8a620326a3880cba04f4dcb8374e10147f4fecf394a10ad4d76938a1a2daab8c

Analysis

max time kernel
121s
max time network
127s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
15/05/2024, 04:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

448049ceb4014aba3e064f95c50ee3d8_JaffaCakes118.html
Size

68KB
MD5

448049ceb4014aba3e064f95c50ee3d8
SHA1

686d01c0bb34441d3e5b49a5d664226d0810fb99
SHA256

8a620326a3880cba04f4dcb8374e10147f4fecf394a10ad4d76938a1a2daab8c
SHA512

bd3dc7e77e3e90dd179cff8a6005992eaa209991b76a29220544808e4496ae6fbfd31d1f327d3439e89fc5baf416244d2894290b5358aa4f7776e43509c4c68c
SSDEEP

768:JicgcMsSZ8tN99OIsEnShxhTB0hq0oT2SqQCZkoTnMdtbBnfBgN8/oygcRWQFVGj:JIWwvlKYJTEPec0tbrga6crNnz8PJ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009b106788dea7af4d98683a8983feb7c600000000020000000000106600000001000020000000804113d53fc6b423bac6c4e0076e4d43306b3046ab63011d724c6d8753bda287000000000e8000000002000020000000c018f5b0f4aa1502e5c05676f8a1f128d5ee6e8c3aea6647166e03279afa13bd20000000061df0887eed9b4dd0624da513ef38fe735d7a793e105023f9d676eaa3a07bf44000000086e17368aaa6a86c61d8dfb1a35df00c1803a0a7955f3867914d923bd8d1e8b7d2cec7f4f90fb2d2ce1fb20ed0a95d393b7f906ec117314bef55af84ecddc219	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c0603ada7ea6da01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{05B553E1-1272-11EF-9001-CA5596DD87F4} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421908507"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2916	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2916	iexplore.exe
2916	iexplore.exe
2948	IEXPLORE.EXE
2948	IEXPLORE.EXE
2948	IEXPLORE.EXE
2948	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2916 wrote to memory of 2948	2916	iexplore.exe	28
PID 2916 wrote to memory of 2948	2916	iexplore.exe	28
PID 2916 wrote to memory of 2948	2916	iexplore.exe	28
PID 2916 wrote to memory of 2948	2916	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\448049ceb4014aba3e064f95c50ee3d8_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2916
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2916 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2948

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ff49bf2b628f8d467202926651702ce8

SHA1
97701835c094c42e70f808fade8d312d31acf732

SHA256
5aaa54a28ce3c1b11dfaadec9fc75df72dac235984ad3d9653ba2b4df6e69bd5

SHA512
d2c36738e3dfcb60dafbd9b07aab7723c48df5fb8c380addf1e10df8edc0efc9319a4b96d2e4d9ebba90038f35654d027283a071b5ee423353113878f795aef9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d6ea3ac4060566091f88294429f09c87

SHA1
2574942861237d8ad320841958411db6b8fac4ca

SHA256
356d728e39b8c29eb3fe21d7780936365ce65c5a9124ab7f5873705c9500265d

SHA512
4e22993f6e0467d6c0fd5f6198f632f21c5af22df66958972294f782acee09dc00211d67d672a5718f9ee15c75fae5f3268ccc5a60bf8a62cfaa3854ad291a91

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
33d8cb9a25fcbd1f6266fdc983a80be5

SHA1
7af6fc8b08cae22ef1ce1bc3e1b0bff77c8fcf47

SHA256
042e2ac7008069fc4955401a95ac6d48729f1167c814fa02f2994c7dee47e18b

SHA512
da2be9bf5426e0601677642b796c4af8f15f4ff4b028cea6f6bd98073f05a33af4f0a2362ae69854a3a49ada5752d9b865b33de71f45e83b21920e8bc2a24fd7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
31fe2aac4976894027700d19b08fce26

SHA1
4c813e0cd4b8ccb132d70f723da7b2d59e574123

SHA256
1e2cc1da8227464fe317e7f5214c9cb3d0556b7f001b7bac287382431443e4bd

SHA512
3bf75776b45b48b352fb03a7d3a941ab0a819080585f4e6eb13bfa2054790c95ae99a94ee74d6b0f60a3f41c370d055a46917af2510654041f5efc60f92cc5f4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
20e531f2863c3b30a4382cc15276e9ef

SHA1
6a1502e2bfbb7c73ddcaa262c7367cb3868fe6c0

SHA256
9b04955418a4b8cb4afe13874c10755c1bdc86661bafffa19469f138ca511c60

SHA512
e3419075a4ea7b0418ee6b10d665a8daabb09946e0b1ccf24b33f57b2444c84abba9a2a2034a3a72b2191aec5a9e8d90f63aa42e186836ec3f1fac11eb7844f9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3307eb96fe04419db1abee3dc8942f27

SHA1
614e1cf2053357eca33420ac501826d3cc9d2f18

SHA256
ddb2edd4ad380cdb7bdce8c48e3a2d87c737261a790aa172a0071303e638f457

SHA512
52804b1aae18ffac5173a549ba1a93ed56855ba6490201c3556c97b0e0e8096feb6943400d853d7baa81db2d52c5110108e263f6c8b330e5cdddf3fad1ce6aae

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4c4335c630483930cc1aededbbd89a4b

SHA1
0ccf376bfc036a2c312762c39a71e6f6a4e2c71d

SHA256
00a99c6299b8c0e8c23ebc80eb82f92fa0304097aa861acdd30e80fe84ab2be3

SHA512
2c802a4077ba6f6a2bb4ca218c763bc8cd4081b181c36c94ad5eadb1f264453bfd1d285c971fc2281f374229347b258d734c7cfb07cce193cd29d835d24b14bc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7a3bb0ae86dbfc50c94ddb7237642770

SHA1
c01ede286ce4d0b7ccc7966d516c5e144760db5b

SHA256
fcfa9815beb5bb71f8e6062229cc1a9f9fd73394326df1a590e7e21107f197c3

SHA512
f3632c2b4a22490a58b765a5e4887806ad65095bfbb58050dd894ad3bdc1ceaac8b5ec750f88386487665e92461218c90c026ed859ab57f022f1936355df7970

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1582d191e11518932f6ebf274d544b06

SHA1
5de806eddb43276fd1fa10eb4e069c2071b1559a

SHA256
f95b07ded4f5dfa58b43d4148483e84dcad6fccb57114e0a09e0ceb46e6d679c

SHA512
5c31500be1989b21a374ca7a82f1256eb354efa5c26715fc6ed5b967f6b50c6405e4451b6dab8d9c4cddb28122d868abb35978152fda1ed7b14038f1b030b2ba

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
40be9ec45dd2275bad0353b805f29edd

SHA1
d0be9a3cfdcd3517fc064d42773d35e38e0ea5b8

SHA256
a6b72daee7050f9da3bc1490f3f495617ecc73d2ddd024231f937c5c04541652

SHA512
3044fe7a4998ac691dd9eb1822ffc91edbf6f0c8db0e5924e8d1aeb79ff31f2c76ddf601e3bdd21083dfa1a1b4f05cf48891446790e39e91696d2fed937bac6a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7c01d296ace4fd70468f2535f71c1b9c

SHA1
e302ca16f073f9880b258b6c87ac6d39a4adf711

SHA256
86593ecb7dc45cc686470c3f96dfc8268c02bc347cd0f829374504c7f3bda171

SHA512
e7597550852f498d36e0fe3bef29af24a3cdcab3ae79a7722d8073d1befbc0157e19204db6e86dc02919ae811a134b91b7f6a60fcbe4af6ca0a98ad3afd665e4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
554ab99a6f14ebb55e2b533f5e3e02a6

SHA1
0b1a44c014d1e6cf2e9afc0c02f13dfa3f43b351

SHA256
708f29ef4047524018a6242c01a82b4d5237bd471fd34ec9a325c5dd7d921c3a

SHA512
23e814e9d7c7907e70ca094fe276f2d578673d2587298ed1c95bf1cfb6b868b0741ec662fb02838b973596d82f70b23e631a88a4cfd897f51e466943fa38916b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1430306ce52f3db29036e646adce12da

SHA1
1079d5ceb20d1c3000a252d5164c52ac2ebea9c6

SHA256
46e39a132024d0ecbee3a121ce089399272d01db237e999dc7a6f16f85cb2e0a

SHA512
323910a8b9c15f7ecf0627e877b805600c9b04308837cd72f820149c4ad45eabdc3c358a06ef8a7834223b8eb9801b05db321bc90d8133200ec43609053aa844

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b33c3f8ab19688aef8033996c15e21b3

SHA1
1ac5b8f73ee3f51273b2fc9c7ad5086ccdf1209a

SHA256
d861278759e74d13d7e2c1de78f4f196ae710c30722f7e3a3437b6bfcd64175e

SHA512
253a534db0debdebf68711006c78e6fd9f1f128891363131efa7db1c08b971aa0156964ab4afad957ac60c43cb4eb99918439b8b6b4509e55a15032c4e65bc69

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6208c48d765866b565e86bc694983250

SHA1
e74b2d8e9bd019f607a91320eff5d8bebfd9d963

SHA256
acbc89105edcefcc3c1531b74e92c238cbc1890a188cfa9bb7a87a4f8875763c

SHA512
a977e6e1b536a6de84f9b47b5bffdfa59d646715e70ef98068307f5572f7bb1feaaca1bca53536025a9bb1856720d0b39a7982baa3bb26422231ba0df4ce177e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
60200054efb0f2c27bf0de19ec247645

SHA1
c1be1d2131900f5a03c4e1f155880fcc8d507e6a

SHA256
d83944e60d6ade5c8360a414081ea79ff0a7f71b82f50667fbf2a09fb4bf01b1

SHA512
f6380781ed6b92bca64676e56a88de3971599b28cb8d5d2e7a330dac9fecc0476d7acbc9054feeaf6a3766d9cf437668ff1cc6424e087c77eff300237e477753

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8bbdf3c12fd04011cd0efed3780446ea

SHA1
141881c11e14de5a7250c119489c553148478cb1

SHA256
e417cf701f2a2e6d2a174944aa2cb149daaa898897e05b1973b8a26208c45cea

SHA512
6f7d18d587299d82edee22012939e207e2fffd4ca00ae444cf179007277fa56146d0ca0db0f1d0a91c9370677cb910e0c4cdc43e97bbda417ba086aeb5300d49

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab342D.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar34F0.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit