f35bc210f846deef60f1a3196851e645f2b9e68e7792e474b97a1039fe1e7c2a

Analysis

max time kernel
133s
max time network
127s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
26/05/2024, 07:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

74c824cb3598b4905f6df5a5e805d546_JaffaCakes118.html
Size

461KB
MD5

74c824cb3598b4905f6df5a5e805d546
SHA1

32bf0bf8f89f62e384b32a19b293d305ff31f596
SHA256

f35bc210f846deef60f1a3196851e645f2b9e68e7792e474b97a1039fe1e7c2a
SHA512

86acba1cd04f9abeff12c648b52b151d918e712b1672fe57febde460d4f672cd700912f02a4d9af7471388f25ccb212e9612c702136baa3221d0911a1b426b50
SSDEEP

6144:S8sMYod+X3oI+YusMYod+X3oI+YfsMYod+X3oI+YLsMYod+X3oI+YQ:h5d+X3O5d+X3F5d+X315d+X3+

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{FD97BA21-1B33-11EF-A5E3-DA219DA76A91} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422871426"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000f22fec26f117ed784b0c1e569ddc60e44bd09b28a34d8f88dfe2870ccf05e681000000000e800000000200002000000033550ec87c47905582493f964f2910ea23a2512511b8fa500e88bf6c79563f0c20000000d9170fbce9000d2ba8e11704126ffda87119e25384f1cce8e4b65d65a01fc57e40000000cd3724e7560410059e7ca648bb99ecfad869548cacc61920ffdd44cc7b0c6d4b6597cbf6833e6928411e26418e76ffd25038e4767f1b9f449a1a7d3d89a0e962	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f0a92cd640afda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1644	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1644	iexplore.exe
1644	iexplore.exe
2996	IEXPLORE.EXE
2996	IEXPLORE.EXE
2996	IEXPLORE.EXE
2996	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1644 wrote to memory of 2996	1644	iexplore.exe	28
PID 1644 wrote to memory of 2996	1644	iexplore.exe	28
PID 1644 wrote to memory of 2996	1644	iexplore.exe	28
PID 1644 wrote to memory of 2996	1644	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\74c824cb3598b4905f6df5a5e805d546_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1644
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1644 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2996

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
99c70a3edb0a276fd7238d9164a75998

SHA1
444da661eac83a676b4e0360f61c19e2e2e1b388

SHA256
6611fbb6d5adf2f7ed41d9179ed05462f3c7ac969cad731f711174fc0128ac15

SHA512
e13f4b16329bbb5e472c22e7ad13f0349845d8f294e3f277f6fa6c43c4aa81f7cb56d42744c22d524ef555191f2d766b6661e2baa1234dbfd89b58bcb45123ea

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9959317832a4ab7c7193118d70d73a91

SHA1
9d943e1ff245a99a58695d72817d11029f0770e0

SHA256
444a69489bb202bf8169c5e5cef02dbf6a7c7728511eeaca8dcea249bc5f5d37

SHA512
bfa84995bf2fba7b93f2e4c8947666e879fabd31101ce8652add6eb240a8975e8cc00284f300597f4d60275ff80045fb85e7cbf22f54b4987b701ea18e567f6a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
12d7893bc966b681a992d46549d1f663

SHA1
4c91ab6d6372ec6a9ebe4d4553bc4284331bcf82

SHA256
489ae85c096412a939382da38ea414e9fada8575bba817190b54e62d0838530e

SHA512
203ef6fcd4d492eef0241671c3dd6649152b5a2ebf5283920aff0942a9e36f03fbd821bbccbc8a5a5c6304364e03e9a9939a250223be0ebf1f42cf52ea470067

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9824e4d2fee81f7acc375a8b3652a8bb

SHA1
d24d9f3b55d11bf042ca59cf1edefc1464a3cf1d

SHA256
98c35e6fa62b1c66feb29c61c7cd7fced6ae61a158bfa0c747e401fcc169fe55

SHA512
232dfdd11d7c4d5dff63da3a987264db1e98decebe8dc0d1593827a87edc0951a3c8d97d6d1375150669293e4eb9d50c9c54cf913cf0b0755bf6aa60cfa3cbea

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8ff48bafc097bfc3d18a99d2bc535c3d

SHA1
80d484a5c8108fe50f3bcdb483554b52f33c4710

SHA256
dbabd0f9322a723e573d1dd49bedabb8894f17b9729277b9bd93de7c2f3f530a

SHA512
a4b85292142106fd9318081df3de239582641ea59ff9f54fc0bf0ae5fc99c003dab2560c6300e98c418cb46f4fc0a2584199e4cd0512ea64f495e6168f3bc633

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c698069748b069f43ee87f662cca2f02

SHA1
08bb73d87e9253c9c7bc25903a21f5254f4fa8d0

SHA256
5119049c6270a65d451f2246f497f64eec613fae3d045c9736ddc5c376bc2e61

SHA512
2c4ec569e00652e9976734f2da16ede044bb91be96eb1dea6e9ea3c61068781f0db03bd2d7d14f680fb9ced175b6cbbf534dad90fdb14c701b39e8149495dbb6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2c4cd0e48135af9ebbe4a8594aeb9f32

SHA1
ece4d5d1cbba5cfaec8aa6b4d3be45d133d06661

SHA256
298f74beacbd1442e02c08c307dba591fd1c735c2b5f30554f32af53a3f15a08

SHA512
1d671578d3e7ec751057653a959d59ccc9c06a6b531bd290397ba3dc20f24c53f409d6d6d1fd1f603b81bc8d37ed31aba69028b28ffea29c16dd0be997e82eb3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
18cfdbe7d29591654e1869067408d32d

SHA1
40e0e2cb9cbd715ec8a88ee9eb6624f176144c45

SHA256
9238a52058cf4c7bbf95e47f924f058bdf25210b1b7c8a0af6eeee14d0d03a25

SHA512
8bef1f8127c4256b7c9a261dcb9669e9955a18fa71e01cf6e3bc858947c9e4530fe08ed3afe82e0cca61b2b84572aed15e625062f48f0a8a1d7e21d62b4ea01a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4a291f6b67682d2fc6f2e53445cea419

SHA1
52414fb80ad95dbcfe8dbde6f50d870226e2abff

SHA256
3988210856bb0343fbc2c681003ffcf14484d21c919afe9274f3c0fbfb79840f

SHA512
4cc4e46497457b5a800f6903d195c3bd5eac38014dfb42c89e8aae3d0cf3b17a3ded9b350919f08123f44f55a1446b844f5f5ee24e84243744fcb515f4e9d82d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8617871220cff78b9128233b9102a8de

SHA1
cd111490e07dcda7cfd898ee9056e31f35098493

SHA256
7d66b68794a7ed411f13abd964fc15df65281573a4b4ce38a9def14855ba1e33

SHA512
939d437bbc967b75d2f150a13f82b624d698e710d2d09b78c85602cb8f42660f259e3796e6b3bc7e280efd7f116df5efd48d52c703d7d91f53264825980d3e5d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f71dfdad4ccf0e868b41abe9e4e3d2f2

SHA1
2fa8e3175be5283e9992cac12e725a3ddeef203a

SHA256
04bd562261e704e1a00b94b700d42947a1765fccfb3d2b39b0b8b8ce60010842

SHA512
15775f61df72dc487f81af3d389f144fabdeb3656e29b55bab6b6027f269674a70d4da2a44c5b56562ddacf906763a430773fbb9fafa9741d30321adddaeed28

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d2e650bf03e9c59921bae5e6701d8159

SHA1
3b707587e84dbbfeb5cb73f30725ac69f6a2dd30

SHA256
cabcdbea882872b3b3159984a3772a193c1ba8af833a448c0a919f0bea3f8430

SHA512
9a47ae4f47ff2b28322e39527988535397be0101bf48ab6e89f50b559833618cce5697c14685073320e4445be9c365ab996fda07affa67cd30a11157483e0bec

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cc2f2168108057623c877823542b22a2

SHA1
ba1fbab0524df1435a1884597372abf3491e1fd9

SHA256
f97e01166e2c5330f0668d85609b6312a30990e1d144d518e00bf2f794025ba7

SHA512
091f9cd347b3e382ded161694e31215881c5f89e1ac9b56dc6c9c7f64e4778cb852f18417f715ab98227052ba06f137219e660bdbaee6f6a9437e1bf09e4d011

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
951e466960658060cb7999b10169d0ee

SHA1
cc502054208cc5ab1b312b48ef5aa18979029826

SHA256
b7fdbc05b9d035220f1e0488206b32acb945fea73790137df09e269f44b8e0f5

SHA512
1c723e7d1e9980317fd54e5b99aaf69e891693dfd8658a2648049e1672a8e0a6281df54c19b8b911f9a56610028db761d8ff6d47fd59a0cbfe645a9451806b10

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f658c3b731c9aeaaef8871d7585ccf06

SHA1
9ce2bb4cf10b0e0b80f7eabe3b23fe0728172199

SHA256
4e6815632c07681c7f6d081fc2964765a76098f84aaed498c50a097f0a8f9089

SHA512
4e9ca4caaa34e21e84d9f30a70fe828a99691dee4fafef72ca712c51d87eb5245c0c45eb2deaef22d93f3d815a6ca18bac61a2efe6e55aca7c5f3b3577c92f5a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5ad10a2f1c0d9594da5743e42f10f767

SHA1
8a279238bdb2f2ee4861e32b8c15b34e133080c8

SHA256
939e6bcfa250c538c064a45f17153291d3a0190e233e4f60a192edcf0099e8ff

SHA512
05940452890478453947e38780367c5556ec73a6fde024d95bc7cb103bee069a931a37d34d7800142a428a869719d412e5169a64681bd7d9770bc46fefa76833

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
747133d9aad8071247a6533acd67d7f5

SHA1
6344a2d20150571d9d644ce6e0bc34f26c125c25

SHA256
487b2ea5a99688e81b62dae353af7db9cbbe44a270a11c7317c153f5080c8467

SHA512
a4a105b4280aac34c783b8c7b932dd66c8eebb47d7ad723959f0afc3d6fdc9eb0c9ff182dbe44dd8aa3925728ba505ec1a0fa754194d63febc78ec273448bcdb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f30f25e294a7a93961f2052e1f46ad83

SHA1
13abeb0d0167e95482a1cca300e9ad40cdc38b74

SHA256
4d79bb294971ace49e62993e4a2c5fe70eac588163085a241c0658952e904e35

SHA512
19ae55813f60b3878224352fd5950f55cac7c10088bb15d516e5b34f3a3cc6212ace743989cb35330d6341ff1fbf0f4d2694284404157250fee53b7f6d5f5f8c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab405D.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar40BE.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit