6b4ed9068e77360298c54258c43aeefdcb3e9c8850028d8b90bbd4700857537d

Analysis

max time kernel
119s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20-05-2024 08:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5e104d1a7240ec6f4131d8f39dbda8f6_JaffaCakes118.html
Size

18KB
MD5

5e104d1a7240ec6f4131d8f39dbda8f6
SHA1

0fb1ee6c933e445cf05213c788c0090f3dbbe232
SHA256

6b4ed9068e77360298c54258c43aeefdcb3e9c8850028d8b90bbd4700857537d
SHA512

4de5b7bd813319bf30c6b9c828dbeb6386d3f65edfd3a63839c7160838caa62e16e514c5ac60a774fe2169ee9b50e38de389c3acf206b9f25b7ea49cba996771
SSDEEP

384:b8LDrgSFnTI9k+V8Yrbk8Vy59rTz9IzU4R4omkkVGbrI5HnIawMVlkFPl+HG/qE:bIgSalpb1ytTzizU4R4omP8IXwMVlgqE

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70d6e73e8eaada01	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422354922"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a700000000002000000000010660000000100002000000005840664d34d92525f1e8abd1cbf2b3e39f33aeed5fa448f66b40e98ab01d6ae000000000e800000000200002000000028c516a33e4c5f46e09e7da15b10f379d574aa6fce474dde23726ac44e62119420000000e056225e134bffc162c674057e312abbe3cef038f576df0dfb9f546f15debe5d40000000d8d1d4596c883312b69b2a44ee40e1eca08112b39ab29df8ef03ca87a97779af32f42a832aa2181d7fb3435b2016ca9a82fab34c2a1dd2186c9b4175af335a6b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{69CAB7E1-1681-11EF-92F7-4AE872E97954} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2912	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2912	iexplore.exe
2912	iexplore.exe
2372	IEXPLORE.EXE
2372	IEXPLORE.EXE
2372	IEXPLORE.EXE
2372	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2912 wrote to memory of 2372	2912	iexplore.exe	28
PID 2912 wrote to memory of 2372	2912	iexplore.exe	28
PID 2912 wrote to memory of 2372	2912	iexplore.exe	28
PID 2912 wrote to memory of 2372	2912	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5e104d1a7240ec6f4131d8f39dbda8f6_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2912
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2912 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2372

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d7fa7276d644a0ae41239e28db00271f

SHA1
24963f3673cfa91384014d00d366b6bc17b270cf

SHA256
1d3db3a5aa75cce8ce06e233bf0e663051dc1232f0280f33802c40c455c5a76e

SHA512
c5f9954ec6498249d44bc3a2bf152e3b6a99054cb755deea049d6e88c333a862989ea9b8ff5b34835f0483e3f7534a6d4e545629c7f9fc9d52944bcbd07094e2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1f2ab0fb134131d47c094963d68ad86d

SHA1
6e3e697e0c4719d6236dc0ffb452120fd0b102fa

SHA256
977eab4bdff35b78627c14702f5fd4fd6b2d090b938034b0c42a4947329b7237

SHA512
52602c100e08e042c6a877a90c43ee667f2e4fcf323144c19e2045c152918e7f9f03f3b390fcaa57c158c1d9139edac331d74a17d0152be20a19b4f462cbcb79

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f4b4d4c4a6df9b68b93ba7416ac19d2d

SHA1
808efdf5ae264bd261da9eeff9addf73094bfe3a

SHA256
979ac3f0b756af1d6380bffdacc80503dd4dc5496b83ad8b299c4d18fd3b64f6

SHA512
1ba01da93772f836e9f0ff22f77361b1240262090a5094371bca00753cba7477a4177bd98faca6bbc52c1afa5cc08cdc44d20d47013544c4327b34c1739550cd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9b58004f10a0dea40dcedb030420f727

SHA1
2edf626a03f606f3bb8e5f8d5dbaca92b04101ba

SHA256
8f8e2b93c7162f33976b7463697d9de863e3c32c68e865af89b5abf51cdef912

SHA512
815129e3d5c73415cb46d3b4a144dc28b3bca058fc4ff58938e9064c0870d44ecd8a5f7686d945ffee4d476aab5909bc0ddd53906e3ed9da79592174fe7b63f1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0e7b9f90fa53c138fdfcfa5ca15ead6b

SHA1
b7d433457e425ae73f3fb1b4892d14036dddcfe3

SHA256
e0188ad7d8063bb9378129cfde94516e20521ed82141dcc0c61edbc8a4f11b6f

SHA512
e17248516ba54e9570fd0aa21bc2524354a18628b00d4efcd6a0b7c98732d7f2ff4e63dbfe79bc4ed8e645dac494603191a60c0de9d026f8df6f694830ce49d9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6197a0aa5f98c4ba6048b3af9176bec1

SHA1
be2d832c5bd9eed976bc9d1ec908231f1d6ba57c

SHA256
126298d33599e318a717d54b791bd382372698fae2b248106a0edb13a8ba7720

SHA512
c7ee58d8a3fd13f529d61963b95e76f9af4a292dcb57b61cc0f032f3293f68e791b88a404729a98695bc19fad5959b0fe973cc2ec9932db38f98ddd32ba468df

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b18ecd67780f21f7a38db3ea95704aa1

SHA1
d5355f3efe17c7ab7e4dc4fee232ebec29e82d1d

SHA256
a1bcf3e674a9acc1aa73f1a55b1056235d863a1ad83cadee99e5774e339034f6

SHA512
00a0ac12401519e85fe26760b9d08e77223cae334732443291f1c457bce24f1a2481618b100990ed32381bc99792c981c2ad85a6c8f3007bd1bd88d06ef01f71

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2d652783db599009ad430f53169cdcbf

SHA1
83549766efe713cba32b37eb58b09ec2b20b873b

SHA256
5238491bbe846c7c771abf2f7fe41953621143b00da952eb9dda2139bd24c284

SHA512
ef4a5dfb6884e092552c689302ba50fb432c9c0723c4ca7e5d96c2d3cba26053f7502ebc7c554e68bbd5a5e32ec4ad61e707aed6c7e36a10e8ce5317d723a891

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e007de738b41782bd68bb7c90a1d655d

SHA1
129806417474b779c6a99f28ae8abc1a8f9de952

SHA256
238fb57cfb00bcccae0db83031ca4a89081083d76689ea9d24fc3a558e107479

SHA512
f23a548de08536acb07e8ff22dc13f2dbb6db1d6c787b0509caa321c9ce5245ce5a1fafca72594b1db2df64fdbd848fa91d295afb60c2a3c44a4e958cdfbe00b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bc111db6e21745fab739f38c6e4b8a4e

SHA1
a16fae0a7f5f47ab8d578690df2684b5751d26b1

SHA256
4f62e1ab063120255d852695afe7659a0585bf622a5891d63a8dff724ddacd26

SHA512
91b4fb8e9a39d0666b66ef3701627e16eb4d751e2f6b5181ae597242d7daa187811b489e22dabfab68a921fd43dc248ef12462d6a562ae1b48b739c64a04ed81

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bd8a59df1471af978b6455a1a7a7d370

SHA1
2a49474b21d73474f0937cb053b895af22e248c6

SHA256
ff5878c42339268b0cf3a46974a344b9840650b3517d11cdba7fce011c554989

SHA512
adaeaf018d04f03dc2ebd973395d28161a401be44c3e5e91eeba6fae11803631444fe497eeea7d539e445d002bbdcadeac6db817bd909d5a91128b47ad82bc54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1ab819da55e639b9d61a929027e838e2

SHA1
f51847f30307af0dbe06f7ed0e817506782ffe70

SHA256
21d8dd7b83b844c163d314d32daaecab00f7047f3a3a721778965bd30431297c

SHA512
fd513eb4925cdf52836f72372543ab45f21c3dec7792d4fd06a19750361759427f877ed247712cff79b8ec719e8ff2b91311d7a93861e710bf93518d67e44cc6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9f3cc454f46eda75688603a98479be8b

SHA1
02ffaba17c772b8166713b993eb2a544f87413be

SHA256
93adc953e6c4ff4d49fdabda447ac5379215fe331bf9e9407bfd38db96a2ac35

SHA512
ac1e5245d49bf29ddf85c2955bad5fdeffcf3e1fac4bab1390a2b5344edde01332e0e2c4317a18e257192e3f1efaf1a49c6d976026dac8a6b5199565d2e62820

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fbc773d0dbcb354d8c09729a7a53b34c

SHA1
63127a9a5de36006bacc27c2abf53401016848e6

SHA256
12ad589f14b05d1c5b44795be8d17710298521ef5095a2786a60c3d5f8267342

SHA512
53e72eab729ec8a68c1f8215c62d972785948ff12892a89c3c71bb1039e971c5e1d7b582b9e64d26a022c6c077a7d0d8e467654839f1e55a3bdf4d9b28b81be6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
456108601c214ee6b927009aa4416e4f

SHA1
ea7b1ec8a0f7e4234ee1d60224d8dd9eaaa3534e

SHA256
7251b7c40e94869776ea8e45e4e7a62a5f9f2b0322163a7f18acd86ef0814e35

SHA512
4db71161ce26a71bb337ab5cb108d8c9638380f67f875b8c1ea91896f9627db97fbbffef3ec9a39c7f407cbf108e740e0c0227af8ab2325f9d429f17c716cb6b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1dfe0bd059a15693c288cd3a5b4e8e83

SHA1
3195ac67fca2e77e0cbf7271ef9854bbd3f632f1

SHA256
4e33a391dc6266c955972a4be688b81b980acf293c8cca73085b08bfa5f11dfb

SHA512
37ed8d795acc71b34f15e1581140cd75a4b27a1b7040669149a0e212089f26b27e82ef456a6a63643293a5481140b1017d40864503a7f8d47ad8e6f68870d9a2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b89d5d2f75d1626e32cc31566bd82c49

SHA1
68b431eaa6089424ad02d0dc5df4ec7e67525755

SHA256
b80594f3e8986d139b9fb27c9c97ebe01d6dc9f06fa5ea10c60015a9afc89d49

SHA512
4b22a5e50a7be9aed4e1c542991a4949df17df1cb8e33fbdfffde264880e476d807b796f54e46159be4df20eaca6459eac4fdaf4cd224a6500e30b29e778454d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab22DD.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar23C0.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit