1ffa86768bb88dcc5b1888ad61f704d0f951dd8d68fe82346696aa50066648b1

Analysis

max time kernel
134s
max time network
128s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 00:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

31d1a9017f899d8a9dd71f275f2d9645_JaffaCakes118.html
Size

113KB
MD5

31d1a9017f899d8a9dd71f275f2d9645
SHA1

9f0a8d7252fd16ca7857075821b381388a9bdea2
SHA256

1ffa86768bb88dcc5b1888ad61f704d0f951dd8d68fe82346696aa50066648b1
SHA512

4072fa8ab18145142c4af5789ed0440d939bd4fbd665f4590df6205ee0b59b61a94fe0859a6e7f1a0070688809c8263d690c3e09dcaff0799803c543de65f158
SSDEEP

1536:SAyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:SAyfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 00956ca73ba3da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421549793"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009b106788dea7af4d98683a8983feb7c6000000000200000000001066000000010000200000005f60f0c3f99f7b84c3b42aa5184087ee1b5c83066c10c908ab18706f4a340509000000000e800000000200002000000025cb5e7e9284cca51be1d2cd553e6842b3289fa21f9c2c0479fb477d46933cf520000000a89dfdbe54d676207f0de99ae0aae9110fc5d653a1d09f356f0e0c37d0200f1140000000c9658b383012858fd81a5688e6a9711590255e774696348d39bb05baa1347222795ac1cb7124dabc03ba22a14ad919f023e22b076cd0a07aab56d6b46f9f5e01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D2E56D11-0F2E-11EF-B7A6-525094B41941} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1244	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1244	iexplore.exe
1244	iexplore.exe
1164	IEXPLORE.EXE
1164	IEXPLORE.EXE
1164	IEXPLORE.EXE
1164	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1244 wrote to memory of 1164	1244	iexplore.exe	28
PID 1244 wrote to memory of 1164	1244	iexplore.exe	28
PID 1244 wrote to memory of 1164	1244	iexplore.exe	28
PID 1244 wrote to memory of 1164	1244	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\31d1a9017f899d8a9dd71f275f2d9645_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1244
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1244 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1164

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4e5050db666c5e3b9193ccebec261659

SHA1
2692ec49e2affac0d692354b9fc99dee62435934

SHA256
43191a6553953994e07d7c47d357503cb90acc457863746e0fbb69225ac0e265

SHA512
8ef4906c4a2eaa2cb72dcea4605743f9f7a08c6a9e6e3d88b624cb16f6579a079a46cf36102718db4bac4e862dcf88aca11d4dca9285b6cd088a83a8ff15d442

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bb0a5adee8cb09982250ef3e4c84253c

SHA1
e015b5d6a2a496dd450ab3fc7301f0be5d5d3414

SHA256
d38bec9aa5bbfbcb60265366b3ce2f56faf922a93d9e73b5c4eb5073f9a2b423

SHA512
3d2d2a41bd7d3a547cb0666c64c075becbbca4219ab3d4d1609cef4c63ed2b85a08ca1583ecce9ec9aa0e53adf76ef180bdd00ffb2b89c21350d52469af4aa94

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cb71683eb441d0ad9b542518342dccb7

SHA1
016db491464693cd8ed5b63f5cf8af12b7e3cef2

SHA256
a423a21dff22820f63463c46400161bd675cb837334571824dffe5f27e2aa5e1

SHA512
06916a6e9900f5134b0e4c67313278ca8e430f663adf7a0c1518943d0a3b036423df5477183e96a56e6b1374bfd73ddaea883409dcbcea309ed4677b5f1de209

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aa6dad46d801dc33187e814514ba1b56

SHA1
a88a0018e5fae7c4ba822660aaca70084a962fbe

SHA256
e273d00f65e914f3cb3e15d89e53aff007818cdc2a49d0e6a75685ca5537773e

SHA512
9de5153755cf927e23c0e8733fc0615be320c492e91e4c8a025a40e655ff1a2a7953c6fbf9f68313a38de8e57af81042214ca4ea3e415c356fd08ca421145dfd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2fb265b2333a8fbb81bf1ac3d4518f00

SHA1
ab0afa4fe5507ab0bcbbb0b8304e7055b1ec83d8

SHA256
3692dbc4ce47c13d7f43d3e1a7839638c24295ba0e9c155445accfd87c3a8afb

SHA512
3137730ae2f3692815fea554fdf59c5af0bc45beed9d995dc8c2e84da093025e14d8be82f25545fcdb1bfe05356112e90c63fa7a50f837e98df40aeb83d855b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fbc58bca05a42ff82bac55dad9ad15ac

SHA1
db0cb8ccd97084e8042d2e272725fc3ff82b222e

SHA256
64dac6ff6fa0bcae307cc7ab7d3f778f620842fdc2dacd7ad4128a2fa20b38ce

SHA512
d2d890440bad3c039b5988034055a99bfb28eee4a103ae9961bb900ffdbd06dc7e85c572050be4d1087b3b96cb82a03c1913295e27430e62e34323e95b52c8de

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
57d615da3c7bf062cde222225de6803b

SHA1
cbbe6d37b5454102e21224a3785e60311bf92199

SHA256
1f584de108c0bef2fd1b81bb166ebb6b1b10026c91219ff573f344274cc93b68

SHA512
d8570a90ec554878cdeca345b37c863a726a7991c95ecfe2e8b36147218379ad1cc8310e27a9cb2c762eadba7614da5c24968366f89645672b9c0572955afd13

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f81ec9da30d8a3bcb174c523062ace83

SHA1
3790f13d9ef86619f98746fa360bbbfda84ae774

SHA256
ba63fa3dfd7d48db34980198c763fa2e8621116f51b7cb65f33c45660c6c5ea2

SHA512
e884e7dc0be3136af4bbfc45f87e1c1d73fde698aab4588f36c320ca242cda12a9572551c91d8cdf1cf2bd74a9666fc6259386d5763613d069715fe3fd99a316

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0e0f464ffe8cd6a13be98c2ae96a5283

SHA1
0e4fd3029782a61546d2f0cfa47cc74bfb27ac7e

SHA256
bd26c164f3ee4283710e6287bd7570222436232525fe1ea227b8601e7fa1a565

SHA512
860a0494601018f3a782bf29c1f795c47411c40dcf01ffc436be4b7cec026c332c981e77babb9fa4d7137aab376b84308c0917c4b96ee86e0353e3bac6654e3e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c114a33ea3e5bfa196fe140f53f8ad7d

SHA1
c0ca8e7a16e60ac295e15942edb8f370a6de1fcc

SHA256
c0df5c1d53f8b7e38f8617e2152ea4dcb5144ad9b9fd3e48860f1ba32c6aeadb

SHA512
0e898d264a6c70ef7d47c4e1177c51f1eaa1993f7cbca18c1e1dbc8e265a8942a9f25bfa7d11e7b7d963d53ceacf5e23a10e462e0756eff4b3af4362d0e7d4e4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1d5af39723a6e46786ee4e371d16d371

SHA1
5b61d428c7d34a3d2de5570fa5a23ed4af42158b

SHA256
ed691acdf841aded7b9e165f64dc88f21535243bc761a0e6638ba2d059520394

SHA512
baab531aa4c0bc45c5c5601cd61c2498bf8b0c5ec609b89f1f74d8cddbd4a20d6b986d13c881b7cccf3b925b64743c175bdbe1214130a80a8eb3b9f3d6e12c70

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
84d52293e11e9aa9a78a7205066947fc

SHA1
49e60b0c9c485b15fb678b73de85f8040c5b3b05

SHA256
1f38745abc56e60273178fec4be656efdd66d15a06537284b3803991d7906328

SHA512
fcceba007890978accaa7738d3371b19cd209656d1bd4ef27e44ad65f307d365b7cf9ace9c8231538f51075d6035f27a161b533d4bd34d4a93598051e8ef37d8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f73781d72a226645b5310ac1641c2030

SHA1
58dd4afa4b5830f08cd8b278109a1a14e579b683

SHA256
6ed6d61f8dd432671e8afe710f11eadfdce10e1800674ef45793df1b0d47a2ee

SHA512
3ef920a2974070a67b7996c2274daba42edebeb8a41cb01be7150fa8e46c251cbd650a86071919ae0bbff5ed5de04529bdbe129db5d625e85675443d70aaf7a2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bb8665fd6da1de066512ae46688fad77

SHA1
7aa0b735da082927c3c62b1972fea4f2270040e5

SHA256
22d0041b118e30366fa1a2a286df90c54bb23ac7d95bb693252e1f2c0ba94e5e

SHA512
dea03d3689202a27b86c85b15173e8687d2acb0a365e7eeb2704b666f8c22868e059e4769ad53d7c5323f60ba311bd5574a1cb6855123169d4305960dcead465

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b98ea848851064dde3b9ccbaff73e1e6

SHA1
16981788689c141efbdea4a19907c9c0f926761d

SHA256
842a4fcb7f896b8ca9104904b851b42152d279568d24ec0f4834dfc48b88d05e

SHA512
315b877662da41cdcf274fefd0bb573230e1f2e3e830d4011f4d030c387789c611efd5a7f2dfd762f52794cae366eb828d67cc885e36b7e57b8fcf7e64b58726

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2888.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2947.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar295E.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit