ff362eeca368db761204508026d9a28df47966f8f3eba4c07f2a7800c18757c4

Analysis

max time kernel
117s
max time network
134s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
10/05/2024, 15:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2fbeeda6bd549cd6f47be9731fefe18b_JaffaCakes118.gif
Size

56KB
MD5

2fbeeda6bd549cd6f47be9731fefe18b
SHA1

0fa83d51b73062f9b431ca4315e2b5122bd5a277
SHA256

ff362eeca368db761204508026d9a28df47966f8f3eba4c07f2a7800c18757c4
SHA512

682d5ded4b6b5e763a1d3b72e7e6fa760071a67e94c3bed328cbd0dc6e65c17a898537d2fc28810c9c4f43286f8cf37b2be5e1e5f76c8e22d2599e31c31e1d10
SSDEEP

384:sMiqpaf5rmbIO8NdMAULghgwn7dwtK57CMQ2RRyyVM2KiIHS37wr5NSQo:riqpINQo

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421516058"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b0000000002000000000010660000000100002000000088b82bd3d00abdfb255020b4e69a1d0001c698f556c1628a4f4d1ee8b55846c7000000000e8000000002000020000000d47c5e95bcd654513c0ff1bcaa451bc6cf726e0414991be66ef5822bc43c035820000000aaa5533fd44f9f22936ed9cdfb83edc551c97515271fb2bb6e315998a7bc6635400000002471ec0125acac47a20709d567a20833afb0e7990f3e721e7c92aba70e3d028fd2377c9e95e6b3764a562ec52046331815c49006301426826c72137db39fdf80	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d00a421ceda2da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{47245001-0EE0-11EF-9667-569FD5A164C1} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2772	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2772	iexplore.exe
2772	iexplore.exe
1612	IEXPLORE.EXE
1612	IEXPLORE.EXE
1612	IEXPLORE.EXE
1612	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2772 wrote to memory of 1612	2772	iexplore.exe	28
PID 2772 wrote to memory of 1612	2772	iexplore.exe	28
PID 2772 wrote to memory of 1612	2772	iexplore.exe	28
PID 2772 wrote to memory of 1612	2772	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2fbeeda6bd549cd6f47be9731fefe18b_JaffaCakes118.gif
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2772
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2772 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1612

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6844bd1a306d9fb27593bc8e7cb4703f

SHA1
d00125709a5415c1eeb6f5595fe494eaaa50f2b6

SHA256
27f817e2a85398d5e4183aa0fc32e78b96cb02f53dce72601703251eab09538e

SHA512
d302d374defbef5b597f1f407feee0fe205c475b4a61292871e7d56ec0c9e00d80ae026967d0cf45fcca8b23d1d8c07e74409243f844ad3b4ebcf0cec3c49b3c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4311c19a5c1aba12ef4b8e623ac409b5

SHA1
62f0ad2b9274addce0a19ca97d6fd5a9b9d142bd

SHA256
42ee9f61f15d2aad0e834479ce172c103f2090d2f7170b3229baacdd832dc426

SHA512
d34432e14606107ac18af4f8ccb04b21d7599d9bf1a5ffa6afd94208f873268879c6981279934afb261889d7edbb3db801848b4ceb091d9ecb4625417f6f0eb9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
05058ad080201d9ce3b4cb1346b85165

SHA1
8631143cbbff504e8f7f66c8c43e697f8a92de04

SHA256
9d9ffa8fa1e7fe37b0cdc094d20d836056f24f26947d9d6a455c84ed12033c7e

SHA512
9ca027d7e7e8251e756c38b7f37598c7066348051535252757fb2aefc1f4f78f87eb991bb55ce73513e0f4147c77ecea4117f30ce58d6bdfe4e8ebfcd55149c0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
33d10a6255341e19aed67c235284b08e

SHA1
d5deeb3ab8a9ce25a80479de4d8e8fde62d3a5c7

SHA256
2a39f5415311bede9d6815cc12f6b05eebbb2e1b9d86a7677d24deffcb64a64d

SHA512
1a213462eaa29cabbc32680a7db8b8df4c70adb55396f6e7df30f4ed09edc5719e2ad11dd9f847aa1510dfe4b8b80ad98939a26b08d3b63bb7e879638a11d623

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
18cd281e7e558ad3f741eb9ddb08b270

SHA1
e5206a5c913604763a3d7b5238d9eaf5e35f9903

SHA256
401907710b47f6a5add7364ef5bb7161fc91d43bbbdd6508f8675eedde977d5b

SHA512
724b179eae9f403779f580ffe0fb174c9814f17b4694a987151351df1bea63612e053cbc4f38127a5a442b7d0bb0befda86a5c44fe4b37ffe7a930f09c93c5c6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dda87fa79b637f1ac67d269bd186bf95

SHA1
cc9478776051284231baf39166159b6a1ea1151b

SHA256
cee0f35181b25d27d416b890e14d0f0ea3c612c7a0b476c028dfc88c59a9c955

SHA512
d49c5ea73f5f509b247fb33794cb5cb2c93eeeaa53d4ce263037a32ff248abf044dcfa7ecd503c71d6c5b35446a3ae87c2e89e31c3cb00c679b46a34cbd11fee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8d5d03e3f348e3a82976a8d97efb1f8b

SHA1
a5761768a53c736374578abe2072501179006fc0

SHA256
4eb97a7d500d311ede7eabfcd0d22f1a11dd8e9a5bd8c2bc6b849c3d5257c47c

SHA512
0fe3d2a95da0dc6cc45af51d4b3197e4f226ca6badd9e989e637546e28c63f4a7f31cba015243f42b76abf71619d5e121ad9080479fd57989e6217622f5f86bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6d5196e2330aa231174b08bec4bb93b6

SHA1
e9088061129ce264c2fba72532439a0af081f1d6

SHA256
c5392329a7d19fdd154fcd0bc4da2b1ba81ce937c27ebd0d11fee8e2be7b4579

SHA512
23fd47420f69584ea1225011d3554b43adeb4bda56fa85a75d9393b1305ff7ce7aceed6f089c5a3961f70ced102c6bdfc2972d7ad7f7a5a3076688949429869f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
13e17cce28a51dced7f588de3b55a0e8

SHA1
ccd0d9c0bf4394316e7be69624525a57d34a98e2

SHA256
98a60f13848fd32da22b9cbc0c6076477e58a2119d97e495788d5760d6d2913c

SHA512
1ebcec70a80d40a51a5c03dca278fc6e00e5f6ad503ca88c8ed77e824ee4022c764de975f258b84e006eb510a0ab9128ca97174dd6a186ef21c537c25d6edfdd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
145b5748d0c4aae76ffe71f653c89f81

SHA1
7b7e64a20e3b6dc8b05a253e207cc304f43a3a2a

SHA256
c95a55a79aeb2ae95e352412e33630e6958fdd43e7e69a7d1c017bed7578ee5c

SHA512
95c81c6d8277dd437fc3e687445c71f100d6b8a00cc04fedcce5463b734c7bb61239a081c93a6e17b7ab80bf980493f6d94269766b195dd53ce47f014129376b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5f73a75c62da8959e3ee98559df141c9

SHA1
83f93f4e381461b7815ac66eec6432e535c82c93

SHA256
dbe1e96b20536d4bf8f0e0170386f4e260d59cabd856dea1679a7cbff693a146

SHA512
df2709008ff6a15e86a3198f549b64f66e551e97bbf7828599ca67e9c90b8720e996ed19d1413d8523442d5acddfadfef4007fa1ea951e2d825283bea0902faf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e917b88c3e86ad0b20dd5b22ecf6a265

SHA1
84e0e5ace1fe6325c37586b05dc2f0fcabb5c807

SHA256
99c2d23b2f799b38ba2adefa27c71db19ece6a201f4eb26800b42f3bf9515dbb

SHA512
47c48292bcf42f71cbeb37e634f29a0e456a6809a0ac48db32392de3cdbb4997d6a4675c5c7a6dcc683b7840a37873081d03986f61d703735bae66205e4c8de3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c3ef19f35ae3e5474be0f750b93f8b67

SHA1
549f59d4cd8cac8a9539ebbf3aed884ab764e2dc

SHA256
ef6d6295f6ca5a6b4a845f3c3e8bb07a8340aced119510c81826ac74fc994012

SHA512
d0c31529be8aa7a2cda848bbe1a301ea667ba75cbf2495a532a56952f23ae3afc981b425e558d761314ac935ff08906cb0836877fc468637823310d6b61c7496

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
62b587e92f2b6e14ec87182e86add3db

SHA1
a20b35268f0edd99d107e7e42ce8efd8e9e31850

SHA256
69dc729a477bd7ba5ca6c83630fb0d7942e86a6e6674f830b04f9e74df7dbc9f

SHA512
fc0fc6eb76e3e0ee1e34a5f11168fc87155f2c423ab751d9cc3c644c8aed4a56f9dc15e971d0b6e9a8f9d9b787aa4d7fce2000ef9c291aa510ccede3b3d44bac

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
da0eb9d0a1d65967c481c7a36085620b

SHA1
eb6163b07b3ef11eb2252e48457dd1d5749ffec1

SHA256
ff1a8dd3908f4a95f24aa93f8abab27f568cb4b9bb68b61bcc2caa6b1153cc33

SHA512
40c92221c6cee6c48266bc5cfe1a2fab7f2294905e256fa11c31329f6e77e0355526f9a93f75050db4d4e5bb404a76c0234321757991670ad8d4a6c61e5eb6ee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
660638115c2fd4e685148844a029dc13

SHA1
43aed28652d9706d91c25600a95ac77f45213742

SHA256
5b87433f75918fcb00a583abec12071cadc97a406f1058e381e3e1a63a8ee8d8

SHA512
0a3bcd0b76b77ec1ac261bd7d40ad6927a7b30edd125849fd6eeacf9fea579d9d1954428ecbb0435bf0021352f71dbb6a5e61ad720c8d38a0a58e7160addc684

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
28b40eddfa52753e46355cd0fcf76469

SHA1
578265df8653cba4a716211071facdf18aa775ca

SHA256
7ca295069544d2ebfaded140e413b1bb7c087ca0dd3ad21b27975af7aaaf20cd

SHA512
1d9e04b00c300a9ba4c31e9ccbf2cc958b7c5b3fd0f20c312b1c74365dfc38def1d06b75a090dcf2926f95d69320ceba78c922db7764c11eae49196826612a5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabAA36.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarAB18.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit