0c5f97293ac531aa85b400d49fdb8d49b129b34bc1e7cc3ab36ef349155eaccb

Analysis

max time kernel
117s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04/05/2024, 13:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

12f4eba0074795368b507f799581f996_JaffaCakes118.html
Size

15KB
MD5

12f4eba0074795368b507f799581f996
SHA1

c1dbd733fa0f9e65ca7a76ca2290b652921b7eff
SHA256

0c5f97293ac531aa85b400d49fdb8d49b129b34bc1e7cc3ab36ef349155eaccb
SHA512

0f08c0c7fd46fd7a1b5ea65a658734e75a7dbde77af658c1a762c552cfb24fa727298fdfa67496cd19859cf992eff27aaaf05d1ee7f401c4c89a0bfbc933cf5e
SSDEEP

384:Od0lpRTgPKsKJcM/U1VW2f8++/K+NSGgs+:zTgPKsKPw0/VSR9

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002dcc56832ee45b40af0f973e997a3e3e00000000020000000000106600000001000020000000596b92138f8ee0897e2e490fd517133de4ba2884f11866327d8b4cd20e7b7485000000000e8000000002000020000000a26b58bd27615bb01ccef26b98d15d077f97010f41a0a9b03310f35399aaf4d52000000073ca3102a2acb94a3ce08588323591228bf99a8f4d8474b9c27cf1e18c8b2b7b400000003f79dd7f53073b1b4a88b5342b888a027b72e74b367a0120bf5012b2b66caecb6e46b288bca3deeaf39ae1b1a4b23ba54dfa8bc7a00b6aa5fdae3e83d1830a55	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 10e225c8279eda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420991500"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{F25B1E61-0A1A-11EF-8303-EAAAC4CFEF2E} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1948	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1948	iexplore.exe
1948	iexplore.exe
2336	IEXPLORE.EXE
2336	IEXPLORE.EXE
2336	IEXPLORE.EXE
2336	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1948 wrote to memory of 2336	1948	iexplore.exe	28
PID 1948 wrote to memory of 2336	1948	iexplore.exe	28
PID 1948 wrote to memory of 2336	1948	iexplore.exe	28
PID 1948 wrote to memory of 2336	1948	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\12f4eba0074795368b507f799581f996_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1948
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1948 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2336

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4956a69ca3a6e7787b20c5a06f672be6

SHA1
de69d2b8b427d5a5874bf2f4bc01d52c454b8778

SHA256
410c99d68a4a753cf9101f35617a2732d0e9cdbf4fbeec1d54d74af7a472634d

SHA512
1fcfbb337277bb03d1df061be8e48e82a3df95ef02d80f410a99b9efda7809a8f9690656ca9f94cfe1009c865b2b81c5cc61834b771563a0aa9c3ec3bccdf0f8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d0da46bf922b5ea4389ae4f5e7367a7b

SHA1
21355a39e1d287964d9aa615cf13ab79c69c78fd

SHA256
251897e69ba7eac2a45605744d91bd1f9f4826f1d69347ddbbd8332ea8faf31b

SHA512
b47176a6cbd0de8fb5bc66012a874655e55dee1980ccfc10c25a5f02544d23c77a753000fe869f80de65875016a58b13fca331f2102de24929cb0421e461315f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
17797513211788874281820a6be62534

SHA1
a8540d832e0dd69d0808cbbcac8a79239db55ffa

SHA256
153b4e4b384f79694eabda4c402ef6aaa7f4809bf26b25e2b77db9928253434a

SHA512
f68400a94f90559620d885388dfdb426227e83c9745dc043523f21fcb6d656aca615657d48ce2242efba2d03135a1a1417221adf9c31050dbed12709c63d394a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
74e828ca807c592eeaebc9d619403672

SHA1
f04c6ad9a4d8f4b6c518ae0cd8fd478be9ae404f

SHA256
814fbd4bc0faec1a19012697edb392c06c1001261aac64d4878f5742c8ab88c4

SHA512
67372b849543d47300a8967f76721afcfdc79994674e5468e674f44057d080007bb7c7bf1e6d9d7972e2401c2ee3c63eff59b3128b6fdf1af4f4dd856f441472

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
52b0f999a3f30221256db9fb5e7ed363

SHA1
33d507982ac7e973ef81b0c4fb511ca5bd9f7a7e

SHA256
734e402c885da063e1955696cc9de3a366bc8b65dd62a2b2cebcfd3a13aed942

SHA512
5a43cbf483b716ab974410e9cd9a380aceae7211fd9b63efd2eae9182b4ebc572e7bb8b31f2989bef1ba8f3a58560cd7ed9402d6e3906521eb9b8631caa7f59e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c027cdf8c6f60a087c891990809502f4

SHA1
da43cbb334843ba1af099dcfde5b9ecc21197f54

SHA256
1a6a46e4db87e08a90169fc90eb50469f00736ba967296d5a6d91d769d4eae39

SHA512
193d5479a1c8bda56721b8ddc0a9f4d4f4aae5c2fef0aae1f6489ab0bad5d79743913d62d6355890f3b17357e16b90cbad004988190d967e3a14915ffddeec20

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
37c278834601f765fba79f41c0e379bb

SHA1
f515ede5ae8c76a3f6b91216ac0f8ff8c02de047

SHA256
5c5600766a7796dbba3e4e50ddfb3a9e072850f100df152e25547f5044c247fa

SHA512
4c16164ab04724d1c661445b0b5e92c5dc9909015da214341d3faf820d2d94b61becb0bb483e22b88bfd4f7c59b578883a3602c27637041a7e85f0775b654c24

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4b0b8e53df0747884b529158d77cb848

SHA1
c5a5fa9c402c4e33ab760f3ff0c9c2ee058cff7b

SHA256
40e8c45a33429c7060560cc351ffe3275c2d29de71bd12d831f971cc47fa29ec

SHA512
71e0d164a9fce7372252f127d5c929f69cdfe71f685d94a1244e2265380e157031a555ab68a9267ea4b0cd4f1faa0344689cc42c742d7659f3c3f542a3d8ee4c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
892e6bdf4fc9a041f823752e514b63f5

SHA1
1ef981b9095b50c386aec33b894ce0afb53f7cb1

SHA256
8697b16eb732ee8beaf9fd2930b6ef2eecdd9cba0acef2a7433010969bac9c9c

SHA512
215a0544c393b57077a35937db1bcd524f45dd728d0140ea719b7ae37a61c7d06ff84277de20fbe17becbc4fdf2ac58648b5ee280d08be507bc4fc7bf96b6fe4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
380cf4a471ea58e6d9721875a7efefdb

SHA1
dc5ee42951c8dd1f4478647d3f31ed5caabf3489

SHA256
03fa282d202518668eff12d5584e4df5f3057d11177d809bbf34e49efb1126ba

SHA512
71faaf8604648142c979fa2c9bbd311a747aba01790a08b7a815dade049ae8ee8bfce8c3ac8ba3e65c0082fc9a1bbb9a766bf15ade22161e1d3665eff5bb8ef6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
20d05c55a65d0ff6a85c35e30a5da5a2

SHA1
6203584998e42b8d9df86113e4760bb7603c4170

SHA256
9329f8e3192b92051be8e37ed97908c233d6c26622ab0942c764fa4c946cd1dc

SHA512
bd4487bb6eced33c474855a4de40ee10dbdbeef16896aeb05cdadb97a3cc83d8a26f3a219c32fd4e641bfb791744196660b3e069f6976ba996b3f93143148e48

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6db21f6fba8565fc264d3778699af4c2

SHA1
0998cff7b613bb72b3db794936e4294b494a6b83

SHA256
03591a0b5110e053c082f7555d8100892f561c29b826dd9214c492da8a0496e1

SHA512
38cc776e438b9773bcc7d696e4122b93dea93d82e97bdea4ac8ea5d081b08b44f101fcc089659dbe204cc702838de336d6c013e31abcb493d7215c8819678095

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c85c7c6e3a1c101efc2912b6a11c0794

SHA1
c0e47829cd7fb81053d8e701520ecf779b379a8e

SHA256
c2500956007b1409a496ed40c45ad2d6c3add69747b10c6565fd28501d4a8fa1

SHA512
8e0d157b66791c144ac05d6a91820cf8d71c3ba43035851db728aeac1964250f7956021225bc1884aa6e563c393f4856542dd2093eefe2aa02e7e550eda66ba9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7865b35738a8a59850135ed99368caab

SHA1
a4d908110c29210c3394d6bddae13604917d3b0e

SHA256
946f73d56db9592903a19e47ec8d5ceb6d29cec7929eb333557c06932820469d

SHA512
f87729c56f233d4b7400b4644e53e030d9b1fc47d7ae0bbd6c9b8f13d9fedc59da9d3c170e0e2ae588f5c0f4038d88afc699396578771bfed6587de3ea9568b3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c907dd6a89a86f31cea3baf266af24bf

SHA1
6ee88ad93f969ff3a8563a2d44ed088ce6cb2833

SHA256
83527373872415e962a64ee7ef181d075f069df8d08239f8552c9fd2a90bdcfa

SHA512
e572804a70afe0acf38681d7d161aa776d224f8c11cebce80467f3da974274c1cb5fc910ea7ad2db1acfff784ce82fcc68ab13f9831874301f5652659eb25574

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
da799ec8b32ff75ae631ed982ea4d7ff

SHA1
33fc94a780275b47c8cf4f6255b7193fe12802b0

SHA256
1239ed3c103d7db53fda090333e9de266d005d651e1bea6211eb70790f478635

SHA512
ae66dab1e805cab9581766c0ec33bc8a6fa42be70dd2eb6e205938d1cb2fbe48824c54768e41031b579b0c81a1c5ee48538fa221527311e79c9261a6fa8401f0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6c9f5aa609c00c15ea948fe6fe9189cd

SHA1
515c88d279bf997a1f71f79f12793d6d51d613c0

SHA256
7249fbc0d41f92730474a4d79a359c3b5a4b9051660465757f3bdbd747559173

SHA512
9968001623bad853340e52de86e5818e781f84dc8ef955ca13f6ab0446494311ad242651968509c8d703f8a92fd1da51ca3e41e5f5ceecf3537ed7ce63f84da5

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab47F9.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar48EE.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit