8b0367959820b6e01c16ff014bc6a1b99142a774b02220b4fe5f99004c5ff306

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
05/05/2024, 07:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

16a3c95800201602049003b2be3c2464_JaffaCakes118.html
Size

38KB
MD5

16a3c95800201602049003b2be3c2464
SHA1

70bab4bc2dcf42d4ced78f04cd748e9883dcd533
SHA256

8b0367959820b6e01c16ff014bc6a1b99142a774b02220b4fe5f99004c5ff306
SHA512

399e93cb6e3da13f5f59a8dacd453dc7d20cdc29b7ce782fa85c25578bdd570d7f1083aa312f090bbd3fdc82c8def97811fe74124748cbc4fa59cb3cc332a8b0
SSDEEP

384:rLc4SXRhnIDaW/xmFjY2/dizToFcVswwVw2FDEQzjXQ6m6Ehn:rLc4SXRe92YUVgwXFD9zA6Ehn

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421056452"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc2330000000002000000000010660000000100002000000054469086444f04f09c8ab628e8ba6967b0d96c21ec8319b736ccfa9ba804f351000000000e800000000200002000000047765764d7bb91580f98b67f5a5e0be5a0a98011ffe04e9f394a5aaa35b472c920000000aa608231c42c3fcbd6fb880494a2811cb3651dc247d3f89469fba7c6493c0f6640000000024b14eaee62b99b3e1b72aa84c8f6003da744301f734334f23b60915fc3ab8e1999ed890d3aa751eaa8a307f07f39a72b63bc382ccd76ca2395bd36e1a2adfe	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2CBE6B61-0AB2-11EF-9ED8-52FE85537310} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 60be0213bf9eda01	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3028	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
3028	iexplore.exe
3028	iexplore.exe
1976	IEXPLORE.EXE
1976	IEXPLORE.EXE
1976	IEXPLORE.EXE
1976	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3028 wrote to memory of 1976	3028	iexplore.exe	28
PID 3028 wrote to memory of 1976	3028	iexplore.exe	28
PID 3028 wrote to memory of 1976	3028	iexplore.exe	28
PID 3028 wrote to memory of 1976	3028	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\16a3c95800201602049003b2be3c2464_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3028
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
03e6b3dac5c76a8e3623c41b93b0814d

SHA1
0f278fe5bbc48ea21158c8fffb99184cc70b2998

SHA256
155b67bcfa21c27081504f11264e95f52b29a236b53c9d7fb51590929268e67f

SHA512
41ef0184e08d96cf84f022f75fa17906c6ffe4e1eed182b8794ebf9c80d722eaba6075d319a07eb857555c53027b1cddce3513392ee52d58051177a750e279b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4f55aa469d0f5cf372f14a83eaa157be

SHA1
f170f06d5533f3100b98295d401827dd1b667bb8

SHA256
50ae8f0b5bea82b1ef38ce1bd08ae8403d136c22c67eb38b13061b6c33d31612

SHA512
c7edab07a95fa5b1aef46a281af84395c052d8c979760e8fb43fbf2d2c3dc2de24431272c8a8309b8f356c3e9bb1041606813bedd3d6acebd3b12ed09eeabc9b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f8051546a15da5871af28807d2afa573

SHA1
2f238eb20f2d8e5d3827212c7dfa673e90dc995b

SHA256
43646c35d83818b6b1c659b2766d50e6a8ef5b906d584c3817ea6e66ea86b15e

SHA512
3b7796bde5b20cb6197e2088e6db349846e3ddc1f04ce10a851a22696e4f70c138d6e92453510e9e43957a408a2d0f007f67cf0787941448ed489629d4a59db9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6fa1efaa92ac7f3e720598bf6688aa92

SHA1
d1f7380ee6b27dc0becba849d1e57744cfa65306

SHA256
c7baf96a810ab8523c18541c78ee6cc2084a8ed7072564d9b6de9806ec6d15e0

SHA512
d1bf202d1b6aac06b80eccd4547e15891060e5a567084865200d61a6890c971db53f1f072f9d9d19d490a4c41641f108cccfcbfcf177819faaccecf3b405d026

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
00834ff66a9b7eb287632da58794869d

SHA1
f25e0254adcf1b82565532e64c968628c8f5640f

SHA256
0d968122e8e415f0b3d1d09ee2503ab040ed3e479d3443d8fb99914b021bec87

SHA512
ae5be2753529421cc2d2a35066b5aef802926c19a1665a9a53596f63b8365994fcb14e48f8c08346350e8ab3d67e476e3a641c3645edf242d0f30c7af0182214

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0e12499061f2551ac1aae35e13cc37b3

SHA1
ea4d9f2f047fd93ed164252211ddf78f828192ee

SHA256
0c5bad45157830d1f834ae0adea27f831979987edbcb65542370ab3ed040815b

SHA512
2397d2f90d7ef3dec826bb33fc4f4a28588a708b889eefb5c8db415ee69fbc3d59fa5d8b7840c3b2a37bc79ed98812ae3afa7767fdd15f2bec3e524843b0ea46

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fa1c3047c3f1683de2876e350061526f

SHA1
d9164ad05e26231b9b0ec56e6f69571f623e34e9

SHA256
bcc827b2691e31a046b7977df2ff9676c4ee2c162aa03c6943db623e575a3d8b

SHA512
ebbd9697089a8f5b31e12abc28d7099738be8f140c2f2ab04ad5ad5431d5370cbfb56b6c206d0cb8b4e30e7e46ad72ca2467d5ffbcf9cb0cbfe705f183dbcf0b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
57783b476929e58f4e4d4be4a71dad4f

SHA1
da3b5b709ea7d31e43c76860c14aa5b92a33ef08

SHA256
7aee0dbae38cdebd44fcb48e55b03782353cacc78d0d17a00fe353e6c97fcf1e

SHA512
8124f57b0771b2595e21de808031686d7abe0c6810707075f89de8cfc61af3a7a058dbcae51ae6f68405aeaa85ce734f980710755f2b0dec88678a0ab614639f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6eecbfed657f1896f60dfd8cb9fd8a4e

SHA1
be6192424efd3b2724b0c91e619482d357926f1d

SHA256
d7c41c832f63f69c3596ad677a650f42d1e49325466c83f9a3d5dda17dba9a10

SHA512
a06fd1b75a659ba1cf78f83d5e68ba6c10bb0e6b6987b6aeb9c6659d75b085adfb301cd2f2dc49288242a16f54abde68e154363edf6d141cb688dec6f427d3b5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8d17e24ac2f1254ae6b5cfe6f4306e07

SHA1
83d0aff6bb7148f00e9b44d40af7f63f2bbad0bf

SHA256
2f8170c540663681d4c4fcb394ede73e283c66d628bcd1ccfe4f95803c93d59d

SHA512
b6dc3c88ab5910ca58c665c4cea47b518c91070886e7d645e1384fc3686e48d8e82b9a31d57703d0ccc0d6e3baedc3108aa1422b0dc2e6890f30d107761cde0c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2749160ce929b82966a2a113d96b3688

SHA1
9219c9b65788207ff90822a3cc20656a12f06fb6

SHA256
bbb52ee3a678e8aa3e45176ea6338d03f17048974396279e3cdab53476e0023c

SHA512
c01c776b13660816b5c17747307898c38a3ee4a83a3a22f35eea40cc613a0ea4bc0927bd4b3aae81d2937991d66997f93d73256f59cae8edb9ce9577b4a251c0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5e92e5b21368b6a4ca0ee2113752aced

SHA1
3c1cd5d72f8459988fbbbc98e16cacfe867d78f0

SHA256
e9e5b0ae2652f3c69450e8d072f90d2aa333312d104e1c929ec9d39d051212f5

SHA512
bca3398fc25e442167128d326c242a22996f4ea070561aa7101c3c4a7f5acdb0da0dbb0d6a8e5a7adb5abb44f7eb95c6995502c68482499081fc9434708fd24d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3c0d2c8a4073b6377002b87d20087b3a

SHA1
1333dbd6b63f2aced61b33f1bfd4fc9024e1a795

SHA256
1c419de6d82dfb8084366bfa6248907fc262d740e3ef3aa49401f21fe9935317

SHA512
859fad569c262d9577e0bed845f4ae3f2ae7b0a29a3af14f1f0bf5153f5867eebba5217ec175d6c9b5dba2c4fc26f9b1c50e3578e3b6ec5d1b7706d029c9e4b0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4590d1c7f4bae5f697066c70bd87ba9c

SHA1
7173f949c8cc14c8bdfdb91ebd77a937b0cb6a32

SHA256
e110db57a82f676cf547992f10a706022c686c868e99b5278c89dd37fe0136cf

SHA512
44e72548dc285ba179e3f53f0098bb0e001aa45e27564a712fe20e2a1672c49fa9159afd5fca1760784a4f466f3972cbe0915ac8ff213a8eb6e6fa33924085f6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
53c0c61d252344bb084b11352af2e852

SHA1
6718b79a21a5a30383155beed7025c772849e20f

SHA256
9e229607f2d8e82db005e2650110852ebdc292e9d5be30aa02ae791e32a138e9

SHA512
1bf53519223feeb8ff5cb3a9447b7a0fef8423e3bd585405777526d6aa27699441497dbec32a4b382e7b532606cfd9d54b10fc3133c1e769bbf039c5338c1f83

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabB0CC.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarB1AD.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit