5f6792b56c7ca408936d50f9108dbe5a026982d57737afba689ddc8c400268df

Analysis

max time kernel
133s
max time network
126s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
13-05-2024 11:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3f5da86acc0c68415b9677eda29f9d04_JaffaCakes118.html
Size

38KB
MD5

3f5da86acc0c68415b9677eda29f9d04
SHA1

75f83dc0851af5cb887805de20ca2cca5f996189
SHA256

5f6792b56c7ca408936d50f9108dbe5a026982d57737afba689ddc8c400268df
SHA512

7e3979ab99fc3cee838c46dc16328d51d21b540cba336dd6249ad0073cd91cb4470d67b0f5a80b42639242e8eba1bbe91e0b33ae8f9c38d6c743c51689e280fd
SSDEEP

768:7qfRLgkHzTKHXn9fBpbNd7B02AKra95+cxDTNxV74rjAGT:uhHnKHXBBpJd7B02AUJcZRH4rkm

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{975F0D31-111F-11EF-AE65-4658C477BD5D} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000d9f8c99db65ca7098735e51dbc20397683841dc8100a5ffa1e557befef342426000000000e8000000002000020000000c51bf96043d31d4d08af38c14329969e973095493bec50f20fdeacb1ab921387200000001215d95fc7e0dc04f181bc358f85399cfa25733679e680386c107cbb04080f1e400000008970c0c6b58401b74a6018dfe0c8dfc71a25f246177db7004719116ffa0e5d457b6f97671794587d4f0df64c2c13bdcda6f2f313df1847d194b1f383caf7ed6b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421763152"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 2028e4842ca5da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2580	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2580	iexplore.exe
2580	iexplore.exe
1260	IEXPLORE.EXE
1260	IEXPLORE.EXE
1260	IEXPLORE.EXE
1260	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2580 wrote to memory of 1260	2580	iexplore.exe	28
PID 2580 wrote to memory of 1260	2580	iexplore.exe	28
PID 2580 wrote to memory of 1260	2580	iexplore.exe	28
PID 2580 wrote to memory of 1260	2580	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3f5da86acc0c68415b9677eda29f9d04_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2580
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2580 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1260

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cf2b83567b206485c8e0251a9b58516f

SHA1
256638c05b70acdbabf454b273efcfb96c29fadd

SHA256
cdfd9a2d98ea75e90288fdc67f623d9ec166e312407397374cfc65f22b291e4e

SHA512
5c5068e34788a4a4d0a7c46902294886614ef145ff35d4ac63b2a6cc6108794b9050fbc2718ea9edc57e80530b0641892f4c9be3a946df1a047c84f3c7b38aeb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6d4e7f0e5c387bf8773dc2ce6436c68e

SHA1
fc1ca21390f098c63b1f0730607d79ad84029529

SHA256
4d74e4a5b9c837b74229e0e74baef8f8df6b4c28f3bd2158f95a6a640f0c53ab

SHA512
6d6ee8c12fb01f4ff1e8d96ebf493ec78b18d56583093d3f28a95681e183879b539d3ccf409c44b1a8be36218c30a9788e8ca45544d4887a99a740a63b495f61

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ff159ae536b43f96c1813b070885c299

SHA1
156b634ec221a5266f53b836b472ef38f02c60f2

SHA256
e6c478e88bf420e210ca222a024002e83369f84f93b6f61d36c96c30aca517dc

SHA512
2ad9d55a272c1a1f73ef25d38309280c6d43f09bc040458639b84b59b7b00369087faff646595053a8619b90d3544d4b1e719be9bb55e3c2f7847acd815245bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7c5c1ee56c6e221f7317d5838ddf720e

SHA1
4302586eaf0f665f51d2940b9d2493030214f4cd

SHA256
246bb5783847a4b5f0a7fbadf421538a339d0406964162971e75c605ed459f9e

SHA512
e7a4f661f07b48ca05f19d59f972f0aba16aa4164a064d2b9b1cdd9705d803e85216862ae094ed9866938d502ac30c8281b696cb6e1823a054e8a0d31eed0276

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b7e582067351e85af9c1dcd7a3b5ffed

SHA1
3587cee36ae0b822105e232e00d0858e1d9702a0

SHA256
6a30ea39beab3dff7e68fbb02d1f6842e2d0c3f32328c00243561121c96f33b6

SHA512
ff89cb8ebf8d7c13fa280e7936e05a11d28592a9b5d7cbb455bf18982ef35a70a879363613cd53b1fe699a04a877d505121953f5acbf099ed3b4a7c8adf8e5e0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2001da9e19d751b4380193de9d738be0

SHA1
72916c708c149cb67d4ea3498d1c96a091fa9a59

SHA256
0970e4b27c52543ab19c9adbb651e5acc482620c0150d01d5d722adfc68d21aa

SHA512
62efe01422d44415d5517a5760b71519b6cdde043fc1f908f03106010b1081a9d33b26112a87942a5bd2baa0dc0528a45bbc80cc263d03e9edd964d2894504e4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
04a0bcdbbb3aa8312f3f0234b4d761b6

SHA1
31c0fe4dd5fe789dda84e9abb7afe3876cffd871

SHA256
06b031e5b9d8c63b77d342de866af88d651c7e29a3c81614be2ded46e520938a

SHA512
9153ca5f0980f7e985f31eb650fb15b236ba749d71ce92f2b3b2c8baab5fe01570a33e488d564fcbea28881a6c74ce0f6fa8f96703702779f3f6008a2203270f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3267ac427e351c71ec670dc307dfa6b5

SHA1
4307fd4b4873622da1365ad9eb38b0e430d1acdb

SHA256
c714ac79e6f41524ee089596e62db6b24426fe984bec88c2566213d2a7dd174d

SHA512
67380a246865c8799f017932de87d651bf9e7fabdeb5efd8f5415a6992e8432ea7b09966a3faf520543a8842e5bfcd341ebd68319aa7936276788a5c583094db

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e1ee8708fbe4c74150bb6f1acad65f05

SHA1
2c240a7d4636b185aef2d426d8fc291d2f11ead5

SHA256
d5ea8628e7cc9809fb01729eac79ba71919402a4874d61fac46737c06247f677

SHA512
d4389c262c63d068155270555d04a7bf50d6a25c2fc94f99621b82d284c85c9d5effcb3546de3204086f64562d4db71442e4c3397ae23b1544fa15ab63a94b34

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3a1bd108a9f2078968e51c84c1c87211

SHA1
31a51eb7412169b1a5aa842a7edfd8b0a2068e4d

SHA256
7dc5b6cc00e3254a7664115451729a15f9fce159c1ae039becd9730ab83ef217

SHA512
11339f4a72a8ca9c6fc4e7a88fa0dc3ae13eee797449f4e42a5715623f0346537cf73bd88d08045101b50dbf5c2a0ae341b5d48154bd2737e9be76f739d3793e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e2bcefd184c605af78939acda4d9631d

SHA1
60512fdcf8f2845465911aa404b847599110d5f6

SHA256
7fffd941706bfa2e5263acc5413319d45a94595c066a5542f01aeecb4b89d886

SHA512
8f18db8f1dec439d83e6b51123092f3de9b34edcfcd2fe1fbc1be638ba8d020d0006eb8d5f50483d6ce404308a9c6aedb80610bced8834a2b33d1c5976f2c852

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a3176061984d245ae74a46037114faba

SHA1
6ae7f855edb24dfa1fd1da6009eebcfacde37f26

SHA256
f75272b4879a133e0edffac03a4a9c5dc4f21ac5fd36f8816147917bf986ba79

SHA512
cf9f4832c3122335c8c837e181f204f94b0e060455a04f9bf0b111852508705db56d9c865a36c953940fa44c04af5219bea384ce8405033f68cd752b1b54cd45

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b99314379ee7f1d9ddc3b8e757eb79d9

SHA1
ce1591c6b66cac020cfc7bc860934e6d4dbb79b5

SHA256
257a4edea7e6d0308f6295eb7dc8cc4e4f78b022a3f0c8379c876dbd8eb4519b

SHA512
8190f8ff24fbd0f6f9d28edcde1f0c5615528d299a05cc276fa4e4fffd71a111e99869db43d7e1fd67d91a04e3f8dfdd756ccf5d8e74ec69eadbb15f2918625e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0f6132225dd1ac41235da3cff3436b5d

SHA1
6e0c2d909a8ac54c771b732c0d9e42c9cdda8893

SHA256
209c32981ab41eed80d02c1cbaccf32e66a58d83bf0309c0fdd84874f9f87936

SHA512
6b6e0f198ab8951c95fe0915de38b80e017f0e4210a5ff920c3277f5704222659feb58dd466c2868b1e3bcb413ba7609df70815c7a41662510c19648060b00f7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0b68e6de3b7c1cac3ddae33fd98e9357

SHA1
c639cfae54f448781701b79e11d58d8227c28a2f

SHA256
54cc47d23e0df473e7217c7295a2040af120a9f06c17f8a44b29a7e92d3f0c5f

SHA512
4e51373a918e836a3fe93d14ec8e8286c4e92507e010e674ef9d808beab71119db29b338a534dc4f975afcdb87969b1fe1d9fcda231ed3a11b39c65fc4e4d022

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1dc6442c98a2e0fdf6651286b2fadfc1

SHA1
e5272ed41114ed11db159a8a77ff8adddccf35f0

SHA256
3e7f722a3403ad2690be802661495c517d6be812e9af155f4b553c58de281ea4

SHA512
b75b230a27054036d3ac80107a3ef18e6b0759347661ff93be51ef1fc94239784751db94bb3fa61d3cb688ebf429f8e758f57799dfe514c9dd8f8068b52e4795

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e717beaa85197b4e604a8500b982108c

SHA1
801a339cadd012aa018e38458e2d5d44cca7985d

SHA256
5e4c387154b15601176f93c59c2dfaf135021762e2bd70df1e41e7a3f68ece1d

SHA512
280edb1db1649b3181be9e915f163b915310f48d40c08f18f5638f7cf93099807a4c5bec1df0e79584cf77a015edb7b0520b2b34683a05a49aa2b24b6353bd8b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e6a4cdaa4f032550244c367907a69931

SHA1
72259832482f12ca2cbc45d357c95b22825a590d

SHA256
c936be2754a2ef4b2293c487d3119094fa4e4c45ac05eb5e774dfcf5a609159f

SHA512
11207060a9ecdf5de0455c97f541d5ad8de85a1763aec203be73f170ff05f2de3e65a8ab7a5b3edeadbe9c29ed7e2ccf3c3aae31eb0fd27990933552da72bec6

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabD250.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarD2A1.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit