ff8ea911bfac07511936778a4ae52d9046644eb501024ee282f7e9a719bb8600

Analysis

max time kernel
133s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/05/2024, 15:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4bd835b373bdaad89afe7f920eb45d65_JaffaCakes118.html
Size

6KB
MD5

4bd835b373bdaad89afe7f920eb45d65
SHA1

d440f4e31160b7908b42d9f4dc90a591c817b690
SHA256

ff8ea911bfac07511936778a4ae52d9046644eb501024ee282f7e9a719bb8600
SHA512

cc64d80da6556175f97e045bcff7bee2c4103c5db82ec7c0ce38a881952509798cdfc2024652d25a6e11ad32b7ac0dfa4c30691850d3ef12b40d75558d6b52c5
SSDEEP

192:m9iqZOrjjUL4ogsg1Vgrc0ddZdRdhdudIdvdAdId3adXdCdVdGdLdmd6dndwdldt:KcUwWNy2

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422036270"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 20425652a8a7da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a9606900000000020000000000106600000001000020000000acfc52c268798dbc8c0b6ea93745963dce00d78bc0108daeafbc561de2d0ac6f000000000e8000000002000020000000ec57077718e340bd4bad4e8502cb0055ad3a6022c5813507f5a6ad40f9f1212a2000000039a51f80fbc0737d63b4baa14c594406c2cfb1e197a3cea376f468013db360f14000000004d1122fa13d30dd70ac5e84da5eca8908f16fac5aa9935c043e0aac5535ccef356903d6a6a6c198981f0408d75bfed56b70a2579d61ef0c8d63440afee7f1fa	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{7DC1F301-139B-11EF-BEEC-D20227E6D795} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2476	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2476	iexplore.exe
2476	iexplore.exe
3012	IEXPLORE.EXE
3012	IEXPLORE.EXE
3012	IEXPLORE.EXE
3012	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2476 wrote to memory of 3012	2476	iexplore.exe	28
PID 2476 wrote to memory of 3012	2476	iexplore.exe	28
PID 2476 wrote to memory of 3012	2476	iexplore.exe	28
PID 2476 wrote to memory of 3012	2476	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4bd835b373bdaad89afe7f920eb45d65_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2476
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2476 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:3012

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
19e33a19882211b269b645dd6af1cfb9

SHA1
55b2d02573761e7ba1da2fa565454a0037c85230

SHA256
bba07d2bbca8f4703f62704b2210db1504522b6f6682894429f28c7baf1c8a47

SHA512
eb712c04763cf4caba922ae52610e02330800a4308900aa4c98a1636725002774176b331b069463d4401d667e2a7b86f7870073f27a0c2045fdb66ffe3f18f50

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
24f008156e0dee4fdbfd091429a276eb

SHA1
38cae47e4e9b6acd4444bcab33d98f343c8b0c73

SHA256
220928fbe76c976d6931a4db32346b3f5067cdb35dcf5d054d3c6f007d247fe7

SHA512
e6a341fd84d76e33586ea6b406dd293a4b299bdc6783ab47301aef8f2d7da8054daaa7c5aff5e6a9a6b7322fe823f89ca1dbe3b6b78cbf6ac5ce14b9e9e95384

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
437049769b1de069255b3b6c32d54a17

SHA1
a6a77d1f497218e0cabfc203fa7d2b6dbf3eb5f1

SHA256
c474a4701916c54201613c9abcc03256170ada49b7ebd1372b8c4a95a2939694

SHA512
81dbedc46c7e01ffd9812d841fa27cd40c01abc8e50d4e1efd9bd02a73bc37952ef031b3d6b267d9dc772d76cdf1061fa8d5f122f5ad4df4a566350db66f4e42

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9e55372b129122c8e2ab2866414615e0

SHA1
24ab9ccda99b6056facea548c6d50ce92996e431

SHA256
629b02f2d474fe7174c7d6b9a846301d8b971c15147536a68610589ce95af9b0

SHA512
8e06c9bc440455b340c29ed63710b0b7896aca9572850217de53e1d82d624fa82dee202228889f6f93130c31c26ea4f6c2f54dcfcc7fbfbae74726cb6e669950

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
66e7fe563063c38564820d258d9da983

SHA1
ee6216b19a1aa39029353941e3f349e813458f97

SHA256
5764355d60fd4b5002ca6505d43a15924bcc35a4a162c50893d42c3beeec418d

SHA512
2fd7a7eaffbccf72358c47bbb3c939a0c3ad17f8ee16ac98cb6f5fe4236867d4b967e377fdaca2d822038ae818128f5d7e963e4b5f1753c8b43d6a1f4022c5d2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3b6926d734a5d08986dd84f1c0fda4fe

SHA1
a53ba1528fca43fa005d2386eec03b834f0f006d

SHA256
9688bf7113ab87fdc36365899e79cd3f071b7a0eb3978e9b139239e9e02d4a03

SHA512
1f89a4a21cec6d9c5e13bf870234c039efaa6bb8412d388dbd82792ee9c5584e3d826f2d91c62968a2d00c975480e2221bffb00702399f5974c8f9f211781cbe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
137baae1826aec4be42912b0c3f4b51d

SHA1
3a75c56b9c2037536b19b58d1c19c9023e87eb68

SHA256
c50943019d6a6000fafeff7c0889c1795f16a978ae26b7e14d94a33d28aa789b

SHA512
3517456b8c4862e3df83c87e9c9552d6c825a667ae7736d569f1a484cb02d2baac50e105dc61031452fea6e716ffb169763cc4b5141d3831e54a88833c8393b0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
301633ee695af2dddc83a1efa68989ed

SHA1
481c081dd43d60dfc2a56c1b886f7f90d8654160

SHA256
07f8a2deffbea6d91c0a47b8f22ff27284eb883b26caff7b37d0f6be6191483b

SHA512
2391e53d0dbdb5f95e4cbf9b0e4e5f5823411e95237151ef5e248d1ecd540ebd4218f25b5dc05e34c43db08b368b5ab4ff661eff5ff35740c924ab62d92bfd14

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
26fd2db45fab595ad2efb86e98242e0d

SHA1
842adaf40873c4c2dc65673356248a8517272c91

SHA256
b1e199da556017e6fb1fa5df4b5278726439f6b3c83f4d1e7e3490ba6a114b9b

SHA512
09d68b5b6997bc2d174dc8b3defc011d60837cd9050f3830eef9dd1a67562c92b9898ad88a26e42b0329376e57b84a1088419c5f0317961ee8c5da690f1b8c8e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9d98f46e5588dbbd54da08fc4fd047a3

SHA1
c79e980f1529cd0cff5b8c397975681d84900235

SHA256
93aca3f01b541e6646371e85f852987be4c8cee194794ea322c8af7b73cc15ee

SHA512
add0baecec1c882e73aa9c369729f380a4a801ca65cb732ccbbbd71356cd71c0ab0545c553770c28b3087b29bcb24f35e5312427e2210154f1a2b64574d52def

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4534a41b7f15e0b9ad1f80cd348d7aa6

SHA1
23012716e9536823e49663af6f70039ef2b4ac3d

SHA256
6e24a25bac4bcd07875eed7722da94165a92213b394de6b2c18507a8dab4855a

SHA512
6d370d7e54c69f24a7479e7093e12b8ace6ee49f2d7aacd2e46e64afc000b9c661b112e0404e48a71bb6bc5580ed82a111c8f4fb60a101869c680ef368841b81

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e98ceb2eb1ef1b30fc5de247aa863da3

SHA1
d36814d587e62ff0a91568c2a128eb208dd38cd7

SHA256
bdee749fa7c90637be2e024eff465ff8cb89a823aef90610bb0cdeef328dc649

SHA512
a72d3f8e8fd075bbbb310f796635fbc9194f01827b8567dd3b79487149e23950a550e752ccdcfc579db1c1e3be6aa749c89d9d204e991512bc98328b3a03b82d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b44ee5fd270239eceb5911890d406a5d

SHA1
f8f9300bd9c6d8361c067fafefce57ed47b2304a

SHA256
c978d3895c6978ebe4fe9cef472f930a069f846cf726022cc0d8a56016ec307d

SHA512
53c52e48fb878fb2a73ccd8d404b2db2523c0e52671dd51337f4f382c5446dd20f6acfc7ea2b377c519cde6e20d5e9f342d4498d1d52457862f6d108f44ea82a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
551bd6e8316a55d61a13b237f53287fa

SHA1
5ed5ec120b68bf1a40e897564d131379b0d869a0

SHA256
b35f16a09ca4bd291a7a03bb9f9116c5d2dca9a5d82082a4355356a735055992

SHA512
060c4f2a7ad6a9228730351e473c8d7e858b78737a60974dfd9a28b8311e99665760086a526acf3d8fccebb9afc2a012afb8d66752cf6c0e40181740f5c0eea2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8f08865a4053ed457061ab4e2df4ff30

SHA1
5af180baa7d7ea6e86710184b8a54a6d467e3b4e

SHA256
1e6838adebc697d662b00b69bd90df6283168bce9015fb41c7336a2b32a6e660

SHA512
390990e0c5afee18675aca0a140c4c91928f739fb9b787ed6968f53010f5caca266cef8582d3e5180c2c4822cb543fdd1ecd23400c84033c39f615ba5ea4a65f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
499cc5d78b28dde14910949d4cbee7c4

SHA1
a873bd12cf5bd42eafb4266f968e2313e85ef285

SHA256
58bd0d1fb760f630ddee73281381396cdcfbfded68342128bc11f536387ea04b

SHA512
3a0dd444226bb530af92d74e48de66db7375a499b1f87e7cf9b37d47e4b9f6a39634577aeedb66be3a541bf57b02b0e9afca6aaf710e12c84206a6d5ce43ad4f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0549b76646dbdb3b9f2ba8ed7b9317f3

SHA1
7ddae51dfaee5f556fa6d24a2dd4028c797fdbfa

SHA256
60dd176067eadcff9be2f10a784827025472d530cc395a157f078a0373391300

SHA512
666d83dc6f5c94239de811ba19a911bb13a4b42eeaf2b80d66476b008d757390c750a0443e0d8fd85085503cc2b996b840acaa94c1855498de4f338226dec601

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2BC3.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2CA6.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit