2bec8d4b49c5c73e1d137cb7bb9831edfab9289b6ac5f719ece7736fc74d3c03

Analysis

max time kernel
147s
max time network
148s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
15/05/2024, 13:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4683a113cfbf990a47816cbb3eb7c4c3_JaffaCakes118.html
Size

67KB
MD5

4683a113cfbf990a47816cbb3eb7c4c3
SHA1

9258bbd7e974cba4a9e687610453ff5567a64fbd
SHA256

2bec8d4b49c5c73e1d137cb7bb9831edfab9289b6ac5f719ece7736fc74d3c03
SHA512

2031560dcfc207ea5aa08b9e6392ca5fbe635a9fc430783fe20f57c6360f2cd75c16a76d7eeb072a7c5a20c1e89a4d865bb5ffa31dd126c88f3e333063a99ed9
SSDEEP

768:JikgcMsSZ8tN99OIse5gChVDoTySqLCZkoTnMdtbBnfBgN8/oygcR/QFVG8c//IK:JGWqTYmec0tbrga6cuNnzIjv

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4BE963A1-12C3-11EF-B5B3-EE05037B2B23} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421943415"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d1000000000200000000001066000000010000200000001f446e2cc757362b6fa6117cc45f421bab45b60ec689adcc68143599b07726c2000000000e8000000002000020000000258856d3b39ecd442420315ec5696a87edbdc10afe9978a7417b543aa4a5d80620000000c09bfd847938f98a0ea69cc398bfc47e83aa68805a8a0bebfaa0eb3808ebd4004000000047d83e344582f267a2cc52c38ac1c442c2ed285c79d23e0d14d0b3695553241b43c80ec967405583aa3b4e57da9da0ee505aa54844dc65dd2c54861f200dad05	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 90bcd020d0a6da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2300	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2300	iexplore.exe
2300	iexplore.exe
2976	IEXPLORE.EXE
2976	IEXPLORE.EXE
2976	IEXPLORE.EXE
2976	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 2976	2300	iexplore.exe	28
PID 2300 wrote to memory of 2976	2300	iexplore.exe	28
PID 2300 wrote to memory of 2976	2300	iexplore.exe	28
PID 2300 wrote to memory of 2976	2300	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4683a113cfbf990a47816cbb3eb7c4c3_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2300 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
32b0db5e98dc7272de86f86153ff1243

SHA1
c436d2ba35179a526a77bf37cabf182acf05a6cf

SHA256
33da4e0621d3703dd15ce17173b6173717a1aaad9324902721a6428eee407e7f

SHA512
c0c588cdd39991d8d3572b1c162d58259ed151acd1bfc47266c9ce77beef1daae59034e27e258cfbe4b71416e2b99cb4d7632bbad930252a7044c9739308faa5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c690ce38c0b0e88f5c7a289eb0d068f0

SHA1
caa5b0e53ec9aa331adcde08e7a788330c7bc9b1

SHA256
ceec820b95472c82b58472232f127df31e10a017026b71ddf073f18fb3c2efbb

SHA512
6da7f7ee42ce95ed18987389fc132fd73a3c485d7b07ffdb20b580f2403545fafa115c755a4d7cc5874dca02a8638659f8399767b82efecb9f06078b95817fb5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
034edac1743840221ebd486462faffe7

SHA1
cf3e13fa60049291ff5aeacb638e833c6bf8906d

SHA256
81f7ea5de6ea7b7820d2a800fa92bbc32cb4f1f5caee14445e81ef68f6142224

SHA512
32d27d7163be949f4f9b8acf427812ea52d81bbb4dd64878232688e245d2de53b3ebf38e644411f809fc00c5bf0b23213c837d8676cff67181b39f1956ba2b41

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
41b5e48721dd81a4146b335ca80cfb6d

SHA1
e4d8c11275d907a52c0980a00e7411dd67837685

SHA256
143a45e8f27717d7ec304471e501f5b85a1e1cd1d7bf46db1f23fafb42ff0b4a

SHA512
80cbbdd1447ddf0b8e9a5df3255626389f635e1aad87ecf23fb26ac08a650a9af0b7c1753369dd7059c6b24c2cedc4a8081f2c8a88c7b6ca6993e8a40685e0e7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c70155f6e57faf6630e05f3a1301e30c

SHA1
1f2903f061b5593a18c14b142952c89471753699

SHA256
b080aca5a6059aeee8a7004dd10a1251824dc145d119ab8642b3c053414a45e9

SHA512
cc904dd5f1c0e5a8c446dd71adc357003bf130150a593f055b693b466fe9ba2284b7666cad174d6c402f5306fdf1fdd1fdd6574b20b7629ba4cbfc29c41fd521

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
de83a02e9e861591aeb696ad88af41f8

SHA1
d298d03ace90a7aa7c71891637255be2378a3937

SHA256
fe45e7c20425f86e449625e141c8342500a7c64fe7178ac31b6565355edbc23e

SHA512
52512daeb18bc380203a5000f741aa35e20568d10ea034176e2b716470c95072d2625dc4b110dc2c9dc59e64fffb42d34afe01e8d0bd0e07e380cb016374e585

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
56c270c52d4e14bd8b84ccb99fa8d74f

SHA1
17c0f147938a54818f861915fb38d8e8529a3c79

SHA256
cdd51ee0e768341305988123c003bb708b148e9bc0740921647565ad76abe36f

SHA512
b2f157e8751a3deec548316c42fa103fe6c16520f891fcc7bf6be5205c7a4ae9a9f6f2bbb92742d14a35580922f71321b1a5b5644ae13337a74d473554cf925b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
00149962888142dfc773907c76c63f19

SHA1
72a7cc0aad1f363bb4e447401e47cb01b630da4f

SHA256
9c4a26a8ae7dee79a6404725d406b822316ef7a3257e364018134012233a0cbb

SHA512
ee24532fddac6c8944ce7437e3f3e67b86af0163d56d433725ef4b2b81e13c23e95518290f59f3854107388d13cc42c4d75e4625d3023a7818f4e546e7e313f4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1992674684b63ec96a0e79ed5674b456

SHA1
73f001f769f7a555ef23717b727738f405253fdc

SHA256
5dd25dc12272463bd866ead258ef780fc72f892a46336e10c608e9365e97f16f

SHA512
126714d3497d1e16568bf0c6bdef34382aa822b12326601e43f15655ba525c1b09af52683937dfdd6b04690fe2f2baa5d9db1fd0fc23841c217321a2128aeaff

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
adb5cdd91d30d5d0573acafed1575560

SHA1
b68bd4325aa9df272bd8984231caaa75ac7b1646

SHA256
94b6ab9d955023a437f65f630b61c8c9607bb77707047ae6beb3779a88f567ca

SHA512
e718719c92bd8064c37e4f439dcf47a4599baae103afa53b48d8e8b27892e8b37ebbd45edcae305d566d075840ba1040afb7b1d9ee79c6ad7618bb2968e20b78

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5a70af41c25413ed9cb49ce364be3a2c

SHA1
deec156613a8ee897f87d22b391d81b5a2582fc3

SHA256
93cb12427004fe4588210619455789b8295ad218c13e7b1170ad6fa21557a62d

SHA512
ace71a559f758631fd1885ee20cccb0961d5cd0e3355d77e982073d59c97bc335f969833690b3cfbced8baae547a47596ed5b97ba2528b4dcc6ca25346b495bf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dd1147ed5c2433c6b773b32ba20efce1

SHA1
9a181f9d6975acd10015c0457b71a23d627f7eaa

SHA256
dd7140d693f4fdcce1002d6aa4d83c400196983ea8cb6b0690dbf8de0a663c41

SHA512
90ae885ed80b0f00de3920778824ac5d5fd057f2919cffb5be6d2fbddacf12fe58d3d1d6b1f97d6ce605041793195889fdee45b72ddb4b466725ad1aeb8e563b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
007b37fe0bcdcfbd010a2c3eb6be4afe

SHA1
e886955e14e1b0fb9d5c1b7351a3b085056cd59d

SHA256
8948ef4e3e88aa2b50afc2b340b9878e45715c0231d811b5fe2892fa5af773e7

SHA512
980c405940ca9a9d7c0adc13266a5712804aa8a1fbeb89a52054755f06a366aea709f45b648b9b748dee12fd84d32f92ae96f6ce635316660e76bd5b26566d30

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2339d38f398d15abe0d97557748f2a9c

SHA1
ab14708b8050eedd5226e5283d60dedeeff5727e

SHA256
95eeefa0d654bafee956333d153682d6ae0123fc1c4d156c7585e775f6461f47

SHA512
27abbe98e539cef7bf75fc287d2adc08d8a93626a1280f1721c9d4222a2b81d3cc6fad4b3e059256ae736bfccf564d263d381e37f603b5393433db4d706d5680

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
001195ffaeccf8ea7e87816480615278

SHA1
91d2a12be6823bbd2076b4cf2585d34f78c85063

SHA256
fe698990014f3543abf9c8f11e30495656aa8f4b165fe12b92e115d81f4cad1b

SHA512
1f82f1c5538244f79642394dbd4e509286760e87cbd632a2fe120feea77193a1ed575642914281df35aebdff0ef4e8afdc1224f22c1946515b31e4cd9a89adf1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a07b089d24f20690423c69e359a748d2

SHA1
9c3b55ac16df10e09ec5eb1fb2ebb5538354e273

SHA256
a2a5206471c709ed16dd7cc8d4356fc099fafa7ff288526bef60d5f77aec3128

SHA512
e2dccb8b4a87bc367a01a2c62c609646267742e5219145e882cedd657232d8bde03ed53993b7a8c3d74376dc9c20d300c7824faff221a863495b49ea55d55fc8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7c230324f3c3b821f46fb3d2edc8075a

SHA1
9e4e7f2b417229db40f1eb44929a1936fad79e12

SHA256
6c5075ef21009dbff5bc649e3539d482a5674202cf92fc00de40442a7bf72d6c

SHA512
f75889a576b86a2a9c9352c5c5dbbd66a64017a7029e87b51caae2d053970d26ea459ebb187bd88cf91b9cd131f4332dc23e8d04989ac45d242ae4bac893ab19

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c06ad55c2d011148980fbc2847ab7557

SHA1
27709fb90045034ae78cc2b9022c44c07068585c

SHA256
16bf07468d660024532d06105e05d393c60003f8be96f092bf955244605caee6

SHA512
f9f8e0bb9e6a4f4e910afdf3c920e13e609f09a99a58922adae1622bf0f504461b0760c2345df553b698996a757d517ce437fdecfe1b19065459dfb8c00f860e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab344C.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar344E.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit