19c9a0de05eacf92368aacf5f3c0dc904b9bc0c70c6ccb5ddd031195b278e91f

Analysis

max time kernel
133s
max time network
128s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 09:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4107f23fde184c3bb490b988be3f62af_JaffaCakes118.html
Size

24KB
MD5

4107f23fde184c3bb490b988be3f62af
SHA1

fe343c2ca127ca7c2204c264242d68437819390f
SHA256

19c9a0de05eacf92368aacf5f3c0dc904b9bc0c70c6ccb5ddd031195b278e91f
SHA512

16ac32f62482c6d6123d7285b6164dec32639baf09e7b3f3e54e9abe1659a70a7d26d9cdfd95e92d48c03632779787ceaab86d7941055cdc41cc132fc5d0030e
SSDEEP

768:SzU5necdPEBcJ+NNNN2bMx5UbkV5lIQmwiS:S2NPEBckNNNN9XbIQmwiS

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 705bd743e2a5da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421841254"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a2300000000020000000000106600000001000020000000181e9c1f7186c793f98117a6f81c53b71613c32f0746cddc48027e6dca9cbf1a000000000e8000000002000020000000bdb8d2a2a4a79b9b9f8af25d2a723db6bea16ed06c15f3035fda00134202fc3a200000001d10ea6119e0fb04d90d8f7cf0c7302e99376f6d7e839f58e75e67d066c6e7eb400000004bd8a829850f729f57d6b5c2c6a4ae2b12c004d46c2cf37e432d8f17de0bd1faa871701d371461a18800f6532a94f8389dffc031834d1e3eaf78b40615d8d10d	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{6F35E521-11D5-11EF-BF51-4E559C6B32B6} = "0"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2984	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2984	iexplore.exe
2984	iexplore.exe
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2984 wrote to memory of 2916	2984	iexplore.exe	28
PID 2984 wrote to memory of 2916	2984	iexplore.exe	28
PID 2984 wrote to memory of 2916	2984	iexplore.exe	28
PID 2984 wrote to memory of 2916	2984	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4107f23fde184c3bb490b988be3f62af_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2984
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2984 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1c573eacc311261afb1f914763cb1855

SHA1
72008b8b5a08227f4a86ac38b656fa3ffc1db94c

SHA256
3f92599ac74eb1078629a2703ad3a1ced95de1b1be4ebde63bd7415fabb71ff0

SHA512
59a4a7c1196af6a05a8b73fa5bac025d1a4096990dc06c409ab24a16c52f8d43cffc50b31778545b15c47d103e0317b0ce60d12b1ecb3120bc7b549daaa9f47e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f23997d7573ce101a59b891ed5d34491

SHA1
e47c5774f27820cb7e2e07583fbb70dd2b10f7b8

SHA256
e90a4cd2331ebe74246f8463ed25dba9b82f87d067ac31fac035e950afe013e3

SHA512
fc42ec6b1584fed058bc86c1c3757eb7ad79b01f550eeee99745abe0221cd0d3012a264c4e6903fea36f302d96201643d3063b63c586fecabf6e7da2754c5a76

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
eef7cd6a68fe4d230263736252457caa

SHA1
6ee4e1dfe82cad5e71d2e17f499b359952778b63

SHA256
d7a9a83bb49539ce928c70936f44d092dd8537f169ae6b8c80c84977d9a8f705

SHA512
481d6c3fd9b8bf9901e9dc68ebb7be01065edf46d1f9bfc2137e3ee5b25276ba332969fbcff56b82bf75a1ba744d521f62e34caa4d89204f9c8cb7db1f552294

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bd64ff1fd68c69916c11888673370b9b

SHA1
10053b932a78b17a5aa4c7b5f1a3f51f5e6b64a2

SHA256
f8d7180b86c198d4a17788df037af1f38afc490d9d84fb0c51152e051039338f

SHA512
936a4d37abaddb64b97941839717c36e45be89d7019aab5c5e9c67a18264a2c78d4b4916898193bc03cd024fa42eb401f943ecede3508629555ef70c03a00130

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d1bcd1ed96f16a45ae93dd7a3e34164e

SHA1
cf409f9be257c4ab09cf0a023004803bd7236fc6

SHA256
52db29e5586a2b277e589aa23cc3c4a7bf265936bec01baaab6adfd4fbd3b97d

SHA512
a0a95131cb9085fcc4a2b953961c61283bf5c392d1ce0c8ce4b9c290e404f15b90d198121b3b099adf04a0641eee12bf1cb18de2b5d13fa276a564e933bd4ee0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f4fe418863c583e69563728d77f1f39e

SHA1
4981f7cc9569da9c836a30fbdf5d022a2077201c

SHA256
09942430d6865bbcb00ae8d72cdf8e200fbfc1f72edf4b7d29de244397518cc0

SHA512
47192bc8a213878d778fc697fe7b169d919d9fd6e51d98819ceb5585825bd846575b6541e3f48502dd19b20dc90ec7f8ab602ed687d440cff62dc02e266f262b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
99605781bf0bccd382d548450da54cc6

SHA1
153e3df76010b822756729e69d1c2e70e70db436

SHA256
6fd523d23aeda3c1b7ee819a3a74026ac29db99e8e483a06b2e1bcf531bb1ba2

SHA512
aa9b4964bcb18b736edbc85a174bbf5cfafa4eca72692bb1d689d89b8ce76c255e33e53f939fe99c4f4c71520f139f574189c19008e4c3e89ab4f70023f6051b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4e02bc851e4884335f301eb8b909cedf

SHA1
26fff371e4143df3fb21b89b2e46ed0ea49bcdd4

SHA256
01604dfd715376c4d12fbec3bca3947cb53e60175175911faee63ce252a15080

SHA512
67440efc3ddbec1f063fefeda4b6e787b5e94a50242017d159ad61541574979dc2620fbc84c736d1d72d64b56cbeee6cc59201911674759cbed4b9a148989894

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c668524f0ee4b05bff15f36d5fec2150

SHA1
378f5df7065d1fb6b0cb4e2cc53c19f79e01c5c1

SHA256
cae79cd7f52bec40bef0601af39351abcf092e619976e18f7a84942605acd9c2

SHA512
087311446545fe97b683473a779b8eb545e9c661e6113f0ddcfcbb1e8e26c8ac4e36b9eefc7853c85f47ff898c0920d14a6a855a9a4527b7e477272c283298b8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4da25cffb51750cc08c410c2cbcf50a3

SHA1
dcc3d5f6e303903a85b8ea71386fa86c22cdad4a

SHA256
0d264afbaeab98d7c943fb04a7b57248a0b36cbc2ac4e2e76e63f7e398adf585

SHA512
a8c879718ca26fa796576d8c0b3d13f9cc82ea6b1115744de0aa387b629b55883bd80ae4bc3fe8cdf1bb73fccd408ee62ee23f91b2ee4aa2e63fd21dc690bfad

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
38aa35257d559f0e5538c1e329bda596

SHA1
bb22d500a19f15e838b2ac72526ab6f6d031f105

SHA256
1a09d1f83f2bc13b1ca812d1e08a0dbe94d72936599aa418170499b767350a99

SHA512
d06ea25455948dd5f9e639ad807dc6a4c998e5ffa80b9dd95a61eaa76ca6a178eec3fa47f76943f1588710e14036c9ef2f9dbf36e69b1a09b267a626c7018038

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5cbcf2d9ef8506744c314172b2b7b1a9

SHA1
023eaacde99908af3dbb7a1d1523d388d1bfe961

SHA256
7b695b13aaaab28a23962798d3e9e2e306799fc7cd8abadc4ca0050abdc97ecd

SHA512
28ddaeb26fd885a8c9e3e3cc072edf57269c2c53f664ee9c2a03a38913413d6bed82172e7235cedc656e8c84f055a06e2ba08417b75aec2eaebdf17436a04640

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
368c5b89fa0f90985168081a89216817

SHA1
9942eed9ddaa2d6d6eb181d37a35d77447b57593

SHA256
9a62726f2cd8e3ce4b25743ba8361002d84b4dc58a8a54fe52304619b67c564e

SHA512
a1f6d645f21c54402d62df1113dddb3875b07cfcb99ff851140ddca79b4f338de8560cca372b81d9254b3deeab88d069aa6ee223da6183bc0d78ddf3d27a9fbc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e89fdebd48e2b2e1824a6fe5c7934bd2

SHA1
a5feff1fdfbdbeb0192062fc48f07626ecb861d3

SHA256
8f7c39aa453c9e68c2610e31eed9264262e603c4c11d45a97cbd790edb5cef5b

SHA512
33f9565d91e5955b15ed3a18d8519893d6e46da6b1563f895c4fc6bfbbb5973251286f1c1c1db0471d86259dd4ed2c9ab2815b75651fd7ef7d03fcdf00086172

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c3787e2de478619c346937f9f8d41547

SHA1
3aafd0c85300f077aeb400c9c948e7fced2b3e34

SHA256
ca81771463ede6e2b2cdf63ca424eb3888cad48c94bc5b36bb6d997488225b8d

SHA512
b7aa3b72ca2ccf2473b2cc6ab7667fd6edc3618709570514ae76cde2cb402e658295160a90f61c312ac2003f9b5d98ab217c1f59c31207db16067c7c89b5c8e4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5774a38b6d54bc1954cc82c7ad5c4d4c

SHA1
fea41f08f07fe933d6b7486d1b06735dcae36b12

SHA256
8381abd6b8a21b563bd64edbb086ee5abfad9148bdcc211ed076ba6b8d79d4c1

SHA512
bbed38527f06f7809fed8e8bfe8b2378058ac90abf1dec983926e79408d77db136899a32bb60f5ef20b61e2c40010786fab1d07a36b4ac318220ccb49f4ca75a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b1928775c6f55a6735e5f0b523b69606

SHA1
889d08f05235c7c50e135ad485569d5601ac6cba

SHA256
4cf33752aa84428b06369dc5ccd5357370e2cb5933d76490ed2c7aa8f7616b97

SHA512
c65014ea5f3aab89866004a588f7f62629524e245ffd998660e2a664d171d05fed878626fd0a5d150d3deef074805992ccf938450c556a3f970346f91308e38d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7758f5757a0eea0eef0d6b3cf39c8502

SHA1
67064846bcfa46cf15f82f127535b9d3f6294a6f

SHA256
1158129486bd3ab0f4b9ab7439894aa7abefb3b63767a89826f5fb102ef4e882

SHA512
4c227a7f5ee04db2245e867c23acf43bc9dbfe7d5c04df44f0e3c74866318bb8079b04fa2435927578731e8ef2e149d391a7349f843cfd3c72225a424456e0a0

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3989.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar39DB.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit