1d26750e4f854b6bf609dd9dae5e868e53569850796a974826532720ab3106ab

Analysis

max time kernel
140s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
21/05/2024, 16:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

63f89e053431eae1ddd7547c94ddb904_JaffaCakes118.html
Size

139KB
MD5

63f89e053431eae1ddd7547c94ddb904
SHA1

37e8b972762878b5b58d65a6385b1d304794d087
SHA256

1d26750e4f854b6bf609dd9dae5e868e53569850796a974826532720ab3106ab
SHA512

27c8f6c1f32a195cda23063b5aab86a895c1fb22dbedc20c814496cfe654e46d20dc7b115e30066047eef415df2a446c32687b58da59d5b6f5f560c37aec5db4
SSDEEP

1536:SYNFCzLZlbCyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:SY34HCyfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422470971"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a23000000000200000000001066000000010000200000009540f33ad129353a1b12fc3f20efe1a3c9f806450d82b89e3e075840ce175238000000000e80000000020000200000007d53b5f911365e40fb01b328d5b52dfd81420c83090cfc1d17dff4f6c0866a43200000003d6972088622ffb508369807cb3bc99be5471814e834050687d80f5ae11a4f0840000000000e6d259a44b1a1a373a89d6511e0f5f4b470307c8842356409c7bcab3922cc15b9c68dfd428b890ab725fbc75ce10a3012b1640db182561ab7f8c9ae78e369	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0fbfbb19cabda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{9BD236F1-178F-11EF-8E9F-FAB46556C0ED} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2972	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2972	iexplore.exe
2972	iexplore.exe
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE
2916	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2972 wrote to memory of 2916	2972	iexplore.exe	28
PID 2972 wrote to memory of 2916	2972	iexplore.exe	28
PID 2972 wrote to memory of 2916	2972	iexplore.exe	28
PID 2972 wrote to memory of 2916	2972	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\63f89e053431eae1ddd7547c94ddb904_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2972
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2916

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
30d41c0c5da0d2db42cb24fa526e314a

SHA1
3850ee9b2eabd445ac1d1e12fd32405d747be0fe

SHA256
87b6e31b67bba6b4665f1b8e51bfa67abcc25f4ee3cda79845095fae7d942afb

SHA512
818a002ecd21aa8983353c6157be0a10790de54284ef53a9bde721a1bf9ee40fe59650efc18f4ed6d659fd59ffdde150b34699322c382070181c6b0216bf9095

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a7ccc0adae4ce4e6f340e236fdb7d9ef

SHA1
c3903f34b1a546e0ce1793edae7e3f7dd4b3f4f1

SHA256
23ad02edd0d1a1eae57e0c8d85acb6c7e05df8df60416db79154afb66a266449

SHA512
b6366832d3e6c60a59a66d2e6879443e066477f30987d229d763813f7d344c3dafd7b916aeddc90b4fccaca25d7ad13eb49dc669b4e5abb9d3ea59f86314632b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
12d58225177d0983142a1075b76c76ea

SHA1
e33e6edf2e6786907ccfd3ac39a1e1a79a86c538

SHA256
dcd53717d9fe01ffbf3de242305887217e8317dbb563c1e57a3c7a96ad6f36e0

SHA512
7b0f45c6cdb30623c78e106f1f964fd5cf5e96950ed695b12dd4a721ff3ab6c15e740a7d08b470bb9196dd8e0359633aa54124cefcd8ca610ec4444e769dea45

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ef572b28fe5df22e5eaae482a616a6a9

SHA1
0963755a976e350768971c89bd6a37a89ff34b2f

SHA256
1bf9a37f07096da08c83c1b5116a56ac9ba07f8874978d5bcf712118bed69c8d

SHA512
b9449c18afa7d269c46d00bc1c13642d515dba40676135c3612edfe44999606ea5dbc385f3e7ade7a73a0d2d5083dc7850012063d3f7193565ce6ce26c76fd50

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2351a8aad1d38dad15806867160ff51b

SHA1
b11be83b19372514b9df2c0788ab920ce74166d2

SHA256
f307cd4bfb151e427bf0f12073b7d1c936bbb8812f14e74f543d0699f19f18d2

SHA512
0c8e5414f3eb64c1e047559bb68770c0f32d147a87d95a32df67fb5dea82429af5c12f939733e74234ba95d37a2d463c209518bdd902d73c16836282ff59e9ad

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
73e7365592a6882c07d4deac7a3f8053

SHA1
3a1b5592696a667d53fe6874f4b6847d73b08d68

SHA256
e7bc055cfa7a5ae9572bba198f5417cc726ab4ecd779b01ddee8c7448b7595ad

SHA512
9ec028c318c547f33efd1b98f0d488f0d347511721143b0b3346f4f6e5b3f9f50803fbc1b5a42d9c342c367f76ee7e975f1b0d8174c5bcf7f34440a17877da5e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fc341ae9cfa170e3cfb9e8a9e44cae26

SHA1
fbc8691c726c5c13fc22993bef902193a10d84a7

SHA256
6ab89f4901a8abeed86e7f12d94c6070f1bfe5332b2f1fd0ecbac97ef1c0d797

SHA512
4e75a991376915ca6808dd2dd3e752d6ca9f46c38c0cc2aa1b23042ea9c28a2fa214ba0902d8e63916a92b867fa9869f2c241d99e6e29168a74a61520c9c92c0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
75791b1bf82380fb05ab39a3dd92621c

SHA1
9bb51e7f470ed1c3305fb32aa5a0eade82fe9352

SHA256
899995cc47dcc6338708a35654b942d7f8ffc8afe602992d255ab1b369b3b360

SHA512
666e915f53050d8d1dd5373c03ab6e01fdc4243b6e9ca1cb091e9c453900637c7c0da40965b208a02ee680d2fbf181423ecff4b2b1056e290fdf2f9ea80d18c3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
97e28a1405d802c4a054f041fef79426

SHA1
7f60c9166b96fe5d1ca061397f2bb3867462d20c

SHA256
79fe12595f04aaa8a4f70f40d0046dc160ab3e4c596369c6da6acd62f29ff929

SHA512
8082b88c5d0179e66d1fdce60abcf4a76f1b09ece48a964834c0544de67b3d94a239f7b339594be0cca08549ec69861fd53be2761e4236121ce41c29034a33e8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
90114fcba5457315c9c8e7f67fffa553

SHA1
d4c5a04d39e32b07c3bc96e12ec7534cd19a3cb1

SHA256
99912c3a8a3de58b32b07cf51da7c45bf4f06ba7c53400d5ffc80254621acdd1

SHA512
9a8ebac8893e4df6fe074a53f7406269619b0a034bdf2f010554ea757a2465d8411600a98ea1b13983bee7601fd139ad50979a21337a88d9c249514ef6d9f54a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f69fc92e80f981bfc38634170429ab72

SHA1
ca308d46973a7629a2af50b6d4deeae7f9b74e9b

SHA256
e00780c4ce01ee8211ee645e4fa2024a96b6d1aa6b7fb8dcc8fb9a99a0e94052

SHA512
be1ec6f4fe31500dcfd49c5aaa882801f4b588b6ac8289f1494d4c2a55caf815a91a0557e25735b613930c88e8584b8448baf8b968f245b0a77a1e56389489d7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f46d2159435e64673b6682d56144dbdb

SHA1
2bf88a671c324ff2356a7af3d36914f74d39f07a

SHA256
e60433ad759bbad92788b1ed13f15f66d060b3d772410ddf0bbba92930241c34

SHA512
8f7299f78ca1f712b79ed98d4812a755642023919648369f2c2b2710dfbb2f14e6a76c59ffe7616765b3e5300986e460f7f90cda75b190b7826cdbd4708a5870

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
06d808eb8625b190fec62257c76a0716

SHA1
5ef3ce30ce963463c4b4c2ff345072d27beef022

SHA256
029310ef02ee37d7d006f64e9dfe584de8a71b53de8f3e3d56137fd27089e755

SHA512
2ef55c3d75ed5e1925738573b85c8f6bcdfb588359bb8757406e07cbef70c7c40932697957958ead38ccce59bd6ffd3146725cc830dec7691fb430cfb5c02afe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e457d477a832cbf4cebc228bcc633879

SHA1
2ebb4aab380ce814e2ce15a4202019dd1a7ba241

SHA256
82250317904dae00a1908c690ed89f685b608ac6a583d59edf4238165a49e013

SHA512
b8f77c8aa65bf1a22c653da3cba848ed1fe49aa0de4e89a7c91e0e1c684e55c5913511e4b66672dbe15ef4b37c1814d450152d80ca1bb29d106926881ae7cd7c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ae6bf4256ac46c417375af9bbaeecdc5

SHA1
ea0c7b2bb3a1cc60fde7484c3bf6aff542e36982

SHA256
8ae8dc1950c7282154873f49fae3d9b54daa11aaa00711c30602cb652a4ca46b

SHA512
64133d1425e4ce6afb7416eab8da29d45fd707c036538aace5b0bf46344b1f13757c8e7dc6f894fbf8eae3e147c74c4edbbf0558be1539e2e6173ff25042d582

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8cda87a1a214171e5a24ea4b2175e660

SHA1
f2ab23ca0cd7a9897f426e11e5e9445bd59afc0f

SHA256
c16362552c07f2fa4d552a1b11073aec18e4356c44c34864a03a840412fc626b

SHA512
0cef0969daf5f13ebfeabdda49d945747956597ea5009f11bdc00212e9047c9d2626eca13fe7560b9ef2bc9a63db7edf76115fd2479c6f65ef35f0cda1c22134

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab1314.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar13A5.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit