84b5f148f3f58bbbc7c512f688767ab9782da33edf9401ab89ce45aa9a228ea1

Analysis

max time kernel
117s
max time network
127s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
07/05/2024, 15:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

20e45a9b9fd0eee86d30646a6f51f2bd_JaffaCakes118.html
Size

827B
MD5

20e45a9b9fd0eee86d30646a6f51f2bd
SHA1

e4e637f1c7f3b2d9a9ed89034b49d977a73cd8d0
SHA256

84b5f148f3f58bbbc7c512f688767ab9782da33edf9401ab89ce45aa9a228ea1
SHA512

76c16c522de66fa67c96cac12592fba0f52b7b3fd2bf28577b68fd2b2a98c3978f62d6ac4aee405740ab8f37396d204020e172d19ffc92892f10d8be9ddb4eba

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{6DBD91E1-0C83-11EF-A41C-62A1B34EBED1} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009b106788dea7af4d98683a8983feb7c600000000020000000000106600000001000020000000470da39d8ec9103262a132e363cd171d3ab238a546ec2b1523380d4becd94ce5000000000e8000000002000020000000365f2ec7966fe15dde9fee05614d07d06f207ecff107200d52ad755843b6825a200000000939aff1e78d85fd2dbd7ca12b89ab1ab37cf2f9f3ae475c07551b3e8759cb0a4000000041c2bf19c0a258aa89ca9354d54061fcea57fee4af3bdc19846a688dc658109228b38a48840704b16c77adc7f1e0749a85196c89ef31b2e743c39617a1f26efa	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0c3553190a0da01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421256277"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2084	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2084	iexplore.exe
2084	iexplore.exe
2052	IEXPLORE.EXE
2052	IEXPLORE.EXE
2052	IEXPLORE.EXE
2052	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2084 wrote to memory of 2052	2084	iexplore.exe	28
PID 2084 wrote to memory of 2052	2084	iexplore.exe	28
PID 2084 wrote to memory of 2052	2084	iexplore.exe	28
PID 2084 wrote to memory of 2052	2084	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\20e45a9b9fd0eee86d30646a6f51f2bd_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2084
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2052

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e5cbc80e9aa05724bbc6571c2b5c758f

SHA1
18fc5b3e792791e1152a6433a4c32370d0b55731

SHA256
2515af1c9565b9df7880d990281257f75c4b97980f60501bebf4718eb66408c6

SHA512
ac3aa36c0b9085fbc8016cc0fa810fd7aebcd0477f8bb51bc5dc2e1d226917487ddd14992e74a3a86d9c9440c368aac5e66ac231e56720faa35dc1c9e50a4deb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e13dbea5a5339d4aa0fc8bd532363932

SHA1
f13aece46c3ba2390bb304444660831e8970b04e

SHA256
69ec02b61156e731bdc293a5cd7d3224af5d9bfb56d3eac87e8e71744928df11

SHA512
78e98eee35eccfbceebfb6902305045d5c750fc7ce8174cedfe75eb3a9f6954328837f73aadb0b8692d7441677a5b3a73a257446f3ec2aca2812d0a78c1d9b73

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ebc0100684a7165b2630726a0b290434

SHA1
a48b0052c31f6f0451991c119faf9f3b1e2d2143

SHA256
04d0f2a37193705662f497c1999272847a5ddb4bf38930183da8efae5aef99dd

SHA512
30ca10418cd2235cf1863fa080c1f046c2a7d409e35823ec0b3601ab5d940bcc8efc7fe89294c850d384ab13a1c212e033da5226ea74529d7ec7d5ebadf1e83f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f46092010d8ea9bcb12347ed329ec78e

SHA1
ca05bbaca26ff4b17f743f11ec104c3ac32446f6

SHA256
173e75b7a65e91e8a95c0ec56de783241b14136e9a4d5ec15e217359d9070fb1

SHA512
b522f5d00f0bf3df8dd478c237708cd64285063d8f971fd34a3f55df0a0a510a23670ff377b7db79e438ab57db2ac126fd2bebd705ddece0681f5a4c304e4fe8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d75709ad953d34ac0050b6145b32aee2

SHA1
998ff28ab4d1887d1f7eb16e40ae4cb03154222c

SHA256
420b10e501bd061b64e37487b2c3c825edd5773dc123d5589fdc94fd61634d9c

SHA512
ab163483fecac27fc1163fb4410a948b1a6522c2622ca9152cc5c54bbcff7d9eb998cc225e6ab29e1108ca602a3626aa0891f2dd86db41124791c5c0f655ec40

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a6e008381b69b74c7ea3857006ed1cfa

SHA1
bafe0227a44bd392285e7ca6b8138b30242c921d

SHA256
21a528c3c453352bcf3738079b7a3adf215d63f912a4145f273c091a445a912b

SHA512
fa3bdf10d0b5d869f509698c5a5b29c2519d738d9778c10940333e07b9e96ba3341bdfdd69f0e867cd72f54fb57e4a46d9fe0dd38aea02f7af1cf835330f8022

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dd9f65f45b8685f14b04435e93910549

SHA1
53ae2d8f5595544b55700a14d4d2a98ac8f3c3e7

SHA256
a21c36339890f8270a477650db72ebf1614145c2b6af0ab9cd230c4c8a5e4719

SHA512
6fbf8a050474ac82aa1114e5f7cce256ba93a492e3c7204cbd09e52f7196b503ae0ada13dd183b4048ebc00530691dc0bb28b346d36c286d4c07e3a224452c44

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3da5772325987d3d81e2dd10aafc2ea1

SHA1
ab34796ef0208d1419154777355fb193563e20bb

SHA256
3a61a52d0082cf011cd5424629eb88417f5113f15162fffeb99efcdc54545f11

SHA512
11b1806ecf5c11daf22ef3a72673909b8c85816e67c303e7b7eb10c1173dbbf6222949826288f0a8a7674e33e8c358f896033874377a8fea8b6beb721b30fa5d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d761f57b25f493e6ba7887fd5d3231d0

SHA1
d0fcafa7f88c0f47a729810374b413f3f4c94b1c

SHA256
13e80305f38af59fab7926fde1febcad96df724fad7e69f256ff4f6be8882e7e

SHA512
520c0191db1b78e936e7c33cd7479b1672bd0c4bf377b29d7031fbef55a3a903c41d87a753b8c0ff253fdb4bba26ced0612aad0ae61b012fa29ceedbafab469a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d401bcff5bb32f7bbd9b0d0a31e48d09

SHA1
d1b14b1f953dc817e821672d0d5deb96cf3436ea

SHA256
4de54633d72f5041a7e4369197338055363431d85e1f79f5187eb2299a7d09cb

SHA512
46f568adbef7c6966f6886ad4f52db847055703faf6f8705709fd0fc6205e6d6d50e51be54b9806dfa4864b520e27bf03493129bdb76a9e4f5996709074bebfb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
54d3f3d21343e8485aed41941b060555

SHA1
b5882575c3aa186bd952d222a2800aa1d7fac398

SHA256
c3f192947ab5a05e629421130f068d30c0ba725d6f9875a86a367cf0639ab58c

SHA512
b6ef9903d1026820e5a135d84ad2b2d64280ebbf1e5f55887f1fd7917c2ef8cb40f9710570f796229b84dd09880493d7fdfd6a2f7b86e603a9d0e185b0274c14

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
370f68b81206ac73b37d89a1dd817626

SHA1
6e532188c82dc5393c5996fd0e29f2f519763728

SHA256
6ab6d0bc54c54facd9e3273224ae7523ba102012b36baa011ef7b1d573d2ba40

SHA512
19385356094651d1e12847e201ac6e7a73e84b86eb5e0cdad550e3aad37b15374a7f6d23ebb672273de555e4823f7aa7bf1d539415cfc00fe75f76cd1f4dfc86

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fac6f46a60e3ed5f4be875cf87a98604

SHA1
f0051d50e1206dd5419b3eb5ec0baf363d8dd4e4

SHA256
ff0c6f6a55f348d4f025f4bdf18c3e4ce4aa95e42fca32059131f6ce9635cfbd

SHA512
1143646db37b804430d6a8e2393634dca95edf535890d918a49229cb2ab2df5ca7e7b581f810403df793adbf7a24ccd57c791e830db9a8463f30fb6ceb7ea020

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e7ff3412fb48dd377fe409845a9488af

SHA1
4028059039e10b9fb4bbc41509b6e65b849f9b63

SHA256
31f1720f788fe8c44dceb22ee5376928d256067aaa466d3e501297bed2684671

SHA512
8e0b82cc21062424b88d6d7d9fab54a534b04225630cd9b81c90be54c9177e8344e3b31db20a9df0b1e8c6d5080fc019ddc11217886b6cf6867d6eecfe28aa54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
173c535e6a7ead1b79d09f8f15cf8fce

SHA1
a8e5cef6c913dcc79151b2fe4efa6b1d9cc96fb1

SHA256
0d8deff4ed62cabc5e46b5a488a0791b29b798726ffcfdb54a01f6c592f65880

SHA512
bfd723b4cf4d770342d39ff209ea9bfc8b8d72540e21136d5ec316230cc3b2fea3ed7509679a85c3409075e9006bdf14caaac53b745b2f989971ea683644b601

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e9a857fd5d2e346e7db79c876b19b4d6

SHA1
4a6a7546e4caa8a457ac32e7a1b039d61b6b15d9

SHA256
d794486b58e279eb21922ce8167569b8c2a4300f7c20f7f35c3de718b7d7a24e

SHA512
c0b52d5bb990470f62bfd2982875f62c31faf3e154cc597d96cf5cd2162f6559d88abc2fe9385da4583d2b04c87f383080c59c47846acf79c108524d1bc5b97c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cc4523b0a4f0a330391e7ac27b4c7e51

SHA1
b7daed417bdd4aaf61013905285feb42468354cd

SHA256
3fb84096161894aad022e460131a71b5e9b75880030cfe6318081784f5df5c7a

SHA512
6085e8b8b01d5b92df4ae0ebe63e29239bdac65fd00be25fe2d35d0cf04c5b39d86380070f7b7821e34873087c577492e77982ad6ac256752724b7c110153ae8

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2455.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2537.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit