bfbaad250f811d897937795f56929d7388d60c9f0cef1bcea23a6d0dc7059b4f

Analysis

max time kernel
141s
max time network
147s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
11/05/2024, 15:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3542b5a5ded665b521774677bc1852d6_JaffaCakes118.html
Size

3KB
MD5

3542b5a5ded665b521774677bc1852d6
SHA1

a458e33725bac6415680b3efffa4d35cbb75d258
SHA256

bfbaad250f811d897937795f56929d7388d60c9f0cef1bcea23a6d0dc7059b4f
SHA512

81a821643843c8cd553eac4571b9ed474908e526ec9fbc0992ecfddda457d0873decb6d9016c89fbf165861295e442b39b203314a248b9639131062d7ecde8d1

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421603023"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009b106788dea7af4d98683a8983feb7c6000000000200000000001066000000010000200000003c6983f9104cf67114128ebb1365d009fd2ddc974fc2c1ab931050cea50e54ad000000000e8000000002000020000000d78a3019ca45129ff51ad5f825809ba510eb18ba7742baae1b8ab5d6f2099d1a200000009934715e329f9e9dea7943be6fdbb3f6419363a3302aea0cdaaebd7fc56f4459400000004ae8abb47a92be1564af0682612559f01d7e8c0d125fa1f368bf064a43a1f685f0267eba42802ad85690b72e3571f44b6b3d52d4fc91c77d839fd3c05fa21fa5	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 709db497b7a3da01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{C309C0E1-0FAA-11EF-ADBF-FA30248A334C} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2228	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2228	iexplore.exe
2228	iexplore.exe
2756	IEXPLORE.EXE
2756	IEXPLORE.EXE
2756	IEXPLORE.EXE
2756	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2228 wrote to memory of 2756	2228	iexplore.exe	28
PID 2228 wrote to memory of 2756	2228	iexplore.exe	28
PID 2228 wrote to memory of 2756	2228	iexplore.exe	28
PID 2228 wrote to memory of 2756	2228	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3542b5a5ded665b521774677bc1852d6_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2228
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2228 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2756

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b8e756c121ef329de67a91751f290a57

SHA1
710e53a80e38891912797716f6f8da9ffa8f387e

SHA256
eedb8f572cb6d87584c93aeb3a4b4a788c1a015d12f2a69c225b04e2505cbcc4

SHA512
2b97944128023ae2d8cf152523dbb6c5dabbe5b90bb7e79d33e77d597a2ace2403fd47fe201f04a7585825be77925ee2f0032af94f31596aca0e9d86f6548592

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2b842d6efcc326254a32d936f3d8334e

SHA1
fa624e74107c042eee62a35352451d34743bb706

SHA256
b4ef12b90e79edb98e9798ac5bc6dbe827e34386db648cc2ad236ea55646ed23

SHA512
4d236784daccecd62fe861a569b49a38ab570c7adaf626300b16796510b501d9147f350be275c4a381985393ddef42b54f05ca4587e190832d23d66546ff293b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2cd0e71c0659594fdd8d67e68603a23c

SHA1
b8164b9a3dfeef6b6728961bdc7fb0881ed668bd

SHA256
ad6948eb59c8872a6ffc82dff9d9241a71d749b08f317a2d0b5a783edc2b2d5d

SHA512
ca2e838d53caca34a131c045a1c7bad8bf1e3b56bfcca066ef722a3ea3dda30b6398837f1b1557eed18eb950bed13a2b85fc40d03227510b79d1d4e4df179e0f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5be9298f62caf1e9f4752b8cd2073bc2

SHA1
933a614b5a4a9fa6023c2e6422e72e21cdf60af5

SHA256
10aebbeefafb3319a771018210b7c61d40bc73bba01803bad76ef67f586e91f0

SHA512
477efae4dac6f9b50d8562cb59c545264619da3676025bffa16b65d877f65bc006f9f05f03d72f072d8e1ef39eb16e6f79209d89c034d57a4dfe4386a9f9eafe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2826b87bc4e09b2e1175459e6f336775

SHA1
c24e647e93a481fe888924a14b71992d084baf8f

SHA256
7edf198652eb015b6c8051f2756c963087289825ea7b5e88e5d4a88f6555886b

SHA512
f294230e5b5acc8292473f0a30d9d61c4c3a0fb11b1ac79345b8a19ab46c5b8220562c30f9d23b71958d03920dbfbd3291a3998c5d83b9218633406aa775e8ef

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f9a20d03580ac8278e01e4e360b49248

SHA1
d01c661941919b0a9c1b5a33c720a6118289dd86

SHA256
8017f359202f6e6885eee98effa278310ef722874d976b717cdfd2fe5a214914

SHA512
f1666206377d00eb36582b4dc33c3946e1b71d4fabb2bda285d8838710a92c87363856218dbfa5fc21190f886a83cdcbffd78ece1d002b382b5697b04df90e93

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4524b745c62df0106064a15f45443c3e

SHA1
a8e306d52d5052faf9ab4f9813be6e9328c7dadd

SHA256
24e9f21b8b012fb647b624f7860a78b8e40d4475700d17a6f345df9942b9fc9a

SHA512
2887d924ee055210a966ab0a2e5aac2fa0023de12b2c30ad6f7c357957c1cea15388ec9a0be31c721896c0726594a5544278b8918393e33bdef7287ef8cf27e6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7febba39d2b519722b9349922befebd7

SHA1
811ac1b15c2f061989461cbd501b671ae01241f7

SHA256
1e79cf8508c481fdf02f0647224f0a1c5ed85360a24fdb769038f0ffa79136dc

SHA512
e27cda5cb84c89bf9b13d9251f0984c35c23e4ce329cbe8c501cbd0d36b0a70afaab71ab6abc08a043424142415853252fd23923092fbd35dafe938be94cd105

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2d083661d7b5eaf40f83acbae176fa8a

SHA1
26e3c4637dc3e33607cdad349f5ee5bc71bb15bb

SHA256
8c9f91aac79bd525b89936d4dd07b31402bd432eb3ab8a9e26a9277e32b0c6ac

SHA512
bf8c5b4d1db03c7d221623511624b45603575c52b99393a333f0e0dafc89185fa802204c40048be51513f971d92f5e4b5a99e54f1fc8a4fee66feb112ab95b76

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0588167daa71f766897e7a659f3f077f

SHA1
0fe83b0031974cb29a6457b6a28c8a6e8b397ad8

SHA256
19ae2ed85c9fd19a24be7fd4c0fb8290990f9d11d35379f024261778577b14cc

SHA512
6790eab0682f0e00b0932bd36aa866aa1d13c39a3c57cbde074a631d9eaad1ad9f33ec6f50dca093471072228ee1d6faa7a40bfbe958afe759c24f5b99754daf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ffa381d9a54ab0c3ff3cd9a784615b73

SHA1
2b973693c74a118c8890d9bf265883e0e5edcddd

SHA256
08d45e935b3a4b4aeeb9a45a4d230b5eeedb38c434d034defecce1d548053c75

SHA512
80dc6c338e9fb2806cffba07773e4881e5c55a223b4c83c8e5a738539d8efd569293e2f675cf6017279a8486eaaf36d920b889c3371e082f83218a619763a976

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
44a6c800cc3a0cd97c1ed6077aa4291c

SHA1
31b1c6d76cb510ecfb6e7d08f2874110dab00521

SHA256
9b8b3ce55ce20e9ae5e3641948759fa708daba2a51e739669adef1a7a35e14ab

SHA512
a86de325df2bd4e9ae9f605d1049d2c7c500140bd0e412630929c95421c55a0dd8cb66658d20e45cd316e2097b55804d78983fee4c5c2ef3db830894c13206d3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
28524f3fa90073a71c08129c98f04afa

SHA1
44783d5cfbd0e6c1644cd81956faf6ac988905a4

SHA256
efc096e5239c8d685b2a7e5e1894a546a9fcd49f33d8c3dd011abb06d0709fa9

SHA512
592e9370fdfc348626f4ebee14a82e751073c4f7cbb21c2cccfe34238967db11596e3bd0524e4455b3e24d7e2357998c3b85901d76cdaa4038806353a3a72cfa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
acad4706dc3bc1e258ea82bd45b0f195

SHA1
5aab0b9f77c2bfc3e26385828c94e8ca3dd86fef

SHA256
0a1c2dc6c0cc1bad440122df6903d3c487889fad62f7c4a61579d0850845cd12

SHA512
1bbfee86823def182424c1d1c89d0e7d4bdf7c6393d80cfd5daf471e7843f7d242bc41c83206f72c305b27df8b9a73e22e65f738ad4b0daedf347bc95c315927

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6018286e5289b451833fd94883cc496e

SHA1
5c53b261c6d0a92fbc3b84ec064a1a8be2ed1d17

SHA256
cdb29533f169d371c1a5213c51bfe2d3ba7318399fc4601b95b560b94706b42f

SHA512
c956e5cab586e4577383fc5a330098892189c5ebdbd5f4934d6e6bd3f14d08db336b33d6fa816619658cf09e20715b90e4bcc6ac26b284a0abdaa23ca82f4452

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dab0c9f8fbb60d78447d66dcf4692efa

SHA1
40d4fcf11a05b5452a977d33eeb5d7ace00f7035

SHA256
9cc469edc47d05c5e0bd3db5e7f8947314e8ded81a39d152cb68d9e647bcdb5e

SHA512
337aa3e07b8ecacefb5ab3bf4c8ae92e4e2a5ac89467328c653bb42fc361e9c67cc3d0e0a60e0540f3c89bffed7860c06c02401b90dd3a55249294f9f233fae4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6fe5bf17041ed9a2c34c74f1daeb7914

SHA1
92cc21a8679073a0ede02cbcf7eab4821fda1005

SHA256
1812c5cb0eb6dbedb47bf3d217afa5ca1dbd49c40ccd4ca72b9fb147183ef389

SHA512
1e8e7817043e9239fd2aa5584116fc6d6f620c824909f5f5af9a23b67c8777c9955b2a8418f8244a31990cc3fbb52369ffd2f671e7f6e1c884511aecf6fb2a77

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2c91710e7a96c19768a6178f44af846e

SHA1
5e6228ca46267bdc842f03e49d5939b24ddab4dd

SHA256
67a43f3c24d8c83b8eb8fed48447e370d995b6fd9aea6275abf425d3754b657c

SHA512
8919e822288bb8192546b06df884ed9924f37139d2c917a98616e4a1073f78d097ed6a7caa744a48f24fea08f5f9c0c2486afaf5757d6b94f9c0ee3225903c09

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar26F9.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit