dc22ec8a59a98e3c45c53b86cfb410c94a72bc198a39259d4d2ac17343456314

Analysis

max time kernel
121s
max time network
131s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21/05/2024, 22:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

64f9f0763b0e409f642bcba75833c2e0_JaffaCakes118.html
Size

37KB
MD5

64f9f0763b0e409f642bcba75833c2e0
SHA1

0d987d537276c91027dcea0ef00f26e5ea5410a7
SHA256

dc22ec8a59a98e3c45c53b86cfb410c94a72bc198a39259d4d2ac17343456314
SHA512

82fa2bdd039da7f6a2a578581d04d512008d4cd73d6a199436f32c002045f5fb73db3ba7a73f4de9baed5361f26406a262dee60a6832f26c8dc3e69a47d129fe
SSDEEP

768:OvQ0VrPGloCwfAmNmYY1GFT4dDDm7iyJBk9di:OvQ0VrPGlzwomQYY1GFT4dDDm7iyJBkG

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d018bf61cdabda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{8CB38671-17C0-11EF-8414-4A4F109F65B0} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422491994"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000dc7ca65b9b73a5478ccb4c1fcfb1e13e00000000020000000000106600000001000020000000988811bf35159170710aba59896c3b53736eb7c0c23aa85e6a0ad3d1a0a89f3e000000000e80000000020000200000004a47ce51305738ccb714800b765d94c6cbff6830fd6cd007b8de5d998dd63d65200000005bc8c731e39b71b5b2b2fb3e5fd39341a80017e3ca6efb3e2ea82c6f314a99e3400000006c5d70cede358683796501201f5df94660d47bc305847e8d22fe91b8e8800899c37d14eb74883e2bc7f13a0166ba7e08e6a46cc5e258e591d53fd6aeb60b4d67	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3000	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
3000	iexplore.exe
3000	iexplore.exe
2200	IEXPLORE.EXE
2200	IEXPLORE.EXE
2200	IEXPLORE.EXE
2200	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3000 wrote to memory of 2200	3000	iexplore.exe	28
PID 3000 wrote to memory of 2200	3000	iexplore.exe	28
PID 3000 wrote to memory of 2200	3000	iexplore.exe	28
PID 3000 wrote to memory of 2200	3000	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\64f9f0763b0e409f642bcba75833c2e0_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3000
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3000 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2200

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3a757bf29230331a1359f7bbcb4d9abc

SHA1
0ed3d3121fbff70bc7e809c2dbd01ed18e94f0c8

SHA256
3a5717cb2027abde38a3c8354db994d832c992d730bc238579f0c5524070e280

SHA512
735633567717a2506a11f5da1eae6a24fa5a9b5092b01ee0be38090bb503b4dc8b7841755ec19227bfaf33db54c2aaa8a8a9b7f1e61ab891030732371147af52

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4cf701aedfc72cd50578e4f62de34841

SHA1
e311ef90cf09a2064805615f9f170ceaa50283fb

SHA256
b12cb63c257d9c01a8557353120caf53ed16806cdcd25ead147660162e3bf9ac

SHA512
06085f6c73bd3532773300159c6057622f86c6ab18e54a2ba52fb2a596d6af379e5dea328c24be9aa6649615ff6123e19ea9fa2f24af526589cf05c5ab8f0ec7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
78d6d8c2e80287d9b19c413b4726fb52

SHA1
92a5b74238390292fc4a03c4ac2661856d75dade

SHA256
567ef14480986034da1b205372f02bb8b23a250907f76439d80473cb940910e3

SHA512
efb6f4de05ed5a00cd01f9e7f23b9f5c607f13070851dc53959bcd1a9227ea64430dc98256fee5f831ad31eff2bd48b76515ea88d1d5fcf72c95f5bb93844e1c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
425cc0b88dd6b8994a8def88cc0f5ff0

SHA1
6b5ab60f735b44549bab1abfae74fcae912ce92e

SHA256
9576d17965347ab336ba3ff43a95c00a1d0c9099bc76cf3f196b7375a32cf691

SHA512
fb89e1c57295de6530b098ade26e44e6bb43ede59d4df8bfdd68c3c563f06c90942d3d215d941a0f45ef5860512f99890a06e6da06a6b86def4f7479363663ad

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4d91c4d0cab022622e39ad3e3e2679cb

SHA1
9bb3976db1beec3b13436be8a2831171b665bd98

SHA256
a980084676a12ce27c1523471df0897c2d84eec3db9fabda1d4f6db96fec584e

SHA512
33e0c5eb0f82fc55ca2a7ae9c45aa4ca8c753df8c84e461e666555df71667368f1470ebe2772ae7645038e5675dc3c515174f6db7175d9d813d1156a8afbfecb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a12849ae350555c964215754998e0e96

SHA1
bfa6aa39a6d2dd1d21acd25cf1f60072af1a34d7

SHA256
31af3392fee193c8f7bd9cc76cedc80437f347a3d665bfc78159583e86ceeb0e

SHA512
8ce4ab43d92627c6bdea2f97c09a86a0a89527a8a78abfb1874721eb3cccf7a35ca5e15f054c166be9eca2d30207ecb36df484c58090c842b15dddd6b4d205fc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bb1d4d377dad29999fe7a9179dc25736

SHA1
b23b20fd03fe1629c0e7fad6e6299ad574b6f277

SHA256
afd6243b0f31e635d5c174471bf9994e530ae6e8b739e769141166f673d96dcd

SHA512
26c523a67fb24c7b1f915857d350586b62a49d9685514186af6c76de0953126bad7dce0edbefdd74ec1d8067139fabcec7c788477110df83850e16a0d104b9f2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7165d30ef25d135e428b40c79226dd77

SHA1
3f2dd836dc6b6cdb11153cb83acb0755a850c4c6

SHA256
e7228b1d4ee081225dbbc79d9e85e7921a4a41ca907c4c538a28d5318943e763

SHA512
0aa4b04bb960ef165401117a294b5e31cd4f313f3df235172813582f9a0af03eb02722aa2e7989a423f0810c29962a6114babb6aa2550980942117c57baa59ec

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2aae7fe7fe662580481f51ad55673977

SHA1
78efe31edc2f2168f63e7428ba60c9a90d783640

SHA256
c598127bd7f38af6725f4608d878dd206d84eb29b96c165f7c6ce9a1de3cbb0c

SHA512
2f4bf0337934e4aab891099e5bac5cec47c6c7d4b854c46c1eda288a535d1feb42505c15aae15768f655739e16702cf4761c8324086b48fd41a9d11a4b122986

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d0438d5b7bc1cc83b7c732e1668e7890

SHA1
f116d349531c3b126f6ef7a147ebffbc670180fd

SHA256
27253cba67ecea13a18ef27bf3c36b6b9d4b95965252a4d9729b8ed649ed0fd2

SHA512
d0da62564db8245100a0bb7f2d13046f00404485f426da082dbe43d8090fdc494216dc5bfc2535c18b829d22abcb5c49447d6da293fe3468bed731cac1867b24

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dfb853139270a8e52bf87d4dc26f2566

SHA1
f65fadeb9c8295d8d080a3768b946930ebb0a4a6

SHA256
a3656cb188fccb7ecfbec7a83597d13fbaef09f3865443ed152116373a0b07fa

SHA512
f00a813a69c38a60259b36c94a6a62ce8955a8fdfd61d0b7491274aac42396dc0942ecab2d027d1f3d470e7f1dc09ca344fe382b74d9d01df0d20342c0fbf286

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f40ac4482a78ac901e4a3ff65d2820f4

SHA1
b97181aa250b379542781b8b53361a31ba3124b4

SHA256
792736da2c26f9a7da2cb777c1258312adf5fdedbfab17d768f50baf72524041

SHA512
1a6223195cf11086c3c70ee3a4b066b6626be2a38d23e3effe6bce9485d0a4660ffd51d4893e272c3ef05cf6c2e282b498dcde517da0bcf4a383f09bd0fbc8a6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
998d4e836a98ca27bcfc144edf4b9227

SHA1
13f9403229fd80553610fd29ecf2ad49beac77b6

SHA256
b716e0d2aa15eae9378a992b9f101fdd4efc5b11b3e05ee878a371a60789e388

SHA512
c0ad884571b16f82222ec6f8f8dca092cec681a72bb10542443a77333dc8051633ca0610beadd1609a1ccef12d4690883f4a5c9a8df6b1a833312f8a699520bb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b44b858e8681c39179571c34c77b2a8d

SHA1
b726d198fc0dd6dd440785d1ec990556dac404f3

SHA256
4c337a9f4ce69cb931d8c259b36c150c2c3aaf8f0748cb19f13535c591d087be

SHA512
fee4bf0dc8726a953c40ce69f5070aabce7f6125addfa681d3beb148da94502a7f16abe61d5ac547709ded42e62672ca4e17d912e7243e59945a99cbf1b61f5a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d9cffb5caf2d9d9fbd325c704b780fe0

SHA1
b0629984f7b473bf7a445eb791793b5d61e6707c

SHA256
7508070892fe5c4811f3308cd9e4200c8377e2044802e51c7067af9cd63259c0

SHA512
84c7d3fa16fb980629f4357d4d14d44945314d7b1b0a162a2da60bf3aedabf2d3e576a5770439c05c381b1b19a6dadba72e28ed61e04f918cd0a7eb11092b757

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3B2F.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3C20.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit