5fb4f9cec04cbe9b33dd433ef134a5fa184dd0dd08f881c1036e0d8b4008e380

Analysis

max time kernel
133s
max time network
132s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
05-06-2024 04:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9738aa513925e7516591c114471d4d97_JaffaCakes118.html
Size

213KB
MD5

9738aa513925e7516591c114471d4d97
SHA1

6ae95a1ed466bd20bc84024b0777bf2e1470283b
SHA256

5fb4f9cec04cbe9b33dd433ef134a5fa184dd0dd08f881c1036e0d8b4008e380
SHA512

cc00ed33c9eef6c739f84c0ac9a9b6bd8bf13d0b27825886c63fdf346db07c8a680b7c65b312957312d294c9d830ea79a699985d66f61b97cdc22f061d56ca1e
SSDEEP

3072:MrhB9CyHxX7Be7iAvtLPbAwuBNKifXTJg:Uz9VxLY7iAVLTBQJlg

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000006415c87e0477b54d9d6e1ea7b08a24d9000000000200000000001066000000010000200000002a18b452fc1cd3c78bd44c560d8565e5ddd1e1b5f30873fa1cbe7c6a26caa59a000000000e800000000200002000000054d0a59d890dbec347dc28bd9f77a59e2bc51a1e7ed028c4323b045d4a85dd3b20000000052d562b8724f591b17900e4e5be8164029dab7ffb77d7cb96c81c267f2b896840000000e92b29b904b1fb09eb408a4a6f04d881cfc56945c7390b016f4518394e68b787e785c269c39cd496029ab08a50e71064b25b9bfef1dc80fd1ec5fddd1a192dec	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423725088"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{93D929E1-22F7-11EF-BECC-D2EFD46A7D0E} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0a5526804b7da01	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2976	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2976	iexplore.exe
2976	iexplore.exe
2640	IEXPLORE.EXE
2640	IEXPLORE.EXE
2640	IEXPLORE.EXE
2640	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2976 wrote to memory of 2640	2976	iexplore.exe	28
PID 2976 wrote to memory of 2640	2976	iexplore.exe	28
PID 2976 wrote to memory of 2640	2976	iexplore.exe	28
PID 2976 wrote to memory of 2640	2976	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9738aa513925e7516591c114471d4d97_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2976
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2976 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2640

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e84cbe0faa3cb9db5c1c36e0140032de

SHA1
20537fb554764cff274facb5f931aafad602531e

SHA256
82ff98a5d4e1a239109cc0b9da2b16050eb471cc95cdf5e64d25a92db8af9911

SHA512
a18501bb94ec20da42f9450f46cf40bfa90f7929488246178dcdd12a5c3f1c6e0a715cf70c0f4df27c924c90120ffb99287d62f770854f7324817856c57d5038

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bc9249a33fb652e55d8b596f62709d9d

SHA1
cf1711f02f7f6ba70be756c0aa9850aa6145c090

SHA256
c1911252dc081217c63028dbdbc66fb8f6a2fa128346898bbc74b001484f8273

SHA512
b1d090eb977bd9f147e50eae2a379569a9473de4cc77afbcf472713fba86512ea110d1000536dbd37127b40a56342c4ec86c70e394eb0a72a480d99a451b4893

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b8d7e1d058e1ebf140385641aa9e7763

SHA1
260fc6e8e8b128cdbc682cbccbb93d35702a70aa

SHA256
a89fd4538b114a7d2f3baec10262ad22ef1907f00a135c98f92b48e5c6960bb0

SHA512
be865078193ad8bbd57443374c1aed492d6362d8a091596ed7d368e4bb4e7ec73fcf552a0a58dfb04450819c78fed722f9798c6cef8cbeb3343426319da6dad1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3e5a0bb27d4d26c09b220d95caecf598

SHA1
7fdbdf0896b199b45f45178af1c3befafa2ad427

SHA256
bb127b69d1ded2411384346b8030a4e580aa4826e786ca1a8c9c63d2a9a9461a

SHA512
f375b18f1f1b692248e75a34b7d15da16472d40f912773d43fad882894656ce3fec34f71e5598e16732c25016db526bd80f334791adf99e5c3f054deaf413cf0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
23c50f39b1145098320489a461440aae

SHA1
3f5bc9f5c49601624be6c61b2a36a550c1a9b144

SHA256
384b3105d0e5b4d3faa3ae0fd8196905ae41ec7b3298bc59aae7ee7872fdeca0

SHA512
2b6ea5ecbcd2d2634f9047eae58d08e7c89ebb358358da1d317195182934711cd72901b7f34e49234e147c4c52c6952d61ad4db7fdbea7612932b5fcfb2057c6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1fcf5d5e7cd830742b99d83b4d074319

SHA1
a7a943af6d02a2179318caa0cef7883dd6e9a03d

SHA256
ac33f1effa8ab3086da36d34d88e443510cc072766a3ade1bc1f8d3506cb0cd8

SHA512
b3c34915c6bca79bfac82db505259c72a28f5b321c1879b4f12f65cbd8555fb19e70cc38e21eab7d9f3dd5f4074d1b88b9f07c2f93286fedc6d551d7fad39889

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b4d6fb494a95e8a613d888b562615e04

SHA1
79a5a6011ff266ec149b71f8f19b09ed44f67bc0

SHA256
ca27f531bb04832dc4f08503960e0c14e054ae566212cd2df953949748251787

SHA512
5ab6b3b5d644e20ed939f46ec7a0f579f4bf67dcf0bd05ef5429824b557168e4fd11df971bb0c4981db00f8a22e4d2e94b45c35828fab66bf76a231b59893ff6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
180962a549c5ddb7153d211b648d2c24

SHA1
c32ecee13f69f14d29527d0765161a3acff553ac

SHA256
ffc80cf3af264eb47bc7129a95feb928587b575b5987d5121544093a496a2d44

SHA512
7fe8ae8bac6707bec1256ba14c12f92881c45be75db6a578e08a0a5a2600138c4f2232f2bfff03bb403604bcac1770c3791b1c8a42cb04d0627fc2d9d5ee9e20

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
46a0a186edbe0725b15d323400de9c0f

SHA1
f253be1b91c9a6c0c866179cc2fdd914fddae063

SHA256
6b125b57aa87c3c51cf228f9f8283130db6554b3d38798b38ffec238237bbf9e

SHA512
302e25b37c1f1ec94e4c8936181bedaeca89553527122fbe5b074219c33157a60c43fdbf0c6c33dcda75bdbfa5d541b3e339b4ea0ceab9c8ce1feedbc8416166

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
86816c74e782db2e1f6562e98169dd47

SHA1
c2cfe0278c37eb5caa76972d54e8a07464ebce38

SHA256
a3b91d29610b58ef1030af30ec0234ae86b3c164efe90ed1f3e040e72600cf9f

SHA512
1f4a83fc4943dfa2f7e6bb72ad6e33dd0c514bd0918c316a9a59f970a2d8b8e1e1942eca8bf0fa98b296850cb0ae64186d42def8bdf0e66c92d759f6a2847cd4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
46678ff675fe7ef5fe0966801caad23e

SHA1
0088f64ac534b8eef05c5772621447d232c1b591

SHA256
56d4ac5dc0227d453a31667aab62a0cac1fb920486ea2590c94a7dcddf0e37be

SHA512
c928c899211371d414e2785289c2e25bea6a615495d4dfabe5ffb3221aca998a2bdb262071b4709a4c08b13cac120e71ef3b556e75d20e9c77810d4d1756fbc2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ddeb2cc290955092c1b2158a8b1171e5

SHA1
cca6c7b0a6bec2616a7e100b9fe32cc89b881804

SHA256
083bc72d6c3a05a21cfdfb23300d7f8717296699516e7596a7d7eff8122e6f62

SHA512
4b74cfb7064521e35e0daabd4789a975e4d2f9d74d5c4b538c40d79de266fa8068e513a5d6008b1033ebe5f0b43e5afcaccfb23a1cc9105c2ee84ca6a41ab5ab

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ae0103ebedb608546c981830b91c3edf

SHA1
78dbf5465e794be7cc90e3babca82b7fa076c4e1

SHA256
fb92d804466d9ef6b4990a2c805c34b57f49c649300a255f85ce43ebb8405197

SHA512
e047a55a2ca4879dca5c813fb47a4b33931255eb47da5d4d058ae5b25b53e4991408a27de8ce6359ea221354fa963e20e3f9643eb6b99c24b607b34528e98e59

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
03b46ebe5272fcbd95fe2806a9bbb201

SHA1
9a71839b7975914091e39f819e662bc216a37905

SHA256
1bf7800421153ba839b19a7d5531da76b50456ab7e150cd9ddaaaebb6291a397

SHA512
8cb68a83bbf3c35a9e1271f8141f8748f3d1960939f3fe65496f5ed70189cd1c637c2b83b973c166e5214c97baf25e5ce0aa963ee4a139f585f62b9e9124f897

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
349963156b95d6031ce30267353da895

SHA1
a4dd946986f42e0da80178c4c8aba63510e5288e

SHA256
6b665b7a9d1d4f024a4c80b234bc4ee273ef67d357bf0115dae070f94f66b4b7

SHA512
ed91c90f903954986bb505ef622b9e7a43ec74c8eefe34106ae268e362fcf5b67faf92d6be7fcedcca34d803105f0b3997c9f96e95be6d816f6d203e2f1bc416

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab259B.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar266F.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit