1c2bf69467f1c57aa1967aa81a864857a9a38e2371e3c9ed851a4a646799c1c7

Analysis

max time kernel
119s
max time network
131s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
08/05/2024, 20:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

26af69b9a2cd4c3b1076be2e7c3aaef5_JaffaCakes118.html
Size

122KB
MD5

26af69b9a2cd4c3b1076be2e7c3aaef5
SHA1

a1887ad5227869937daebad426deaa3cabea7c7a
SHA256

1c2bf69467f1c57aa1967aa81a864857a9a38e2371e3c9ed851a4a646799c1c7
SHA512

e2e03b4c33a5e6cf8fde26cd8fc84cf2a2c2a0fc9111d55bffe9039582bca4d09cd3930eb856ecd8f47a96736b73efecde2323364099c738fd0cd41828a5cfed
SSDEEP

1536:StSZQ3yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dK:E3yfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c03fdfaa89a1da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a230000000002000000000010660000000100002000000002d76fb25c20cd396fd8890f42dbbfbcf01ac35d326976c9782397e868a7e522000000000e8000000002000020000000d81ecddc6e281f5a2f6a65584efaa5a09463a7815a2640b9c5111e80c91557f72000000077e9b1e5ba1f979a70e4357cc5475ea9cf4912c43d766c267634a0d40c1a3f8f4000000057c3f9a5734833444c10ce995302c4fca8308b4299e1740eafd7a2b2e7193f54318c4d9243133511dd2b03dd34dd09cb1f3b2ca5539afbb8252226ef6e5d56d0	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D640D6B1-0D7C-11EF-B290-C2931B856BB4} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421363397"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3012	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
3012	iexplore.exe
3012	iexplore.exe
1960	IEXPLORE.EXE
1960	IEXPLORE.EXE
1960	IEXPLORE.EXE
1960	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3012 wrote to memory of 1960	3012	iexplore.exe	28
PID 3012 wrote to memory of 1960	3012	iexplore.exe	28
PID 3012 wrote to memory of 1960	3012	iexplore.exe	28
PID 3012 wrote to memory of 1960	3012	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\26af69b9a2cd4c3b1076be2e7c3aaef5_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3012
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3012 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1960

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2b1adc1d4865ebcdd0670c918839c2ef

SHA1
d0a58c47a543faa99cb9b4c213a65385b71d7768

SHA256
16ea5fad1ab7b6951da9f4b30c7370b4a68a81df511c1d08c2b2977231c10db3

SHA512
81077fe03e30faeb556e5ed5b1163c81005f5a3435fe4800d78d7a121cde5c79cb981478e989f3a275bc2411757ca324371b3810d4325508bbcaafefe86d95ba

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d8ff845ad7f6424bbc0c822269ab0482

SHA1
f13607499273d254a94d58616c3133410fdc5a7b

SHA256
58af8d5b7a495a6346a44a8ed795b1e5cfe308ef6dc155f69ad35ac03f035cbf

SHA512
9afb3f371425197b00c7f75fe085530b788b769073eb1c76d07c9dd10712a0d633282d1f62e9df7501d04916c6f4089d5ff928dbae55f1ace1d356a6199973a8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c3204713d83da0935a44efb1dc635618

SHA1
99e6fe75f2e0e280ad84aa80370c565669d1cd6d

SHA256
8c0341bd5a72c7c771396949db3d0980beaf821ff3ede46d435c3689ca9e3160

SHA512
038358b81d0ef3be824d3f61946baf7f5e384f7fc73400831085456fb1cb4a662f5adc6527ab66ecf8d9fbb1388fabfbbe9e515f9fc18eb31c7becc89bd54ed2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
76e643563865669c016d29c6c5194876

SHA1
2a1fbb97e8adfafb82b012de7f582736b3343b96

SHA256
472efa4b0ae21639dc080556a8e0d7a09c2a7d909fc17908416808fcb68b9b7a

SHA512
2641476c13b7aa763cf15deb3e3b6f329a2910b1700630d7b9082b5734e91c14b859b06f0bbf39f9bcd6b4778c5f3aa24c9c5c142c43e72accbd24c249034288

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dadaa0ab72e7f5c7f4d278e3f721b8e7

SHA1
28013d89dece901dfae873c67c72c9ea1406db73

SHA256
8edd952143e67032c2a15078ce52a71a740bc7d0c5118ec71d81ef85be34bacd

SHA512
cfe6aa48e3e417e82b4eca90e0cd33d14bf3c770173481b9a9f39f18a713cd0393a1d6eded1a520b224f057feb67ceb91f1b095833916c7e75c78e9687728622

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9e69ea8e6bf1345ced639cdea5d1411e

SHA1
479cab51c8943312eaeae2777369f11a3363695b

SHA256
fffabd37f0e906144f5a430e864cb3d37253f9e564aadd45e69c5d56956416ea

SHA512
c8bd3c9c0a491c4f9feaaa43c43e8ee8a3f37e6b319ee19b4c22a46e15280948a81f405106318bf6fdb0a08d36535f086e0b2b0af4ba3ce1b37cb36e937c9231

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
baa5e170a7104d486ba23ce67321f620

SHA1
3f8656d4359b2661167dae85b010ef2c90432dee

SHA256
bb065afc50f5fb6e3b923f6ffbfc4f669ab7bcd20a252bade551a26ee76b124e

SHA512
37cd18ae4e2c2715fd4041b8ad5337dd1777fd8a9c83ce6f6c8fe66ac059674ba852b8bb5283da55a1be50a14920e45bafaa7a1b3ab1341ebe3d1ce1572b59a7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5800b0560ff83066e41c44e3d4af58e1

SHA1
a406a1c11fa81860d7863cdd51b0f90daf7adebb

SHA256
5e8c7709fbe5b3772dc83caf7d7aa90172d9d0e76b9bc3fb9cea348c6a13b251

SHA512
258c584e4564d7139db6adfc6152cff2d6fe120163bff9b6f4c1fc6b8a21cbeaa60a5883e3758b2eedd3c27e4ac91c4059b275efb8ecfc9c879ec4a4ffa72622

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c3a89fc1ca984e474d692d0e75a12e96

SHA1
1591894dabb8d3312e3b67ba9b9c7368c4dfc265

SHA256
5c407a68149791c518ba1cdb5a9618105b411166b47eeb32b9987e1ab94530ef

SHA512
901ee107ddf17d23282f63261beee7cbba046d8152f47406907fd23a6e5c13e923fee1eb4d7795416a323b4aa4cc439f41718995ad0e5ceb1ab37f75a8f51577

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
747419f38c073be404edc662a62ea0f5

SHA1
91d15ba78be5bcd771e8ab2d7016b72d22a2b54e

SHA256
735b8d58e18c7ab01988520be55841d57872d581013c503d88f0a600d68cf3a4

SHA512
86cf74475f385c0544ad92c3913a78a34172da0af2ec7f410e3818ae4bd073b6bde27684bc9987c7a6a1f94b58db351fcebde140272971e7a6cf261095c366a1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bd76454e975ef9605a4515ca616bba75

SHA1
a7c4715119dd08f7bfc3fb813096d5979878e167

SHA256
ab2980b5da247298a068a1ab5982e3bbf85aca9c12e286b684ec7bcc220f31aa

SHA512
126a1980fefa7572e85bc65fbcf2040cd54bc2b743487aa3fa3fa9213f0627676c05bd33e0622da1874cb9bb7339b46c0b4e4c5a8381afb3489c4fa1f2d66640

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
37f3ca37149bd48a61f4f6d92d585860

SHA1
09eae3b4f643032b345a5fd64a79dd67fab391fd

SHA256
1085b653127dbb3abe45a86ef6031c89c3aec52e74211910835617fe9670adc8

SHA512
a549d75bebae569e81775dbc0dc027777d0c625e7bb85899d3b42146c2f1d0490bf724de451a1ca5bb0832c88ed697370115b69209c7099149827807ddab3815

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a4cde436747973de177009e9ba4fa615

SHA1
da66f97e45d752d176cedeb4d4258204b5a46169

SHA256
d5801cac6dba9f2fc0993bedb312b34698931c3b4bb81d00d283e9d36442fbf2

SHA512
2a9e360213cdb97a03649aa9cfca078dca754f8382f2cde7f33caf7c7d0603f7aa7bdf5d71ba1c52d8101402edcab3a92e3a43aa92d88450e407227002e70a8a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
41bbb09ffd382691b602136e5c9bace8

SHA1
be66f868ce0bf4264611200fe982fd3e02187c3b

SHA256
6529f9cb1bfa5b85d9b4f48046429defc19d13864d165cfcfa47a18939e2157b

SHA512
92bea4d12d3044e78f32a057e0c69d72aa2f5c6409368e6f70324d17ce87d4d6abdf38ca939620ea3b639f363ca8f3a0be91f1306268fd2c8a5a4494f5d62506

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
69cf721ad7006af6ff6532f23dd48410

SHA1
b4970796db49f483364fb6e84c7df42dfb6fe8e7

SHA256
11f8a382e14424a6afe9ffc7384d0ffc3eb87cb1d889e9faf8fb7e03c104f41c

SHA512
33651ff7da59696d5a0ca63b6199b480c15cfdce9c0242ba03777313715c1a9f3f8ebbea69fb90fc20b42b1729fc19d7e81b048a9778f92b4e08c8c2cb817f77

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6796ad6fdff7d9a7f5d05ad7a9eef8c0

SHA1
7da1a43962681e2e3456a52f0e81286fad0b72b7

SHA256
5c342f5dda5c45a544217b85f689ea8677803605f4ae4cc100baf9046916109a

SHA512
d456ccf127370e95774f53ae9729c98f41304ebd7889d985050249db38bfb43f20f25c8490aff517c9fc63be3dade416dbb4e70fb62f1abc49daf1056fa5edeb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3FFE.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar409F.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit