fa867eb18f57e5f4d6e6b21fe3cacd59f8eaf9367de72a673d005a7688c9ebe3

Analysis

max time kernel
121s
max time network
128s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
29/05/2024, 19:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

819644cd111b498a6533e6f477df2533_JaffaCakes118.html
Size

31KB
MD5

819644cd111b498a6533e6f477df2533
SHA1

bf1533c88191484d4c9d5ac368a4c2edfc02d607
SHA256

fa867eb18f57e5f4d6e6b21fe3cacd59f8eaf9367de72a673d005a7688c9ebe3
SHA512

92d740bb52187705bef3d9de2e95a077b45483620120133d8807397ff62a10269b209742924172ed709a141207fb9ee09c7a369a208a0704fae6282a458b0c4c
SSDEEP

384:HWhnOCNnVVaWG/K34C1hDXGO4Cd+M1oI8dFd1r9N3Yd70Wz7/zDrAKsAMwuKIK/j:gnOCNnVVaWp4C1hDXMN3YdIFAaq

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423171537"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BD125D31-1DEE-11EF-84C7-4637C9E50E53} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30f7d6a4fbb1da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b0000000002000000000010660000000100002000000040aebd7b0f73bebcb69b1ed5846cd0d62ece76a4c74be13b2850f4f4e37c51f1000000000e80000000020000200000004937f4b88a3627302ee1bf84c6641aa809226450c44a82b07d3593b946a616802000000019b29380b6ed24825548f0cfeef15bed9bf1241a655b7233c7932bff6c4297cd40000000ba45e85fdfe10027f7ae948a0d449dc81494d81ccd01bfd445132f4e68b5a1eb455673b53263cc88a58bda005b91f32afc8f1415b80496b863fe8e8d5f74d5f6	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1916	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1916	iexplore.exe
1916	iexplore.exe
1752	IEXPLORE.EXE
1752	IEXPLORE.EXE
1752	IEXPLORE.EXE
1752	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1916 wrote to memory of 1752	1916	iexplore.exe	28
PID 1916 wrote to memory of 1752	1916	iexplore.exe	28
PID 1916 wrote to memory of 1752	1916	iexplore.exe	28
PID 1916 wrote to memory of 1752	1916	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\819644cd111b498a6533e6f477df2533_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1916
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1916 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1752

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b3c409fcda96aa9bac37fc8ee398b2bf

SHA1
a542cbc82535285f80e7fbafefd0ffe63f3e0d72

SHA256
3717c887d06fe9c3b0fd9d3e975ec380c70241b8f3fdd7454059396784614361

SHA512
67a48acc0a428d0975bf7f5fbff34bdf721cf86ea2a525eee00c0745aac5d45e8a9eb880bd42e4491b7097982b1b81e3ba7b8c13c549c5f47f0e11d948895698

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
20cc91606ff38197a2d2d6890f1f1d65

SHA1
2eb1ddff3d819aca544e0d46a428287b291df2ab

SHA256
d97d8e3a35b01147832516f23558aa9df557c66fdb13c4451a5a62b2e73013b7

SHA512
0dd9c1045caa7e143e6c3e4090ac0a47d0b15b190875c456dc26ef6fc413a086e98083426f915723ada2a6cc9ffd4b233ab7e4a0bee33203a23a5f125ccfea24

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
58cc975ac48a2357ee157ea42a5858ef

SHA1
f7a11773c25f73a2a295f778effdcf6f959179ed

SHA256
8cc2210653d8cc4712a76a5a4ea9b3ac68d7710127af38e26499d86aac0f8c9a

SHA512
7a6e578c287888e8ef9087b37524915ecbb2adef917746cc3c410bc360a98f190324e1f597f438897881cdd5fd6cbca7dc6b8e8ef28c76431290d2bd4a9c135b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d06df057573fd2e6af26a956b602c1e4

SHA1
d42529be68c4b3601f67a842e89f11a52bc8fd3a

SHA256
28f0c0a01b3e63143c5a8f43b66098af223ba9503993dcef56c179ea3eb9e33b

SHA512
b048b45b2d11b31ca5916c3303ea09e9f8bcc7fd37e4dc6fa0ea1cf6e7a9bab0b1b5be79180775b3a0e2064f5ebc58c22c4f587583b6e6a40c4f3901973e3360

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
48f5facbfa004311b30ba1015283688b

SHA1
6b8f972e078329a8c577417fa98bb9fc72be9fcf

SHA256
4de00f17a01ae4981491ab7b92e4d635b76d60f943c483355a73d0298e683f4c

SHA512
6d9251742b5b4f4c7838eb422be37738e2c24ea0611c705c7a742da25fe730815ef993f9235a1c75514337c92c9d5a6c497303cf75642db2ad06782755928ce3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
47fc58267c72441bc3dc6440879c0e19

SHA1
abc62b45da44004b17f9604b8f925bb0c3290555

SHA256
ede97c51486aa149b5794bb15e9d4d741627e452bc41c9f120c612155afe0213

SHA512
9e0be515432620b1cb12791ab0ccffeaf4c5584152c2556e4010f45f8df2e5f049e1a4a02b06c71db41c0429b88434902b0114a5a34f4c1df83bb37c53f062ca

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
986498ee73215359ebf24a792a1fe525

SHA1
acaa61161b4b948a7a4c61aedd3425b256ad1273

SHA256
873f86094fa6865e4f829fca30d82800c275fc116d342ce4e852d92769c8d8f3

SHA512
453d9c067f2c1c95c7ff1f0fe024a89321b4bd50dd23d0f546b90786517ea2bacd5d0fd484efa7cb202e1701dfbe7883b84a9a8d46c7bc6a64276634af0bb4d9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6454c9432b91c7b6127a5811559e40da

SHA1
7cc9222feebc940aebfff81de0bfcf2509ab0275

SHA256
4ce7bfc352c4a5cfc35a5741bd0733a6b32b4eaa4cd330c7109bbce6ce48f0cd

SHA512
2a4bbb1e520eac3b1dd7dbaf6287e9d6671823a2b6121ba0d6f6bdd3ddcfa090e53ba61866af39e420c38189cc934fa7d46bbdebdb6ab925d68120e1d740bb3d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
362d0630d34a5208aed3526dd2a5c049

SHA1
3540760be892a23f722e4e1307c5b98564fedacd

SHA256
8df6c9c93af0729d45d6292a432c82479ae522877d2b0a77afeb842be4bb17e5

SHA512
9611cc7c6ccdd3eedb3d2f7420b068cb50ef24f8ceb3dd21bb405e1dd0f495f23aa0cf3f6961244d78e01dadce770a6f3fedfb14e793c4b9d28fde323c8d7de5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d168f172d8228cfd1714d9870d58f17d

SHA1
ece33f6d3b64a45972e8608b7f7cae68b850c712

SHA256
7e9f70921531807c525745392cdb834a9b71cfdbc7b362149a0a19e99fd3c418

SHA512
99494b7466d31d3c5f3363053e1d1e85c9267931cb00dfb68e17c6c920ddfa2330edf3bb27acbd02324111b0ac8866d48f00739a18a952153f453bb93c927d93

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6f3567788ef1bc6016f502c9d6a39c57

SHA1
c26f600866168009eb9c3a9fd9dc70e87871d27a

SHA256
530fb9e8167908e85e5beeb2351d6c015821a73f106442f9324e3fb51fddfabc

SHA512
865720653ed88d718465c4294d51fe8a9ca5ee283b8d5771d172a36ccfd4cb44fffc394e4e9bb757d40233d45f8d3d37fb6a15440a11dd4bef53f020cc98d814

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
df25ebb1825d41af32516d980755c8a7

SHA1
e43f9a93fde234f492f913d930d2d34f2c162362

SHA256
953cab7d397bdd83a2c60b01063a7cc83fbc023d72cba27237cd4ba7dc42c777

SHA512
826455484e818f794c2d433c6ab78d01988742e0dc1b2a57a164d1ff88cc6befc5f87f18f0533d55f60026132e49a67de61c661597e18ae0b70624fc2cb39cc6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
636350cb5e4ed79d7e512da7628a49e6

SHA1
b54dd90fedd3306f8dce815844bcfb11a2c3be1f

SHA256
48b21878f151ae36a7dccdd4eeaf6a5e23da0623f1755ec7911e45eeffe1c0f8

SHA512
632d235da55f07d1b073f5fed5fcdd2d641cd7c3e237c1f7356306b1a18fe24ff6f39e60236b2ef53e5eafc44ee3562c8547b673f0ac1d3671e728ba8f99c219

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
015970b5cd7091eda63c83c463a9d27f

SHA1
815ef71f6aaca566e68cbeb86b57b641dc2e3983

SHA256
b917079d85f54df2263e4b59bac53155bb50aebc34f3ff10fbbdc4f285c8f747

SHA512
32a877d44f2528829f50cc42b0e8856cbf85d0a9b70f43bf1d14463ee3970db538d8deb41f0eecee7e48c1378f919d5488cb94ffaf45339bd90f08ad0adb142b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f89b02abace36aa53618edd136e2440d

SHA1
a5a616ab81842ddeab89b6c614773b9ce5e35728

SHA256
69c5ba5232f71553407b97abbaa7284674f62dd43715859a2c760b1aaa5ae447

SHA512
d2beec9ad31a75fd67252abb5655f41be962e70d36dc01448f025e1b738d69bd19a98fa388ff2e24933f411474cc2d970675a6ad8523ef6861441f933a19cef1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ca5333af491413a9f6fd94b741d900e1

SHA1
90307c16304cdd3c39d677051156d4ed50f2e7cd

SHA256
0692731a60db58b123cdf7ca57dc98b8b92f20205a837632eea0570c3b0dc86d

SHA512
b3ab0419dea727f40baeeb4ea25bdd3ae3b9badb544a2330730a50eeaedc3dfff45152537b7842afcd2216a8dce8962a7e211f6c1ffedfeb88f69da8421cef22

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
aa2f20697bcba26375a95233a1ea930e

SHA1
6d1ce98bf95e2767091bfe55ce1e1fb544c485b5

SHA256
ed5255c947cbfe4b4f0c7d6f16a0750f27071e03a1009f0111d3aea6564f38eb

SHA512
e25808ea3460b9d7b3ce98a3a4157541d949ea5b7062f0e1bcf6281d9e1c13c85504323159834e2751f83aa5943a7dee198679dfd60facf4fb6cbd557e971cdd

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA7A8.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarA889.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit