ab509721bda086106093757b513db8cc96515afa275c551db76581c40f829536

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
02-10-2024 01:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

08397bd6cf4741c6544ee0b64a39c24b_JaffaCakes118.html
Size

16KB
MD5

08397bd6cf4741c6544ee0b64a39c24b
SHA1

e7ecffb5d01914b47c1d4d8a10d721866f5625f3
SHA256

ab509721bda086106093757b513db8cc96515afa275c551db76581c40f829536
SHA512

8d87b5c21b4e07668eeed921655660b813589e904270f62bac6d1bfafe5966f2e9f55d82bccc08201c3d3fef021d88ee24957de0606a022c6f176d79f9c4a510
SSDEEP

384:zdezVbYJT6x1oH46jocsVltQfwyqqD+cY6J2Mlf9fjjL:IzVb26MHfCLtQflq/Hmf9fjjL

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000b3e8f15f634dfc43bfa5c3a2648d88c4000000000200000000001066000000010000200000003842fe6e5ad82cd5f81fa61d11de29508a629cac9719dbcca37907c02c422203000000000e8000000002000020000000dbfdbbd38fbda89e857b08290ae2097e7bfbd0f911c5795b179920d0bb9ff38f20000000f5892de69ba15a5bee26046795f92b9f9e290cbba65f8f661b7fd92b57569660400000002191deb8bb500ee74ec074a97fdad245becfe9e0f7fa1da805f2f1bd9d2afafe8618067872e582bcdee76fa9ca60935744c3556c441a1b53d95009acd4cd3807	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 60114f586914db01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{811A0781-805C-11EF-80B1-FE6EB537C9A6} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "433993893"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2308	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2308	iexplore.exe
2308	iexplore.exe
2720	IEXPLORE.EXE
2720	IEXPLORE.EXE
2720	IEXPLORE.EXE
2720	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2308 wrote to memory of 2720	2308	iexplore.exe	31
PID 2308 wrote to memory of 2720	2308	iexplore.exe	31
PID 2308 wrote to memory of 2720	2308	iexplore.exe	31
PID 2308 wrote to memory of 2720	2308	iexplore.exe	31

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\08397bd6cf4741c6544ee0b64a39c24b_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2308
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2308 CREDAT:275457 /prefetch:2
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6964b99c0cf63297a9d7b80024748a09

SHA1
84211ac139fb8ff68bf4b215d54d09378870f57f

SHA256
e111cb2cd73fe9197e0aa6f5fd04464fc779a552461ea3035a7676be021f5832

SHA512
4f3d3fd4544fc6480918b6c38ce6553369c1972a871cabd3426b3538a00b7d3d94c788d3385fae3fd0769c206f8adcaaff44328cfc522970ad9b262e262d730b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
67c03add381619a1782dd8bdc9c719d1

SHA1
0928f843f6f4976151a7ce17b250ba6dec2d87d2

SHA256
ce2bbead85ec83ed6578ea9e3e9c2f02ef0575260775ae43b874cf3b37a73e0c

SHA512
65654fd689e35dbbe168fb4637311d7cd57c22844c50af4d622dd4518817d1d3b95519b72358350d8a34f6bf239d6097fd753793d4ede56a969d6ae9d97e38da

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
654ea206b747297df82c827a18665078

SHA1
448acdf83f05ae2db97a35449456cd51d6b33831

SHA256
d5fb1d8d80a71856e2fd3395b0980234b16c46181bea557236b0dfc393d175a1

SHA512
56331abe6bc5a2546b25fce248eb0a4f266fbb9dc9c0acd957466069bae3ebd6815a46853fc40acca90c9ebd8852cf9c7267a2bd171c6ff5398cc2b9265033b1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e02ee05dff84e4b617210c1827269218

SHA1
141542b68497efb2878223291204ec1864bbf381

SHA256
6fa7b0665854a13ac3dfadc72f9037815302c1b62daf832fe8618dad17cbfe7f

SHA512
dfcbfcdeeb099ff56f0a23dcb35f2d9a9c08587a7532cb3d10f7a0b39b21aecf80d025967fceebf9640fd0680b532408954b8725430ad40db8e5c27b298a5b17

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a42f4c4b2af066f8807e21cb21421db8

SHA1
d87ad7a1585aff876c550a4b842553b0afe6f4c0

SHA256
03a2e79de13124e6ea083ed3ddbc05a2d161d22b7f1e38de0cfaea9e78f83a20

SHA512
f6967b09e45f621a381023341bc8a298ff0c8bc351ff95a75bd073d5475cef860f3cc6ce64e9a4f2f9d479b8564cc611193bdcccdd28a0368f3c0e8351f80404

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e3d3c269d356a6f5908bb424dd7fc082

SHA1
2adbefaeb15f40cf8e04baf2af9fb214c2a36c48

SHA256
f3441ff36258d77d318ba2d51a798d4989df84cbb4eb889b65076d07cf4f6b6d

SHA512
0f18f70bba7057d020f8c0d4f668b9abebf309ca0b56347aad9fd5b33a0e5e5c795b70c211005c5ec72e80ab0ba6240cabc4a3ad8c58d5fccde83fcbdbb87efb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9c04db93105bbb36f59958245ddd5029

SHA1
28ec66d0f070c168a93362405058bef0c4b5e14c

SHA256
bb184e70db51fbd50c00b0fcbda68fb6f6cc2e22f235b6966e598da3a65a9ef3

SHA512
446b10319e34a14bdf5a85eb33a02a49b11b2b5414f4e8efd53321781f38a367d4afdc4bf01d16226bc82527fc6cf4ac2a11d71d39e4406121164eedafea073e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
079c839e74a2105f3b0748e2b75502a1

SHA1
a5609da3de92ab25f3172d40b097c4807f665e45

SHA256
9f4420be396feadec88292c6bd79b0b1198fccd3bb8b29dd1991db601ef90333

SHA512
bde373fa06eeac4f579108e45c8c5eca1de718bb58623ab1c57ab133df64bd2d2fc6429e33fd3d397182da94bcbf71cda31561a4c48c79e99fa0f790f23ef6d3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
61f34bdd5ae6ff604a1d045854001b25

SHA1
5bd7a45a90dbfc0cbed046fe2a7134e9fafcc7c0

SHA256
1ecb9eaadb9b8aa22ef16c6a19d469ceec154a602cdcc8eb23cc53cce8f86cfd

SHA512
1db5fd9c26df789ac7ad1ea47f1eebb47d8105bd7d001d10424f8ed9ffd36f3cedf1894c8803a9338e8b8b1a02e47a913c99bb9eb3db9c084d6f04b2e159a7fe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9169c63f8e0b67914181e68ee3efb938

SHA1
c108545e5d1928abc8a79aa19dfac0991642b4aa

SHA256
45a901ff510bdbd5c4510542be5327c0549bb06b4297db5b8e8d7246da62c651

SHA512
92f86f4f77e13effbd741538bab77cdda7af0cb7647713b9ebb823e1df74e5df8adbb0dbcbb2a8d64e348da1cb6b8b503690a4e7c4e3b487ca55269a88b86e55

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a34b657e2d050adba7bbbf1e8fec3a34

SHA1
99d4af2c3aa801f010b689af02bd93a321ccb099

SHA256
21ab24faa0607af1e3377735323902683d33e3467e4f7bb591033cd2a2e39443

SHA512
35225f48bf81a8236b8a2b8ffbc9d68ee25f3a1e9ce91d254e0d9c5bbe00e16f6398181f30640c6528ef72cf321b85934cd3702801daea13f163ba3c271bee85

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
46a608cb469e896a04a83ee376a64b47

SHA1
bafc846af782375b8f2c5b4b740d5d9bea2c09b5

SHA256
32713ea08f4f38232027f9c77647db3764431d41b7da3094faeb80eaa3a19c06

SHA512
0e8d9cb40285c2152fe6d5be12255ff58820af2f526908b2a2a0d8db1b0b0b12e1075995fd7271efbe5f0e2c6de25a74571afea0cdde76eeb217f32631ea0ac9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b947b9409ffa85dc1ad05d951b7a4b42

SHA1
1999ec436b959d6bb3d19a37ecd554331e9a7f7a

SHA256
00e8d52af0e6861bea3869876077d971f62139612416bbec0f0fba64cc58b09b

SHA512
7b9de19305468edb092e36c5475ef09df87e4ba1683164ab5d65456cbbd89b691788102964a234aa9a6ed44795086f9da7978c142d30bbfb0ad812966e72bc90

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3f65712d1ef99e6e0f19a4395b38424d

SHA1
15750925b0e7479bdf2794f40003e7ba624de68f

SHA256
dbb8ccfb167072f7372324b004d2de6b668e60ad885ce0c1f033021e11e0ad63

SHA512
986ee1a27ab21bc67832cf90e1030490f5ad1de67b0ff8d7b85d46378ba09fd3b67db88462c5e5774e568208c2872b67ed49af33c044d826137ae95fb7f6bd58

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
54f46f342338fd592036f172424d0aa4

SHA1
db7dbe35c55571b469deca4ebf4fe8bec7f95e2d

SHA256
96b591d1f1fd495bad12abdfae890bf8d00725bb20e7abf4ddd88aad1c866dbd

SHA512
dabee61515b9b2e70dcafd5f27c67fa8af785e8f5805d96ae10953155c5a7842da667321a9c243c2ff33ab7d927df42feb453c9b76b2e8ed33ac9e0594d2c255

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7e0c64d3c7c28b365df57707c8d4eae0

SHA1
45fd55cfc317f8bdb16c3146a820d609d8d6bb2b

SHA256
98a3782f9a023d57c9f1185ac448954c8e8af79f4514e2d0649deab63019516e

SHA512
33ea61ef4616c53fdee070ce51478613715accf6ad8299cb60c8ae9a59903cc92aea1a723399867e2be9db09b2a9753afeb0807637a4e6c9c522d6e296112931

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
34c936993946f2c0f689f221a02e8e6c

SHA1
79483d883e76cbc66df553d00d5b1abc2dada8e0

SHA256
6e0488460c7db2c5936fd2c615aed182addc42fb9541e609b2101a661419789c

SHA512
b5fee3182e3f638cd5ec220350a9520943f5bb2968327dddd3e166bf8a84f80c29bf2cb2ab89eab042df704898732dcab2af0847b03d447308705f509e63b619

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab10F3.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar1155.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit