91c37f82828cdcc848a4c846148f8783742c0ab2f75db46f6ea0e7135600679c

Analysis

max time kernel
139s
max time network
140s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
15-05-2024 08:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

455ff7f3b30fc12d7322db7c084739be_JaffaCakes118.html
Size

20KB
MD5

455ff7f3b30fc12d7322db7c084739be
SHA1

89b599dc888c087eaaa507b3891a35af6137bf3f
SHA256

91c37f82828cdcc848a4c846148f8783742c0ab2f75db46f6ea0e7135600679c
SHA512

dbabd593a3d1492eae17225440f67faea9ac495686f096921c18ff2e59d880bc8f76dccf7838188fb78342ea086fb1a11ac9bd23b0d6490466b3e97534bbfe64
SSDEEP

384:a/oqi9PUi1gTL3+V6R4dbq3q82FslJJactEtvHSYOrZsDTJAM:a/ogi1g/+VM4dboq82FsnJactaHS7WN

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000c4b7504b375547b4519b8c3e5c60cd52821448c9f1f7070f7ddf26c08395e35c000000000e8000000002000020000000bb433a90935e6c36677127de0328fb3e6a25d726fae7432a754b59739fc91e85200000006a4e58f53e82ccbb3d80e418ab1890d11b78423fd8967db0bb6b424f2d96cb25400000003b563249f9f3dfad4227385abba4192b21798ec71f40cd641d2a66b83ec9b73befd4a2205a5faf17e50a9bd4a855c37d03cdfd9f8ff8eeff82f4c6d32e5d1ffb	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421924457"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0113ffda3a6da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{28A709A1-1297-11EF-9BF1-5630532AF2EE} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
956	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
956	iexplore.exe
956	iexplore.exe
2856	IEXPLORE.EXE
2856	IEXPLORE.EXE
2856	IEXPLORE.EXE
2856	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 956 wrote to memory of 2856	956	iexplore.exe	29
PID 956 wrote to memory of 2856	956	iexplore.exe	29
PID 956 wrote to memory of 2856	956	iexplore.exe	29
PID 956 wrote to memory of 2856	956	iexplore.exe	29

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\455ff7f3b30fc12d7322db7c084739be_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:956
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:956 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2856

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9ded7793841661b3ec9d82c7016003c9

SHA1
95a0401b9f7891a4569d77c8fc3eb4ee0e94b068

SHA256
1bec2af58fab5e669ce05d6c933e8f181281347633fd2db82ad06285d70fa2af

SHA512
9217844802db76eb3c9570c3c2cb651822d275f36a656907f7d859db7e356a553ca25e0bf1f384b0b4740ce3f06f7318f7451598c377e14571889281b111e8c3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
43bb988194f2ec790540563d938a80f4

SHA1
7221b2c8cffd27ccc236aaddaf8b0944fe4cecdc

SHA256
1f9a805b04195ea47786274877db98b583a2abb2f0f08e31371b2a7b464d327a

SHA512
63987d97ba37c50142b335aaf38ad29ac6a7237aea9e53059c00e410d4c22a6b1520da8340da34be8fa17191118f7995a59064877510cec07e5f64a3ec022de0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
32d1185280b93e35cd57eccf9dd607a1

SHA1
06487c938ec4eadaf42380f5767d005580dbee7a

SHA256
5fe980c8e6adc97db0a4fc5c348da107da5c8f5007f5851f7b8bc0eee0cbebb3

SHA512
3079b5849df5ba40776d664f69d4cac07eeba7e21634a01d62feda66c20fae29d957ea2a812eaff513230d5eb92ed1eff91f000e232459caa17af9d6acce338e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2466ff0f271df5b7f4ef78fb0d6c495d

SHA1
a6b0496e95134e69903ae1864a4566e66fc2bea1

SHA256
ea545cd060043748e5769efbf7ccc91830b1033911f17770c3807c727a1d8e25

SHA512
1e8cabc8444e814224b664c72d41dbe2afdb3da53959f704eefdae50bd00118f05bf42bd0914040eebe6a8ea7dcb8896ba41e33a55bd4de04f3d2b5f5a7a956a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
97423db1c16d13a85b866f07a12e752f

SHA1
b7e75edf946eb8bd1a2dcf12273e00af7157c516

SHA256
b9ab78d33632f2a5225e0803c0d1041ecd7d1b7b417e7c8b786758f957ad2571

SHA512
b82ce79b3309a06f3509eacf6cb055094b113c686873540256d295e76a0dd7e63417973e785f66694906c9d449b1ec50e92aefcd304a8dcd15fc0e71d4dc0a3c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f51788be21f73d0476b1c2a771a10649

SHA1
a1a5809a34e4a0aa87f4f1aa3602410383a97e79

SHA256
766dc0e87a937932f70d5a5914fd96877284cd2d1f3960faa08e8deef8926645

SHA512
4ff11d145dbf70b751438ddf7fd9518c3036fc713a983d4b4e9250fc7c8bae899aceb63a3265bf698792bc2c8c5cd356876d212f40159c299adfe00c2e4cbd2b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cb16a94789faae3748b97e7d75d35c4a

SHA1
2a8cc963006b90bdd076da1c95d32c2996f89f9c

SHA256
2af9ea401fcc787f99c15f3a32336b0177c065d00bd3aef251aab3bfe512258e

SHA512
e9d32a22f3f9914b642ebeb4af6548581b43b45024c50e45dbe743b0693c861293664e2ba4836d9a3721eff57f3f2ec07e4c0b6883d0abc22fc9d7377a2ec294

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d795884b5189e7878362ab72d63f5cc9

SHA1
4f4d34d53f4254f994b25e6db992186801630fbd

SHA256
635651c065332124645e276f36b442464c493bf4c2133e5324166b788b7db8ad

SHA512
1e686ae6d3843e1c2bb878cd6ee8c033e7e23efa945a0b57d522f0b085e89158f3800d9a6d33795762b3870bcf18ff34c15497ea6347396ded6be79723040dc8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4582a06fa604de75066672b95b6b3b75

SHA1
711edc86aabe9c215390ffc4e3e65cb18fbcffbf

SHA256
d8283f3d8c4272077ba5f307f322321406d6fb11ef89e3512a5c0a897a896a89

SHA512
789c8531a6c98da3bd7241e2a22a16a575258176334d6e46fee72bd3e19291c4c462e58fac813924dec425fb58fa765fd790d4a6fd8596e33c5ef67ee3031fd8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
92357c63d8dd7b173d5d7eddb5b9f1d2

SHA1
3cd0bbbbc0a1699523facf56b9f3b50cd0d532b0

SHA256
abd57126518ec7fefbb4b207662643baa51b93c377c6761a51c8bd01c4521c10

SHA512
0d246edf4903dc9b3f92283d5d8e78c965146fcb21cfad99a851af3c73489bd19b50f21d0ecca9e44ae1eecd33a88ae44b8c9ea1771e278ec0661988aebdeea4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5a0369bdae2cca5e46060a6a3914b294

SHA1
d59aaaf4ef8f238f460c18e54fdb2ab312cabc24

SHA256
a029d20435ce363f5fd01ab37112305a6a8f55900d5d42f1eacfc18cbbb8ee8c

SHA512
baa6bd163f629da6a04d826402e473c637becaf7d2ca02678e16011109ddd4ef23af85c55f4c09264a6a9def67d65fd48d3a2de137461892a50b0d46d2d3ff58

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cd18bc6fd7d643c4601fd16d9adfbdb4

SHA1
8fe321f6b08cc527478eb72a92577117363aa583

SHA256
a3e1ecbd0caf59b2efde45d9d28494674e90dbbe4f1ce790e9929db68cd9a87c

SHA512
685bed1fa9239c6f94c04efbe8e7dff8bfabf6aa96e9f16e1c6ca8974e000c11faf550e6c00635645619ad6335d75519dc87fbbbea956b38a133c07cbed67f90

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9d059136a59d1f84fda348a4b4ddb65d

SHA1
ed7944c17a998c5343396ff1fa6e556ecb81b434

SHA256
31ae3bafb98b3a92f1a04bb29a8022ca988b9df681764a61ce85a695ba7a5950

SHA512
8dbfbd2ead98f58a6133f7b0a24f10d491cfeb783401957dd6c6ae49a0fd0a3d76c6e218f2db75ccada7b0ad2d6bfab472a024305aa16f2fdb64f690de7533b3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a5c50b59428de9770c6371ed2b0a8928

SHA1
d47775f3414c879b8c20eb6a532c211986465c7f

SHA256
fef1bfba24ccaf54531a7b2df7904d3a486424bb76a2e8285b8f06eb151a54a3

SHA512
0d4b0a3ad46aa9ebed9b9a2c331e816319fbeb750493ecca4e2b141c1cdcfa9257db7fcafbfd8a333b0098cd28cda1bee8b045d7803cd73dd71c75e75531022e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
68152f48945bf1ddf0a9faf6f285ca97

SHA1
6d7a002ea11165e0ae9f214b9c3ce33328484756

SHA256
2a01ac1376d04c486734b5554a06206b8a852cbe36c77b01d32c629430a4ced2

SHA512
b1c32622aadad27f970f7b8a10f93b1f848dc1f9d02bce94cd26486c74df9fce654e6f505c51fa14d3ee98930bdfd479af3ebd0fe9602cceeceabc80b6353157

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4c87433ffd09e471094f9446ef24d284

SHA1
6c253c91585eae347fd76c59cea0e05c07ebe604

SHA256
2a896cc63efc3ae096a266485c41d09d7837f1c48cb10b82d22d17d6b611111e

SHA512
54472ab34199e5714df1234f4810140db54fc95db914e31ac8ba3c335ef5b9e931af462c9f2cbb6b424131fa9c2d48dd4aba324ccf71dbefded80d520e309631

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
abe5cdd4dcab886cfaae7709c5f7cc0f

SHA1
d13ea5f320ecf6c892ff43b685eaf8deb1069070

SHA256
caf0b4a8fce6003797d2b256d27aa47cf514c81c3141299a808111ac858e8042

SHA512
73a692fdc914b764cdf6cc0ffb08ef3c3ec231b12cbdcb0197aa4a606e1672a89c94f8683d3ad624d6e60c75d3e99e926bb1f7480175e4bfadf95e2deee1d097

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3b447e0439154a46408861662e1db16f

SHA1
5cdfd2a2e15ac461044aaed8942d46e841b2fe4e

SHA256
85e6c7e4f287731a37c3da1ae0995d3e7f5514b0e5f297b91015b2bd21c4fe3e

SHA512
adc26503875eed6f82b354d0a5494ab631f526951a341cc5abe12cea9c02b3a02e3787cc78855a6df4bef893d7f5fdeb872516bc86e2ea9fc0803f6922fd1bec

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2CBE.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2D3E.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit