b1e1ce93e1317229b76547e6d11ed983fc0476ca3b8e12e75fb09479ecb60cc5

Analysis

max time kernel
135s
max time network
132s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
21/05/2024, 19:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6478128ced350843e133a2e74f96f631_JaffaCakes118.html
Size

27KB
MD5

6478128ced350843e133a2e74f96f631
SHA1

efeea6623413a9269285fdecf85e952729c23a27
SHA256

b1e1ce93e1317229b76547e6d11ed983fc0476ca3b8e12e75fb09479ecb60cc5
SHA512

d7821f88988a5d125dc64130b511705cde02664e7f3f04fccf314fb4998b92f8e77e4e7b5102682e9aafec057dd1a261c891f7548b4ad3d63234c493ae9bed94
SSDEEP

192:uwfob5npWnQjxn5Q/AnQierNnqnQOkEntcPWnQTbnRnQ9evzm6unx7Ql7MBLqnYk:wQ/MGVmxCSNm7

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 0003824db4abda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{78B31BE1-17A7-11EF-8E44-4635F953E0C8} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422481221"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a23000000000200000000001066000000010000200000004894b2b0eea095af239927aa0931aa904129db99c8504566da850a78f499a5d2000000000e80000000020000200000002a927c820a29fdd50f1578deecfb84a99d3c8eae670562754f73b43fb457421920000000846d8734ce076df06e62a2a5d5ed86885cca1f8ee533457a6133275803d0765f40000000d20ec631b262a10de8f82599bbe19214fdf602a00e97ff208e11ffd0067c149d14e4aefbe19e329187e0a928fb4449f4367a16c21981ef35677a2b69e78cb78a	iexplore.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2468	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1700	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1700	iexplore.exe
1700	iexplore.exe
2468	IEXPLORE.EXE
2468	IEXPLORE.EXE
2468	IEXPLORE.EXE
2468	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1700 wrote to memory of 2468	1700	iexplore.exe	28
PID 1700 wrote to memory of 2468	1700	iexplore.exe	28
PID 1700 wrote to memory of 2468	1700	iexplore.exe	28
PID 1700 wrote to memory of 2468	1700	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6478128ced350843e133a2e74f96f631_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1700
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1700 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:2468

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
de2e03ef08730f4a49099aacbf1d8852

SHA1
54942d2e6f2da807847324b71d3bb9fe1c1c627d

SHA256
0a4d9cc3cc224b246996f7d461c8c4e5dee0c72c175f1e66d53909df7752621b

SHA512
0335cfe8bc23d5eac2e21034473ac49904d2de2396194b36a4bd4d39f2513290de35f5e5573c6cc96490396df3e8dbaa8ee6be745b68070e23f4823b8c690a96

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
53022c4140a51cca5f48ed425d8c73af

SHA1
761c6c4e5076ea6728f0c72802a2c62906ea002b

SHA256
05b69c8c6c58bf3c08c7475758596ac230051aef2340cf0314a5c560d39ea7b7

SHA512
84374f5306dd63916ca28eeb0d804489e0afe874453c81af7badceca35fff2bbffaec58f39fda7bf2c6b32ce561d96cf29b7f43aeb6ca38028cec426f0f2e27e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4dacf286024d403981f8723c30587a1f

SHA1
7dcec69613d34370e03b9baa813c8116a15114a6

SHA256
e8bc87ca77cb8fc687facdc65450c1c71c17374c1e0bf9a37184c0405e1b8c4f

SHA512
4ba2bfaed37f986ba14caa7f425786b1454765e31b326ddb184fe581942468382a1619b06bd3acf76e87246e81179e3e4c273ca0c09fd8c2f5afb02414d8bad5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
080810b639739316b88a5abfd9ab037e

SHA1
a535b0494384237f60758fd54c1d339e51b38b5e

SHA256
e03af55b8681a6ae4621cf06aeb8e115286cecff6c279e35616a0c54c597bbb2

SHA512
86393c8ce60dcbd2f5e72b7a8b44832a62c91e9c0a6677c70fd2e1ba92b950fc712b08efa2cfb2ed0c38f5df5990ca3aeafe1a304637b84c2a26d4105f666508

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a66b9b352a3dd50c1927e5ffb18a755f

SHA1
c14998b09f20c52e61a971ee8678f01fcf762655

SHA256
eee50d3006190437001fcc4fcc34d25983949c6664cc805716fac3c684add1e1

SHA512
4b51b4316166059f252f123bab6e7d67365d7c3fdf6ee4eabd77fcabf4259188cf67a28a4ac639b65fd15350249441e77eb35cf51d0ff8030f1351af4be19c4b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
de09b027aa67a915c7f4d340ff929823

SHA1
b3fab9652d4ac07843b9fd8b3e761de805bef68a

SHA256
ee08393185c69274bd77e14db6eedf868052bf17303f36fd524c11194828c088

SHA512
8eb255211e6ef5f22b83fa04fc8b0d9616d685f97daae7f8940cdc151c7004547bc4318b209e668b0644c18d5a4810006d2ab3f316559d323fedc7f9ca0703f1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
57cdea887b3aadad4b272f7de867fee8

SHA1
e650e2709e3870a9af8c61f3ad31c9d48a700744

SHA256
7b9f378fe1c8a614eff2a97b11488abe7d982795dab11a0b44d21318da657dcc

SHA512
ee200faccefeef4d4ccb1f484d498ab1fe34f075df6cf307ae3ee077c99fe6f5097057616e2854c748ccd552b2b2ec7d4063c4c95ff9519104d996c97c709786

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
33fcfa47dadf68d2b7053b4d6064d0f5

SHA1
922a5a16309db3002ae733d669107abbfbdadbab

SHA256
1c59ca370ca9633cab5fa289a384842f913b69b80f0989c9df9abd17ac57e6d3

SHA512
893ec4b5673bc900b3025185552b0363d1ac27b6b652d4df1ea5ed6f6630fb37b26e0e59a645b51a8ca5426a1f1387eccd9edb39c47464d4ed32c9eaa366b4f0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
eca676f077a68e02eca2743529cbb3cf

SHA1
9e9421bd2ea62e264e3f168f1cd38f20f923ed2d

SHA256
0cc68d54f805adfaa210ac28a36b7e68f53df75841b04f59a8e1d14342e0ec25

SHA512
1656179590e98257546398d1ba0c69d0cc57aae51b80afdce23bd6bc64b6ea163fd4cd1c64c7bc609ca08dcb7d42645c46d31cf1f8079eaf6f7ec71203349a38

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c2cb0c808fb6735a93c0c0aefef886da

SHA1
c95bc3de9a01f76b627bc177c4826d580dc7df3f

SHA256
7481d90ed1bd39d91211666db8bfa30b477a9a4a5a0f8874af66c91ca100db6d

SHA512
17dd0cb5f49df0efdcb36679b03a17f4c908e85f24d227a64c67c17a16ea06e43d8f21b538b907e7973cb31becab5051a6a11b7f9183f3fa172117e8bafe1a24

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9c27aa78c5819f24c8673b1d0213b76c

SHA1
9f8bfb092d67b2ef2c435b2d88a5451f45c1a71f

SHA256
f02535acd1ed41ec42ae7c6f3760a8621b982ade0ed06c5d94dc928ee071b118

SHA512
dbae100e8cafac2e0e5dfde67195a677e3feff3a55a004838f45789c10e8f561b6e3140fc9339892b3b4fbd7244f9080470e4d349631b9ce0980526415c10b12

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
26d568333f7e80a1433c721e7b951555

SHA1
6a47a7d7900520823c529faa7097844b062fab3c

SHA256
af8b6b1c1d096ed09affdc338e6fd6a3cdebf604c2d28e2dc5b9a7a9a72e6a78

SHA512
94b3988f8232bb7c3451045aa366057404ffeb425f366cde20c1bba679514548d35d8c46c4191b38f1920ad1933ce5ea3ec58fcf56d470a0fe31e06eaa95db54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a9e5c79de870a68021a7833b96e65a76

SHA1
06c265d86fb33489bac2ec0511a99066e32319ec

SHA256
8aced0e5a61c25832ea63c28c75d9fbd3e916aed196499f21443f4186fcfc84f

SHA512
ebdbc4fd028644a599f6f0a016a8012475e33afc2906bcdf54216a128c0dceeb81a1bec8c5d0426cbd42384f5f96eaa92335ede82ac69cfc2b88a31855c60efa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
38b1793448ce571aa1eb2301fc329219

SHA1
269bc35be2d468735d9b3a7d8f807e110210d145

SHA256
3cf25e337df9c009f6eb72d4730f57cb7cd18003aa3030a9a9b3e97767854df1

SHA512
08604fe96230c82e66ecda9c6e152d8790077a9833d80b7396b7de8bb3fabd06d070abbb0067f212a0a04f2c41ddc97821f31fbb54a4b510c3ef688acd91dc20

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ce53fff2ff34d977841c438db53f5a16

SHA1
d99e98c896cbd9db6aebffcddc0f09810d793d70

SHA256
2c5a9ff99536f133b1ee908b3ea1f6cdccba288dcaea51889267bebcd246e975

SHA512
f4a7eed0e0f38c417f60c4129a1b74f6267c89a398811f618c886cf1c85dd812650071ad46e39bd793f39e04a43b27f4ae87229c01f34b23323d0d4cc2e1ef41

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
69ae8af0291fd098ea4c928a924258b9

SHA1
17d83c397aa2e00897d793b9ffa9b54b693f2d22

SHA256
2349bc48b3a611751ede0dbb966fb145e5ccc87464d85426fed8f38bce2c2602

SHA512
e561fe5d4b382b8d53c708f0e85701a44ff4ff4869ce69d48f625e782c96a14a9931dd7a740845e3b22a65bad0ce5bf9bb1c55a279b40da30e26d7f4dedee8be

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab511E.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar5180.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit