ddb65c7c11dec9bfdb4be3625052fd32dae04e6e2b6522cab1608be6a7150e09

Analysis

max time kernel
144s
max time network
145s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
27/04/2024, 09:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

02ecd08f35e99730459c62e1476d0718_JaffaCakes118.html
Size

120KB
MD5

02ecd08f35e99730459c62e1476d0718
SHA1

34deef5ce9f488b66fe819294bce82edf7c32d3f
SHA256

ddb65c7c11dec9bfdb4be3625052fd32dae04e6e2b6522cab1608be6a7150e09
SHA512

4a130e027c7c90375293c58daba465b43cf068fcebced1b2fd6c51800a00821c16e36360c442bc95be00364c5b3a55db5d2e3a7c1c709921fe99499fb6b14c0a
SSDEEP

1536:Sn1Sbii3Br3XMgK3/EOyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXu:Sc3Br3XmyfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420371537"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{7B9246D1-0477-11EF-A499-62A279F6AF31} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70cf0c518498da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc2330000000002000000000010660000000100002000000030e8f41765e585b088e4d7d330e117a386e2ca65d204fdaad7d6cb29599331c4000000000e80000000020000200000005221ac69c15d73a8775195a2e841fb11e1e3ce08eaa734d9184545888d12dca3200000000857bafe21f3c78d9fe336ff8130b3d3f8041e5f26f4d3cd2c0f987325032e5d40000000830d40855e954870480bee7b42ea638e2cea516aa932c2d9eddea3a33403ccefbc55fc2959d0062a03189f88dbe379e0b6a759d9f1c6e396694e0db21b280bd2	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2000	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2000	iexplore.exe
2000	iexplore.exe
2516	IEXPLORE.EXE
2516	IEXPLORE.EXE
2516	IEXPLORE.EXE
2516	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2000 wrote to memory of 2516	2000	iexplore.exe	28
PID 2000 wrote to memory of 2516	2000	iexplore.exe	28
PID 2000 wrote to memory of 2516	2000	iexplore.exe	28
PID 2000 wrote to memory of 2516	2000	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\02ecd08f35e99730459c62e1476d0718_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2000
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2000 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2516

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aa28a4f76a9b94e7784c761b3f4e441a

SHA1
530ee9ceae7328721b23d2f72b6a6af89233c122

SHA256
67439334be114052de506d72a29db75966b3934f58d29dab21dde537ff44eab8

SHA512
190ec893f7a3b6d6a0a7234de3db83d1492d3fdf9edd75d190771201fc2bedc6769a4f16212177efb0a88c12e5ecd5f999fb479cc7567f0c571ebac6b2a983a7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2282faca6e594b1b1f88420b5cda58a4

SHA1
d031d21094964a237bffd3f169c6c68d54c3c0ff

SHA256
4ec1bb4a6f1d5bde557550b91db66bf44ff386af36d3ac9d4d47ed5e8ad32440

SHA512
e80001557beeed7059d05bd50cb51c2ab1023b7d10764be95d5989373651e6118d727c1605f2d22c37e567c218aca7681131600be0bbb20f64de7f92b33cae75

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fc7dc7e469e05c51eb0b06f9cacce56c

SHA1
7b95c5d0709c83f216c0620373ed520607fede37

SHA256
a3915af6bb65f7bb1ac55eeba978a28131eef73e918eefa29d023d90b8e87b38

SHA512
8c4f2725c82173516b39828d8031a8664bbcd20759799dbdbc4dc2e95bbb663efbb1ee1159b8899b842ca30a9456bb2a7b21ca7e16b1bd65f693e5b60aa707d6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0aa5d9161a1e9133b9018cf8d9cabbec

SHA1
9f0538979dc2827edd53c750e76d8d80189753d4

SHA256
61428f3ded5ca41657f1b9b2c3ae48cca5da13c3e0c57a7f51f6cb8c412d3112

SHA512
3e9797f760875a339687cbf47d9930b4b6280426ff5c1a05dd098e9ed0c32e35b49de649f54166610aad7066098d3891afdcd49a61a7cf663996776f931c1574

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7d3d6d3fa835a97a3eb20e2c79d240da

SHA1
31918f228292989354ddd24cfa8a57bfc53d649f

SHA256
bba0ea12949924818319676a88f857b68d4ba08b1c0e0af52129e27eea8639d0

SHA512
3dd36ca4350475b98059aaeb4fd89f5b1dac0519f4a60dfe7361d201141e64854c0bae217cc5cdd04e5314e0c9417b2917e22109491d5d8def9b35ad0dccddae

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9eecb64f11af32cd264eb89167c6d60b

SHA1
ebf10453476160e62c5331e37b0ecb4538f0bc98

SHA256
94323fbe69b999462f081773d477815c7bd6c19fa4e8755d5fdc643ba435a396

SHA512
5beb5cb4b076c450902c79d0647df40cff84fc58559ee7f6819ad926fa87b80c20a1735b2d0edd232386272412bc3cd326156464244de022b251989d5cc0be5f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1c8a9b71d43a252f6b63001a6627f8e7

SHA1
68f601dc5eb66e7c36b8fb9e772736b97e4b9995

SHA256
727e66b84fdc4c8d89dfc7a164fe4167fa753ec1a1983e07b5c16448b8306dd9

SHA512
d630a4e18535724578a6bb75234c1d84d269b6533cbbe7de62d0ddace2b42f000b631308893a36f4f24f584b79d7320c8c352377b26051b968b412614fd4b605

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4daf668d7a05dfcedee1d18a35bbba9f

SHA1
cf1e0e0ff75aadd1f84e465e7f7c251cefc314a8

SHA256
d8ad27ed1d80520fb9ef71b61ea8034808247618dbaf4b82f1dcace4a31d2fc8

SHA512
0749adfc04c22c579b4dbd13aae281da90245ba0b406c39671bf99d7c4a065ed3934bfdc2b940519d81e1733c30bab5ba23a0e468b298c3ebc61fca73bc9a355

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a52eedba4fc0c416631613d34de6213e

SHA1
818890df2ef6ceb2e83455ce7922061c90b9e571

SHA256
6e9dc35ec4d15d86a460187676a126b3f42be421315deb47d2cb8077dadc0857

SHA512
dfa40da5fbf6eb494514b9ad5e762b4ca81ba781ce26261ab02a34f77fc248907b8ff0e4ffd9984c02386a1494fa0835791255d40efbbac8bc77f09ed6855b39

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c25593bd016ff5c79c2cffdf14f964e7

SHA1
366e834b62c9e67707e4df5796c41677d75bc818

SHA256
83537fff2d657d41e8753b41a3e9c0980cc15ee8c0e452fe4d95b9913557851c

SHA512
eb87551fa3c2774768014692465b7c3666ba217fab10b9717d1482028372184dd8a5d16fc78644707c8c75781ab89c51f85c1436d92af936decb621890d6ca26

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d1b1e8aa9600b4d91c7255f7f882086d

SHA1
4428d6387063d1f270132b4c50b73c1fac572602

SHA256
a919d08420e8bd3ce0572c98d06b369f9e77b8e244887c05f22c130cee90e22a

SHA512
3962b05de6cb26b0972607a096429a81dc66ef485104abe430153b093f2b1bcc0a4d08058a15138b1619261808e66651502a30aa78720bf05672885f86a5ee84

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
52f8ddb80bf82f88e6a570ddc07f68ca

SHA1
da2d47597f4cd32263e73c4fa43d35019ccb5526

SHA256
8a2478eb2e24171417294907ffc73c00b895a672664ce6136c32af58edea43be

SHA512
08b6b424cd9716836e5197e6aaef77c4926608bcadec243154a2a0741d028f6da20a13924603d34b9014dd1fd764c6e95760c4a3ee62978d17ce2fcb7e62cd14

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b2b0d70037d53beb26bc36f15c70f3b4

SHA1
c2bf08607abcd956fc5a5a7ddaa5e8735f2ed73b

SHA256
78d2343b85783f205454ccfbec5f3d2044605b8cc4477523ab1e0f61bbf08298

SHA512
006b20ddcaed612a3ef085ea3b5b0904fb8ede799ab4e3c2b24c1321e1d4b98d37ef158f2ef0da49f9042f5e6ab7ec32e9cdee393cfd5884255e954af75a71c3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d4e9c933aded15f639cdf42f9e07ea06

SHA1
f4eb146128c1e2bc4ae5ae665f63d0729b2330f0

SHA256
d47d177ffc8580eebbcef0201bc4806e9e4fc3b0db0e19b648c53db15769f3fe

SHA512
e8060bb6c59dac77ef335b5e94ef76f571ad0f53b088270bc580562b2109a52937786d5b54ba11f89f4b7f81323a972ca9f898d211dd401481adc5e7c4f3d512

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
af12e7bd83ef5dbbec3751e925b37c99

SHA1
e9f0418a728cc22a0c7aea374d5e0582a4306206

SHA256
b42f10facc1cb420b5afbde8981b4b33f0ea545f254e4da58266c0683eb0474a

SHA512
5ac3e50a6311a8c85287f26aa3dd48af0878fb03103ff3e555e5b7f3cd75febe4b1f4ccc7e28039fdf53cae1924729bde146c701e2539378d4b5f54be5109c71

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2E35.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2F16.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit