3950a98bd1f39f5786d180197d11c3ab65004cb0db8cc4eba447e5b6dc7fb18b

Analysis

max time kernel
133s
max time network
127s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
09/05/2024, 23:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c46ee267b1bb26a48c0d3dd6b2dc224_JaffaCakes118.html
Size

2KB
MD5

2c46ee267b1bb26a48c0d3dd6b2dc224
SHA1

c4e52a01076d257a4f719e4b628c651d8d70298a
SHA256

3950a98bd1f39f5786d180197d11c3ab65004cb0db8cc4eba447e5b6dc7fb18b
SHA512

f70e1d057c5d5bd67bc919796517ce6081f61f34088d6b8c237b8719e1f17c563418343ad08e8d5bda7a040b2f5251b0ffcedac93223ead9fce9a83e69a6290f

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{9A3E3451-0E5D-11EF-9A67-52FD63057C4C} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 7090bb6e6aa2da01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d10000000002000000000010660000000100002000000097ce8ffda5cbe861fadf986b1e76ecf32f9f742b00f1e95116308b6cf415c92f000000000e8000000002000020000000efaa0462a01505f9e9a8601d2e8804e9c1d1a9a30dff6df1e920fbf6d95b579f20000000dec31aacc5334f1a8d4758faef6a1ef7d2e13399eed44dc452f17906433d45b940000000f6d92daf3a18c9c2e1f1fa8f22d80ecb3398423fa9b9337694ab5ef110024048c25b4ba3236765aaf3bc8ba4890df702f627449fcd6f7297a2b8eecaea04e5c8	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421459932"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2424	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2424	iexplore.exe
2424	iexplore.exe
3044	IEXPLORE.EXE
3044	IEXPLORE.EXE
3044	IEXPLORE.EXE
3044	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2424 wrote to memory of 3044	2424	iexplore.exe	28
PID 2424 wrote to memory of 3044	2424	iexplore.exe	28
PID 2424 wrote to memory of 3044	2424	iexplore.exe	28
PID 2424 wrote to memory of 3044	2424	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c46ee267b1bb26a48c0d3dd6b2dc224_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2424
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2424 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:3044

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4f9ffb303ca651e474de8a4993b6e105

SHA1
4d56b4244c34b1f8655f2e8bb3c8907cf5482c12

SHA256
c6ab479feb212f905f91aa002254ff1554c34a1196943f009885c480d9f7b09a

SHA512
2cf49665ba06910b41694162e07fa9b5193d2ab994c06f53db566854fea2988394a42438d43ded609bc62423b910d6b230c96fa99929c5111af621a41b9ad208

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f84fa6ddfde229a595aff53167ece7e9

SHA1
13733b9630eac5d8d0154f31a45edd33ba3a0b64

SHA256
49473937e3685232e5ec3750a97d3e7727cd8bf7caa060c1b6642bc44d3165ea

SHA512
c20c37f21395705be852c4c6c5ae58709fbd89c9ea632fbbe35fd30fd6c3ee4c890512f93694d5d5fed4938661db38181352dbc0ea84781467eca8ebb8af1592

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e4d4e9b836ab6a219a756134cd05071f

SHA1
9726d5a614f28be88f6e0987224d44799d6ffb4b

SHA256
2cc859b0b86bdca85e3b6e4aa29ab2a851882079654b2166d7c85a92500757cc

SHA512
8ac6a6820ef96f8299f2bacf58a8e843929b7012dcc474b084e5eafd567a41855cb3695b0195747235d76959d17377949a765b5e9c31cd4fca38329c2cff71b1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7c7851a154e3ec69d358052fe0bf96ee

SHA1
a492bfd46807c87d798e251ed14b4b63e9ef3a05

SHA256
505fdb26dd57b40de3cac7b91659dca11dc01726782eddfa23f56c337b11a4b3

SHA512
cedcec5214973ad0e82ae402cbdef3beaed183310bc5df6da1d223b6d6ff17b0461ef43fa16327578fbb4e214b781a5a78f245affa42af82658750c2ff1e4f86

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
072092150b8b0fe828994cae55aad1a8

SHA1
93e1e5a4b779970609350df571ce181e0c15944d

SHA256
9820edaadf7bfd42c7c691dd7bc7f46b29bd69236ca7891c570dcc7644aa461d

SHA512
ac9f50657bd2d535156569ad2854cc45df4301c90d34ff800a3171c03c4b609615b95627925ac9b48a5e99f8a97e68ab31ebe19691ca5a7cac377340b09aacc3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d6975dd75c0d1e5cb15ba669fb11bf0b

SHA1
e478f28e62f5b1c4ae72e2225c3ab95b4d04575b

SHA256
bac8a8b006e054789aac71049e9ca00c607aa20f6b837d3468619c9df3b0991f

SHA512
70aad94e2cec6d2a9fcd7eddacaf464166b5c96cfc435bbf44b319ec3ae59422b30ff44fe8643f9e0058146f0ec7e01dd4e522958291566bfb3aa7b4ff2409cf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bf72b18b0396e95ca68511a6a08bcee4

SHA1
ef5380e9f7ff8043215767737b2e67d23c3b6fe3

SHA256
94c9734dc6efd5890f9fff19339cc2da66074623870f73863289d7d7ba89c83a

SHA512
6399f03a0dce0bc7634b8ac63cbfe320dc64089c64ada24fe9180f4ee36ff831091a31b3bed0e62c36945df3ebaa72b3f9dd9dfc602f76c5a39f7bd593a3a0b6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6e7dd391f027f40f78ee85edb10824fa

SHA1
5790c29284713507d1008c0705ea4ece05001a6b

SHA256
565575efbde6bb2d709136706a048f7b5f6f9bd9276ab6e1aade412725e89361

SHA512
5dbc848e8770b9a2db8a3ea34655c48d8b487c63e4731d5706c024d25b7a595c2b9a920e8724cad4dbbf21819d80b02de641775374ffa7c888e6b1b0f68948a0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
859352baaf080508553554b162483e72

SHA1
39051000c15b1e462022e569b4baa8eeba7d1a8b

SHA256
732d743dd45036fb0261dc42d134f9635174c04e23faeff6002d861473488646

SHA512
57e321d22186fd452b6d32aa347a1846ff26203e49a4bc4283f99f828a8c45264b92ecdfa3a9697379c0b40388d65e94ee8121be0e451fece0c6d11d597e5c96

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b0c73e0a8054a9b5b650ee71db98327d

SHA1
838c3ee9d542ece86e1a95fdd269cfde29b2e03c

SHA256
53e925656c62a59097250f23e5eba6aaa65833d8c6c49233549b5dc66b6a54d9

SHA512
6377bf2446b2ab5c9224989794ca888095ef62960b8c769949a0d2c105e90d9e2d2d266d90d2a9b38bb017a79d554c7c4bfc0b2f65ab462a407560a6ab77cbdd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7b85035c602da1b1675cb0b7cc0d24c7

SHA1
73f9020eec5eaba032bf2bb34c28ae1fb7c1d9b7

SHA256
4cc2944d4584101f260b4eb711429bac2b45aef482ca660c332d4c514f044620

SHA512
91b9d517d0823c17a8a39499d983874df9f3bebdf402be614c349e1acaa53a0c02995abeef1b598435649efd5f53cbaae16aa3925872eb9dff3170ae2be8f719

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f60036958fcc810f039981dd9836d7cf

SHA1
99e110182a829b610de747777f19abc68634898f

SHA256
8141567b17b07a4d2a7cbfdc2a079e49e6f336846252b22c1a6f4e9fc97807ff

SHA512
9edb5671362a4053c216d1997b190f9394bc96eef73a5c27f4743a93df9d9fddac15193b0039bf1f8d37f382cd7211f9678aa8446b4abd9950e4d64df43f8a7c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9c7f2dcb168a763f8ce2d1b0f82e79c3

SHA1
0c9ef2fe573a65fd17c65c354ff84268f3b6ced5

SHA256
87215fcf13e7640bedc14c5cf7e219824538935d688a65f7b091bce1313da4e0

SHA512
0255e751054caac1b18a296f86564c8a5d1ce6c389aa1b0a9691c2c45281053b68c14b7d173bb3c1212eae06a7826b1dc10e7019c452704fdf4c46a0576d947b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e5122950ef37df038cd09efbda2476ce

SHA1
c0401873c36b5e65e41e33a77eeb20314e070489

SHA256
c8692c107b4fff5a75546ccd2a63f9296f85d30e237ef7911da11836f1771648

SHA512
1135a027df468110471a2d7a45b20330fc6d4c08dae1b0766a676915691497bad2f72941c2246819f9d96da90a609adda50aff44a49182c42b2a1059f55b23aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bd251da8bf4f55ff146fa1b91022c7bd

SHA1
2aeb876d93911e0afa42ba29d498d701d9d2ea5f

SHA256
ad5ca799a8977741104d57b2b711e81e782faca9c7851ef935a3dcf3cee8568f

SHA512
d4ca2adcc31c03550fe2b48ad7078bcd30a37dc2194e825947496bce639bc19adb25b1d61ab1719b2c0a5a1e457786d9d542ddd75bc3ae49e8cda83df0b5db94

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ecf323e15a89fdec5f9f37d1630d195c

SHA1
d04fe04f63e98379bf7acd104e042052f982a3b3

SHA256
80b204548d38dceecca03d2d8c763c88fb7aed440d2a4c1339206f5e70858bb1

SHA512
936defd92be52cd568d4c2e7807d32f974ad36db9ca0b12a149c7887678a3b6d2df619947653639cb79d8574a7ce0d76d7867ffffeec4e6f3ebb44ef670ebdec

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
561ba88bcf4637bbed97bbc410942d3b

SHA1
30d8f3d03652894b081fb52a8253278b13099a98

SHA256
3b0bfc695f9a567a3f3de4a24fc92715366c8183e72d9bbd353c3331e91c6bcc

SHA512
876f404b6bd302c9445e76656d53bf711c7480dcbabc9e6a89fffba17cde138144d809861f0c604f40ad5958634c6c5a1ed4fd3706afa28e4e4aaa525ff9582c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
512204906cb5f7aedd8cac10a8eccc79

SHA1
1e25b718ece21ffa6dc4feee30729ff42b9dad7a

SHA256
5cef539f710a288d42517d70571df393c264ab70e3a1573a42ce47a978e2ce28

SHA512
73fec072bdb75a8d44c93ae78a5fc9961df3b8a32dc6a2f8779efd956c542f5e4db994a4f3c276851a34af0376dfd22d070f95e4819ec818a6169af1c0bb87cb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab1C2B.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar1C8C.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit