f1aaf8b8c7930b739b6d8660651bd95e596a8ee6f48396f259c88c8170d69b5c

Analysis

max time kernel
136s
max time network
135s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12-05-2024 11:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

39f1cf7e467113dbeed0d99e43343caa_JaffaCakes118.html
Size

132KB
MD5

39f1cf7e467113dbeed0d99e43343caa
SHA1

3df100bedb85bb1da7cf8f59d7ef9f51267c2e8b
SHA256

f1aaf8b8c7930b739b6d8660651bd95e596a8ee6f48396f259c88c8170d69b5c
SHA512

dc058f87e76db22671183aead565b9c4cfe0b38d8385312792dd62dfa1ca941a3c9d30bc0c165c5f2d43e4de89bcbf91185b0375e4450a4e0b717003f3f7ea7f
SSDEEP

1536:9E9mWaSYrH4bWLyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:9EcyfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000a470ecac1a4d51a34da547a8e53e85baea99e33d6916138d245719bc8b85f72f000000000e8000000002000020000000a2b7839823543dc6f35a9dae1e0098015c5b515153ceed314a16fdcbf7fd4e5d20000000ad83f1c08289edbd9bea6a4d9f2023c6a9d4607efca97451f9739b3506b7e9fd400000004b780c5d0e7a187e008b9ef006ee497ebbab284a50dd078bda07a2f9b3521289a77c4ecf3d6812ad8af7d6b4299c4bd214d206c6843c21c637bb95cfeaa9833c	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 9070f32d62a4da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{58CE7A31-1055-11EF-A336-7EEA931DE775} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421676292"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2264	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2264	iexplore.exe
2264	iexplore.exe
2472	IEXPLORE.EXE
2472	IEXPLORE.EXE
2472	IEXPLORE.EXE
2472	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2264 wrote to memory of 2472	2264	iexplore.exe	28
PID 2264 wrote to memory of 2472	2264	iexplore.exe	28
PID 2264 wrote to memory of 2472	2264	iexplore.exe	28
PID 2264 wrote to memory of 2472	2264	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\39f1cf7e467113dbeed0d99e43343caa_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2264
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2264 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2472

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
607e965d15904ffd316947ae6be6deae

SHA1
3f3a014b58b25657ed80d6ce7ba63d1fc3813ff8

SHA256
7a7ca21557a47203b666604e1a3ae2e8990b6b0bd52472403b20b63627c21eca

SHA512
b09f8556ad1a747bbbaa15941cb4131e6dbac1a9415c3504f36218ac18ba76fdd600126660d1dbb9b1aaf289139e28f2ae53fc42401f382fa0d7151df8d7b6b3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8c8e43b830da0206a1b1727dfd8b08eb

SHA1
af2d1afe30be8889f640f1f0b621e4ae4b7dfaa7

SHA256
04a0aed6cd93132e94f9ac3473806ada01128513e6ec59d8b3dc5e351f44811a

SHA512
eafd3d935e3c586fa80564e32fa5278cfe00d67b2547cb8d89210d3e9a6190b47dc88f9fe1de6c06736473b7d5a09c2d6c76e378ddb795a1ba13595e2a2578c9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e912adbd6d37c34d091c5846d42b815f

SHA1
0f95d4dcb79a271877954871dbbc4d5b08446f2b

SHA256
ab1eb0358fb12a646480013963ec100b8587573b014df34fb67eb38ab9bbbe97

SHA512
aa5f0e2fcbeb4962f4fab7962653cfbe3776f7c5b9dd6648fd5e815ffae54715c30094de571099cba1cccd30cfe06152bf0ac88202de1c03b39a01f279783124

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bf34d2b8dd62fd159bfea5bd474c9dc4

SHA1
f6c8e435b4ecdb15b60d4ff8f013f4ff90cc1e8c

SHA256
7804cfd890d26c01fb85c22e8396fe397e559552d3e7928ad3ebcd08ae2a151f

SHA512
8c385f593e592bec6492e907a035c3e7af0c4f330a6b7835e215594b1dd728153fd71b203ae25cfdf26511d2d22f1795a56cd085bd0236cb28d6119348d8afea

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6181229b1ca8954fecf3aba02b7986ea

SHA1
845566a19c6b180a5d555f8c9d9bd7a6e2338881

SHA256
92d90b7df007cfea094e6280ff6fbca0a7f39d8158f9ad5686cf5b173ae1fd5a

SHA512
b7c6e1cc800bf1f090ee431f34fd0eebfc3d86b19e418654a5d5087a7f299f63eccf636483004d5d710f4d7b6934df3c60b8efbf2265c79a1b5cb6063d3e1af2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
55facb179f93794b247545ac4c134470

SHA1
b167afd12fa370bf9110b0eecbd9cfa09ecc5f6e

SHA256
58887d914f8a418293aa6f72e67a99608427b3864c7691986763408480b115a0

SHA512
033a6418b315a8a19f9c8cf3d9126e9d21f88c9b20c80698978f438db8a85896fc25f58382739e954a5bdec6a72bda0d4be1e6e518fa437e122d3caa0cfc2782

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2c3206323842f3e8b63177d1614c0c7f

SHA1
6b5c00b87f6a8a4ba847ed21b4ea96dd960a4da5

SHA256
1cec91baae8fe3f135353afca5a0c2fbc95f7b5b829dfc99a2a95ba71627a193

SHA512
6c5a6c6159e4aae267429246a0e0d3cf028a08969a1468cbc2c442e85239e3645176929d53bcdbc3d0614f464fd696849650939c910c9002ed24c3a014257e3b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a053db59ca3af79bbac6025c269139a0

SHA1
e104ee87ef1d2409cfa17b27cf3e1d61752f78ce

SHA256
fc00f1f972b70d9828528837bdaebd4a03ce6b813145ca61f09fd2a73212ca98

SHA512
ea646f2ff89270036579755d8530064f23f159cc2c549b24dc861ad2e934ef80581d23841c2acf772a0bbc9be20668a86ff77c38b708fd6c94b3ac38b6b0d8d7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5e460c6f4da751afe86c8c4a320f211a

SHA1
f935ccdac0e826d6c2c2ba11f92ef7028057526d

SHA256
f09365ddbdec928ee2c27b4aae1bd7405b2097b330d7bbc65e93c1633d15d15c

SHA512
3f131d4f94b3dc07583ad23cd6187dfba6ecd5b58f26775c863694ecc13aaf82f376c8cb5be712861007448edfcb040c133c298ed4d776386562dd5fdf0eb28e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e1b1ae088150b80ac67b5c0fc618ea8a

SHA1
36680937f7164c73deec236e76d5f74757a1e975

SHA256
6bf7a0e704fa20cb478b14febcded932e391a60b1923c4badd6cdb222dc9754a

SHA512
f6ebf105885d0b7e9480ad4dfefc880b70d48481c4441d01e5cd0e3f054025803714f8aabb95d241d9964ecc835a391c107de24463fc7e4970b7f2d5e9a4f203

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
45cbdba9646b14228fde10c99eb01ea1

SHA1
da8e2c4b2f6b095543e0796234eb73aaad897520

SHA256
3849fa9143018aa2621b12f28ae77e3f1c6f1006d13554d817419c200bc99e09

SHA512
272209e8c1ad037f497f600d100cd0ab4c9a613f35c2139f86e033f90e68d8b1c8f882f55a36ce89d8fc8bcd6fd3cca1bc049c5d904b132459c05a369b55e85b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1a2cfa822dca4998e4a709a68af09044

SHA1
03540a722da0e07f6e0fd0f50dfb6aa2dbbb02c0

SHA256
50544923f3bae9a0cf03aa7c65269325c0d1c83c8cbfb0e1448fb8107ccd0adf

SHA512
d4cf959bd9d2dc83131198f5a6364c168a73a1cd87c702d22b6312c250a60a81a5bf3dcf057b981981862a8e33de63e5eddd7c4518c02b0ea625cea4400146c4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cfda9436b1bb521096fa6f8fe53c2bda

SHA1
67f8618259cabdec13b551be929ec0de688f7639

SHA256
4912287c13ea3f79568bf2c4e52e1f969fb9597d198996ca6f2d35d733303a2c

SHA512
10ce13e5d643060cd0e23ee7b65ef5b44493e8c41f51ec46e3bbd4e57fa41e0a7b002900fc0b91c67fef9db7e53f12b6b6aecc53488dd16f1561e09142c7a1fd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b654f8e290c474cb9d3d676c0c4bf371

SHA1
e2eb014efcd18e59a97ad2391ed19278428a315f

SHA256
cdb8d96a975f4235a9afe7f648a625a499922b5a05b412ee2ccbbb0e6feb2c92

SHA512
808f944e51f042c005cc2dc8463a636f438b6061df40855869ef4b32c1a1dde68fc43846321e73af350fcafa23d22373440544c5cd86a5df9d0a215740191643

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1ac3f5bf17608309de7d899386c5054e

SHA1
edfd515e986607299924c5c1a6d5e866453f0fd8

SHA256
1036139d5004a8843b45e3df3623f5276f3b16b1a46d8727affe584b6136efc6

SHA512
822e53b8abdfdb4cbb1bada2cbd1e7a661d59a3510386e46c0db848538a1a21afc80653b63985171e2f8b9a5a8421d3c8568f8f69effd899a393c1295ef4eb89

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab9A6D.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar9B5F.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit