3dda6acb5dfefacb37840b3ed9baaee31c11ecf4d46fb49b820b98e092e6ea74

Analysis

max time kernel
117s
max time network
149s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
01-05-2024 17:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0c64578e1ff23bce94c31440cfe670ff_JaffaCakes118.html
Size

6KB
MD5

0c64578e1ff23bce94c31440cfe670ff
SHA1

f75a47593b7d3501e09d93376c27666779e67ebb
SHA256

3dda6acb5dfefacb37840b3ed9baaee31c11ecf4d46fb49b820b98e092e6ea74
SHA512

7bcffa87082894e30d806b525c76a0a2b8b9586362dc86b992d1850f7a661103191338ebac15a7d7d3fcf5fb63e50fd4245f048f847dff61efb3e13d1f7ffbbc
SSDEEP

192:/E2575pa6VvzLsQ/nUY1IkmLvAvi7vcdr7097l:BlxVvzqCIB4iDKA9p

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{83D737E1-07DF-11EF-9CF3-F62AD7DF13FC} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b04dd158ec9bda01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420746090"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d100000000020000000000106600000001000020000000314eb82913ad0d15f2ab7e9ccadeb9820ce1b941ec22ef5ebe050ce691a05880000000000e8000000002000020000000307dd4bab3039348993ca2728c256c7dddc581acfcf7622cf2bbeeec8edfd89020000000d6fca8a39d3e4027780438f3d539ae0637554c1f0d98d809dd62cdd525c9e0e0400000007edd5607552a1b2b4d8fe67f853e171d11d213cfa8d2172bacf12e9717411a3e2753b550c86953bcd316e1baa7af8945a95a9c49156d88c82dca3421f5365716	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2036	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2036	iexplore.exe
2036	iexplore.exe
1060	IEXPLORE.EXE
1060	IEXPLORE.EXE
1060	IEXPLORE.EXE
1060	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 1060	2036	iexplore.exe	28
PID 2036 wrote to memory of 1060	2036	iexplore.exe	28
PID 2036 wrote to memory of 1060	2036	iexplore.exe	28
PID 2036 wrote to memory of 1060	2036	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0c64578e1ff23bce94c31440cfe670ff_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1060

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9e7cc602a2f840503ad0fdf38ce56c12

SHA1
bcf0bfaffdb7693b533c61df549c3b92df67b94f

SHA256
1c9728dc661f68566c87987f39d1f696b41f9b0c3f8e81fce8efe98347efea33

SHA512
74d16a4ad11aeccf0ea93342167ef2140133fa5a0a37909e2ddafb69758f35869f077d145b6f5543d806e711aeac69ce6f635bdf0bce88356725b69e41a99c64

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
67f4cea3b10cf35da94a211f6bde8994

SHA1
cdc5312da3262fd3867ee669ec23592a4a3239cc

SHA256
e0ec82a25909267423ddc678e7f0577c5bc1543c61426ea616626f4c081425bf

SHA512
ace5a3bc43f6c11ec7bf446d74bf24a582f020d5dc6607b0445c6b67c29e24dfa8ded2112a733fe8e10ddf980ef69b494371f1c0ad8ecc1268750f5b53919c6b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3081eaa3f328f5a06503d05c41309556

SHA1
c806caaeb5f7cfa5190a7935d8ee0082d7d195a7

SHA256
ebc0478f6865ca138cbbc7ae079ed070a2768aeae2869990bde712be889c9420

SHA512
87bc10b88835537ecebb0b98c53dfa27e978f8a4e2b5be7989b48a7ac7b317bf2d34f051d0794c299d641501e9cb2c56e9c37664b22acf69182e26f5cf43078c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8b0c35ab516843d8d49cee06f79e8a31

SHA1
0eb2a1cd4f2d2207c8e48c573cbfea3de38d4c26

SHA256
6cf41e7ab3b42b0909de3ab5c5cbea610fb550e408281bc3c4cb2f05e63a38f7

SHA512
f8a06182ed888a144a7453856c9a189bcbb5278c27cd8caa2d6e3781c7e50d124684eed8fd92c4ab8706bd8ba36a9618714d0e949f2d8f2e13b087faee556aef

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4eaf982a80cea15eceee9ceab3a7635b

SHA1
2e726d5ae8bc46aa1ae8c1f70b0950b77bd0df36

SHA256
ce723782988a82fb743bad0429e0d098c9edcb440c01c6176f2b51bd2384d70d

SHA512
4fbb974267e192f2703dc3996a4a49bd39dbe7bd96947fd5fb6f6ce2f969178901d7b0e881203116ede24fdb32f06247e7be2737e54b6e07ac3ccc55d3cf6868

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1e65ed7b8ab298c912bfc859abec1839

SHA1
88bafc56f1218b71c1432c2bfc0f3969b4aadeb8

SHA256
1166c6aba4364f181d0d1afc9b5d43d910e123d392c345cee64813174e5be199

SHA512
d4d7826b69670d53ce371a3f24e1cf3417c6866698769f0b8fde43226e7922adf1047e030c9cfd14b916d3f04a76eb20f7c416b874bbc618c4afa2a8b914ff3d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
10db7e5dfc57866f60fce2901af4477b

SHA1
8453ea3b7e71fbe366f2c4f644293bc7b6527674

SHA256
f088406d9bba9e77e41580551b2761b34bc2a533859bc69dab48698cf641fb2b

SHA512
5f53c2c9848d047e52d333c067e9b0f3a6010270d2e605d6a1425b3b1f278c0174b2d86846b1bc8cec3f2c9be98f79961161764f16be20609f7f55529cbccd27

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2ca5871e24c4640778b6376140855df8

SHA1
431f014c3da8bb705e308e9ed86711b81fd1acb6

SHA256
0750f7a2a4a6efa381c123340268befb2292f9c31fb56e5b8eb8a38089ce9915

SHA512
763e1e42c7f4081bd40c3788e9528981be194792bc05ef46a8014ae336e8a0635d40bcdf42188a072714ad379cee60f977d535ea806226d6ffbf7ae6c9a28d41

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
823f19229173d57544fb67b13368b868

SHA1
7d4b3e697e75a0f79e1750a1f342d743c2563266

SHA256
f8bb5baca01c92f6e4b44c290d1ae864b62d45d9b4f56d2a72e4c8de7dfd2289

SHA512
3ca4acbb14c2a686de788edab8f974f30c893bed571513efb061578125249b6ca58683aadbbe9108c39a18263e3ea56c3cb99b635eb38568fd2445a725c253f2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5cf8f9919ad671db6639d1507bd7add6

SHA1
2a5f9960b3f1da6a0ba4e22f368d1310c5d8a3e7

SHA256
8320eb3f4968ef2558bfdab58df742dbd43d82ea326c0d72ab2258c5be1d6acf

SHA512
a71b3a5cfd48fad4dc229f78b80bce7b1ccdb145e9df1e48b3c4ba669e092e160a882abb1e46eb3dbb00fd131bd81b92e2e7b0f03a79e293ea957c5c77bf9de5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
56e118649f88b54baffb06d713c046af

SHA1
0d68f5814d0c92d6d4c0b4a6904c693e68442098

SHA256
2b4ee16cc1d29d9cbd828029746c0397f07885e3ea7b773db699d40c5c3a0bf6

SHA512
31d1ce07124c844fbca6cfb6c421f6f6bb6ab14897919e3f9f3ee50e41629410f514abf7b1d9e578769453964f96af1b265f4e334a04e6393115c2697b5482b5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9b226cbd035b6083c747cac9824f46c6

SHA1
7ceeea079909ddfd7c3f8cc1b164bef462219ec1

SHA256
5ed1947582ef59a97e880c3f88aa37085a6215885ecae06885c6a2e550710ec9

SHA512
0339e8c8c13c0ecfaedc1689c6b9ba6a363346993e660839c8b6e2af2d1e17be6a91ca206b557f7e73f5f702caf142098191c4d9d9fe4c09e314758659632119

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c15544b0f75ef2e49bf9b403954c4917

SHA1
26b0ce61e9c128e449a6f5edeb2bc9b9d908b1d4

SHA256
635aac65c53c112cc753fe4caf0c218c576066aeed669505e2a7bf53659b202c

SHA512
6185df3bdee80eb8207039bbd1749d094a57f2e25f3b673fcd4817d9e594f973cc86fe04111d613ddddb157ad822f843be0d9b5c1d117deac3582ba5c4b697a1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0fcba13d0b11d4cafe00f1a3959ef1e7

SHA1
70fd8bae7c8f1cf5afb765b39cbeb53110532e12

SHA256
8a8049fbba4e4f0b3ef7c1854851e5c06e4c4bdafa0783cda574cd7e01220d8c

SHA512
a849035a3aa638c4e241735075d01dd6b07b83fbc24de588759c660198abbe17d45b822dcaf462b6a55ec12fd10a7c94284a45139ca0514cfcd57fd607928855

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1682664bd72428558be8f25d9507d537

SHA1
ed1e3039e4cd2866aac41bba84c9e15ed93277a8

SHA256
e0af08790e17b8b1ab13b420a1ceec4a6601832a4654e4318a1190c0cd1c353e

SHA512
92ac9c1df43a361dba2b77eaf0220a0d38c0f1a625f63570d4902d6f32e73630bf71401011900bf04a03a4c12b3144dd76d81c86148e5318d1b78c01abd29fdb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fe4f8d6dc8b1bdcedf9b74f19005cce1

SHA1
aae06a04150e356fc454c2ab9ae74e5423c2324b

SHA256
f30850ae50f13532559287da5e9e978be41d4494aa102fa6114ab15707d697bb

SHA512
ce3d2201c788714b19ced0146983adf1f480255ce4b06aae78eba9f5f59ae33ba036ca189ee8188e22906db755fe673b2d9ee4aee56673b78e792747095347a4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ef424d900dc07671a639e78ef985bd88

SHA1
78473c19b0b8d854abae955bc01de7ae195cde3d

SHA256
3b097244c12fd76fbd44f632a0d3caec4de5ddc59e278916bc33a01a776028a0

SHA512
b76b27e8cf1baa5d4afd45b3a54bc86c1856836e4a24f21a9933adb71f493ede123dafde95801fadd57e4e660a85d21e4559f67d310a138420b8c97d8c5fd761

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
56289ebc34671a39464211e4f2ccde66

SHA1
8c0b02d73374ee252e32ca9e9be351ddc14825c7

SHA256
3e51550b6d6619d3132c652fc5e36a33ce7314ad0db035ec44166b07882dcd55

SHA512
17c3bbe122cdfe41e390f2237e63c151e3e2e26068388b2d4dd951f464a4213c0b75dfb4eadb349318e6ed13f08850a03c3a89344158be8d04cf67202b65c2a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab44EE.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar44EF.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit