3874e57db48626167ae58dbb42cac2263250d93b8db46e067d375d6d1fb57aed

Analysis

max time kernel
144s
max time network
149s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
11/06/2024, 00:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9c6d5ed6201a62c5e8e68b56c32f660f_JaffaCakes118.html
Size

15KB
MD5

9c6d5ed6201a62c5e8e68b56c32f660f
SHA1

6c7f470cd6aa3875b7377db976d64f71f3e83835
SHA256

3874e57db48626167ae58dbb42cac2263250d93b8db46e067d375d6d1fb57aed
SHA512

638455886f6a19247540afa7d974c6a012d0671d0b7f50567dae8c694313e31ff8d625ac674363a94f4019e67930cc7f98c233e8a6f15c46dd542dd4ee94fe3f
SSDEEP

384:GrTvrcZ5SgMChkhCwO0g47vN8oloZCO/FzskoTFq0x5T7r:GHrb0471RloZxFtoTFb

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 38 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{C8F658B1-2788-11EF-BD3E-4EA2EAC189B7} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000af00ff5d39f13f4b9ca1c8d81920799400000000020000000000106600000001000020000000bb3ec9678e317cb81c32c43f306b9a6dbf2682611f4d38db6e976e5338e987c0000000000e80000000020000200000000269908c72b8a41e817261f54c66d909bd39cc8829f42faea5e746ddd5486efc200000002a6111faf53f5b27db7f774c71a9d1f475b3d7bd1cb6d5aac0760ab5cab3e8334000000015fdbf46704862c505ec30a4efb854e19e73efb3c2748f75d41313133a0229aba901268d75adf6ea5733fd5e53ccfed39c19b874b7d5c2223e5cfd68c8fcfdc5	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30f1079f95bbda01	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424227259"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconPath = "C:\\Users\\Admin\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2992	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2992	iexplore.exe
2992	iexplore.exe
2548	IEXPLORE.EXE
2548	IEXPLORE.EXE
2548	IEXPLORE.EXE
2548	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2992 wrote to memory of 2548	2992	iexplore.exe	28
PID 2992 wrote to memory of 2548	2992	iexplore.exe	28
PID 2992 wrote to memory of 2548	2992	iexplore.exe	28
PID 2992 wrote to memory of 2548	2992	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9c6d5ed6201a62c5e8e68b56c32f660f_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2992
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2992 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2548

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
10611b756ad5308cf897d2d2a138faed

SHA1
f53c508041d87e4f9ee87bea3f348f8ec14c3d73

SHA256
361cb14593e0d05650ef6c71c270f6390cb3105b5a4083f05d64167a20748b60

SHA512
b906503865ede2db1e6d432fa3c07b75f88a05627f2c1d82292af9cb4ef9456daf5a67940a4d10b29a66a71098ab6f13d85c68f6a317a44f109924067ac53c08

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
64642bf5bfd48232f90dfe0fcf3f1c0f

SHA1
665f2644952bb452c75c7401955a24b8ae8ccd73

SHA256
fed1b00a16129849fb13d9352baa7b2db691eada19ff956a99d237536872920f

SHA512
1cc5c5c3bf92ccb00e4da1bf5ef5988466ac6bd6818f37f115173199cf59b16cbaee6f9abe9be144342a9a2b0f6a9454773fc63ff74de0af6f1ee1eeb3f2ca33

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3be0598a322244a96ea4e33da3b30941

SHA1
b1641afa6210f7f1c8b7c9d1189752798396c9a5

SHA256
72bb1ca37731d6f3edb228c5ea4da58342f7bb950b76ce5a8fb0767a0118edcc

SHA512
a6fae5fee06f6755c0b0a5b00226681e8eda95e5b0c0778802b8d3fb4cd70b8848659a3ba9b1d29cf9927e7209c5f1cfc0d11f6ba1aa6c9513a300d9a8c4f8d0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a49806b96b9ade32eda2d0d56d8e40d0

SHA1
a426350bc0646e068a8fd3f79a21f8ca35364118

SHA256
524cba0673ca669d1ef4e51a2385102dacc628dddc0e4427696bd1837d679142

SHA512
026a0ac2fb2082e9ac04c64ee43a98ac6a41c13ab5d1c603312550516f5a2b8ccd06728e46260acc171c02ba551ff4c03e555abb2cc1cbfb8c3266e4ac1861db

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8a6461b78e8096c365115f864f47a8d8

SHA1
6e5bb87a2e303a39057c1b12f1aa8d1f20fe3270

SHA256
cbe036b21ef498f18d2cba9589ec60b68c8f387d82218b835ddacbef105b6c6e

SHA512
4285088b86035a6e559c13690d2905436f8042817d2bb9327e91e9cbd5673313affbb388fa5c8010df74cfaa8cd93a80acc397675364b0f25f0775a403ca2175

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e3381b123f2c0d0d99fa7334feb2f337

SHA1
98c3c02171fd7bebcd81cba5d416b5afdc835de4

SHA256
e6d1aeeab8eb5d9fc1229b9a5eb67dac9628a73adacb58f7b1e4b18c05ead946

SHA512
1d42589da2625e95e5270c3f37fbe0f0c5e05873a5beb36fa85834232df120bfde136969ee15f16a31fb00256ba83acbdda66e8826818b9f74eaabbd8e495ac9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
95efb2b1f241c4fd11cb204f40b3a155

SHA1
6bc2397211ea61b93a3980e6e6d67df38fb98217

SHA256
ce573b550cbb6b9d43ea58be37456394848d7e4a8f2b23aa6bdff74114a617d5

SHA512
ff43bdc640b4762472cad583c4d205cac6cbb8117407c13d27b39684ba46eccf87a7252e7883801579d87bf2572d82ec4918b7889272734f09154ba8fb3129a9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
535a5959b1c473b74f865a5224017ecf

SHA1
356fc13bca0d04198e910c8d6b1e4c12fa1b9d0f

SHA256
714ef6dfc1028c335104a1663da6b63518a7bf4a84bc7ead69128e8b93856056

SHA512
065aabb32e32b9d6612114b42dad520a92214d2e3fbc07151f5a3dd3089f50e7b7008331af4bd820eda847653fa67f3d16b88a742d004121c3885ecce0b168ac

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
153fd01477bd26a17c48592e6b364250

SHA1
589f58f7378a5a1515cb656392a69e31c91c5079

SHA256
1394b3d8d7be109c1f08c8cdec23024049dc5bc32a8decf831411051afc04272

SHA512
16a9e922699ba40bbaff1eac0fd5a6d251f78d684fd748e99453cf898dd107f8ea19f90a7a234b15ab292218109479741c7bc9e2cb4a3088f25cba33c082a2dd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1d6fa0fd659b57c68287d8947b02270e

SHA1
9c1e8f8d4e0d2ad7c8c79f6c150927f95e9578f0

SHA256
5ad8c77830d665c897f60718b5c950453f00ea38359e8a4c6e89f8a2b6b9e7fb

SHA512
1ebc806107bbaa375cf6639db02b0e4cab7246bb8bd869cddb31787f9f6a3f61a539bb574fe32a4956d441c7ca2a3837dbbb609eb0938736837b5b7fcec72790

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5f4ad91131c82524c2aed3fbc10f6251

SHA1
0990598b48aa8f0991404327ce384cfcb24487c7

SHA256
71231bc5d15a9a4af7a8e1dca5f9530692dd3706bb4e4d47d575b8d821558f6b

SHA512
436421449190fd78a57dcc009e0e135c01d5ffaa7a68735e0626ad699856fb92d39db8888ca723da2bceebfb6425e3e58a6b75390af022353f49417cd38dbe43

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
2f88cceed0779a5ffb6c905fc7aaf1e2

SHA1
1dbeedb81169e8c35b3eeef900f60084d169d580

SHA256
1a7d02fa0fd7c6883304c1c9dbc1c10e8135d8a8ade070f5fabda8fdcd81a6a4

SHA512
0ddabba847e66e0b07537066d9dd22b593bb5c416d62bb972e54ef095fe878cee3699a0b983b976c4115c334706b8adbf20ac883283c3f36e4c8a3fd4ecc1773

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

Filesize
4KB

MD5
da597791be3b6e732f0bc8b20e38ee62

SHA1
1125c45d285c360542027d7554a5c442288974de

SHA256
5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

SHA512
d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LILLIHOA\jquery-noconflict[1].htm

Filesize
6KB

MD5
b8ef03a19d6a0714dfa764a052bb6386

SHA1
84480a0c96372bc76fb25d4ad8afbe86e37225ae

SHA256
57527773d368c801c5f184e61dc394e2561c856ebe6d10711de798c4b36cb700

SHA512
7193a03f32b8f0eea5f6001218d866c79a759a0cd184985cf698c26644cdae10b151e776610a10bb9d5c74a8c5d073ccd44e529b2b02772d1022763272b36342

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar899C.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit