bb71554f72ef12ab625af595dc88f46fd5eb3ec14bf7e7a690dde70db4ff2f16

Analysis

max time kernel
121s
max time network
128s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
16/06/2024, 02:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b1638e20fd35b0513abb4d1c19ad9218_JaffaCakes118.html
Size

3KB
MD5

b1638e20fd35b0513abb4d1c19ad9218
SHA1

10afc983a04a4d4d3b84999225c4a1cdf2977239
SHA256

bb71554f72ef12ab625af595dc88f46fd5eb3ec14bf7e7a690dde70db4ff2f16
SHA512

6ddf36fd94cd2a905b702b9a8c173ee3b7a4c1e0fe883812042f6e608622ef835262e4e62140c98684f41051890c95a728a0a0e3535b764f4f48ee4e2265ffdb

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 00aee61497bfda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{402E63F1-2B8A-11EF-B2C4-6A55B5C6A64E} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d4f1cd375b67eb4a922e96c5e86e311c000000000200000000001066000000010000200000009ad51632978719a16a41b314c6569d7c32b98375e6a743c827ae96df7530ef2e000000000e8000000002000020000000c8b2fc9e6389d88bf7e16e624230cf44d708f53c6236284e1f146732db57c9ed20000000bf761947567b6bde544ea7840d3c42faca654e2c590ac38d0a4a9a9a1ffccc17400000009aa6868c942a379a7965f928d2eed94df68d0fe5b23b55191cc20a3b4858de0edc71a82ca0668922cc33ca28ccb0a62625acbf7759adc162829305ab1d43941d	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424667693"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1952	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1952	iexplore.exe
1952	iexplore.exe
3000	IEXPLORE.EXE
3000	IEXPLORE.EXE
3000	IEXPLORE.EXE
3000	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1952 wrote to memory of 3000	1952	iexplore.exe	28
PID 1952 wrote to memory of 3000	1952	iexplore.exe	28
PID 1952 wrote to memory of 3000	1952	iexplore.exe	28
PID 1952 wrote to memory of 3000	1952	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b1638e20fd35b0513abb4d1c19ad9218_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1952
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1952 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:3000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d57c9e50c36707a12e38dfb2637d3290

SHA1
5acf6fd927c8edf8310d9deb2ec92161287e4270

SHA256
f767cf9bb70088b305043b474f48b38947701d94e7c6422b0213934fb88f4013

SHA512
3eca294162e07442574ece52f2ef09bc5d3f2f2f0a40fbc6b9b939cb5e30e146947284b855f28a81d9c2fd924efa9a86056b781dcf16860d9b00e21dab0800a2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
22daeb90d9f134d60b8f47145ee59421

SHA1
04130babc76db850751af4858d07ea06a5da8444

SHA256
361040e8066956b76e8d677b5e092b0dbafbdccbb9e0b196b7cd652e567f7df6

SHA512
f39679a0ce2b96eee59406560d41e042711ab7baa59cec86aa81306c80bc7384585ee2fb0e5d5f7022449ce33ca7cf57fb0c5cba9b99a9fe813aefaeaaa0a0f5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
66f92312a9ef9a9ed964c09d36207bc0

SHA1
e14bc6f602e675bd21483ee4703626976b2dd6c1

SHA256
9e0895821a8f8a065b8dffb114bc0d3942bd62eb03d7bb1cdb7194fdeb1d2904

SHA512
e43a4bf35626ab59fe36c0d0c63986f3fc2063fe47dd0a8ac1dc77ae335657b9bd124dc8ae916de8d3a93d694f00a019ba707a28022a8cca7fdefe43cf2e79cc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
86274e8ca409246f131948f5ed93d1c1

SHA1
e0957648b36e0df40faffb1db4d99c66be2af0cc

SHA256
1f3de47e9a22d2e3ad80e76757285562a26ae666fdc85f36675c3fcc9a8ffd3b

SHA512
ecdf5bb057550b76c8ab4eee3381a5a00f9013a2acd5e2b3d28bfa278ecb2de7a464ec49835f748d3cbb56468927c06dabc296fe5c20dfc31da4fdff70234b0b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
38febefd20db33132effb61ec29eedaa

SHA1
8cd0514b5ef03215442fc0489748e417af5169c6

SHA256
8e5350dbf5f0c94c18456ea2f37cead1a5abb6b4a8070bee8a5fd3554b50f0eb

SHA512
52e232eb1726b9ea7677773be45151e97f565e3b7598a820c201d63cd24cb784a22eff020ec375ae6951e493e473993766a83dc33715e8d51688f188763a0dee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d6e430032cd11acfbfd111cd0074088c

SHA1
aa902768e5cdb286b65400d9cbd1dcfa8969c7f3

SHA256
6e06085916549966e81aa590279a7ce0cdec5a0c27192090c4436a6f3f291ebf

SHA512
01b10677aebaf378571b53eb0f0b8669a64720729007bfb09a2aa9b07fe16b575f4e3c76dc9ec63a089527f6319c99a7c0e3d0a8e549e215ae142913142d8a51

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
50a2791c68cbccbc588af39068bae6ab

SHA1
7d035aab3498d5a5e6809f09281ebc65540b87cf

SHA256
2b42351f3894a66a698f5d2dc2d433d3e53b95c9ac64cad26e86efdc86071c5a

SHA512
ff2ea646e6f2edc2ebf06a2d2df9c06eee4d40fb10748039101218a8c727fa4866abe7fc4b0a116b7d5ceec1be152850378f087400d2a5df2b4119db33288a14

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5926a034080bfaf6c97ba24b8f597f35

SHA1
6093f99d5c153d3d62607677f682ad81e7fef021

SHA256
c6c0ce05376b89109d4214d75ed192a4748092991f36a7a245515b8f9816b5b9

SHA512
7bee5b34344c370addde797a2a3ab62dc5150bd397970e4b51b7645bac8a20723d875fd3096501eff2a0dc44dc3009f84d57d748ad5166bef86c5f9b40054fbe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b901ce8dcef5be35c1e1263f462cd8ff

SHA1
66e346758d00280ca93e8ca742a00226e33b7e54

SHA256
c96f72354d57196cae37cd59db935bc6a8438a73867a0aefa963fcbbc73a02f1

SHA512
59029e981d0adb23427e6c3f5a5e99b2f942ec6233128791ef3b05182b77e00f4acf0046937c81902044d209d30e090a821fd42670a217c179d233eaae079379

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8590eeb87bbc924a4e3e4d7f2059a12f

SHA1
ef1efff6ef9d44e20e3421ab25f2da0cfc5b6170

SHA256
327b243303d1bab5f46225cba8adc4f7698011b8a9b2b39bce8f3bd539d63d28

SHA512
9bea12fca144217b134cefeeeca5917c010b1f6a18c3f1b350de4c6bb8798a5c70792ce4dda53f10d72972e3f25379812c31c41570c15bd84e379f165addfd39

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7c30b3153f12db679702be6fc9a8e5a8

SHA1
2125661aaaffc8047732a70a42009499b600f665

SHA256
a3c43e3a45e00b2e8d05ca9a4f463ad788562320bbe7af087984bc75e9410f4a

SHA512
a718e1e1c183d409e626362d64ef4766c784af4b453b692a3044f9894e3654d229379935982a0240e511f4f09d9893d6238d8ba2615c5585336fc6af0de36e71

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
99e3a3e58b4c889841bf1f67e5e66485

SHA1
fc1689074bd79a6a845079f387ffeb370401df88

SHA256
2824025d5b2183849e4f9eac6f5ea88d532c82aadf029068ad4068481d71563e

SHA512
5a57fe69546dade6a6723d15e754a0c305d13d3cca3536b528e5e5ee50fd2df09e554d367994af7d27ab4d132294f4a0fbb2bc3d777b92e405038ad210a6191b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d009adffb149297544170ba29fe9c98f

SHA1
5af5cdd7b4f01baa87125fe0c7f4cf156f9f66fd

SHA256
63a1a31906c8e317257b85cab4801d27dd985f1888ae7d6da1db5718e9f26707

SHA512
26df80ae8f4d003a256a39a0c7b70e799ffd19c22970fe325c7cc173c0c96c748274fc4293e6375b8b970b2e6a68ba8eca40dd784ca07aa7cde83a92940d6048

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e3e016379741c4cece1feaac3c0ee3a0

SHA1
f79c9f02d5ff91a091a0314772ab9e50b125d43b

SHA256
a1fd302417c8f716c03b152f711763b395020e40306fe54752bde35d70fd6834

SHA512
c23ba995b975c5510ee1b133d7e1c911a1defc5c7534cbc2040f37315bd3580cf776fcce1c3581b4d4303027ca6fea52a42afc8b5d0ddeef4eb827ab85b9eba5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1fc096246675655acbc35f3a42219491

SHA1
4382797ee6de433f2da2cf18c241894285bd17af

SHA256
df3c3837c08a58116b91787027c50a8b257947d8037eb3ef73048540a6eb29c0

SHA512
e605996be0c8376ef7a048e85d2eb0135abc9d479eb5b842f9b97d5cd0e297c892c2b5ab1ba37dd127fe9e9a3b9a5997ebf66ec566c01e9cf27178f83ba1ec9a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
764f2173ec2772a6f60754aca13b349b

SHA1
b4bdc68628a2ddc4cb09d0a4131bde01cba419e6

SHA256
0048630c4a9cc0f21c05fdacdaa7b0872afbd55cb72969942a6aa4d44bec0004

SHA512
552b40e43e5aab5650495e3ed469c6173dc41aa1af4728a232a6982d318de7da70c4b923f1af9fa1c5095ed3ea9183fa852e815f36082571fed151d89badd3b3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
576d28fb148d40d5421b9daa33e7ad49

SHA1
050d06dccc6baf802122038723ccf5a4c42d2fa0

SHA256
c8b47a67aff41274005e87b1ce8e9293fa4e5f1c65dc98d34f14bc85f213e7ec

SHA512
65e7d836509095a985447a929c63eac9df93fe09a3b947854f14da3d62ee3322de391f0aacfe5f3efed3b6770a9c276bb2c41f9912052a37b551b4a6a5923c81

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab4186.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar4277.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit