42492aa4baa6c7a7ddd948117b6cb84f6f83f5b523965a634b6f7b557f13685d

Analysis

max time kernel
120s
max time network
133s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
12/05/2024, 19:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3bab0b75ccc2329f7b54e5472b9652f8_JaffaCakes118.html
Size

19KB
MD5

3bab0b75ccc2329f7b54e5472b9652f8
SHA1

71c0277b238f9bf4a1b8f9ebff59b413f68086ae
SHA256

42492aa4baa6c7a7ddd948117b6cb84f6f83f5b523965a634b6f7b557f13685d
SHA512

d3991f9a7ad3b09cef59c2381826668a67851eb0989ed9d578cf974a34e70a2d4281e211dad5a87c098c9a56d043dac142a80891dfce9a46ba25e1cf1eb8163b
SSDEEP

192:uwnIb5nivnQjxn5Q/l3nQie8NngnQOkEntfr7nQTbnxnQmSgHMBcqnYnQ5ZNnln4:YQ/lSsqKNk3oz

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 60e77bf2a0a4da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d100000000020000000000106600000001000020000000a9216eab180fad7f2452811173d29b84f35d9d8dbf69b52ace67f407802e30f4000000000e8000000002000020000000a6c9a603a5a7276238e260292ffdaf1b1b53f5c27e76f6ba075fb07f165a1d312000000048f9765f7e04ff637e5a358f69b3a2723a6bfc3322e3b2df8f9c4a54caf3f528400000005a01c2046600db96397c2e5f80982acccec030f09e4118f57a83af997eae37498b0e13a67a85cea5b95f194292fba1a4f85e9be8e65e7550c4876021c32f41f6	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421703254"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{1DCF0F01-1094-11EF-B082-427DDB91FD53} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2288	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2288	iexplore.exe
2288	iexplore.exe
2112	IEXPLORE.EXE
2112	IEXPLORE.EXE
2112	IEXPLORE.EXE
2112	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2288 wrote to memory of 2112	2288	iexplore.exe	28
PID 2288 wrote to memory of 2112	2288	iexplore.exe	28
PID 2288 wrote to memory of 2112	2288	iexplore.exe	28
PID 2288 wrote to memory of 2112	2288	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3bab0b75ccc2329f7b54e5472b9652f8_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2288
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2112

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1c8320131aa12a9c70b362c3d6616a47

SHA1
0a2c2048ca10a79165fc491a9332c54e3c5f85de

SHA256
311c421ffeca6e3667be61dd531dc2c63c1a46df8888181a3de09e4965f2e43f

SHA512
49894c744b13bc1380854862e1a122299dfbd2ec27e6d244474abe050488b81a079f61c7a018fe84f8b1d47561a61a4f880c7c3174e4f483f14df2a8167f205a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
17a0051dce2300c940ca220617e88596

SHA1
d097061436ff9ddbd3eb1411b03f27d57cd2e0d1

SHA256
ef7f981aef413baf4f3bcc2888b06bb87bd11e97d238fd140dc2e450faab0c5e

SHA512
c3993b09e29c2e61c9f27c6da40b151620fcded35edf9e82068d88bf2e75b0b7fd83a7364b9a85fe8a025879db821641c621127160c5bd9191b4b0da01d3cdc7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9259adf15d2df4173bca30604a9d519b

SHA1
9b0bd8f5c8351b9bd4c42cd5aeb4af90839f42a0

SHA256
42fe0d257c11a34d3bcf50ba7eb666e10d4ebff7079978f3f85d11392c14b7cd

SHA512
e652324df48b6ac571035a83b6f2421f546a9727c39565b8e8bfcd522bdc3913c888278f6c6807f6beb6dba894ef2cceae6e51de8cdaa53939232721ea638fd4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e29b575f9ee50a1f3abcff31d174496e

SHA1
46d9ccb1f2b67a01a55cbd13b712ee220e160146

SHA256
7b26a04858ed2a4844ec2487e769a21db774aa2df71d5fa98491d4e73a33df71

SHA512
e5d81e80c838ca04f397d632aa0cd6ce133bb7b858ec203fad03f704675b4d632469e23f0c5796478832b228fe233689dfaf020da77d6f310d4c3531c35a57d2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bb6a3743d92e0f31df3a70fddc86b862

SHA1
c021c295af476fcab9814855827da03aeea5a408

SHA256
ae1649b5c2e6fd3d864b04c5a0925c6c49a89f8776ec934ecc2a359818dea3f2

SHA512
d339f76cac5ea48019f541413e4687e4b89e0926a9f61f52667457b400f49618e737107c462a9c8a93e2da278826e122d1171e1e4f233f18e88e724141c181b1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6e77e061484164fc6a66fa41813c54aa

SHA1
f67143c8e308d5d6e8ac307fb79028c2eb0c24cb

SHA256
69a1281e84001a518715dd0624a9c7bff478f534874df6dba5235c4d3c2c3617

SHA512
984643982d9202b2f25234a9a6d31412ebceda5ec292ddae34fa2a903127f4c09d7dca858cc62b11c3e7b50ecf25ce6f8c34fedd438cad64c9ba65a37c02269b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
23df205aeaef411a7bd54edea8fbcd23

SHA1
e98cbeb5732f9cab10c6b4a04ab6d1b3666c0a26

SHA256
40ed7ba2819cd2f68acb5e77de51099c3bc41f81566cfb8da70d129287499f93

SHA512
3b2b6d37dd95c2f0cb182d24662201181dc3395e18fb9cdd1daa67608e10fed0fbebd419bea54421968c6bc72ddd3e4b1e2fbe70b7e9460cde761ae32669b23e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
163862f7665c848bb50289618cbec3e2

SHA1
329bd2842ebf33da87f070b873df1c319c160605

SHA256
04bc72ed12cfc2ec8ea3710bf0942d696dd895ef0e8d6aef2c8963def9acee65

SHA512
2348800a8e25dabf3b51750eeacc7251c071ed724b23ce7df7f671ea354c67f97c59124ddf17884487a3d41dcd1f847aba7ab4990dc5a5fb919e104450486432

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
04468e9ac24598b11f695caea7e4ae42

SHA1
13f548f61711117a210ecdadda2461e470911dab

SHA256
03cddf9ab42c0c2fb37f7bb5e3c3f08e6f49e91babf6407862d40e1f6deb9aec

SHA512
a5cb7652c2ad5dfa88af4c418c5c3a40e4753c717d9c46b55c4b38878e58f22de23d9ae78c41e9fb3889d56a74acb360d33dd55bc4aba4f7520a61c98e4c4175

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
22ff30c4c426baed124d7f6cda77a710

SHA1
dfcf290926adc2dd05a85a2d75d527e4d6a4f400

SHA256
3116f3a6b2ec0dec6728a6498fc98d3b5d576efbdb4617d45edf343798406b96

SHA512
a960c04143117878ef3bd70a2e48daf23dfbfd091f8c308941ab713b188f225e8717b63b8ed834cd6369627249933fb60a7da27d570a2820e8276dca06fda359

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6a2e57bec8eace17fe471859132b0736

SHA1
dabe830d1de704bbeb8dbebdc23ea9975770e38e

SHA256
ede73673ac0ee0d3b1ddbb4dac35a578a255d2266dc7690c0dce900f6ab63c88

SHA512
87ec7eda7b13a495bfad454c2bad3847840e910c391f81b155e9b0852f6a8b9420b241a20e423e11cbd76e453e5901230b82d628a549c5cf32ac68b3aa4db5a5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
89f0f7ccb5063b78fdb294a063c1c202

SHA1
64a94b3a065b70db70da8cd49e0634aa2440f4be

SHA256
f83fdfb36a6fbf17688f5980c4311796d8c5758700942aa39c42928be9be8daa

SHA512
d01980e54de8ee1f8cf42df3c36c234957b45b5843786c01315df430cc56184e6e3f8bfc2b98c1fdfac17b354bce7643ac89334b3c45751595877828412e4505

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a3f8d56e257f3871d4aa15ff4ce9bf1c

SHA1
5d31afecbad6dff552afb5c5df2f093a34ae7ff9

SHA256
67cfbbacc13bfffa1ac33f54c1d6b782fd313bd4587ddea17020a44821677c8a

SHA512
a5c0efb13ed93ab5b51d1121482b91df092ddc8f3ed60799305fc6eda7e37d540da4fc325321aa44291bdd21ac93326e6e039d06f865c173dd995b870cd3733e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5af8f6a7bdb699285e43cd5196d907ae

SHA1
6cc1e75ad54dea22f3cb8cd28be0ae82d262c707

SHA256
8225f5afcde207688803537a81eaf3f7504e3b916bc0f876f9f6ade069aba252

SHA512
79e3f8554be55631320a23eefc2280a861d6b27e32316c06c843ef301ab777c85800327a273269d3c38547e0bc9052f147480e8c18d7aec547a9af20cbb59a6c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4ac6d70ccadb3cea282e1b652bdbb7a9

SHA1
7d44ff8afd62b74b8e43a9c94e3aee596d943ea3

SHA256
522c21902b7462356d0ecc5b91e538bf4b2ad7e274a5d681426d1525d336f176

SHA512
8da98da981ebf40579c603aee8fc05392d0a02d6427f704d5e2c494db85ee93182692b2d82dc5a824ed07886c5c467e8a6f85760a7bbd71447d60b7e871da4dc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3322cea95cc342d6f9070430965246cc

SHA1
c862832ceffe8ab1e91e48a6f669ab2601542279

SHA256
eed23688f3990b90c181a6ea4c037f653099fdda40bc01c1b2739c2c5a391efe

SHA512
2ce37d7815ad3fb7e921b71031fa973c4e3591ae8cbb977758a8dd3b01bf87b14dfc9f8b9646c35acc883b934b7cc2ec2fc324c57786017b9bbfce89fe2ea5b2

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab1B31.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar1B92.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit