b3430d1922a30f67edfb3d8a7588c968857f9aca18134a7506bf345f87644f90

Analysis

max time kernel
144s
max time network
145s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
12/05/2024, 17:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3b56b8464d4cfa6af40c032949191b26_JaffaCakes118.html
Size

3KB
MD5

3b56b8464d4cfa6af40c032949191b26
SHA1

1dbee1f2ac32e8a96037660987c9356a88d44a83
SHA256

b3430d1922a30f67edfb3d8a7588c968857f9aca18134a7506bf345f87644f90
SHA512

154c107542ae9bfe3fdf4733b61ddf8d339f456a12c5c731460148b9ac9aafd00b9f005bd21a8dcaec19ad1131d83b39dfa93d04bbe5ce373fec4bd812f736d2

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 60c461aa94a4da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421697973"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d100000000020000000000106600000001000020000000f2540639bbb7b6b3b00c5e0ce08b2b8d77f091a6cb42df0dea6aca405caafa2f000000000e8000000002000020000000f5cbe1eaff29a33af9c1eb141dfaa5bdc4e4d3cecdbd6934fc87484d5aa5733720000000ef326928d0f47306c9a51a3008808f5154a64874fe1cd86d416f314da0fb04f240000000b84ea30cf646016fdf15f174963abb54f92b10fdcde7348005a86751877cc1b7e73f2665e0ea80b91dcee86b140d96a28485ec5dc48b12e298a8a392870fd2f1	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D5146E11-1087-11EF-B781-461900256DFE} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3028	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
3028	iexplore.exe
3028	iexplore.exe
1208	IEXPLORE.EXE
1208	IEXPLORE.EXE
1208	IEXPLORE.EXE
1208	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3028 wrote to memory of 1208	3028	iexplore.exe	28
PID 3028 wrote to memory of 1208	3028	iexplore.exe	28
PID 3028 wrote to memory of 1208	3028	iexplore.exe	28
PID 3028 wrote to memory of 1208	3028	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3b56b8464d4cfa6af40c032949191b26_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3028
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3028 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1208

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b93f9e909a0a74fa5b3a524e2dc22ac3

SHA1
837a134b37ae46eac52c080900239fdef3baf662

SHA256
25704fde8edf920d4f3871a983e600b7549222810b5080cc0df2ff8f722049ac

SHA512
4ba5ebf7884a2a369e85544dc2ca0d01980c7035c8c24cd8129fcbf2777695db16b28623175cdf1bd54d1b06470f2c7800ffacc12e9bb97c3e817099c29bb003

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6fa8defcabfe831f5a90a08ec239a9ef

SHA1
b4cb90466f2ede548d69d560a622d6fab73002a4

SHA256
ceca1d8332c71210b5838f0cabbdffa2fcb01aa30c182b6173027093f3e11fcf

SHA512
7102473a283aaa33bdac36ce099f441535ec8d081a70c60c209d25f6c2cc49ea5f43f544f889a0d107cf88e711a013c5f3351419db704f98719d4930686bd5a2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
64826b6b63e1aa55f5b2a30ea46ca400

SHA1
ab203a75b5ddc4c153831541727e288dc95fc2c0

SHA256
dd72a07cc53ddbf54eefaf9f74b6301e3b4faa51c643c9a168747dba88625264

SHA512
044e028df9c6ddc63935f923e6bfbef3e1707ae731b1fb5b3fe1559340cb37ce45b484656404a8bced4c0c7e170457d51aa51a33052d8295c660f1696c279e18

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4edbf97d285e3eae6b1c2714377a7f85

SHA1
bf7ef92f03f1f0f75e3b0637683065e18824d0c8

SHA256
fa212f9cb4b37f649394aa3de0a57fded1b2a9e3c3a9a58c9f048d9a7a32e29a

SHA512
457b4f87feedbf947cc6596f7a0d174f797f3ceaa12a3a418b4b1c31c277ce2f1c2096d8ee3033ae5785865a91251a8cc812f0333cd402f9678f083cb75677e1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d7991b928975cb675e8f19e583f6939d

SHA1
894e67ed7bfd40f52d7faf0a4e5d794724f6099e

SHA256
52f26197c8f7c0bd23f22b40298ca582037e1852c85336c1bc4a8b3f59c41ae1

SHA512
3dac7ca7e9cdd3a4011271df69090ac811691c274394a5118b3bf22b806a24c2a791df71b956dee27654c1066df87d90e387f3ea621080032160d0f0b564f6a3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8f95f260547e748c9af7379ae9d6e8ef

SHA1
acaf581bab7092594f9e90d4f994dd51b1504169

SHA256
945f004d941bb24405eeac52b1e9cf614db749a7d60aa0bd876f5dc0cb703754

SHA512
2626e6241ae07105028cfcdd8ba3661718ff2870a2ccc3ab56bf941ec069ad435f3de9c253e720ff4b527eca6bcff575537fe86fcbc4bb15612517050713bd2c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1a9c7bb1f3968fbc7d34cbcb7a4107e9

SHA1
cc4eb7cf2eb3d665d8c5663672b56ffb92aced0e

SHA256
62200f7a53a818d96d826e56f3fa9e5402b444245081699f6394be78a90b1b6f

SHA512
369072c2420639829f426d5e3af27a17a48d9b04702cff778429272c885a565fa40d2b9e16a6e28cbd06e337a1b1fe6498340a29b0250acb8a40c06838f71218

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
30358a1b0e64d6e7473fc4b5b20fcdd8

SHA1
e6d51d932547cc17fb6c605298a1b7d2d8fea3e6

SHA256
5b4f26ad549fa41960922958f1fde4ddaefd60863c8bb6645b5356bea00bdb39

SHA512
f979bfc59be0e0bb20e458f7b1a214801ebe32ada6523eb14fee45776568d0ab809ac32ba3337bb601b0f3ae642150db6a698dfc106b2431788ccb3f42839d8f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2356580ef3f88ca6f5079b1e4d92bb03

SHA1
613e90e73c7ce3b5bf3999f25a5ff348416a4f87

SHA256
eb2034fe24e739fca0acd00e7587d85c74ffcb74c728952270aeccd3d6a40188

SHA512
00d2d975302b0cb9dbb88c12ad2d4c36b8233a4157a7ee6346ac4041fccb21bd5cd3d869a71cc8efcf61a304b14a48132b9aee0190b109a30f270749e28bdafd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dc05be213edfa02c40376d197f384661

SHA1
5a868664cc9700fba3aa657a030c556f7d225af3

SHA256
0e433b94d0f0f4947423d71cbc49b799d9263797ae19cb33acc0cce0cd6650d7

SHA512
e678812c8ee63ebad746764e736ec74dbdc19171c211a6670e8b7cc23d90708cbd3c9a99549aaab1da56817620f875b2a5b0e8a3a020d9f13ed9fa802549d056

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4b258f32069e7500406fcea9a991b1a9

SHA1
86efbb12b154e23d7de032a7bd00da0452d04286

SHA256
bb2fb0bd366fbd90348fbcb8fb008f37aebd5cfeed71d70ee2e4518c0dfa0e5b

SHA512
f7ac873b4564454bb28403f5e7b58c28ebdb1937d286c8b4beccbe0cd703579ed5b4934c267ea7f601c06aadee4666d361251da713fbf22e1e9f3d0b5d2cc5a8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
69050382e914573bf6e84745e0297035

SHA1
dc497536c245a339de2e5de73ddb1a490db7454f

SHA256
cb95e00c8f6d29f9742eda7f6bda957b6f1e85fd694c5ebf4c491e95d1ff25a7

SHA512
32708cd6f83cdd05075f3f1d528361f8debbdbe10709c1d04a08aafdcba3347dde9d943bbae54eeae149bad6a9d237efaf5681e30c531c5dd739b2f610fd96be

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cbcde113e51c99362f4f191915520946

SHA1
048ef46f00ef7bcef55ab78b55634ea7b61a98d1

SHA256
e01d3d2eca5426d93b4df357050db666afcd961795b0c0363c4c714096d6d485

SHA512
04c6d34075148cd8ba621aa0a95a93d8cae1de75880ec4c21964daa9f8411143c3243c25be6064a33762a1b16fcfb0a742acc253ed1d41269f614ed082a162fd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
697e819dc8c682cebccc9f31143e1943

SHA1
712b2fd246b8d188958f73dc68cd897f8ac670e3

SHA256
4a5891c23d92fbaeafa6edc44e099ce2369823f88c802b25bc246bb4a672c552

SHA512
4dec6694d5f35fcb4eaca0ae699ec44c4b4c8a666a79e2fdd8f143b7b6e30c12f5d4868193f283fe235b8cc624c061b42c01ee3757249cb2443e59a5e79fef39

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
246e8f5daa21e30f1187a6c4acd6d5fb

SHA1
bd0aff25273e3027e24cc6d064d79e7d6dec3e75

SHA256
0eb87d41e0b4c4637eb977a4490d8b8049f2cdaa1b9e79e7814c864bc929122d

SHA512
1a04fde5de9dec7ff41cb8f7baed73f5216602d401516479602b6b60fce0ef6ab93de3223c0b59e8237a879bbfbf110aa5a1be8158ea2a6d5932796ac7e7c050

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bca7608bedc59f6e20b72dcb5dd39faf

SHA1
ef69d305f4afa3a883d0cfa0decc2b31664df966

SHA256
5240acfa97e4260b969034885fc97dfcda93880926bb5936b11298ea1c09f2c3

SHA512
b681d4cb0f4b5a8378e1b2005ff6a9e0b8b8e0b560472756d19e6144073c97f5e92bd4fb063f7c25e61d25ba7972443b24231fd5b11898178bf04eab1aec4b26

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d08b005c284470b515c04373ee890066

SHA1
64be0f56af2f1abd4120a8d770568d58c216852c

SHA256
94e150b75dcdcfd03ded27427dfad5f67b6d37a6488c9b3870cb11ee8aaf1aee

SHA512
a9641443ab2437247ab2f864fad5fbee0dc76e340e6322d5c44ca8e4929c0878e3015f47b8d953737719d831bdb1d492ff7e8713198dba062ffa95a2a7b565d3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
932cf4676cabad2950059f2f69de27f2

SHA1
997f1704aac209f74f1817f8358f6c7aa42c4ded

SHA256
5149f26aa65da49ce69fb60036d7c6db62e0f0853d12ca262195c131aa99315c

SHA512
e19d0cde7068d877a63c8ea5f8c0a6476db6275facb37a6ca8f02af3e9312fcd3ed4ac8b2210a9055e654903c09c8afaa8e350d8b62f95ebea38640b541427bb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2F9B.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2FBE.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit