3188ac13fd2b8d73dc1574c801aff3a23d0d1479ebd658f113ce2573adc26762

Analysis

max time kernel
119s
max time network
131s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15/05/2024, 11:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

45e7dcd9e3e10eb2c2cdad6498de12e9_JaffaCakes118.html
Size

3KB
MD5

45e7dcd9e3e10eb2c2cdad6498de12e9
SHA1

e8478f13b4107b699d115955af58459e49380ec5
SHA256

3188ac13fd2b8d73dc1574c801aff3a23d0d1479ebd658f113ce2573adc26762
SHA512

738d0f1181b55ae2185a94e98d140a328931f2b248562a998451b69bd71ea7e7a0ee3ffaae325e33f4685dd133614bbdb6849817075f07301b6388a6a15ebf7a

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a96069000000000200000000001066000000010000200000001fb02f8700a878460c6cc2c1a7ddcade7c2744e6426cab458472e9c375d89a8d000000000e800000000200002000000077ef9bc57381e466f698168c523c935ad7448b2b9dac1d31c196a1c5a3ee010d2000000025071d5b8805d2cff8d11b5a15b3a08a20e7ae0bdd1fc7b01c881e9504b4ba4940000000a36b399b98a45e124a957f8dba2eccf470acd7c0c5631324d03e4d21028b9dc43d1180dddc0456639640f9d522eeec335095438dd64d0df5e6f1a5e015ed3d44	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2EF3EF21-12AC-11EF-92E0-EA483E0BCDAF} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 1098a403b9a6da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421933492"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1724	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1724	iexplore.exe
1724	iexplore.exe
1584	IEXPLORE.EXE
1584	IEXPLORE.EXE
1584	IEXPLORE.EXE
1584	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1724 wrote to memory of 1584	1724	iexplore.exe	28
PID 1724 wrote to memory of 1584	1724	iexplore.exe	28
PID 1724 wrote to memory of 1584	1724	iexplore.exe	28
PID 1724 wrote to memory of 1584	1724	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45e7dcd9e3e10eb2c2cdad6498de12e9_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1724
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1724 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1584

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0c82a060c19cd0c183a0c62360b4c6c4

SHA1
b9f390708ffdf2b59495d4c690cf6720e0f581d5

SHA256
37418e94f693f92e14de346e2f91a9dde9bc3a9904872b3da79e431129114dbc

SHA512
1d881842d0e5d8390cc2bb5084d5b2f278df6b48df056bf54f2260ca54355297d0702d767b6312c4bf57762a52b74b657b1c1db439c5d3ff17ce0271a80260c9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8507897b2e5808418f8e0150de8cef27

SHA1
ad84796ed62cba90bd8bda42501e9197bce8c017

SHA256
0a6b3d8631e7963f0628e7750c2c245258ae4cf5b2abcb6cb8a99d1ab4d187d1

SHA512
6a8f74e61e02a09c801026ef7846a158abf24b924a576ba483d3bb111c926abb280f01fb15a6c110c091b74fb532d1794a740fab2e45f611fa51bc92b5adfbee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
01cab13cec953d10fae409f5efadae95

SHA1
12605987d0ef770deb7d395a83c0a6e3d98674bb

SHA256
71106dba2539d10672bd6d9bea0d6850c233ea7ca8d6b3774df3e4cc3e6b3137

SHA512
c44e88bc38d42545b2b3c445ecc469ad0101b55bc1a110a98cc5a4014194bc5aff51f9fc933a5417b3533524cbc5d7f138c00b0208ae17023fa296fe2e9ab659

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7160b84314e402edaa6c3eec11a49763

SHA1
96996128678f6daed50a441a09f6838332ea82ee

SHA256
afa4e25dfdc7b71691d1421650f3c4dec3d83465ced2185a9976deac62f2a042

SHA512
407188fb7c63de2aac75c4c88aa4b2a37a825be58b4db537df47eab64809fed5bf164e99ec0051bf8d76705753247c968db96266c529949ad0d624e46d713564

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
64dca74d86ed79962816b126a1cc98d7

SHA1
3a584d5da07ef4bb421900383bd4587ff8955951

SHA256
65a242c7933c788683ba488689c91f8d095e5156a331a6810c73294362c4a8cd

SHA512
6500a6d50a47de3b7e6e98991aefc230c19160cbf65c57b0ec3b766c0becd8b5b975f208f57267390319151795ab0790211bb980542ed352816e6b5f9d2c8c8b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8c36a89de6b7a62130034e31f4526ffd

SHA1
511dfae042314c509503418409d99082da2c8b91

SHA256
5e0c167a8232ff6bc7e13ba0c4c080aebdb5d65e26882092cdb51507cdc356c1

SHA512
d4d6cf611ed6b80d16baf4a4009f6789fb7e8bff6516631891238ed42e7dfef054f2dccfcd97b08a44ea323dad8a9f3b872a9ced9e0447308852d2f2f72c39a0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7428e4c65b9f65a076ab1f0803d2b71f

SHA1
141113a20820fb5a814f5f4732b9dc62dc037b40

SHA256
c63b7884b67c1f247f177000546c61df18f32f599f008ef8b8151b1ea1286f45

SHA512
f509ba82bf6fc002956ef9970122d60ab3ddcf47580d825e021ba49a1cc40e51d82b960bd72bfd037fff67a091b97556007a765155721a6701e634da9b38139c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5dc6b6654b2b3bdca77a7d7e8b03d3d5

SHA1
7ba812aebedb45ae1e19591f813c5c550a2174c9

SHA256
e22aa1672d449fad6a080e5301b666cc020521f4d65337d3ee16ab8140410f0c

SHA512
7e1c24a5552e6cff495dda88ad482f279f4d58a7192ef9e6249586f7521d63dfd59289e4154bcfddb09f7dbd85a3f3ed57689eba6b82cdbcd709a906772210a4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
16094a28a63c2a5fa40cb0de170a7dcd

SHA1
1965b8614428c990939a75f0fbfe12b9581954b2

SHA256
06de7b33a143605c1058d784c3ba799413328310d48853b57a7ed05287e2e009

SHA512
b708ff2f47559f4985131e8c05363b055b8474f8b200b264804af12411a2681ba356e44d8c687f8a51dbf9afb43e1db078d350d0c4361e342cfcc62612613a92

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aa4d12ee9a2a55096c74a6aea4831850

SHA1
3d39306c7efa2d15ecf7a8a366bee1bd2683ac51

SHA256
3ca5376c82e362a2fac3c88a0d8e236fdb19cbbf99cfe4e9ee103acede0ffea9

SHA512
37f75cf96ad0ee5e65419cb0cb13560cbeea92f48066e4c52d5cf1d5bafb1a1d40ee93b88458ad3f44a8c3296c5dcf4bed20c70916c5747e58692bfed222660c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f65cd8973d94eac2d8d1042b8e0621f3

SHA1
7aff0a322c52a72a09c88bf4a54d0983a634b9ef

SHA256
c081041e43d3d22af06637fed465c83b7831bf4179a657dcedb84ce6e5eb2e86

SHA512
406e6a5d87dabb2bdf7caeb2b5a4973a5e34edbfe64f6f55d745401519942966249c52716a661aa1bc67a4717c8a9fbf6afc0ffd6b660691d5d01423b82c9a35

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8b40b4d5e7dac013a81d2caa7066ae62

SHA1
ef16b40c16dc6e35818fb6223e1cbb063ca45f6f

SHA256
9fac5bc8614d8aef1cdfd5a1ba95b063a17c441e79083318a3515a12c08be413

SHA512
2166892a38a5007f1058532ca3d2289bf8dbf30bcf46a660d6b246553ebe21fd884a62b3ef911449583b1176ea5bcb4ac15e5aa20c05d1f660285d809baadc3f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
466733cc28dff25b1e61ecf6eb41c302

SHA1
cab22a1ef22a2885c1e8440ac72ff1ed472aa2bc

SHA256
096551b4c3bd583ca12cf34d0c2da530b55767477d70f3ffdc5bfbceb0815630

SHA512
5aa69242b4da09bbaea4a16cecfeecbced5c23e642371a9fd8ccc5c34e40058eccdc4471f9d9c8f7113c1e9e67c9f6bec53d53e843c36a3a509c0218185378be

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
40520943d45b4e0219495516da44b8d2

SHA1
1c9836650845772965f0fd7a81088187be787147

SHA256
63676a34f5ef2b37d8db0f370b6f058d463407b52dd2c21c977674305ba50384

SHA512
97707a1e826576aeeefc5768c08849b29224c0736c6b4330c040498e528e801b887bfdc6faf65eccd31ed0ffac8d6a80145a43a083a8f4986f6d09e9dab4be5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c967f29fe2a3902f5a1f1f4a663541fd

SHA1
33cff6f8137bfbac7e16ef85e192652ba2e0ecb5

SHA256
b8c2139b99fad89aa4d71c3107d5ff56467695e814798e0211231a706366e2a9

SHA512
0e9ece1f4335d1b13ff961187ab997011edb7c53237fb027b9ceb540aba49d51bbe35b20c55a94b68082fb5636893a1822723883a54302ed93e70d908ac5648a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6d0ef5c6917b3bf6e31d0bc474dcc9e4

SHA1
bab53ec2041a7ae7afd383b6e659bf700071c219

SHA256
3014be36999b5b0e8f67926bc08c2ce063e03ad7e0049736a5bba88660d11a3d

SHA512
f0bf4b542f57932f1c8ae343d282e76d3d3832a05690e837e7ac960a407c07c9ca21b87d73da38879e15fc3635d78ffaf7bddddbbc8056a16178fd3faf90dc96

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6fc8c2f9abad8f3fd4aa71c85987b6a8

SHA1
3fec3b88847b805a9c29eeb381aca89182725413

SHA256
7a90c66aabdf52219b3f3482c7a05584b53172fc78a8896e2c7d959b2de87e88

SHA512
a1cd2d94faf83760657c0542cb93b1fe9b4664816e52f1ec00bb1249e10510cad7c8587bc0e3ac8ed4e34cf4541bbcf91869857492daa56e5d5abb6330ae0053

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2A7B.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2BAC.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit