3d70466646496a763af0ace41986af95b5b3cf12bb4858c082e3b3b9f9b103a9

Analysis

max time kernel
117s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
08-05-2024 15:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2563af2becbd7684291894d13c410f97_JaffaCakes118.html
Size

823B
MD5

2563af2becbd7684291894d13c410f97
SHA1

4554068d62835a440eaa771b82e522588a565c80
SHA256

3d70466646496a763af0ace41986af95b5b3cf12bb4858c082e3b3b9f9b103a9
SHA512

01c5afc0d8035c53f68346a665053161a9af601d1ddebc8c298f09bcf1d3bc5a25a3091ce2a14f6de12398eaedb67c9bfa6ed295c971acf6563a39d523c80524

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002dcc56832ee45b40af0f973e997a3e3e00000000020000000000106600000001000020000000f7cb7d1ae2789a98ff6ab2798af02dcf5429d61c1c6dd30e67a9dac9d47ed1d5000000000e800000000200002000000000e6f2544ab0bdff92b6da7978fa69cec11f9aaf219f712eed75ca4c0e8eb0ba2000000059101cf03a90803110043379a26d59c0c1466b5e3b4302f35436fd56836738c540000000b5249f60c7e2d7e5f022aa1f69379550c97c28a828313d18dcffac09146e9638e87002d1cefb2dbba846b55fd61e1b8eb5bc414df1c35e29c8c60f199fc5ccce	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E25E64C1-0D4B-11EF-87AA-FA8378BF1C4A} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421342372"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 00cea8a858a1da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2076	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2076	iexplore.exe
2076	iexplore.exe
2936	IEXPLORE.EXE
2936	IEXPLORE.EXE
2936	IEXPLORE.EXE
2936	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2076 wrote to memory of 2936	2076	iexplore.exe	28
PID 2076 wrote to memory of 2936	2076	iexplore.exe	28
PID 2076 wrote to memory of 2936	2076	iexplore.exe	28
PID 2076 wrote to memory of 2936	2076	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2563af2becbd7684291894d13c410f97_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2076
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2076 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1d7a4b0944600aebdcd4ca432257c1ca

SHA1
3076403acfc47934282d66db9c053daaa75d348a

SHA256
55f3b6758210cf46fcbb3b554927f5e3871e436a8b244dc117e0b60954f14acf

SHA512
0ab1404cf5f44c1929356f56eb9190c253c7c9ffd70a8f01c4bb070e6eb488c95d3652563eba054461b6a4503d7919ca6fb5386dfa455a038c69065418be2a81

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3ba39807eac932b6e3f4a6e986e34d17

SHA1
8b886b79a936b318a03757a6760bf49354593efa

SHA256
d4154f2607b480c016467cb14cd023467c827d26c53d55dfa4d26c16e931ecb7

SHA512
ca429b0f980caeba691337f7096c14f1a2efd81c5e1cee30a887c286e01829dfed5ef5b6f75da8bd5790cbdfdf4e531cf743f9f8f74f54dc0fedca7b62e184a4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fadef491b56941ab7034e9f3e6e22123

SHA1
7ecfff923c2f1c4ad4d2ba0cec35a59e0eb16a27

SHA256
2b620ea1858b200402017a1348c06cd82ae695c8d78d1f1354d9a45d51a042e2

SHA512
841bb553e764aa7763286df9d55aba9454c3a36954f4169cf2db2240ee94670ffcc26188214739f9c8d6ced6acc525ca270ffedfee3c7e23b2e409ad426ad811

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8c847744a35d73f8fceb0de1f8d3e513

SHA1
ef757c8150f912f94ceab31b339bd43f364e343a

SHA256
2a0ed6271fef90a13dcee8f084a88354e84c2c740b8bdceaa5bef614ebdd11ea

SHA512
91b5d0bb6448c7be9dddc051e2920d283514fa5a232c5180c5c5563b93d3d41d52b329a833a600763d953eaa3e260146081b7a28ec65490ff484de99f4fa7f62

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2943709b41583474e14f91b1e5890cb8

SHA1
cdb1c3ebe1336582343e36c60406eab9098b9a76

SHA256
e84053c9959b3e137b40757632fc7992cc75754ed9208b3b3cfdde4e9111a7bc

SHA512
e5ba4f1232ab194ab7e17d773064038705b01c1ac3b86b09d3e75fcc27f1a72d02fa6b91b3f72109fa6934ef4c1ef5f3abc9108002aace13a02ff30dc08d3166

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
19bc02936b443e5c747ddc76724a3904

SHA1
3325274c5e5b9ebd40d4f2fe57f84dc39cf62575

SHA256
3d73ae9251aab7862b73e185449c4568ea001d30970a592babd35e7964f0f84f

SHA512
9f0f6aa9b710209e8f22003d2149b8cdda5747cfca92c40a273534895923cba538dc2534e4259d25c001d18d21ee93288199ae88bc17817fd935e16d3201ec07

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3b3a9bc41aee3af2e7bba784f6d595ca

SHA1
f6e4683b539cbb102bcd27cf505b8e0e27efde33

SHA256
0f8267a9a66f4fc6faf85c5e7e20fe8b852ba5a307703766d5e2ad17e0cc9cc9

SHA512
12335442c345325fc3e1ce306dc12b84332613910414e962a7e72b34ac6d23d423ea3e719d7f2448984b24cdc0133acaae09b4dd86f156f18067a4e59bf5af99

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a9e17281f213db8c9bc125a750a359bf

SHA1
528755486d5ff620e02195d0a1d4b7ef96374c46

SHA256
2436c3b14e7392d7381fbc0041f9ee9f3c319a5702d750cb7bee8d43f21f464e

SHA512
45256b2e9d12862be849bd09106d75590bef611e05509772dced02ca9897cbfb7a4e21d4391c6d7efa307a4065512e696fe766ed7a542402aa2f4127824626cc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6fa9261d34c57639065462dc904e05a1

SHA1
e13f8a253b45a989698938f268094561499f462d

SHA256
f379b4f135cd53c0a7349a91fdeda0530b12a5e32c00c31a6d034c63f1483f09

SHA512
dffbf1635f6c967c391b9de77bd6ff8bf5324f7294c481fe00fdffe8fa290a7c5444e1030c7f4e3e31ab93a03e777f2bd2a0ba69c3b93b89bbd208b136c339d9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3da66ffe451ba41eba25718216c610a5

SHA1
05ed43375a2fde072ef3b037e142b61f4a55feeb

SHA256
807a9ed82c03226f93786788e27011d9f8232f5c3f1910ef6fc687990234b540

SHA512
7045474fcb6d734fc1fea3559e1ce13d81cf2a7c123cd92b48757ad73ee381830381fb5942221f660ab71e559ca2c1cfa0652f652a590b9e0908b7c0cbd48934

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
208427bf595a7ddf3bb6c24b4f300774

SHA1
5f53c0f389f960b75cf2829a32c443bb0b89270e

SHA256
2d2d8521a24bf5315fe8b64c197a2854e643c15943eea69f56de513b657439e1

SHA512
d176f6c89487e0ae7c1edf1c209b72c5065d97abbb36006b1f19999c84d39ce8f226da3cdc84a263f6fdf31a11a6b59de1ab444c85885020200addc9cc0c2b30

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6104ad811ca0dc05823d2c24a2325754

SHA1
b68094e1bdba80d04536385915b4238a92dc2b4b

SHA256
0cfd90665baa7dbf9dab8b26ad4a7eea26b0108028fafb7cbce9de0f75050683

SHA512
ec72a0e927eeb15942fa665aa149f7258fd92942924cac5f0fd519d98a0bb1df8c7e6f21e9ee52e5117889058eced48ea04c715aacfedcfdf48921d01d8c3652

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
371cdccc057eefdbb1731321667dc86c

SHA1
cb0c22f1ac24570f6e225022b411213c2bd1d009

SHA256
f20e2b53afdba7d342c1396c02c9044f5f8656ff8abe5490d49c758926b62140

SHA512
dd62761ab6433109867fb2346bb68b11f265d0a85a358fc9e065c24c8d950866a8980506424d5a5c4fb4afa23aa5e5fb6d9bf1026a27fd751bfe240ecb3cd643

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b13bfa8384ffc7f62f6c336ec80e9188

SHA1
01e449e203d9b814d9aa56d42a61f48863b0a2c4

SHA256
a7fd298389ad5af8568806f49678129c23ffe13e8455c6112dd33a431adf7fe5

SHA512
801ddf8d6a599a54ae96149110203dc222dd41e24feac3bbcc9dca5f0cc5d28953aacea15e8a1249b1cc57d9b353a8f66a2618abba3507171d3606222d090090

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e2d6c174d6bb55a75782e757c43c8e9b

SHA1
ea9d88d4dad9968c5aa01417cf3a4274137da056

SHA256
200261d542e1e48d0bf9ae48c8caf272bfbc3356c123bad13082a119e03bbcd4

SHA512
68da6b16dc8a3b363c0980a7efcb4a76c85ec9c7b994758a298162b5f83608970db1efd898926ff734933de96c3acdd8b867394ae11ceb430aaba407f19e9e10

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
95b0a4289f05871d98fdbcf13ec4239d

SHA1
25b26ecb17bdcc6166a056890942bd48e30c33c7

SHA256
6fba153d72315e0355536a89ba51eb612eb719dd6776ba0cb2ab3a39e9e02814

SHA512
c0138db252bed34de931fee15c7c1a858365b0d6c65d6f41d792ad765c2ae1f71cfe6345d377f750aa8fc52d909516c49ee427a4df1c91bda1279614cc841c95

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
01f664dc20fa59ad8f46c28719ac8fb0

SHA1
b2ba93db2d7cff7395a7f6cac6fb0b9119e091fd

SHA256
5afc45d3e219c8902e089ec80e2b0d6f90fc2d7b0f8a86e3f9812b3b0a33f582

SHA512
7208aad7ec4e3923f2300a1546e7b34362572c7d84dc3ed96c896c3e0d7483367c108f8fa56bdf5841fac648251944e09b5d92f75962a4f570d443debe4a9ed4

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab407C.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar4296.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit