1a9c73a87696f402a22d657cc41bf335950501dbb928f525756a4381f30c62bf

Analysis

max time kernel
69s
max time network
134s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
28/09/2024, 10:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fc27d8fc14af41e0ce5d2521fbd669bb_JaffaCakes118.html
Size

4KB
MD5

fc27d8fc14af41e0ce5d2521fbd669bb
SHA1

038c06797dd8b05e90d1564ae82f941ccecbe72e
SHA256

1a9c73a87696f402a22d657cc41bf335950501dbb928f525756a4381f30c62bf
SHA512

57786a3c6e7bf6c4bf01a739869f0aaad43e5716c11285780f0c22afbbddb921bcea4aa35865b4a62f4eb889b94dd0e57073c03d6f561da1a6d7b433ce03ecc4
SSDEEP

96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oWRuddAC:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDo

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30a21a809511db01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "433683011"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007b88b8645d6de74ab21efaf0de98379b000000000200000000001066000000010000200000008495d54ec61382b0662ad063be1332fc8646b61065076542e1e783b55560688c000000000e8000000002000020000000aa972ababeaa0fc16368a583a8fa673e41697d16479e6894ab688d0273f8319c200000001b5d207f2e71c3c082b464df194c5c13b61c884430f632b4b1ca489bcdcff932400000001cfa6c3a5eaf109e1ea1cdcad0bcb577582ec8ad80c52517abd82a3bf3b68633be52130de331928fd24736d0482fcf47e9954ceedf87ee2b3fd68758e7e7cb52	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{AB174561-7D88-11EF-8FDB-C28ADB222BBA} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-457978338-2990298471-2379561640-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1756	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1756	iexplore.exe
1756	iexplore.exe
2064	IEXPLORE.EXE
2064	IEXPLORE.EXE
2064	IEXPLORE.EXE
2064	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1756 wrote to memory of 2064	1756	iexplore.exe	29
PID 1756 wrote to memory of 2064	1756	iexplore.exe	29
PID 1756 wrote to memory of 2064	1756	iexplore.exe	29
PID 1756 wrote to memory of 2064	1756	iexplore.exe	29

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fc27d8fc14af41e0ce5d2521fbd669bb_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1756
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1756 CREDAT:275457 /prefetch:2
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
50094b8d0b2e4089a97ba2144987b934

SHA1
163a22f70383aa2da60829e6ad13159f3d1a071f

SHA256
85ec35285d65f9265a1c4d93e3d3e182f9993af6387decef5eab45372dff3bbf

SHA512
cba845f18927b8d69dc9468d114c7bbc34e87bc2da6bd51f13073f20a8b3e9d4c6fe3412bc70a5e9b3db244b0088ae65d2fa0b6852850024ff977ff8de1f2b96

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
31a1d51013ea6e11a38d6ff103055061

SHA1
c299e84ab6072bd6329270e707406789ccb32f69

SHA256
a001b65c6c9905d40adb789d3fdd8789bef9d388680cba0a254779130bf13823

SHA512
d0b98780c280303a256d88406a906c4c2e59e4a538a6533face3946237d81fa35179ab6d0363d6befdef76f972e615f721c2f65c4926abc690fcc4b520fc971c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a4031216b70bd865dd1b4e4544ae9fb2

SHA1
64f72b863d30eead36eccc8bd48d3edd3123f692

SHA256
b04952b1db82d75965137640bc1b524f306adfbc93f4ceb12db814a4c7dbae50

SHA512
fbb09cbedea697691e98a43230bf9f9b65de11ff8f763fdbc07f02ff0dabebb6dd5a3638477df71cdea92e0440eacc5bcf141765110fb36a5fb40389e5efbf3a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cd1006d9da572d39493b03860f230b7e

SHA1
8123171378aac067094977539ef8f87dcaea783b

SHA256
e80c55cb7d6c5064b5b10359b30763b996aa21f45f69265e0a4421d37c4ede21

SHA512
b253abef1e030932edebe27979644b82f7837bb5b819316a662666bf0c6263c36ee20d2feb888de87cdb1e2080767a8ac608569ff66860c2261785d4e7b356dc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
08a7b7735f71f8b01993171652faef8d

SHA1
8376e09a38bc932f1b48c367925ec70dec5ee992

SHA256
2ff6c818840524ae1ee6f527d5e259bf0b38db0973fc5c7190f3e7bb6b8c4b5c

SHA512
b664a5be769818df88ce83f376533868257f677e0c669d72acc0a2f1dbb4aff6cf915db791fe65fb9b1e8f1585380bfab31883696ec4ce2032229f162e9e0ef8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
79b5e88d6094ce42ee6990a3d4c2be6f

SHA1
683745f73f181ac2974f7258ebae7d9daefa3480

SHA256
74ac3cc06b820cc933d25315efb91a14e25d66e06cfce28fd8b2b8f2650ebca0

SHA512
9efe92d9ee2133e35dcf7065d470b1d3ba8bf7a1af69f66d824b4d8a35185d8388056573c7c6b3668bf2fbc8fe66f7c3da2da60f57d350dda8f70b82df7219d4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
498590e513a8848cd8d638832dde65e9

SHA1
6afba9d81ca8dd03ccd3d4a38a6b12f4f03a9c48

SHA256
de3e3c882dde6a30f1ae4ad596893d7e644f8dddd26a7903dcd0bb2703fbbcbc

SHA512
142c0cf141fb00791929f8f5681a7342599f53c826d992fd85dffa17ed43333511630501a7ab9d9746182b9e4de4ea5e65b76a926aab946e23c239fa1a4e0292

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7713ae5d7e678891aa1dc2afd88ab63f

SHA1
0e2c52e38102ec79f956bbd5b37dbb3f6cfb4fca

SHA256
e89a28cda6bd528f7afb4f0bc23efa3dfaed441f1dc875689ec3e46d438bd0b4

SHA512
d47cd955f611a04e28b59936d6669faecbbdd3abe08651df6b24d9fa06233ab3b9e0a4bc486b7868dce71fb6032e9f25244de3c04b32ffaaf43f3fc534045dfd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
33d5dcd607fc7cb00dab579f57f700f7

SHA1
c7e019ebd6098ce7c80fe7956488d60d5ee2e923

SHA256
0449beb72dafd8623ae5ec4b18c27442444f977a7a0d8c094ed7ddc8aba61df4

SHA512
ca03258f75acf843d226cbe4827e23772dd32a6d3910a1996f629eadd59a7b84e6f41bb137185aab29c9bdd9f509f022f56ad4a8777f374362b9d3fd1339abc3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ba14764902bac2c9dc17f56e5da18407

SHA1
84c96ab74a2c3040b4067dc22685d029add5e7ca

SHA256
5b36a7586ad71a21f9ad67ce2da2743c15b92548cb275f497361f520b85e4d12

SHA512
99eccbe536d24b04219c02717d0cb4199ce959eca1683379a5e5d1898a8d71e3a4885df8e95e331bbb58ab2e3cf06cbc978ed732e32363cb9750efb61e99089a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0034d77068e56754a5857071d7584a54

SHA1
ef130d23510547b787c39d823dad0d213227fc2f

SHA256
25bc9a936a577a209b4421a25082b9e8764afb3ab91cd8cc1aea7687b76678cb

SHA512
ae5332da71e4c3c95cc04aac16e4099bf446b7c5ef43652f12a8bd1c7a5f3d983cab4dc5bdbddc4397428ed96b9d7f0840d4abc0efbc02c64bb62f52589a02e7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ced102a17ce662122319eae6bbd5c8b4

SHA1
c203f9e849d9ade76220bedccc0078f661c90217

SHA256
7f7867e82a74fe2ff733fafbe8bf693e25699224c345eadda8f1cce36231cc47

SHA512
213656bb7c8f2e964e100c8620cd980b108c0682209001a96c6c69d47308b1a9bb3c59fdc5b25a594a25997a6b1bb75394775e0543d257760c295270826a046f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fa81dadaf38f08ce9e97667349ce8329

SHA1
dd87925910a5c7db50994a0aea51c3013539b1d5

SHA256
b5f1b13ef9e923c09e77e2fccf1f5f1f953de33824567b47fbbf709bcce7993d

SHA512
3057b7e2a0ac922a76e78cc46dd70fd4c34f1ed83aae24333a250c6630e56e077fe7edeedaa8e3f4a421861a22b19a89b0b9f4382a05dcf6b562b2fd6bc33783

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7d2afcaae412ef37e0078ab009c7417d

SHA1
93e4c426be01f5f7acd8bd769e90a413df79c7f4

SHA256
cc7af189b5be024e234ab61a91c85728a906b5c21aa0344e508e1c65e63111a5

SHA512
daafb95c41112ba019beaecd00dee6a76b43252a52c2540fae5eac44d3c2348d9066ae905b17d873b61771699936659039dc61baf2efdc2d4ee8c3581a9812bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
733e434fac900f7410bc360d6cb3a8dc

SHA1
45de8d7cd6fe51f139140e3530db276fac55f87a

SHA256
7892f7a8f3a6b8dce9179ba3a5b226e58d8c5349f21d50e12d83139f4f0291b5

SHA512
775834027a5a8b4dfe5b6cee7969de49057b1930fee47c14d997703b82462554623d95f07d2fe3ca76b84b5439cb00a14c322136bd213a270048afc0e42cb989

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
70b5b1aa9c140a7465c6c4b9eb3276fb

SHA1
2c7d022f877c4be1f1d8a71cb7cd02f70835f746

SHA256
117776bcde0b170e2396a07572dfdfd2bc838c599561e23ffea0041b029250b5

SHA512
1522360ea05b78cd02bf6495e4bec25449ba6d007c535cbb88b7006f0a235448b0a1fe94781fa4f3bd85194113a0230656674f079eee8d71e8e38168cba7daa5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
031f2c2360e9881ec08943e5f07ae736

SHA1
954fbba3f26d1d1daf2303054d3eb628d48fafc6

SHA256
3fef491dd9f807daf45e705237aa40f59d0dae7f0d81966df29e7aec2b67da44

SHA512
5d9e8247d9e6c167247675035fa33560edd5bae5b2a95e6ef1a5af59423d3e8dcf3bb74697e5d89ca2ee8c3510393d08ca291eb2fd10be9eb478249b5e1d6709

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2E42.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2F12.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit