36e00d78355c202c0af09df694343fd440e0b60eea84fec3a7453ab8f0d57002

Analysis

max time kernel
144s
max time network
144s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05/05/2024, 01:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

155391949d8212ca2075731192f70566_JaffaCakes118.html
Size

201KB
MD5

155391949d8212ca2075731192f70566
SHA1

c1df645c3d8dcaeee9ebbef57f6c2129da7d71b0
SHA256

36e00d78355c202c0af09df694343fd440e0b60eea84fec3a7453ab8f0d57002
SHA512

ffb765807c5c1d21780e08ff2b6dc3aa082f2f7e4c3e63e6fe6daa8a9c0c0269d1097e4cee76a4a933e9e06036f82db576faff67709a0249308a681921770fbd
SSDEEP

1536:kaKkisd2JhTzkPybManI4mBX6YOMuvenM89bSFm34/rGvM:dK2BXWE8

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0650dfe899eda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421033640"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{104C4B81-0A7D-11EF-A293-4AADDC6219DF} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a9606900000000020000000000106600000001000020000000d7294d01ff38a73f287be096f84dee00489d515b8fbf2b1d6aee8935885c6054000000000e80000000020000200000005beba3dd1c98f01ad3c39ae15fd17de6993ef7611e1b07b25bf46ae92d6e71922000000086fead4a230f1dba1a3145cccc5b5ade57f68da34fc1aae7f14b57f38933958d400000004bca91c9d1a4ca9145f911a0f3b9d7f8bdc86a0e0dc5b8a194223228cd163126dcd835e050f8c34c492cd22d5dccbcc95cfbff90a7c65dc896fb4d542dd29e2b	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2172	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2172	iexplore.exe
2172	iexplore.exe
2072	IEXPLORE.EXE
2072	IEXPLORE.EXE
2072	IEXPLORE.EXE
2072	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2172 wrote to memory of 2072	2172	iexplore.exe	28
PID 2172 wrote to memory of 2072	2172	iexplore.exe	28
PID 2172 wrote to memory of 2072	2172	iexplore.exe	28
PID 2172 wrote to memory of 2072	2172	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\155391949d8212ca2075731192f70566_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2172
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2072

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
90ff8d6039f293d31ca7ed156fe224a8

SHA1
fd5c04d68edb0548e7d63174e88c8a4d6f0b5ed5

SHA256
9c43b929d2eb31c2a5087582fd44eed0f1ad674a675bbac9d83e84bd4bfd73e1

SHA512
d4b754495474a07a535517126959ed3557dc4ace348458a1f76e1df0f6e78b51b3b53ba3bf80e0aac0722c4f4af0967b5741cff3002fbe6c4ab8cd05f02bcd05

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a01ba2e167fdd1623a32e6ed81f19425

SHA1
1048f1dddf18348681ae8f65e5f0c4faa6e707d4

SHA256
7a9b5df72b9a0bc4285e9a7394849e55f074db3f5d786a9f55cb702e3f602676

SHA512
ad30e4c2b44ebe0a180ee44329ae67ef68cfd8059a096073900526f878978918f3779584c7317bd4df2294c7e6dfc379662bd53fccc817d947b8441ed423e9b8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bc62da13d8bbcda8d532f9b9d2c4f0a0

SHA1
89bbd2c84881a8c52bc8b22c1e4a37c4c88a6f5c

SHA256
d69325924c77b47f4c39cab1c270f45e0dd62bd67b3c514009870379ac13dfed

SHA512
f9d31e7d82ea84784be75409ee1b025405a2ac4401ac994759a4e479ccca684be3ff1d394aee58c6edfca51690922310a0acac33c590063ebf46f67fb0c3bded

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b7615bf5e1629db2d9a38d0c4fc83af6

SHA1
31c2d912eec79ef5e971e4d855ef8238897490e6

SHA256
693bdf8f0dbaba2d68a431e1691b00266c9eb48b2640247e476c7be74bf849fc

SHA512
13d07be2395633c22bbb34543afa93ae7835aff3e5fc48626d26bd0c9a8e76cc445ca8b5924f14955b3dccde467b34db3c01c2e3a5f5c9eeb8eba169a0bbc155

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
add4c82ecbd91bbbc60161783cee7a10

SHA1
cda5b095f494d8b78c6b345832dab6c592fafaa5

SHA256
049bc56728460a8bca679ea1d8d888fea23decf79c7e8d061dec1e695614364c

SHA512
15578caec9e11f7674da1cb064f5d6a548ff67cb2069d1436dd44219eb9fa8cbff475c588bd18026162cea2e92bcc71f98ddb7b7345b686539d0313cb6aad783

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e8f68bb9a7413b8372941bdc51463994

SHA1
9d5fb562b80346bf24b718907ae36409042672df

SHA256
ab3d0df4bed95bee2bc57e12b7def29f181b84d9fbb1ae21dbe8462785e45c86

SHA512
2aa17bbcdbd3521c9f76290adee82fb9ab0c1e8300793089ad0157fbb951debf7ec8b75773b50667a923546839fc0216092e71954591533b5ac45907ebb66f9a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
63332fe7039bb06499ed11f3685bfe7c

SHA1
657d4276320cbbc7018b4647bf4ee61591340f31

SHA256
84f75774efb12a9ac77f442da1b93c641a28b90fa365e6c6c0ad1b1e1b652200

SHA512
38c7822ab231440429e3c9a42ac3f2e31c08260c92bd81169488889d97159928523fbe90b70a95e4089b302f77890324571c12439545f1c67d77cef7230dd293

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5635ebb31eae1cf3f127ebe7f0461ee8

SHA1
7853d073642f59b72a04b23ab0a12d8dac2c576e

SHA256
a0d2d2ffec886d49f3b0d9e49191c78b1fc323871b3beb50757acbdd91de938c

SHA512
0f9f44e641778ac96a4a8dd7053c15b39be71f47b2e4db03a29c319c1cb9160a23ef15607c1094623bc55c074ff2f66a7b717288087249557b5b3ae75b37b9f4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cf82b655632d821fa1f9a8942b43d8b6

SHA1
f6f21e9966be1ab7172a5b9ddd2a0c37d39bcb30

SHA256
003be4942d1ac942db71b0474fe71ddec22ff7a4fd2ab8f210955fda28ff8c0d

SHA512
ea6fdf4abe752593b3459cc1aa7061b9bd88c225cf990e28ebf58b4823a78e4e0d433c71c81034b6273077efc7a1cbc85585fed814f681511b7efacaf57c7eec

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d680ff27cefbd04c7c79f857c8a486d6

SHA1
906a1978ee88af14e79b53f8121226b8151c8988

SHA256
b1712f611441dac8465b48af4ae5839400ffb98769e40f041ec497e28f528ca4

SHA512
2ebac7153b662dc4eca62b1d7224c8fc7410c8cd1780cc99013c4fa1a04870abf23bf8a1d53485fd3bc814f096f11f803b012b2fc2f2c35774c30d914b0ece8c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0545e2efe5f23b230c745c29ae1f2cd3

SHA1
061f4d7120382e5d35a496583967edd77d93b3b0

SHA256
74c33e05ae1e678c49d910f12e953ddf6c89ba8b5489a42efa25746b8b4fd91c

SHA512
7f0972eef40564fa5ba48d89a00fd71ee0c925e7a6aaea345eaeed740a6b6ed82f7b6b9330fe0b86c69d7ebbddc34ccba2c628a28e171446a3bc6809878f54e9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
f433bbe25c6d2335c7ac4400ba11c10f

SHA1
bb746cc4f09d6c35d6dd7b77e247784638bbebaf

SHA256
d90464fb370b9d7aad2bb02a5519efcaca5c045e947970581a70886d2bf67537

SHA512
38dfdcae309f4efd94c770c51858b3d16c0cb1cec2ea9f7467be8798c48ad197fcf30e166a031f08fdffaaa7f55bd6cd106dc39a2ad36caa94fe6adf3cd44ec8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
dfc205e201a6cacf70f7e5a4232cf813

SHA1
228fec4a068c12b71e0ac5dd37f6cae29ab99792

SHA256
daac69fcab80f97dfd587faf72fb7c3cbabccbebf939741b748b8c7b6bfc2eb2

SHA512
27a06c3decd7b37169b4c831ee5b6618a6cd530f3f950fed93a630b187aae6ef4a15ac9dc6298ddf625045a64e49b9486fd1579f17baff57ef929cbb3a286e1b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab258C.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar291C.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit