dbfa2e4a930cf4411d3dc82bc4cdb7eafcebe6ea12f46b3ef4e17ea6571f2040

Analysis

max time kernel
136s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
10/05/2024, 01:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c947857fd92e0cb869f63ed1e6c273f_JaffaCakes118.html
Size

4KB
MD5

2c947857fd92e0cb869f63ed1e6c273f
SHA1

225f14f3908f0292edf393b0b37aee6f0c9293c8
SHA256

dbfa2e4a930cf4411d3dc82bc4cdb7eafcebe6ea12f46b3ef4e17ea6571f2040
SHA512

ec3592d8c6843480369ceb18c301b6a78568216cde94819199bca110a7c664eb3d226fcf05dcb7941dcd6f4f9f9e9708db83d8881d221ff113ee35f351a2d5a0
SSDEEP

96:SThg6Xh/hN0sQuggYr3+LYdd70dddchnddddddddddddddddddlnddddddddddw7:SThBh7tqirf7xGRafKeHaYV

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000b6cdfefa1e58b581e61e90495135a5162d568aeda48b470e214b3f085b40a075000000000e8000000002000020000000672b3c4732e8385e963b5e81c5909a6827f660324eed0e277302df65af8f5795200000001287f687e86d74ca432564fdebfee272263a8209c8deb045c6e1936fab2bd9304000000085a5897b805bc5f014d21469d127a4ab78c1efb34edbbc288e656435762dfda3be91e121a41b99efad797e7ff3f792259709f887d2cabec10b5e5eaad504fe7a	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{18E06201-0E69-11EF-AB01-4E87F544447C} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421464870"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 3057482c76a2da01	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2056	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2056	iexplore.exe
2056	iexplore.exe
2904	IEXPLORE.EXE
2904	IEXPLORE.EXE
2904	IEXPLORE.EXE
2904	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2056 wrote to memory of 2904	2056	iexplore.exe	28
PID 2056 wrote to memory of 2904	2056	iexplore.exe	28
PID 2056 wrote to memory of 2904	2056	iexplore.exe	28
PID 2056 wrote to memory of 2904	2056	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c947857fd92e0cb869f63ed1e6c273f_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2056
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2056 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2904

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b00f454b2f241fa08d715d9905aded38

SHA1
5cac58ed3f7ecb1c2dac5d463dfefbbddbf5c20d

SHA256
61f914b87c4631755408f7508a157d76ec159b09868bfb6fbb0d104194ce98d8

SHA512
c97a38167cf9ca62e79327a2e7d62de0c96b9fd9f4912285f5fdde4a392e7433286080e477c3cffa991e9b4869501f0bfa1d50d3343b9270f12c5d298b4ecc4d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d781ed50ceb8f2d4d83ca9fc77cc1865

SHA1
dec141b0f13fdf3cfcfb42f9a237702a7d497acf

SHA256
e2045918958ee99b6a69d80f8da02d1dee80286ed1b1f9f86f63341c451985b8

SHA512
8773db9f3bbdcbb28b38e94d21b77d3e755833e0efb8946ccf70ffc8c0555c99d15aab6fad3d1bf1dc0faa2d56f5bf578c41e42e63bc3eeefea3a391317ce66b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0261e4ce0a4c9cfd3ee783687b0f93ef

SHA1
7dd00bfba902aea8c3a7bffea62c29beee88e304

SHA256
2f38412230c911cc1eb38434d587e12736df05516625673ce400448540417a81

SHA512
778ba0b18a7b7e2af9db3da945800d5c114fea05251c0a2c77d7a0cbaacc554c746b4b48d007953b8e1ff240a372174ad0da999dd2ac98c4627143ede6839d22

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f5d57898aa85beebd35bcbc3cba04441

SHA1
92b8b55c887154beda139a6377d870595c7af66c

SHA256
c857e0f14c96c460b51b6c6a547d0401efcc60754054dce58074e0154930a932

SHA512
254f8a1dd8d50b3163dbb49657b040d74c34646c40d5fcb7b8cace0d908ca54ea96344e7b10f1f439ee3098eda01f3da7d3c54c00b633b3b22577ec535af4036

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3bc57c7593618b3c69f0858874fc47ad

SHA1
4d93369f5816e04579d7cc87c265ef1e9111926a

SHA256
ac4359ba51c8101a05d6b5987986baf72971d10ce196c690af25a97020a3faf5

SHA512
039d326c2b6ec394a45bc6820cc236113e59b911a106ccdcacd6311ac1a13d945d5f4eb6bb40ed31ad12ce3b4ef8b31aa032fe342d09bca5f405ecfd7ff4a214

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
82f5cc874ccb053f8edbe0b78ca12e7f

SHA1
58d8e4cb26244773e504e70dc9bbd25e1f7dde71

SHA256
265148659c5d509959dcc7a30e6e719e098c120c23998913d788b30086f320cc

SHA512
b26b4f71d6902dffbf57bfc85af803b9173b8f283ccd15ad71ddae619d7b8de6698fec37158bdff20f5a1e9ea6931f73bb5ad5b3377391ade283f6d7ac79e15d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6783c1f00e563ede2043dd478a1021a0

SHA1
a0f5cfdcd9fda9c9bf45b1b7b025daf11f462019

SHA256
19caff34187e94ecd0f3e301b386db8e7e379431e218894a64e8df2baa9cba2f

SHA512
347a618e352d393b3ee998e54e272b1a287e62512fa080008646e71f87b7cdf592bec118ad194890415ef9fe0cc0f330949e587e92247f9c6c4b4239565051be

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
42ba70e2cc715b1eec9b3235f7a6a14b

SHA1
ad8db40b00d3a7a269d77df49ca06117676927d6

SHA256
37c44a871b63701fe7da25f8ad7e09212a2f0937a6167cdabd822913714a75ba

SHA512
930e7049f004c3d43f60342bb413495dccca11f87ce13e29d6caa87d630a901d57c2127080fdc72e7359e2e007d6b888ced091b96d12aa548fcf7c57707cc72d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5adb63dc3b29f4b6dbee7b02476757a0

SHA1
805aa74dc44321c3bb335b429aabaf46d1aadb4f

SHA256
bfd2bb01caea673abbc5e32b8b1b3b5b73da6bdc64eeedd0c28bd377bb0e397c

SHA512
30e7bca3430052aa2cfd24cc9d25490d1aaed9147af12cf511e538c824832eabd21d34e7b4e72d520269cf91727d0d3854845fe750a98d1c2de53f0ed6e6f87e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
686900400440d1ed5691f2b74a8920b4

SHA1
21b2ec708f4b89d618f9d2dad5a069647eb4249d

SHA256
79e7cc6074694467e3295d0effe8b2660058c2b5b6b3981c649d36da3ccb4b35

SHA512
b36d00ef151755267471aa59a1e829962178a69140f648bd621d7507685b4f7087a047aebfd1ac0615a400289c6bebb930ebc8188b78ab43f14735b5a0716a42

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aa46f86014ad2eaa8a1fc7f504ae6bc6

SHA1
2771ce6006bdff9f1a880d5513124185a8fbae74

SHA256
c06d94e54cef876c7108f7378b6de73e3aa5009d6652b178c231ac48dd7027b7

SHA512
0f961ec21c4b320844b1749dc90847e33d4c836f1207e6d0623eadb97bbbc6986dcc57e8dc2ff10a8c8f31be250de87e9e66bb3aa04ab6ce91353d5ab2612e4b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d7a9f68267658a01b930559f2f1fa0d4

SHA1
827c0d8ca51db5cd804c5c1f808482685301054b

SHA256
6db4a396fbb7615a173911f5aa14bd524bf0609d09714095aba793e3c382c419

SHA512
d6b539381493f09c07622db458357ca7311253a9f496b4d18fb460325642e3b9b85c8f87ecd88b49ca06c74a16c2b2b269b129bb758bfe9c7991a1da2e200fa9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c23ab55396d8384979ac13b272b2d97d

SHA1
45e4ca74b67faa5e8e8db56975c1a0386f738087

SHA256
06b9f6d713769728cc61749af6cd1c23d3894977759d2086616b1c3a720cdb27

SHA512
f8d67fe2839f7b20587dd3599278b4fbfb43d7ad55cf8e9566df386ca22f60ec09cc049021dcbb13b4406863bfc7e1e72f8c5a1bd76df6e12ffb1d906b154d9e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4f28d8d15c1968048af21f0d762734d3

SHA1
7a911e6224cebee4617913a2ff46ff787a83624e

SHA256
efa486d6eb77f5fbb771074866f65878eff22521f2c6e2d22e1820b5d90c1471

SHA512
72870badfab1bc5d78e95b082dabf8e66c9f7c5401928cbe5cf67e5d5d3c314f011e2ac3c5fc83b3edd1f48e669ce463328c6a0e6932419dfd72d0c3e074ae52

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
93c3989a41db6cfe0b7c0bbcaa9dc202

SHA1
0c26b28b1b2737c00a5d753143394d8fe34bf810

SHA256
744ec179ea47f1f88c93fff3fe31f49977f334c2233387370c1297381d64761e

SHA512
3576a92189f5ca0f4544c1dfa601cf23ea67dd0042132323e29b67b73be45b14376d31f5568323e4c762bb1f8bc7a653b35e51053d8bd3c9c6aa3cbc3dd7e021

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
225d3fbfcbad9709001d96f4ccad83eb

SHA1
4edf3e980a3d059150e3cbd013f4c91e13217e9e

SHA256
84a4990d057cb8d27b9412b435ad54285b57ee94e47de770ab9fa0802c6f72a3

SHA512
440b3c216e4a1ecac8129975aab5586441ee9add93a4e3679da302c1033095a2637c7d7e2d744ab61bd9a13bd707a53d707d7d401d93c5c75ed352da1627f2ed

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fc83fd7d5ebcfe48aa776da775df69a2

SHA1
7c4c4e16f069885b0ba67939665e95755b9d810c

SHA256
1f10e71b7ba40814bf906d5786b215e6963906af282d4bb37515d94a27814a63

SHA512
283d17d0b2cab80dba7decfed6c98f583d91b9bba994e2fd7eb27285510fb9a75d10608be32975234c8257bc3ad21feb98dff6b803cfb23bb37d71a8594e56aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6ed983142b71ea0894d35956e30f4a18

SHA1
6de91636d761a34f6b9611dd89d72f566bd32a44

SHA256
ce48c62b058f89f228ba281e6b5537fd58ec7d1b58892e7c0b0184ed22cd8b78

SHA512
b903808e56c760272b8378d761890cb0fa1210eddb9c05e882dde1b93df10e7c0a81cc556d365e0598ad482076c8b264f8a5c4729e43ac7fae9a576c53e9b387

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab20AC.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar20FD.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit