0c242bc9a4d16a9235f4f704ab9905956fbae3db42205b34846795d67ac840e3

Analysis

max time kernel
145s
max time network
150s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
14/09/2024, 12:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

e02ee49ac094ec3d252657a7fd08c78f_JaffaCakes118.html
Size

21KB
MD5

e02ee49ac094ec3d252657a7fd08c78f
SHA1

0f4c03c6c25c81dc7a3865998d52f78e01d9efdf
SHA256

0c242bc9a4d16a9235f4f704ab9905956fbae3db42205b34846795d67ac840e3
SHA512

75bf4d52c77e8ce9685f4bfd7e5b485fad90887ca67cd794edb8cbac0662b52885137c1752aca293f7a0970f2ac8ee49a3e53ea8842f531b6b694272c06df0e6
SSDEEP

384:zifKcRAa5r9DIiXbWVBD8c03RnXhfIb7QQcmEfP4ycbp5mizVcruDJZTO4uq:zika5r9DFygc03pFIbMQcmGP4y/E9JZJ

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30bcffb1a106db01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{DD3A0C71-7294-11EF-A641-5E10E05FA61A} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000004961a9603b5d8740891a04601e8b8fb9000000000200000000001066000000010000200000004491cbcbbe44ae7cbf643770061015ba242f7719321a82a7c0cb46e26d1a7646000000000e8000000002000020000000c659a936e619487072c3daeeac4974fe637aa5819a5d9b7f3c12d17862f24ec520000000f2eabb43bed82bede1934ae7370e3a4497ad6403f16aa9eaa63a950a0d108fa7400000004451cde101676f8a8dfbf3f12f68b350d0ad69243f9bbd6797713e65a06daed88a29a2d99f276d5259c27c79614764d48ae37aa2b7d401907f0fa03409512660	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "432478784"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1464	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1464	iexplore.exe
1464	iexplore.exe
1672	IEXPLORE.EXE
1672	IEXPLORE.EXE
1672	IEXPLORE.EXE
1672	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1464 wrote to memory of 1672	1464	iexplore.exe	30
PID 1464 wrote to memory of 1672	1464	iexplore.exe	30
PID 1464 wrote to memory of 1672	1464	iexplore.exe	30
PID 1464 wrote to memory of 1672	1464	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\e02ee49ac094ec3d252657a7fd08c78f_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1464
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1464 CREDAT:275457 /prefetch:2
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1672

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ca1c03d5c9ef3019d4b4c1ab319bd3e7

SHA1
ed0a7d56b0cdf3be0208ba10677a3e34b44170c9

SHA256
fc85814aa522755bd479e57d25b447acc6486bbd90650d028f9420ea49f33ca0

SHA512
8b105c44faeeece9a926da42f640fae44117930128ee613929f580a0117cc79b7ba222dcb7c13a071475db583827e1aeb0d2dad2aa6b33bc20f6eb84f257e591

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3f96895f2200ee7c0e65a418b0cf0164

SHA1
57f132f10566aaaae27787f2df91475950c6ac64

SHA256
c3335e6e86eeda911aeb976ea128f9b3ee649e71b66cc2ad54f604092bd29940

SHA512
b7b9552b163d99b297f0df159d2fea1ba441def3f53c9596c088a6db3fc3113a76b45d65b365bd021eed7d2db1796dadc43f068e6b89e8233911b2eed641bf74

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
666688f0388b5e8a267168bf0c57061f

SHA1
e2bb695671336a65ed449107626e1a8eb45d38c5

SHA256
8e5f81da01af90a0d0db22649b514b01c7c80982a0a1c8f7584a1286b46112d5

SHA512
52bb2fc78782c85340aaaf41955bd22fd44eac6ecf8948b6562d64fd553126da67562870237fd1e9ab226f455a37198962d4d82aba0aa8139980253f453fdda5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
11cb3b3b5634f53fe735c8a7ae29ee11

SHA1
541615e19d7975f461fad98f098f54754c6ff754

SHA256
7914dc0f63440caa700593147019d2a4f6040cffbb14775ea4f53a0c2d14eb4a

SHA512
b89c024fedf702ccee9ccfc1eea0e8ee9f2f510bd98ff2a9222a20fa01d6cae6d8e0e34f23e3a2e4d24b2303ed8af8f6823b7444f70a2c3ea632d57687199fe2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2723620a35162e2e528957946bddee93

SHA1
5d5c2a33f0c1a3f0f4b58ede321e542cdd90e47d

SHA256
661a1e094bc829b4b2ab4aaef61b2f07546f015053639bf5bae4dc5bbf4b42ff

SHA512
fe4cb5bca0a8817be7901b2622c35a79390b1f0d0f2af82ea5e5606dd25de27aef89c161c6694702155da2d0d0986a56b645edebb6fc4729285d8adb4bd95df8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
92993c2e596207f2e3f36435064bfcc8

SHA1
63fd1eee70aedf8540d9a34ed0a49749210215af

SHA256
325f8ada8f3ca410e4eea9796cc68bb695f054a61e10d9b054963c54e43d8353

SHA512
3e02824d31927cca45ce1c53fc396e8b604e002857317aaa4d289de2b24cc79fe4c70141da98c760de7970dd199aa5e470728ec4c660deb6f98c215ebc8c628c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
54ef2df9cd6c0b71e2940479e892e43d

SHA1
e9058c7145aa3e2fc2b4cfc7ce066044941b4d0c

SHA256
26ab485036c1096c41351c6184e6086ea1357e17264328b699e7f6f2ca1e64fa

SHA512
286af5e0317c34f0f5ab0b86131a7eeaabb778829c0f998484dcb77ccec261f1c5b125f96e37ee1bf3d6124dea38133673dd79c9642a7300c2af2fc671853b99

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
90cc93ac8c3187c3466ace7ed02cfbdb

SHA1
d4414d2c6d0eabc5a7c8699aa47ccd873eae6787

SHA256
e1a37648b825c92ad1a834c39a30a18fddc62b2b233465cd5c7aef889e5eb38b

SHA512
571a0f923f5091ad896d4e04484dfcad27d288c1fccfd7d877bb7a18376a0d84f9553d64949737c27c5ca67481b01c9e54b701f99b23be12e84bfcc45d0e0672

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9e3d31ae4fbf8e3aaed4b03b0d7ee1a2

SHA1
edaad93280828757e6fd07988e6b7b8e4201506a

SHA256
629c0475396456da71f71f312a53f119099c47c4b3cd2a9040f36a1766170cf1

SHA512
2afc44bce60a270a525b67be511a944191ec37a94cb534234634938588d46071af773b4025c3d743d695df43a7c9b017b8cc269bc06cceec4a52bc6d24e1e252

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
39f30aeb348ea662fdcc190b48e357c4

SHA1
010e6792303d34567f420893ae6e5e1195de95cc

SHA256
14512540217c66fdf6e7e50799f47f5a04b4b9bd20ff91269b3174316c63837c

SHA512
096aa705c936ee41f22af70d3c9c4e16c7ad09e404999dab2f5f1da87149f1feab49e0df3c999f2d10f6e57f4091aa3193b393adae10e8661f78dd737069d327

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f959316eaf5f3a8febe9c05fa74d9a4d

SHA1
8309e33f61aa841e7b5eb56b937073eb563a99be

SHA256
09961a004bc03d3d2d3449fa9e35d8efe1a6cd07a89a76be4dfe28b686e71471

SHA512
a9539e008cdda9882599d27b683851700812ee0d5f2ac9589203abde0e4437a0de4ca145e02729f9f921325cbfedfb9ff0fd05872376a75a59d8712a4a9e7d33

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
46e83045c239e6bd17b7c8408d25fe7c

SHA1
f444c672c723a74a93acb020114963e6187bda7d

SHA256
2a14688262b2a159fcfd80ba1a06a7cb7c5d5f2f0e3912510dbd7a8c7153277a

SHA512
cf8c3036e66daa5daa46d15bbc955e1e6144572f3fb642c9a42c00e716f47ce5695b50439be1c495ce18008687cfd5302c7c76326ccb59cac79d9b065067343c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5faa83c635d1d0965fcae2f9f3d7d913

SHA1
febb70247c6f1f993f9b8d3731990b92b280dd57

SHA256
a50f8f48d8e7ae71515769a873110bb337096f7823d587061b0a31397dd2e9e5

SHA512
079ddc5c625654f8d8f2d631a51f29d12d3b138fd82f114c2ac252ccb472b227da516a2e57298379d1fdcbce01be9de1a6d9045d1d127c33c0b0fbba1b642369

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d4696851ad33e5d1aec612f8cc7b6e23

SHA1
4e80d7f45c38e1a61957058407a97231286cb00a

SHA256
cd6fddd28c4e4724b6fdfedf72b618682bfb32e07906a230972945b6555536e6

SHA512
c8f2dd8ea96eaaa0a43180b839b05d6cf6c14efaf503565bd344438aee937ea3b67f1ae558d3e69bfe340de3a9e0403f7e680bb8dadd8eb7a03da6e30d110bb6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8e546f4cd798226b19f0ae622c416f04

SHA1
2d9556c94089d9b24ea6d4ab19d10263b3e7caf3

SHA256
c9f38f50806a43755ca774226d330b99f019d5e42ce36b6ad60929e0058b2d83

SHA512
306e43942730ccbf1f2d414c32a4f43c1d6d91b19296eb8c93158df38da4741cb408b3545e5325bdca228f79951156583e28f1b0be91f7cbc53dd252b7a9e6c1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d3a284c40e0d0e479889d460fc7ea228

SHA1
49d6526eec7c028573a6f03bba0f77cf50eabe32

SHA256
0730af25954f7d037fb68898faedc7ed73acaa0fcbebd614958f8579330183fe

SHA512
2e9a12c2b53f8fb3af0c2f5c34b4eaefa94a884a9ca65001d7acf1238f25574a4c225be47882256344df6b58fa4196613a84f97a09159841b56f93df0a273075

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
96424d226db2869fe9d65b0a9b2fa7c7

SHA1
7fb00829d9e6c43299508471bd1fa23b162ab088

SHA256
ba5ab1e5665280eb16ea13ad60687bf57c66fcf44b31658068ef59673e7a8de1

SHA512
852fc4bdc68fe8816302f7dff2bac6989e193626a1d5bcee5e9cfa3426eb0f2dcd3d2897707a0076fe9c25696be818befe6289c85758a587c85cd67ff7890e58

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab95BD.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar963D.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit