076e637e8ff24d7484746f618670afc3b004c01fa760d9439f3a20ce2a635e24

Analysis

max time kernel
118s
max time network
137s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/05/2024, 12:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

758b511bc15a7a129c6cbf6bd9253ba2_JaffaCakes118.html
Size

2KB
MD5

758b511bc15a7a129c6cbf6bd9253ba2
SHA1

5800c89e6265a4213359aef20e550f7cbbff0e7a
SHA256

076e637e8ff24d7484746f618670afc3b004c01fa760d9439f3a20ce2a635e24
SHA512

b0ac95e29d24bb31d736aae11716e82f2bced9c291c1131ee2ae34658ef43d111d81a9e57f6b1ba47dd68e7e39eb16aa887734ccbd84bd70653316bf6362315c

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 34 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{EC27D901-1B65-11EF-AFF6-E61A8C993A67} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f0c8dbc172afda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422892872"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002842af857d57194da1fe5919b272743e00000000020000000000106600000001000020000000bd031bdef51d1d09b08462863ee02f056e7400609be07b78baa8639c24d2b5ca000000000e80000000020000200000001baf011157c52dcf33dbd0faa9add7b61f8b179b836298340e4dcc3aebb29ab7200000000f2252710eb91c887e4032b1a66262643beae90357cba7ce87833667b0fd39ef40000000cf40ae9a4dbc57b8c9b7d5fbc0b4edb319f709fb1ba66b9f3ceae8bef403af2252ed90134c669015c190b1bc63e619910212b81e6de598d85655d36dec24f7b0	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2292	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2292	iexplore.exe
2292	iexplore.exe
2252	IEXPLORE.EXE
2252	IEXPLORE.EXE
2252	IEXPLORE.EXE
2252	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2292 wrote to memory of 2252	2292	iexplore.exe	28
PID 2292 wrote to memory of 2252	2292	iexplore.exe	28
PID 2292 wrote to memory of 2252	2292	iexplore.exe	28
PID 2292 wrote to memory of 2252	2292	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\758b511bc15a7a129c6cbf6bd9253ba2_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2292
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2292 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2252

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5875c4dd3779946f9043e555ff0d1df7

SHA1
3e91b23969d9c2453dde6746851fa5bb65d03f20

SHA256
c5434d85ec8c5fce3fc9655dfd9d03689843d43f1ddb0e3ae072f60d14c542e4

SHA512
3a3915b8e6e067cfb831d5c8355c87e0ac03cc5cb8eff88a3af5a235509e9ccb1a08784c0502a02a497df64149dbb9ff55a6603dda72a47362e2680fa19ec021

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ca3475271200be3fa10d13922f28af48

SHA1
76ff0054c97a5a9ebfd9e398c205499c87f03b38

SHA256
5c4f85c4c90689b23b339eaed29bd3d10d95758f902080d78e4fd2be509fc6a8

SHA512
23812a77c964374506548be662ba726e8d329eb2c6c12d8361bfaa6e0899f28b3a11dac23e0c5d2096acc0ba2243c6aec47805273f545237ddda6d8c8d0d40f8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
52df3dffb65788770b30724f540f5aee

SHA1
3b5eab95cc53715cc7151b06e3f927cd5011a471

SHA256
86440e3e7925279c089efc3b350cc1d8a72b2626195a859cec7d590b22be16be

SHA512
3f2dd2548424026fff2338d405449b4902b16843f90328cf099b60c9a337840202fe8a3e92bb52012ca99bc6d103a1b7f047aa089efaf225d635eb65fad10d12

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
84466bca4419e3c74be928342a59a9b2

SHA1
5a236e93f3bf3618b117622acc6d42919d1da42d

SHA256
29f0924ee2e04cd3525ffb75c19098b1cd8b8a33fa933cc9522133ee488be84a

SHA512
85a44a0261624be3b1b4b4621e58113668a7fe52231921f32aced7a1443523d179e61faa349787cc9fa9a65536a4c59891ba0962fde654939ea030f9a2ff8fab

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1be5b91b47f677728e4b2546cddfb326

SHA1
ba67e93ac03719e0fa11bd39bb2f1f56d139c4b3

SHA256
bced5708028d82240bc417ce8512963ea6f9d5840cfae5572ab11d750f8f37b3

SHA512
0265b680951034956ae4e3b03e11f5deaf20268fc383e146f6dac4755562cb245af8954d468eb4547013c9befdd25bea00f48afbe77ac900b234f8321a31d98b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e86fe13fd9d8b680bbf0b335d6982054

SHA1
5aa591d44c800a4a5c2cdc883e77c2ffa35e2153

SHA256
96bad61a2798cc3cfc2763d1e5ebf040321c2c9ddf8b7f5bad7ce666afd6780e

SHA512
6c77345622e260873e2c9e6a51d2088bf471fd10d0b4fab53ae70f1c5df6be291ff50db99acfb10eed61f929a6f45e93240e889239e0ba7632346d58a2e1996e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
49c83257c5bb69538220f9c4329fa309

SHA1
549f059d9531fc85d714aa48a222a7d2676c107d

SHA256
4358a1e673178e83cc8faf9c860b834c8e3c95bf23353e21244ea27eb0a925e6

SHA512
7745ad9813acf73c97f0212d7c1f15b24517270c76dc756deb49da52e45d424549b88ac68b176b56bdab60cc4171e0a201c4666d28e11e8d0a2e0ab4d2a7100e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2f31c000337e2114b9d8aca96a25d9f1

SHA1
ebfa6206dd728a6822897746dc7955a5fcf28ad4

SHA256
79656b243a78af692ad49a9869566972d63382f3183ef61ee6f7e41f4573e6bb

SHA512
c917f9dadc0762ee98ff956eaf9dcf1521fc63d38e33a5bb373d4a1bc59f594d9bb4bdb71e68c98f4526df31629c96f8ac4b6cc7b3efea347a96e4d64b511862

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6fa168105a611710ec697e748eef206f

SHA1
ce05d6e0951a480d86cff3457c7588dd3f0513c0

SHA256
62e04a5ac32fd5c79ca10486d3ff7b312fa22bd0eaf64b33c9902a177f3196c2

SHA512
976ac368d709e5d2be788321b1cba453d935ebbbe1623fde13107f884e58e0b9b9f5fbbd7201b47f949e3832793fdb4e3ff039d82d6ed8be3f6efe0864de1133

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b5af0e5075ef7d6f072056ec642566bb

SHA1
44c0a5b3fd3189b0d2fc8949e32d46ace62b9149

SHA256
51e44825bdfb6d48a93a88e9fb5dd3d62a5bcb602c18f528db009626f5ed236b

SHA512
edb8f2e1eef0025831faec94265fea6d3ede526bb7091c92156711bbb6ac6b2aca6e133165fd38f8826090c50e7de10dee2ade2f735dbd9053700f3d5d6754e9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7fe7bf7ac765ab5bb6c9803bda1b3d7f

SHA1
d405d073e12e4fcd2b5db39ea9af0b25e829b23a

SHA256
be9b5e8e04e7692b83291a6a81bee82bd9baadfac36ac763bfde37277cf880ac

SHA512
4e20555a0afe3037b0d0a0ce77241f927e0a2829759b35f8c8448e1e66f4a2e91bbdb613692dbb7790ff69b272212eab2f833cc1c8eedc1d7477cc4ba4f466e0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
15e62adebd34f5ed1e56e9dcdf5d7ff6

SHA1
cb016c3652eade448c306ed5d263441aa04144f1

SHA256
ccc1bbdc47d4b456008048bded27b757d6a9f71625f9e1b8b7a24cdaba6f69fd

SHA512
63658b373df827380c77fc82a4b6c2a2b53f3e3ec96904791397e4ba10a16ab9c7416ec174ad0bd06b2dd5e4fe5e0a873dd1064d5fae075960565009a5bc54a3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
455c32486a62215b164fd7b844060355

SHA1
f4ffada5dee2fe733e5453f4929ac0a39536b08e

SHA256
9a3ee3f8042790f8abd7cd9feecec9b7240d73bf0935ba0036555c0cbfaa992e

SHA512
657897435765653c37ab100582e3785858f0adba3da2f37febab0e4bb0b14c93e68216b52564cde04a72ce2bf8ea49c721b18485a5bbb887d29fcfbd26ae887f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
86398adbb89c47a7c43693c4e6b50e62

SHA1
4c0a1e2cf9adc1f01771d1b4c0bc81b53693d79c

SHA256
c2183e5a6e2fa7597551c7017a4a89d58001634806559b161a13453f3d89b080

SHA512
6b4290f875fe625dd3e5ca5d0aaaa53525afd41d697b4eb50473a784997ae75045eee8a1eca9f9781cba45ff45cc0c57fa74881fc55a3235c736e783ad1e49d5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9fa8d513b4cd10f704a1c52c83eda244

SHA1
ea2671f0a7becda1b379519fdadfbacb1b207fd6

SHA256
01ec13f641cbea39437d4f3388348d98879f1031f7a2c0a91e8072a406415529

SHA512
33f7399bab0319a02a3a1911c9c39d5a70088eacef72d2ba535c776841163a6912575d6a1c6cbb1183cdaf6dad7535e148f292201e63404353c8514c1c692740

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
83f149fd50b586e30f6f333c6665af92

SHA1
3591385f628f40b900f29a2495b0b1174b0c2ae0

SHA256
4756794599348bd2ea60cf6bd89e1c4d302869a49b65795600a75e5c7bf17fae

SHA512
b3a633a6deb76e72d57d3843e55c3b30c7284e5fb5b1e94e1003f07d55a23cc308211573195675e56f7bdf1e45b27e7a0c31cd185624138688de0ef85eb6e8af

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b90e253785295271500bc4e6331cc3db

SHA1
558c03b13932618b1ddd3518a9022d6ee2091952

SHA256
d19f5f2e9fc96dfc9e47eb69a3213edc4b2f6484323d4f768a1813e2811a01a1

SHA512
03ff4dce158122878713db977b680c0b31fb597de3a33055b1371071674c3bc6dfa5cb9ce0df75a5a1d8b44e1ab2fb194bf4ab344b132f580037ba673ac25762

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
76d19701067cb9c32693bee0d2a57784

SHA1
1d62cbf5053dc6f44717e3af5679dded44f1959f

SHA256
f806a8bbd3567bcb7545a043fe09abcaa30b70c1aafaf9135357be0747f19d3f

SHA512
c64499c9db923b7b5ed920b949486c699f741fe9f2700e7a860c2b24830168dc6e6c9d061b571d75d0812486bd0decd5abc7655254ee4174032b506411d06d21

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabB27F.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabB36C.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarB3A1.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit