df5c2d35da95f6eaea53cfc18633344dab3ff136d7df4cbc19f68113ed2f3e84

Analysis

max time kernel
120s
max time network
134s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
30/05/2024, 00:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8289b73e09d6fae5435236c36b8c2864_JaffaCakes118.html
Size

26KB
MD5

8289b73e09d6fae5435236c36b8c2864
SHA1

c410272ed002eb8cbef114bf35cbb9fd1eed7548
SHA256

df5c2d35da95f6eaea53cfc18633344dab3ff136d7df4cbc19f68113ed2f3e84
SHA512

e36f73fda77e4ff10111fc2a5175d5fbbf19b8ad2018bd16a305d82acded1ac36a29c6238dcbcf53f83844fca2586733cee32f17ef98502e8b7477e8db848437
SSDEEP

768:CyisE9fZbduDp2pHp2pUpMpkpvpfpapjb:CySfNda

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007a556c22395ac3459f091e1f6a813fc100000000020000000000106600000001000020000000c13f8f70f482425d287865e9f2cefcc6b8aa49f5cb6861b798055ebe0f3284fa000000000e80000000020000200000004e3ed2d58c9b6a661559bb5af2af277e0bfb3b0134930a9320dc6a11da1f615420000000f372c2ae82fcc25bfe6570ef8f83470528d90148f4634629ea35da58002c04eb40000000485072a8908e1270e4dbdc0b47fde5e1fd0385663a986e9c0fffe02cc1cca7cc37908ec89372838393308f9d7ccda8a34c78da784e73cccb38dee6fba1e1e020	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30b697782ab2da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A1802F01-1E1D-11EF-B35F-5267BFD3BAD1} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423191677"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1268	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
3048	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
3048	iexplore.exe
3048	iexplore.exe
1268	IEXPLORE.EXE
1268	IEXPLORE.EXE
1268	IEXPLORE.EXE
1268	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3048 wrote to memory of 1268	3048	iexplore.exe	28
PID 3048 wrote to memory of 1268	3048	iexplore.exe	28
PID 3048 wrote to memory of 1268	3048	iexplore.exe	28
PID 3048 wrote to memory of 1268	3048	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8289b73e09d6fae5435236c36b8c2864_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3048
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3048 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:1268

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
96803c276033d3a371c4df3e8480cb76

SHA1
9b022cbeb5e0be953784db3ad6f2a7a4fce4ad59

SHA256
0307f1b3066946462af7768cfbfa1c890e03119e9536d407de645ed156572564

SHA512
34bdce31e2f02351bb5448753379ca30a49b4d83254421154b00e60eb5e5120ab0388452ab6918d24e41d5b78c8a1ef584083ef366d87835646b136be0ae8a54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
76d0907222d50e418694e9591c4eff99

SHA1
295cca7234215a0b7435bab1767bbaf8fccf9c6d

SHA256
57938ef245942fdaeb32d126c93962656dd566bbab50f6183ece8b0a16bd52a2

SHA512
6cf732fab438e182bc988886c42cfc1ccd22d5f3f97cc1f08af2a92c341f4e72d9d713b2ccc34622bee877dd2726f97ad7b79b696ce5e1e9115d6b8e3c7b5436

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cf0eb1a96cf1f5f1a42ced63e354abf8

SHA1
4003c40c6d398c7ee043f53db9a8618c7a9096b9

SHA256
1d407f8449222342bbb8351a917acf8d81009406a49d6572f6e24d35ee3c6822

SHA512
d6a07f1a427c090cdb113a343d85eece3ed609a7fa4f1cd906528464fa1e8166806b340bc52aaf1a512480ce0a0c8808479018520ddbc5fa2e4986ca8e7b1976

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
90442b3cd1969584418f394bee8c880b

SHA1
a26a8d5fe08232c494efc7c38dc474e061a39789

SHA256
52842d27551471417339781daf325f2adcc872a2378c4dc2b9a654788cd62aae

SHA512
e3d49946efa115c25433bc2e88fa88348754598a0ea641c2288b19df4bf749d5da80e778990c4e57417152ffa7546df4382351d670d6c30bb9f9cb54e4145af3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e731135610d6d3f795a21516b21940aa

SHA1
125999c96b3ea3ba4c66d523c0833902a1104acd

SHA256
5fb111e86e545e6c504360282f294e3e4c38cf823e686f8fa8d8cc4c362006fd

SHA512
fe99a520c9cf61280e194035be550684e337c47889e4ffd9aec906e020d41fe48288235667607d521f22693f44f4d86704b27972d41340f0471e73a78ef0235e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
54995bf983fc74ad3d75e8f7907c532e

SHA1
11b447e64810f5e31da1a7875618d6363401d30f

SHA256
ef894bb8eb08ddd60de5ba404d231d915d1403a53a2fdc97ff978caa76566efe

SHA512
4f25a41157da7513fdaf50db1aaf290f0f9a00acfb72a7629683ef0516d3d0592789709e221b68cfa312d360cb4178322acc84a063b929d9b15601a9eaef3c19

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b9b5550e8d9c29d975faf6814f45e3b3

SHA1
cfb5321c1a501924012797a681623dcb09d9f192

SHA256
52b5118588392333a643fc7699af6f5eaad90c13b05c6c75176e71ed451fabf5

SHA512
cb53e687467cfbdf9c5d122e21e733db4a8ed83a79fe1266feb15313d2713e62b79ae03ce39069c2fa44d593dada1ed8294b821da7ce865f0ce9af2110c77ec5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b0899df8cc06fbc44e7d97dcc15fdc9c

SHA1
8205b19c311cbe20208449e7bfdd171621c3bf14

SHA256
1dea449fbdff24f4360d200d2e1d9d0a0067f7744f73584c035744c05fab422b

SHA512
0ec3aa9a5d69a703ea8249cd98f3adcd8579bdd0488f02f8e303099a72dfefe8aad0b12e411db11b3006be8f736933ec2b1b7a0e1d48a010e244a2ef6e48d13c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4e54b5622230fd4462db853d34b3fd57

SHA1
b1d00f1a5e4e0e5e3b4f7a22a86aab27749b8ff1

SHA256
2f131c8b55e2bd6ac7e4b2afa58a0da42ecee7f6792ed24c61d64ea50a7e30cc

SHA512
1ce194b4dca920ce77080fdded6ccfaabcc23dc08eaba4e65d7f473c8822696baacd961400d158199fee036b5dd1a3c051dbfe6ffd4edddef0e06bb5c9d49a1e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6b4ce2143a81abd69304b37a33d1f464

SHA1
5ce46bbfc34d88ee6c5ce3d4c8a4f31fc25ef819

SHA256
1071cf89ab8c515452601c24586cee76d8f6ca381b6d9990d50a419fd2826478

SHA512
e3d63778cc41d251ac1e965e2648c3fce2ea241748b434a3a3e3131078bb868e67ed3515c56db31c5f81767c72ddd021b812bdf2b9b528120c07a2feeba30a92

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f20e81d6e484b2435b474e58a1159ae3

SHA1
e54b294c734c6323fc6792ef4c43e8d3f945b194

SHA256
8a058428497f4aaf6e827f2b725d056cffd5ce7f9ea8691c2141c6addfe52239

SHA512
8d245603a7df5abef5a43d5b9155ddd9b71c62e71af5422f30a6a10a109a810fb386b85ad6b832d6d05129b78354670bb0a20913221c184f4aa73b27c2b1d3ce

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7701377dd08efc231c02ad7b8dbfa9e0

SHA1
09d7b4f06fc8fea2e7944ac7646ccd955b6bc34e

SHA256
1ed373aea5c26b45e089a6ce98f07100368e9939ca05546d23883c568f9c88fd

SHA512
d21581539b317d82f90ef7719568036abb6c411b9b0e1119a35c9d22f2197fedd64ee581c991d5517fc2f50399ac4fb0181f79c911de466bd330eba6079e7758

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b1973fab66b772ccf7e359cf86c02c92

SHA1
1be9c26e466f0b8376fcba8a9445ef7758f88287

SHA256
8621b69d46c3a7ce6759113c6dc66a6f533e3dfff6a5afb4bf4549a585fe8d80

SHA512
72da63e76d1da7b1ebfe7b14978ab55add9c77b63c5422d426054b96ca1e48bc95334128f37c3e16a0e5143990ab40ba38f471dd5b9a08cc6d8e6459fb7a2887

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e3ef6802a831cd273597c731132dad46

SHA1
13da5da3f3aac98d8a30d12fdefdd287b428f58b

SHA256
07da02abd4db84d89ab7a099a5aaa6e91e0643a98dc12310d2126b66623a0b05

SHA512
2243b5250cc1bfcd46463249542006de212923017e0fc864eae68a3cd5aff721c70868ba0fcca0cee1573d290eaad9aa805fa28bea74b3e4ad65e553b785ef1f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1308237c7ca2dc85e58fd77092373452

SHA1
c8bba690d82dca7f6ecde80c8813bd18c55eedbc

SHA256
6f061bf8ff93aa92bd16d556c5b47e3cd98e2e7ed1c4dad3c4edcfe6de156056

SHA512
b87f79d54bb31fbac8284ba112007d594f42584c53a7b5eeb2d4d2e142a6c72aaa32cc0be14e5a5104545b46aa97fe5c8cf03780240240e8a5a5daa7071f1ad4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1390e054a2cf3ba69bd12d69db07e0d1

SHA1
ebb4ec2a370d4278318302b25213bbfd21c8c74c

SHA256
21a82579ae4f79cafeedc3e07d1f08b6a7419d335a7e102f8590bd3b63e0bc4a

SHA512
01e69b4c70ebc0af96e71f5c7d4e4c0c8fefc5da0aafb273f06b4f699e306a9bebf0aef91bf6d1e061749da98b260c3226ab18439a435467d83560c9199163ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\px[1].js

Filesize
346B

MD5
f84f931c0dd37448e03f0dabf4e4ca9f

SHA1
9c2c50edcf576453ccc07bf65668bd23c76e8663

SHA256
5c1d5fd46a88611c31ecbb8ffc1142a7e74ec7fb7d72bd3891131c880ef3f584

SHA512
afc3089d932fb030e932bf6414ac05681771051dd51d164f09635ca09cbd8525a52879524b6aa24e972e7766ddf529484cc1ec416de8b61255435a89ba781f8c

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabF681.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarF81F.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit