3f1320ff64c6058a61de47ed6a43440d18497a02749c4e567132ad749fd6b112

Analysis

max time kernel
139s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04/06/2024, 14:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

9542c95adda66ec1e8c64076d8257582_JaffaCakes118.html
Size

131KB
MD5

9542c95adda66ec1e8c64076d8257582
SHA1

de4c7842a0cbbb40822a6d18e6baac50fbae48d5
SHA256

3f1320ff64c6058a61de47ed6a43440d18497a02749c4e567132ad749fd6b112
SHA512

f4f55eeacec37787af41a622663585fec592acd0706f17e68c1a7ab20d2dea292d7085f84b0d091ba6ffe6e7478ee2866c7458e25f8c27f5e5dda5aa69f2e4d3
SSDEEP

1536:pZo6mpj/ZulxyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:9yfkMY+BES09JXAnyrZalI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423674682"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 3083f84a8fb6da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{3645DDC1-2282-11EF-9A09-E25BC60B6402} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000078b98e3dc6ef81449b04fe6efa12648a000000000200000000001066000000010000200000000ddb76ab77cc8c53d2f346aea2910a4e871af30a42c116fbd45b57ab5c5c60d6000000000e8000000002000020000000f8a5c475ddfc193f61cbc128b64591b27a1913106d98f8264495136b53dc88f32000000002f26c414ab2dc1de72b9660d0538689b520ac661617456ec79590e5d363437d40000000e87193b8757b59959f7b7b8c9c05e8502bb2a7830001fc05f96ad45ded87ba0bf642f143d876ed1b1d951d9d8a2c35ead7ee521180830a13ccf2046424e5655c	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2884	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2884	iexplore.exe
2884	iexplore.exe
2632	IEXPLORE.EXE
2632	IEXPLORE.EXE
2632	IEXPLORE.EXE
2632	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2884 wrote to memory of 2632	2884	iexplore.exe	28
PID 2884 wrote to memory of 2632	2884	iexplore.exe	28
PID 2884 wrote to memory of 2632	2884	iexplore.exe	28
PID 2884 wrote to memory of 2632	2884	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9542c95adda66ec1e8c64076d8257582_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2884
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2884 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2632

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
320bc5ed50a9e4707659f6cae470b4ec

SHA1
fac967035868f88cdd1831c9788f8e889bd9b948

SHA256
fae3797058e572c7e9121c8e65dfafe72e0226add5b92127078c1a526acf5e63

SHA512
005c7f7117aa0f03303948bf5b697e876e09d6a102b152abc7a2ff200b9360b8c18e3e558db998d91e008f321387b0f201e52fc147439eca0a51986a5269ebd6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
931779ee064ffc8cdca711686d2cb97d

SHA1
8b55050b072f6abab0ca7dbe0a94566f2149e935

SHA256
79c6fafc1046c564b06c7ec561cf6f91ae7f8d67d67d9a087cace300327f217b

SHA512
b465465202067a29a34087016080d5d681eafa197f86d120c009db8bbab790217fc1b6436f29ca5c78a94ec976442ab4ebe04acbdb7eadeb3ca29898e00dc4e6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b77bbe13b26e3ab239ad89edc88e7554

SHA1
fbdc6dd6a1849688ff55f34a1995de9123ff57a4

SHA256
6052f1b230bc370c207f3cfa440b8c67f36606e3b2be42765c42d6194b187270

SHA512
201ec78b0a9ba6de47bd9b5bed7d431f4c29312d4d2780f90d6c03b2098c360a5a3ed0a14c404d71d28eafb37cdb7474d937e11f902aa465782c7a1a5852979a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f1e7fc0b98b412eaa9aa656cf985ae19

SHA1
8004ca81fa7c623b641023e042aca52e894a57f3

SHA256
9e80469072f1a11139d6c8a1482c524f3ffddc75507bf7e72a182c2076f31102

SHA512
f5d587fc0cf9252b9bdb1c0c719acb77ed0c83bca983c54b79e96fd76c79437f1976314add15a50d1e1c3a0cfa24b5e326aa767c38a94b4e71216c9d302f4e3a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
22c44a816d7ec73f4157cde7f968dbe7

SHA1
67340b3b5ebbb0938be61ba0de0a3c69ae68914e

SHA256
a8171cc98d92401896d518162f583ecb810b9e565c30130fb03da74149f9c170

SHA512
9e9df92b7657780b48040518b449d383b63eb904939a1bfb4d1b6a29525fb17d8d1377c5a7d561fe3f6276e39822f273edd53b44ef0f741b96042d53dbdfe983

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2f869577b2480c0e58da829faeeea4ee

SHA1
ee4005841a42a11595572d9efac230204f71dc04

SHA256
b187289e92cace3cd73a903340920822e94712a05903c596e459ce9689be8dc9

SHA512
e2c6e19ad6e051568f1ad77e84afff6d75a05f2b74254b916200c2fe970fb4f4460563f0118d3c550ec2472f22102ab76c5051d1621f0331a1ff879d48017004

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3c490a97f7f6f2779a1ec4e6f9e176f4

SHA1
f9f301a3c661601929b69bddd98c0d4e26addaeb

SHA256
ee33780ccf353e3943d9ab0cff1212bd711f2cb458ad0696560e0f6aea4dcb91

SHA512
f30d93868543482e9f5952ec78c8ce0e3aa217a67b4c17358089d7a233fe7dcb56a9c50878383aad00166ad3d9b33d1f584286c8c1f7895bcee31934a47f7e54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ab42a734b0cb817315ff6b91d37005a1

SHA1
c9a74e8a6bc467ce9c8d70b59f05bd2d40b572e4

SHA256
0725313a02dc71a1328ca808e67a06bed9ac47eb001afe7ea8c4b302276741f0

SHA512
3c2277ece29eccdbc9f2db288925a2d5200c3730ba8b2a0ac2afbc57400517c1d4b10309f2221bf5d784c2e9cf42f281a92245d55114787753872f5cd736f14c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
962c5082970b6b0f2bab5fdc7725af28

SHA1
6cc3a597bcc1f1911ae90ad5e46b92bb5b6bfbf9

SHA256
12344583c076db54df1889ba19d044e08ce9313338f6cf660b6eee586f86e187

SHA512
ed0b2862aac3ee040a0fd8d9fde15947090767e7bb30911de4fa0407f88c5663ccefbcb1a1c5535bd62651e8d371fb40678f0f4a96fc1a86c20b64b2985152ba

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fe05e2d9f766b9f30aeafc7e9ac0e775

SHA1
e1e1b416fee478f4360038fcf3ed13e1100527f4

SHA256
4401f47cfb5c0ec7bea3b8a760c10c7fbee01bc03e2461b37dea55db168ef099

SHA512
ddbff2b0f6c1c2ab862cf13329c7be4cf509139b438ed4bc905d9d1e7bb03fe8583d10b7be37b1c005709cd9aac9553d9fdefc9e53a189f7cb48a06bb64c53e5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c10b927dd2c155ecd1bdd6ab9e6cf750

SHA1
794a3307fb46e3baa0cffbc759bad250afcb5adc

SHA256
07bcbc95b04f04ef025cbfd9b9eb3e629fc77c622cd82f4e0596b595f154cd82

SHA512
9bf5918f62bd99e1972dcb519e83d6c7183d941ae102319c9826f4b4e1878906f1bd8c36371925ae259d5b5ee3a20d54fcf4abc4c2ce1a24a7c2f5e4331193eb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3758b87e2b45417dec716c79af015072

SHA1
fd6ab34b403a391cc2b7b29648a6537a7250173e

SHA256
88bcf74b182a3b5a125fe9cd2306f77dacce8a5a248638f194d9e413b3de4cd2

SHA512
6befa3f8523255ae080c1594f8080510e408912854667637abd804730615c5090fd1cc82c68943454e0a98a725e6990b2fba0178c90abcf519fd5b246249f65c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3a06754d1f775880c1759eaabd4fdcbf

SHA1
354e2b1bd16e669617c11f623bd0efb54a02da90

SHA256
a0eeb17e7058d0b69aa88d939f8390715682c568aa007ab275e6a566e1f48bad

SHA512
13d79de0f36a2b62ba64963bf5ce6959d49cd9dccdf9ff23547f4292472154e076ad5cb7a754db91fedfb627091723d092411eb7138bb744ed3ce0187c0b6ddd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5a2f6451c1e6d4498fe70f26431983a9

SHA1
37c49ecef189df7cc6c2dc06b400f13041867a9b

SHA256
f287bc278b2e0ae446fc04475bbc158c01c1a31fa78477d8388023dfb9317741

SHA512
0e97872e98b6a139197c74b03539d302e035f71bd4fb89db3d563615b041ae8cf11f432a34cac92b52ffe9afb22b1c103bd72abee9048bfdc60b65dc9edd5875

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bd84bb7084990351d762a26c1a9ac5d0

SHA1
45e56e580e7ad4e6d22bfcadcc2757532a94690d

SHA256
5b4dc98404c8af374b7086b25760ad8a6ee954fe01ea0a35d4dcc4a064464b7a

SHA512
ec95436848b4cb0544b109b11b18cddae60f1860e091c5819f6d4d6b5b4126fcdf13f80cc9f56d26eef1a117b31357e5d6b4e53f89f9a6b8a341bb18d0c928aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab7E08.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar7F37.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit