f74d41362a72b622350e21ce07b660f7a11fe1115708ccc648658e8eb1e7b23e

Analysis

max time kernel
133s
max time network
127s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
28-05-2024 13:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7d1edb9cab99b6c318377bd5465859cd_JaffaCakes118.html
Size

755B
MD5

7d1edb9cab99b6c318377bd5465859cd
SHA1

3beaa9b222ef6ebf1d92edb201827ec540c50774
SHA256

f74d41362a72b622350e21ce07b660f7a11fe1115708ccc648658e8eb1e7b23e
SHA512

183dcc70f48baa667e182e9e101d69de00c07ef55fd61fa808c76c0985ace786c9259a4dfdcb9e56ef8984aa6481090430afc020228118cfaae92cba4ffaf43a

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423064753"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30f641e402b1da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{1E10D1B1-1CF6-11EF-BA8B-4EB079F7C2BA} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a23000000000200000000001066000000010000200000008991a8fa5fd169f585a2d33a3f7bc813718931f9951403f9aba9656ca40ca44a000000000e80000000020000200000004f4266bbd2c40a4013761b1b7314272c1cfbd189c3875c10adba28096554129320000000a0f4989b91ec567230d403a3ecebc58c8312e9909b92285d0aad11761f978aad40000000a328e3e15c7215300d5a9fc81bebc2c25222ac6408052f2fe24b858302d6a8d1d49ba780c597531a1e23ad1c9387bec6757a09baaf16ed80a300404b135eb849	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2472	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2472	iexplore.exe
2472	iexplore.exe
1780	IEXPLORE.EXE
1780	IEXPLORE.EXE
1780	IEXPLORE.EXE
1780	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2472 wrote to memory of 1780	2472	iexplore.exe	28
PID 2472 wrote to memory of 1780	2472	iexplore.exe	28
PID 2472 wrote to memory of 1780	2472	iexplore.exe	28
PID 2472 wrote to memory of 1780	2472	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7d1edb9cab99b6c318377bd5465859cd_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2472
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2472 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1780

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
364ecbd7b4c0db46423f0c215978af13

SHA1
6141ece560b233838a639cdf40b7152112f3fd88

SHA256
eeb4e0e7b50c74921c806f78a22b8271b8ee6db505d2f51d2eb2cdd5eaf06869

SHA512
e5d1eb368022286469ab27a516d4a67664b7e18ef75b9277edba4856ef3d4222ccd9b867938f60451d99cc6cc011f139742b9c8c54ac372eb18d69aec044c58d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c1839447c4552bf0c99470fbedd24564

SHA1
ba6ca9271f505a6bf17cdebd8da251995063f3e8

SHA256
773312d37b70128c12cdc25572f6677f0954e00b57b8fef69276bf3f3cd7ac1c

SHA512
c3320488d0885c620bfcf90527d1018fda1352602dbd75c8d4fd15fe5006717d9b2a0afde410d5ff06edbf8d8e7df41f22a5c5566e7fe15f02d2e5f83581cfed

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
87852ec0ef120a3ccf39d82ec953cb6d

SHA1
6e451780cbb638cd8cf0f505d68a83b204c7abff

SHA256
832545e1972ab861ff87bf16077b669004057de4d303ac94d9f196b87ca9277d

SHA512
a2576f6df285cf6ced93ee726f86c2cbe3c463b996ec2e857a616f963a59f5c4ce5b43e7ab7db1e65f5cd8309b8af290bb11a6de64c327256d9055ae97050102

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
34a6b7bbb48288e1de66ffe305ad681f

SHA1
9217abd292ab8a1f4a2b2984cbdd2f9d1710440f

SHA256
09672dc4174382002203f3e86ee217f2b99d214ecf43aeac50f8a7a51265551f

SHA512
1a6820e6c0d8274306b08cf6f54ee71d90a3a8dbedc0229cac206be4dc40a06264b6e748b56a4179a7a0ae989970b56df13c341784933fb84670abd0dc1fdf9e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e56a8a5654caec142f5d3e069d0e85ee

SHA1
497373386e092f239a7177c4b55fee719f25bcf1

SHA256
a12b2764b55637461edf5a8280bc0feed26fef23d94a67588e60ceb0003528df

SHA512
c35b50e178509925fb805e3fa052da516f5ecf76795358a6d0cf4394fd57bd6883ce6e373dedac1a38f68de993badbc79e15050cfe42446312474144020b5bee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2fa72ac8fe7137787a6e1d75f2c6fafa

SHA1
aaa4226599a7841e26a80d1bbb2f9cdf44193cdd

SHA256
8ab57667ed60ef2bac762f784e22e7e8fc50a172acc648e7cd1729da2e1be764

SHA512
6ce27ae1fd8c10f54f62a1e00dcb834ce67b034384b8a570c1b994d7150ce5dadfaa6e770ab87ae230db4f53743c11131295ad43377610c30cde6db4cc1803a7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0cd9f6a39b47c435c921da98046d6cf6

SHA1
cccd912effde82641170b87a82beb3d3a690fb6e

SHA256
fb662f22b5b6554cb2998b8331c10e260e2e0ff040d432512f3d817ee50f2038

SHA512
92941289782d9d36d9159730dbeb62484dff9dfee3b545f3b64c8e5b758d62da021474541a6475fbff5e51d515498993226cf391890b5cb012dfd905f085bb3c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
74a7a1f096f0be7687b9e86c506ee821

SHA1
904cfc73669b8919b385089d1452d337bb440cbf

SHA256
05e2f4744c1b1e1a0c1ff1b5e1afd6e99f5b19153825f1261941a35cdae3d447

SHA512
602e9109f9aab2d9088ad0c4dced9c5fcb938644dcccfb77892202f8fc28dab9de3da355f7ca064d8bab4e7ae1baa7a779f865e7cabc0f6734e06873b7bcfb29

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a1a3bc5779bb71cf74fa76ff55f75a70

SHA1
e97aa8d365b695e9a2e2395af2fb551f11dc37fc

SHA256
b22e921e89c7a0d05a4b05bd280f731344c80d899c8317fd69a5df0e19f265e1

SHA512
21562bad3145f6d5d8e6c5d19686eef09633ac0217f4b3ce8e6cc4530a690195b99324f0547514b8d33fdb4740e2d9a98ab9d5b8b1d6b278c8232f3ac81fab29

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b597bd8c92c9f3c2cfd1d2091623e9d1

SHA1
b60fc8232380111ef5a3c3a8b9f91422430885a0

SHA256
ddb4445f4b3280783b0a41025d90c9f837c6ef3faa0b0ebbb3953af89e0f47fa

SHA512
b1d7c895a1c25403a209237c655c0a21cd8927eb85adad89361eea7a2f3482e2b31658fd01aa539a2910e7699c5dfb520cd7e105615300c16249119d28926a37

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7cda76939fd1687d750ff669fe6ba1c7

SHA1
1c2f74c5e211af7fb44e8f9d1c6f6a24bbec379d

SHA256
76c74dcc15aec0d5d7c691bd9a5b64d44569e2f842aad19e46b8d5268d5052ad

SHA512
fcdccfa76d781118a4edc94d76da736e48d4cca20f6401db870e1cdd8a5fd0499b4f6123e2e3b7a1374e9f096a686e1d63eef1052e63ec10c8c5c7214bd8f4ee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
605905bd92855450e2efc79dc9478c3e

SHA1
56024daf611d323766bf5d0f8f10791c8e30c848

SHA256
69ac1758fbb0add590855b5911bf6dc932ea34357ac22afcea69826acd9a5050

SHA512
d5bc52bd4b2dbdd79b09b9f09df950075cd32725818ddd7c8c0a76b1b86bdf1299a9b2d2fb72c7e2462fdb549ac1691152481ada5187dec4ba131407c3eedb26

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a4b992e75b1efe54a1a0c92a7f37a5b1

SHA1
9c4d357d2ee9ed0f74dd8d8bee8312544eb450f4

SHA256
034dd4daab71af909453aeb21e885d8d84786fce20a1d5efea586505de5bcfe8

SHA512
1c34ff7adfe3dac966d8d7f5bfcba911a68c25deccceabcbe9bedcf08defd9747edd5d24c439251529e88ee991279077948ed7d8658c3e1c810579a27cc53be6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
cbb9ea7f89bb7edbea68a66614784e8c

SHA1
84ebc48d1482c8a9e137fdc3de0f03ac433b0dba

SHA256
31bb024ce3a4217506146deebc15fca1ee60db94317905c152395f16e7657770

SHA512
90822dd53168c8edfa4cfbbed7b8d65dc230533e1255a86fc67d8a0e05bf1cfaaa82b7b65747b112cacd3e7e9564d3d4356e6049170cc001b569f005d79e4513

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
16276545508296aa56da1106c22937fa

SHA1
b64cdef3190ec76d7b4f8752515433766366a28e

SHA256
b1045bdddac65149d88fb50aee49573724e9b27f5750e53a73e4ea090eb83a1b

SHA512
104d2adc0247ceee113bd54badf346639c2a42fb19abb0e80970a4cf3b07f34f98bea65bb372ad8b6dece2588ae4df9ad64b342c7494d231a1b0dea023277839

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
38e849ce11d5aceed42eea43c351b5a0

SHA1
0a0ae81cec9b58513e9d66dd457835e7dc7c3c8f

SHA256
fec88f3345d9d30ad8742d757a524d7e6b942bb747b9a4bc6463cfb7df44426f

SHA512
ee4c46b21c8b43c0e0a4c87b0d384f5f85b8fb0ce44614df96348cabc847d03f09350f626671b97a59c2251b6649c0bbf1cb320fda0175737745b3dc6f6fcad1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
013c3aab87dbc5e19b4bb76e53a7f142

SHA1
3f7955cbc63af3a86de6d6c9e07615a662ea48c0

SHA256
3fcba5441ed426a45e0b99018ace2617a2c3d30259f77e4d6de4009803d3256a

SHA512
a11445aa136f8841cf4c81979c72a41f7cec9b562c2df6e576afa1e44f01fac5d3e6f00f2c4bf1e114c7200bda0473930c6ab9da29265b365ffdff21656d0e29

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3352e05168e71119f46f13f5b6736d6c

SHA1
b29c3a0de75a14b25365828f4b5ff13d716483f2

SHA256
2fc3de422f4b632f8e183da06d53bd42bf48428287d4c2e44d946f42205d9a57

SHA512
a1e3d7c20c5485ce6bff254920665dc1b5baebc17da6b1a2636029302b3537a3378c81754fd078c7e607ca6db731ba0a34b471fcbabc0eeeb12bf58f61ce27bf

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab35F2.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3652.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit