de6494a292752aa6b213d1023182156f4d49b2ae97a8ba753edbaa87cc44c137

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01/06/2024, 18:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8b5059a2fb564f9b27040948ff4986d1_JaffaCakes118.html
Size

139KB
MD5

8b5059a2fb564f9b27040948ff4986d1
SHA1

82f2b19a03df09901ee06d2d7418e03527cab594
SHA256

de6494a292752aa6b213d1023182156f4d49b2ae97a8ba753edbaa87cc44c137
SHA512

144c42c5501863e432a92d159d67d6868856b6e07a8499e845bbaa9c0c5b75b7e14ea0d152fddfc723380c591697bd5ceea07640abcc49d1cc7804b39fe87d9d
SSDEEP

1536:Sj7CAsYlfyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:SjZyfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423427292"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bd2a7708e9798e4fa0b20f3efd8e936100000000020000000000106600000001000020000000d8ec561a4792648052a9a74ddade42a87dedcc89f07d4738bf54370849230f82000000000e800000000200002000000071691163d84472d3d81c70b57fa26a182a55881b68000a84d71d439663e961cc20000000fbced24d9bf50bf296497360e4d255789800f739847a880051fc0262e5c4afc840000000add70189d360671e0e8a12141d2603a21c154c7c3a3f197c7d079a539ecad070f66e85f85ad3654be6e2f7ede0e95bfbfdc4b2ba93e16f87c76052fd4789aea6	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{36F0F491-2042-11EF-A649-4E87F544447C} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70e8fc4c4fb4da01	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2168	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2168	iexplore.exe
2168	iexplore.exe
2160	IEXPLORE.EXE
2160	IEXPLORE.EXE
2160	IEXPLORE.EXE
2160	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2168 wrote to memory of 2160	2168	iexplore.exe	28
PID 2168 wrote to memory of 2160	2168	iexplore.exe	28
PID 2168 wrote to memory of 2160	2168	iexplore.exe	28
PID 2168 wrote to memory of 2160	2168	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b5059a2fb564f9b27040948ff4986d1_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2168
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2160

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
db4827950ed8c107a3dd699574a64f54

SHA1
1255a252f5ed6a19dc239b0d1d2500a53740c1cd

SHA256
3aecd9a640de0aa125259ce80c34fe2c445a4f344bd58f4cce83b5b02b130547

SHA512
34b911bc4e919c7ea4d223cd25f1075fafb58c6c09a5a3559d879f29c72171067525a2b38c19571fc16f90e31d188bf9cc35440ad7920718e871dd1c711ac3c8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2e88e2e50d96236d06b0be46588327b9

SHA1
6d975f3db9a3f640f746c8bb868a4528e580c5db

SHA256
4b5d8d872913fcc4601a11f7e5b97d25d8f497b840f64b8764e2834121180909

SHA512
6e450ab033af0284f2bdafe14f447724bfcd4c0b726e327298f1e421da9b542e6e78328355f235cef82389ce72b04fef2e8729d45e210060932d872bef7c4e51

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ae3a657d0a8d404629a962fdcfad9816

SHA1
12e0feb182187e7f47f07ca8704cb0a4bfb4e7f3

SHA256
9331ecca4f80d6f53e179503206e5f91772d58a320a8e53da53728831d515f5a

SHA512
15904d690373f24c6c9401826961c58ce7a3ae6bd84103f0338d70f503f33940a69dcce1a634611ad9bf3c9da99f9919c4de7365a7500f5281ee0031207fdd47

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
838e5243a38712d52b3d13c484c3b87a

SHA1
d799f7f665a5c1de31ead0bc73c7eebc7e716d09

SHA256
1fedd965a419e22a32d1074ec542976e1a3340108a1d770a9924593e5ebb17c6

SHA512
d5eb997f19598bf6356ca9a08d829872e359e3cb780890a212abef8a295a9a1f1c1a16ac554d6277d8d337099a08e322262547839d64c70c623ea2381d758e86

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7806322d49e440d8b87e60bee62e7b8f

SHA1
d87f098cc0254fdff2b4d857a6568dc765eaad3b

SHA256
7f8527f09a0f612df905e1494a2b3e5b50f8079823a2c3886a72b6465811a073

SHA512
83abf7b51b24348cf9d41aa149396550ab9cad46d16ea0d4bf07742106a1a60756aa2d0058e2b193e79a3b9015c54b5cd3eae38b6837b05dfaddf801e0a704ce

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
05b9cdefc0ac329e09c21aeb6f8e8c2c

SHA1
d1450d56a895ae20d6cca39b661a5a566272e5a0

SHA256
ebf36e912cdd2af359d74a9e8d67040f7cf1c25cec130fba191300d5b5d28f62

SHA512
05609585ddbfea83ad9dc19043cf643c8c38d2ca0ac5ce8580e32d8d5d1ea766476098239fed74635dca5e14063595b1a967f98fe1206c93cdfc272906e916d7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
55e83bd25bd8d7b0b5c994d210ec14f9

SHA1
f868c9bdab167494e6748037c52db944abfe28c8

SHA256
15632915b9a407f5d809f1fce6bde7d1fab896ce41f36f2714cf71389017b8fb

SHA512
6b42f38b88655ecba8537d804357f7dc1153db3ec1729d75f4f6e51647b25fb796de598ed42dce92e3cf8a2737e7bfca543ed580bcd16f935e5effc6789460cc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
69572f420bc8f618570ef908b020ca0c

SHA1
3c7873eacd88b389effc35844072b2a9168d5591

SHA256
a83328dfd8b487ccbe488c5671dfb199a30a919450d122e4709cc54c6988bd5b

SHA512
b717d0cc9e8e22f4b2d1ce1c9cfa5f5be3f71dcb45b38427f36ce9283362bffb9d637e409c028950d05e7d807df4bd0459ae4d07577e51cb469f8245047f5b1a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
02168cff51940c58b33df194049f0db1

SHA1
638e672a70ea95fef3aa1eb687a0d9b3acc7c6f8

SHA256
ee341d963d7e958cd5ae1325f7f1676c656437fe3b23179f69ac94c0bc4fdc1d

SHA512
d27e0f0c2ad9ae394cae4df7e25d83455558f53a9cf20c235cccb2a041b4f5a0c7b9330145e2e6059cd2b3b45b902d16fc2d87ddfdfa0ed6875719a97007752a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
91297ba3e9cee74f77f57c99a82587b3

SHA1
22fcb2904e38665f58d9e761f12037096e096472

SHA256
e20f85932b521b7186f3bf9c8697ba1adb0db6035050e7f198aea75975284558

SHA512
622ac6f5bfb9f41e9a1d8efa6cb88b9f80aae38e8d153eb367a624c580c21f87a0d4d4f42a422d68de161172f124d615294dffca138a4c184a67a9ac12bcf11b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
45ce8fe44348f1f143caa6120a7ee76c

SHA1
2b52803102d0a8f5081493dd6915f44ffa8facb7

SHA256
31383ab471101996c667f519c209b146eab2ae341798d216d9ddac46bdf3e340

SHA512
f5420e765653916a15e16ee94d54a4172e317cb56ef8ce2fbe36462464f5b06dde4fc4a491ddcb7a0290b09652cde7e94128ce628a328b1cd1a069bffd9acd86

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f7d133d2b80a93a7002b3cec3297807d

SHA1
76b1422fd3350b6383d3f8c12f7339ddbcca6fee

SHA256
b1b3a2da113deff23c0988cec95cf895eeed3ca518898fd3b5e81b1757c883bb

SHA512
fe4df034297b20691f232a220fc77f5445e10c5ea7cf9e37b682fd3ded104758dd7bd6509d5687b86d7f5bb57102d7e6e2257c05dd07182aa87356ae4e6a25d7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0af522f8b454e35e3c3e1239ff4983ab

SHA1
fe82b375915919811bd110917bfe40e0e8c1f01f

SHA256
80cbd44980b398be726059d3c75062984748ba75b6177daee4a2aecefb00924a

SHA512
4f7718fa6856ae3f31fcec61b64686db2f8beef64d0b9b1856cd7977053e284aeebdc8649b59393cb698f801a18b8a21e6716347e501544691bb33a137f7161d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
876eb56718500e0b93b0bea918139887

SHA1
09b49d5f361d7bac3788ed0b4d6794d781bd06b9

SHA256
632798fb5aeb1bac35ceae58b2e5f1850a566a9f64cd66e8da13a1311cac7a2f

SHA512
4f36804069bb48c83f4cb5ccbb95b44d9d929d9cde95e4443ffdbfa257394f72886f88400026ed7baa90aca1680ea9c28050570e8c7a293f42195aef909ee3cc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
38c6da48017bdf43cacd0d504f17a5c6

SHA1
5bd21bebe8c33e43f9a09ec64d9c420c7eafb1f6

SHA256
1faeb4166f00cc392197e07892e61479ce318e49318865becd7c92ff2ce5a5ff

SHA512
a14f22cf5da0a50b42e881a757ecced7953e2d8712e6d16da6439959d06081810c6d90545a50d88870141ff711853ed8cef845411ad114b18edbdd9bfe189e6d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c77ed32ac77903756b152a401644b8c6

SHA1
d6cd779c9c1db22f94a289ee5a608133e9a23141

SHA256
6d9bb6d47cb1464a31d2f93c12e0fbe324570c3d3760f30c49c27e9011e01e76

SHA512
987fe0b5826cca97db10f7c964081339362706a2ef8169018602f71d4ce161523e39f820aa908159e44c0c586dd30a66b3df3c51948e83651d05b3657489d038

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar1F89.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit