9acf6f6c1265e89df6c5fa023a0163fe1444b507e30377ea784bcb37b017e2c7

Analysis

max time kernel
117s
max time network
133s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
20/05/2024, 13:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5f692879093e67af26dc5b9a412a7163_JaffaCakes118.html
Size

70KB
MD5

5f692879093e67af26dc5b9a412a7163
SHA1

473d79c48b73084165751d27b9421dc1fca270cd
SHA256

9acf6f6c1265e89df6c5fa023a0163fe1444b507e30377ea784bcb37b017e2c7
SHA512

4349fc7d7c91c0036fde8b700894e3871c0860cd08bb4735373ad2bed951252ebc8cc92a72e71f3bde619c5fdcaba41cffbb49734c03a37feafd2e79180b6cc4
SSDEEP

768:JilWgcMWR3sI2PDDnd0g6GQRjJCgdfdoT2e1wCZkoTyMdtbBnfBgN8/lboiGhcRe:JWcppf6TTNen0tbrga90hc+NnhVJ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000b5772ac28caba7dbfe0dada5e0bf959d220aa39c94d44ef1eeaf00c4ac8ed4c1000000000e8000000002000020000000041a0e208c550fe256ce5b7bab737606c1f934012d1a8ec1d05729d4c07d16b32000000046b36260ac838cfb09847d05459f778a07596bb34b8b2dcc4e4a6ba69a0aaac9400000005bd40af75aac834a69b169b1a638579ee6214477f09d8f1222a6f75a790ca25cfa98f2ae4e6dbb8b99d0b773195447a22269d574d1bca7cd44270e92db652ba1	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c062faa3bcaada01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{CE83F8D1-16AF-11EF-A692-6A83D32C515E} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422374851"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3036	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
3036	iexplore.exe
3036	iexplore.exe
2516	IEXPLORE.EXE
2516	IEXPLORE.EXE
2516	IEXPLORE.EXE
2516	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3036 wrote to memory of 2516	3036	iexplore.exe	28
PID 3036 wrote to memory of 2516	3036	iexplore.exe	28
PID 3036 wrote to memory of 2516	3036	iexplore.exe	28
PID 3036 wrote to memory of 2516	3036	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5f692879093e67af26dc5b9a412a7163_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3036
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2516

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f81b140c4f28c027abdb8bf4eba62a16

SHA1
37d42103371c99e09d7482e6f9e77c3decbe31c3

SHA256
c1ad4c536d0a1370c51495bffbf1b7c9502533c729be927210d5c9f626bddc3f

SHA512
e7212b7f703960b0093fc17b5be4d5c59a0587d182cc4f17b30f023a9ead06186360ace1ed2ae6d428da7e238fee669872a98011392b29f6f27809493df72f84

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dcdf148d692928fda604a42ab86973dc

SHA1
0e719573f90b0fbb5fbb0bd388aed328470fbd34

SHA256
fafe7b3c2b03ffb5b5c5118bec21c7722db8a4df5344c133ea3613ae39f18495

SHA512
6391256462e52e7eb8bdc235aa9807d834c64a138b79677d8a2cd35254e18c10bc7fd78a2aab54a5b6a0dba147a501a5526e47558ed3d22e64dfbfe4a96ab762

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
98ecd54ae6b6cc4595a3829813c168ec

SHA1
29b1794b8493ef236fb57b0e36ab2e04df087cff

SHA256
19357fbcc4115c55c0270e85311f99e64f47683be3091f377d174a91ad942a2d

SHA512
0f07a7d3ca511a8b35cd28cbc7d7d013563830128992aa7a329cadcd33a61b14b196f18ac253cf09d64c576911ec4e34f80247472abffa8d260e15922c3755d6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e013312d2e54792dc1f5a0d254fd0099

SHA1
8bd1c8bfbe47c074ea2ac5686a3b0cc07c874b4f

SHA256
ecc603711292c3a1afc60a8e449bbe93e5370542cd25748da1d404e09f9311a4

SHA512
7e556efecda610a90e82c699a1c0f864dd08f1d95f66d563b48c389cfd631862470798bc4c46d2ac00ce00cd9d30edc67c89b70e3683a60be9cab773ee2266cc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9c0f7d1dc2341cf9e0b1f082848c4987

SHA1
2905fc202671b18a0e645b96f6323a18075d2d31

SHA256
b31fd6310bd5d6a9c6ceecfa0ce1c5f9ca096273dc47efe6094b5a921d2b2235

SHA512
c10c1e18021358d936c5ae76ef3d940c84ba1385f011ed9a7cd932b3be81d0e428f34bb2c46cfdb0e1a0c82b46c7997ca2b16a33919850e7d24aa3d88439e2ed

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
457f8f93c99b72ca42cbac969daa38a3

SHA1
673f6f86c6d88c8ca538cc3b471fed5f752d5c55

SHA256
6efb112efe28bb97316a51cedfacdc1d146d89d0c9617d52c74f9e6d3459e415

SHA512
b53638b0414b56c829897a64ba790d6d202d0a22af6d7cb1b1161ecefbdf397942704b9c1d23e8218e69aba3a8c59fbd741132c2fa19ce6a9df223973de1882c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
96bea8d551b38b3141be4ab89252bf4f

SHA1
2e610cc39bd181e9a8a310903cf37324b3c4adcc

SHA256
fd06de1d4cb8c1f4aa0dedfbae1202ff3e0ca80d426d234118e284b360d26b79

SHA512
0acdecbf8b7ea339b3e3e90daaf26a475620fa52d1dc7f78e708dd3ff313990b9facf0056ea50d82eaf748e8aac257739018ccdde160a12236d6f9cc4aa04a50

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
02a1a0f6dac8dfebeb2aab23f11294d3

SHA1
793dd066c6ca6830ab251822e8a4f5323efc106c

SHA256
818a606a6408635d68b9dd131872104549d02a67bc1aa7ff552c2cead792ab76

SHA512
d748708cff59de5c5ef040778a3fa2411edeab53f16d5b8677acabfb8539da78f66479c79ea44191d82642121f900b0e6a4d9b746900176278a2dfcffb46ae14

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
643bfd6dc026592f93d48177912137b2

SHA1
54cce03e571f1a1b3d5654fda6caf68817fa27e2

SHA256
ed6bdaf24ae73e01aa725320307723485febd37d7a51e1965e6c0e1aed59ae13

SHA512
28ac8e1dc2abe29d03ad5636c82f2a10d3fdefd8c1830a35e0f75fbe72fc6b815bfe6dded2a7bd260d3ebbdf1d83a4ec2557b9675c57c02df48129973e25f14c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a8d7ec598c28160b15ed813783f2d876

SHA1
234b362f4fa7b8f83403a884f2372b20a69ad2e0

SHA256
8167d46af9a0e698616862e10936f11b13e2cc77defff1f9576834aec3611b2a

SHA512
9f623896efcad93fd4f6cf6f4c48c0ebba8fb7573ca0aa5ca797ba0a44a632528530090f42632ef518b3c2b080dd564a5cbebb57f9083e2acaf4daa48f0cdd7a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
219274584463aed437a025ffe40a58b3

SHA1
0feba31aa397af779d7f734129aee18d0eda77f6

SHA256
1f28491ec9dbca337bc33650decb8b3aba1c307c1aa4eadf7d2bf106a5096ace

SHA512
779f090d357f60467063e4ea27164bc7cd81ae56e763de033cc036a95a5950edc3167e0fce4d0be04b7c1939ae05af25aa87b56f27885b5c56e637401b07e76e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a3f2411247ddf21038e66afcb474d5cb

SHA1
c717dcb1668f8c49591f4ffb546b4631dc3c97a9

SHA256
33c3e06920068bb0a344caf8aeb60661f5e0addf8a2b6678d34bab5aabf6c1d6

SHA512
1f82dbf33ef670ba839956398cc2c7b2105a1861a543a4957dec145f95e87cf08cce38beba1d74d5c0dc401ebb74fbcb74cdb67a0da3413730dd548dfae8ddaa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
667624d95fad37a183f9541e193ce4f6

SHA1
7b044ce9e2fb38f69937d511137d2a6e1d0b66c7

SHA256
5cea88275e02359d84760b5a039d7b525249b1786d628c1b936268fc7f5e93a9

SHA512
da71ccee12105f3f496d5cb8512773e3e21e0770e963e1fbc9b83efdc2db2880aa84a5755b3e04dca1ce15fa469a45ade8f8966e09ad0e2f0e946f52d9510f1e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
805a5ff54b51c221e70e64dc6201fbe5

SHA1
1dd031c8e55a6ab422d3768d01dfef3522f56f92

SHA256
c2f09cfc2daf242a50f549a83fe3b55e4c91e9579faa5f9c68cfcaa308fd85e1

SHA512
07219026059fa9c9db70741826ad8c16e07679053b09d66fcee62fa64934a0f502153062c4b013e718f21cd3bd1b286dac9a0a69b30f4f83d9702c2b06a9f375

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8dbb7221262effc9e0f5f681e69bd6d1

SHA1
4193d8669bb63e4b34950eb08f3c4482032a07b0

SHA256
58292130e17f5e1e67879127bc117a780fd0230ebd124683aa781c1b861b7914

SHA512
c2fedf5b4b1ca0d3d0bd2a26115bec2437916cf09084b1d67a76b9fe55c7d52f1f74f1685f9e044b819abe9031f0b755f6eb857e2a830f0b2463e9b5c1e361d2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c2553d1b5d4028b200942e00418c789c

SHA1
fd167bb96eced3ef15f635242754f8a8ed30aeab

SHA256
ddc18526db6a4b756a5431e9f15ce22a5dea6bb344b5004aaa277eaa858a9439

SHA512
f704c5c59d7010e2544b1db289ac831e5a69ef51eb0f0be25618c3ca1c90871c362714c74867f3e0750eab43377385106033e392c97af53d74c643672b22ed3b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6c77fc509f3b2bc2357ede9f379ce863

SHA1
48e266bc0e89cc815c097d0125be0de883402ece

SHA256
a695d5fd1991cff29efe35aa2daab152e240cbb169ec1f61bcf926f8f62c0da6

SHA512
5c94f0227c420b420a048a63d90de5d75e5c59a879bd60ab8207d214d54cab39e7007ebe17f273beb9c2e8afab7919d3999e27193a77e58ec0ac03eda6d79a9f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab8882.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab89BE.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar8A11.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit