9aab79e5f31f787be8012d245c199154ff3e39443f0b2fab21602e9f76e6b106

Analysis

max time kernel
136s
max time network
134s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 15:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4214bcc3456bdb11f5bf1194408df78d_JaffaCakes118.html
Size

63KB
MD5

4214bcc3456bdb11f5bf1194408df78d
SHA1

446e42cb4b5374f8ee0481a3d9414e3f5a6c915e
SHA256

9aab79e5f31f787be8012d245c199154ff3e39443f0b2fab21602e9f76e6b106
SHA512

cb1e2ea66c703a2ed40cdada78736adbae9a32aa590e7372218256f9cb790371c750bc7c86d6d890b85f63e28608abf61c537207530a3d70c4fb76a01445678e
SSDEEP

1536:JVgK879zdEVYPYn/Ow8BqM3q0bSYJO/D40heG7E2ObIx3zQ/1f7bbcbT3EIEVJvr:cK879zdEVYPYn/Ow8BqM33bSoMdTktGM

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f041b9bb17a6da01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E440D611-120A-11EF-B35F-5267BFD3BAD1} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b000000000200000000001066000000010000200000009929844866aeffff91eb8fd235d40e85169fb873c7524212d3243bdf1c51cee8000000000e8000000002000020000000bda0cf1f6638bdc97434a2c641a75032eedc596c414f1c1cbf6745157fffaca2200000001d7a5ba63b15beb92f9f9562c5e4e031d17bbb1a98b0143fd615c9c9d1a177a940000000aa8f8f478afa6d5499cd44b9e76428ddf307a2f87b6daeb528f360d806fbde030882a07ff2a06ab22894f5e660cb7848c4c63e54c83c062dde22a1f0a2b1114e	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421864216"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2180	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2180	iexplore.exe
2180	iexplore.exe
604	IEXPLORE.EXE
604	IEXPLORE.EXE
604	IEXPLORE.EXE
604	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 604	2180	iexplore.exe	28
PID 2180 wrote to memory of 604	2180	iexplore.exe	28
PID 2180 wrote to memory of 604	2180	iexplore.exe	28
PID 2180 wrote to memory of 604	2180	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4214bcc3456bdb11f5bf1194408df78d_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2180
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2180 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:604

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
25da275568c8154efd103b4ea12cdf07

SHA1
6735889413cdb81ea07f012278f3231983a21eb7

SHA256
14d9721a9657cca24a9dc6fecf6eb067b31725f74847ff749e932e2443b4a4a2

SHA512
273aefeb4f9ef4e89e444087144a8025cbb32f0c2c3b46eda00df2bc5dec70dbbeddf529fc0686122ca2bd48d19341dfafa4c600a356d031b0bfc2ec1f8a3d03

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
31aa161f4c70a625af729d0548ea26a7

SHA1
b8fc783eb4e8c9bdd843cba3d02e8080596dda1d

SHA256
ccf2c000261a9da37b7e70f926498bf494df93153e0b9c4fcbf27785348e495b

SHA512
e7a74adf425511fe06c0f127a2f6c325f5951c5be590a173781ce8348661d8e92661b24f97eb5573dca08b2066151dc41b27efef2c7a13d4b2cca151f7ece58d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9c8c8e99fd8f9db5d85f5da38ff1c848

SHA1
dd7563808768839a34b7d3df56e0c80fcca41aeb

SHA256
5ad78fb1ef44e9215f6a4275acf3ef9ae513e678a1c6e395f4bdffa9ddb0540a

SHA512
94ac9b1e372fbd1bcf9fb4a77191dce9198d47a4c966d37ffc14c82623c500c22d203817580dc5afae03f357c70320d524d04e19bb7e7780aada6ef397e5176b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
642d96db3f8949d59f87ce5e9234075f

SHA1
1e19d35534900d3ace37b28916b6363b2921f9d9

SHA256
f70f7cb4d234994dc2804c9d2b9fac2e3a36790a617fc283c471b680aa73917f

SHA512
0d162f1b0c5c3d293e84cdf0520f90560874c736e961aa4c9e11f035993062b61648edd0f28c5c3c19e6e08a11dc2d0d722e67bddf47cbf3be9325fbbb97e7c3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d37efebfa05d03c9c4f16f21170eefcb

SHA1
8752d3ce14b68c4dc26c2b38d722157e290176d1

SHA256
30ab410563e5d64cf1f6f4dca8c8b4f43547386b5531f3679506c516faa5c7bb

SHA512
5bac6464385b96aafa7a6b01fa1a739bd104edb077bf45baada9fa3c38b3e50fd8aa2c789b4cf2930c0bddad8472376eac03a282646310f8b3fb4486696a0e1f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0160aca011bb01aafeaee5f36c27a1be

SHA1
3f7aef1fa70a309fb1e13c0cad620bcfe7f854a0

SHA256
092e18309acd8c124f304f563a37d9081499e224cf4545f97a1f0598c81a6bef

SHA512
bc5a25229236c71a404c91b176414702c6712b2e00f5dacb501aedc5c2930f24505827798f0888416b5fb121944489f9c1d62dbdf25cdb151e718be37b2c0dd5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
811800c1bdacd573fe41620e323f0cd6

SHA1
c8bd977363adb62203934c6ada6620e4a965df94

SHA256
162a082708043ca675ce95a251a3b0ee00ed690ef87105d91064e00ece067616

SHA512
f25c4ea63b161515ad82efcd699a74663c30fa272f9bf8d8db5ad2f6c00155238e8fc914f543af63a6f42f9f72cad3556abbd31a599567661aa368f81e71892e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7ebf956b7325e47f374d6f20940cf447

SHA1
f3630037cdc0bc8e858d4ac55e7030b6dcfee327

SHA256
c32677682588adc22d4c968403801074827b97215556bf52777d90c8f61f6306

SHA512
6e88691d1d5f6af79266059131ee27d5e8d9451bf28530efe9ecd43ebfd6443e958782d09f46e3e98683281036a37b142a8e32cd179b2e03f31383d7eab49717

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1db130a9b76f8e23a0eb813c1d67e2cc

SHA1
4ab6f067aa6baf54149ed5ebda773ab670445ed3

SHA256
3556fa0d7db9e0fb46836bdcd7bf7e528a82aa302e2547d06a8ec873ffc32714

SHA512
3b5fac0361886e97a7286576adfd69d23d2cd73502fdb551a325f0b4d3fa23e300bbf0fcd29c3b5e0bb26c3f03e5e35db3ea4a6ff7da6c481eda7a451e6cbbd9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3b75464488ddf5d0e51294ea2cf23d3b

SHA1
ef656835bd43f9b348d21babd294205fd6cf002e

SHA256
a6d2ac3eab8acc9cf632941309f122cb58b8cc67dc9626051704650603917996

SHA512
1e16355b740883c65633b55395c2e612faa0b6ce1b3811f8e0fc2e8ba4a3741d6b5eb11abe6bd94ce6b8a5efe367b73d0505ab871825ca5d649b5bc940da4c16

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
63eed28a74810e352479ee1ae313b208

SHA1
2558d17d78e647d16c2db3b9c2c6cea5a592ae36

SHA256
963ba51da2006a7f40c28a2bfa725d2f64bde5138a5cc883246a70c9d172ad6b

SHA512
57e351a1e1583555f2f9441672b393618bfaf85528b8f9521cdd2e2d46b4741dd3a2415376b0ace224099fa69779edcac1b74ab70d15acee3b5e59fd23c98ee8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4f5ae306071073b0913537e6a746fd69

SHA1
5133002ad0a16cf5942326c195894be230cdc0da

SHA256
b51a530490e10521ff494ebe7b915b6a068e8059b3f363997818f9436eebe96f

SHA512
6e99538273d0cbab52179285e086dfbf7e24317ca3e3c07c0b3ac8ecc2c6488935546fb0045ec95a60c069c9926c787bc95e144c98c4883922c1a821ea1b348a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0737c8726d64d09def5bda7a9efbf855

SHA1
81afc2df2a7fcb3cd6d5bc30f24df590b15a1767

SHA256
9556f608a559298b2f32f65c547473fa04dc21168f29f04506825a36a60eb3d5

SHA512
e850ca972d20cf2a0cb1e06a1086240d82c470c8584e2bbb870b4c804aadc4679fdc28ace70bb6cdd7faeb2e6e308e4f2089bb0a4731622750b52ab7a4653223

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d21ad0ee812b26ff5460d8de4f831d4d

SHA1
0ad29f8db3872983b9629de13620541c7194bc63

SHA256
0b79a4841c7342796f3247e3732328a3b74334ffd987f0e7c932960cfc921fca

SHA512
44741874f0d409b79caa1fe31a232f4e7e3ffb456d5cb4913efadd638c094f301123e6009019a1367e594dc4e18b84b8683470d7e30e8411bca0fd6bf4af3430

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f051428305b87cbb604625d325553b61

SHA1
ff9044f0ab7ec535f0c163fe69223151eed538aa

SHA256
dc3b872bc69c619919e73ad696a9ff62f08dae73669bfa4dafec49d212f58aaa

SHA512
fb77ce867ea85330321f6348afb3b81247750fdbf196ff285b2081181cbc4e0b3bff445e61725d14cdbe644ddccc36b58c9e085c6f6ed0629983d84621274378

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
91a5553abb91d84560a383356251ce57

SHA1
ee0c7b0e41dffe1f0c5e4a34921ee3156c4968d5

SHA256
d2bb1ebe70f79416ae6bf488d2afafbb660aa718c81dc646e13bac997a981398

SHA512
0f439d30d2868ffcbe531d5870584f9e6c8063590149fcba691c8868e56b66c9fe615f32b0aa64640353e59ed82f1c70fe6d9de88702c3ecfc064ce36de02d20

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
89ddff5033607a1049691db7c9c4045c

SHA1
cb4cbad4bccb849c9d5a82fcff936e21c6391b61

SHA256
1595b83c9d74ca4640a6ca64f2d38900b229e294ecde20501ea27e3a15a7c0c5

SHA512
b752a143376bff7ea2f97b909044d89de23c485d8a4a9b14dea2274ca2865bde53ed83956f2c903b669dc9120af904864174bc366bbcbe1bca9a7a39d6d8180f

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabF598.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarF716.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit