94a1b3814bead77db02372a5c122e0dcf742fc837aff5336308546faebd80b36

Analysis

max time kernel
142s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
25/05/2024, 20:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

73289ed3d1a4a3dca3411f48d040afc2_JaffaCakes118.html
Size

139KB
MD5

73289ed3d1a4a3dca3411f48d040afc2
SHA1

33ab6011b2c76c7d79af3eb5dd08777ba9301e9f
SHA256

94a1b3814bead77db02372a5c122e0dcf742fc837aff5336308546faebd80b36
SHA512

479f423d2b0935350cdcfd4e907ef40497d9a700ad845bd76820162a43f479efc85ace9f8e0e6a9d271abdfbc876fe7df74e474867835e4f6c74201cc86d25bc
SSDEEP

1536:S2DiP8bUUlPy93yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:S2EMy93yfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000a639bceaab80004fb46b47f7777115d600000000020000000000106600000001000020000000d09d5f79fd1f889489e7ae880c16f7aedb824f7b33ed9c30c0f729fcc340d297000000000e80000000020000200000001db20a3edd34fa1d86426122d5c02d44630c918dcd1563704a25587196ac539920000000151916aa56b2bec4eb5c30839ed9108a88c2b43b8ba80c561aa777a0d8722db340000000b94817fb2c4deca81e5c0891c378f1484e3cb0a7053700531f0e9ec1999acf7b4622c5e69d6bbf4db06803267bac0cff64af3f618a3fc3d822c93a0e23140a28	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{F6DDCCF1-1AD5-11EF-8303-EAAAC4CFEF2E} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422831042"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0a2b00de3aeda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2224	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2224	iexplore.exe
2224	iexplore.exe
1344	IEXPLORE.EXE
1344	IEXPLORE.EXE
1344	IEXPLORE.EXE
1344	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2224 wrote to memory of 1344	2224	iexplore.exe	28
PID 2224 wrote to memory of 1344	2224	iexplore.exe	28
PID 2224 wrote to memory of 1344	2224	iexplore.exe	28
PID 2224 wrote to memory of 1344	2224	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\73289ed3d1a4a3dca3411f48d040afc2_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2224
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2224 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1344

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
481125f292a7cbe9fef2e226cccc0358

SHA1
2161b597058857e18a11347efb6696076eea39a0

SHA256
635d01f8f62418650da18830a7342f312f78e69912a761ca639f60218b55c091

SHA512
dc7535235b25b12c9b74d7f2553fdff364bc3c71632c742bc76931140dcf1f1782356c54a2e737a929511a4a9830a3b5348d111c70a2a683306db9fe19be6bdf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
38bd48c55cf40de769c8f9234cc26e8a

SHA1
68ee57b18c98091610c6f93a117d268dbffe54af

SHA256
96d0367d5e057590aaa0420a0e14749bce5942b884a72ba81b4ec88f90e4e6d1

SHA512
b2063d5b27bb831b7274507b5a16d888ba5dff210906fb80889ce49be9c764bfda9cd3176f1d82b1616a5ee8bb3d2e81bc4bb1f3df492942a854a30ccf88dc5c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
40209b8b3256a36ad2b67d69fc59b377

SHA1
090d2c2e02b588e6c5f578630f6741ff467ea90e

SHA256
d07c451af094b3acc5fdb9ac4107201e89e7ba410e97b76977d2d4dbcb03cc68

SHA512
7dc1364726b6de59e390f3d1004da5f64858e31a25d4ec470c290ae44b57752eaa7ad00fbb7fbc46b3c5ef0ac89056b52e9db45d6cd8a60e5988279b202d1a69

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
97ed9028757c70395081689cc448e11e

SHA1
1e669b9a815944f20fda47c69b7e45a331572687

SHA256
e361e93a8aa4a1e1e4b3658766ac083a39c2ebb2a6666776ea88b40368d18b1c

SHA512
2fb2cc1b34d59c0e74ff0613f2060e69df89fa62b142e13a1bdf901698ce65f6fa418b4c15b4b033fe4969fb5443df9897fcb18843f9ce01061ad5cd4495c8f1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
11c3fef0edb5d86a98a95b047fa18235

SHA1
bd5450c2da1946cf52b778e4209bb18544a88fc8

SHA256
66771f36ec8e5a6cadc763c6d819480f5ddc41e81a886390388644f94e44710f

SHA512
1361458ff524efe11e8c30e14d74aaaff5a43c2519ad3ad497338a2ba8a2167da5db6a4f89672d9f56a2b143998a05e08fb4fd9feb389542c2fa49ea2d150153

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
964dc84b4a593b7a3185951408139005

SHA1
c8f46469c70d9d5934a946eca11db290a43bbecc

SHA256
ed3245104322e22d24b306edeeae4dd6ea7ffa3bb314098c6c54b54587765e46

SHA512
1708c03269c70a80fd401a25f3ef411a36db72a740bbb96c36938600390333963d7c9a961a06044d1574037a4384f185a7b2a46192d7fa08a60b066dfc99c670

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
492889773c9c88fa879a9c107e6f5026

SHA1
8eb7f30ecc02adb7f4b17f6a761ac7d33a991595

SHA256
8c3f93fdb769bc96fd447731f6d1c65a8d8eb4a011c30732802728afe5877c9e

SHA512
926048208d1a60fe489b9d34bc73829ae05f58a9252b96f969f8ededc7495a5e584c44e7e5dae7061b4602528c16227fad33c80f41646919fda86d70de209b4d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c93150bd51f5e6c48d60d526e20143be

SHA1
60ca0b27e5b10879d5abfb21b28405a0a5e29576

SHA256
61fe69ec0d7e6fed6bb77dec106aa0f39542f24e93ffd87cd307c758a6960feb

SHA512
9c358ac23ceb191da49f4474b668a4f236e1bbc0a90434c40604acc4ba22b50a09fc679ac0a68ae0154c259dd4b6bf55a0ad1e2bb8c78c61daee205601ff3c9b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
96ae5801817da27ffda68621889d3264

SHA1
092f801c61870ef9265d5055cdc02a6574ccf044

SHA256
54c576aeefbfda27bacfa0cf93f441bfa0c28403bee6f2420aad1f5d6bc57eed

SHA512
9ebae33b8c7bce8946bf9cca3222f1401ea1bb2ca30505fdb6830cb743ce19731f1d012383904bc61a3ade403c75d5f9221b6a34a366a8556f8395c646d521e7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
975d094fe066847c68d2b0fb192f51ac

SHA1
14f4c3951c4b32d0503607a29e819c4f8e216e63

SHA256
f30af77488e8c8d9bb9328740192e3668aa08bd4fa67010bf8cc3bd8696b5933

SHA512
919be3c367a17eb7ed134de9582d9ee757f73dc27dd317d76b23371267dc2697d496116f292e3af1dde4792552dd231207df45ecd68326f67b2d84fdfa1c740a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c9d5abf99651df3ac916db30d62e97dd

SHA1
07a3372acecbbecff1ce574c259df45d1b315278

SHA256
16aa6364f11f4d11936afd766deec1f16974fea0f76c27dd4b89bb41f7509a4b

SHA512
8b17611bbd73bcf7fb8b83a672d2731e1c31a025092ccfef0740afde385bf1e0af5912b0b4a98f8c9ed23be2839c0d6dd933da4f919654c92aa99303cedb7282

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4641353cbb6d4c993029d1b5d46d02e0

SHA1
13c77373b6fb1f45399ec206ee09332ae9e095b5

SHA256
8095c281f11dac502e50828cff2e7a76bab90a7dc98035c72244977607146ebd

SHA512
1e33406b5c201824225556b4c3034afda4734efb6ffdec23e7b27cae52381e1d6734318aca3f04a68e7703d1defdb83eb9e68b1c3a42ceefbe74cc624e8cd3b6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4a852cbcee8db6a27697c94b4fa01bb3

SHA1
dfd4dff7ac970e49d038acee955fab722a84329f

SHA256
6fe47af2fbd5ca5b3efc0b1eff178e0f2d6a468a0e170dd33e970d86f1ecca34

SHA512
953c4cb4a9685e23435e792087599527dc36ce04d9aa6f9fbde5fe89151ae9b815b324dccb0f2d1cf319a96bf07df3748cc3632f8faa83d5cd58ed14c708ead6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
29a2d53f1ad4336598f1b71098d446fb

SHA1
76d8b068b3e85350e60dc32962450ba2604480d5

SHA256
19a2742661649c78b0849cffe9ab750e2405deb659b64abd29888205cec81ff6

SHA512
8c645739bd65fe4893f49de4104959c076c474778b83c1b4267f7fcb5b123e3de06e58bc62cbc2e401a4f949e93b43f6da6a15303af49169311b8810f18558d8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a9a7df5cf1b19d882d29d795765526c7

SHA1
8b30284a22c46fcd3ee833bb323bf76b0c4ef226

SHA256
11697b151cb8294695f1fa1e9d495307516775f78b4c90598943c784af1957ed

SHA512
f43412e5c363de15decc680add8e9df2144ee0b311e82a72d9b7b741c89b395f028249d1f82d7d3f4de105cf033abcb1fc1f46c44c5dfe9e14c52eb8d59f0694

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2DE6.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2F25.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit