0d8958ff30935a9e0c58e011fb3d4bcd27aecf7af495b90de01459e3002e7603

Analysis

max time kernel
120s
max time network
135s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21/05/2024, 07:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

628ddaa344690341a5f614ec51c255da_JaffaCakes118.html
Size

68KB
MD5

628ddaa344690341a5f614ec51c255da
SHA1

f8701a58a88ec6147c6966c00d19c6fc558b4072
SHA256

0d8958ff30935a9e0c58e011fb3d4bcd27aecf7af495b90de01459e3002e7603
SHA512

459ee5fb291f787d6a8e72bd79e3a83d93cf0772eaccfc4f12a66d1bb079934601b6f583b0218ebb765c6c0fab1c8356ed24149d2505fe54767e5ad9ff2e3038
SSDEEP

768:JiIgcMiR3sI2PDDnX0g6UAtDrInoTyv1wCZkoTyMdtbBnfBgN8/lboi2hcpQFVGo:JoaPZTcNen0tbrga94hcuNnQC

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000ab3759babfb0a02476c2f69d1c95eca9a5caeeb18ffce8f46d20b6eae3fb1bea000000000e8000000002000020000000deda6f1481615df0aa86a9244c4d080dc9e7e17eb01aea62ac33236b2b959948200000000d7b065bb2dee18c3c312d3771b493a5cfe4eeef56446df50558736db2aede3040000000ab984a0ca67cee08cd573e3adb0e7a1c970dd69647cb6bfd71189c83e33bce5dbf44ebf325ce86f051cfcc48a525f65361ab69e05c68b6b2f3454101f14b2868	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c0ca21215aabda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422442491"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4BEA0011-174D-11EF-BCB4-4AADDC6219DF} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1340	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1340	iexplore.exe
1340	iexplore.exe
2552	IEXPLORE.EXE
2552	IEXPLORE.EXE
2552	IEXPLORE.EXE
2552	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1340 wrote to memory of 2552	1340	iexplore.exe	28
PID 1340 wrote to memory of 2552	1340	iexplore.exe	28
PID 1340 wrote to memory of 2552	1340	iexplore.exe	28
PID 1340 wrote to memory of 2552	1340	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\628ddaa344690341a5f614ec51c255da_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1340
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1340 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2552

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
356820f67789ba1ce532ae46cad7c247

SHA1
d3f3a4f58d9562124d174cbfb50bae4b31f6747e

SHA256
e66c9ec0f974be4759a92f7021ac03d0289ad4b4f2c0245d96274a1032bf18dc

SHA512
1b6c0e2d03e8d3c83931402fa60bfbdb1aed8781098fc9ab6f1a0c3a05c5bd3ecd640511cd865b868e84178cf0de0bbc3755fd911c92921e8258d0fbbca0c840

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
98603b06c6f265aa168e2d7e18559b8f

SHA1
58c2b1cf9dd8e0763de89c27bc235d2643890ca9

SHA256
b887decce7a11b8903535069c3d141d60378e4452968c1abbbdf535904c828b5

SHA512
d7f2cb4a187f6951c1aedfbca3af73d5164368550af0b3de9173284bfe0188313b01045f7f4db5c2f8db5064454fb49d053307d6bfb24a58373ddf42139e0516

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
eb4a7c3d335545897d1bddff64a9c24e

SHA1
e8fca623ee4940540928e1a91e0af2e5e9b1e99e

SHA256
1c716c1a5f1b7e410354fdd58d8e83ef56847c75607c36f58ca1ac9ec9dc8552

SHA512
7fe5f1ee91f771b546d5e5688847667e08006b1131792101e81090820c0820f5846720194fc9fafc10143a24a70d2109266330b0363d56124e144e78a7535761

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b31f276db8c13b53c48fdde20b139709

SHA1
9d88e171963a5ef18738ad086ef40014c0169575

SHA256
11de5b3a9444e94a6bdbc7b86871451c72b727e8b5de6f0fbcd69334cd597dc3

SHA512
90f5125326817b78e62118ebf9838fb0fd08b68cf12e6276aab0bd4d098f8e57ef92093075bc9015f52d7f35534ad6283fa0b41f6f0a3464ee68c43b454fb875

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0dcf68c4ab1bb58df5432220a0464b40

SHA1
77b9dbd82db7e7ec66661af23dbd4fb85cfb1b1a

SHA256
69db300bdce0f887c56a6be7be92aee39b379944cd602b261cadafcf0a74ffff

SHA512
a372a41f1e396ac69c067a7d75246d9bcecc70d92382e7a66ad755bda2d7b47f6beb5bd2eb8d0cdf306278162ba371fdf2ec07e21b3902978f68e88cc2288d47

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
24fbeb89c2441fd29affb1fab238c275

SHA1
521628c80f1b042ea9d8ad01f1e5e8c6778242dc

SHA256
c965a73b641bd90f19c5baa478ce24c5f7ff67ea7d4785e6c596e58178f60b81

SHA512
f80d5c2a0e294edb8cb746015dc979aeaac7b87fad68523bade279d38b424ee20bcef229e861f6306849517620725d0dbc284a3500273db786cb5c9fca5d0e87

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9364ebe948b62ad62098a22b5b86b84f

SHA1
31483e9c1977baf4401ca83785625ee955f01403

SHA256
71b2a90b56c31f4ae93f0706fe45d858c9b5533daaf8eaf2e9cfc69fff40cae9

SHA512
0e159f667455af99608089da6c529c56c0986c83df0960f63df0e1a66dd97551e9792dc9024e6c911877e46e60d99e62de6b6fcb47ce56ecd52fbcbe077f2c8b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f6f260d5a2a2533149091a9c59571d59

SHA1
8eaa2f404c6431898a0e989f4b034808ec935ed6

SHA256
99f54c27920eaaf256f3ba52d7438d67b94be49d7fe3753c1ba70b9f326855b6

SHA512
fcb53a883063ff975ca37235f3d99a2a888d01b012f77ccb6532611bc5427591099569cfaf761af6fc62f8866e4b3a4155a956b8c0f472ccc0db11508d320642

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
afdb3185185b83327e5660bf373e9871

SHA1
1b6c210488db138f1952487c1ecdab4433e304ac

SHA256
c24b50e34fba43b4ba8cd6effad53c8b08cddddba9887eb862b72d27b3edf655

SHA512
503bd25332bb90fb00b48ae4cf33493d923d2605fa5bfc66656e458b145a9464377a7aeee062fb66b4798eb426250485400172c05c5c1d156f0de7bd82151656

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9209ceacff95f4d10061613655f4eb3d

SHA1
64e4befa2d147249bead2fa35dc35ee5efff7605

SHA256
49617dd89375650eba03d75f21670fc25d73993dda0272be74a4ec88b5f1fea7

SHA512
4f7155b73c41a2948961532247479beecb05cef2d14fddcbbf5a54a82fd91e9fe9f38b06efcb7d2ee68bd20f1e061d87af70e4cf840541741b575e5892f9d5bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
025daaeb4b9d076e33910ee89170f31e

SHA1
e9e3ce8bbf3977c033e79e1037522362f7d93020

SHA256
fafa84e4fca8678d4ad25d015a4837a12343ffaa450130f7511145b3631754d3

SHA512
d22d92fc05a664df07db7d44052873b334110959ca9e13641fc16fc29e263a62e9d635849806f7e94fc696d1e1c29ee7462dec01a9ffbd9dfffa1d918385e6c4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c95b967502e66c4ad4eb178d8a09837a

SHA1
0acca59fe8431b4aaac48105ae2d824912a3a271

SHA256
77336cb641c92085d028ff03d1c6bab419de8d3fd44d2798b98fa13a630a4958

SHA512
6783bc4c09aea064db5ccf9fcfbda5057205c7af400882bc02e265f0e1e642e7cf7ca01a92898538382d0787bea8546f6bf08229c2a69f81b26cd279f43f7254

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d49fe1133ed192a5013397c58e652f95

SHA1
0398b57868ffda8789a35691509d64686139b6bb

SHA256
d90b84eb57ad5f2115ead8d510c94a2283dcfdf3bdba4aa4e5139ed3d98ec4c1

SHA512
192f93ce819f5632a436b28a7b9fdb67041b204ca094b8c4940b30d16847755726ce025536fc814bfa8f56573ad1ade2d27e4d7ae997f8028e58fae9ef503412

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
62f5d903d073eb8d55ebcf1db04d10dd

SHA1
5966026dbfb923e189ce87dc1e279078e3815e9d

SHA256
0caff2b2dfa7b19de4d314701b16573c56d430b94dce9978a7044f67f5eeba76

SHA512
1c8a95f57d0443ccfa81a772b571cf43759e361ebbec956a38607c6bc61509e327d1584d19cff04ea71f4e610260b930bc3ae442b1100fbdb79fa672db931d6e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9d1aa24370604212b11d5dfdf964307c

SHA1
07e35be64cc82113257f0c15b81453b297c0427c

SHA256
ba85bce7e8c11d59410495abd9f0b3ee91b42c1be243db03e8d42d10240feced

SHA512
1190cabbc2371d4d9c140dd4e1a7afac54d6dcad086e267700011f57e7da9ecaf9adb495771e2b2d1744899dc718b7fbac95fc9417fe5a8cdb724b300b7a49e2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4c901f5263658953afc002c3550b4773

SHA1
d8bff03acd1c1b896f226952173c14f0591518cb

SHA256
1790c1fcdded88829129cb32c4174364c3f28c18b124d4e08457a61042b79626

SHA512
458aed445e1273d2b926f1ef48059c1402bbc1fd67085049b6c28b622624f831dcf61a2cb5d49dc6da40a8043cce466efe960d3de119cd16b0c5361c738b77b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
edd258278dddffa36b7806e4c9a254b7

SHA1
576ffa5f31ea709fe9aa002eb767128c5ec46074

SHA256
4820c4828461237b31633a7395919245d83c445d3a82c91d0701ed77fdd43d50

SHA512
a51aa0b448988a485abc7dce638f4b00419a31b35f751402ec6c8277a5752e5f380ac965249ebdfb4522997337481f9475b697f2488bef8ebd49aeccc619eef7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f0e132f5f79bf64507c63d8e8326dde3

SHA1
6af3416d42d8e1a578aa35718f37539f4f7c816e

SHA256
ef87c2324e33ea29e30e309f9af93a12cec2c894162c3e9525259467ae443927

SHA512
bec888f42eb6db65b09d755a3497f3b1518f5b1bb3fa47a3588a9b74eb0cccb03e5eb5a2b5e3a4462ec5096c05af1f5fa4f2742d5701afe26a09d9b83814131c

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarB228.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit