d42c8b420437e4a1076a3b92009e0f66969e024a056d7d8520ec4dab7a5c2dc3

Analysis

max time kernel
143s
max time network
143s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
12-05-2024 09:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

395355d62f26d61c9f8482349297337b_JaffaCakes118.html
Size

29KB
MD5

395355d62f26d61c9f8482349297337b
SHA1

1da553797e9bc38e24ee076fe71e4eabd81c4ac6
SHA256

d42c8b420437e4a1076a3b92009e0f66969e024a056d7d8520ec4dab7a5c2dc3
SHA512

b951b879336c401a1bb804f2bfa2de8d471b85d933b5f21de865c513f39de7bd11f91cb384c62be1ce60f67826e683ed358d7f04f7aea068d766159fda206532
SSDEEP

384:hl/6n6Pavykkq/yJl8yvI9k/bDUFzr7+N6Wv3Y0hcSNt/ifqxH7rgT:hEnPgqvHqbmr4Y0hvNt/ifqxH7rgT

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421666626"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D8D364A1-103E-11EF-A4C2-6AD47596CE83} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 5031e1ad4ba4da01	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000c685022ed4dcb51e8adcd086204cdac920751d1ddee518f0cb97486269eb64cc000000000e8000000002000020000000fc0180e63f54b440da4e367e11f7cb43a3c4fcf5aa2651d133788c7bd2cedfc020000000056c8e29752b00c2e2b89223b2d95450566b0ddbeb97282adb2b2e02f7f3742e400000005347440380d20602be453e9179f23d5bed04c6d3e28aa4c3599bb5b6d5db2abbc28948bbc0bd2e5451c6cf8dcb61db6ddbe4c6f3dae2a2f798f84f407f97d765	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1640	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1640	iexplore.exe
1640	iexplore.exe
2896	IEXPLORE.EXE
2896	IEXPLORE.EXE
2896	IEXPLORE.EXE
2896	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1640 wrote to memory of 2896	1640	iexplore.exe	28
PID 1640 wrote to memory of 2896	1640	iexplore.exe	28
PID 1640 wrote to memory of 2896	1640	iexplore.exe	28
PID 1640 wrote to memory of 2896	1640	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\395355d62f26d61c9f8482349297337b_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1640
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1640 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2896

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
86c7c1cc300cc8b91490cac9adc274a9

SHA1
93165e06703c743be56ba63b353ae805df11669b

SHA256
d44a20ac3940473a97117920feb8df79ac2f6bd460f7845c12581190c359ec48

SHA512
7cbc2b3c08bcdd9e82260b150908f70eda39113c8cf39526a7624d24fe51a584b11c340adabb2281b1f6c078e22f11abdcb1de389df6a1e30506a5d476483a7b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1f1fb89cdc67bfb1073ce2a4c20bd3c8

SHA1
269d2de509bf748036f0761b6d904d9e42fe674b

SHA256
cc2e6a27102fa811fd32b405920387cf59f1817578f3767e8fa609c689317373

SHA512
491479d377dac38ff508b60c62b8751547d8aecbb5b161cea26e1be3f5b929b7a7f326a3531c6c55b0bb431c00eb9d73ec7c0ee7ac06ee7f2d503f3db2bcd030

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
78757d4edaade283883c2f0c1f3c43c1

SHA1
db261c0ffedd83682a6c671f104707a0876dbeb6

SHA256
4c7eb94c2ecb3847c650b8ce9bec28a63091d8aafe28cb4713d121e9ca671c45

SHA512
37a2d62f1a6bc529386dcae6295ee6aa63086b89348dfd717c5336caf92dd0556a182df256ee2bb984f179da06d9d72514e7f8d2cde04063a4e1571ceede1e3f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
32a94eb52db1503485caaa61e1ec852f

SHA1
b9640cdb0ccb1716c186a5a436f3b87f9a716a81

SHA256
393532fe08d7f91fe92ebc092c282d42b222823f9ddb0b84722b8d8478abd470

SHA512
db9ee909491b2bc97e28a07fa5e320e16f6b70ee7b33b021767d7943e4ddd65d9860cdaa2862617df361a76776a92deb09c3aa5371d4fe1bf320cabb2940eb75

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ee66fefbbdfd560275878e98d3cac56c

SHA1
dc709db8fc5269924ae14d5a6e0f1979cd472a9e

SHA256
12c872b2005ea82bf202e6a7235ab8517a9a15b881cea2f64152ad9903631e0b

SHA512
c1f30831b799af4e1996d1f4999b0efc3c041438ef90ab3b2c924d7e0d3255927d44569392a5602960c7d19fcc3b20d94fab9b9c6ad8232839cceec76d230915

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fa59dec8218b6f31ca440e57a8d28349

SHA1
622a9b3878c128958f3ae64aa5db71bb9904ce9a

SHA256
e80db35d38299a95b8bec93f7c37a2b6e864b8a8a23ebcf073379da1e0e51bd7

SHA512
ce5cf511eda385030f7fac23ca7f8b4b9c5202ed00e01932c5db49f50911f90413d8c75f04361353681efbf0e8b636a459360f3c7d23a4d13322af07ec462770

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d4217204c5a108938d023399466f784c

SHA1
8968a9c09c2e001c03ed98724ddf66c8155fc839

SHA256
d71f6eba49c24ffa6c0ae5014f135dc204ce7a6acee7c9d7ffca4d64de4ccab7

SHA512
9b4c6e2398d868e72f9b40ab7d3f4844d9504bfbb488426d1de501a4e0f18b09bffdd8d5b38b4f6a76de8413358f7818e47c1564872cc6871ee8b6b5ca9bd7e4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fe59d2d2f749300f10e83f93739ec187

SHA1
c50e1852564bd76e641defd7867eede3422872ab

SHA256
6daf75af6498e55ca8a83818dcbd09b697eba14f7e8903983fa0af43ebaf9653

SHA512
ab8228adb9ab9d6696d7b8325243576f8dfcae41e435848bc9fd01ecac6cce5bae7801a5a54066cf87e33e55ab3ae588fd62f7ca0dda7f6655b276c41e8d3060

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f6543d584767150ecd816d85b9a7cc10

SHA1
928c6023bd1d6e0117718ab877869b8af3d24f89

SHA256
8f1b28e36d3c3b8526738d011021e5b9dfed716c2066fb76aa9a0567114476d7

SHA512
47be1da1e9048ef3d40b70e747bf04a2902f8cf2416f52b8daa8bb0ef348c89393d0585994ec586d604f87cc5300ad955d9d595a1d5e95526b8e29f5c36db836

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
39c9b2ad5a35edb37722d4781fe1bf5c

SHA1
96b9ea0ff2a7636721716efa4fce8310bbd94f17

SHA256
6d1809dd19f57287ab054c79fb6dc3c574ccde84fb7ff6420e231a4d17b66450

SHA512
3a5a97142d8cd5c5317828c88f005e0af616e293b204baed2555512cd983fd66149eb5f705a2e8d347e7d81d63f61b621cef90a4adf0fb8e27c975955ce968ce

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d264909e01183d6be28e7d7b088a5e4f

SHA1
9db76c8911bb08379ee7095b07a4e8955c06059b

SHA256
48ce9e582a4a3c3fd33cc1f2a3ffa6244cdc303ae645a51e6ceec4624032faea

SHA512
8188642bfe8804a4a4ea734129e921d413619a42f0c1c38fc16cf254ab6d416f0569d92cd793b9dd4b23c66488febacd6eee5fb4b07e9241c83222d6f4d389eb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
81e3fb09ab8233b5afb4c6e35f1e1925

SHA1
6b256bd9480b50c8926316cf445afcf4780e33bf

SHA256
fb4db1582233541393c413b0f50d9ef831e1c32acbe8399419c55e36361a39b8

SHA512
08c887a04ff5baf4101bc822388c81d691e1e876048ca94a4e2f080601c3c654ca3e2c8e8bbcc5dbfe5823c57fee1bb2119a29798018444797b7c76e8ed07d5e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bc0fb10ed6f2964cddca3b40768931e1

SHA1
b53997ed090fe602acfc2632d40eccd170d7b44c

SHA256
6ad4abf65855cb0fc37138a9c21907ced63f19aec5addfa36aafd3ba60061c66

SHA512
a6a5dd8abccb3563b05640f6d6db91ebbca1494d0798b52953523aa7401f960efc89030c83bf56bf09ea9715f92538e574cad55b6ce83c646e3ea075b5463b52

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b723cd11f20dba34e97d6a1a8cd41cc8

SHA1
1c850a53d7f8077e4f265c9e74f08d2b15baea3c

SHA256
25b33bfddbbecc97ecf38e937d4cb8171c783590f5419ebd4c8aa9a2980d6db7

SHA512
58e751a8a84fa72301a21e933fc34c84259bdff11224bf3abc6866826876647c99ac3ccb44fa90e96cdb271eef151548283e8fdb5b7c0c7504887aeeabf9215f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
86ea020b8a6dfe5d88c4f22d9b2fc019

SHA1
1815684976e740a33bc9b979e768143e0f9ce5a4

SHA256
0bf7696da8945bb75799f15357653d0998ad287a22f3a704e5de57b9bad85f62

SHA512
3049b08f61d993430150fd5576158c466cb96214c7313d42e88b175e8a89b39898865fbf9fc63dcf0a7ffddef4ff5b087aeaa77c71b4267aff61588fe91517c5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2b34a43b37e7c8ba8e2675a721b34fbc

SHA1
dad784d21f7241344d58e0ff0ed0948c871428d9

SHA256
382f0acfaf5d5d42bf732b2576550e015ddd1110d5fa5650f314537662890a18

SHA512
c5522140d43a84e8f43a695247d274cc322615be47f2c44f8b910db4f1fa40d6c37b89ea81625341f900c063b18271ccfb4aacf9185e4fb47ce3476d0affb3a3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
76da945ef30f737d424804425c7cea34

SHA1
413a5819ed21365d1569f9e4f1d7ae25f08ecf3e

SHA256
522800a76e8e00a0e4f0210051503c93bc618aefb169b86fe677b5c4e42ea548

SHA512
d3e48e148ec09335fba2043b65ed23a590d5d5931b45fe6e5e8354913ba529e34f0641774d5a29feda0a3acbb2f4f4ff1bd6116d002e345d751a265156f48a30

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MEFTDE7Q\fancybox[1].htm

Filesize
12KB

MD5
05a553aff3c4f301f286abe4c921855e

SHA1
3a704dd8a824b4bd84d9b50c113a1470c2376f88

SHA256
62466573618f202e7fef7d6f3a11faf58691c60791950598a6040aa0852d6a3d

SHA512
8b49ec2640cb46d414c7181bd6373bbbd0ae619a574f2c05a153f9a8612b8f4ed7f2385235ff3330df0a9844e06e1f6941d6447bd4e4f086af80d45981a751f3

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab348B.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar348A.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit