f65f79c318a444179227f9a74ff4263aed6c235dcd0bd2f957928cf5c0fd059d

Analysis

max time kernel
141s
max time network
141s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
27-05-2024 04:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

77e5426912fc9a4114eec588ba60b0de_JaffaCakes118.html
Size

73KB
MD5

77e5426912fc9a4114eec588ba60b0de
SHA1

6ed556e9c0c99711eec1bc02fbe262854b4eeb97
SHA256

f65f79c318a444179227f9a74ff4263aed6c235dcd0bd2f957928cf5c0fd059d
SHA512

98b6cb87bbdc36de1be15e817b7db3dfd94a727fabcdd653d451e606330d4c8fa194a2b19ef738993167ce609a2595ad9f41c756307add714511fc615c95a1e5
SSDEEP

768:Ji0gcMiR3sI2PDDnX0g6sp62D3T3oW1oTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpq:J0mTzNen0tbrga94hcuNnQC

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 50df2422eeafda01	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422945863"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4D7F9871-1BE1-11EF-AB01-4E87F544447C} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000476942eafb1d65b726df3f7948d3dffbc8acc2f241ad57ec95e3ccc596345628000000000e800000000200002000000004c281a4a7e7ce04e34889c2cd4bb4774e5b9963ba28ef3c26e39b21eddc9d382000000074b29040ed356cd202d5bd86d2178ab8bf7314f9c6cea29a01a3733876811e0340000000cdab4c8a0a8cffda9c758675888edb002b18e0b9d94ba503a9bc268592b4a79b747cde66297fac71df63814bd8dba5439958412d85cee362d2a17ca2e32a4248	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2056	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2056	iexplore.exe
2056	iexplore.exe
2904	IEXPLORE.EXE
2904	IEXPLORE.EXE
2904	IEXPLORE.EXE
2904	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2056 wrote to memory of 2904	2056	iexplore.exe	28
PID 2056 wrote to memory of 2904	2056	iexplore.exe	28
PID 2056 wrote to memory of 2904	2056	iexplore.exe	28
PID 2056 wrote to memory of 2904	2056	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\77e5426912fc9a4114eec588ba60b0de_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2056
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2056 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2904

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
11230e5e876625cfaafe343847d76893

SHA1
729c333e8ca38ffec623c29f1aa55f8bcc723059

SHA256
3cd164c483cff2bf422e47a63a25b077cfa8037c9e97fa8e6d60207d4e9925ec

SHA512
ce999136a15f9e0e1e7356fb47d9b59e1e0b094398e58fb606a1356a6627c4eb5a90c8ac5c3d3d7b5baa0f9896800e50c7880c9abfb3f5cb1cc3828c08a9d45a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4af7a8de26499b822ae88dcb0323eb5d

SHA1
d56e3708a8faedc748c5fea93bace40985834ddb

SHA256
e52f83877c4c27bafde5764a5f7b3a38685ae3cecb5226eebd6dd1ae80374801

SHA512
2556b082028472a137d98ee392d345d8118260fe5c71f17994a5cdcb7529380d870f974062b7d67a97f1acd2344e9be90eb5d5961ea807b382c85f2117ada078

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ee2b8961c591910bacf531d277e534d8

SHA1
ecdba6f3f9bd7e627798e185f0485ef14fd62f1f

SHA256
e255e9c125cefbb5d7ef41f6499cdf2e90fa48ada53767e54faf2eacfb794258

SHA512
0fdc2caf97dea0e65be20b5200e1f2e3d948183d38a74ba23dfd982478c1657675d7a8a16ea5715dc7780c3db893c617edb469f6f39c424dae7a2f395337edc7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5d5b426d8e4dfe12e3fef717079f24da

SHA1
c25dfb0543ceb805335a815e669b46ccbff2d7bc

SHA256
195b718716b794ca976006d80bc6d995ae8cad4f0eb51b78a688ab2aa2aca9a6

SHA512
5f584caa26a1db078bb8dd7568328e863b0f48995e3350a00b37598c2361a7642dab906c1f55d04c59c699c3eb39b617b403e01b06bc7ce5f6f6e604b5ede289

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
fba6d5237cba5795c4495cb0cb909c87

SHA1
3ed122adbef26cf62a4db7c5a184c4a89c9057c6

SHA256
b90b729c558cea487b18e042261620cf767c5de8e9eb0fdf6f7849f3a0eac0a7

SHA512
dc883db901daa2647128cf9b5b538a03bba687213bdc33114692cdc2fe193e49e8045d0bca6045f547dea9e9cfcd9a91652ee2fd7971930c3783d48bc7db05d0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
21906b81f615b4192b3625b40fe015cb

SHA1
3393bf62e6b9d704dc2247b83bf2255e4fb5b40f

SHA256
220865f724147063584bf7b1d9ee844c25dd425ec0070c99a74238d9116b5ce8

SHA512
a60d96982fb466581fb313dc97304d3706b7b4fd1e9a9dce4e47d18b26d7e02c301283ed0598d800f94a310226a8b181ee7868925d797cb9d6aaad9b16b72b68

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
880d2f77ee12026e227705ea2178b7e9

SHA1
2f5cbe2fe9ec9ee57841db7994f29b601372b8d1

SHA256
0d68ca95b700e4062a106dc259a5033f26abc388e553dbd28ea9a16b8c11e8f9

SHA512
fb219a6c3fb2cf35c8efc90121670d6448a2614dfcd46d9366121085c997710097ffb4a38190ed16ab648e661ae49d5537bd2590963fbee08aee6d81ec74f076

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6e608f11ae9c1e148cf546093f354dbd

SHA1
09ad4752e758851f34622c7bfacf03b5264416a7

SHA256
1c2bb3c49683d5c227fc7ff3d94f25ef4276404303f38886910320e6e82057ba

SHA512
d22cb74b9338e61968608c22dc462fb2667bb9540c52ff169ef8b148029f77352eede44991e3a892b4dfd79e2eb15c3616dfe623a484abaa28f21feaffe85b1a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
92cfacf0af350b4ecef49849e9e0193f

SHA1
346bb751cbe77b4c71d510d72727f481bea34a2b

SHA256
bcf9f92d9bef92cc24f947c11a358c4cbaa96a46993d51035110c0b148a535fa

SHA512
1d82d07d46d6f167a7528dfb1e953ff0efd851bacc1cac701da2eb3149b4cb29768e87efd0ebbd87f93ce4994ec8843309ad0a5f167d19fde5bac93567f88a33

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
332274d0a6546ce4e54c222fc39a8f86

SHA1
a4f62941549dbadb84271b705b28f46e1daeb38c

SHA256
6fb8f7dc2d0d582f43dab460cbd4e131b6874248a553a5dd3d6148f93e468eaf

SHA512
f9ae2696b0b624c247353acf03a1365c73f7dcc6b04dd0441ea7f3d019ab0d574ea5a9addcda418feba6a9835dca8acdd0c0efc4416c3414d15c7a7b86a25282

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c90d6d5841da0576ec6cb54c9bdda58a

SHA1
5174a109160ad5ca2a913dc03dc34bea9e14e4fe

SHA256
b951f161c1b3bfea2449e68523f4a79699f56f88f71dcb5642540a2a20e8124d

SHA512
8da6d8d38eb313024147ff8c02cb924d4ed4256ef0e10824f3d5b230e656f9c94d63d307fde1212722ad4d48ec02e8f9124a683a1395051c87c4ddc6fe789370

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
20c04b12c239a8f8c90609e9948390aa

SHA1
49e9d34ae1197452e5bea59884723d77951d5281

SHA256
1980a99c836ba23e407c9684c025e1ef68a6ee3866ab41aee4d7bc07f8721a30

SHA512
7db771a198b83d6d2a21cb2a3bb4e32e955afb45d99c563728782aa03802c195828f2497515f4d1d31ca5c526645f3dfa1fb9efe27d7d3e6e48e8fe72d9029e1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4e004c05ee378139fd6fb228cc16cc7b

SHA1
7ec2f314cadda94e063e58a4250e8304cc33aceb

SHA256
a829c2a21578634df47d9a2d0422047169ed3ecf5365e6785a299039f40dd6c8

SHA512
6599fbee90ecea7e196de4a941cb29ba0fef637594f30c1e540f4960d67a78d120161fcbf46912d36e244a0fee3f603955a170dd286dcf71ed685eccb8de3d32

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a73858b620ccc4315d45d9cc11eab7da

SHA1
5cf03364c8ff6b9e2cb9d3d61c6f4cbe40442f38

SHA256
9d476bade09e64e9f0b40f7259323226ae1814427ce66ad0deb55f151bcf5154

SHA512
a809496d617ffa8c591bdb872332b5067f676b099c6f4e12420ea73b6dd12ff8d0580651c38e1ac896e8c6ccc1e974ac761db7808452735325858e37f3052659

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
97c44c74391ebbfd814dafd0673b19bf

SHA1
2a0d466eddaeaca0f31c3342ad5d2e2b4f9ac7d2

SHA256
68d20db83ade54ba51bca9e3daef62718f73a70dfabe64ca20eb45811c5c45b4

SHA512
e7c5d3fa82ac8f83772f71a5c4a6184b791b6d11b0a9a799474c3c3f70b0c2aff5003abb40e9c693364ab3540effad2eca7c95f35e47125b300fe884c9e40e05

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f1a71470ac6bc701c053dd4dc9092541

SHA1
fa88ee66ae0968097ab740809d7b0fd15794ab4a

SHA256
0dbbd400f4f04f2735bcd6fea08da57c5c20bd90cde6d3b282c1345f8387435d

SHA512
ba80fae7a14d5fe3047427958a889edc04239646b8333a23072a8209a722b9b91db6c39c1e73f373a855edfc8268510b27c4970d46b1b91665842e7aa0e7e406

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
009b5f6f1fb5dcc690fbc29fb2b0384f

SHA1
5a6adde09cdf7b43e45f6fe1f1f744eba253123b

SHA256
da22d93be88c2e9482f94b062a2c4cd94827976aa7c79d4878233ec73ebefc25

SHA512
12d6e36d687a02f1b485c6c457eee8e8947bf965910073eb877ff42f262cbaadadf4d0ff682ed9f41457b0d077df5721dfdfe89ee3fe5de55bfc45c4f19ace65

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3ac5fff3af3265e4ac0a2871ea5854e0

SHA1
48e672b868f45b751cc56da1d6ad20dbca348324

SHA256
f879e3a3a6669d81afea26587d0df440e2ab3150711921b2a4ad600d53b98c5e

SHA512
ad50229c2f7892da2224fb479e2c1d98001c2ffd526c05932e29071043d9ecbf25b9df95c9ce754fac1df3619119d4bd361ce5e652ffe4528bcd378784a98c33

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab38FE.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar395E.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit