201085b9a1dec25324b7365404684d58f553b39e056075c4cc3eacede955bb2c

Analysis

max time kernel
136s
max time network
133s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/05/2024, 22:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7e9e2b4df35d5955b18c17d2ebecb925_JaffaCakes118.html
Size

18KB
MD5

7e9e2b4df35d5955b18c17d2ebecb925
SHA1

6905d727fd432de5e6fb6d7e7714f8054f910955
SHA256

201085b9a1dec25324b7365404684d58f553b39e056075c4cc3eacede955bb2c
SHA512

a6eb4acf63346c71a14d87d5695782bec1d77dba427336fbd3421a9f678ab3b1c2f70191cedbbb9446f4c5022a33d7c241f78888ceccbf1858bd70206967ba39
SSDEEP

384:wGnXYVinfFCQuYfsLMCI9se8AQEJ+ErRamcX:jo4fzsrErwmcX

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423097096"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a05c9b404eb1da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{6ACB68D1-1D41-11EF-BCB4-4AADDC6219DF} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000099f7ba462c0ba4fbd27238926e2b3c500000000020000000000106600000001000020000000544c56db34514eaf686248a5ef6fc22a7bea1e8f32140352c0805fa323f3948b000000000e80000000020000200000004f516f6e4a3c879b19993c59653301f3f4287740e5c0bca34b3bacabd37e88772000000073da87ef1ad3481e947033be2ba1da162c88b940e9107e8810c4d85b54a777fd40000000a0a23795c09f2970f197b7a70607cdca70470a1222729c405ee1b505cc5fc116caab56e5e4f352624175f6a8da679a4039b9e338364593a190cc758d9b578ce5	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1284	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1284	iexplore.exe
1284	iexplore.exe
2264	IEXPLORE.EXE
2264	IEXPLORE.EXE
2264	IEXPLORE.EXE
2264	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1284 wrote to memory of 2264	1284	iexplore.exe	28
PID 1284 wrote to memory of 2264	1284	iexplore.exe	28
PID 1284 wrote to memory of 2264	1284	iexplore.exe	28
PID 1284 wrote to memory of 2264	1284	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7e9e2b4df35d5955b18c17d2ebecb925_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1284
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1284 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2264

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0889bd56ef71ed1612fe9981b4f60859

SHA1
8a142cd9d148a223ce509fe8cc309b31c53e7ab5

SHA256
fd72dd0d2a04bef44a854a5d2c9ecf9acfa9e5bca3d70d04919a019859a63337

SHA512
818feb5faebe49b4f1d97419122aa9be3c7c8ae236cef936a746b4b719d728c1bd814f165193eacc0a433a0fe66241c3316a4e1aea1db680493796d7f303549a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d7e345db5a4dea6b4536f0945e105d2a

SHA1
e93035f1e299d105ae53a4e8c9af47325193c05c

SHA256
8c87a335b7ebbf954d7d36e3fa4943c97ad95be1164181a8f7d64f7d536e6963

SHA512
264be9ad70b3af2abc658ecd154ce0aeb3f625798c5eb3310c5464b550f71247b051042b5275eedc908bb2b23e5659a943f0c74ef505f69a789f582e9ca82792

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
244d9d1424da5a492b62d16b143eb4a8

SHA1
781c9093fb84af4d7c92d360d12986a57dc3c2cc

SHA256
ae976099fa4e80f0b3f88a4b830e16c15099d85e127aaf5048c086c9fd6348d0

SHA512
082772d2a6b1f707a8484b3e42599248d754679df7619504cf8fd066a94de30c2c093e488550130684b9451da41f8f1b78048793445b09df00baa386cdbd333c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b4f869432af502d99f5b8c18b75c16c8

SHA1
b1639cd8dad5afa2442300716675e981f9236444

SHA256
1f3baa0e828d4a86261a49ede1cc7245e6891e0148b24e9f325cbb9d89495ceb

SHA512
0582449c6ab3a591c2bfa770ce39aaa94047f264e12d924ffbebf3ffba08b1902a36e76fc60cfcc194b042bb4be0c14167a69579c84d7102d808f1b3f1680780

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
554db71f75373512956fe48806b98560

SHA1
d15876fd6cf1bcbe6215bfb3ac11cac7726ab1df

SHA256
38c353e4e308d66815a2886b3a82fe7f2d7f91760f45c20480b559ce7442c9bc

SHA512
08b96823c1199b4f2c223fcfb070febfbde4a4b1e5e64008aed20d4b9609facad375cf89afa5dec67079a1a9c192bbae8aa3039c2d57f119fc064ec05c1468a0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fe5f96785ff75d3fa2ebff68c6a18f30

SHA1
cc184e26dc3ace0afc67e84503b657b2d4a4bfa2

SHA256
808207fa1f2e566af0df3dd2057811972218e0757bb20feaee076dcb178e5367

SHA512
b9a73c6b04b6a3985e4775431d5b4d35e1a15d53b8d6b61519f202744ceeb7779adc62c083faba54c07b9cb37d25adb700019d7fc339cb2187360ae181086f19

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
31123e6e1910027a929633eeb944458b

SHA1
c247585abc199e8af6e39c2c449d718abfb7abcd

SHA256
7d4fa74ed4d715eb5d0e2bd0d53e91368c0d68c704aa30e974e80e743b4463ae

SHA512
a928f7ace401fdbaaaed2c77e0095f08370a1d8454daedb0a9714138a69c2124d808656a650c4e2c6a9fc65ce5151cf73e3657789039d4e71d4d73714982218b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
23d72d23c6bfc81a7f8ea6372a974bcf

SHA1
c75e4605f532e4639eb545f41ffc10d408f8a8b8

SHA256
7ea86a9c05e0aaa98aa2b71152f39b74170136e326bbc065e89967fce4322c12

SHA512
6046cd958366038386386ca8d4cbf962d2e28c6758a444aa6d638f18157f664fa8ab7d4dbf2e3e704ae323f628d21020993695b0e65be76b633f03893704be7e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7c7b61c37a59d6c411c95d9e66078b48

SHA1
23a95e5562ba980bd9e0c17667053ca10669b3a2

SHA256
9d07a5a1b970aef062e02d35793f85bda12e65c0ed6a2a56cdde828e8d93d48d

SHA512
b1197989283c7e1748cf4aa99804138af7df21c73db64d93c860eabcbcad0a73de741d0de75b55e08188ecc916de52fbca1630eca6b24f3daaee4e10806ef46b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
875a89dc3ffe4f878c51ee2fd8657634

SHA1
60202f4f9c9f126a89f85c17130f9b8e852d4f68

SHA256
d915b31ec93291eccabdc548537ee89d37580d14ef9d72adc27749e6ae0a8c34

SHA512
931cf87183ae669ecde211f3e0ed42e82fae2c4b0ce7bea085caf6361b9a1e751ff6a08c44fae3c788cc98fa99e81cb4ebd25ff1547e1b9f2e70a2d70a31f948

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e8abb2fde206e95369bd203b8e739afc

SHA1
cefe7be6fdf27aad50c434c7968a5741623bbdd0

SHA256
de6523b67139dbd8b5c3942374d782361a79cb455ad1b86c4cf419b56d566cae

SHA512
a4466698ce4a3e83f1a882fa2d5986564d3e6546864d921d24bd9dfdf05cbbdf6f704c10be58e38c69c910bde4c8bdcab4e36f171113d743629723e55f0f1528

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f3c1fc36f3c4c257fd640dd17ed17d6e

SHA1
ae35da82b7063e596546dc5ab8b0d2c5066b2bb2

SHA256
fd13c1584123f72f0931cb2957930b1921e957d33d0923934fa447b34ee5b4c0

SHA512
a931093bc749437f3f87c3a3f57886fd9d5070170260dc74419b12542d3f81baad74ba3e806eb9f16b17a80e8e88bc6949f400207fb066d9549bd23082c948c0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a276ed6bba77f5d8b64a8cf58abdf286

SHA1
9fc09e38db7ec746557f8ddddc227718efb27b68

SHA256
50785e72edfabef018a2d707e2a0b725cfbfd1918d98cdabad52c143d91b9de4

SHA512
445955165ec2c99099aa385c72a1413cbc445921e34617e55c01d26d639050820f7e41766d6e33223aa0382973577f9aef37c7ea378bc8a5a4937ea9249c90ac

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c80db08282315945a0ede48efbd7dc6f

SHA1
6d03f7eaf995fcce9bb9c11f79853e50106edaa8

SHA256
63183b17f83edddd918f2ae9d5ad687928f990ee78f3e5b605ce363ff3395d3a

SHA512
3e6cc5708b6ac29920a8e5eaab2b958c9526cb3a162a91b28fc42d109c9a68ee3e0e18deabc9b03567f0d2603798a8876b3c1dbbc363c92d466e71186d722175

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c7e7fcb9b78d1b3b80e5997b5ab44bc9

SHA1
708f8a4179f0b3c1c8e02b0e5655e34eeac05fc5

SHA256
7c5912595938300a2bdfdef41590bc8641a4109d3b05a316e04826cf494db50c

SHA512
c5230183fe1da12b96c2db0612a0c47894611f05184bf55ea4400f47951d95666e5297848a7501817f65618b4cab0f731daaa6a474146b34bf0cf21c0da8efdf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
65ab797e23ad40b347710d435e217fa5

SHA1
3fb33210f522bbf0826398dc476f53f9867f7b39

SHA256
a182229be892d7a155ae9a2d3ec37b3f973132d3118d7f90a0de289c4f555da3

SHA512
084c7546d5e07b5a959a23a2957526e8e407085f16f756ea20948566aa1ae1b409856f0c532fefaf9d89eb1e86d433b0b31a3c8eacf8be888af44ce03841323b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
990c5f5059aaebb2ee0a9cab59d0530a

SHA1
b9559aa3099a3d3d2418b3ab675cc7210229fa61

SHA256
73a754a8902869549c177bcc8af3bff8cf8a2246cb84182d7db8f953e0018f22

SHA512
1a2b9710b9e0cb422c9aca9bf44993931b2f59972cee4b0d0443c812a290a5f91bc496cde668f7a5b89349dbd80dd166ccadd28cdb1c6fa9b8fbf04ce42c605e

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabAA36.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarAB47.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit