80bbe67a26e8d4a9df4d9a92adfc78e18958b62310f171282b5fdb341b324085

Analysis

max time kernel
140s
max time network
154s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
16/06/2024, 13:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b3c5d40a3ee2d3660c346636e6e08432_JaffaCakes118.html
Size

3KB
MD5

b3c5d40a3ee2d3660c346636e6e08432
SHA1

a0a52f9a5967af80de3dd3bbea5b10c57ab53b36
SHA256

80bbe67a26e8d4a9df4d9a92adfc78e18958b62310f171282b5fdb341b324085
SHA512

6d62a16e20e48f40c13d11c13190978439aa7930294920bc651b947d9b81becff5db4114fc9f3b836859167305cc621fa64f0fcfa276fc0607590edd46c8d924

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 60e8cc0bf2bfda01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424706762"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{365238B1-2BE5-11EF-B918-627D7EE66EFE} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a80760000000002000000000010660000000100002000000027353ee5dae978248d1547a277dda43ee60554bb35e206537b89a4c516743d59000000000e800000000200002000000009a6e3ec47a6e37f647c34586e881b2922613097cab996194223639474f40eef200000002c24866dc0630f262e0e76efcd309d846cd9ed40d5d6312c670450241281efb34000000019fc08eddf26859a8dac46de0e0c9f8e75edcba38da47287c3bc41935fe09e33c2a49c4331bb214815484e442b156a5e36143cf0f9a42a2fa435ff5922ce4908	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2448	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2448	iexplore.exe
2448	iexplore.exe
1116	IEXPLORE.EXE
1116	IEXPLORE.EXE
1116	IEXPLORE.EXE
1116	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2448 wrote to memory of 1116	2448	iexplore.exe	28
PID 2448 wrote to memory of 1116	2448	iexplore.exe	28
PID 2448 wrote to memory of 1116	2448	iexplore.exe	28
PID 2448 wrote to memory of 1116	2448	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b3c5d40a3ee2d3660c346636e6e08432_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2448
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2448 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1116

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6a0de596b701d33a828660b331589442

SHA1
90502f53d4bcf92652cc3a0f1e65e9d778d305b3

SHA256
8dfc97a5533f39269784278efa94f9bea6eacf0da3207a3c450b8a08ffc0f992

SHA512
d46db71b33a87731413e8ae8e6a29fb54b25334d936d8e567eda2f1d367270085b775405928c613561138491b96a9b383718bc2360c3d6badd7e2def812c2544

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
dee1b7b0f2f711932e0955f5369bec46

SHA1
183bb573f332f18c00f9f6526070741887baa9b3

SHA256
b030e5971379e926f6d951f4e3af69ab52a2a892180826c3d4de09c4d0040c52

SHA512
0913e4e7beeadf5628ab0d700216d27e1774ca0204f6b9b42e088466da1f8cd91f9c6871b501ef78ff035b2aed884cc6b64d1c9b9353cb6e3837ce0ac0c23ca8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f4485c74f648c2faa91ec65f35b53b5f

SHA1
5a6532c89db929c6fe9171fbc26527ec33603c65

SHA256
1df8f9346ba2cae60c8f8ec41b5c7b313579e40f0ee826f0fa2ad2943bb7a391

SHA512
18f1496890e5adb9de6838d9606a878fded59a9b3e8f5a168b554e1a09809ba088a3677f74123cd4c5c3b2c33604634e21f405dfb95eedd45b3f0f1fd1b8dde3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e87fc5babe9c6045bce7a279bf068ea8

SHA1
0b0dd5a8f5281222c26385b063473f15c47edd3e

SHA256
461299934ce918baf7e243a65a02c60ab13769059c167102a425986c1907d9fe

SHA512
96cd013f172a0254f40c7b2e19f1b1fd0e1bfb9fd41a7c16c67c0b932b677084b995eba868dd7aa32c09a0f4057d6655ffb5cedcd7dfbc90f1352f207bab7b1e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f3ec5551cc8b51be8fa11fa4af70ef0c

SHA1
f13022d2063aeefd83bed905e02539a7d867d315

SHA256
b4077e62931972b68c0e630e0184ef57673280f89294ab7f4f0d1c9be701aee9

SHA512
799ea4757e1e3f2d15d18a7bd31b0ad660ffef0f3fee2e8d04edafe5abad023090dd7071fd7085813d6cdd97c9ec4d00c0b1d9480278c2b1aad80b138f3f574a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a35444ed7269aacc6d66d9d518b87c43

SHA1
d5c58a757d50ea028e78596abf049b1f045deb36

SHA256
7773f33bc6fa746909e40e299d618d2fd1c3a4ef3791b816b93f5b8bcb6b417e

SHA512
6e84a1998108e1cc90870980c14cdfc32514a913153dad8c9ed91e6f4bed8b6b3ac53b9370539c5c8bcf85c9dc82bb407cb586876eefb6ed6ad53c2cc2812f85

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1f59ea1c23dc9b3701129120c7e880d2

SHA1
69967f29b2b0283689285f3b8ddf5757eb3e54cf

SHA256
44a93b0d1565915aecb2e7461f77d9dcba315bf5de21f6cbdbb849597ee1e69c

SHA512
d3db5c0632d6b13bb9498acb43b7e980aeb9ec8a0852815e6cd46c46926ff7af7a9430c6ca00714d1d8e181ae84d6ae3a3cd91c1a39117eb5c181b7e6591fcb5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
faf557a2dc809048960d4b40f687f874

SHA1
1c4461e007073207f2deec31da39dde97a6f2fb2

SHA256
16e165d8f09aff9de0f2cd0d895295272cf5b317e59e6c79dd62babe0aff7c40

SHA512
57ee279b3f25bbff666a2fad6c2d8ec6fb3db0b4eaaac6bfa3e5603960db4e3dfa1750330c3c0a1ff842532860933425ae0b5fec958ea181b4d082ddec04213a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5691175ad5be2a33c06f70694281b2cf

SHA1
5498cf3b6146a5c0769ce911bb034009f3ab06f6

SHA256
d139ab2fc0dfb633b31eb090b7d8a699eb7f0371e7cb439495b05f195694b2bf

SHA512
19bf735b548be90f5f08a01d3278818bcbd66633f916e853a1197765b96d4145c6cf4b878ce449e3c8ee9b5147748196e755990471111fbc71be4b52288dbe62

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3576bbb7874a3afee748ae90dc9b8585

SHA1
1c7e93889891c05004d9bce5be731d38af162442

SHA256
3f3f2655b2f69b700d4b511c1ce323526fca87e4eb906dbb6b578b022730b468

SHA512
9066261052a7a56ffc8ed35dea5aa2b14c8716a2e56432e0e0d94b578654e5d02450083ab36ad14867ffdec0fa20dab29a1473c2b60ecf96aebd0fc1e4c0f890

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ae9557730e38b68bd7947755df7fc0f1

SHA1
8b197c7b81e4f579cec79dea0aa90490e84423a6

SHA256
2b25be159be4aa9fb15f7eb3aaf971552d0507e7150a783ab05cd8806ee36640

SHA512
48cdaf842861a629135660ff9e10068b8385daa127b9a2ad3d84b4c01940e611c861841a5d22e59974d6e3fa30827d28825d6fcb03d41d30bedd8ff1c5d5b2a9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bf20d4bd8cf8c875e5c9da483f929911

SHA1
c204e59d8d3a7a320d06c1fcc0d8928193ba2b25

SHA256
4abc777d93374f989a10a77f29fa1040efad40859548bf5c3f954aa056a5f8b4

SHA512
f8bd9366598d15cbf9b98146c6cedd80a5880db0e6ffe249fb274b1585b38ec7b76c69ebf171bbc64fce946d497fc76639db58fdc2c64316e237bf976ff33e93

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7b166587bac8f6bf73e4fa183fe3eb6c

SHA1
f9e643c6b8ce25ffdcef8821815907d5e7fc1991

SHA256
30798b4fa69f460882ef7d35bcebc2d4e08911a0b522a263da96f3a4459571a4

SHA512
c29e6d1c350d2cdb03857e0747ea950eda283d409167145248821421dd31b7d7b5c489c867c827c02b6fb7373f78fe139cda5bba947d54bcab5fc986487d328a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
408edadb0db10bfd22c353b50740676a

SHA1
a6299801211c2cdbc2d03198be8066b4025d1ce7

SHA256
686f9b0d60dadbace64f3435edea23e6a5f61e84a2d83c1863163144b11d9b64

SHA512
5907bea95c3b6e3308562c1cdf15de42637d459a45ad0e2d1b6823de96178e5fd7b80f237c6b5fc270bf9c9922e288a465951156f3dbf5c172364dd5d06c442e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
929f93f266c62f706c2b7d1f427256c5

SHA1
8dac745e36128d93a4c1b2a2788809c0f50b9089

SHA256
b6b3acfbf407a3b59506e344f0fc3411e1ce4b457cbfe84e07702b5eedaebf0b

SHA512
31d117381ac40a4adabf8cf0c8c1148107a26a06fca0708c9634b99ac64f65f7335ed5ca911962fb90b017822d355c74597a7bc0e2de6f38c62fc30360e17cfe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5be3476b156bdac82e71c4b125310b32

SHA1
64f25b691f4764542f8b96c3190d5e7212cc1877

SHA256
52eaec96037688a71df65c003b13cb0b655f2d9241b7c4d963f4e28602cdcfd7

SHA512
596911e8113e5d6ffac0c5a3a2d5eaf5c2ef5a225c703f1cedfaad00c7b0b80901db2c9d6c224ddbf2732d597666064a844f0a0cb63946591a2b2b6fc943f298

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
57f8cfc3b5aeb0ddfbd7492b7b8393b5

SHA1
678226f7a4745e58d260041fe35ad09d59ae7d7d

SHA256
a5b3465a298a60777e3d38c0e6e9bede732883dc3847c60c2130e69314e4c869

SHA512
e4683ccee7ccec1b9aae7bd4c5654c99406dddfac79986349477248120d59b54dd897b76d6147087e2eafd7b6e79670fe02b7cc5d16abef8a12d9d7955b7f0c2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a38d842513e3c707d4a984ed78dc9f3c

SHA1
8cff2344249e08957a17fec8d1056b3e479ef515

SHA256
a6d258ca0f6e547eb8a607fe68e326eba4ac10b1e0af22511dd37f641a8a50c6

SHA512
8a76d7cff2ebfcc290ab25bfeb7101bcae91c0e1ea1c4d5777f5f3fe120c14962bb802b5b12f4d8cadc6bdbe9d8f67f61a04050e610d1060abaac8d162c079d4

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab6EEC.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar6FAA.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit