6aac193320ff3621605e7bdf5e0817caf9b00905a17a68810617093eadab59fe

Analysis

max time kernel
119s
max time network
130s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
19/05/2024, 20:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5b4ed75199d9568641c02d40e213e7b5_JaffaCakes118.html
Size

461KB
MD5

5b4ed75199d9568641c02d40e213e7b5
SHA1

707230106e20889412b096e481abc2d8f76d0646
SHA256

6aac193320ff3621605e7bdf5e0817caf9b00905a17a68810617093eadab59fe
SHA512

a16374779903e1555ea45d1f715c2ae94c266f3506ed093f266d69f6c5fb2d1bbfae199dbba366b85028857eb919fd78e6554f18b2a76822f8c08c97a61a7890
SSDEEP

6144:SEsMYod+X3oI+YFNsMYod+X3oI+YTsMYod+X3oI+YLsMYod+X3oI+YQ:p5d+X3PZ5d+X3Z5d+X315d+X3+

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b0000000002000000000010660000000100002000000051c9feba211a8720aa12e84bb4c810231e440bd9b3467bd471cd29472b48df62000000000e8000000002000020000000cbd5413f2d56f5b6347ae381d4b4eda154caf2d592e8a3c66b73156bd3f2ca66200000008923acf8d07b25288f6323ca18cea26e7f5271ae1b54c810b08d6ed90795a75740000000ac31a194ce85b4ea0f60e1a819a753957df9f64d462b0080fefd5a72bc5ec50dbe78d71e4a2a35df57b4cf928909db29c6e0940d8ce8fe10ccfbe326bab31b4f	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422312308"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{3146DBA1-161E-11EF-94AD-7A58A1FDD547} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70aecb092baada01	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2128	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2128	iexplore.exe
2128	iexplore.exe
2140	IEXPLORE.EXE
2140	IEXPLORE.EXE
2140	IEXPLORE.EXE
2140	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 2140	2128	iexplore.exe	28
PID 2128 wrote to memory of 2140	2128	iexplore.exe	28
PID 2128 wrote to memory of 2140	2128	iexplore.exe	28
PID 2128 wrote to memory of 2140	2128	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5b4ed75199d9568641c02d40e213e7b5_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2140

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e2a57a23eb89642e0b404090f9ddd62d

SHA1
e4eb1de93e8c813aaee1a9d5bdcdc4d7ee1e136f

SHA256
6b8285daeb715e2c1e84a6d65dbc7f6802c9f8592c2d1dc8b27e4ae18192c006

SHA512
12d09c1642d43c0cddeaf520d54ff9a8c6566ba08cbe71cd4cdcf0b26e205394bfcec9551fa35490830eeb9f0e9b3259f64a894f0fc6d0b5530b78f47c06fcff

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
34d9300a18c239aec524efbc47eb68c6

SHA1
9ca6d54f6309f92e938e0105c77c8c3b0c7c4d71

SHA256
74be72dad20416cd414160e7ce747aab50be8aa089e3992674084f9aa6814200

SHA512
e15cb3f7699c35607d416c13c3707f8074377a4a787cb0f101552463e5b7b82223267ebfa20452ea69ad48d00658de93281b652d6e4eb4a47bf5192f11807723

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e2793192a1f33a371f9836ef68444e71

SHA1
1d4e7fcd319e1e152a255878a90e5e59f79b6d5c

SHA256
6ebfbeadf0817b236ce4ad5a223851edd31e42b12c9bd92fca19b75df9326ca1

SHA512
fa102ded1a9047ffbcdcb6bf6266fddc02227a6bf068a68a979e4cc0cbdb27d9db54d6cf6f0bf89092df3c26f3c1b3d8ccf9f034889974efa81d57d2c8c83a51

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
247edb83e5cc795ec399a349ce60a335

SHA1
3d94ea1515c54ab0b2ca5056660fd5756a2359a9

SHA256
e6b7f67d1f940f38524cec976ad7d9860d94e1aee2f326076013b4d40a67e7a7

SHA512
a35a1ab92c71a20687e58bc1f1f2ecb81a8016c18e4e8a200f7357bf4775575cd29b702793e6e19416973843a63f63a5ab57a13856a3f9e8723eb422a9daf854

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a15abbe7754ff3d2e5de97779b305304

SHA1
e97728a564935d3b28145e8f69f6725aa7c09a90

SHA256
c3d82292ccb1baff44d627fc68871a421dd951474b914e32dba7f4e556acfed7

SHA512
9951ba28b703d5da79b03eb9844acfb3242b592246fb08146eab946722a4dff8f87b6bc517e5e718ecfb1e2eb61a17e57fc12d51e224ca1ec926cbcfc867a545

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3ccec26a004cced3a6e2691a03ec057c

SHA1
6280a4ced3ede71490160df485de5476b058b92a

SHA256
1d157279f68056a46ac47c05c3c317ff0f1a8a0f14dff2d855cb2dca19f4b2ba

SHA512
86fecd74e4334a9b8d28636669ac3936520b48b691bd1b26c398de483f8368901adaafa7dbb994bdca96cdf62d2f0801706ea891e45b6a7d447c254e08dfc42d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7fc98339af9532a49ef9a85873e1b8e1

SHA1
7ec60b73321fdee392b25fee25b3d1973de7746c

SHA256
66646b24e988151a3ba969e581b8a11692ade782c7863c6e254add5d00c2c1af

SHA512
1a991cf8ef795d49585df32bbc7a3d6dbb4f480fa8a666557c3faf92975742d9e0510df9b4744dda1b665a376cd59f994de70992979213993000604f5ac06fb4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6ebb28a01f02c9834080d5372a68e5aa

SHA1
91a37bc1c3ae4559891e91010b25c6222dccac6f

SHA256
44b196a9b226e7e3b117deaa25afcfe156cad7d86deea6e71945fb40f08faaf1

SHA512
7469289d852a5c36cc6551d5da093c7f942205dd7384e02e937ffd6be2bb1fd4738919dda6a2e1212b10475b1efc76053f36e7206abb87511cb81cfc7c9b8692

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
325eca380771927c2803e0671e896478

SHA1
d7cb0aa3866909e99f06cb6f18272d27493def54

SHA256
147c45f12f357efd9246298a52b84dda6e3ba2a67bd9582301d23850b51efdbc

SHA512
53c1f0c1a6b5117fda422704d26e328dd7ca9e5050448f63512b5a0e724337d48752245904fe201f37642b1d9791aee8525b2403109ad21ba619de45dd593f11

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
978d8523fda2448544b5c5e34fd63b10

SHA1
6ed4ecc8ab2fbba286bd15c5a2a586aa49d9dfdd

SHA256
c0013ba4ffeaf05e1c1d924879bf14b07467b5de3ebb10dc6c0de7cc519f651a

SHA512
88090e22266ac5c3d7844c2ddc3fd4c7ce74a26b0ff269360794cf480cf2176cf9618bc082957a17ec3fffe0da7b8b66e006333c654c1fc511d5e34157003004

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3be94818ba689b9cd77186022a1d7927

SHA1
87b2e6874b724147af31eb00fe1f924792bc5c33

SHA256
a62a0ab4b066a703d6dd84f52efae282dc042b08f534739de8460daf0b26b1ba

SHA512
7989f74eddfcf2b4f062075c0a5662ffbd9cab01160c6df3deab1f9d23539cc506c1763637c8e623ff289f85a17ffa88614f94788e3c2f50d1a54ce9ac99b42d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
382d0aae1ea9a316935a6ce3d0751c5b

SHA1
b99fe11daff167e3f2bd4a815bdad707cca04c33

SHA256
550ed9e25501b57d92ae720971058f54eba94c0317f7418816c03cc08022e073

SHA512
c905ad270caaea30ede730c3e87f6cd766ecba0c1c7dea487c51789fcb95fd9315a87547b6c7b03ca18a7cc51978b7f040451745ff82865fb153035f8af4a3b3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fdf7d8f3463d324e3bd71559fe17a678

SHA1
0436153cad573ccd3c5170c4b00d812abad9b8d4

SHA256
db165bf8d635025fbb88a9f893beb099a6b2628ec634252b72b14402762c3452

SHA512
805177a586570c36608eb3096ad5079b8a9c1373fd66e9823cf198ee7c17ec5adeaf91bdf1a75689f452e9773f112b552af7ac12f1e1b87f6eac3aa56d647187

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4da93b1d472b5c818f4d79b80f1d30ad

SHA1
1a9f0c6ad5bf775389eee9d733408226d9d10356

SHA256
4a193a6296184efc8e6291889711c6a21b76f3c0dd5dde20cef05ac58125277b

SHA512
9838734fecc073eb085b374cc1236e2a516547f94ecd17743a5ed7d4c93818a4f1abd585abc3fc42d3d187ebdfea2522d05a54e171ce030ff23b3bd438927da8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d81c79b93e19e4476bde9da407c561d7

SHA1
ff85a8fdeab93aed80895335385f35c190da7cb4

SHA256
2f4dc73f7fa556c4e6f70cf58dc9d27558850bcfea05705300906a701ada4650

SHA512
0fa1d97f7cf23a0fd8464cc299a900d336a61c877c567b028919b08689df3df88db4f902605b83d9f4df5b80a4adb69b1ccbac23e9ad3883ca34e60b0da34080

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
60b4acd74c9d92984c7d111d1fb20afd

SHA1
a4805af28a99625228ae34b4dad518f1ca887ac6

SHA256
4a864acfdb4aaa59c2fdf2f6b1776b9fddfe1927e8b1e4a8d2bf52b01bec41d6

SHA512
28299b40af998fb5d68bd2923063d239e3b1c90156c42656d7c1715014395b8e20f22c98a92bfd4b5131da026c1b1d10d682babbd8bd5d77f7624d69006f86b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
977087a3c181a48378175a0aabbad624

SHA1
3b4eb778355681f1939ab8703a373c0c11f3ba16

SHA256
f8efb8c1587ce7a0897a5dfdb2fc3f38e257221c69e7a53ff16dbce5ccb67eb2

SHA512
fbbc1514eb1ff37c358b68ff31a8a7c87452482550153bc34fc1505f71150e35e0fee10ef894faddd82797a65eee4c791a8ed348647f122b30301e916c51a939

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3d09b06222141139f1828ca09e26f8e1

SHA1
4eed1911c464e24d35bc0e33dee8f7dd268a1c69

SHA256
bf4be4bde4ca577958cf1041ddabe5ff7f57fa29ba8c5ca3d081d22121328733

SHA512
5847ab10953b7974447d0943bb2839f019128972aacb2ba05e26520bcb9f0d8b1c60e870d05f4aaa465a990c08f77cdb0e7599c66ac7f7a8a62f6d127d0a5a44

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab589D.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar58FF.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit