470601ac4170789e75a6a17259571800c2eff5a80977389b2f4700da1f050b60

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
03/05/2024, 02:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0f7a52b41de61386ca69587ca634bceb_JaffaCakes118.html
Size

9KB
MD5

0f7a52b41de61386ca69587ca634bceb
SHA1

53674c242ce1dee66f6b2918293fe00fa9071971
SHA256

470601ac4170789e75a6a17259571800c2eff5a80977389b2f4700da1f050b60
SHA512

1fbf1d7b36af56ae7042ac45eea2e352a40183eb6983a505b4660ce0c9e4c2b6d189e99fe830a1a4efc0f7ae10148d2af61fd68442eacb13d6847f5270627c6e
SSDEEP

192:aHst3Oefcfdma1C6cFL397NdcAGRoOQiP8G:3fclma1ClFL397TcAmoOnh

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b07802b3029dda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{DE69EBA1-08F5-11EF-85C1-E69D59618A5A} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d100000000020000000000106600000001000020000000b6ccbb09795761569a4492ab98a6a1b0a987a072b7928b3ae4af0e45a1b68427000000000e800000000200002000000003ec289dfed1a8b9d1541ebcc97b8c7520fd05066b7a3f641274f3121703a5cf200000007e56c968e7e6f9a059969af775a9a39304b45dc49db44c406d29e77a805e18484000000096b2b7f3f5b5292a622f0e8d551a7325177eb5861936a77168d8ba31de286d4d07bddb866b6906106d3ac143f30430c346f5a25214668375777ba354f982b443	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420865623"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2888	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2888	iexplore.exe
2888	iexplore.exe
2384	IEXPLORE.EXE
2384	IEXPLORE.EXE
2384	IEXPLORE.EXE
2384	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2888 wrote to memory of 2384	2888	iexplore.exe	28
PID 2888 wrote to memory of 2384	2888	iexplore.exe	28
PID 2888 wrote to memory of 2384	2888	iexplore.exe	28
PID 2888 wrote to memory of 2384	2888	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0f7a52b41de61386ca69587ca634bceb_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2888
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2888 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2384

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
efddf7dbe82bfac948c3f532c7136f6f

SHA1
c9529d2fed37d1129245b6c40259ecd44039b911

SHA256
5e705679049a1b848dca5e7f86b89099f208444b1e46dbf3acb09d6ffbe7cd02

SHA512
8de5e2298d12fb1e0f51a5f1ef7d788b66d5a8de4f0afd4cc3d1f430f067996b6982af585d4d79231a9e57d9057a611a3852a7a871f67ef9cf4c62d7f3d43ab7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
304f71bbcc4c7ae3bac00fef2a1a7ce5

SHA1
fc940f8e9a403702bc4c333e0107422adc95cb71

SHA256
fd28e580dad395226359da80c5350e092991ac5d8dc284f031cf40d329678371

SHA512
af59e6ce136bfc3e547a04627b53abd50676d4170ecbe4a3e37f003cc2e44aaa23acd040f32bf41d5d76c333cb55a725cf1bd39dcbd3b48344fef289d19f4813

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c4a952aefd33bfac16d18d3974bec73c

SHA1
f388293d16772d05d117aed6d295e347cd92ab71

SHA256
78a60f1223cc000fc912e8f77b24faf69b0bd20d154b02bf449963b79c0a8cd3

SHA512
16056fa49b32fc2e6ceb847964df5910da24d5879d13dc126e0a5db2cda4845f416c2c0b2ad0286df7b70622ab6ad53b379ba6353781e79b7ed811d96f67373e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a095c4345f38b7d49bad6f7f69031431

SHA1
f62a210e8366d6b71bcd5c16b76849e4d028c14b

SHA256
2de599deef5fe3750ce51c0dc8f8b5152eec3e4d2fb1b641ddddba442a5b99e7

SHA512
de8e56a276652a3c90c67f7e824fb40157fbd50a9af8f49b4bf4d04cb38849f34ec92e4844c50fcddeee624a3ac1f67d8fe0906b3aff94f7b5647f6652b3ec95

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
05996c36f10ba21fc99edd61da77acf8

SHA1
29cc4515bee4a93efe71bfa6a71e70f8ecb2caba

SHA256
5f4a33ce75735e8c4eaddf8ab19cbd982be9ed15ce63f442232f4a8d54738239

SHA512
99ec3c705c15ae617f9be092b922293b0ab08b331edc0d772c7ef290f2cc3ff38f8352834b1d0ef7718f7f9ce087879a818a1adbdddeae748604033989f4fdf2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c110525b54c75bdf9c88680df2657ee6

SHA1
8d8bf59bb419966898a1d384ad0a5dcb1be8ed62

SHA256
a4e11c901429424c0713eb6a947d4af04144eb6bd5ba74122ef8a60268e181ba

SHA512
52902d26b318781decc191b99ac950c0d24b412d09444eea3ca3f8fc9e69ff733c7ed72924c1e2d895bfd6bee06c2d71f7a719dec3b601abcdf4ac893c92c8ca

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3bf822c24003e413f1a8d5747741dbee

SHA1
8271360cf2075abea5fce6934b164a0d0b505551

SHA256
ab533c5c4fca40668c9eafe563a6302d8066d7578672e6e6bd718f465b1cbe1b

SHA512
da8bff54288303fb2a96533eaa3d2fe67e09efaba98382de24af09a61a5d650da38ee33949a80440129ca9ac7c4d24db3e3821a5b371ec27b9d9e45cff6dffb8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
22e27e9dd6c0f038be5f9724e5e228af

SHA1
6b97b0e03136e578939d87784923480e27fca64d

SHA256
d5c668eab197336e77cc2a3c9e23ccd211665c7ad02993efff00bb3ed6854b30

SHA512
345e4a700b4c21007850a9674fb5d4f0e0cabef866ef36b3883ffa24f20f71bc42de3c9509abea89529419ada57b87f77490f52f5478a26d90635ea288b01170

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d8d071898d6e0c9ec0b30b4c0f942833

SHA1
95527aefc22cd2d6f897d66d9e8d4a096e274ab6

SHA256
c5b448712c17158edaea78b5928ae841d37a8f3fd55bc12a649e553760a7e78e

SHA512
f3316ef30bf11e989090468bf31803bc0fef4e51553d805596e8948211688053567e4a56a99825d25dcd19dfcdd5064cabcefa54548cf0aeceadde22231d34ea

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
55ab24a9d9921dc127d9283d7ce1ffff

SHA1
a4a0a096a3a3509e4d3704109f0a80f3866eaf47

SHA256
a09363418b1a0c8090af4f7d07366740fc11cbc9415d88e17688a879e1cb5f88

SHA512
d0e3c3c39c58e5652ec3046676ea8840835100e725bf37b3d2ae5094adfbb90457e2ed1c495ffe264f76bbb5954ebef3e3db59004122693192684ab4d0db03f9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ae89e5e67706d3e308523c1c9e82a0a5

SHA1
bac427267870b05920e001f8eb454ad34087b231

SHA256
e25bbe9a5e28379480c7ab435080a322344722febf7323d5fd8033dad88b8b41

SHA512
f5565c5fbf55fd87babc560fc108004611bc70d2d4da0c9ed60caed22031928339ed025391f0ef75ad7d06c70de3c45e4c7fb4a338d929b884a3266b675feda8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
24c152399cf31741fbf561527f801a2b

SHA1
c888645f56d425218a8e5fa733faee9c93d12dd0

SHA256
d6a3718ee640d65014da291ffa39971479ce43331db0940e90edd9324201c025

SHA512
a11d847261530ff8b66652feb0198b3ef477c987319a2b83226cccfba49a9fde0acbdce20651f29c1ef4d8ba50f647a133942938a6d1216919cfd49be5269f6f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
90935dd8902f380934e980b14b978cd6

SHA1
7a8496e2f213bb5a8ad26d4540e9b75515a5b2d0

SHA256
31ba5bb9638f4e16e90862e07fc95c5f302736abc3d4427f8a9142e0cf204907

SHA512
ee56eb96112fada9f7ada22a392480de5200e8a5adf32a693fb0be404e24884f86f45d0749fa0f92def44072b1c5e5c6327b3f2866e5542b3cb2d91def8e57f1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d2bcd327bd3c6a044e573d82c7e5721a

SHA1
ad48d58e2bad3b42166a003e65863df8e449c934

SHA256
937a278eb1bad954dbe7ebafe8fa5224fe2eb582c0538bfd6caaca8d2c45cbc8

SHA512
85bab55a65d62cb47a5c73bdb919c8c2dc19bf2fa529004f309b632be63dae2e4ec842609eef02cbb3c6e95c5b0e6faa151a330082926a8da6cace758171ac59

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
660681fd426d45ecd2cee51de58ff059

SHA1
4f5e1e5c52c5e8d028f6e9b097ab5487fa1bc1db

SHA256
9c5bd1260e5df3dfbf62abb49b89ad7eefd41ada15d518b31dd6056ec9e86223

SHA512
5d3e598d0cda597011345a7783a43d4a83478e79df3c3660aa1b7cca428dfc2819102668ca3fc3edcafb0850a2e059d8d299612abb760c1a3680c4d647d4292b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
38daff16bd704f424d5d4cb5942364c1

SHA1
94cf36c06e30f354d1a0d905394a898479f72a90

SHA256
1b23025fc27556e5c1f55abfcff37e5db0e55d5711832f5124b735d772eb1fb5

SHA512
4475fa9b377a70d02afc192b92126571f61fc7be0fb786c09748a72fd6c3923db7038f0c92e5aabe3babf047ef012211a9f9d6fea2c3d99a16ff6d5f049b8308

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2a728fc271086d67a4962b1a992b393d

SHA1
1942a3feafa1deadfbab9b8e71d580079cd2bd00

SHA256
a7894caa484c70cdf86407ce2184e0de3b78941b14332622080171a24d4c9857

SHA512
00b6a2afeb8112ec7ce4fc42b7ec2a5143dbf1ae800a82df4474c22a3c904c151605c1f547fb30225ecf1d7922eb91773f54d4879c58bf5ced5435201b03addb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d10a9a1c55ad4d3212b02787704d9496

SHA1
7c6234411904b4823cf1fcfc094b351b8d6d623f

SHA256
a5ea5418721803286e8de2871c9f4e9f582b0e29c66ab723113df67a694fd121

SHA512
e8db8d691cc3f849f59fe35486823c22ca68911ea679062f1295dcee048c27f562ef008f8db4a5d3dc62be76f70dcfbc60bbce73c3c4a0538c7cf5b17ab37657

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2C8F.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2CE0.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit