a82179ade07f496d046dfcc5a8aac5432a166d57b271956ee7cddddfa6234d7f

Analysis

max time kernel
137s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
06/06/2024, 03:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

99db3d44ed0a728d2faff63fcff1a0c2_JaffaCakes118.html
Size

47KB
MD5

99db3d44ed0a728d2faff63fcff1a0c2
SHA1

221734341e356f7e1b393acb3507afb2ee148713
SHA256

a82179ade07f496d046dfcc5a8aac5432a166d57b271956ee7cddddfa6234d7f
SHA512

cc9f996cb2b087cb8369e1c9613b697ca8a8b1b0265a4e694633abf8e285e7ae97409c30d4271684f9deb2ea2f3ee1254baa902b500fc554b34a4735e8996d42
SSDEEP

768:LV5Expw2I+Fzrnr3gzgIIgdwiqMm8wu09qIf++I++dou4j6TvpI5Ff:LV5ww2I+Fzrnr3gzgIIgdwiqMm8wu09N

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 8055058cbeb7da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000009d4be610dd33b489d988823316854d200000000020000000000106600000001000020000000f6c0669a2b9925ae9a04915f707e5a2f9d80540c0cec947d26cb69a4a72f6dc9000000000e80000000020000200000009df017582547a26156daab8a0b2dd64a7f6b03f0eb757f11ffbdb75d6a36018220000000e6cba3facb069e9e1aedcd9f262c41cb30696343867111860cbfbc7101f5d9fb40000000aa45a0d2132a3aa33c181c3e138ff931eda1c153c752d79cafe84218e56fded7f41194d46831d5628413430fec98ecde913eb616f1ccdbcaa93883d19d50929d	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{780425C1-23B1-11EF-8698-5E73522EB9B5} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423804930"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2804	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2804	iexplore.exe
2804	iexplore.exe
1392	IEXPLORE.EXE
1392	IEXPLORE.EXE
1392	IEXPLORE.EXE
1392	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2804 wrote to memory of 1392	2804	iexplore.exe	28
PID 2804 wrote to memory of 1392	2804	iexplore.exe	28
PID 2804 wrote to memory of 1392	2804	iexplore.exe	28
PID 2804 wrote to memory of 1392	2804	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\99db3d44ed0a728d2faff63fcff1a0c2_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2804
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2804 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1392

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e5c8c9b2d214444e51b5b39a4c3377dd

SHA1
e6d6bedb82b258f17c1173a621582008e9f22f0b

SHA256
20bd6af803480021824521b33aa130b232cfd4afe40f5d83d73e3afe2e39a72e

SHA512
7f002b173a917297c34aa4426ae5e05772696091852136b7bb61e030e82c2165034fd12d5cef9d04739c84523d151b662ab6e76fd0a6ec3a97fdabf6a6fee6b4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6ff332e92d0c9b92dcbde2e6be1410f0

SHA1
b1e2005d793d42f6013435c5f25d30269c1d3a80

SHA256
f047a7bda2d83863283b7c74a8688f2f422269fa486d8b7de19fd8225fe3b412

SHA512
d9cd09447e41e703a148e9486b2a95e499a0b189a83e8ffaa5d5ab978dcb8ae5b97f13dd3ae9eaae7e1f078b5f68fffc743ea631405c08c80ecb4caa47a358eb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b166a89e3109a333244e76ff3f39ec57

SHA1
a8a515567a0ecc4f037e80725a6033bccd485b57

SHA256
4c96366b1dd4356829b634d7d68b4a0ed926833d0537ad99404a1363d17ab45b

SHA512
10f67c66617a4973c67eac03ecccce389984e6eaf71e006d01301f170a2c8514d66a4572d3cb954861a5628554d691df1ae991764384f168b446fb200c0dfeb6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a6c8ef62779e5443e911491c69837b51

SHA1
89bde7fba2fa06f24977caccf379f13a2346674b

SHA256
982dbee6a77ac8a1b17105bc885b8cc59a115b7c8fb75311404b97f2444f012f

SHA512
0b51bbecdf3f08bd958cd94b4d7b856493a830bd41c019e63660ecb6e5db87b527950eeeb9ef0c1906602d00531e44050c396442663ba20c239f479dc719a71b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e451c6b8090eace32a030a8eddfd8c13

SHA1
2b1e2757369810aff62606e6eb4d74373d12ce01

SHA256
b16c6509a041d3bad018a9fc16a736b8544c4a1803ef0642c43c7395fd9abf49

SHA512
ddd9458798e640f0794fa6fe08725d7857e1d3fd3a97fb4b036b654c9fa68e8e1c40e38411948ddce7356006d3a60afa075d4235825f4a86539bc0453190fb07

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
95ae552dbb82900f0ffa8752c898dd04

SHA1
72d801d1d0ecafb7a8a6e4c0db0ea4ba4e692169

SHA256
757571bf1b15e1f8ae797fdb35ddc6e04ed5e60a824c5940475700e691c4cc08

SHA512
d293d0d1430455959bf80f4974692557b12258d6a97a39c04a57fe7d17c4302003aa976221494fb56efe3b779f3b7c3359bdfd065617e03dd69a0b2f42af69f1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c47d0858915b98ba9f477714e31c6e78

SHA1
0351cd1c09396e79e48e57788fd8711b5e590e7b

SHA256
98778f72ce884b773c9bcc3670e7dcf32f62a9575f40dd792447e29b90627ecf

SHA512
cd12eabcab28407bde5b853b2d626cc0b9a60796f05288e1404db6c48322fa685d6357868996667cda55407ea3acccd2f06ffb65c1d2d4f2b9a244358f78e9ad

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3ea5b8b9508303d623e6b90043e1a3cc

SHA1
7a2433ea70b5918212ca53617599358194dfb11f

SHA256
4446888a289b366fb86b134dc6d90e7154c28e48ea49f1ef6a452515314d9854

SHA512
23bdfe87ed9272a3487c33efce245af1c71b31ef69341526f9f0257a97f772315e89d642ab7f0b15dd2e3e96ad28793b492d6ffbea593d347c15a66483ac802c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4e74e093c8a7e883c53e7246e5cec1c9

SHA1
552ea0f40fe7776149abe5e42f4c68add07ec027

SHA256
c813780785be0043c7ee6270b45928c6fe3a1c3a61784b5958c81af1fe4fd124

SHA512
49209c4e1579a4835049fe88d9da968f422fef52a52531893914dfaee201d24e88bc5dcc09106fae5806b7888f7a400e8848b8bf56f554b4932a1a16843ffc40

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
34305aed16ea59e3979a826fb07175b6

SHA1
277810aa1ef11e057df0dc528d63b8ece74da720

SHA256
5e32dd8ed8b93d3bf3a2ba801714a6ddeaacbc40988c1870defc1a59ea11a001

SHA512
2cd804d3d501adfa58d95bbce1ca00e07dbdf123c67743b95b9d5b6c3d050d9d00909a4d37822477197d14889fd95f8f41151214e34ea4cb61f75293a9e21659

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2f5c7aafb57b4a588f66800ad34e3f3a

SHA1
6ea991a9870e2874c301d5c53205997cb0692fae

SHA256
32579dbb7b9bbcfcd6f0039d008b175c8e294277a0ed6d1e526edbd2a1903d10

SHA512
922ffb4c327eaf3b2b3a3019302a2dbc8125aee7e5d0160669d7c487307cea10db6fbcbf1ae8799e0797b32459295653f0551a31af84fd65f5ce01fa11a790ad

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e8e6b2b0793b37b9d7972386d52920a4

SHA1
60af3f3a03300092e3972449849d1d11da6bd8b3

SHA256
dfad07cc8babde30b81f4a684f358b55ceeb2b338ad8491b040d47748bd17fda

SHA512
a39cd9f54a2d0b9b31200c99c1de4e51907096b08521ab7a770c76964941729bf7ab2dcfc8838f0d05be04ed7e4bc334758bce992af49ff89e04a6f3c3a4eb61

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e8e7e8dd625141b05d960aed61a17878

SHA1
b0a1ec0802f3caa35f576fa58ebf115cacbb9e65

SHA256
8696951481e616eaa19dce1f21264f8d22eb49873c2e7728d4a6798a35749255

SHA512
0dbf78da492246b022f31f8822cd815fc8fc1f52c0d8c840d87e187abf9ddcb2d6925040df416ac00f123116fadc6649690f2faf7524f4fe407f637985b46c95

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
868215968a3611619c4e326a983193ec

SHA1
62812cfe1c7b0354bbaf2094f7c62a3d6e6d71cf

SHA256
721938305dde2f56658f5eec73d8926b0669fffd1dfd1af1a308428268344987

SHA512
fc4ca1208ca6ca26c4ef38ec9106d12a857dff1c84168032c6ab4283f35fa7bb47930499f7d300867d0e81f37727b1aa2fe167fec8ffba31e475eba06eee0f79

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2899010bcc0287a8aee8d5695f677b60

SHA1
4f3f6bc2cb079b33ca0260d582d93bbee7f6c826

SHA256
e3556a6b9a3b4616b6ef4af155a380887977946174aa456438dfd98dd2874da4

SHA512
3096fb1a45e5aeed32c356d6b5f67f3ba416c7f5d321672ac0c194899f6ca28356abf1d4789cc5a7550c3db2d8b2ec7edef848e1aaac0cbab322924ea85de45b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
99c73c892bb1c035c74f519fc71e1b88

SHA1
5e93e34309780a6ab48271d34cec067a7ef595c6

SHA256
1acd59f30fbc6362322492f166f3d8976552c16261bdb314d2a6c361c2c914d4

SHA512
457ad4ffefd7af9d88bd9d210147fcfdad94d3c824ccdb3e1d98f7423db8f89b07cf65f6a858e3e00c2cefe849708175db8b7a044c6744ce5d1afdd1abf020a7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ab87f24fc68ae346fc5a7a25c19811f0

SHA1
56832e99bd39aa5e701585a2af8a2772d10f55e8

SHA256
f6536966aa08ca1da6125714a6f38c2246c50734a96fb64b2083d3693b8d6fd8

SHA512
28b7ea0279965645c0e3b07e4b55eeb53f6ffb84bbfea7b0d8396a324168694629ce412ca9780eea4a23c9f0293eba8d9f1e4cd3c8cde425388d429b47937323

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab77FD.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab791C.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar7A38.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit