a8751a32e8ddd9da610c1d87ea6afdc769c5daaa1990a0c2a566e8003fc1c46a

Analysis

max time kernel
139s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15-05-2024 21:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4814aaf550c54fbe8607d425f5b6dfb7_JaffaCakes118.html
Size

140KB
MD5

4814aaf550c54fbe8607d425f5b6dfb7
SHA1

86d1453b03bc1a2c41df82efdf16f70c17dd6be5
SHA256

a8751a32e8ddd9da610c1d87ea6afdc769c5daaa1990a0c2a566e8003fc1c46a
SHA512

d36aa457ffc5c0e8a7cb0fbe391ac2be630858f70ea1302c5e7dd583f16fc030b0ed8e0ee3becba6d64a24fe7f396d807bab33fe5725a748ee271b6c2985928c
SSDEEP

1536:SYzto11nHKLijplNyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3om:SYzU9j5yfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 909a76af0da7da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421969748"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b0000000002000000000010660000000100002000000031276c8fe0b2e09962ad330d28df46c5c5f016cef0a6103014081fd2ba1ed2fe000000000e80000000020000200000003032b46c96bad021dc37fbe041eaf70ac43cdf027ecbcd0a494058852a06adbe200000003fb348e6d23f5838b0b052c62ac932e180f6248c6c5463622c49dd51111ff2c340000000056f316f0ff1d0a9ee2930f3384f28a565524d79ae173560fff9717fbfc69f6f1e7d760c346bc13cc17ca559cb4058bc15fa66bbab321064114cd1df9667bf26	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{9B24AAF1-1300-11EF-989B-729E5AF85804} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2684	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2684	iexplore.exe
2684	iexplore.exe
2700	IEXPLORE.EXE
2700	IEXPLORE.EXE
2700	IEXPLORE.EXE
2700	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2684 wrote to memory of 2700	2684	iexplore.exe	28
PID 2684 wrote to memory of 2700	2684	iexplore.exe	28
PID 2684 wrote to memory of 2700	2684	iexplore.exe	28
PID 2684 wrote to memory of 2700	2684	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4814aaf550c54fbe8607d425f5b6dfb7_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2684
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2684 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2700

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
33e74f5f2946c779138adfb7d2c904b1

SHA1
1c0bd3e5de3b42f17637609bbf1ed6e913499778

SHA256
6b29dcb8564da339cf7fb20d6581c950639c561fe4bd730e768dee9ccbd7b2cd

SHA512
51d041857e74d073ee5184ffbc9067532bfa119e9c346f0c302fe1d372cdced06dfef56278281136f4e5084f638f52c360acf4381450ee76b8f245af1d61f74c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
438daca9ed7517663f2263c6705b0207

SHA1
081e900c99cf4ad2b18d57fa8e535a69d16e89a0

SHA256
23c418e59613f72c8c5085e462111b9607c3726939f49c00e88af5ffc86e86ad

SHA512
7bef77d87ec73eb1b97b5019ed3f0f8764a53c55f32ce8c3eeea800858f6780ee6c2dd82085bb620b792dc843eb1f32df363f3e31a317ab39c9866f27adc8552

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
591aae5e91d54d79d7c314da175f2b34

SHA1
c251ba0ffd610d6fbcbb846ffdbfb430e6174726

SHA256
edaaa09c1197fef995d5ff92ce7d921452874af3a25d7e01f52bad44779ba557

SHA512
56709b300b6c5f6333c19905a6544421ad32c1eca7dd882217aec3c7cd94d2949eadf245a1cbc3099c3c0ff47eaf32ac48e683be67ecf4e4d36b4b68015bc57b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f0e38db8361e04bbbdcc7bb373f4a376

SHA1
18bfb48a10f7858998a422558d66fa3df255d4a2

SHA256
bdcf3e6cead3961ee20dfcbdbb86537e8f2158700f0dfad19aab8bc10c7d04d6

SHA512
69fd2fc83ca5af1b35de5805704f02953826fc90735aed998a6ce6b7e640b0f12657424bed129345b6627de63dcad4292fff1797abda12e632f2873c9566dc17

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
92f6d8e910e2843ecb67f56b26a4a38b

SHA1
8e7f4b6eaec614bf270dc58fff79a52270ed68ea

SHA256
1d22be0104fa253b8b8b184dde052ad607ff7cf9b5ea8f06bfacfc25d9d459a1

SHA512
563d152c7234d3d017a5f0d8df37f54d47863ae6e6fe60c9f990476e38e45ef92003e09e07244e281d58096fff34669564f331cd2b6165b38811188e1d0197d6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b55efd56fb12cdf17d1d8aa5175ff2c3

SHA1
84d39c8fe38aa0bd90184d4c605b5992e5d6f2c2

SHA256
fa1e4ccdd15ce09643007d7eb04520d95e51599015c1b49c364d627aa98f49d5

SHA512
4cfe837df0c737476c9862b53ff040484b8ade153c0aac165c4d5d36b10f233316f07a9b23dcc8e9112c685b5a2e48ea63498f2dc74984f48a51d583003b1af9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1d5605e00b4d95749337692f3d5f2f5c

SHA1
df54ea81c5f127d6e7aea4725d14b7631b9f3c34

SHA256
2bd4c17c32817053e09a439f0d71547bb9f6c7182bca379b179f793e6b9828bc

SHA512
4f167a20a33e16ae7d3a948ccb02413f14e470f509cbb36b6fec02e47ea4fa75e2c4635eb3b78b177bcc1e3b0c8de1dcf759bb1f4b1e3873f2ae67a01c00d68e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4aedf6747bfbf175918cc645cc48fca4

SHA1
9f73790175986289289fd8f37e8931af092ed00a

SHA256
319b4bd840027e736618de5222c5d022546a2979d7227365b31cc1e72097d956

SHA512
b98db09ca0bb4c105b48704d3d2fa3deb87a53bbd76fd2248a249e9468d38f30fc6e849545b9211804089e41e4f1d25575b2f11b787a6d8c82703d2ca043f62f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8b78cba5f070a93864a52e23abba1c3b

SHA1
7b9fe7b0760385a7c77d7883287ce50afcb0f13c

SHA256
0b91cab6168eb3fab098d35cd1cf56010c3828fd838f321b7c4db630a2576f4f

SHA512
6eeaf05d6492cd4acb96f0061a1ee712e352ee7a734f1821b2866cf181e3285fd95cd66a44b039c8c9b6cc4ce368bffff07523bc1be9be0470e063099a731d23

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7333575381f5f12ea319040142f42ff8

SHA1
b88e9afc85b306f6b246715cec9aee71cffeb6f8

SHA256
dffa3d6f04184c024b8a42672d6ac93cad8ce792d5ad90095d8aabb091f8dda9

SHA512
9d0209f208300b2fb795eaa49ca60d554c047180b13c85fee68c9bea8457c1292805d3878783d15b126903e09c9a7e4fc4b3817e71edd5ed8e00ad285fff4734

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
504dce3d99a380bbce11b3a2195a94f4

SHA1
b7a69f59dd401c8bdbfb2980dad10b9d6ff938c5

SHA256
b42868b48e7e1a99a09be45a292ecc04e1d303b321a09fa975aac7a2e6fee73b

SHA512
d37c9d7dc9be2b315d4c0e081c0f17dc77d9dd4132deccfd8217fe580129768b97b83481b5c12e67403426a68a324f6a4869450e892cbc6fa05aeb24eed16cc6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9e42458763d77a13689273bcc7038694

SHA1
2211a4d7890f91b0c1a17b2ea1f45c83172623f4

SHA256
af3b7913c4dec5b052aaa3c2f44f9c744d9dec87d499345619a5d0efebac4934

SHA512
1c74135c606e97c4b2af668ba7f1b555ed154819e80cfc8af9139b2b6e1046ff3b91eff4d21310726b4e567d4654ce12954d44b51d36beca226b5dcb25cab283

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a02b6bd9ac31def5e27562db09b6c028

SHA1
0bc4c33b005a3eb4b5f130e9b8484d248e888af8

SHA256
ae9c09b3ccc4fb9b6d088050af2eccb1d5ba9af20f5ee21c8db319662722c995

SHA512
983a85e2ff2e3050655ec3c6b9a67b40297afd5fabfc7bb42e6b8aad54ffab95a49c7613e59ed34dd911114bafe0e5f4b5b8844657336be90ba0f8932fe96d80

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
076997c6e8ad4823c7d6bbf428f30ab6

SHA1
626105d4ab69cd4b7b155692a482e518ea9368cc

SHA256
d88e6acec340c1bcdd2acd9c6ec711252b05072c2d8b6d612d8a08ea9999370b

SHA512
2e711c3077edb18e4f06001faa302196bd257b711d4a1ff1dbd8ecdb385ebe6148a7f54a45c2473a6ae4a1fc66bd81194fe90c62a12ea87daecfcf0bf84fffbe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\ads[1].htm

Filesize
114B

MD5
e89f75f918dbdcee28604d4e09dd71d7

SHA1
f9d9055e9878723a12063b47d4a1a5f58c3eb1e9

SHA256
6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023

SHA512
8df0ab2e3679b64a6174deff4259ae5680f88e3ae307e0ea2dfff88ec4ba14f3477c9fe3a5aa5da3a8e857601170a5108ed75f6d6975958ac7a314e4a336aed0

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab97DC.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab98DA.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar993E.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit