ae309bea6e529efc1a5c42ec1470f1e7b0553e3430f4b575920c20083159e3f8

Analysis

max time kernel
132s
max time network
127s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
21/05/2024, 14:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

63aeb022cabf9053bf6829a4ede91cde_JaffaCakes118.html
Size

332B
MD5

63aeb022cabf9053bf6829a4ede91cde
SHA1

9aa383a8f14ce4032e10f0df8d36f479046d8f79
SHA256

ae309bea6e529efc1a5c42ec1470f1e7b0553e3430f4b575920c20083159e3f8
SHA512

dc750a4bf30c36a72953b69fc0b81ee68520462349dc3a857da4a004c2d69d4547b95b96fb6b92c25e6bf879f89426af922c1dd065f96163e9479877cac9fd40

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 34 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 20220d728eabda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{9D892E81-1781-11EF-BA3C-D684AC6A5058} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b000000000200000000001066000000010000200000005de1a50e615f629daccac75e550c2b562bfb63403ad83e5599c4a9951165955f000000000e8000000002000020000000baffde1e30b4728eefc4717cfaeb3dd014d6f5bc897354f8907922a05160856220000000484002a0907b8640a145f699f925393e4ca89e578701f88791345ec88e4acd9440000000918e64c6938f4db4448482b6ccf77396da3ce457f801c6f00991f62c5d543ccef85a5ece046bfc08058d938bdd03a63247eb8492e702868d5785c628b9c31a80	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422464961"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2880	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2880	iexplore.exe
2880	iexplore.exe
1380	IEXPLORE.EXE
1380	IEXPLORE.EXE
1380	IEXPLORE.EXE
1380	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2880 wrote to memory of 1380	2880	iexplore.exe	28
PID 2880 wrote to memory of 1380	2880	iexplore.exe	28
PID 2880 wrote to memory of 1380	2880	iexplore.exe	28
PID 2880 wrote to memory of 1380	2880	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\63aeb022cabf9053bf6829a4ede91cde_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2880
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2880 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1380

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
77880529e6954c1056cec4bb9edf2934

SHA1
778217ad26160e3bef1b5a01f1e67c7db23de2e9

SHA256
4d0c5c3d95e267554b60aa2b2e612b581d3a957ad9c45198f774f93d586d1b98

SHA512
ad43556b079f1dca2ddb673ff7984da896de7ca4301114d10d73bc689bd0afc019ba4c63b30c3220ae35701cadbe291fb8714aded8aa09daccd23ac479ad20cf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cb89ae65ebc54b1fe72918e0a6acea62

SHA1
52a4f6eac217a2ae1c42d805979d100c3cc52f5e

SHA256
7b4792e5fc0feca067c7820d22b1cd8e979088bd173b8d0d0cdc234910a8915e

SHA512
9fe0fe9969e499f3b8b7fd6ce23327d2338d96e433e4e00e0d64f24234c9411ed886268632416edd001c5885e61985cc57347ce916e724def577f1784af356e1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
995acb9cc771950425f933ead38e74d6

SHA1
5e241149c8a729563dad944dae11f9be2c14f6ec

SHA256
a2dc315628feaa78549dab4003aff1447b7e6e75cdb6a070d8d4fd3b9770ada4

SHA512
452c305f4ac4661da7ed5efaaa0f2ff285d9fb29f7f14dade82de49f041f6828a3527e0deed4315e3b0dcbcaa6787a879364ef20e967cc99a8ec922257fb7cca

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aa0cd740950ae2d9d40109da48845b2c

SHA1
45f387ca0e04542038529833a16f203692a62874

SHA256
d51c219f5956f5a8231b923998004fdaf90e656cac450328c39852dc410ca1f8

SHA512
e16396ee0cba8f492aa73240911d04a150cd60f58392c5f0e7f92e1d9c88965c2bc9b32d4f18815b7efbdc17ca8b16f0eb184aa86947af998e59219911d78b23

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9d1f4567aba97fc0e6f3734d8d1489c0

SHA1
2027891341811b060e9f05839d05616536f28cbf

SHA256
acda7ac3a290ceef7656d51be8f7b62527573df3e3dc14e0b0a788c9dd284580

SHA512
ff35b44dd2ce1ca3e08cd9d84b2bde59e5c75072413910204536283514eabce99e8149111109ad457f89c620ff106d5e07d77eab3ade453cf08c2d7c9d041085

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
19c672dc7e05c35825241c9723659540

SHA1
2080deb6d34c714141058e446a32423af819621c

SHA256
985131bf0ea44929e1dae4c4da582bc21b7709e0ebd90d25f05f8528a46695a0

SHA512
56edaac53d808fb3343f3111917b60891f1fdfb7f0b108d64e0f2777e5279c5ddc24325d8788868bdc911779e198dd4fea4ecc8568d948a961c3bfaa8f61ad7f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
41d61c8e464a663eacbee18e67773149

SHA1
184f51eaba4e221e726e8757d23d92bf18c08b25

SHA256
c5381c3ffc8a55d8367cb1b0669222915a073249710dd829562dc2f290cf304d

SHA512
963182464d49dedd4b67a06ac6e58bea28e9bd98db0aa83549fd5dd8a481370a00916e42de46edefcef30415dd1d29b5c882e80008a94caeaf220ec777a5d492

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cdeb1e838e8b6d3514d7a8efc0fafb5f

SHA1
48670d9cb9d95b6eac5acfcd3da51c0acc37451b

SHA256
a8e3d1db07a047aed43a27f091f6b6baee286c108b211ea33ce86e34cdab1629

SHA512
9db931dc33baafc462e8dda255e89b6f9b5c9bb52d49dee8a42745955dcdddd6672b1dfa9fd7792196280175b6d181ad97246291083b88aabda086fa3edbff9e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e48317bffc00b0a04d4f6bcbb304d7dd

SHA1
5df2a8cdb0061650f7dee9d8e3e6f2227cadf007

SHA256
518122a512f28556891569b9b1967e9e130a7fb66826a6575cb235606449c3fa

SHA512
55b159ecfd9ffc620313b8d791aeebec479b6b4e6b5255b1b257e3ad8c65e1dce66b1e1b2d351c2d451b17a26da260dca6c2e7bba8780116cb47334b7b54bdf2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a8800540321664dce8277e2485ff02c6

SHA1
c8a66c7711dc8bbf0e4013e7eadb0c57e8348cd8

SHA256
bff8a9cfb4594900741247dbdde2ca44e8e71f719a70fd6c388d88c576d47d30

SHA512
25aee1dadfd954ee736870b1318b7a7b3624fba81fa59ff423c1243f4d022e627b32a30e8261503e169a60c4a54cd62bb21f114fa2061cf06875ea1c2ad20179

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a082a2cc7db045e99107c911d19c16d1

SHA1
36584b4f1d3bef735c5f9cc6fe66068c50290574

SHA256
1d66113258771dce45258f8cc27040eb92f0b380c597d50cbaa4f814d1929474

SHA512
92cfb7946c99a0b001d7edf88f9a009693f438f06105a13067762a6de5a33fd5d930557851336827adc931164735ba8b8f449ee0c769f7bec47796f1bf617c40

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6719461167da46c546acf7f85cb772b3

SHA1
9acab78e0efa4e8e7f767019e50c2043e6ed1706

SHA256
9be288e187e8718616aab40c6fd401371b2c079f32fbf036b1cca20a451cf55b

SHA512
0df378acb0198a9c4c9d7fe51f538de94b9b67cdbb33d84d0f6f027a5b6b2a57af2c929c032047b7220ae9670435544dc05f8877b4505eacd039426ff371ee0c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e84146d7da31ae3a69f7bd75e86be004

SHA1
0a47e0849f3c64e86b2406c3e97b90d22c26fbaf

SHA256
a6220f644d96d2a7bb27466869a48a5aeba4a80312072ed58f93fa215ee2b2e3

SHA512
00644e25cce3773966b860e79a19addb5cf166cda587e0c8fe126b0a82d86774adf3d5854a9822e61a56b7523368f8203ba4a32c31cfe5b86abfdb912cacd16c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ba5b135196945ddc33c6cea3ebcfbc0d

SHA1
ebdb0f7ad26baf8ee560fa68955536f81f032bbe

SHA256
2ce7004c621d7b693f87585873f3b6cbb58b36ec8ca94f1053a061749b9f3c8e

SHA512
8c1364eedd3e7a90ebd270b9d5bd79537454a02f31db9ca364aa1059bea15340c9a05faac685c7a4807155e538676e57568bf2b41a584a20861bc7651a9f6771

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bdca85a02eb5ef8aa60367ef515a8012

SHA1
1d848eef16c395b9a96b492713c1cc20388cea6e

SHA256
e3d44da82353a25516dbcb2b76ae868b2418c8251ba5788ea9378db634f5eeed

SHA512
d08413270de2eac741416946ad3ba56cd5bf1fd5961388fd982b6dc9a536e88e6046e313afd85c7a8a918a2cc6a83d685878c82dbfccf253b22cf42a571d7799

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6e2d89a233e19e405c63a66a205fa0e7

SHA1
05ed7c42ff3710ac4cf0bbd7fa25968b384eee9a

SHA256
aac05b11cbe99d2110a31686da23b413c892138e38b45536a30c129dbd04a75a

SHA512
e2acf685d0cc6e0a19c20c85da84aaadf7db1d8ac9fd69e702ccb271bcb4fc85eb9cb5b4bdfed9eb250a97b4a669c7e3202af87c681a4c08910a14639fd31ac5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
385ef09754e544cbd77ca8855a683772

SHA1
aedb937d19220effeec442af33f775d9f42ec1b1

SHA256
655d123bd76110d2120dd32303877aff5fede46289daf5f8dadc1a9d0632b18e

SHA512
e90e187c2f06c0b2c511f4165d0a9e2be5908666f06ad72a46c90d8e6cc18a95480397b1cb32d379461e10e2ea57c693a35f091b1ef00dbd518231494c2bcf3c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d3b0921d1817ee8ea5662b1946378a01

SHA1
fda24658b383708a9e8c0645286e59d8713532e0

SHA256
09642535fcfe9518f33bafc0a44a41957625441ed2157cdcab870bf8aff6d81e

SHA512
77919e36e199d4407295779e02e45613331888321e58d75c71c02c7d68783d943edaf30cd63718509c6c1fd5cf7dbfc457b76e1e6f273f1d097ce0e5b717815e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
55f1b93e991a08c6345834190c38d4b6

SHA1
dca86187bff93be866ef22d7816e7c09b3930b7a

SHA256
eab5b47860aa98b4814af5dd0e9a6c755379bd23dc624fa89a59ed694906c3ac

SHA512
3f245bd3c74c345370a9b4a81899baf9c9d012f8d90f6a2cfe8aa6a8369aa324b415dd6b5814c92fd759705bd30599517c8541c498a54e27b2646e3a3d519cca

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab27CD.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar283F.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit