6a0e840c9613a430073b3551299bddb96e8a992e9dc83469c791423fba486270

Analysis

max time kernel
119s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
30/04/2024, 17:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0a3197c2d7dc09e046929b4d4cc19c23_JaffaCakes118.html
Size

36KB
MD5

0a3197c2d7dc09e046929b4d4cc19c23
SHA1

abdfe58f52f6a8e6b2a6076b332d5df9043f86a0
SHA256

6a0e840c9613a430073b3551299bddb96e8a992e9dc83469c791423fba486270
SHA512

601aaaef9f0f4962365ea4558b2f8396ee3c74f798f0d11e85bba2b866b7b296ee7828ecf5f565d11df1726678b9bcc2fbfd5ee432761042a45104e4c804fbe6
SSDEEP

768:o3rsQvwuawC5bAVhmd8GuMrblKrhXXKe5d5oR:o3rsQvwuar50Vkd8GuMrblKrhXXKe5dU

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0f2cbd4229bda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a96069000000000200000000001066000000010000200000000f0dd434fbea2cf3ebcf538c1b4ddfa9e0f2e650ff433937f9b3c499dcae98ce000000000e80000000020000200000009120b43299928680d8d9e2d8bbc1bb09ce5c3797194db3949a1c3eb76153fd6120000000946c3106968b70d713d2e36835eccd3a0297784ba97aa546832497ed49af33d440000000fe0e3e4b1959b42ccf8635b155237e54637e83976579f47865e80d007c0adef234ee94a28112c90b1729a48fa737f133b0e352208e61d7e9858ec71df815817b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{0002FEF1-0716-11EF-92E0-EA483E0BCDAF} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420659521"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1712	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1712	iexplore.exe
1712	iexplore.exe
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1712 wrote to memory of 2916	1712	iexplore.exe	28
PID 1712 wrote to memory of 2916	1712	iexplore.exe	28
PID 1712 wrote to memory of 2916	1712	iexplore.exe	28
PID 1712 wrote to memory of 2916	1712	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0a3197c2d7dc09e046929b4d4cc19c23_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1712
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1712 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7ecb45add5258a3e70fc7aa231dd2d85

SHA1
b099239860031299839f769af7ac381fad1dab8b

SHA256
011b75ca338165309ff136642b19ff531aa2c531237a923c1cee74b1f823b69e

SHA512
6a4631e2ef066870b5d087082e407a6a89b06c9f4805c7fb67bd9df236299160c4c3cf5a14d63f12703cb6aa7d8848e4f5d94ede1769c18d38970c72a1fae4c1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b2c64f6c61dd389bc748385bbff647e4

SHA1
6dcb1fb226431d58999a3cdbab6bdaec4dac6bdc

SHA256
51eff565e3d85de4b2ac449d8f7360feab9410fbea855f1613214e9030e4b576

SHA512
3b78ea2fd09a7857572692bb62bde2d00acc76dcc06fa1a875403e086c643a29a59409f8f1e028c7972c5e00d4636feb0d55ff6d8a60c8647e43ecab9189964d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d336dd935cca9bb0217e26714c2aceaa

SHA1
ab3b59212bfce124e863a3c63551fa38ce6f1b67

SHA256
c10b0449d1c09f1d7e2f90e66c164d5e16baf3ecde17d7a8ef72ae5c8bb87e28

SHA512
b1c5292b80226a6cc41d7076441f3ac52cd383270f731d6a5722a54850575022ae3d7350433006ba357fe7ffb855b6835242687789e8c646b40f66c87d569f40

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b7898d28284da9e5684f2b0718536ff3

SHA1
d6044f9adc87d19e9307cc7c4d3af164529f59b0

SHA256
e24fc8888d39243037d3a89e70410106c8587ea927ed91d000a28bcf988e95dd

SHA512
1bbfe06fe2cfa585111cb3c97757494c8d8c45f32d2caf81d4fa6e82e0f7c92ebc0adba7beacc6b9a4f0ca567fd7018f7e3ed3c8b52c0c22bb135a1d20b64b8b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2f6b33319dc17cce6948ddfde97e2d9f

SHA1
99f38b614e57fa56d593980bec373938afa1a2ae

SHA256
2d1169032e587f78e9593a54e00393039523709cac05418b7b20552474974992

SHA512
2a8e45fd3dd630b7418f13f587648a094221f9ecb474e265b356cfdc28befce6bafb7dc11a1df97763d6e8146acb893d6c534b4f0484a37a461ecddaefed7684

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
784d5079daca5329ae2277d2b8600442

SHA1
4bd9934828e3c8226d80c25b365f71d0bc259421

SHA256
05a50cbd6da7312335e3c2b777d128b866df0e3e61f6d0239e5071bc3f7905d6

SHA512
74f149e198ae7e0310713b5fe7d6bcedc8436ccae968097230f4e8c259edca9e49d402dc15b1f6c9fb3d3fbd73f31da178ee5a80c457dc8c446732a3f6c6a46c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
315d06cf1aed1bdbdfbac09ee7bb3378

SHA1
97a8d3fbca8d3c66682247de16820030be5c755e

SHA256
ed4a1bf9316a2c9ff0e90a8adcea6657bd0294fc7012f1725581636d12a78646

SHA512
1beab2e7eea96a11bdbdd7d3f6d2a571f7a8e0c9ce103c68a96c193a3cf273cbc357f53328d92bb5a0a82237b60bc4e475e30c5cd42095a7415517ace8948e33

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
36c891ce9bb1a78370573ea57a867e81

SHA1
4d3a05833e67fee249c80b49bcd21cc65722f8c8

SHA256
a0fb63703694cd52d5390b5359cb67e4b6f80bc77281450dc78fe6eb5c2cb6ca

SHA512
353c556a8b5105389abd3bca162d7614f962c1adc9168b1d05909b9f04e954d4d4e73049a0224be03bf93b5547e2a8d9861d3caa017f3f0dd3220c5f9c184a9a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
91c588aa5a90fb4a88c98ecb33eba641

SHA1
7bf29b3cbf171229125eee4c410c6e45168898d0

SHA256
bb69a5c9ba410e4e036d6d031b5e0027ecec5576e0315e69a9f82ea2096c2d69

SHA512
6caa9a4ddde91e164942e57e91dfedeab552c31f35630e8e806cd8cb9d549f4c265e8afc2b8057e98e368587dc31e040e164405bc886674ebafbcb26d62b6b70

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
76a540ea8a2559873d0dd8a780a34052

SHA1
00a897b3521519e2b9494a250abdf35f63a2b7db

SHA256
c415dd2d8a810f2201f685c248afa3d20fb4e344da503964d20b26037d8096d8

SHA512
e831084a1a56dc838ffc1b34c7c9d94b420899cfeb7d7d3cb960cf0158a9280ed2c795638e6ccdea1ab62058ee247a4093e5580e77d026769a30ac0bf8c21590

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
81d92bfbad921864bc41adc6ccd47b96

SHA1
199f08db1f7fcc6ff32252af99f2b26c6548999c

SHA256
8e05b24db4ffac98d3c46ededb5f6fd82ff3129e46700ceb435cee721e592193

SHA512
2cd8c2dfcbe119f31819e9202d148985adb38f96f480a37038fccfc20159ccd548da703dc1761cd3a281db5cf0bc3f6b97b5dcbc0fc73110bfdb1864f0eaea28

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1148ec052764d3963a7a85b589d31019

SHA1
1299a0e0a3d517d451e93eeae57305ac7ba29a1a

SHA256
426e9959bf8e6545531d49b8e66e092eafc651f2b15fdfc15f600e578d3d5394

SHA512
d92493356795da032fcbeddad586a4e313fd28852c45ce1765b58ffe8162b5ec4fa5794a95b66a1072adfdb207ad581d3fee91df563f4fc5ac59b47b0ca7e86c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aa4c4809730f7f12fad102137c75ea50

SHA1
1f9752285573f5e10a2cf670ec951a2368a393ff

SHA256
7587eac9ab216b9ec47d302bb9bafb120252887bfc82e5fec51fbf4b317d890d

SHA512
ee01c45408c0e9d0caf27ef4fadf6a2a292e4fb2d0be34f7af35e30d75d8acce982388fdf682d2fbb09d16753bcbbd31628fa3a35afc6c8ae7e8d9d105911222

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7d00fd80df1db40bba3ec2ac63027009

SHA1
aba8c5796f6091987ab7749b7ddfce405c74d071

SHA256
169acae2aad99b7dbfad399163884e4873394c72a46c1d8ab992b4f11ef50f5a

SHA512
9465a74f09ac1e3bf4dea8ca3aff3a180ffb875d59d53f30c6505ad022f8d9c4871d06ad3e10f7e6fa87148c44b33d7a9c47008829a29e170a82541453df9982

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
50e0731301c335c04b537373df9a8602

SHA1
204891340471ed9cb560d5712d715a0623d29dc6

SHA256
fb20d8958bc01edf48210d5e19b68d1a0721d8d1996475ad452fdbc2407bdff9

SHA512
a6c6ae69679adf61dc04ee8ac4d3db4d938961c16ae362687b5352eb32d8037f0b7a8b087a06717d41ca3f523bbdde8c0e93b411341c9eb784ec55546d6149c9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2A9A.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar30CB.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit