cba4f1b3d95af831025049103c43745357d5d67e52e13d8e2d3787d7b7cfa561

Analysis

max time kernel
137s
max time network
132s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
04-06-2024 15:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9556fc5be4fd59eb3e96416c554cdffe_JaffaCakes118.html
Size

26KB
MD5

9556fc5be4fd59eb3e96416c554cdffe
SHA1

3dc55cdc6b767bfe3dcea2f73778d7828c37a260
SHA256

cba4f1b3d95af831025049103c43745357d5d67e52e13d8e2d3787d7b7cfa561
SHA512

39aee1016c57bc7860acfaadf174e9acd50b4c86ebc57e4a1a3d7a2854d6ddae228f35ac0a7515f1a81ff2a94dcefac65cb169f592c96776a6068c86ca56833b
SSDEEP

384:sjR8AlpG9iTGGQgVcNQd2B8+tIM3f1cDdZXZp4npB8MN:sjx/ThQgVcg2B8+tDG4gY

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

Processes:

iexplore.exeIEXPLORE.EXE

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d5e08c4896476f45860e60107af95b1100000000020000000000106600000001000020000000522031e13b48cd3aca18c4b4dd38c4e33b9473543979776916428eda15fc4c59000000000e80000000020000200000003dda33858de036a0386e356730b55266b7916e5e82b3ad27ae4374aaa698f229200000006425e2702a3df30e452c5ff3fe79046c4041c01a7a054fb78072c77330fe38ab40000000257c333824bb8e57a4663ebf4eb1404051a29dcf3279c6bf788a794abb7e8990324f10500989d1af34320ab221827a4f4bb0c7078ae52d5d5920b9e914365dc1	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 10e887f092b6da01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{1613A921-2286-11EF-BE0C-E2E647A5CFB6} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423676347"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

iexplore.exe

pid process

2924 iexplore.exe
Suspicious use of SetWindowsHookEx 6 IoCs

Processes:

iexplore.exeIEXPLORE.EXE

pid process

2924 iexplore.exe
2924 iexplore.exe
2956 IEXPLORE.EXE
2956 IEXPLORE.EXE
2956 IEXPLORE.EXE
2956 IEXPLORE.EXE

pid	process
2924	iexplore.exe

pid	process
2924	iexplore.exe
2924	iexplore.exe
2956	IEXPLORE.EXE
2956	IEXPLORE.EXE
2956	IEXPLORE.EXE
2956	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

iexplore.exe

description	pid	process	target process
PID 2924 wrote to memory of 2956	2924	iexplore.exe	IEXPLORE.EXE
PID 2924 wrote to memory of 2956	2924	iexplore.exe	IEXPLORE.EXE
PID 2924 wrote to memory of 2956	2924	iexplore.exe	IEXPLORE.EXE
PID 2924 wrote to memory of 2956	2924	iexplore.exe	IEXPLORE.EXE

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9556fc5be4fd59eb3e96416c554cdffe_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2924

C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:2
2⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2956

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
95f4309b6eaa6a0ce1cae2a52fa8f2f3

SHA1
fe192942f5f15889bbbede0d10b013d706ad5a9d

SHA256
0f1b4e7d008c26f089aa4f99d75896b44fb4fdab9bc20a6692f0db545fc354a7

SHA512
4684d04b991cc67339631f07a4a148acfd6940a5e3c1e3956258f17480fe6bc9db1350b0d15745cec08ec1944f7f1d2779f7937303ef583dfe6a4b93428a5165

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
b7498824b8793a933f4f3884ff6417f9

SHA1
70a78b1c8ca4f46441e873c64fcb4cb51f2e038e

SHA256
9822ee26678bb15d6a4c46bea9e6a11d723ee18e6724a060d13a0beaa1eef8c6

SHA512
626c5550e337755ec200bd74a26e0eb4f57106f4115b4ea7f1cb833bc29a430854030c8df2973d9c0fcd85a76800c97aa4e9f02bc003dffb9358fc352d670ab3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
13f3b95a3fda997ecb6bafb25b6c8331

SHA1
f72579130bea4de363a3a6eb3a41ba39c2027775

SHA256
7f915c5d6283d08cb696664e02db1e85c029067d183cefcb020a46098515a1c6

SHA512
a6a3086c15c34126275de0634bf8e652dd01ca94bea79c1da74bf267747796a69d74ff25652a457ad4dbdc4778c6ddc70fd7dd5e212306c678a98fd90ed9b02f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
e70ba9603759a8f67c0e35538d7293fd

SHA1
3e15856f4bb222b578aad4614109bc5117896047

SHA256
bd5ab3facd8db4d676ff70445e5836beafb4b964e1ee300eb7c4653dca7fdb7c

SHA512
a61fcfe3ba6128cf7d7ffa2b7c230bbb939773fd9044ace295458a82ae2c395b7a98487822aa2b149db5f34646b335092830bd2e497f11bf10ceaeb4a94dea41

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
692535168fee295ccdf1d74c624f9e3e

SHA1
75a6d93b57abff536fa2400c8b8f9b0babd89560

SHA256
8d7d0a06d0a74082f6e2b7c11dcd8337c2fb50140b688769fe341301a8938397

SHA512
85d2deb1eb8cb09139b529404dda2e416ea3e76e87e714550589ffc864e0448a5ab8a0f4ecd99c0e15a9b10399a0419bdfe19515d76338b420f25a169a57340c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
501821037fe96eb94c781d5ac143db55

SHA1
fa8941aa8b26753000b1906a01b49d089dbb9726

SHA256
e71d2e27eaf84850a0ccbf4a7c0a4994abca57f67ab8ff31027167c280c0b0ee

SHA512
7ffabb43ec1c17d1c00f6b3fe264093823e137bdfb248ccad314dc88778de16cdf8848ef675d874e9fdb8639937d2bff8ae87add53390b960b4ec18c8bfbb2ba

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
ff48be2d796eb4f1009b704353ecc7bc

SHA1
c790b8ff11124c4e15693fc13f9339e7e8dfd6c1

SHA256
9d530b96dcef14639271f7ded6c6843672f6c0cbdfd39a6a195352a6fb127b28

SHA512
e227146a378ed1abc71d34a005a48cb216ed978d8dc965c63d1b31c7145f31ea97d0c7b2009bf5244ed98c4b77e1f036f340b28eac4b0921a47a29a931537620

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
3b1bda602d3ee70b2f3729a3b6ef717f

SHA1
31ca5b11765c0f9a6cdd088a27640f58391c7b21

SHA256
48dfdfe3fe33aec8e93779d5c19180075852d8ec8f7166bd5d211d2efc9d8f35

SHA512
76b129a2dbcdeadc8ad25f3fa5991dccb83e419f62e5de09cf7e8124b7766bcf16c42794074a815608bf9f6e9f02cc048a87d20e5b245294c912a38a8466709b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
aa1b5256fa58117d739cce1a13dd3390

SHA1
f5e39f36aa4e4a256ba62f6074b298c58724f1a2

SHA256
48031b72053beb899fc468d94746f00359b2be140180e0e27bf4f31754e96e08

SHA512
d53eda65d73f7090c5f94344755635b55c4fbbfe535a08ce371ce33d27ce20299b68aa91fa86e03c1c3510982bc0d672f448acea718cc95ff936c703ec1faec3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
a830f056a7c756cefb1ac6499eb62aaf

SHA1
aaf4cbfad918a0014e7f3b3e3ab77dd14048ecdf

SHA256
ce8d657d4e569d4eda6f2dc616a89ae4590530e834379859976f4e9fbbebed7d

SHA512
1ad031499c4ca0e7ab4396fad01ffb51fa0c2e25da7d1829a9dfe1de888cc2763adc2215da5c6f6645c52f2820898c7b0d62b3702c9af65cf808f1f8584711f9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
398dc524c6aed6853bdcd4180262e97b

SHA1
af5f4c77c0559416d1aee149f1283a634ca76452

SHA256
3034fe7cb190d165b813d540dcafb2ededb2ff8e3fc782a86399bf672d70b818

SHA512
962b0a87aaa24fb0be4fd5bce3cc7b840734fbd246646005dc969976f96edb655585df008ebf336d77ec979af08c8f3aaa5968a005b5f9917075836ab234791f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
abe09828521481077e16b2d5d552d1e8

SHA1
780afd3fc1760da38222017bbbb7b1b8bc7def46

SHA256
08f09c4e40e4c743e5099d886869467baa0e6fee8ae6b676d8baf4c500571154

SHA512
408dc8f73936136395859b9623d768c6adbea309b9c576df91c6485a255e8f9cc7cc12517cf5af6b40b541a453bdfada22869d293e7c2e443390ac0d14406ec1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
988a22744ddaf2a5b8504c4a535e07e4

SHA1
0e9e1a6a5df995b73aae2aef72ab26724e138d22

SHA256
8287a8e6b50951e8fb05ac4f1d06302adc4b314911d5784575433c227a5a66a3

SHA512
21beffb6d383662855e255bf8d2ba31cef99cce49959c25c70185f60e6105ec655d9f850cbd81f68707b0d25899bb8554c18a5dc5b0596a98ee3eec77196a506

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
ecbc8abaabc6c75222bf053bc2c735c4

SHA1
3535487ac8105e2a97a424be592808bc850322ec

SHA256
9a207ff25c09fdc97c34a8bba3ed39721f903b5fd0713ac718f53cdf9d3283c3

SHA512
2f01b4bac2bcb4d105e90a33637a1562ffd0d077e4f905e1750a50d84adea50e5b3043d242dc927e23b95cc4b612387b5f92d32e6405b166a15fdaf1043417d3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
26d8ce764a367023543746740674cafc

SHA1
18a32835b5e42e9163e1941672a4fac3828970cc

SHA256
85085ce1d86dcc1eb2d5504b780dc814008c0d5d75e5887f51b5b1cfceaa5c2d

SHA512
c011d9c1b8a2f35156aaa6573a7b3dd42e3af84e1ae143abcd370a64f1f3855751c4076667b6d4bfe961aeb853f1f7da8928d949d51d4c02cb7fa5f06780b6a8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize
342B

MD5
6fbbace1d1cf12abb759cb3705230e94

SHA1
67dca8cfc766134c4f893c1b525fe7feaf14b669

SHA256
0343c50c59a0e8ea60e8099330ccc7c7d4c2739079983f3e9e8d39393e0ae24e

SHA512
f5dea08bc22d8e68b3d38ab24ae2e8a63a5b7adb4da94b152fd098cd479c5405fe78e5e39928a5bc44992aeae851e92166ea381622885a66e8738b7226b31ca0

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab46D3.tmp
Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar47C4.tmp
Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit