e94ba8a2c67773848ac1f40227f1048fea7df3bda7001e302cce3b67cb27a32f

Analysis

max time kernel
133s
max time network
127s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
20-05-2024 18:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

60acfc4f13b34444ccce6eb284099dd2_JaffaCakes118.html
Size

1KB
MD5

60acfc4f13b34444ccce6eb284099dd2
SHA1

984c470bf4c50d0e58a189b97fa467a1a274fa38
SHA256

e94ba8a2c67773848ac1f40227f1048fea7df3bda7001e302cce3b67cb27a32f
SHA512

4fc28fbff9b71479658d53f18f6a5e7653392f0ce742f3a266aca53276e2b89e2ca381295825dbd9a8412fb27420db7fd606adb2452f42c62959a5c24833d0a0

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002a974a0db1fc0d4abafc0ab364af10d500000000020000000000106600000001000020000000716f6474ba7289c934b8525732eac7d35421afdcae056a51b1665866dc510c3c000000000e80000000020000200000001b6e7984b0ed9805e50cd04feeecfcea79dcd6ab2fbc29e37e19963c8c9af32a20000000820cd8b4413999e68b29c1e377ca2677d849b22250e8d347fba023f8b11b4470400000001732a2f5b2142b9610428bbf47c0b4a2d7f9dad6a82aac18797cb0a928e48ac0bef0a2ade82b3c54fe1233aa4fc323506d68e3afcadda33bfb2f691c1bc45f49	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 806619c3e7aada01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422393370"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{EE938E81-16DA-11EF-B20D-42D1C15895C4} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2460	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2460	iexplore.exe
2460	iexplore.exe
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2460 wrote to memory of 2916	2460	iexplore.exe	28
PID 2460 wrote to memory of 2916	2460	iexplore.exe	28
PID 2460 wrote to memory of 2916	2460	iexplore.exe	28
PID 2460 wrote to memory of 2916	2460	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\60acfc4f13b34444ccce6eb284099dd2_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2460
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2460 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cb3f459f9f5fab3a313b73824b961c2b

SHA1
670e11f4f11314ed2c095052a33caf5f293de777

SHA256
79b589ea4512848dd03c6d6099828c7ced96c7ab4216da859afe55ded854dfc7

SHA512
bbb4c0b59b2b81da6e6c304ec2426e578c15310a3a22761af711620aa7975ac4a315e0b5172cb73ba4baa728f86b06a15b37b85c66df257ed88da2d0b99c838a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
325181fdf5366d073802ccae9c92e29f

SHA1
daa6abd160816fa4538be19b6b6a8f30ffa8cad8

SHA256
85cc6b43d0c2637d12f4344cda19abd67a9e1e5cd4e85cfc359915d75438bc10

SHA512
48d2259109fc2052e5dc02fa7d1adea8fcc64aa68907917ed7856f5c9186039cedc6676d182d55c6d08bbbc4b830c4a715d53ffc27afef47a8eb77bad911e965

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0b92e6ab97311d8721837e36f50fc588

SHA1
7da5f9fa8fc7ad98c34bac008fe6121f21d2f40e

SHA256
d4f66836833078016c9e8b6bf9d63509ac0b8ec1a72b57d306f88faff18d0bd5

SHA512
505207d1ea028f2617aed01c7112551c7391eef12594b2e07b0616afa9504d445ee4670623763a96adba9c3bee00bb5ab2e5b4120a718087544435d810e46b5a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
95afe225f9d92f67a3aa8d17f13fed64

SHA1
56b426206df7dce529bbec972366c26fa59746e4

SHA256
cb15c1812f0fa2f67de709c8a4d8f487186ace8e2cbe033ac2cfc6454a938fa7

SHA512
291e3b032c9e629e100cd19c0daf1d2ce1e888ac564e2e93e4e9043f93b146f3b70cd43f9a5ef1ae35a92903f4a2b97b3a16607bf408b9591315a93bda5421c9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9dca6266e44426ff5bfe6b023658eb02

SHA1
a944b66de0d8f21437cab2824f87ff1a6196636a

SHA256
8d0a8ab3a73e5c90d2762051f7ba886965e4c43726ea47f0760b7969715f5cb2

SHA512
295fb16f44ea3e771c21dfd414daa5a3b6195afa335e77731a17715aa10cd342d3010b2ec77de6dba583469b4dce1ef57dce8d7cf98bdaf441051f6ec4a8d129

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
95757177432b6cbec78b06805734b0d1

SHA1
157e430f495d6aa324821b4f856a8f33fdee099a

SHA256
2934a543b8d1fb578e265a8f6271eeb7d131f2e586e3e8ac12d9dec85bc3c131

SHA512
433bbca07340d042dc9790b4703fb027c3565a37c5a6eeff6f2e34bd46a775be56f2b53b1d22a36fa857d768aa925035a085d050b97e7fc27ad00664d237d0c8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2a18d63844e0f490893895518684f6ef

SHA1
3422746335004ffb4fd6ee9f480d3c1ba6c205e4

SHA256
f5b4b561788fda84d6a1990e4c74fa186a5ef778e21ca2622320f69ef5111471

SHA512
8e8f8f2d5e643218b1e7addf5f7bd69d53aac39c6662e6a33331fb91d00d26abc81b3529922fa9a9f466aab031a5ab619093f066e31941d1c80758c5a2458043

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8c701e4793ddb62f5bd7ccfb91da2b65

SHA1
24ca3286cb550b29577942b99550f4b58ace5495

SHA256
bbe6aeeb8c7aab06b4eaba566dc08f696a77fd99c1dd52784fa6b19ee5799b9e

SHA512
610a3ea27053b8f09c85137b72651d435ec0f3bab353270e1e7fcd6e28fa0f9645100ba65b6a5e840663916355af58a33166b7befda3333b11b8d8ad21b2ca97

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
de77a0ed985c56023751fab24280a25a

SHA1
1396efe214ade1bd311af8e5848dfaa334f59c52

SHA256
24fa687f26b3d007835cd72ad4ce9acfdd2048d43d4ad33c70970b452542147d

SHA512
4399896c552d90b13215e24a4ae1cbff07bcea94fee84e877e61b23e94dd01ebb9485fe7ecb3c67f5d21ea2e85a0a8cdccda5a00b298a4a22851ba83c6ef28f5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
139e81078816986c16e3e9bc4897fcd7

SHA1
65ea2eeb52227abe7b41ecda81fadc82f59531a3

SHA256
22c36f60988a3b874de01bb89f9bcf11e5be2a26a3c3517d4164803043609171

SHA512
b4d092e7fdfe6331e8f7070743bc58bfed4624c74acf1b54d49b634dc9ea360a4046c45770e0a801486f4721e3af6712943a205f31ec3ca3a9b80b7a07a6b623

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
424d668c926620b14625192dfb90eb68

SHA1
00f9ad074b70f077bc52470e12c73cca0db5fc79

SHA256
2e75e6aa2cf0cf10dc5697292ebeda21268f6de3cd27649565bc30b758486d6f

SHA512
94e34b960fc282b55e3822d2203d8cfa9fd3fbb4ce0b115d60a2db09cd45682f7f56baa5e0e0c33d8e3c0b230cd1c49b02f0c2b21d55cd116ae35ec8715a8e1e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
10362ba27b048471a58395a1d72fb1d6

SHA1
fd1e79dbe128b94d1f63d1cad55b5ca1d709f71c

SHA256
78f9e533a7377a9d99c078967d4acb200b01f333fdaf60aa0dbfd67206b7443b

SHA512
784cee2b5d59042497514ba419e346d182b751ed664112da2e3067f4a5dbd37f590c3e9a1dd06337ae5c181d7bc4f2749621c99e139787aeddac50291d07c48e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8fbf2db7b64c7deca06b9bea3685617a

SHA1
626b25662ab7526974de2c6eda844c6cdbba2ae1

SHA256
d14232ae2e18e30ba12c6b5cc0d7cc21ef8123266291fff80c35712cbc2f82bb

SHA512
f164060fe01824d7d8068e78fc4f1f28b675ed218f90d71c368a01528b0bc24f7c1fbb49a23d637647bc00f1b3fb2a67e5264793869e6e6df3a88323a97d3a08

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e466340c3e58dcf1161fb4c82ad7b6f1

SHA1
335c2ae77f5a44f0366d6006eef9cfad23d5130a

SHA256
f938786a4cbf772ffbbd804f756b3b07c89f5c8dae25a9cb587a6704d5bf49fa

SHA512
9c964c73edd42e841469c7389bb63b31b996588c889bc57aa476556e457d8990ed8325e0eb78ae19f7cf84dc69f3db0567c58c84e0d8a4b0580cb1c514f0f686

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b4bab50e8d3f2b05368fab4414491cc1

SHA1
4fca46d8ae2b88cc221c8134293c9204f76d4a41

SHA256
ba8925ec7ae6a333cb06b217d9d9369de4f87db6686a1cc18fa00960f17a02ac

SHA512
c1a94aa5256ef2695ec5714dfba1f8bfb4be39c2b625df631baabe76d17eaad98bcac8c4b1db1d5345164ea8ad80fa50afaa9e0d0d2a80b96455ec046462b1e2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1008a4117db08921053d22fac0121483

SHA1
655aa35bbc0cd4a50154db896c58f1c2c8f01542

SHA256
0b2643393e9cff9a5f1ff0829582e09a243b76706f84399640afe3dc294c1505

SHA512
bfe888a9746eb6204a1b3b8dc3700ffcf83559d57fed666418c3caab202d6841b57a0d1ba12c2c6de30b0c0d98e3d8de72d6f671fc6ebb187a3b71d71c525d7d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7af991d92c275623772230d9743b0334

SHA1
e05f703372e782978afeeb0d638756c02708a714

SHA256
29b9aa656b832e428278a67260bbde353bf6def2d7032ef828894eb14f2717a8

SHA512
7d336197daf3a4c0ecfeffb39f880f352a195bf067137ab0983f7e9ed74228212de01abe54330cd6a21e437ce5725626713e803c5adfce833ff9f3123e03290f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2178.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar225A.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit