c409c3c46b815a701e61dc20f0ec5d7b

SHA1
ff5c900dafaf609438adebe5d431045a88473be2

SHA256
d5520b85356a393aa73d8afcdebea2c499e86970dce5b5276fc38ec15c1c4934

SHA512
bbb61fe8ce4e61e4dd2b2de6e8b3946fbd94fb5542b5fac8683e7c359eb14a713cdb093ecaedc47c82bc6a5f171c2f15fa1cb1e7ed4f3e27178c275bac3fbec3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cc3a0df295db96fe73659053c2ad3345

SHA1
de17d7f127f20e6528301e92516038f35a6d7074

SHA256
4762d5ba52cc1f525a695b5420cafa0b04b9693183e1ac58014b356eca6747b6

SHA512
003d894a07dd18583f4c3c2f7f85a89df042a296022be031d60a6715f19d652db04ebf0d7df56859475bedbbc36ce4d92ca52cef6de55d226e9a50d0320b41ab

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
25f3ba34b4dc32749f5797a9450851eb

SHA1
7506b9f6d1772082c4478bebeb8c5e18be9ed478

SHA256
ea8dac2a5316a86f98bb25515f2893bc2da2285f1f2ab0c00961604ed70e4108

SHA512
f11e9ff211dc288d101383d7a1616c44e14608b31958566f482a725c5d19d91b5c80f30ae9e5d2d9976e1076fc702edbc6217401e052dfc110bd2d989e35ffc3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7744bd02ab29667d5ce46bc695f33551

SHA1
b42d1c2d77393384a0b8ba4469b25c0cc6f87956

SHA256
349e498b02afba94459f921e673933b598e39d901e4bc05efece7e03efc7daa9

SHA512
88c1896538810bdf0314591d26c357b87ebf727ae81fe3e997204654d0e1fbb71aa08e1b842ba21b477a96ec45a85000d6d94d7348f1d0ab381c41e84b3dd3d2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f4cf69823cac3031953a0cc60a6e2e31

SHA1
5810033597de09fd520a954496292f1349156f78

SHA256
7ad9e559c7083e55571d89452412fa4ede270c2f726588a735a78ea3a97b23d7

SHA512
c567af821a2113fbea8c9479152f44da99eb7e9b1b1d98acae510d42d34587b316a2e19fb0283204313b4d3e4a389ad4a28b7094da3cc8f20e974e6215f4be70

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7d3640f351c9e8546b15554942171037

SHA1
8d13824f1a514902b5b7d57f52e3f8af477b0765

SHA256
7602b04dc69bab9ed51f0055e9cb04415cca09698ebc82bca1532ecd61f9a24a

SHA512
2a9672af91793e41da6daea674e571dbc6ff8ecbe6fe3b17a8fdbc6354ab93ebc2b3eb9198c6d0262f0b79206ec91a0ac7f006fb2e81522b593c024202d38bc7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a9ad38f88a225bdb2e5410023b32dcee

SHA1
8a05539688ed33215d0bf313b3594ceee099c7fb

SHA256
010b1d580954663aaf57681ed525f6a52995ce6c4afadc312940b8f1509ccb9f

SHA512
f8445377374424d849794e645e519dc2dfadc17255812ba7457905c1a2599f354f7417e4a1eff7c434c5743d47083230f79e29b827ece0e833b8bf3c3d199c85

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
47749f085550fef2986e0a61386ba3d6

SHA1
f5187bc222a9373d955fa8c1c497b53d37434ae2

SHA256
b9c96ef7b01f3fbf1e288a0ca2f21731568b426d803732825243edc660c34fcf

SHA512
f58dfcc121dbc831c8c28c09e22895f08c915085e3c28f0b48348d5bf204b19a74c952647784d2b92d542a4251ecacf192e48cb14a58a61cd355674189774ca2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
faecd02cb901dd6b2768a42e881d0db5

SHA1
2d4e8a248254dd200f3f54957b663356a63e263c

SHA256
fbeef0e6adc6cc1b087c5f4d345a51f79fd589196209a5aa6ca7770418b8f2a7

SHA512
a8cb9e77fef6c95d82023eb04eebeab0fa1257ecaea8625f76036f0125402fbf89ebc05b03accc42500fe45fa3a1c1620cd269a716d52ee77fb095b6b56af9fd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e0c7871ad99142cdfc245c40a579df7a

SHA1
7e6dc3c01f7223ffa0707d441704d492aeaeb99c

SHA256
4c778b6c695042843d85032c8d6b6cbc36a5bdc4274e288a2d36dfcc53e131a9

SHA512
f697acc40de69350abb60b22ba814b786236990f59607052b94da8178fe6bd25827c7555e80b3b4a215150adb98092d7cc0e72cbb2bcf6a3729923b316121d37

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f76cb6fffe99d0960ea9373f4aac7d54

SHA1
fae390416063bb3d86a7b033e600565595fc6742

SHA256
4811af06776c7ba3e09907d67021cb7f72bb3b98a9ff4df67e0219297ac7bcad

SHA512
50b5519cc1fc82b7050f2ea037b03a86c45bea506e74e34542d623f4ba8f9c16dbc8b77686bdc54759d5eb346acae930ffacf03108afb6b55a5e3b38a5417534

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9cabc35aa08abd3ddce43f1c63151c59

SHA1
14a09702393b46d34f7c29851c660a69aeaf4968

SHA256
ecd81f7af8479f09436858ff83d64523a54bae61aea4469add56b7748ba1bff9

SHA512
67445148354eafaedd4d5f3d314989085e88d6ae82ed18c0ca600dd6f5652e646a6ee196fb5ea7802b58bf2d80124393e014f564eaa0954ad47013e5b17156f6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ac258b197434100b88c168d3e9ddb31a

SHA1
964a20bcb3ad9936d367c21ab499dafe8bd58713

SHA256
99eb340b304380f2b93c7d65b62c4ce8fa1a037f0df9b9fcdc5c065e1b7c394c

SHA512
8a25afd06f69b2d2f455485e26ee293bbfd49abd67932579b1742404f85b34ae9681fc20d343d9ddae7a2d2d8b41292086f69d56b515e01e4d51dab4d48ece3d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b3da46b1f682383c73d9d9915b8c5c43

SHA1
dc2dcc511029b93eecca63203560d04a44a736b4

SHA256
97e0b8463a15475bcb96cb87d733a83630943ea0ace97bd996a37e2bf2b63314

SHA512
8f1e4124f823e148feb5cac3c3f772a797a527b33ac335bdbae20fe9cda4bc4734c430e20f6a27b6590406702ab5e06bfb43d47eeb43667fbad67f83760f9ee7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6c84756ec29c09ff5614a4099d08a55c

SHA1
efd94908c76fe2a104dbae8786a740402f44f0aa

SHA256
2cbdacae49f199ee3534f8d88d7b87edb22a19bc271421081a24bb19665e2aa1

SHA512
5d8c3f189a9d432f80acf9859ba9a675fe7ba1ada7a2bbcea1e819d487f83a163ce79324da8e25c51d3b26a25bf3f02fec04afb23f39b41b86239d0c8e4e395b

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabC0D1.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarC151.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit