2432cc8c52195a76493fa996fb2ae095df744341bb43a70e73ce3821cdb42931

Analysis

max time kernel
120s
max time network
127s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
20/05/2024, 05:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5d6acc2b68bc1161402f51a7d70b9e07_JaffaCakes118.html
Size

30KB
MD5

5d6acc2b68bc1161402f51a7d70b9e07
SHA1

e6ca416358ff410fc8a89de46fcac2cec35fe048
SHA256

2432cc8c52195a76493fa996fb2ae095df744341bb43a70e73ce3821cdb42931
SHA512

6a733c8303887f7e5ba682189691ab8562d5b882e8bb445a9ba6f0610fcf4ecd0745069295cebd63b25ead975fd39efd3434b2c537b4e72ed92c7d4de2263dad
SSDEEP

192:uWfvb5nvkVfnQjxn5Q/rnQie6NnZnQOkEntRBnQTbnJnQmXC5AZ9EtkcwqHATlLB:vQ/MwPQlLpv

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422345035"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 8002f13877aada01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{64146791-166A-11EF-8C71-D684AC6A5058} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bd2a7708e9798e4fa0b20f3efd8e9361000000000200000000001066000000010000200000002b239d3cbcd3917bda5d4abbc95e7460491cd9a634b249bbcb3b675f8c5b0718000000000e800000000200002000000030c9612db009511267bbbc1cb4a1a631d70c73751e2327b6ca3d35cfc643982f20000000ece17dd45f5b89557b109f46c8e9fece464ff1585c377b2e9ac19569d2d5cfa7400000004f42db0f1eb6edc3e5ce1c78dcc72cde281c6810adc89ce05cd6d98089f07e886f9e4314ee6f0484cf428e4e00e90bdb2a0a179eb21691a8cd6da9183aadad4c	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1932	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1932	iexplore.exe
1932	iexplore.exe
2132	IEXPLORE.EXE
2132	IEXPLORE.EXE
2132	IEXPLORE.EXE
2132	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1932 wrote to memory of 2132	1932	iexplore.exe	28
PID 1932 wrote to memory of 2132	1932	iexplore.exe	28
PID 1932 wrote to memory of 2132	1932	iexplore.exe	28
PID 1932 wrote to memory of 2132	1932	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5d6acc2b68bc1161402f51a7d70b9e07_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1932
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1932 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2132

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c5427dc265b1772a26f3c64de92d62da

SHA1
ef4c38b4452f7d72a9bafd264c4f4b8d1b3dcdb5

SHA256
9632973341200381ab118594c68ef4cf266600e4081bfbb8fcaad01a612ecb02

SHA512
2b9f0af3329e9093f074b998b5840811347348052d31c06fd9b0c1f48b600acb10e49c2067350ab023b039daf17de4274d89200046aaf9d76fe82d30c4e318b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
efd51a6a7816f17baf234a160257c6ed

SHA1
048b136e7cb0828abb356a456aa215775dfd6da8

SHA256
b077ef2256f816869503c4e6b48d9a31b9c0d58c2f4a89f4b9f457650a6524fb

SHA512
798b147ac2030115743759a3b9c6ac610715240d11135a318980b0dac695e11b25498172e0eb7a4601d7e3d75b1cc4a4c71e6d4a90abb624f2b0dd37aee6dea1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c70075781c4829b4b527016ced26ad46

SHA1
18acab0a1b77b57abffddfc6e1d4db8a96f70379

SHA256
dd553041de5ecf7df3406698a4f76622f29515e0cc34a97f0c8e6d52b8133df4

SHA512
25dad06817f0aabafd277b6e80d116cca22ac66bce89704f477b9d6425f6f33c169d7c6a8184e6925ad8a286ced23979d09665f2134b8847923cd92ee24f7279

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
83981884359a3c88eea23cfacfbd8d6b

SHA1
ee04fff26cb0612e4a0be1db15978a1142afdde3

SHA256
eeab7131f2e26a2e14899b5c4de11ea8d60bb33b013585840b00ec279d2043be

SHA512
a775f5c2bcb5018f4c4e265c0528aa739f3b7500135673c989fc5653a97e89fe681a8939c1d0b578b818453ca313799e8328f349a8400bb79f14920d0375433f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
70a8968cdfd9caba75ce09b2ce801de1

SHA1
9fb9b4091fd7bb9083058dcf120d48a121949b4f

SHA256
a2f754798b94c7074650fd4b4b75c097bca040760e0f092cb29375790ad98aff

SHA512
92aa1f91f342d86d763bfd39b656ccada964a5372f6c88510800766cb43aef466ef3badd3385126fcf4c122026a478123f2b36d410316136a0ac260cc62bfddb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9aeb6018358677fbca3ce5fb334b6b73

SHA1
69aef6502aaab0a2ed69e3e17416676202c49035

SHA256
dfc15aabffbf41e06f4ce62a9696f3ad31aab8ab4da0a249c5db35f7384901d0

SHA512
525f12a0aeeb515a5062661c58225fd2d13a4787e3cb5c69c35d20294b232a73a7fc11011dedaab1223fbf847e5f89f3868c0f5614466a39ddd0bd4e171d2fbc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f8657f61c40615d231058066e707e14b

SHA1
ccde247fe0ff0dbdb08af6c5e32d220c419e15dd

SHA256
73d0f4fe479c6efe867b107d2be78b478ac21109369293606e3d4cbc725c299a

SHA512
22bec21b788ff73291e603003189cd8ac739f1ac5fb946c936a38c937d037e5bdb9308c57c4276404d86316657dc23823aac457c5a2ed943d668124306004dc8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ae05741be4810174b3c5682c5e05566e

SHA1
7e0dac98e4a2f4b9466a0f0ab3723f4bd848eb89

SHA256
fde28fd8e9e9cf6f2174eb94a742c512c89a9829ecf309fe3d6ce10938f38213

SHA512
b1178356153f16f0da0461138249761b46def192988ed73e5fc0798fd91a8cb0427d6e09d5737817f205c09e6cd46f3003608b7560039279460debc6d9008d2c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e65d0e0825170f8ec5604421788d8eaa

SHA1
7f9b049c70df5a2900793e168ee12f7cb9f68f0a

SHA256
0016a444a6e9c9b2b498f36f4c9e273a3b7b605b4eb0d56688ea6933c7bb95d1

SHA512
1c27f8c9bf8a3b493c6d8bea583f8f21ddc5dbe267295d50288adea5d55023d2e4b5c62f95d54b2be496e93212acff8659f0e06a703495680dec0d7974afd4e1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bed9ce950a8e8241242b6cbabba60715

SHA1
7bab4b852cfeeb38f6ecf4f48dc7443495a48633

SHA256
b4ae2a3add32da40cc00b82bfd33135f3791f2c05ebbadcaa6c2b3c504fd52a5

SHA512
14beb3fc497e26ba0ba6bb757ad8a743499b92727107ba981610008e0f174ba6bda8b26799d729d0c7f24921fb6ec7f4da944680f2146014dba381c1eff703a6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
01e3e2af86ed92ec524c7fee438f8823

SHA1
cf894104607a7d4561ae195fe59c7d2bf6618600

SHA256
5d18ba6eff1ee997d2deb9da6e9539227277f355010b460693d6e5b7b2e4ba17

SHA512
864ce300296ac75e7427a1f486d217418d55aa5a8bd0546b1a52ed64a74747703a979817a185b0a810d23985da0e629e811f8b8fed05299ba2868e3e3d61a1a8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
34e8ad8bae67f97424be31d54901fe98

SHA1
cd7205bdea0931f8d5e321411f29ee2416ef9ab5

SHA256
cb09e156b76b3e3aec5be55f3ff51a9d606ddbe67c1d3667c18a64fbfd7fd242

SHA512
4e59bdc998a2db34b54dd280df6a9d8e866830144aecbfe295a46fc66fa8feb8fc2446904cbaf893f97b7ec16679894f07b5ebfa67ba92c730f736b0442872c9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
da3543f6d6e9ab893694dde41d5f8bac

SHA1
3498683ba9a08dbb6018a5b3e4f4a51cc622220c

SHA256
b28562f37351b7b3d3b85ceb80c2d962c2c9969b7f9be51deb18b4534e6bec42

SHA512
11e5570871123f787a62f820260fa083aba4aead81ebcf3f8b6676c81754a836449d5b56fc22bcaa69eeaeb51386ea701be97577212986d497cc8c04f783c59d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6f292b715776384032bfafaaee593486

SHA1
de5597ccd71c29c554e098657d505cc17ada4900

SHA256
3155b712d0974b98427dd1fb55019de4eb30d72ebc1d464adcfe000180b9434b

SHA512
b623027bce78b68c23fe8060f13e7cd0959e2c4838b048195dafe147d31642f775673d08a4df6e1239f472f3747b881cae5d3566babd53e805256d567fe2312b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
801a3b1cddf6cedac7d47f8514678ee7

SHA1
94e88ff3601802a12fba692574719f48de543787

SHA256
dbefa9c67fbd81f56245da05a45e2523a9e3581a216fe55300d42f879140cbe6

SHA512
3428c8f6acbc993b09a2cddd462d88c65c103a631c4fbfa875272facdab6478fc38a0a348fce89a57c624926e426d9ad6d78d7727d3bafff0ac4193af4af52a3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c413b2ccf44e193d45e8f87c94637c34

SHA1
e851172200affe1fea2aca7cd8c947b4a82967ea

SHA256
7ecf62ca5338e0493d45e6cc0d0658f12eea8129e77ea68ccc81e00f5c56ffed

SHA512
257b488be5f0ca7661ebf43208b3fe6c4f4c59526dd96d40054e8b84ecbf6dc4f38ecb4b2693ecd0cc20c859b28f2afecdb3d2dc95f772072d74035f5881cade

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab36FB.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar433E.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit