b7b653f1768707e1936b74b0e6d7ede24981eb5c7f55d95655ef8b4721687774

Analysis

max time kernel
136s
max time network
143s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
12/10/2024, 15:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3ab22881cd47582818e6bd111c34e38a_JaffaCakes118.html
Size

53KB
MD5

3ab22881cd47582818e6bd111c34e38a
SHA1

6028cb14d3974a892b278e6a471d2cda55f43534
SHA256

b7b653f1768707e1936b74b0e6d7ede24981eb5c7f55d95655ef8b4721687774
SHA512

a398c98b0fc52e0e5371c20a91e82674559cdd0c259fabc71c60caa679cbd34bff3ccd3167c46e062cfe80df0a16938a26d815b4ea60d329673cf6bd2de113f2
SSDEEP

1536:CkgUiIakTqGivi+PyURrunlY063Nj+q5VyvR0w2AzTICbb+op/t9M/dNwIUTDmDJ:CkgUiIakTqGivi+PyURrunlY063Nj+qr

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0f43023b91cdb01	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000004961a9603b5d8740891a04601e8b8fb900000000020000000000106600000001000020000000aca50a7525f8d06f658f81c99790eae7d5ced86da43b068299f9917ed01bc8f1000000000e8000000002000020000000ca37acfcbb185bbdcebd60ddab68658a3f96aa877a0f0de0b2e5c5e72a8135512000000055f48d6e081f2a2a9b16eae3c30bea8eaecb7fb9de903254caa366e9f36fc7ff40000000a05cdaa0396facd99f982de54308ed16f3272e90e48194e89ade32ee2fd1c29614124b0af4eefdeb8ccfb08f206ea48230d9bbd2eb135e4f021e71981c465bea	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4C025B31-88AC-11EF-A429-7A64CBF9805C} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "434907776"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2703099537-420551529-3771253338-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2780	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2780	iexplore.exe
2780	iexplore.exe
2152	IEXPLORE.EXE
2152	IEXPLORE.EXE
2152	IEXPLORE.EXE
2152	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2780 wrote to memory of 2152	2780	iexplore.exe	30
PID 2780 wrote to memory of 2152	2780	iexplore.exe	30
PID 2780 wrote to memory of 2152	2780	iexplore.exe	30
PID 2780 wrote to memory of 2152	2780	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3ab22881cd47582818e6bd111c34e38a_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2780
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2780 CREDAT:275457 /prefetch:2
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2152

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a07ae802d652fdb4c78b5647e887fcc7

SHA1
8263586c4ebdda331a27a44b61c489e70bcaf28f

SHA256
e20424ba38a73f3d133b35c816fc8f9fa142d614cbc3447442b85c2b63521831

SHA512
1d1031fc2fb61b3823e9eb0f2230e02f942042b347f227986b4f2bf95ead792266e0e59fb7a3a352e7fcc50ab2db11b23bdb20edd221848418992cee2e995bac

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e1a98507bdea8fc5030039513f43efa9

SHA1
38903bd658fa43ace36c510f2ea40a555d34bb9c

SHA256
ebec66e508f28988d7f1205b1dce515511ce1b3f13a7c454e2d080f9a0f046b8

SHA512
7000573e97f2f090b02c43402296a7712627784759f88d2b5cf69fed7e8db8a33cb793640ff5c09fa072e9837684a2d87e4e0e9fef9fef46f41c3fc1b05caef4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d54eb61162babe3910a6acfd77c275ff

SHA1
cd02d3b56d22f01dbb43cd91e90d9b0787cff924

SHA256
bb672a4e8808873b8f85fb0804b94dd44b0b8fd231afb13582d3954bf8920af8

SHA512
58a329a9529c22ca6f77162fd8f2d3355b84ceaf1d03d90ae1e25aeeb388e57b01fdd34f255fde90b6780670886ab077b6f9f5785be61de5283b70f0c6f7637d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
df4e6265a21ea1e1fafbf584a1df6500

SHA1
878f558a7630a422eede206c3d1dd981f9217a48

SHA256
29d813ceb27aa8363ee557ae5309d197cb58f35a0a99ecdff0404280398b6665

SHA512
40e9c93726ae958c2b5acb77ec15fcbb36157ec54f44fd8b7e02d39f7c203897e48f0a37ef90f5e872630d23c161bfc69a1674a9ef0e07399a59d59133edf482

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
598c8fa3f7cb24faa5624f16ddf09182

SHA1
54a4e8c6ecd9b5574c8940ce5d60eb8e2347c9d0

SHA256
f5079098901f372f04ccacd9622ec179f2e992d127e3e89c122e5628292371c4

SHA512
e6ab1de7894b0fa69aceb5ccbb82eb2790be1f7b8094c2673a55aa80fe7a3137dbf5e90850a79a53e2948a58d2e09afde7f191a1c4afe894f8fd396c309693fa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d637183ee06e5c387354b6d3bd344285

SHA1
ceff4dbb59f36e05f1c10992a1cd4d7647302e1e

SHA256
65dea8c4217460f5142786d14d2513378b28d0ff4b3280abba71687bb0edf51e

SHA512
2f96f7915ad0073b11ba4e2a1874aceff50b29bcfaffaac86d007a2decb452bd53a54c3322225d7fb3cf23d6dbd1f0e097cf1f4630f62a9be8ed12d61bb1a8d4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a6212c3dbbb635032853b364f81f5efc

SHA1
6c91e11560e2e5c815a59f358a411b0accb752d4

SHA256
c55d54c33c8725ba417d462852bc28a1b82bde214b510c1878c05f5905163eae

SHA512
8e0afb403fd7b5457dd09d107a86b0d00a8a1d17317e2d3136be30576187c07203686b7338dd2e6c172af2aa98a2edf0316e4e549323c845a88711fba779367d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
15c4c4f58f777fcfe9c23e4ada293b01

SHA1
17d94602b0f27fef36e1ca1afe0730658f4b44d9

SHA256
a5851373be1af177c7586dee34d2d7f8a817da01a354d955c11525a40adeda31

SHA512
3d1fae0deadb43c6b777aa2b6032099516b6aa1ad234d526b4686e167e7764e72acf175a6d41dd029b413cafb85bd54d6f57b4138d204b934f7718bb1c556b09

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1846ebb2020a9d4e289ed0d7787d849c

SHA1
90c3ca31aade248f21356d2a54ffde07a06577b8

SHA256
af7551af29c4bf752256236d65143df4e2f9e09a83957b9c9eac98e4573613b0

SHA512
5f4bb9cca09997efb45f366b84ea4046466a373f44abf8b7d3e0114da9c884b0ed521fc3c2ff9791f8ae55681a9fd48c5980a2764ed9bce56b259ec06ed7a730

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7cf14448468d86985c86b9b4a3639228

SHA1
2991fa43d1cd1e5053465b43d4b50615b16193f0

SHA256
658bf04f5add15542c091e05538c8c682e9f4e641efead8bafa1de708efe55c7

SHA512
15fa5d14b0145079e1b9012e2c15a480e47e84fe66a96af7191ff6f13e3acf9a9ea1fc3b16689c6f90ff85521aa3bb5a1770c1b3ec42df2119b406b129abcf69

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
03b006cacfcd14b255d8140e0d478deb

SHA1
2dc298804131b06b879b700676c165aaf27d5c3e

SHA256
ba6b23d3efd496bafc632a9b11b524d4c083f094e7bbd1e2274dac0039776221

SHA512
221c4a7eef2b6e8a10cf487dea54943aa0b7a74665b9ffba1f2a24f5e4d4b80ea519e8d244f6b166472385ae37e6a1ea8fe1b1532d26a6b7a792883a1c835d3b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
45ec532f58574859cb75e2df66082c78

SHA1
22f0ad140b9f5eb4871b588680bdefb23b332371

SHA256
79a3929f07eed424fd10a585cf56e9e9b14cd51c59c5590aedc28130cd035a7f

SHA512
3c7899c1cf60e0f281959b5956373ebe7a962c1bef818dac42dcb37d7cc3eafb3f465304dec84fa4fec41e4918a0fac49c509431bbf4d25fbf0242e3f2bd5b3f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2a21b2da03c786e7683775daef816944

SHA1
6b45d89385585bb9e812964d8f60e6b6abe2104b

SHA256
141fd8e16974ca565879d7579d473e3ef2a5fc727ce47a823786c1896fc91568

SHA512
7d764a94228a09f1fbe575376c4232bd75c5c11625dd51760512930a3307bb16a201dcfc461d8660fdf0b1d1cebd9bd7d614ee8500b7f8800d530dcfdb2d0d81

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3ee3953bbb35cac6add71adb5f174933

SHA1
d004c86ba6427e5952873d36edf34c75ae128174

SHA256
21eedd1f7bee070c09c71283535e3d0133d299e2aca41bf54ebb07101f74b8cf

SHA512
5965e6f28221003d9a55796852ac7cd1a1eba169cdcbc7877a5f01b3e882a65d097514f6b1c5d8999e30e5cb767aedfb9389f5c72873bc1e1582ce11e6b808f6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b137ab6448a3711ab18db6363d2ef779

SHA1
a3b3883ca305cb3de7e5e01ac45fbb88a4a3c278

SHA256
178ffb43b4f7330aa7949454c56d4057df0c62dce351bacb21a44df5d23ca8f4

SHA512
7f9f5e5c8095096cf2ee637a9e6e0928bda35792a23d8e0cafb55833e395b1b8e6945d0784ccf7fde748c6011243db3dd40549bab2997462ed266b76f79417fc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f488710f6a19fe97e5973d4b8cc327d0

SHA1
d28d10a06e022636a2b8da0c7beebc5d40e91609

SHA256
3adf10663cf7c85850dffb983bcb6de3109993c77997f513946e30b183fb8057

SHA512
257f991a6cb9b6231a15d056a643252390baa733356fabc1034cffdc1818ff3f47ba03f46595c05f2eeeb4870afb0b3c100e6b5d455314fe9c104060aeb917df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\40WV1DY9\print[1].htm

Filesize
706B

MD5
67f3a5933c17b3ab044826d3927d0ba9

SHA1
5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

SHA256
97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

SHA512
03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabDC3D.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarDC9F.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit