6d73ab275ef61470991e3bceaa9aa7e247df52d2c59b73c60975552beefb9ea9

Analysis

max time kernel
118s
max time network
133s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/04/2024, 16:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

013a2e99a8607f246e0fc0a223e45079_JaffaCakes118.html
Size

460KB
MD5

013a2e99a8607f246e0fc0a223e45079
SHA1

ae194d8363c53be1852d16c175f6381a222cde6d
SHA256

6d73ab275ef61470991e3bceaa9aa7e247df52d2c59b73c60975552beefb9ea9
SHA512

b1aeb539e46d3f5d1035011eec49b7a28a288d526119bf08867e8c713a8dc8384200d8c64816727bf791cfe242c23a59ed01f7c5b33e91a69928367cdaa2e11a
SSDEEP

6144:SgsMYod+X3oI+YMsMYod+X3oI+YZsMYod+X3oI+YLsMYod+X3oI+YQ:p5d+X3w5d+X3X5d+X315d+X3+

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{CDB534C1-03ED-11EF-9CBB-52ADCDCA366E} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000759aacdf0a187308f671005ea84ea9bb5530df6385f6fe28d815408cc3d202b1000000000e80000000020000200000009fb9009782f7c266f0a76156147f018f11feb00dfd1b75c2cae56d08551d503c200000001584cef0bb4a41a2caf73bab5a274b89d980157b55f796e19e5cfe16963e6d5b40000000a374580f126b79825c896eec99ee134227c8734336ecb14071f2067d10540d41ba822e21bcddbad31d06dddb511584eaee7ceeef6db8f1ea0e8773794b84b613	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420312405"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 10ffada6fa97da01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1308	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1308	iexplore.exe
1308	iexplore.exe
2516	IEXPLORE.EXE
2516	IEXPLORE.EXE
2516	IEXPLORE.EXE
2516	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1308 wrote to memory of 2516	1308	iexplore.exe	28
PID 1308 wrote to memory of 2516	1308	iexplore.exe	28
PID 1308 wrote to memory of 2516	1308	iexplore.exe	28
PID 1308 wrote to memory of 2516	1308	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\013a2e99a8607f246e0fc0a223e45079_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1308
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1308 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2516

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bd8d208fd90a383b71aae6675fbcf5f7

SHA1
6ffc38f172ba5b385f665c14db98ab655eae7cf7

SHA256
0aa04de74132d1c56e82003251d26e39cde4bff7770412e76ae37dc8cbff2a99

SHA512
cdfa2911c00cefe32b9fb2de0e834f8a66ac263f3c9e74bee20b8fa93ee9653a1c5316aaf1c159b092a7c4de2437883b1c878642d97ad265f3f404baba21584e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8843d6cad9d26028854950917eab8d06

SHA1
8628367d60b16509aaae0932aec80bc322553dc0

SHA256
4c40aba6f77488b63ab81671a9ef5549f8dc64e987816e8b646ffc833628f170

SHA512
eb4ffb58e615359edaa78a26dc2d36d5d005887eb7016f0578e94f7176694597f6b6d4a159c219bb117c3b7b4d6262bfb8f405f241badf671bb649f4d9b30c92

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
35234255db30c513865fffae4e07f53e

SHA1
0eeec38896b441358fff93240a684e564eef3b85

SHA256
7cd44633cf6eb7ae7d7e2c01abb004b86fef32515e7be3515c44b43250a3aa1e

SHA512
f31706afa58280cbb0d9b7b2e10c9cf053fe2a30240d95ab7b12b5939e9a2fef3c62e5a3195fde39ab6cbe1a00db556251549f296e6bd0090d3f999651eaab16

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3719432efbb84a87229fa9633e8687b0

SHA1
493a34445642a337e6ca5cbdbdc80c5d2bd6ad5e

SHA256
70f05804a97f968306a139fc48851ae59867d121e813b77499660765e4a356c7

SHA512
a04ab1446d04304f525bfaeb9c16f6f14df0c52f00f520fc7e3fe6c94eb54f1da23923781b9a0a6809bca5670e4ffc45d8d0024b40ae2a0c9cbe3988044c5195

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
33a7f191465a043036777208b0d455e0

SHA1
c9b879febb9d20839f5e4cd9cfabb92c4ff83cfa

SHA256
6d648117090fa5dd31f866cc8419d23bdf3c77bc1bfd85f3b844a9073ab93a6d

SHA512
2061ea08333408d4371e2cf927c4a8f6d80d5214fe3fa671d647b08f1e7bfa892c7d84d8fa63e13fdf015f112634903a4f906da985470db9e1d86366bbf54214

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
36d5dad6b0e1172f3c38f2f5626bf23f

SHA1
55b6dccff5f01f0da31d3d74423635e321f6ef31

SHA256
a5a83dc4f7f49914810754f9c6147e3e05307ac8608d9bbb8aeedd2100eb75ab

SHA512
68ec28e5b331dc23cb286c7927135c3a5bacda94e00f29433f63093c8c9eb059b8783973ce4b9670ec9e7163a7f9a4fd92e140dcc2ecec69f30f6b0b44872616

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f9cd2acfaa0de0b43d596199051e58cd

SHA1
ce7df579a728989be3d0d4225cb8d3d3a9546026

SHA256
f2332191bc13da8fb56fa2057f62e807e029ae552c1bb0aa05bee8f0ffdb0a9d

SHA512
603aaa7f5db24c124f04a2323c31badb0c7c7aca40236d75b26a5a359a7630bac4b0ba8da9b2a207bd414692c55117053e82eeb3cdec846f35053df775b2b693

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
872a5266e43068b3d534c7ed7deaafcf

SHA1
4c0475fe484bd4edbcf8bf4b88311e259c2be4d1

SHA256
51c48059c8b1888412ff2911ea35217b624bcd04d6a0b26f09d566d595845b3b

SHA512
d77f8eb66cd126c6e6b0c0985fe58d76985720c464563292b7515a8daf5824d769f3fa63ca2c078b166bf59a5fcdaa5fbb6f20d5708f410cf866c4b12d08af78

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
514d30d6790feb03b2fc7459409e4fbd

SHA1
2313babfe0f9be2fd7b99a8c85c44d2a73b14df0

SHA256
83b6df134d56476c45ebae9a00fe5c1e131ca32e180c7e7ba57b91727a034140

SHA512
2e6f546a8d9e41a2d82e5892dd1f18b46de1ddc5af335e5601d270568b0d602ac196a944a1a06a4268a06bbf4bf3cee1f1a8fb4702e0f63dcb1b10b524384549

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
00f68d6a55476e4a31450f72d46c2b81

SHA1
8aae35778f98b8474f93178b0e0a414304ab5190

SHA256
22b78d452536cde6906bd6a7862d4af5e800b27079e513c20c96b0fec49e145b

SHA512
d2bedc35f34c779e96bdc4253e0536f2ebf7dbf2f4c2971227890c40ad65552254a756ebf8746db52de1e73302f7072c7200b89034896363d5e1c85f6e90c3db

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9c2915a88795cf8f6192b0446c60b15e

SHA1
9cd421805096fdc636e7c2e5cad259183e0099b9

SHA256
939c8adfbc3e1a69a97fe7028eb70f4ca2329e0f32ec8e23231db5fc9717b9ca

SHA512
ccaef0b6028bbe4bcb983e4eb9ad1ed6e9ff4d9f6ae5431cfb5e25e187036b0fe6e0662f8f4e055e5506135681706a9b843b7ecd476b6950c899f5e7c6eca396

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
397f4b04f6a91c8f1abbdc2e9b17723d

SHA1
b4b226be634688f673d4994da5f7936a90f5ee74

SHA256
a327a5eeef4e01ce29e6846f7893ab10a76273b5714044d2b792d0ce806374c5

SHA512
53174da3c99c926aa4bc35c98666797e83de9586a443d8a7f6c8dccd71ab6bcba5b477852c824133302ab351f5d815b5471f1a219ff349d3a99b2f3028d486c9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a1b97d274804b24d48ae43938c48a5ca

SHA1
c745a7a35e73991ce28e5256d761d56daed04f8e

SHA256
911a26c55a2224f8eeaf82d681e732bac329ec34d175f268c54cd51c491ce733

SHA512
dfcaafa8c8ceeb0f2210232d0ecbef22f6672cf72605be677384e58ee485ea97aeac4cf338cd842b2734f80ec7a7dc5ec1270148226321bfde2cf84fa489cd73

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4c2864b3a16cfaeaff4698c4685457b7

SHA1
fc236d13bbb8b627eb6a4320a11dad713d71ecee

SHA256
80a7cef999771d6c6e65a870de34e792ff13d645df62bb75302d419635fd38c0

SHA512
660751e569e42c0c915d3ef54345606898853b99cfe9146583e5ffe90bfac9022898a658513ebdf5392e3e54b858738f684e4b2e6d616842d2aac23f474c189f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
47d196c4f33c1bfef887e16871308650

SHA1
ddf660076413555ac8c3210dcd6910a5a4ed5bfb

SHA256
52632562e261dd3ac8cd69df6536343cba5a515794ccc271601d5829e9eba1dc

SHA512
b71efd2a15a40cd44e2381791ee25492debf5f05d6181f9399d70f58c9085a3c30e87994a2f9f391863f619182e2f6cdf85fb1bbaf74ce8c0c9a27288e282e39

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0072c19ba734d70675dcdec550d82682

SHA1
5945af0e56b61187ef239e81a428439b86c349d0

SHA256
be78539db4aed2431199156d14f3b6b3ea4d755411744595bc7949365d98452b

SHA512
2b8fd87b2f5b2acff2e9d6db7b6b3dac8b5e040edd1a2c8f7ea01aba4352bfaa8113959fafdd7e6a44f297afa5b43d7d648b3646d02fb233d72d5ca4b02ba1a9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b32c07a693bcc9eb80a425bab9f794cd

SHA1
a4af4cfc14d0435a6ba2a0f1e7a6c212f98770b2

SHA256
98d04954db8f6987b6f3de50137f7f9371f619dd91edd4e532de55e481d7b88e

SHA512
4664e9970657788dcebd9e21dae0ef48c9b455ee237a53337745ab966ca7db0c1e90cbcb78b226393f09b67e03e9ff3f9dae7f94aadae68c610b0fd8186e7df4

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabB9DF.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabBACC.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarBB00.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit