5fa2cb28df98a14f63324734d011ce1a915d3be107f9812e600fb323a635ef24

Analysis

max time kernel
141s
max time network
119s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
01/06/2024, 14:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8aaa7a5430428891c7e83e21ea0a56a3_JaffaCakes118.html
Size

139KB
MD5

8aaa7a5430428891c7e83e21ea0a56a3
SHA1

06de13226c4bc44328ea59f36c6ddea18078792e
SHA256

5fa2cb28df98a14f63324734d011ce1a915d3be107f9812e600fb323a635ef24
SHA512

d2bf1fd22c86bf92fdd3b6f48eb94236ffa6298a4bf1322ed6298b6620e431c792a06fc60dac879496b1fbbfc01068cb6c076947c173ced7b7e1331c4daff5ac
SSDEEP

1536:Sg9fKklqyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:SgAyfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{67670B01-201F-11EF-9AB8-560090747152} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009a6c6e92add9f140896482d267e006a200000000020000000000106600000001000020000000e74169853fa33f8403d03ff9dff6e0097c3cc0355ade05d0f61b85926504f321000000000e8000000002000020000000fc7448cda0b64f365296f8eca9ff064f58cc76d2e0fa9190bf1f1c44bbe76dec20000000b9cd974d3a3db893ac5ed2837f1af43f0f0535053a48a81512ba7800ba609ac54000000064dc87cf43262a5248eb117f6e610fb16a27618f16a36c44a96ca5ad74a0f32ecd00da5e8d0cf6b04d76f9a7b41f1bd2daf0d950e6fcf4b723d8c1fbf621d390	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423412340"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 707ec27d2cb4da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2824	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2824	iexplore.exe
2824	iexplore.exe
1336	IEXPLORE.EXE
1336	IEXPLORE.EXE
1336	IEXPLORE.EXE
1336	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2824 wrote to memory of 1336	2824	iexplore.exe	28
PID 2824 wrote to memory of 1336	2824	iexplore.exe	28
PID 2824 wrote to memory of 1336	2824	iexplore.exe	28
PID 2824 wrote to memory of 1336	2824	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8aaa7a5430428891c7e83e21ea0a56a3_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2824
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2824 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1336

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4cc867c285cc5062bc6c5079729cb5d0

SHA1
8d4398fee002f9cbb5a798a4891aca9025e40f88

SHA256
9f0bb795b8009eb09f83c3277332899504d36f35b387a311168a3b2bd23f788e

SHA512
1ceaf117f331dca3c4154baf38c50a5e8798bf99f12da041dabef6d45c84ac05f271db74b8b73c1f1967469ed6069aaba75fb57ec5d09f1edd6ea4df63e10546

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
388502c53dd9551b6f6197a25d4eb21e

SHA1
d26fba7f1f57edce7d561b90bd7f74b08115c522

SHA256
9f9c73d7f10ab335068f87a510ed26e4ccf2724a240e80abeba674cc2dc1dd68

SHA512
48e574657f0fe820faecd6f93974a6905d1b474c4114fcdfc884af8440189f2b7d5f2fe034b93d50c0983e5d2a6c1a852b9064551ff96932029ff2f82e7b1f64

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
03c74b22bc16fd9c7c5b8de676525557

SHA1
23f07e88e732684156e671e3347962719f933510

SHA256
02304cf4a005f2824314d6910c416596c2b186883b170feb05bc10d39b8f61dc

SHA512
13ca1e426a5e7b6f568fe2acc64123836c7489685847b8b8b46fc9ab9d3b0d80199550c33e4668a77f815f5fe78041aa987c48c64d833fcdbdb78ae400cfa71e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ef9f6984bfc38e5d3b55a3f45cfa1312

SHA1
c6e737afd94a87d0c901c7e1ef7911d3da2b41ed

SHA256
94b71b4575e3f03a52325846f28c7f4a7f07438794eeefaffe942e59aae03da9

SHA512
99039df9d7b51d60edb71008be43137b0ac7eb372a4e35934c3e3b3f7ae08f6ea0c85f5d0ce496d754ad119e0c03f95327b904aac2fb97b675d8477ec625dfda

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1478db59a4a368f7b8b1635d8b1ae24b

SHA1
f10ed5bfe5ce6e096040c8c54061ac97bdf01eb3

SHA256
d8b823a7f127369e5c7c7984321c2b9806d0e65c8876081d507539a1032b4649

SHA512
d3185639bc2f509b130296c73187c91254a060c42a11f297658b4852885ab91ca6697b5e9c6986186d65b82829c10c948e1cbe3cb8cbf3bf4bb9d7e23bda4b00

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ce4698fd0e694cc611b301f0cff95631

SHA1
2c6083caa828e25371cb431fc259e962afadf5e8

SHA256
9c2d82f0f074a891829b8a248accf8a03389d1f6447772a2c3e4b3f8910bff45

SHA512
c6d939183636db3c48b298996c4b55738b13b64db73f29c36ccc4ddcbde9e750d0474506ecb8820a3868406578d5d0740150023847cf39295fd232a910d4fafc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
94dd2ba23feefd3580c498d77b416c41

SHA1
89356b13b6a2cdc0a8f7f553118ce67ab86ea21d

SHA256
31ee1b0d29ad96e4224ea2af32ce0af4d4b016390cf871e7ed1bcc86d4299183

SHA512
453eb582355d1af88cca35cd146c6025799fd7cbb67132aeaec3003d81141f5452f54a7a285a18337a650a6d665da50e5557c67ffc98ac594ed5cb75bf0e33a0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
41663669d44a3117436e4cc92c049e25

SHA1
245f88001c140a02cb9362348c19c995a5952072

SHA256
6142edc692335c65b5b95d4a8fa33bf960a2138127f700bca0b9df632b4e39a9

SHA512
d13a26638429951aecade15cb4c9045a978bbc96dc113ea6eca2314f9dfc2edf585ab7ef67daeb28a2025754f581e64b8e17f5fcaabac4eed2994fdf16290a52

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f840f0b280c9b74812ca54464731399e

SHA1
16a29ebc4a3ecb174a50a1f2e7464223529780df

SHA256
9332df0eb5fe36d0351d48d0858797bd2cb2d19593bdb4990c103564ad8d3b75

SHA512
23fd4a4d53a51bafaa3c2c81f49fa5b2523db76df2797468538353b3676fefe915017b4800b2ec9bb1d80734554a85c8f063f1064fe8453d489cf78fda467cae

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f5883d90b4977f7177c0eb3fd447dba5

SHA1
e4f416e723c7e4839239ee6e9ae6551880d1a5a2

SHA256
80419e84072a1dbe6c7dac55016117d3e477a7d4ab7995385889358a8c8edff6

SHA512
1ff36be5bee7e60cd36ea5bf09fe4c6df52d391c27bd77cdd3d614ea0349bb7bb89ea2cfb763075ad518cc93c21942b1c14d726bff841827b7f5df324201302f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6867bec4c27cce7bff0e8dc76f92e557

SHA1
71e348a7779d6e59b1e14e97d7b0eb9bada53fed

SHA256
4541eca81df1f024f73c616dc69079971983fd5ab2653025b382311ec0aad21a

SHA512
94de567fe52a15cb20f44d1978a1257afbcf94a9866b9732a396a329601719b0c5042fafda4d537d8da871b79ef29411fc48875fd3d2cfdda718099ea80c5112

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4c93e5a003c8891eb400a84e715dbc2b

SHA1
f569d217100b8589aef504d3b8c08cf82d0e9a90

SHA256
a54981c84f31b0832664f0e2146399fc769be6f8458b9570d256d481bf4aa27b

SHA512
b0066620662d15626a65c81b1fc4bde4a352cc295996c0752178fd864cc846e0f70578bf797c636761d7b4bd93d7a73089ab2ad97fad2b4d2107daa7ee06bc19

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d152fbf57eddabe8866b2349ff11ab21

SHA1
6350e4458338fb8314f1eaabb60ca4c769181021

SHA256
352189d827bf5eeaceaa900030755bd0aad58e28628a76256efe5fcb58428e5d

SHA512
9d44dbc00332d17180b6c8b0b65d4be1e83f9c1366736edca971c8abcc4e654461bda81b741c69fae1e2b497ce5420416e6cd3a3a368d58e9e092b37398a3080

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0c465e1801ee823669e269e2b2538553

SHA1
be3b7c586de20129c8fb2aa70e7bf6a38f05ae63

SHA256
13b70696ec5e3d594bc3843a4efe7fc0e4d46da96d95637f4d0e19ddf861c0fb

SHA512
59f8afd0c114b5e0d388cba13ec39741647c787e99f206f554f5c3bee48f35140ff222e47b346506fd9d33caf21856cbec875f7facf5ff75fe36eef537afc4b5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
33d8fbbd5fe91b15361dadb8fb534900

SHA1
5031a5bf0697058feae299dc3bcf0b212a85090a

SHA256
f3b1e657fc8874e77481a49ba5a5f00ae203d3b8a14743be023079964a790c46

SHA512
3eb599a25047432bacb9af729971c25e2616238ce35fd9dd0b5bfafa22a3dcdc95f96272151ea678df53139e59796666dd63d0a8d6c1445c88e8ba3ec349501a

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab1057.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar1168.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit