40cc14dec4d4495811ba269269ed81518e84775e167742a15ff3dd4a5597c870

Analysis

max time kernel
118s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/04/2024, 17:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

015409878711cc1de1889838845721b7_JaffaCakes118.html
Size

460KB
MD5

015409878711cc1de1889838845721b7
SHA1

63bdd334a2088f592e76e3a0dabf77caa9d521e9
SHA256

40cc14dec4d4495811ba269269ed81518e84775e167742a15ff3dd4a5597c870
SHA512

0798b792f0a95be8e59e031261afbd9983f399e52ef0877b9a3384008aa998d4c0946fb50a18999cfed76547bd26cd75e8dc0e5007621fd65bcf58017d7244a0
SSDEEP

6144:SKsMYod+X3oI+Ya+sMYod+X3oI+Y0sMYod+X3oI+YLsMYod+X3oI+YQ:H5d+X3X5d+X385d+X315d+X3+

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a003b1520298da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a960690000000002000000000010660000000100002000000032578c19ab1cf247edf3a62953fa7b65a3c867182ebbe6c4883a697791b0060f000000000e8000000002000020000000f5592b55bdbb7356a9dbf219f20ab5cc3430accf73e60232c14de2cccbd1f40d20000000f830ce9f4282d69878eb64a4d997d122f5f35f553fc0ef32b0902654849e3adc400000007c37b647e8d4bb3bedf82e924422896521ec311edac2590844a19a34cb0f5c1cb22053840c1ab79bdb779bfe91803e69c5809d7a6ae2a9cf4800f560a594afc2	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420315700"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{7A27CBD1-03F5-11EF-917A-EA263619F6CB} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2732	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2732	iexplore.exe
2732	iexplore.exe
2776	IEXPLORE.EXE
2776	IEXPLORE.EXE
2776	IEXPLORE.EXE
2776	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2732 wrote to memory of 2776	2732	iexplore.exe	28
PID 2732 wrote to memory of 2776	2732	iexplore.exe	28
PID 2732 wrote to memory of 2776	2732	iexplore.exe	28
PID 2732 wrote to memory of 2776	2732	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\015409878711cc1de1889838845721b7_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2732
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2732 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2776

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c25f3e28980cb0317b0e636e353d69ef

SHA1
d67b0fcb8f23445947ec5d19f48313f21547a5a5

SHA256
c9c6585502e64f748894afde4d498c6c5cf9b1b31259f9d7dadef574d5c8607a

SHA512
74ed4273b2d3dcb2176c8e0b0fce93d067907ed33245b6f41b0ef2a9974006f6eb79ed52ebef7878cd2729c55b37414af4ce455d1f87c92a7ce4ab812e705de5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
57fe8098a4b3371fdc9208bb7e90ecdf

SHA1
6a5591f08055a16ed197687f3b4b7bec4bcd93aa

SHA256
41c9ea93d9b10ba30d88734464083c1e7bd50f63c9efa8d2be80cf2065b3066d

SHA512
aea4cf56d363df6950605d9e572abc53a1a0d36831e6298d0c69bfa0a36de015db3a86f71ac827351015130751e6f996009cc8c9a55b44361e36386b6ab8f939

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4f0be7c0d141e158b7e0c0adf6ae7ca1

SHA1
e0f0aa9851827f03bb8d79b084abd6aa9db65277

SHA256
923a5251e88e1783afe72734b29505425624fcc55fc7de514a49f80211ea863a

SHA512
c6849a750db50b39d5adaa804d9fe2de6b2ed0fedfb23cd36e63ad512fc5a120438c1c4077fae595262b15c6781dd1314f0452f9ee148f09d7539c1d1fde2add

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d52d9fd66fcf7ed4bae31782c582b1e1

SHA1
666f40786e787eda3354f4bff10e9c97f5838d51

SHA256
9c54e1b8b85bed5f86ce71d393ba62c40655f4639551de917a850027fa7df137

SHA512
6f09d8c5a4ab6b21cbe6fdeb63fa985cd693f804845b2deacb2f4ff5848b224685d36b3e4c2980f5d85263554f24efff8ef62b82a1429dfdbfd1f3c8541e4f93

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4ed4839132ef49095ddd50f3fff37ea8

SHA1
e3868f04a6110895d6443452be23c3e0ff3ce16f

SHA256
758d9b09f3055ed77be13b4a33a57614501358f53143c684c56a28e0507c1588

SHA512
a71e6ae9614d48b321f1c9dbb177b63c399a2211ebf54dba692597d52c49f921ef95470154a68f4438653b392491350d7b450b5fc3287e9bf28616c8d6290ca7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e88ba6d5e81139b68ab9bf095d9ac2c4

SHA1
ab51102e32662221992626e11e88df9eb072fea2

SHA256
c6171ae88fe4981176670560143a4b4f3d54209ae45b715f9dc44ef9c9bb8ec6

SHA512
5ee480c121baeff934ae9fbeeb48c814428735fccaa4b4612c50a518b4c754fdfd8765ac0e3657638cf8b8c94408e336a6f22eb1302433e65b2c111f0e035a3f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
deaa5348b74e1fdb3fd71be697f41e5c

SHA1
41737ffc2172b7d466aae5adce7303a2f4c9689e

SHA256
93e76fb7fdc4376e47765265fabeb74a3cb4e5b2a619c022e9b7f25dfc3a06aa

SHA512
70ca294e1058dfe341b7496beeab68eb5e579c822bb4deec2367e1b7ab61e23e24423e7715945ce6be51423698722aa5a060bcedb7d3f2a351c3973065726e6a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4172af4a8fa954428b897d97bb9282b9

SHA1
e64627ffa420b3153da64da63b501781e7b0e9f9

SHA256
8bc503e55c0742d2d03f4d696f85c86ddec9a596bb317c9ddf8851678352d0a8

SHA512
0ca35ac6c671254627ac6583c8820eda424fb1988d83295c8053e3a30da46b9cd1f0baa204f95198151094012a8a63f0800ecd3dd7a05b0213a68a80679af0c1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fd9598055c0e8ce0879fd5bad7c26348

SHA1
05b4ce0bdb3327ef9db5e747c48b153b6baee679

SHA256
98702b4f730486799eb61748b1a4716a4f9a3c73c2eb0fce49b750f35feb52df

SHA512
54335eb2f6d3d9ff29b52db49998bcb859f5e8d8afb4823d1370f4ac4eeee71d3c017ec6e4521420bcafe4b815bf4208d7bbc98c90b412d1b1bb91b01f6c596b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d506ccede27fb97d473d6d4e7bb14eb2

SHA1
eca756571a83a6da45faeddf54a1cf36e937ba1d

SHA256
6401e9fccbc18a1f0c5d27de5ed942d3c8493c5168b8a56bd63d9b802ca5fe38

SHA512
5e6d1071a025377d1b61db56e03079bb89d2db27360271b4a4667ba60cdf5a4e4045782bc66716a80e86794202e0097bd8c220cd59a16f1eb5fc3a1fa69aff7b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5f05ca19da954423e6d502dbf53f43bf

SHA1
c3a333f196e57ebc4ded7c658b3819980929ba03

SHA256
cd335852cb650223912c02f4c06de61941cc127c688de631d5d3ee2aed761799

SHA512
ab1fccaf459a54f9e7d43c46695c470a8eadabee0fd1339ae4bc678af922b3f2130db4bb51ac08be675da330770541ba584bc9b0dda79cf90e0549fc95a3bb8f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5d1af2be08c974e901ef2479c595cde0

SHA1
fbcc4b867abd7fcad2d205a29c421a20459fa799

SHA256
8bbd69e62f68d8830826744849e5acd870313cabb37365059974f1980acfa435

SHA512
c1ce8072ad7978c2a27f37c702a66baf33b487bd95576e599875e3117fe3558d6a690025281ff159b051fb1abbd252320d861015816faf98d61787361f06f5f1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ac01ef6855b0b0ef6eee35a2cb6baa50

SHA1
b70b7effb734911d8e79869b2faf908d3f14a930

SHA256
34c710a91db9297a861be90acea7c75592063b08e3afecf18101fe95936a7d22

SHA512
ad1be20f8091db4b3e6d8576a37075612657d2822aadbc698184ffe76f81f00925c85b72022eaa85945072ae125a322be76bd013447bcf12514667fe50e61079

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dff3bf55cedfd90cdab47f4de4a4decb

SHA1
f8a3d3f106719564431b3d8ece4edd49cbf91d0a

SHA256
20dca0d1b9fb4f847b4341b28c641ff76a9022fd5413f1027c1ef70fd2cf850d

SHA512
5ceea35086adde2a2122ae0a2496d297205dd32ea3f2a8f57aeea21d7cc7069ec2430a1949100942682ffcbc4ae572760e38019390a8996c52ea22b54feb8501

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6490f8aea03d5ef97b1b4f44d95b2551

SHA1
15fe9ee9220076af27414633d27251d1c5e482c2

SHA256
4da4da7ffa1f616a1b974cf46582dbc7e5a8dc2fbaf0e71c922768c1a3f55ec5

SHA512
9441b60cf3f776d8f74c97b138edc3527a7ce0a251ea5516ee388e3ba7a80a123e5f5b1579e2b6b536f1f6cb2c6de6952930e6692e84c8e64b52d867ab795d58

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
186f2103a1ca1d4c0a328287cc0cec68

SHA1
fba52d24e2bbb344d1c43b974fd9ba20eed87e45

SHA256
c7a0b6b6bb2490f729af3cb933c76cac21fd2be8a0e5aa54eaf23077a6156ae9

SHA512
766981c55b633e20f81ded406a5e603e00ee46756b8df46c1b0ebe666da413499fcba78f5546d49a90637929934aa7ceb79a37b7791f75d0de5cc92da37ea5a8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aba8a6d77c42f19d0165e56dbdad522d

SHA1
31ee4fb3241b8d925e7980cd97882426b6e77a19

SHA256
e14cd35bfd85f9dce4d68b92f61d2b102947c1cc0f000386c3ebdcf5e152baa9

SHA512
bd917d48f9ce19e67f283fc8fdba95b7c2e19b96532383625ca3ec295a81299289e65743bb7938287cb864294c23b85f01173ab945e0c51f9e11383af9cfb043

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab409C.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar416E.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit