9681175dbc4e3ade3c6311e9b4685dcd8249c9a95a7dc45a4de1b5dde8080f08

Analysis

max time kernel
138s
max time network
140s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
23-05-2024 00:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6931ac317ea2c31f0f9317f62afa9dc7_JaffaCakes118.html
Size

70KB
MD5

6931ac317ea2c31f0f9317f62afa9dc7
SHA1

96e4cf2236c03712e31a00b4990599f9669face8
SHA256

9681175dbc4e3ade3c6311e9b4685dcd8249c9a95a7dc45a4de1b5dde8080f08
SHA512

630cef0083025f26d8881de69716098ce26c62ffe3f9ff306b096b8edeb737d9d600b73dfb30866d8d8239718354be618e1ba11942dde7768e4adfe151a936fe
SSDEEP

768:JiYgcMiR3sI2PDDnX0g6sC6lK39t3m79t3dvoTyS1wCZkoTyMdtbBnfBgN8/lboz:JaQm+TzNen0tbrga94hcuNnQC

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

Processes:

iexplore.exeIEXPLORE.EXE

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000027318c172383e24095bcdb711438f17000000000020000000000106600000001000020000000eb3454d2a232bd0c072389b87ea269ac3e08ae40f34dd04d96f30d869ecd949c000000000e80000000020000200000009ce1485a6075482b16c9f21d0a44e0bbb3acfd9f1de134a1d11dec69f3c88c79200000000be02371234960afb5ffd26f60b93998c8dc10e852ddd3f07c79f5483aea8e0d4000000031810ceb6e2668274489cfc225075fffb55cc433d69207b3353b5190c3d649014cf956c612e6aa66b0753c817aa776db839f8806ed17a8920329b1a0ed86ac64	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{3873B831-189E-11EF-B0F4-569FD5A164C1} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422587198"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 806f1f0dabacda01	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

iexplore.exe

pid process

2192 iexplore.exe
Suspicious use of SetWindowsHookEx 6 IoCs

Processes:

iexplore.exeIEXPLORE.EXE

pid process

2192 iexplore.exe
2192 iexplore.exe
2024 IEXPLORE.EXE
2024 IEXPLORE.EXE
2024 IEXPLORE.EXE
2024 IEXPLORE.EXE

pid	process
2192	iexplore.exe

pid	process
2192	iexplore.exe
2192	iexplore.exe
2024	IEXPLORE.EXE
2024	IEXPLORE.EXE
2024	IEXPLORE.EXE
2024	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

iexplore.exe

description	pid	process	target process
PID 2192 wrote to memory of 2024	2192	iexplore.exe	IEXPLORE.EXE
PID 2192 wrote to memory of 2024	2192	iexplore.exe	IEXPLORE.EXE
PID 2192 wrote to memory of 2024	2192	iexplore.exe	IEXPLORE.EXE
PID 2192 wrote to memory of 2024	2192	iexplore.exe	IEXPLORE.EXE

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6931ac317ea2c31f0f9317f62afa9dc7_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2192

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:2
2⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2024

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d631df26f040bfb17db892f3985fa504

SHA1
d02a2d4c97c7b328c0cb45abc8dc62fafc48983b

SHA256
ef0c25ef7a552e7140a1a5a9e39fedc0bba754b4b5de729b47b645a7d01b4107

SHA512
e92da35f92b98f58a8299f06f9178355c8627be4812a1ad96e2a712a7bcf4e7f499659b94f748c5803c1a9b3bae057198976e3e773c98f3eb9bb4b782ad65ae7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4aa6955e5003fb92c1a600c96f01ef06

SHA1
d1fa1144673c7b445b708d5bdead8a30a30fbb85

SHA256
6301794cde76208d034e653a310e6222b9a4511321079de78da648ec0c43feb9

SHA512
9e1879e910b3523d601fbe0767baed70f3c2d48be0c13e7b9aaf0c4f3a2bc3d2d26e568c8967978f3d01d273416e9a7f557490abcf3fcb698e220034094b31a8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
28a26d8ba480fbb430df44a8be5cc343

SHA1
304b5033a4637722741173ff728d244d6624b371

SHA256
dd7c141079d08757a7a5935564bd836ffb7e631fd2433d94e49aae6a972f5ca0

SHA512
9313ab7d7ae4129e2705e14b7e7dd03a0773ca526c6b90fcab35086160d421ab33da1ddd073fed153c8f0e67d53af792fb6de32a80a98c0e1a82df222498ebb0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4f383076a8e8e20a3a24107b3648de58

SHA1
8857324337fed32d36529c42926185fa9065004b

SHA256
b2cf3672b41ca5fcff557e692de52ea9899ec2cf21ea1832e55f334524738102

SHA512
da0294b896e40dc498b4bbf51ddbe64471ffd54a9adfc91ba60af7159be8ef7637be893619b6a1c85d7d79b0e2300fbf83644d98ca00749168d43b33f19282ca

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bbb9c58d0c5dc2cd3beb867b4510c673

SHA1
0c8922a1f31dfc1b136c2fd4f48321590922fb47

SHA256
61626e5606ce64b7fdb7af4a4da81a569f8b19827fe65d2199cc19cad90cfb5d

SHA512
dd50f79e54e5f6ca3f498f3db60e947cb28021ec0b4b9872a1ea6ae5b526ed77be1676e0093634b0e0f5f1802b76032489b2c74f74ebfbcb0ca99a94ad533999

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ae7f690b99ee97a4b742adb857f962f1

SHA1
217ad4968380254c03c174f5bdc610e875ddced6

SHA256
c6ed91d2a4117751b664b2e81a0f306d07ba946f2b1e74b3f850c76b0e03d0e0

SHA512
c1df412380b1cb138376ca9a645b5aac8798a0897cc204185f7a175a6782f1dc3d3bbe0d19ca95a836edc3857079c09ffab3959af612dfbc76d4590f9215e6cb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6f98fe6a07039f7e1639a96bfecc71ca

SHA1
843d8e395c7287f7aaded03a11662ab7bf5e63f2

SHA256
86a234d89b6d6fb210901c44108ea521594d685d45176c82d4f58a57813676c3

SHA512
0cbe86ed103c9da3476971425c33ac13c6f0a31b14cd99d54fa07b3dff4e8f14b87032fc89ceb95e50701981f039b61f92fb1814051b49ec93b24a1f16f39fe8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6fee48db2b7dfb26995ee8cf7199d912

SHA1
4646ca47a642a8945c78b71dde9d1c5cc8457983

SHA256
f129a3ef648afe92184e98d3bbc6b15e12eba88e83308f045236893e9ec7b559

SHA512
8488f54aacce689faa2e60d19315cd2ce48b6b1a5eb1d835f08ec0769237821b2ae0ba418070bdedfe0c35e8075156ac4fb8f04a0de4f5531cdfbbe8ba34ac61

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c22eade4d53c1871a6412e1b4a4b968a

SHA1
6fc31bf29baa4996ff39c4e0fa267028ac1fdc7c

SHA256
556dee8effcdf3b046d5b591f45bb006bb51dee4793456b117bf8d050692f888

SHA512
a02b6bb3e2d04b284ee3f7976c295bf1aef8915d3da1347f64b0d1ab72b1f6a885f048b0a56845272f0f38cc379dbf135c6a4876cb0662bceed66443d1f12ce4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0d6ad08b6fdc966913ee72ef67dc8fd9

SHA1
e3d9d26d8880c3277096b72b7621b62fd7968062

SHA256
303024e5a881f8904c0b7f4696260d38fdc82c606c4bfe2c2110ec1f2f553a9c

SHA512
51e73cff91a48b3d4ee75727bcecf465811bd066389bd68a28f99ed8a92071ea69429e19066c0327441627b87c44f788e94d0e54759b315f3c27f818d5700667

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dd54fdb0a75072d7c6b6292696509fe5

SHA1
e59e688ad3aed9f8affa5e4c89cbaf31e62dec8c

SHA256
af346d5ddceac18c85c7154d74c38c3147433b7884403e1b2e5ae152dc761686

SHA512
a00e792689953c328841225ef48894132231d7cd58b464dd16354ed04f3c5af2b50c0dc8708125abd334340c031a28a907db9777225a9f0832a094ce6446654e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b1619797656b05b664e7867a6662891f

SHA1
8912dbccef75a468b62e1e4444d00d9a3984fb7b

SHA256
1cddff9ea0b93ec7a9dbf32142a21f39c93ab4489804775644d8ae8cd89382a5

SHA512
293f0e9753c7e0cb7045b1d13921b03d89e56d3d5e00656092b79ad96eff25fecae2ddb5a070b23ed996f5828c3add63cb9df528e596d3c68b7cad2b213cccfb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ed94b148b0d4c8b549fe45f9dd91f15c

SHA1
98ea239ededfe42fa118bd81fccc237889baf1e3

SHA256
36b0e2f25bedb1204412cbad6bc4a9c777dc00feedec19a6b92c52d3045b5f90

SHA512
b129edbe078b927cfd1b6fe87b96bd20b3c50fb97cf939fd805270ce3c41a569354f31a6beaa8a26e4f40da2d857c9a6c8c119f350a80c6aeb74bd13f8db868f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
38ab94012c0bf52cbe0e4d3405e18467

SHA1
b9cb6cd06ba76e3ee154defce6b70e0a76dfcb16

SHA256
da2aad30f740faa3bf33e671ed45080be061d24107bf904f68a6bb5a83f9eb38

SHA512
5c52104ea4e9cabad2ce560470205d9a550ed60eef3636cabcea7cd12479dac92e77eb571e6b59f0233acb55c06ec468131575fd8e85559f58ac17da167e1509

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b0b4e32d21986deb74afe92d0d5666f2

SHA1
2487e64e7b661da16d56759a0709033abaed2b19

SHA256
503040b7c075f1dd85dbfb02a63cc4d926daec7efb394b1d505f4a5ef397f0fa

SHA512
bab4915db02e17490efcf03a552f9261016374d215fe94de8c1b8016faa9eba9fcac89801acda3ce94ca0ab43628973a87d9876f02c865561ac1d3f89b8ba2e0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1ce10478eefb13bbef85d603829db830

SHA1
942f1ba0ae0f0d4b1c675ee0ad7bd4af98a67258

SHA256
f881282cdd219bf1ce909b4b72d8b2dce67f8b37ab94661a8088042633a73c83

SHA512
36199fba71e00d41a93998795f2d7cae171a237114dd3a5a49607b3bef6fcb1a473e1aa1afa42034aed677fe47ff1fda1b45070706830f4f0daa2d9948ba791d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2DD7.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2F26.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit