0a52545cc39c1c310854e9b04eeee08074ed20fe503bed869bbc4d0c6e9597d7

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
22-05-2024 02:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

65add3a938f6745ffbe0ab386ce7226d_JaffaCakes118.html
Size

3KB
MD5

65add3a938f6745ffbe0ab386ce7226d
SHA1

74237194c4717474a5a96df5940eddd7ad76c9d1
SHA256

0a52545cc39c1c310854e9b04eeee08074ed20fe503bed869bbc4d0c6e9597d7
SHA512

9b8c6c786a2cad1f5d442378daa30eff27a7962dc5c6e0a9f01ab097a5a4f4e6c7212fa47fe42a80d032da76bdc62393a2fbfab6aa44637b7ee6693ffc4a7162

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 38 IoCs

adware spyware

Modify Registry

T1112

Processes:

iexplore.exeIEXPLORE.EXE

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a2300000000020000000000106600000001000020000000c6a27f12385997ce6da36d8bee8088b3bab9c1c3ad633f69848d3917bbf098eb000000000e8000000002000020000000cce1b384d16b674098f6852ebf0b61fe11e1ba93b982c829cfce3c204ff9a86c20000000824aa2df5c29ee8a7ec8154808e1b6a824c726ddfb8651362afe36583684882d4000000010f7f5770fe19aea51d971281c7ed242ecf54dafc09022f26beedc9e2b999b7fe77f23b62c1a386e99d8190907ab02bee0aa8551650810ed6d4d46253fa86451	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0e53747efabda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\MINIE\TabBandWidth = "500"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{728A03B1-17E2-11EF-B8F6-D6B84878A518} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422506549"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\MINIE	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

iexplore.exe

pid process

2928 iexplore.exe
Suspicious use of SetWindowsHookEx 6 IoCs

Processes:

iexplore.exeIEXPLORE.EXE

pid process

2928 iexplore.exe
2928 iexplore.exe
3052 IEXPLORE.EXE
3052 IEXPLORE.EXE
3052 IEXPLORE.EXE
3052 IEXPLORE.EXE

pid	process
2928	iexplore.exe

pid	process
2928	iexplore.exe
2928	iexplore.exe
3052	IEXPLORE.EXE
3052	IEXPLORE.EXE
3052	IEXPLORE.EXE
3052	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

iexplore.exe

description	pid	process	target process
PID 2928 wrote to memory of 3052	2928	iexplore.exe	IEXPLORE.EXE
PID 2928 wrote to memory of 3052	2928	iexplore.exe	IEXPLORE.EXE
PID 2928 wrote to memory of 3052	2928	iexplore.exe	IEXPLORE.EXE
PID 2928 wrote to memory of 3052	2928	iexplore.exe	IEXPLORE.EXE

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\65add3a938f6745ffbe0ab386ce7226d_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2928

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2928 CREDAT:275457 /prefetch:2
2⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3052

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
aabc4c615abb46a2d9307f2f9d55cd8c

SHA1
79d1638de917c409b7ef0bd670d83e8bd12bdbf2

SHA256
90edafba84173507e6e8c22b56546efd6e806a7f6082da79c1b67f2f8d34b258

SHA512
d43c6bf8a5d9b96b76b5bedaeb28492f24232ef8e482accce3971de4bbe84b26aa40d4bef91354e82bfc92bc5f538576e8ff0e39843651aff954eb104ca19a87

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
e80334f3547c6f04ff6063e924530408

SHA1
100d8fc2a31bd656b955c99855e5602ecde214e1

SHA256
10f20bf16ff02f58d9ee05d551e3234230979f00567ee629bbd14112a35edbe7

SHA512
5fefa01f5de4c5ff05c553287dabee4693b926377e53901f4ed3b0e3e5fa39a1f0340d2a510e4bde49b267378a043bc244e18290f8f62cb6a6138bc6c211900e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
ce44fdf12ecb1d8a4faecced78c1dc81

SHA1
8e3bc54d736efcd1e3c3eee964c3c74d2fa10956

SHA256
c31bb08355d1bd73a853d4bbbddef104aa49333c9548c049510a120cb469261a

SHA512
3681d29bef2033b3fa786861538940e039a4555fe5aa327c913e98f64eb8d4767bfa3464d28c820cc54769c1954b279a942f84c901011c7bf06f0c85502b1de0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
ac484414b5d391192f8ce2cad270ae5e

SHA1
9caa579b1c12f8249dd577a52280d74e2e132e67

SHA256
774146f8eef4515cc9d19487ab023fcfe4a2b262d075c7ce173f1ce44b24491a

SHA512
59b2fda469f10ccbc5d9599e791d0e45bc378dc0b3370d54bfefa8a877b1343aa5292cfc8fe1e6ce57ce669397b4a15f975bbe9f2304dfe5db49de066f9c7a4e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
707a62925d6ca499eefb7cd818e625a2

SHA1
616f5bf78e1bcfcd47d8b52133ca3d6a00c59e65

SHA256
e88dfc1c348be26532936d2e48662898fd2ad31f71e6c7a594cb5c3512067d5e

SHA512
ec3dcac53b4636835ad69f312e899bc09aea9b60287b700fd2e2176517b940e672915b76750819941309044137955a7f99bd7cc32801c6ffb48890eab2f20d7e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
4dc4a99955d25e0e9cbefcb156ca733c

SHA1
92e22a5034e5f2dcaca6aaf6b3c95e9f3308aaa2

SHA256
46f26299e4f3e050872c4e6a42fc690aa79ab3fe557cd9ec010455e5fd772170

SHA512
79ec949eb18bd04c4618ed85ed7498dc11d347e99a76c5f39a91a42d3d2c525293e8b0a181a7794b1098c7d4671f043e5f1821a86d7763fa970f70058bbd1163

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
51be54e50e49963c9b8cfcd7a00af78f

SHA1
e44948dd51fadabc63b7bbbe766c272edfb44d03

SHA256
3d03edcee14bb76d7c3cd8c2287f96a3fccfa58c775369a6ab667cc6fb182438

SHA512
2a4935b24e88f98c6184c33cb105823fa614444a1c09aeb6bfa8033f260b9c19c44f1fd49be48c4d65b78be3a35f6fc062718da4ddefac9f702bbf9711a37e1d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
f4b6142702ff18092e56845f2811b5a1

SHA1
0feaad2bfbe6eb2aac7f5c41ac4178d74122ebc1

SHA256
a4f69f2c9ed12f0c84707a5266bfb67e777ef92b129523fd1d10f26e34795bc3

SHA512
4cf91efe94635e5c68afdab10131bc54b8a00fab4996735b0b712e270442a3d7ddd5334d0da6d58657e699b3cf185467be2e9e2d81f14912b89a892b01141edc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
e4b6c00f76d729a75bf7d9fee2c78f2d

SHA1
015cd6bb81c8b4ee416f5bc9cb8255f28c0d723d

SHA256
67a6698328febf48c3dfd0b7379eae8127bfabe62d860db4ada34c5d8e63e020

SHA512
2469c81af70abe99f631a8af320ee7cc762728fa99201cf21ce219661ab6c85c7e6cb959ec903ae267e148416673689b6ad1f93743db533c7eb346216478f885

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
d39cad84704b8fdc06fa0d8fd203352e

SHA1
0d082ec47c4c82b879b357e4746fed0a1883c767

SHA256
8f94f6b262f6d7c8731c806df9d5c01fecf7ca6740cf70758d7496147b36d49b

SHA512
2f3b75c67ac4c09cd07b6e8520124d5ee92f5c0392f9e7a10cb166f954665457c6c5b9a72a53dfef1718a3d03358c43ce0d2be7653ad048f4f5f8f7e08ad0a1e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
b66dfc4d93bdb99e3d0bf04e21b3106b

SHA1
2d269649da6d47312433d9afd985f170e8091755

SHA256
34eccb91d7ac448caa92376cab5f8ae5245dd5634029b6e0d90ef0f7b89a441f

SHA512
c485873fadb453d42feb503fd0e3798132f86debad179017a66e259ab16ecaba6ffca234576545dec5cb72c87f56e959785763d420ece28e1753328006d12832

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
4984dc4b5251ea48ed3047f0c92b71b5

SHA1
351a2f82b5ad13e7a05c0d7e8f8b042d343e5ae9

SHA256
853db83d08caf56a395fe79ef57389d4d269019af678eb8a880c42c1b8b7cb58

SHA512
6f0c662e7815098f483de04a6133b8c29a4dea16d8451e4ab737285679cb22eaec10893b619a2605ac70468e86f109f8c9196a8ab14611dd8f3062e749535eea

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
208511ceffc26452b47148f546b00c23

SHA1
7744e14ec3f6b5a91bc74d05bd46b87b77e0ffeb

SHA256
153d1de9bc954c34f3ec68b4c118509401ef1d719307e9fbd13ef5fa30022295

SHA512
354c9686006e4014ce1e16345baa2f0503cf44d6881d8b88616c11c2f21e056bd5aa9879f3f7b80e5c4bb7af38c1f6561fecec3ce88cec595c3e5eeed4776c5c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
81e43968b29710449708f5fc10fe64db

SHA1
58e956e14c569a9774628278935c4553924022db

SHA256
ff2fd930a66dcc61b63c853d6d8a40d2c256e47cc52e97cc146100d640334391

SHA512
7300fcaecab6289d776a0d4380a647078679df809ea6a05fecef9abc9cdcec90a007873555705b718e593ff23f3b38dac425208a107116ce25c64fca2a758c14

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
652f619391119a7cad8c152199d94f2f

SHA1
6c601fa75af56fdd2a96b15b0c7de47510670c7f

SHA256
3ce6145e7abde4dec50f116116c98eec0ed3c981a6c978024eee255fde399a24

SHA512
7b8e642c6ae7abddd3894e4dd51510a5f804fb4019ed89315784143da784c664aaa9b71a5e4d5f05ea844e68b8759680aea1d01bf7cd5148b9523c8e3d452b4c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
9adc7ba9c925cbbbdebb8f26bfd9de57

SHA1
49f66736fb0abe339a4e041e3954bf1eba4afab6

SHA256
5ad31f6e7019fdc34406302f94b0932ad263104c498e5bf5ea65439e6549ecff

SHA512
6e8022addb078a4f495457029d51f8561d3f2f398d67551e82cf1c6d406774ff80c25d22eacf70e67161f4df9716ff742ba6d49253272df8e47fd1a4c8b3acfc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
344B

MD5
1c2109372d3341b69c79e5af4c81020f

SHA1
b7a0b176111813ecb64110d3687feaab3cac8950

SHA256
e4d8ab37c5c34ce82c59735773b1c3e3f416e0eb3216c99fd5a6f1e9acb9dad5

SHA512
83d8ce875abe17d6ccd1ec48d0d498bb3b4a75259350b077914f7563d93c2cb799476a3c49a51994717861942dd74f71524a49d99227d461a5a686607078afd0

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab348B.tmp
Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar34FB.tmp
Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit