1c2efce4256cb87f396186eb8e9656cf80eb6ba8256919e35594dab8be7d8e9e

Analysis

max time kernel
120s
max time network
133s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26-05-2024 19:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7692e45645ed7fc9335affc085995ea3_JaffaCakes118.html
Size

461KB
MD5

7692e45645ed7fc9335affc085995ea3
SHA1

ba28abb84158453f8e7673336bbf1c6069fb79f5
SHA256

1c2efce4256cb87f396186eb8e9656cf80eb6ba8256919e35594dab8be7d8e9e
SHA512

fcd1727cdb743f6419b89f3140bb79b92cc45d754bd28b2dbc025501037d715071ff66a1283c5c0dc03cd944666c81919b306dc30d8e97171d2465d06c161034
SSDEEP

6144:SssMYod+X3oI+YQsMYod+X3oI+YasMYod+X3oI+YLsMYod+X3oI+YQ:/5d+X3I5d+X3W5d+X315d+X3+

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000b08a03527b5e5b4b893c39b05eb719ef00000000020000000000106600000001000020000000ac626cf9fc01847baa54a3d8f366778863b49245f760bc831eca81dc3c925c55000000000e800000000200002000000063280ea2bb68ad0ecbebb503669959c0663dddbc9f976fc375d26f3dd002fc662000000056c8c0bb657fdae0c32cb686c7b5fb1348cca3b5d141ac588c1e772fef11b290400000009c4d0225f81bf1488a92015a0cbcc2e09d487257d572f6202aa72e5210f3354d3699ef56e1b12e6712602d6ce030be309319ddbff4c4e888b136a43360523945	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{59085791-1B96-11EF-8C47-FA8378BF1C4A} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422913671"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0eddf31a3afda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1932	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1932	iexplore.exe
1932	iexplore.exe
1312	IEXPLORE.EXE
1312	IEXPLORE.EXE
1312	IEXPLORE.EXE
1312	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1932 wrote to memory of 1312	1932	iexplore.exe	28
PID 1932 wrote to memory of 1312	1932	iexplore.exe	28
PID 1932 wrote to memory of 1312	1932	iexplore.exe	28
PID 1932 wrote to memory of 1312	1932	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7692e45645ed7fc9335affc085995ea3_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1932
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1932 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1312

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
38e9bdeaf09d15162c6fe6a815e74b63

SHA1
28330e7db5e0ca496dcd65650ce5e9dbeef864d4

SHA256
260dda974724afbc3e568c356bf509a589ddeed618d841ed0becbf29482bb9e0

SHA512
cf928c1063200f996ad37662a28d7b5e9bd73472b3433d5f18ef6cb69235e32738984e1b92f1e05650a7542483457932e6089d6255de1afdc198b45e626b31e8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
006da8b1a54c6bf0ad1ec6fd068c0466

SHA1
d75ad822f82663eb3ca1976786d03f18fe416c7e

SHA256
1b2414142e5d1fd75de2153e9be7059247fb15f66abe40e3d9f6e16c9eaf5785

SHA512
08b50138f56ec27cad03dea78e13581144e7db3448a3031075f41a1b70d2a5a4fd2b432d1a7e532f538c29a5628c8de2df0451e2871432381ea28531983cdb66

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d10ed95da067396ba7f849f237a9beba

SHA1
0258d228d62c3c601d26e97a6089e074577312c6

SHA256
cd00b134f898edc2c392a3c63d1cab0424d8f4250f4a8749f10096f4fe8e1f5e

SHA512
fcfc8460c37f840b0ff4578b12b4937cb24d3f5735adc39887ca94d54aafa00badc772622aedebb74261ff871afbe122321abdcf7dbdce482f36d10bc3ea1297

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9949e9f0d0d1689137f51da026c65dfc

SHA1
db0e715c4f080245c67c6d3ee7c9e4230f8e4c85

SHA256
1a68b4a4090d92717d6ab9c6ec5f6f0e89e1398b9a5d08c606eebd6abdf37f35

SHA512
b2a43395427497204987470bc362c57d7c09346088888fcd49153c73183479496abdb29b9b99ae8b3e07960bd3842facf346090b0df48ff1aa45812622240788

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
1f5487cbb5738dcbc078657cce80a039

SHA1
fbba7e958237de2f7726ce9d7b060377d6c1cff7

SHA256
448af744924cc750903d89c6b2bb79961f750f369d1db819d7dfeeb6fb41d2db

SHA512
6dfff47da1d99046f11931183a8fa3af7e1119381014153b2acb162b5a503c33811bc69378391078cc6c91364b8970c410bc8d8e2ef2da034b9d69050df9c4a0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f8562623f1619344e11e956e0435d96f

SHA1
8f3de360066fd3ae1a0655aefc612a7cbdcb4c8b

SHA256
c71762603ebbd2e1838eef29f2cd64f3ca4d8a8b5981dc1f011959aa2810f98d

SHA512
690ca5cd106ad285949a3148a9342a5ecf7d358c30a023c725b1aa2ed22c4166594e935551ccddd75184a6fcdedbc7dffe40e57abc14089c8916dc71c551ef83

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3488c682486a037821de97662b819876

SHA1
ec85c3036d566a209bf7686b8a920327a70833ec

SHA256
2eaef94e64c01ea57b7a601793b4e2c5bd10f50f38d41cb5a61a98f609aacd38

SHA512
edbb2f368fe14de89780e54da7799fd4b05fca2f6558de0947e1696753b8e824db49384fa65394d446184b211dda91dc174c0ed4326317d38ba5743cd1f36534

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fc5ed64216b190debbff560102bbff50

SHA1
24ffc0016960ff44478d10190862bf93a893e467

SHA256
02ff2d2c5a5a1e791dc8cfdf8d51f62afbfbb27b07118211b0fa870f881c9cc4

SHA512
4526deb4e2beae795a7db86cb6d461c899cd2569261031557c28b7189c9c91200b4af5791b08578fee040059db440f3659847d113ec3343f717276a4df8577c7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
77b633872eda35287db4dface774ac6b

SHA1
3603e98652652faa94eefc39a6a8679bb3a2a0f0

SHA256
ad5efc38708df03113d77165648dd6803580c2da74f7ff325a0f06f6cf8d1e30

SHA512
2b5c926443dbbdf626b346b946c023a48d37cbe0019d4e5f36d2b4b3e36556d807be9f34085b7c6f2a30fedf395c699a9ec23292037d44ee3cb8bf92dc415be9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
457490debb45005e8615ef30bc117265

SHA1
fa15ee8561d5bd311a7be9063d867a31e45a27af

SHA256
bf83029d7315f2137f35f6ae09b8289a3e63010d07708450efa684fd32ef60f7

SHA512
b0dcaddc6d4fc3caedcb43f52c865933e93539a9ba3ccd581702a52f2f5ab1bdfb0e588bd67e7a4553e4105e6f0f40a5fb5647ff07a146daf643c03b608b5da9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
af7b924a3c3424eb4c8536d27c89be70

SHA1
865dadd16992a9765ffa87e6486b89119c7e77a2

SHA256
6e2c78f571aee0e6f29397f2dda69e9caa37ee82eb18ae8dba02bbb22b70aafa

SHA512
05f9251639e985528f05070bb62b815ddee9356c88d725b9ed74b61ee67709ce0db573b493a80feb78a9da6ebb7c4b7ac801dfc2c0ab6203b0fd26bc7c881c32

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e1b21b688ab4bc7e805307104475217d

SHA1
532af52ab27c8bf090c0acb5c0cd59eab9eadbe8

SHA256
1b3afe77342fb1f4fc0a14b3bb0d888a10eb4dbe65c214cc3fa5ed43a6e61cf5

SHA512
36d55606601ebc6c3a0eda769aa064c7b3664f6ae19d53e406a60e1a128bb8a5f3171965ed32cea24bc0a4ee33ee47640befa8cc862de523c56bf5695949e118

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2fef3621418f5d8cdbfc61717d54b8e8

SHA1
ae2523e93705005f2d2a53a7ddae658bd1d6fa79

SHA256
0bd1cb5eb17045fb574b95230bef90bd3ac5ac9d66b27e70612645056c7dbbee

SHA512
71ad31c58295381e4967ecce7eff1bdb3a15e3e03f1c36bf3aa4dbc2ec15ab63e3e612284c02c2b01298af73e4f618c898a5b41ce8a247e075a7195e811dfddc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f12a5511eb28b2f4c7ca8aa265d21d35

SHA1
970dea2c9661ed4dfe8dcf70079772dbcc84ad74

SHA256
e45ec1f632cc6aaffd3a2b4dd74916aef3c814f96804986ad3909733232ac5ba

SHA512
d01c2bfeeb9d3901b88abe8785b47ec1e5cd42c08d76d7315b8820dfb94247dab801ffed7a07dbb321e82bf465622d609ae28b8db95ee572f68aa1e5bb758a9b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7530de459594f1eaf07f6eae5dcc1876

SHA1
64f7f8fcd4d06ba0aca9ecc9a0206dfbed60e954

SHA256
ac065c44ee833b19934502c7d4e832eb870ceca6a4ec67d554fecd6425ca463c

SHA512
d1e90d8bafa98c007d093b5c9d10817bcd381f4d62997e8bf54a49bce75f163e23c1f1d359385b886d75ecb7ad5fd09645dd23a860a8503acf1976864a3909d0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6c877a33be8f1da53e1ebe49d79d8d79

SHA1
d37186bc22e0f4f7f01a507bd0ea9e37dacb0d7b

SHA256
459d9b7acbdf4fcbcb675f1bbae66e0ad2e4285f3eb4dea8c29bf0b9ac73be1e

SHA512
d1f024f7253e49262537711968373daa734698da43f32e8c4cc8a05e427503003d37c9bc95f59636d4f08f74328de5bf807c7ada572ae31a4f3316d65c42c996

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
79d21793ab244f8cebc2ada209964922

SHA1
e139abed2f6f03bfe51d111756d96676e215fda4

SHA256
b6613991bb0298694f3c477a96e6cc028fda8cab3698c6a0ae0b00760720641f

SHA512
9c3444eff4a74145fc6e4b29ba8779946f3d2dda063bc50a79ecd0a6b4a9b27a98ff109c8b60f17ddbebce931d605979ab45c48026273bcd1bb089a9529d63d4

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabC0A4.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabC20C.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarC28E.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit