0090b689615f4bca7c3c9713f9669d381b5930b7f61321f36a7a10654521fc35

Analysis

max time kernel
119s
max time network
127s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
21/09/2024, 13:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

efed5b9674c29596991001b3cfa900e4_JaffaCakes118.html
Size

983KB
MD5

efed5b9674c29596991001b3cfa900e4
SHA1

dd699fc28ef7eeeb234b7149129d30409065ad11
SHA256

0090b689615f4bca7c3c9713f9669d381b5930b7f61321f36a7a10654521fc35
SHA512

ac406b35e9dc92a0b8f2456f88e0db68701f1fbc4f975be908e3409d645402adfbf3ef0c71c0b70141cedf09e6c4c25c39e3ddb64b5719cb6e3d4bb565beb998
SSDEEP

6144:ob/d3t4NoDAyDfnLU/d3t4NoDAyDfnL//d3t4NoDAyDfnLC:8ZDtL8ZDtL3ZDtLC

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "433088393"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{390C8881-7820-11EF-94CC-EE9D5ADBD8E3} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000953bd8210872ea40aad5946cc0771cd30000000002000000000010660000000100002000000073dd86a60554fdd70901dbff45a90f231177544dd8c2c5878596b4ff90b8fea8000000000e8000000002000020000000244ccab28985075f25b0f2813323cf75111e2b56ed2fdb220f25b163856028a2200000000c8778ada839fe28413dfd0178248d79bc968c511bb5bb6a84d0ab42116ba84b4000000010992ba91e7813e51a69663b80fd85bc39bd8b4e191265527cf351486d9ebc45f817393d1ace8b486d04fe668a1bd76c614da45f38ba5be02daf62fe61de3c95	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 0028910d2d0cdb01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2056	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2056	iexplore.exe
2056	iexplore.exe
2404	IEXPLORE.EXE
2404	IEXPLORE.EXE
2404	IEXPLORE.EXE
2404	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2056 wrote to memory of 2404	2056	iexplore.exe	30
PID 2056 wrote to memory of 2404	2056	iexplore.exe	30
PID 2056 wrote to memory of 2404	2056	iexplore.exe	30
PID 2056 wrote to memory of 2404	2056	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\efed5b9674c29596991001b3cfa900e4_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2056
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2056 CREDAT:275457 /prefetch:2
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2404

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9fe98efece0103a25ae2a056d7883c05

SHA1
4de1f774be0729fb6dcb5e8b7d39a7ba66263094

SHA256
a428532ce513d354ea736da55c2165b1b266d6577470d473ae7b01833b2e3123

SHA512
6d69f0264b4e30cef26c8113c4a78255154d64a6378b125be978e5d0133dc18ce5b95374c229b386650f2bba903792c37f87260bae965e90f8db30d925845e35

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
86f3c442dc53dea0acbd744f5d10c3b0

SHA1
1593eff45205105efaca16c76f238e79fae3d856

SHA256
e9ac77328bf7b6173ecb787d0fd9c32275ccb317bb2031344beae7c823eeef9a

SHA512
264111b40128f061ac7b8eb3c16f6398f61623341b14db0c5ff733bbfef1d61ff64cc54892636e2f9e4bf2ccc7d13ebc1d5dc1861a1c3ecf2f10a5074647933e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e352f02d9e7735ddb85de72b69ec2080

SHA1
f5ae394c49a5c890d8d302a6cf4ff68591a72d9e

SHA256
2366166ec530d16990bc1f36d2021088814425f6349cc7dd36d1e5113a76edf6

SHA512
25a26a1e612fc16e951f66450b7aa50071c96a3f021cfd6c00a8b3994020fbdd5d7b4529ff049cc22feb9552351c57be6a94b1771bf80b741ebc337c6c17f0af

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
03ee3bb0266a0ecfadaacfd5f6594d93

SHA1
13ce8bc8ed5cee99dc9486a7c566203129120575

SHA256
b2f58b962227ec3ecf8fb79e71863055ee59f854a15cbf6feea9478a8b7f663e

SHA512
ac4a62b6e3738ea8cdf3edde9364b962268db5a2f426435220296722fea8bb1673ba0f971c8ba71dc37952ab5f3c90e4afaf0ab4d201a887c6d926862d851fc6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
91731aa9fc074ab788e8fa87b066ffad

SHA1
55404367480a4eb2591a7c2d6c41578162bc09fb

SHA256
233cb7740b6df528d8983042055040b0a5c2dcaff74896f9787f0840c2e35800

SHA512
a51b4e962ab3f89ddc4238ca5ca8a63d02777bb379a658d9ad81eeeb6a53031dda2d481ccdb10b552521175b1cedb73c9f09131cfffae85cfa7d3dac95448485

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cc87428add62aafd0344ced7ae056e45

SHA1
2f4326f14e9047f621ee076fd5589de8252dd77b

SHA256
22a531f322b2d887b42e13a637e61e9a473d193001f1b84b11613d41734af2ae

SHA512
57e2c3f5ef4ff3654846f576e4e34277e4f47f907ed262fce398b38e11968145ef164fbc88cff69935e8638c5b7966dda9236b8d6da1df32a2944d5c71759d72

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8e099cffb48bd0a6fceea5b56e39844c

SHA1
b9a42e345ad024edfd695a8cf1f6a9af42d4ee03

SHA256
a262605579471d0306d2123ca7797f7e9223d7990c9d33ce280d2af0291afbef

SHA512
af00ccc2a76e6613471391ca30830f9f711e9e9169e0b7cf7d8a2f4bfbfb9c5cbdbce2a024b95a30aaed77d5de2604151430bf465377957a02b0f423eb654964

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
971f54a89f88689dc735cd839c7ea6fc

SHA1
52993f51761c3830c28c3279f2d29d4d47b8e3bb

SHA256
03fefbbc059723e6bd19bb0615e6d3da739fdda9d834599db059fffdc1f4467c

SHA512
1add0e0770a4ee28b995f63e43a2d6f048a8aef379df27bfda9366a204475b67b74e6700274ddb8bfdec3cebe01454df17eed85d6540080fb8937f65bdb13a31

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4bc7bea408d1d4b489e32d366a419f28

SHA1
209ece99cc7119265e1e16ee0fd1a69501dcc05e

SHA256
b30310732c8e3f0a7da1d0b2debc6c05a9174baaafe1fdfd44f87ef0aaca658a

SHA512
c612fc0b6dcdf8c6c30bf06965e001c67a3158f333386ee5a5a869ff182c752a769c243b5da1eb1459fa9664eca2f70a3d0876609cc5a70424a48f3fc1cc1c44

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
728ed40d95c5a61602af93563ddb16e8

SHA1
de754370c30ef59a72d3a542ce5bd5b84458fb97

SHA256
0f3c7e7c06aafabb0acb5a72ae0309a7d6b851b4445fb959b80f81abd6190baf

SHA512
acb6b29adcf91c481998ece13abfc2ed0acb4cfcfd0f94a691c01304ab8467fbe36435c86eee8e42abf99a9a0c182eee5b76b060728ded3d9fc61223f0367590

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
84b8b3edbe8bd2d8f1181f8963a95c11

SHA1
1c568bef9ab9ec2bc44a809dc9408fdcb0c4120b

SHA256
bb7ec1327bb04c756ee622beafdb0935cbdbf0b6d440b9f6c23bc0560bcb9bf1

SHA512
a0400ddee94746896bc90c19405d7a3f3c900ee13be7ec8153c867a446b57e90dd1da9d94c0c3df2d02112ede70e617c7a0a122e2701ffef7b944476ce4af8e8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f8693fc15ec1d2d1c04a640f799d01a2

SHA1
300a55bad223a9322e4a505a43591284aa832320

SHA256
454149f107ab714bcfa537c0ebbe4a3ef2f2cf158d1db69ede9d09cb9d1f9226

SHA512
e469cf1ba5204cae2b08302eeb57a0000fb7fbe9afe0754c907b3e0b79c863059542b8bdc137ba72665f9d5ea47b69fe68a3ba9ab46b6f63a614c802ce554540

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2135fd78711ea2fbb89e46381062c231

SHA1
a75a1cf659c9dbcfc917b32e9bf28e4058157129

SHA256
98150eb31d10559e581c87525f89bd3a8e37b392f4180f3bfe7e3268831f98d8

SHA512
1a693951b1d6c3c437c79a587ee2edbb7bc6260ca19485f4d56ccca37816e4a17b2c090d427ebf8f790c57a7b89de0cc92589758074ec589c9fae78a1a408130

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1fb47bd69770ebecebc788ebf8e29f0e

SHA1
57219623ba0cd15f49a6acfe98e0a48da8bebf4c

SHA256
3a838fd14333eb994a680eaa79459762ea9334d1f9f2deb23e90e545cbc951eb

SHA512
52293de42ac6385965703e1e5f447364d75bd847629ce8be204513a27d8f8c4c09488f413b1cc844fc08b2d88a162a51343055e0f757019960515def4ab466cb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
98b429c7995b05e6c07942cf60debe5c

SHA1
4e44c7f892c95af536bc3410a875231466e0a28b

SHA256
9408fce9466eccf54eb7c455255fa9c4bb6da43a261944fee7c1827ccfb286f7

SHA512
b38c4937e03698e3987cf63a584bf0512ce753a7a690cce73db3cdc08d7ab87dec919be8d2160e637155ae896f14b519a3b5b824398b748b744d89cf29186867

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c8a4c0a3a636361eb411b17ad84fa4e8

SHA1
bc68a8a3386e02f867f88ecd4aaf256076ec150d

SHA256
88d1d722fc1c3b2b9db63096c3210f133c521cba0cb08137ea8e6b50859f866e

SHA512
f31a48d1c740f2c883b5d7f0516d602958ff646bf122ce57b3f2609280d6336c33fbe2fbd693b2a9f631977ef36bc87414221ba2c9ade198f804d5d1cfe47248

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
adcc48d6a44b9a697b44ce148656007f

SHA1
72013154dfc82e162de248a9fded751fccd4a2db

SHA256
5648ba913288f537ff5c9b052def46416054b5caf5acb6d17d46113829a7d6d3

SHA512
fa890750aa7dd8729164359ef121525eca408047dceb110fb81c9fb1fe7d24f265a44c89c604bbe2280d05dc7d5efc040db803e6825d712d695587d1ae53057f

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabF099.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarF0AC.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit