61471c22d42ce2a2124883faca9a47b0f1affaafbbcfd4d938540720e522f578

Analysis

max time kernel
117s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/04/2024, 14:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eb3c86153b453a76aec09d1951145cc4_JaffaCakes118.html
Size

1KB
MD5

eb3c86153b453a76aec09d1951145cc4
SHA1

2bce95a02aa12b436e137044c4b38067a34250dd
SHA256

61471c22d42ce2a2124883faca9a47b0f1affaafbbcfd4d938540720e522f578
SHA512

b63d145d95f0fb5e9e9fe2c7772dd1c20602d55a5728d1d965832b68499628699676406b2a489b2c70ad48cb7ad4663f2c819c7e75cdc5ecfa364e8e29620a9d

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a70000000000200000000001066000000010000200000000b6e971d758db8f4e7c2c728ce0816f76d9bdbe6b08f0d6e8909b139fa58eb00000000000e8000000002000020000000ecf9c4cece260c358d90bdfc4c3b73302e6bff4f411425bf94ea2321d4568fa820000000ccba76164d184dcbd55100ab680d0e408e3e0360fc0d2b7e63ef0fe55239dcef40000000b555f2d1637f2be1d0bc7a53b4242cbcf3cfcc1556fc4b075bcd0697a30b2ec19a2ef48c1ceccd9be455faff0bbff78a218dcd6ac0750a440a5e933fb5203157	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{29F04611-F743-11EE-A635-D2EFD46A7D0E} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 8088fafe4f8bda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "418919701"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2304	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2304	iexplore.exe
2304	iexplore.exe
1956	IEXPLORE.EXE
1956	IEXPLORE.EXE
1956	IEXPLORE.EXE
1956	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2304 wrote to memory of 1956	2304	iexplore.exe	28
PID 2304 wrote to memory of 1956	2304	iexplore.exe	28
PID 2304 wrote to memory of 1956	2304	iexplore.exe	28
PID 2304 wrote to memory of 1956	2304	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eb3c86153b453a76aec09d1951145cc4_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2304
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2304 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1956

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5f5c3aab81dfed5149c194324c6dadca

SHA1
3346ee9b3405725022f1f5e0252d64caf848637c

SHA256
5ffed608f7e593895563441fb95ce3aba17d5573d1f0a19e010f93cfa741c0c3

SHA512
3629a617247e161d040a6d631296c7fb213603b5d45d9a78b6b37e7209cfe4241992626726faf3d444ba9178c4ae7dcbdfe456c9be5636b79ea125c3e45cdbab

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0c92056dd4c68c7b3326406caa2b0647

SHA1
2b7160047a8fab8b5fd52bc15006ff05556f300b

SHA256
e337f99f4903aa7ebdad2965fdd27a1959fcd5417f17de99a75ad3c8f5092e6d

SHA512
4074a7d6d3881ef14fd0fd4cb7db63eaa40120c039d6bfa4b8da4ca11fc7afc6098b8eba8b313e0fcc50b780118b33302d68ce2931fb90c5861dd33a6d7e7aa5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6b1d071c2ab10b6002f999033ec2e999

SHA1
4ba2327ae3f525df1a2bcc6838b98ee0d95fe6ca

SHA256
b861b37fb251ba08d1c312f454bd87727556fcf5b2567b033c9538353abef168

SHA512
20eec52562bf2a4362e505075dcc33c4d0c5b85f03cb2f8b7042ccd191ded601f9eccac949f235c2c065714b0ed132dc370af30cb348fc1f1fd8a797e427cf36

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0813061d5bca445e9a07386e3ddb4034

SHA1
c258fe8ef51556746d55ecf4d1aedd5333fcbd11

SHA256
a9d9a0a209db268683712ecca98c54be44317b952ad58d3d08e4eeb924021a3e

SHA512
afb23982fd4387473f30e44c124414bd6a298eb971f5bf484d12bb1c37073ac5ba55d7f32d5ad592dbbdb4f77534a12e98d8805db32fad7783700f3198843370

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
70bc6b2280212c33961f2daf617400f9

SHA1
8d3084f625fa56c108185dd127388161b47db707

SHA256
67244dc05d341966f8386c179b3248e178bd40a6a3499f5e8cb9959e93491784

SHA512
e0ee90220f554b8ad2469542cae1b5c04e5d5593794f128990b8768061c67e9a9f4075be02574c1e6b7609753bfdc22ff7f048fc26510787bcbded44ae43ca18

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1e4787154ee5c683afb6b14c113a98b1

SHA1
40807e4074c4ca4b4c7f02ca2daf2cb147827956

SHA256
10665557f76e1e4b1d73d559c2a68bfb2c84793a6b2a7f674942b7da38752b2e

SHA512
c2b5aa1b69fa2d07fe94d0bdb427ffc7f380897e22dd11cadcc01660a4fff358055bb0e0a100284810e5c9756591f7a03bf2fccbe72160d2900aa4c4bf503447

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8abaa12dbc0f01a36e2d5ec82eee4979

SHA1
7905b864ac4cb0b40d7e9dcff04c8f9248ddb1a5

SHA256
388def7dc28bf92fa25b61530cd9928cb1f00d9ef4fafa175128ef34da0d46ba

SHA512
16f5892d76716562e7a2e60975a803e391386e8f07d1ef1a54e135a3212f11775386c109a9a2c7ca8c4fd359e6278929c6d9479caea57ee763eb6312430ecff9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5a844a27a68fa576fc6017dd8ae78a3a

SHA1
ae95f6cb00f72b578624ca92ce9213ceacd1fe3c

SHA256
3f761b9d608138c50c02476d9185fa7014660b4477082166392ad764bfa6e8ca

SHA512
51c5793d8b1273b6acb0f92c8ff502ac09b7ffa651d8b75e68a533002d8dd36a8ad10dcf11702fbe6c8d62a564334b5b5435e3f36dbaa48063fdeae9e8cfce28

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
35b3c822ac46a8d909125a6088a566e8

SHA1
7efb585e026b7811cae4bfa46d2f4dc758cefaba

SHA256
62f5120b2e4c1fea4f03ad9f3fdc6ddadda196773963d16ab93ac58844163931

SHA512
20de031293af0622f04315049dccda65eb65103cb7ac0ee964c0d80b77559195b055a053af882941bf4e4d677ec271f4c29062d20a65c26cd542431db0654931

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
124f669284af121b4de73d58ad2b82f9

SHA1
7870ecce8585f3fb9049b82bff370d0251643ab0

SHA256
ff7fdd9cd63d1ddc0fcb909e419f964c1fb75196dbc3ea1e8e193159ec97f8aa

SHA512
884c6b4ffbfa32b34a0aaeb1574aea01e28268cc4d03d85834a19235ec17a5de9bead6b7e4b947653b9ea6c9e98cc47701a40d8b6e6b50d4189a56b69c01772e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
429b2943779190f1ab97343ec72ac6ec

SHA1
c4ae9f4c6f7824d8bd1a5a7403c02d331f3910a3

SHA256
5e688898b6b09d57bba0e6963a8fa9d33471cf9becd7768a1e97db8e6f3f8c11

SHA512
51621d043a546b9258b0d55ed8d000f17b9bd8832c3e522cd4a5a3d9c042160e4553d616056c4a4cf40f7a7f01bf3c783e92dabe1aea1162c1573070edd20104

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9333a908c27c4ece9bd69fb5bcdb7436

SHA1
ed194568314eca81bf70df5ea79d9fb4fd44724b

SHA256
8e6dec213ee2f4fb1034593743c1c2215e9baccacc7811840ae27bfa9182068f

SHA512
e5e053ac48d9087028f826a6091d03d962c3311a9f7bd21ce0b50072deab367f4cccc49fc57e138b26920135314665c1fbe87491ba4930675299eb116df0cfef

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7a1a9e96abce110fc4abd929130be6b7

SHA1
125bd062216c6ace07c09fce4dd4fbe4e79d6867

SHA256
dd68435c5b76a77c3ba1641ff61003637f6b7cff9a55857075227cb83a057c4e

SHA512
1ed73938ec37e9a4308d1d3b5917c97f9dede8a9333ef4d0e17ee097f1ffaecce07d7d493a7f756fda4a08a04ef26ca14c36dec71ca257ffec7078bc2b3e0781

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f989ea24b404b962204d62980ab16cfe

SHA1
16c59d33d3c516722a1884c56c11ee29e3e94557

SHA256
3d818c0ffbe675ddddc1bdcb19033f34b995b280c0dc4807fc764095f6cea5e3

SHA512
ce8253006d4d947bdaba6137c102b859ab07439c30375fea20bac9b3b1ea08d86fd73a7b2179037db7e43a5810b9d0ab8681ca00676900b65a8422dcea27ac7b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b70c58c2103f8d87510ef6d1f5497502

SHA1
1199c4ef856986a6a5b50d47c01685cc14b9916e

SHA256
5ce3e442e8a50162e6dd2e3df9e4933bd2fdfe7765e5578a8df572a4b9bebe06

SHA512
bdc14a9eb85205dadf2e7a975cb9cfbd21353d18788aea12db039d408d85e59b1e993d071b2d25e74e6b6e1005c669c4dd8d469839271674a12258f52831acb6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1170a9073f7e50fade5b3bee80efcb21

SHA1
92565199f8c4b9c9f85ae817a42ef4a7f860ac94

SHA256
0a24c4ab49c43ab255956146f136e0e1cd4d90c0651be44dea38894e7bca4165

SHA512
a746f2077aa3db02cca8f61ee95170e71efbb77440a44298d11212b3cb381edc22134c3f31a60b6b25b669fb912a7afda6668e47563dcabd899533f8d460bf3f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ffcbcc6bd518d6429104d8f03f8ca36b

SHA1
9d4658ab5fe93d9ead7df2c98fd255a1d230ccea

SHA256
3fd2b1315c779fe9d21d45a6d59fde86e4f6340cf27bc97de92962b9a1d368f0

SHA512
9eee6386b0945773b5669ff7d741d6a4b732296b2c07c867656dd56dd26de9ed893081835ec4899a7c898577ac6813dcdc0f7ffa30b85460b42c50faf35e71ea

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3B9D.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3C9D.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit