15b20c75fd01f706c20147c472c49967d68f8b3b22edbee4e3c834bfdf15aecf

Analysis

max time kernel
142s
max time network
145s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
13-05-2024 14:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3ff4dde2726c4f439b651077293edcb8_JaffaCakes118.html
Size

40KB
MD5

3ff4dde2726c4f439b651077293edcb8
SHA1

12c1c232ddfe44ff78133efabe2235de009cfdb0
SHA256

15b20c75fd01f706c20147c472c49967d68f8b3b22edbee4e3c834bfdf15aecf
SHA512

a8d065d75a227438b89e38115af49dfab8f46f77c1baa1f25c67adc9a500ea5bf5c60852d72ebf2d5d1d968b0960492c8cd84cbc293e21351490a52673687beb
SSDEEP

768:2K4ngbKBh8u18MHAe402wAJy7cvcCiJ4JMoKF4GVlwJppFMzNU0ktaZbu8:2K4ngbKBh8u18MHAe40XAJy7cvcC0kt0

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 38 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{093A61F1-1136-11EF-BEA9-FE29290FA5F9} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconPath = "C:\\Users\\Admin\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000bfa885b61224e48b4f0c2d13fb5ed8d0000000002000000000010660000000100002000000000b89499f4fcd0698445e136fd8e300e87ff6f4e36bb9d8bb9daefb592452fef000000000e800000000200002000000030ad5c9ca46b48c9f836ee556e9692907f40c66922443a2f90b574d7609aedbe20000000642dd161d19c2676230a5ac57e21159e51a6d36762a0f91a0b9b6cf56ee647ea40000000e89604232be859b5def96656d41d1b47ec27fa563f30094711578655434700a6904ff3e22e7e7693424d5831eb3fc27851d22c9e184b1f1e78bac5bc042c4b79	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b06212f842a5da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421772797"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1540	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1540	iexplore.exe
1540	iexplore.exe
2540	IEXPLORE.EXE
2540	IEXPLORE.EXE
2540	IEXPLORE.EXE
2540	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1540 wrote to memory of 2540	1540	iexplore.exe	28
PID 1540 wrote to memory of 2540	1540	iexplore.exe	28
PID 1540 wrote to memory of 2540	1540	iexplore.exe	28
PID 1540 wrote to memory of 2540	1540	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3ff4dde2726c4f439b651077293edcb8_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1540
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1540 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2540

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
970ba9a31f45a77b2bb139e16851b71f

SHA1
f85ed342554c9749017ac5b1f0b3c733d4d93a99

SHA256
f244045dbc8e64b780b4ecd49ddf6f5108903ddc121600a8d2d7b8b85cae24e2

SHA512
ebad5ec4fe868a4951d892fd880b28f19239b15f23f09e3d5e508660be52c1264da287afdcada18aa43474cc6670cd90b4eba0d11fb8268531d178038dc062e4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
192f73eff56f007776eb91e538856ba1

SHA1
301a78d856abf2b989f7089a1284cb6a56e137f8

SHA256
4306e8f86153aa4d4b9d18f51ba18c17e861a7c097cc21128c4805b9b1a8007e

SHA512
9a41fefaa7eee80f260227d5df4ecdf1f7f6b7c0b0fee0c8c496a94e90617a122213bc8f0c500201402c9230cbf33bad2b60e30d76d0caefa19737cb43202d12

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3e34b955adc2edb1f068102a67995fee

SHA1
eb46d57959133041a8dbb06cb956dbb3ba208f9a

SHA256
835018ac778f7e51854ea462e295d27dac8a20e9efd9fd27aa8f2bb7150b680e

SHA512
e5df27078c8f4cbeeacfa7458cdbb85004dd5c7a5e97bbb8f9a1faffdc392914f1ac2960808bdae1a342f04d3571d31c1671233494b6825e89319ad3a2927779

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c3f919cc3c16b98c333b1f9df83c399b

SHA1
4ad97ef363d9b978e781d252431fb8c9794d964b

SHA256
71d5ebf80a415834b3141d9fb2b7299fca92f3b514771c23446b544759eaa913

SHA512
d320096714bdc878f44f1cea8d496ef21ee76fc4678e4594ab7508dc09ba10965aff8886d1cc4f39ae24f43f0dc380a3e31c4ce7d33782f6b6e2dcabb5de28f7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c2c68670f8951e01e2669a1a36449e02

SHA1
e2bee2508ed14e718ea17f3ca81cddfb9e565c03

SHA256
8d71a3004ba964df324dfb1e2dc9553ea2c1fdfe2bf5b124469e21f2dfaf8bb9

SHA512
272b5fe8b94c963dedb2c0325e5e6025b24da43eef1495566cd62e29544bb7425d9a6879b4a71e14b5724c2a0ba82b5b74f8a5dbcee4ec73abda418e07d58397

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
373ee7f535012c368313ddf59a990f0b

SHA1
ec2f49d54417d07f73f81624856ffbd6a458d87b

SHA256
332702b2ee6bda6bd862604fdae4c42b9720914b4dc2d9366109aec103bb9220

SHA512
52e5f13f03229b5302b4d49d97243295da480655c92ca76209bf0f6b8620eb877b3c5d3a301cfc657e18dc30b162f1d089de579fad61d959e30847fe2c8272e7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
155897da1ccbbe3190dcfeebc0a2d41d

SHA1
b0676612e684e65ad97add78374e63018fdd1551

SHA256
94f29b9baa4b74b8581ff01719ff0f32192a443752a0e8d927e105b4a35aad87

SHA512
4050db061c92366a154252c9edd9c2383e0d72ebc76e8aced17c63b1607bb76f33ca5d6e14b12f9cf181971b9b0f2a4907d7d695e9fa2af135ac7f32b05acaef

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c11c40bc4bbc972db6fa011f6aed85c5

SHA1
79986cca2f5e0a5751baefb2546c0e00da309e42

SHA256
c4b492d0c04c19180293799785117168f3fd12e0ac0597266bf209167ef579c6

SHA512
304b2f983c5b436c1a1d284e630f4aa2497730be76931e834ad2dd4243e4cd75a29490c2116166bacf4d3d3051f3e58ca70a52d07f3cb142fac85294fb5b33cb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0126e506773f1a56f41aa1b49c35f19a

SHA1
3a34bd903c71cc37546ebd6f68221884241617f0

SHA256
66bfd079bdece204edea4888c5f3ca9227df20d0dfaf4eca1f17141febdf8458

SHA512
a29160f954db494ca0c947f1e56bc1a414ce67fe1a3e573962fb083ea6e78e2426615774e0bef80e48e7482575f978852096757d3b6c5c1b71d37b2ec5fd0110

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
abb43ffbee72e7d27593c3c6b75ac24c

SHA1
8b626fb3ae3820126a7d395cb720f26737417fa3

SHA256
599c6ee81a9c24f21e961b582ff1c27d715303c34869c0a407682282e70853be

SHA512
d9805dcee9abcec3deba3f05f0fbc7ad2e472e01130a2b4ae8e04944cc8446c4072a6bfa121f2e2fc3cbf3bcefd26bfa179494a5595ce87fcfc5a6f932ff5cd0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
52d8eaf2156a5b9eb48e76ee5e596e1a

SHA1
52b4ec9935d305d18d7f4f15e041052002f53eaa

SHA256
d9ee1dfdf530e62e7f8cd42c4c52ba38fe8786d68eecbdfbe71ceedc9969ea85

SHA512
05beb2473575c3029347e28908ab964c06c193a203df0904c0559b7db66131206127d18a0437f1a79363c542bf3b06af3d2c0e3df47bc6533b438cdf0ddf7c3b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f418d40b83456a451956496eefdf2d99

SHA1
9a78fe596fec6322dd9515e1cd5b05b489719871

SHA256
3a777e2bc507b2ddd36da6c140c8528bf3d4bf7add9a84a5b3356ee50a7a3f4f

SHA512
0c16e054cc8bdd16d5bc4ca2baa2648a1f6051e156d6087acf4fd300fb2e446ef45a7c4d69979ffdef04b76fef1493eb18a0d98eec7caad564c3d3286b87728f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
49acc281f636bb083fc82dfab2322fe5

SHA1
e23695257786e67731ba630019e6d22a44fa40d8

SHA256
aaeefce7630a5c5954f6e76c50c19db6997bf10221566f72c4b1b185ee5e3bfd

SHA512
167f24f07d029042fb3210612727de183d894db63318fb84331b8808664d14ed98eb1b29b28b9671cc655f3acbed8cc974a455746c03bd92399857c6336217fa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

Filesize
4KB

MD5
da597791be3b6e732f0bc8b20e38ee62

SHA1
1125c45d285c360542027d7554a5c442288974de

SHA256
5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

SHA512
d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarC096.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit