60077b18b5a8c167c6eb1451979a81c7162b545930d97e3ba45c38ab4ad6b463

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20240419-en
resource tags

arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system
submitted
15/05/2024, 18:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

47887cf5a466803a9f7815137ff9826d_JaffaCakes118.html
Size

129KB
MD5

47887cf5a466803a9f7815137ff9826d
SHA1

3137f21f9cf8ceb0ff9b853491f6b872638ef509
SHA256

60077b18b5a8c167c6eb1451979a81c7162b545930d97e3ba45c38ab4ad6b463
SHA512

7c92d0f2b50c973a3126993e3b4b700f60ec2dffed7581191e944883493b16ae0b8e31cd60a966ac89e3b691e0acf94506e7a99d5c1bed9707371ad942d68a27
SSDEEP

1536:ByLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQSz:ByfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421960722"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a063fa6cf8a6da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{98534031-12EB-11EF-B944-E2C1BAF7F8C9} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d1000000000200000000001066000000010000200000006237630f2efa19bdb4f3f23ab976590124663d65db08cbebd0ffb1aa3c210984000000000e8000000002000020000000269ef2b2823ca7db5d2284de6593b71b416047b1bda3909860d587f345016a152000000074402ff7d8fa362dc6dbc2c6ffde99e77653a80f23734ef1a223e489352d3ad44000000060b7bc2fdc483545919d80673672a9a996cda0d3b84639da7fbfce5338c7e2750b89c684a9336d81838b23b2a5cbae9bdf881dfefa6982b927e07b8a1279dd2b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2080	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2080	iexplore.exe
2080	iexplore.exe
2164	IEXPLORE.EXE
2164	IEXPLORE.EXE
2164	IEXPLORE.EXE
2164	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2080 wrote to memory of 2164	2080	iexplore.exe	28
PID 2080 wrote to memory of 2164	2080	iexplore.exe	28
PID 2080 wrote to memory of 2164	2080	iexplore.exe	28
PID 2080 wrote to memory of 2164	2080	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\47887cf5a466803a9f7815137ff9826d_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2080
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2080 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2164

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fa59718bd0a68f737fd093d92f8e8399

SHA1
a22517c88fef07b64992bb2c1dc90f0eb6620bdb

SHA256
1f310a37a8911a607ca56856784a753f3f3e40fbd79a9be2a137f450fae9c553

SHA512
9bb122dc34cab1cefcf23ebb2abb8f9769e2360ecf26af9db01bdc271befb01e60ac806759a377c81f94a9bb9a843617ff3d7b21d869bc3e8250dca7df48e6cb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1be70b4d24cc217de9c9d059512fd32e

SHA1
9a29f5985b80a32bb1722a429247f41c25ea1dea

SHA256
7b60626dc587cfaa298d012999bedd98086914bd92d7b4c3f728a3998e269dcb

SHA512
ab91bb88d486d83feb817e181466a44b8f2c1a2d935b2d5c2ba4c5606f08ef5206cd1560cd8da3dfa580b3184c6d60b185ed7419e53e50d83a47d11275d70319

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ba13b440d75ea3b6800c7eae190e627c

SHA1
69900aca94b3985e767f81c818102894f8a2c257

SHA256
4f1710d0d82feaff8aebc9b197aedd6db906e7f245a4dfbb2df4a775f9aad39e

SHA512
bebbe3f0b960e1657a06f5080ddcb7dcf8cb9e5e33808cdc989098e5f61e37959ba358405682c6ff4ac0f6f60c452a36685105f16e511b50d22a6ddae9938f21

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
053e6453cd61e6a7af5539e21286c8b9

SHA1
7793ac3c04083c41cf8fa049598ba6c10a2b969b

SHA256
22dc6000d687f06490d9d17174a79be93c8192ea8853e56a6a00316453f63d49

SHA512
4ec1cb9bb8b35ff739b8b4045e4b46e879a6ae489614ed3573aa3b57fac33931e860564f5fe778e0dfd0cee8b1068202ef9490857193d2b07ce02a6683d6793f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b143c162573eb42f03f725280ddce015

SHA1
f9835741c2976bf29867c57772d1ea94aae10ff8

SHA256
a9d0ecd0897db36248d479f12c6e1765776668bce7412f6bf77141256bab6a57

SHA512
3395636685bd029c79d4d70dc1601ce023170ccecda394f90ffa41f277ef52334597427015a5b9841fa58d9cb4dcb28016e0fc63e527bfafa721f3e80eb56e53

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0e9c4a31381f906a90ef871551f27f80

SHA1
10f5c58deec5c86217cc199f13097c099ffe437d

SHA256
60086ef61d38cad1e92b0967640f634cd889c8fab130bd5389a45e798e76c59d

SHA512
93ff3da5536f7ed8fbd9b974faedeea49dd306de021aa1afc1327c2cf3ff287c81c2acb1e7cdef22d7f90dc086ef4b17781f5b357fe2220927afb588b7328e29

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e0c591b1ee14572d423b2df05c5bda65

SHA1
2830eab17919672b8ab499aa6aa308c85b3d2afc

SHA256
2cdae1bc0bc71f70cca5d328ff7d9256e004956e5b95cc91176d5ad3867239b5

SHA512
b3cbe6b7461287640928dc63b6889af561549dabca338c2b86c24c0cbc78ea26d0bbec01d157c163fa20e37ae76a062b5ddf49cb11aab42876a244e10467a200

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ef027131fe2ce7c8d2d756cbf2cb647c

SHA1
e882ce5ab0bd4fcc1f6bc4eea8e57e0b6508c580

SHA256
28cc7f91e6f865d6f7c861370c4fdbd74903144c4a0d5f4bf0659f32d255401d

SHA512
98e4a8c073bb7bada699a0d17a10f69921caa32225a4500a75aa1be9a8e89af3c74f273cd4bedb2d6f5ed89824db908a92cd17063264161e9fee049567fb52e9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f9480c00375f029c31e40b9c38a0b479

SHA1
fbe0e58308d0932c1e04a35396235ae53481a716

SHA256
22ca97ba16dfcc252720b71238a90fa1d7bfecd2f2d9ca42a44a32ce7ef17d12

SHA512
478d475f98ca5e6315f6e58496661e689438f425efa567c063552ed8bb3f1d06eb1d915735581262e7f543e6da09ebd0e34452a95bebbb7c3228efb846317059

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
256320cd7b16c6c490d73ff1fcb8b3dc

SHA1
751c9d74017669e6c90a4b6b2466f41b5eaed8a4

SHA256
d9b654d8db1dfb38e587111578ad08c6429f637f7e0e7177a459d2da40e31c77

SHA512
0c96bc338cdbc5d78a560e2f0678ac2814430e13584125c96f83652a94cebf22927af468c4776cd1a8f0978eb4fea68a5f7ab65308333988d397d156e5580ce1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
56cfce2fce524e4181cbefd330fad846

SHA1
083cf7cd162c50bf84a209f4f0a192322acf7e58

SHA256
3d37e658b17d0525317997a40d8945dcee61df062f52b858cddd32684284ef13

SHA512
f00f7595c1a7c9fab4d83be09cb40f6cc208f0572fd2076e6b7ab0834d3d5a2ce6c267437d6f2705ef9ac06ab5f0efd9687dfa820810a9f66610f45b6a60750a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d40d7468f2b04e4bbaaeed81ce18b5ea

SHA1
5f41f692c86827350ca0d4e2e8481cec14380b0a

SHA256
3d076edd318359ce2cddc5ce798fc35d8c6a817b185bfb9ba6c5cd1ad8844541

SHA512
10fd07ee5647a543a2d0caf9e4adec1975df7eae88e0741f90dceb7a01a56bf26fd6b7ad348bddbfc92c98c14611a0d743c116a1a78a7e78db849ca04e7715e9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
954c835dd2a1afb769b81e6d5ddc5ba0

SHA1
d6f1f0d6fa59bd6f7819a2befd91f1e9884075a5

SHA256
9b83742c7db6360e79d440ea0c929583774d86f3805a56161c38ca62da89e10d

SHA512
e32612ebb586229f465f761ab79af06314063b233d29d2fa756cf169a2f3ad0b0f48057e5d15f1a44a44375209c1d7b2b7b4b3ccb1662d3ab9dbfc7c861bb820

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
235013ea05256c1331409511c2b7b7a5

SHA1
3ad9ff8e6d5273bfaf33cb5c196ee65384a5da03

SHA256
7bc839750f4c4a2e72a6baf6fe98faa28a8854468bb9fb7c59817ae6c09c8af5

SHA512
61e71563aaf1c060a35ae6230755a6c3fca6829aed352769adc7030f458a3048c579a6df2360fc65f76dd8df0596b9ebce7ae1cb366273762170be6f0b0777fa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8c12c7d8935b2920cca45994918aab51

SHA1
08764580b96a05cc4001206a54ca046468bdef6b

SHA256
fd53b9231758cbf32735df0a9663c8efe26da79842d223f537161c8e669a4cb2

SHA512
a8bec2da6f28fdc05d05915126600f63118740af4b5b44d7a30e739fb57280f112495afe98116ba48ee178ab70d8a08772002e894760ebc6aebb5e8dfdc6f081

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1e9289641c88c9e578cc12276b2442c8

SHA1
8381c8a8e4eb0b24655b4d4a9355c91d7e8c416f

SHA256
e2b1927ad5de874b9b313e3fc9783054abbaa7639b976734cccd45300b65b8fd

SHA512
c29e98e62943aa1ae84ccdba222904387044a5bc662d79d49c086c2bb7ece6aced061755be1d69f8629ca5ab332f38321d052309678b29205e36a575f372413a

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab33DF.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar33F2.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit