1c9e87956ee8dfa4c5f73cc535ee96fcd14ba9d6e70ca1fea8a9fffe7c6b6b8b

Analysis

max time kernel
142s
max time network
148s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
14-06-2024 04:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a7f0536fae844692a2034a752b5e8b3e_JaffaCakes118.html
Size

14KB
MD5

a7f0536fae844692a2034a752b5e8b3e
SHA1

de9d981d3c2f590200c48676ab1cc927e42119e6
SHA256

1c9e87956ee8dfa4c5f73cc535ee96fcd14ba9d6e70ca1fea8a9fffe7c6b6b8b
SHA512

22750668000d10c8068f3cfa39b06f24b793d6b2f28a38decfe234cb805ece5f6d5ef8bfc2fefc5c84780da52147ce2b9917bbc1a7129ff41280766472d0c8e2
SSDEEP

192:ZE47bca/ULrLxp7+n7Mf6Qf63f6yYONaKYzq7R0lM41AyByfyHE4YsRq+Rrmk4:ZE47VULf+YdkX5NxauYFnH7PRq+Vy

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E4F13951-2A02-11EF-8156-CE03E2754020} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0782dba0fbeda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424499608"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a807600000000020000000000106600000001000020000000979546db7ed6bfefffc8322af778977c7d2cb1807066d473366c6e21fe3b4ea5000000000e80000000020000200000009af62571cfc9bbed21fe736ea5c5bb05194acf58860e61fec2b30b457bddff35200000008d7b38625624a95736495fbe3597b277188fb4a0580629fccf993b8ba0f525ba400000002fda65e549e9ecb7b181eb4cdf9b7ab751269402fa82b9df73ac185830615ecca11d6b157e9c0263750846a6764634aea16fd34f9c806a54d0a9dfe944b79e59	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2248	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2248	iexplore.exe
2248	iexplore.exe
844	IEXPLORE.EXE
844	IEXPLORE.EXE
844	IEXPLORE.EXE
844	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2248 wrote to memory of 844	2248	iexplore.exe	28
PID 2248 wrote to memory of 844	2248	iexplore.exe	28
PID 2248 wrote to memory of 844	2248	iexplore.exe	28
PID 2248 wrote to memory of 844	2248	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a7f0536fae844692a2034a752b5e8b3e_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2248
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:844

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
78639ca83c95453ee34d8f0ccd54e16c

SHA1
006ee8481ecff48ad04d019241fa1f988f460a37

SHA256
c060525924853f8085abfb069f28810ca469e001e17d2f6e36371bdc7e74bd57

SHA512
6386800420abd6a48f49c410cf8d62425606b68d644949ab4bdcc47fc99fa2fa96e6a2806c1e790d76b65c7e6be0911ee5d4dd5a332655f1b44c0fbbc3c25afb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
420836c46b0950d4dd718f3c95649658

SHA1
23181d4facae4cb06158283708e0f66c044f332f

SHA256
967340d979151f2626c8bc3532331067f3e540d36344ec97055fb28d49b2aa3e

SHA512
fb150be52deb827baef2c9b1b01ee79b5994c5c5f29c4640464ff3772fe2e88b6495e5ecac10ebcb3245c90398d25a775ac924e4308879518ca63c4c2d1d289b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6062eff37222430df932b1c4a66656a8

SHA1
1e3cdc72e778677da8473d8c6492cb1f126f9972

SHA256
a838aa9a89d858ae0dd436fdcb3771a566cf0b4b554fc837540a8e13e6282652

SHA512
8aa1ac2536514f35a304d4ff524fb2dd025c86bea0e20731477f24c22a61fd80b546342a53e0722ef0caf0d9e47f6481dbf15d4cad243c25ed8d41f57a3e696d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
856ae24b1d977f6a9650129fc0df3324

SHA1
09649749ecb14c4a333a941b96ad7e34e6c6d794

SHA256
5b7a3794b48cddc000e8613850e79531c159f185eaf60fc7b8e61a9b37ad2218

SHA512
7e59e5ebb1ee8cbf35da9ce8b956a673d32b3b89cab171874db8076a259b98d03c2caa122dd790e7dc8ff920c2cb7ae60b663f31c466d4f1e7135e2d9304b541

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6f2906b408a428cb6b69c786d4f49d27

SHA1
3e7b4845209e5cf44f29ffcc7bfbde6f01415349

SHA256
c8d239964875d114f4240350460489aaf42dc5ddff52aded0d14d33e67273004

SHA512
0d9a686c5a33327f6379862b12989fc227ded1ecd3e5e7b8375f1aff5c5c74899d8ba637a50ce34656deaadac529b510e323a5cfc482c835ba04b2b535f44e75

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6e4882bb372ec5c4ebed3c987776dc19

SHA1
6641e590c5d2ac00d2c07ae4570f4185cf717733

SHA256
2fda9352d795755d1b4c445af9c89a643e166a8d5a6dbd0c9b7e293164bba8c6

SHA512
41fc4b8dc8f2c7e40e6da1ed464b87ea084590146d763ec2a0af77d2cc8287a463df321f1ccd256149f0c21297cced1a14a65a11d07675154f82383ef6dea78d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
89f11af0c9f26a2b25871095cfd4a3d1

SHA1
4ea02d033641574d1eb442db0bd881d577ab7654

SHA256
c566c4f4d8965dabe61458fad69d4f6d76ecf9da413596540e993e714f92288c

SHA512
9adf862da821fe4388a15c2e290efd80880dba72702eb21b60fd480dbce7c5874af9bbbba75e322181d369cc62f0f669e12a570e259896361d84e2db11792e94

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
577297393cd81f7b7025dd13cda651c5

SHA1
227b221d96b743f067af29d71546e07a76bb6e31

SHA256
ed95a0d2a493dca8f6fde2cce68bc45a0f399e7d125d7447e1dd972e9bdd554f

SHA512
923a25dc2a01ca9460b4c58b27159149513410c3d373393a7060dd75c5022078653bbf10bfbe4cff7aa77d91721b8f2f760cff57399e0f9fd19d2e1d07beed88

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0982f9f90d12759f15877352e8b364c4

SHA1
bebd80931dbd6803da783427bd6646651bb58a42

SHA256
726f359a381346e412f928598ca3f4ad54b37e20c38bbe08270af19779b12c3d

SHA512
786e6d8ca02c213b389545d6ef1c528f61960ced85ba38455a39ce1875c3e442a03578c7cca994b8a4cecb797e605e74cefe78883456d2d52146df1de908fc60

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b42c605010f0e8320f93631cc77c44ec

SHA1
2c3b785cc38a3f58a93507908e10b4d7f68fb135

SHA256
7fbb97fe011edb843161372f4c9f573afb759441b41e553d970b0262ece2f8d2

SHA512
1347319d38db01872074e0f0b40d0a9546546cc77d63706730fe434ad71a1f819b35d0815fb5a297e77cc34fa3063d8ad3bdf288476913c366a8a1221aa5c4fc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
02aa52ff365750992ecc2409fe75df43

SHA1
6db110f32d963f13c99917b04bb26ccd880d674a

SHA256
12e2629609a2543d9d4f08e21c0c4c88d80f1c47b9f1f18104300e774a6e9d26

SHA512
b283ee576ef426717af5fc5c766a365ca48ae8282aaa3309c534710c241e208ef290261fc66d8e99d160dc1786c0185ef23d70b205401e0a563f014e28d36e3c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
72ef6b84fef50a43550957bc98475f14

SHA1
b41542826acb37c9a8215ead2380fa52254af3e4

SHA256
770870570a8401f44b3f441f6146cc480350787df7a70c019660e4d8853f4cd4

SHA512
cfbfe587111beaeb913edc0fa18605f2114ddca9b8ea85eeaf6c5b9951286e05fe966366d020fb733dae4895d1a9ea9e769ea928c6564fd42fbeff004fcd3900

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
06f5717b23947e531dd992a7a18b1763

SHA1
01f5446556a40d38e9ed3b775462051cfac6d9f9

SHA256
9bb911acabf602e588c01b35a406a79a6e7cadf896750b73437b7cd62b674ba6

SHA512
1d0600ec2d67739f6c6bf1404a7e33a2fb3a78c072301484f93750f84ce28ef1be8ec6529ba511f0208e6882a640f6c1a1b3a67ef06ce6c3eb23577e53ebe2d5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
aa523cabb259462afc3db34649444367

SHA1
379572008a65282b3d531aea0ce8e815e11fe7ae

SHA256
8bdeb97224885ddf125fea18076f7c176f52e7577cf81cb43252e601909ea282

SHA512
476ec3086c5098a327cf8efc8ee6d782513714a5db87c260ad40d86f952d8b58d50c891a6080de6947268252f5a1fa3b324ef0a1084732d0fa12350d79cd16db

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
95f2affdd55e874692288a60afab5475

SHA1
ec55e2ba3cec863a6f917d415096ebc73ef30e19

SHA256
2c748706875ef87c265eff56699d26b5cc120f9343d2d516ea79abf1a78f567f

SHA512
3868001dadbaca051a68c7f2dc66fa87e22733dd7e55a8ea94212b05df0e8c92d8d796a5d4242aac70f5e3e8352d5c7be060420ed8014efdc247fc74725c792c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f5299cda71b70f9a255c2a3242ee881c

SHA1
62c06ba384a966b0ba86d270d9f72b59bd389156

SHA256
9faf41f66169765791b2e398e981f2bc565ad8b81d0717cd186bdd99452a3a2a

SHA512
db7dce4370bdf246cca2d00d01cb479a76ae0c371ab39e088f5f396e5b258b71116d8e4b67625fad5c0ff6041978f196bcc1db54bbf48895e08108f4d6e233bd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
921fe744ce94889840172157a4cfe2aa

SHA1
0ae6d13221c9232a101d506841941619a9731746

SHA256
54af8d93cc50f3ce0bc540301432854fc027b39ea46a67e1c0871020da27b614

SHA512
dae8a1fd3c727d9246d7e20bf06e3eaebbd56bdcaa6384425649c0c976b2a0c33d6db9c141288ae6e1a119fc78f764c68330a839ffee016b1a411c7d6f6248f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\A8DU897P\embed[1].js

Filesize
943B

MD5
a64543798f1a971af735be3679ec578e

SHA1
2746445722f19cde968594d19e6b50f68e11ef67

SHA256
a08e077874788e694686512b278fd289a65b8154daa23c04ac54a98872e37d56

SHA512
efb275ec88034957c89221c38d1414b944160fe1215e5ac5f6cd274d1c7fdccab3d071d5ae0a1ee267c03d2ffedaf212e5e72e983f11348c13e0eacbbe954398

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabB4E0.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarB58F.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit