e83dc33cf7843a14c5987863a5607d443d529fad53173af9dfcf201a080c2603

Analysis

max time kernel
134s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
14/06/2024, 23:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

abfe0950d5f685da1a65f1205ca7eb67_JaffaCakes118.html
Size

1KB
MD5

abfe0950d5f685da1a65f1205ca7eb67
SHA1

4aa07382dc4722c13b41f1bcbff097d610b3aee8
SHA256

e83dc33cf7843a14c5987863a5607d443d529fad53173af9dfcf201a080c2603
SHA512

baa5430acb388ccc6454ec7970528c35bfb840822b6147710243a28b471db68e1ed52dfde9f372b614e4437ce46cd32ba43467732147ef8b47c662b545521581

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000819106c6caa4a24990099b598410e40600000000020000000000106600000001000020000000eb71aa3617993b4fb7f9b38aef2d97720302994d410472a279d0c49f7353ac4e000000000e80000000020000200000009fa42a0f075ed928d1d0b1c74838f527aa264d9e90ce8618b512282fe96bdd2720000000adb0250785911140f71e858bab3efe992f266d5bf9d1b75856b4ab704adb37c840000000f6ad2056e28d71b14809d43a437fac7f9b38ada95c5ccc77da05006e16fba01d6e023b7914cbcc99295e08100a1acbdf288bf297674a798bdc7f49a1617ceed6	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 202b17a0b2beda01	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424569572"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{CB84FEE1-2AA5-11EF-B1CF-5A791E92BC44} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2164	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2164	iexplore.exe
2164	iexplore.exe
2268	IEXPLORE.EXE
2268	IEXPLORE.EXE
2268	IEXPLORE.EXE
2268	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2164 wrote to memory of 2268	2164	iexplore.exe	28
PID 2164 wrote to memory of 2268	2164	iexplore.exe	28
PID 2164 wrote to memory of 2268	2164	iexplore.exe	28
PID 2164 wrote to memory of 2268	2164	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\abfe0950d5f685da1a65f1205ca7eb67_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2164
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2164 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2268

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9702e320d41792207f98eb672a255902

SHA1
1bd5dcbb8e9d61862392e754976529a7cb53b1b8

SHA256
a0106de101bce871b15662bdf73d869df52d4eebaff18e7765054d84d5b07638

SHA512
aa75c0216ecb1f4915ff3f16bed93cc91886bd153c6e26e3d95ba295faf9da894f2de880466968d1a0945bde9f0fb088d3c2aceace7f563402baa2c5ef8d6757

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
00fd712abe0d616bfdeade93769351e6

SHA1
5c978d33c65181a7b95ff8d3419bb74dd5bf5e0b

SHA256
e0de102095d2a35e305bb0990072406e7e2021f36c4f3aaeca9eb948708ba73b

SHA512
0a5a8baae3d54b5529a613c819184237988aaa1f3161b1096f983e9a963cbc7dda24fba1331c78b2d016c35024e47a20a374bc8cad700c2360f11ce602de1356

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f3dc974040b5a9cd0bdf97c7d109dff3

SHA1
0479340ed224de67180ee310ccbbaa89b4521f12

SHA256
4ad3ef24b0e73db89b4327137e3b0aabc2560e4dbb3057b85acb372d008ad174

SHA512
b14b9aaed5d25327825b9f5f5a9be90010e43279e5f2f671deb4eac0a667d521f9f96316c672d420ba7b2db6c343d18d77511c4fd7b0eaec4cf94ebef2663402

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5b2ba195104feade8c0542a88272cc7f

SHA1
b0e57d7077257d845547abf6e1c75598a64fe39a

SHA256
addde4d394cdffeaff77441cacfcf03ad418e8c7e4d4325ca284126d6fed90cd

SHA512
2d69d4297150845c80c749734a55cc70644d3aab5d602684c6d826d6a25c9645c9a6cdbf472f6680a3f776c76384ccff531d0515cfd2e24ac2b531961d834401

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bbe7c9ad28bf3315876d1e2b75cd258f

SHA1
743ac2005a3b16a6f04fd200dc1606c0f0f0ff7b

SHA256
38fc41280228717e9f3169e6a71a744dfa81619216c92a3934d7cf93a83d1ff2

SHA512
321ef897050a0ab9ee4cd2d4c0afadcf2bbe4d321b79839f8235684c71c3da76bd533bbc60beffb4564046b52b52193f4cd15d5df32d083cd36968b634428636

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
698af6753733ac1ce2435e24149cdba0

SHA1
7b68447e40bd267d27257ecae89dda1504afde32

SHA256
c920cfb44b4559030a98dbb55b245089e5e61051e671f0fc5ba4b14c4cc6cf5d

SHA512
17bd5bf5d59ed639d6c1a7a024f808b292aaed2a8577831f472491212bbf357e2cd7ae40617b86cc9e867d6e2a3a34238b302f49ae2f84f7c93332165bee136b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
515f1dd40fba59de30670ad248e94e18

SHA1
90af531e7c50c5fdf950f2d7af5ad2b0705a002d

SHA256
44be3d8f3f8b33b6ac0be4005b18651415ff70b4e2be0e9bd2ee23497c50beb1

SHA512
1b2a5c9a46e3353286d0ee9794bd72f5867d1b335919352f1c2383400dfeb740c9721f8dded6919d463f1dcba27f888df0a6b4465bebba9d93fe35b2945176f3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d8d6b7998bea01aeba9cdb96db4512a4

SHA1
e34d7274d834c18b2d5dee70f8e79ef42a6a0d8e

SHA256
fea38efe3f03bacb4d86310adf37e9a678da21a4aafc5d8d4095c88beb621a7a

SHA512
017377e888943d56c13d87490405893a65173fd79bb8e421cb28ca07f2a29e8e45ad4f3e6ae1e3ea92e7d97c73632677a37685964d81a0799db0fc5673d62475

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
83b15a95d963ec6d453cdd68193cafa3

SHA1
278b98bd1e9284dc0ea6e1ec3d7ab352d877f861

SHA256
3d7f5b84c59197e4411dd378ea8d8caf8a6ed8924cb83a894fdf7565edb7df9f

SHA512
c9c0d38c6e87d7b6d4d251653485d522c6187c43e879cb8b1fb468f05c09e2917a20900ead4ef0d5f9b6683d1bf56fad85e0c1ab4cec790c79b8403f6c967d1c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b904868d42472724f3718b724916d97c

SHA1
4168d37e91b741e195abc14be8e29bd070160b73

SHA256
3cfd40f6050425479337b88a6119b42c03e837b41f2a1aa8eac5637431f7276c

SHA512
1414e420bb29fcd8aa5f097c8f4a3a7052de0c043a8e732d78d9303786232e00e7ef5aa7b81490c1da6fd28d449e3614587d6a5a7113fb280471ceef0383e7fb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
08a719c556841a9d35ca7b2054c5628e

SHA1
b22e3f9faf3b1d18c25cd965e2b39871f7a7c85f

SHA256
0e2418cef127e37766f4eaff7147f39adc39888ffabf3566b9c46b865c00ee40

SHA512
810c7af7ebc652bcc3b48bdf86c7fc3e6e69a9e13d279a7817d33152fbf6f56cf9d3e003b1c06ef4a895a7d21f7fc264db5feecdd9f9acda409d6538fee1bb3c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
269c1d9179be6cb5d1c88b288cd467df

SHA1
5db199f6cc88419a9af1860c54045b0a8f8e3f44

SHA256
94e5f45a478cf1aeb2341d097fbdc0d51a3107334a6ca51cd9379a196f8c4e4d

SHA512
96900f0ff7054ecab7ab7f5ed9e913916ad6102104166822921a9ab406a1ee0d6c30d24c936731a984a7922b335aa7f936dc77c10b2d6bb3434d296052112571

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
104a879521bed16caa8c547c934fc1a3

SHA1
9f47459e7566e3416f4eaa4bd029b4ead5eec120

SHA256
498d1e5258b721957387cc772b11f5404f9e50073b20c3214e89cc2cffd99139

SHA512
ddd705ebc9178e9ae3a359085f75aff6d41bba0b083be02c744ebcab3843a6ff31a04168fcd8508f7e2926ddc8153d82eebe6b76b112858618d8812c1b12374d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5971b6b412ecc4c18048ef521acee5a1

SHA1
74142738071027597e752cfcfbaf1ee115c161b3

SHA256
39e12d3a3c328c12edcec552b8b8ffe0d918ab90fcdf65c8238278eff7ebb4a4

SHA512
e1e0c1ca1d179e8df9d76d6ad8e95549c483e7d6529b70f36cc80fdc20a45cc7ed7b489aa3c80a78c8dc1a4f0b35ed4eb9fb2d29875404b2b60785d40d19389a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5af0005b9d8527d8ef67ee44757779c6

SHA1
6cfff0056d79d1033c9572d653cda8fdfddb6b04

SHA256
a64953cc6a426b7f3e616614e91d3a47b251dae3a3cf9325b4271ea66de4572e

SHA512
fee1ee77768b4c015de233875c9d6d1f7c3b9b7a63ac5ae294e4a12222719019ec446cd5f72da778adc62e019099889a6d1d90123c2a0360e633d1af50132ea5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a28c00e83e3933eb952dd4a62bec10b7

SHA1
dc6da4e616255d12585825742651376072a43adb

SHA256
3bf9056f7128a24de7e08ec86d28ea57831d391a269eb5f2ed544880bf09dbc7

SHA512
22ee39c7c87864e906f58347e1bb38c4639b161d7753448bb0b9f8ada09c02c135203b57c0b5751884e162034796c241350ab9946baaccfb23631536ff9ac055

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a2a5995df14f2960095c8967fc169928

SHA1
2732be73b9a287d74eb9580751659353f17a3c35

SHA256
3f88c18f0ffdde80b43b99a9c45eeb62e0cabee98e0a181a4ece5b38ea2e162b

SHA512
ab75c45f6c1b6982491072926f873a6bfed398fc7ca84b089b76ebe1e147ed9d7e781fef35b39eb8908aa879ca806f686996d73c9e3c0e46cf0cfd53e3ce51cc

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3526.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3603.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3637.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit