267d65cc2406ac7fa32023a7f14c3dd667f99536d1934e508e142c3ea653a91c

Analysis

max time kernel
136s
max time network
133s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
15/06/2024, 10:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ae1a9c102888b851007bc7a7f911fb29_JaffaCakes118.html
Size

460KB
MD5

ae1a9c102888b851007bc7a7f911fb29
SHA1

82f2e7967d31ac35cfc8d0c13e839a61f068d155
SHA256

267d65cc2406ac7fa32023a7f14c3dd667f99536d1934e508e142c3ea653a91c
SHA512

5af43d84c8a20c2a69becba8d779854411916f3e1331f9465c09710b5efe3dda73a35cb2cc4fe9d2f8a42d730a1797e0c285ec42970aea8a0a8e956f791918e6
SSDEEP

6144:S8sMYod+X3oI+Y4sMYod+X3oI+Y0sMYod+X3oI+YLsMYod+X3oI+YQ:v5d+X3M5d+X3E5d+X315d+X3+

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0c61b1b13bfda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{42543621-2B06-11EF-B3FC-D2ACEE0A983D} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424611005"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a8076000000000200000000001066000000010000200000002a51a0b7cd63d8354bbceeab646ba100d9167848e260b0a08f45110f7e8f6405000000000e80000000020000200000008d41f8ea54e2d456f91a18ea74d9a3123a73e67e55fe16579f0163d5e7e680bd200000005435328d0bea26d01d10aa54d2f1914016a700ce7b2064565703e8e44bc9daa340000000755892af4f8fef9aec76b97743709d802b1d3a14da3b48f87b484bdc42f8f504350a693074c335f9079611780edaa9393c9ab4969fa56562d4bfe97128ddb36d	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1876	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1876	iexplore.exe
1876	iexplore.exe
2188	IEXPLORE.EXE
2188	IEXPLORE.EXE
2188	IEXPLORE.EXE
2188	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1876 wrote to memory of 2188	1876	iexplore.exe	28
PID 1876 wrote to memory of 2188	1876	iexplore.exe	28
PID 1876 wrote to memory of 2188	1876	iexplore.exe	28
PID 1876 wrote to memory of 2188	1876	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ae1a9c102888b851007bc7a7f911fb29_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1876
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1876 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2188

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e1df908e06562662ccf63abff2941c53

SHA1
fc98493e953ce5a61723edcb32b5095233876f02

SHA256
eec89a81ab9395e4e986ab3bc1c13826b2c1c8ad89ca0fe3a079dcb7e6bc81d0

SHA512
e748aedafec74f4ed8c2479aec676841c0252f352d63adf10a28975dfca1d86d9cee81696bd302d2278d891066169be9a927db2f4354e5896810df007f915089

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ac02a7591161c231222649dcb2f96549

SHA1
1f108c701c64c3ea5ae301199f231ea7ec8b3285

SHA256
036490eff27d96dede3ef226baff25b1f99892f9edc47ea9dd642583d5d14191

SHA512
8e3292eeaa089769f977af4da6156d6c9310c9ea3706144acdc4471489371ca227a925195f72b1ba395a9637fa74f512ff0ca2bb207944a78b9b9d5541c026b2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
074edb8074ee69609955b59f1e111622

SHA1
bfd90785291e12ceacef81fb91d56e9cea225c72

SHA256
5e101149b84e0bafd60ecf02de9193a9dc752dfa80796b33fb0fdf5452da1f43

SHA512
f66e29add9a61ee9953f1ba6e61fbb70b984b3dda6500a5109368983bdb037297b119ca17c4b64234f170b717de72f8d6e04583670ddf8b154ef43f8be8f6b06

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8060fd1c223be92a740450876486cdaf

SHA1
a7e1f410c95e9057adcf2e2a3e0af4fbf4b186b2

SHA256
b4ce5a771d13c5db243e4127f44709fee03b554a0c1fd32e0998ee7b38e89b5f

SHA512
906c4e6c02eac905e8aa1d548891ac4e40848a826554e7f1526b47891e3508468ec97d93f499e17efb960bff53f59ac99651685f74d0c4e7cb80328b73f6a570

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
29a45e4c7798e81bf7f1bd1e35ea8879

SHA1
33b444e3bc33e6817e33585282f3ab87959251cd

SHA256
1a3e298bb9133e53b9854bbae87bb7186d62aaefb55f9297f0cb38e1b1a321fa

SHA512
e406d6e68260090563a4fd662416762e846f156c0b7cbbfe2db3735c215a194876f693352438cddf0e0d3501f8ce850515dfb3561d0fba310c5f2f57ccad4961

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
65a26355f1d72cdaa855497e898bb4ea

SHA1
1a9900fd0e039d769d1669a1380a56e1644660eb

SHA256
4d4db6985e8a475b4949f415fce2afc05a9db27c651cc7a183677765f449efdf

SHA512
113524f834ec971a8afea91506ae1147bab29a45423e0802df985842227f78295a0c9cca1bb1fa36c7e55d58a14955ec0ef83df095f8d3afcaddbb7bd6c21bdb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9c6fc5f50da335cdcb80d0246a2bd7e6

SHA1
7612b8c610f0170f580938454e4234c45d734bdf

SHA256
a0b4c4fb896e6da932c3ac3350e6dfdbd6b8ba501df027130063b59114d5f08f

SHA512
6f61fa6a88313c8945aa92638286465bc0686b72608cde803369718d3337c86857d43d3a11ecea7240460cd9259fa39e3614cbe4deebac3c9917aba42bdec9fa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7f2c479154ff951091621ef98f0e59f4

SHA1
4b1f0d907089ee7df05df2e4ac618ae4a8805909

SHA256
2f98826272af5b88a026f9689ab21301e7ed554642cfccbf83c480abc7976410

SHA512
886fe556864f6e005818db17d2de956be52fca327db7d70f328de87f9db2f769468110ee4e1d4caef158300cc8b8ed8ccc6642a77c142e9efdf78dc3ed90a74c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
22cd37eaf3dcfdbd29ee3aec2dada351

SHA1
999d493fe1d3f64ddbd6c9294b4563c56454cb9a

SHA256
eb1d0cd2a465a9a618f0ae3ff4e670d30254f2703f73b479670dc2b3cc14ecc8

SHA512
2bc43bccac7325ec6d236664ff53a6dffe8e0c84b6bf6bb1deda65011740234007496cc12b4a9ef071b11fd285d562374c508b84da55a58e1abd56edd4f39513

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
aad583980c95a974c9d03d66218904fd

SHA1
bd02c2b9009913b741c0782b9301824117dfd9ae

SHA256
c57fc2c4d336415179c2683f1e4b1ff2f178a10ba35c6636a7b734be5fb9035d

SHA512
85fcf713f9b9ec1f43eac908c5cf37869011a773fea5185292a33e897722ee69fd25eb307447b94c4367b6340c8c4eee1ba4c1f8a21abd0bdfa0cdf7ceca4c45

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
380e0a304afd320c5c60b6e5f1277315

SHA1
64eb08e1f44c96fc74a8ed431b13946709af11d1

SHA256
1ac0510791d30f9b607a5bcd17569637c6f18a22830f410be87cb7c2bf027839

SHA512
05d46a6468891d947c82f876d6959c93cc9c8991282f7be422eef34c06e17c4783e422a5dcc1f5e8e5238770c3d65b645ed4f097fb3de2fa6b37dfd3426f58e9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8a2faf66898f7bda70acf784023861b8

SHA1
1bd63f1cba5e0d5a07a22e2d5e49527fe413b56e

SHA256
f03d171338e1b48990f26b6a6a041acaddeb90646961e4af02efc8bc1e771c63

SHA512
442c474d5dd676cc77221f5e3c567072657d989a7e76a0019dc18fe5c8194e1e7bf2a70ac471506a8173abc0afcd462cf25bdbfcd72547b44d9d8b9efc4092c1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
03bbb93146f906b0e48772b19ee9d5fd

SHA1
2a622d1f5ad703138cfebe10133d1c96c5a29680

SHA256
61f6494c521aff5b1d64a7b270f8e66e7514571c6cef98b60d445f4eda3fea5d

SHA512
243941220dd0c888e8c8f69d7d42271c6670894b43bdd1c685bb987a3822265b7121deadcf18aab05b40975521a83a8f94c0cbf3c12808ace888a5529f55974a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5f976970f4589b46b1b57f73164d195f

SHA1
01a575c3122f2513f7829367cb6d766fa456fac0

SHA256
fd8f28d4da19fd93e0756488f40211606415ffc731dbc39a6e25289399990aba

SHA512
867ded7cb7e51fd2e9f54a93a39ae2805a946c39d01f6cb4c509e51e5a6da5d2d534fae6490673ea022694f8a756f7d03a7f38cfb93e1b756906fe8407061ce2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
42b6bccb6bf78b79eef93041508f3c04

SHA1
4159355a5b03faaaac839135dd11ce41f8736835

SHA256
aca5dafb980bdee8ed59694dff9e954987d40711cea5021ec06ebeaf541caa71

SHA512
f04713c4735b39c96709e4bca99bfc7565adaa39c0477782e1b2577d01d8b66eb3e4ef5a898cddf3d7c52b6c62abea0898526e1cac75655029ba27db5bd58f2a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7fca56a1be21edb351244fa82cc7f8c3

SHA1
5650a09ecbbb84e707dc5dc7b78579c4e33d9b12

SHA256
be20b404358a7cb2fbe86ec67e9ab17203b48335c8b6fc1e5637aa6e777266fc

SHA512
0727e081a389d1037690225643dc0d25a0a3cc812ff88366547c501266fd36b3c16ba758204eed96cc3d5a009a2816318d0ac31fdda577f0d78198dd19d4a2bf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
daee858fe2618d2f24fa15bb47bf3154

SHA1
f047fd320cdaca0b912e5f5b9f2fe527b00c662d

SHA256
5a98b76a0701fca31675da1398306f44c45421f8914239846bc1e00cbd85e297

SHA512
a037a4877ffc72107aede9be00bd3e281f2e002a84f3a238850c54820771dd3eae8f0bee7bf6968999cc48af41afada120bb4f03782fbeed7c05f08a84443bfb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7d7d33e01f3b6bd027401afba7cf9e30

SHA1
3b6b1bf6857793cc3f99fbf1afa617fc291c2c66

SHA256
955bf696b7a68903e2f9b42a329bcf16e7c8eccda41539fa6cd85b758dc816a8

SHA512
07a9b78fc2e3ad2ae462b7ef1a50cbedf1d41f71489d4a956233a6e14d0aa8b6706e260cb2d354454e64c271af780f659931e073587848cc721543c083b60cf6

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab8DD1.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar8E61.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit