ba6836c9fd936146e790ffc33bb706da169388261f4b81ef3202c3873df497a8

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
14-05-2024 13:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4198c7c23fbb0fc9b997a8db80c58c71_JaffaCakes118.html
Size

29KB
MD5

4198c7c23fbb0fc9b997a8db80c58c71
SHA1

33d1aaaea965acf83e926f6650c5b6465dadcbd6
SHA256

ba6836c9fd936146e790ffc33bb706da169388261f4b81ef3202c3873df497a8
SHA512

42f47cf370e653e242c10f8a08cbe88c073040394469d4374d376b189fa3c6540d8ed92ee9837f377620648aeebe28329e9d322f2dd8d68c6351361d22b7ee19
SSDEEP

192:uW/qb5ndHnQjxn5Q/AnQieDNnXnQOkEntMinQTbn1nQxMCZAMBuz0EA3KSmdHsGV:LQ/DbRXl290e8C6OL

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421853837"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bd2a7708e9798e4fa0b20f3efd8e9361000000000200000000001066000000010000200000000086c98c4c2dca8dc059acaf3a64895aa615895f3556fe14c486bd9046c9a5a9000000000e80000000020000200000001489b67f9b6ede4426356b0d85c1ec5fb024efff9bdbea48a754fc71febeddf0200000005893c77546afbdb1cc68747198a58bb49647f8da1ba9ad3d1f47b5b603e7cb3340000000ad25b146eadd57b2c5f9d66870b9935d837c38443f0e4d86568dba0516ae50929620f2d2e8c1861a77a5584a5c4127bf6e752581a4ee0a6507405e11cf456e25	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 8021fc8fffa5da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BB465041-11F2-11EF-A5B4-4205ACB4EED4} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1792	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1792	iexplore.exe
1792	iexplore.exe
2460	IEXPLORE.EXE
2460	IEXPLORE.EXE
2460	IEXPLORE.EXE
2460	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1792 wrote to memory of 2460	1792	iexplore.exe	28
PID 1792 wrote to memory of 2460	1792	iexplore.exe	28
PID 1792 wrote to memory of 2460	1792	iexplore.exe	28
PID 1792 wrote to memory of 2460	1792	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4198c7c23fbb0fc9b997a8db80c58c71_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1792
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1792 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2460

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7e872235f164b323d78ba024ff699768

SHA1
b4ab2ed8451171e1edb5b6763075787fc5807f67

SHA256
45b41448c79a806874c900e2f0bb1981564fe8ee5dbd3403f3db892258f0bb56

SHA512
96193bc9a213de870ab169b12b4c67766a64755e3148ec44db77556be02ff3d99caec9ccb2ec64c5f393dfb7431e5e698b505fed65afaf9fbbd837a3637e0bbd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c1e091513f35931bb99aca994fc8bb06

SHA1
8066c9cd9daa1024d0074d501c93a6503aaa0582

SHA256
e3456e1fe0292c8084c0a4a135f1bb7af31f76e04fb6a59e4bbe74f8b24de318

SHA512
2e9fb75fc2cdb1e339f57bbf464e3ccbf13dd5df270a39903b57df29099bf958cf7af58a234450a52a35e856dd1122edfd1773286d97975cb37b331e3bbba434

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
450e66e25a5815bfedb7d01b2953e6d7

SHA1
900df25bfb080e80fa3ee4d95afb2e0025a3f72c

SHA256
5d4ff6c3ff9fd55d6e424cd861e1fdbce60eaec31ec97447e3df2867a48aea00

SHA512
29ad3d9f9c23567f88870c250738416292f940acba156ee5d1fbecdf99469405bee43e443b194a092ad14088ede81e3855f025bf0891100cf01e3a767da4d365

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c45f1624f05e8bb96fe431d087b7d4f2

SHA1
86e7d0b6f875f93c6385ede825299940aef393ab

SHA256
fa042007ffb3c6dfb6025cf9fd26eed59877f20590ea97463cdc13b300a1fcb6

SHA512
1f8d7ee5508a903469d9b5d2342c7c99173cfd95319ec3a65fd1e412ab2e2af596bc40b9734dd5e002b274913b2e42e68f83d65ec572b58be9aebc99c44470c9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4779a098f175e7745fab059b04b4face

SHA1
e31dc7353b43b0f23cde1cd4249d47203ae83598

SHA256
43b66d88e51a1b7807399bd3fbe2199cd32507799c993f542aa290e6a816b0ac

SHA512
7cd6ae95c83c891ad2209b3548a290c88875d121a58bc0b14ae4feb0fb06a1b364d10fcaa26de770050b2827d4be05e0c0e0c7216d28c928b5b6e09ae25bcb0b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e550b9de6da4e29877d11767e05e0e53

SHA1
a7ae73d8f195341e7e1b21c1ea599477d477bfeb

SHA256
b4f4820185a771d1f666386172af06223a9d505b6f56d4e0a298064a04d9d719

SHA512
d5c71ae279a8bfcc80d96a2d57f6985a60685e2e37de66c3ec8bfbd91ce69c6821e2da3d98dbc899bccf5d60695d047a8d45d09b1cf1e364ce70a687b6c87fb5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8659baabeaddd2e3c499d19809bc53c5

SHA1
c6196ab6219530f11e224dae1c0ac7c9fe45a5e3

SHA256
56b3d5558d683ebf1816b88477571794384ec47a0801936ce43eee1b9ec03060

SHA512
3f4a1c1636f194e53bef30ef77820068a34f7edd13b88e49dac08bb3b74ffe7c60f372a2adcec5197ef0261f883ac259a1bb8262e97623189e6f1d971905ea66

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
764be0ad47b11bdd859a9b360ad6d5fb

SHA1
ed22b192ecc88bd7de552717ab80431fdf01930e

SHA256
63c2a0cee4c9585ef683529b6735459c7a4259b6d2cb37aebdedd0096725a2b9

SHA512
770cff848978f7930233aef046e6bf57ffd7783102b889e070ce1ce7a387895577f22c3cc2b3903c6863dd99fcfe644257ebc30ddedfb8b286d371e04acb0262

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
058234c7bb47cd5d6235ba51dd0e6ab4

SHA1
77958d4d954e3154880784d77137a8aa90d06ed3

SHA256
f7740d2377d196a8bee11d897e239eaaa476bb10944ecc0873a3478d64e4918f

SHA512
d6d774f332953853a5a7095784af45323591c40ed1cf5015572f263d6a449d6a6105d7c8b2bd77a2a93de9e29d2444a11155ba97339b97a4eae9dfbb14241efe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
57cf30246751b35da8354eaa0bf4f5cb

SHA1
8bd53d160e2bdc9bb9787facecffe078e7c8e084

SHA256
99f03be9a18c7cf9adac8f0f886e527076dab5dd32f40a253fa428114a6123cb

SHA512
2b0f07d04c07d47dccb0b4f962d844696d17d3221a7e26f2bc13406d552bbbd015e927f6f98bda875b3d19de4dac60b8e99a287c728b5bce2259aa941781395d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9b42f31b4fd98591aef288fa67f05fa1

SHA1
ec0a4ca3a42ac58f938ee40ec9952af6d15b7307

SHA256
1a4acd4038b56e206947c12083f31f68191454d842f926b4bc3840660738a1a5

SHA512
0b6bc2da1501e159842e58793d54ee90de2f3aa6f93c40a78ef40001296108bbb2d84d26dc6152834d8ae082f609e656f08522c25ce0ed6cd2401acf85050de6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
26e4dc0822f30afedd500290c7614fc4

SHA1
316a82890e7a6bfae8d16018d4d61a57d6f6387f

SHA256
29cfa32fbc6856b1f02f699d08a2f89a9e16be554b41f0d42d56022aa3c680ef

SHA512
cee50c0dd41a0ddf11bc09bc44de0a0a559ee9442458c170eed0dd48efc0966bb671ef2948d54f14d4b67f25b6ed26b62488dfe360cd7adf6789e18988e23e02

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3cf16747b0e0c2b6cc0d517cc7fd9c14

SHA1
220ce79cc1aed79939ed98e38698ebed039802c0

SHA256
2e3fba3420df0dbb3a7966012ba327497634adedf12fa5be7a83a6f38d0f8b54

SHA512
f83e99b0f8bbeb981347831c1d8d25b33ab9fd2bc95ea6a1288be6204a6cdcd60675aeadfeff20eaacb0ecc1d03d76a3d110661e43b43c0072af34db9778bafa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0cb670e4ef1bb303246f94c2841195bb

SHA1
857e6a0550391920f6bc345611245893fc471d26

SHA256
e2956f407915d66f7ba8e70a9de9eed819baef55b40351eb8c9d89438daf753c

SHA512
1c7d831f712574d190bf8570da6ad6d2d1ac61a367586587f30ac9e91c8367c45b2726d5e9e2febfc3da328cdf5b87dddc6487c63be951fcc87ecf2fc798c093

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fba634ca31732fda7f65dea21a702fc6

SHA1
159171df6eb95c26779deb6a97d02536b4346e19

SHA256
bb6907bc112bd2844dc2f1156f65411e591e849f6fada7a2501b08a6498d1463

SHA512
2e5c047b6af14bd7f9648c496f2750853dec16729624a22af6e722a8a0a353bdbdfaf0f88783ac776b64291ccfd2ded250db97fe5eb0bd7dc73cc29c977e3037

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5ab37d6d6c898138ab55c88b2ae3f4ba

SHA1
07dc919cb31ed001d16598e4c536c87cfa013e3e

SHA256
93f12c2e6167b1c63c3e15235b263ade6cbec506a096fbafe85de2d3f3f26efa

SHA512
ad673e07279f6826e9e0a1e55fb265a5bba7cd81548769cb35ab3ca8c359788c8876a17ef094d0519355320e9d795d3af6fc1a72df96071e8b9ea78126b64290

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2FC8.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar303A.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit