7984940e2c6f80d8112357f9f4dd2711100385eea605dae2e857ac7dc27ff1e9

Analysis

max time kernel
133s
max time network
127s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01/06/2024, 19:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8b7e63cec6f0d3c409eb268625d688c8_JaffaCakes118.html
Size

36KB
MD5

8b7e63cec6f0d3c409eb268625d688c8
SHA1

379a82a7828e9763ebc7bd2fbe6d629670d9d19e
SHA256

7984940e2c6f80d8112357f9f4dd2711100385eea605dae2e857ac7dc27ff1e9
SHA512

16ffd5583d31e136f0bb4925ef1c3b59299df3ccf854d5e8750aba8463c340b4192102350b4b09a271b483df21d152278070aecfa04694d63cc64153368e62f4
SSDEEP

768:daC3Aje1pXkWrFLQ4ZsoZfJf9S9M9X9eLcjceczckc5c5ZnNBAG2dCNifla/xkbD:daC3Aje1pXkWrFLQ4ZsouxBA1Kgla/xa

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{0CA194B1-204C-11EF-9BF1-5630532AF2EE} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423431514"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b000000000200000000001066000000010000200000001c2ef1d8a7817435bb777c06048614e1149b76add5ef762daf3158ffbc7b6e35000000000e800000000200002000000020e9d997bc4f251cfe5aa8744539e1bc65561a0c3be2d3b14a0d85d0e51f6be92000000031ecf6223d2efa76859d497cb187c4fa1458acc8b242117c3f6cb0996693c8434000000001a07b49d746afdc3ed862e295166f0b6d0c434a97bc8be09d5535c9e4b03c0eeb4b54f28457af8ec077f3c42f9283e1defd8113d0df09144a734052d8453a5a	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 50fc65e158b4da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
492	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
492	iexplore.exe
492	iexplore.exe
1664	IEXPLORE.EXE
1664	IEXPLORE.EXE
1664	IEXPLORE.EXE
1664	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 492 wrote to memory of 1664	492	iexplore.exe	29
PID 492 wrote to memory of 1664	492	iexplore.exe	29
PID 492 wrote to memory of 1664	492	iexplore.exe	29
PID 492 wrote to memory of 1664	492	iexplore.exe	29

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b7e63cec6f0d3c409eb268625d688c8_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:492
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:492 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1664

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
de122c6e28d0cb7ad2a0dd9a5abaa8b2

SHA1
1a4f56bc76e905c6cbe0eacaa69df7c6c828274a

SHA256
807af131c54c01549b49e26dacd47c7df36b50ac7d956ab001c7318ecee025b9

SHA512
d2f5fdd53411420a2d66afa218be71e88052b67735a38716d167608b7799a53332c9495629f069bd23d6707ade45ce85aee6a3dd82ae8dc8e74494b86decbae2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
708b78f44b2fe07df76960375cbd1787

SHA1
ce0d82bfee256e745f1dd4e54883f79010a0442d

SHA256
8b5dc286a2eeb82896852af576d2c6e334fdacd3831cd298a372bae33365a333

SHA512
555c7f958ae763b12ec323b1788fbaef4a2998c0ad003e6a85ebb344b4736a447a080f50a48631a6514431753d43a678827c2bd9a2cf59f6ab255583d43d9bb2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
13a18ddb2ee54ef2749a55904cc17026

SHA1
22049ae7e660bec4d09272ab6eef8d3c91d69f62

SHA256
01fc3b864a9eab7f898d2a6272c1f35523163eee897ac576e24030c186e4d351

SHA512
d1541afb84171c83f182e3184651b3ae615d5ed9ac0cb54948c09e4d94ef2d32b3765a4b6b450918051d350b5112e26cc53c6850794aa485d2e9fcc81a4216c6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
98bad6bbec05a8d24655e56540651810

SHA1
cce8cbc6df1b7a1939cde3d670dd602afea56ae6

SHA256
619850ed0b422359982d0ce0fcd099f2b00b42c84bac5ade1304cc40cfa5148a

SHA512
01ec2b2039d2fc9f1447fa0cb3a2ae3170d9023f38b5ed440f731b90cc6698347d7ecfe514cda9653ed271c8beb60b5be445c4ee037afa93223d5182edb5e9f9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
eaa66178bfbbe01f85435916602fd08b

SHA1
683286a57e6ca73eb685ec27f6be7bd6064f62bd

SHA256
385aa818be99670e5eb9775bef76735f7db69bd791860ba1f42bf4cdf18b1d13

SHA512
66641409cece852497f23318c0dbb2ecb442d5abc038fe03540b7c526919af39c9e03b557ce15dc11b2e5177026d56ba4ddee6adb15ce936f6e2be912d074f4a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2a2a8597577e5b632baadfb36d34ca98

SHA1
92b3541c903fe1593a7b984b0e8d5ba0965fb5f2

SHA256
22a8d1701062da849aefea4e176a05e2fbe83debe7375a95589ea739c67d855d

SHA512
222958c4b9c4abc8ce8dfa2869e5874e4b30d24a9838f1cd6a5e04c6cb8b8e201c08617995dfc0652fd45d283868e8109fc161073a6820993969ac18253234ba

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3452068afcee365979138febe925d908

SHA1
6f90ddbbcb58ef9d54225ffe088410044d7da06d

SHA256
14e5d2f31587d30157d5fe41ba949c541a8e735179d08f38c0f17b422db1e027

SHA512
06f3a1ccdbef94cf6d0fbc6af9fae0e19ea5dd2671964892753d5d4e7ac4b7beca1906d242461ca5c86635ad14ef3ea4cfe7ba50a9bdd0ba7e15c487c3d55a5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2208f8b8d53847d90514d6feeac295fd

SHA1
d0d15f4d94590ea09a52772d0b48dac00449eb30

SHA256
e69a953b126ff1038d1e92353b6da7dfb160954aa967815ee5b3ce920bb5924c

SHA512
a14fb132a24fb33024831a165c7d8570d135b55281713f48ff3fdd4f4853c024d840aea2128bc03d19766571df08e88ce7a9af879ab3f2259b4cb55db2c431b6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6797fac13342d27bfc6874b0dd631d63

SHA1
64e300e5701455d4091ca60aa68761c88ca07e68

SHA256
4719a749dea7ec998232be3640591cc7a6c9fd5dbd5f901d946530cfe7a4b72c

SHA512
8a459988e3234767ac82f25d14509f163a91b8af808fa6e3bd58c860db95fb629bd9a7efb4d003d0c15e5b4d8e5255c7b2e05be92e2c64b978ece9a0760e5cd6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
daaa009acb80bca92de72b61e8188362

SHA1
14e3c1c7ad48f51f52527a325f6a1cc659de40db

SHA256
d60027c8de68f33b0894feb22b609b4c610d314afb1256d71bb99ad99fa75fd1

SHA512
721e3d58d87409081cc4bd5f729b445f56e0ae872922e9d4f072c20bef5a0435902309599d78d25ad9c7003429321216464278e1a7b16c920245d704d9466713

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
05503e36775a8b3e0fb80930eaaaa62c

SHA1
258be44a817a63b6aeca0f5f71b6a7b8994936dc

SHA256
4121abb131f1e9c04055fd095c7edd965d88be51568096129605a93ddda9a72c

SHA512
0273b157f23dc128c0dcba429cc6083bd8ed2f0434933b413928347eaa230f7f95c97cba07f990113bb39402ca1588e91d5943d4a7eaa2c21ed421804d5aea85

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
02659853057a41f9754e092e98b6088b

SHA1
f7144a0545a5d69fbcf837521008a66e75f149da

SHA256
08dc318c37c3e90fbe22f57c48f62d475072585593d3df268c03aaba54b4a2c6

SHA512
3b7f3f0f056bc3f9fa4f876ba69948a3dcb9130ed874d90cf3d47eff7cda6fecdb15350d6e684f068fd78ebaf029fd77ccd5663a277148568da88caf4f4a347c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1d12371f66a93a6bd66f4c4747a5abb4

SHA1
9fe4519745dd67520c888adc39090d3880e46523

SHA256
c0ea4431a6bc60354271848879b51976f5a25d7bd0dd22536dc2fdccda30778e

SHA512
32501082b2ff6e4056fd7c050c356bb7ba0268700ae057ce9c19ab9922aef9f91949498165ca333685e2bfc25c646e67dcaf978698183d56cbf6095c585c091d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0caa65a8db675819201281912edce239

SHA1
bdad78e8a0c39996d5173f653cd28207a690ab05

SHA256
f60215c0ec24d584a0554dc9eb69068efe961434f74909d1036d351d5d484b0c

SHA512
99ba4867c62bb576134c1c9581c7f93b56ceb536fd6b42e6f48128a3685a1cb0b3c9f11326ae83cd9956b6f3a0b00a70574e1c7bb45782ceed6d7db373f32749

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0719f78d94bdd6d21c4342de34f7cb71

SHA1
e1e678d9ef1047325d11ac0982a0fd1b0c1747f3

SHA256
cb25e07a7ee7d8bae447e85428a1bd830cbecf728d63971f30235ee751fa3db4

SHA512
9fa8ffa45cb9ebf2dfe8b305a19fb31aa1865d850b6ff75eb9a4b845be8825388daf137cf8309c447d68890ae19bd8495d764c6dfb673f94194e6f387f7a69ca

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ae0ecee6aad339fae8be131221f356da

SHA1
c02a1e3acb607b36a289e497a577ec216b5caacf

SHA256
3443b2e3b1a78453e03385e8630257a0b3309e7208cdc3b6b8e9263bf50a91ec

SHA512
da5afb3a69ff130d617168b5554a834c32ae40fef8914da2bfdb1afdbc532b996332e5673e4e8f298e1ebe995873d9c30bf46ce894cba348c7e27d6948f50168

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
469bc977a01219683a72fced990b6672

SHA1
808f50df01f037abbc3ee10d6a268a28118f079d

SHA256
24d89afab7c4fc1e518f8ea04560e46b78eebddc153f26c47788c840324f207c

SHA512
ce1d094e0790ed92a91a1a38e8b601d9c2fd06497e45f722e7c46c3868093cfe0adfbdbb0729ef9d6640c3b3f220ec3ff1681dd1c827ba36f070fd6449ee4555

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2D1B.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2DAF.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit