152afb0ed06d707abfc77fb2dfa885aadb862a5d4d57b4ecc143598e7e8d3eaf

Analysis

max time kernel
118s
max time network
130s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
16/06/2024, 18:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b4860daf05a1241bf6ec6f5c8b2a22bb_JaffaCakes118.html
Size

3KB
MD5

b4860daf05a1241bf6ec6f5c8b2a22bb
SHA1

645b2477b1568054e9c7ca472aa853a8fa2ab78a
SHA256

152afb0ed06d707abfc77fb2dfa885aadb862a5d4d57b4ecc143598e7e8d3eaf
SHA512

38a7c036983947cc6cceaed4e26e1ec0ee6a4e590cd697f9342dc3b28a1a30faed682b372900183c64e4f5d2e5af67fd4ce5cc4a59be2923b3af5bef7f1561e6

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{CEE01B71-2C0C-11EF-BE0C-E2E647A5CFB6} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007da7a4778bf00e47aec291648970632c00000000020000000000106600000001000020000000cf0b3d7de464f2f33827d6d37cb0b3072ce66a9254cfe444c8812107d178f67c000000000e80000000020000200000004f1b3fa31fe7d7e0e8414ceb9368fb680f93b1944beeaa2b3a67731562f3513c20000000845b62e80cb75aa29b584c31967f64490f29e32a27a823d161be09b5523c2d5640000000751ce53a030d0d7510f375336fa34d0b37dd03355b5f2f1a3afb5610a64e6d6f471e234fb0a9a89f5cdf02396a687aea2b6c230ef7cf4171e1bf09bed12adb94	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424723767"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a07e8ca319c0da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2932	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2932	iexplore.exe
2932	iexplore.exe
2564	IEXPLORE.EXE
2564	IEXPLORE.EXE
2564	IEXPLORE.EXE
2564	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2932 wrote to memory of 2564	2932	iexplore.exe	28
PID 2932 wrote to memory of 2564	2932	iexplore.exe	28
PID 2932 wrote to memory of 2564	2932	iexplore.exe	28
PID 2932 wrote to memory of 2564	2932	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b4860daf05a1241bf6ec6f5c8b2a22bb_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2932
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2932 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2564

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
64647ec4224d95a214de9ec95f8eea93

SHA1
e5f0de3c6099d282acb93c2ac06709c34e80c086

SHA256
ec2c320b54a2108926e97ad0d609d01c626bd202edb9fd79277fa766303911dc

SHA512
d8b6cf5a8f9cb5d36fb77b29eca529c58d32b8078af80e1b47f40bc0d3a995273692b05a88af470670f622e860486d4ad5cce359cd3ff79832da955436a64183

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6c90290fc51f31f221fb2f64e652da25

SHA1
e2260cb01677c34e72bceda0d06484f435174cf7

SHA256
5c5cc25689f5775a5ef6b72759d8320bb8cbdbc6fd00a8b26a0580bda9dd0a50

SHA512
4684760a6424b12b8f2001a48d9411cf62da158801bc8ee480b959eafeca79cd6238a00e67ff1348c98d83c95ff589c7e0a60d20291994c59e39bf3622b462c9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
defcde664e4da0be73387df68c07f751

SHA1
1abe501989282a39abebc523e5b61ae960bfc537

SHA256
8fefd0b00d7a56bd0c063f3e422a06152226d3583173b8659380df2b97bfb650

SHA512
0d3cdca3a3f75a2b24cefd404bb7868f25aadcb35ec2cb44671db736b52fb5d6d6705c91dda2d5c972c6f988832898a89807f47920f1464a5104c07cf735c046

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7ef5a8cdd80081ddb8b63a97ffb53c93

SHA1
8defde760715bd6b76bf8df0ace28222a9c81ca3

SHA256
4cd894acb7b4c78d3dd644603ffbfed87430548e6c63f8ab41bd954b942ed90b

SHA512
14e1adf82782ca435abd65680e988384878840a39993b4cdb72090dea61b18e0292d2dc4bc3035412cb231375f3abd985dba37163348f5378acc83292486b801

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7d5e835f6a179d4eebd28c8b7a451f6e

SHA1
056a1f47f7c6d219ed132f3190baafc852e53a0f

SHA256
f2294a131c48220f8c116ee6864ad147817056242cce94e58310d3a956ad6722

SHA512
f562cbf271af0ef7e90cadd389486b873b0bf5e5685296b414aafafe38af55c2f6eb9d68028f1e2aef6e81dec68e2608ffc8d61400a7f5f402a7b1fac68045ef

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7922ffaad91fd057ff827323846bddc9

SHA1
eda6e8623b16e3ab85de254f224b5b38badd21fd

SHA256
18dad74a7f80f5bbf4abfcc8650fa8737b6b67ecb46d2b2bfde13e98cb94024f

SHA512
2c1224f2fadcceb22389bf0cccb0eecde6c4719dc3dc24c79392957eb1decbbf77a80bb03a7d68502e9ba30c2882ea1081e7c6aa17cf8f82da0764d24d34f463

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e19bff33ceb95eb8547f7d1a90d3277f

SHA1
8aa9453853af66d24b834c131ad46060948091dc

SHA256
efd28c717596e58d683b397358d3c89fbab4a68854b63d3e01ca135602e9549a

SHA512
335c3a04473a7719b436f102dd9fd8c5b1800d2da6c499dfe5acd77db5be38d03e90230dcd0ec1e75baa534be53ec8af303500f36d87791d2b2c2cfa15430b0f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f1783de110ee7ff5b2f1c8349d16a837

SHA1
5ef3b95fd67bf2c298f5924d8e3d508e01ccf3b3

SHA256
105efb35960064424c622c681eff4df011652ff572a7f0b9367b9da9be9f75f0

SHA512
102e38a5662a2e2f8d5af02afd0b006e33b2a2e56cde861707d7d3f924497c8718828887ce9e91a7fae079f15b23f1e737b3bfc56f19d9255bb432c3e4c9d2c6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
01bd0adcf8121dfce84b71fc3b0e8b4e

SHA1
3b879c7c9a6b3b80cce6f76e9f911e9b481aebfe

SHA256
af4572b9c56e9ae6264ba70a7ef6c3214ba693d859822501293bf0c55e8eb6f3

SHA512
a79e5d6388ec286b5dd800df1b22819d5b64a5fdc731a2e8e926777bd88f537c0ca3ae0be7b5d98002c6bfe2ee686598524993fc2097daacd7ba098295d6cfbd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
15b1e14a533307291724e8923d17aba0

SHA1
54dd03f1e5307f402036a014c5f7ced1b261ac4c

SHA256
e222620550ba3956136dcfba795b05fbb0afa1f00dbec499d102fe8b0a3b75a9

SHA512
f88c693e25119343cdd99e97730bb41235fe98ef3fb1ff0214e6428c1a17dd1d62f129616e8951f3c2031f202006c3c63d7ed974cae0efdc8ced608fe7ee3bc2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9642b3f24ac10a56d6e4f36ddd28b2e7

SHA1
0824eb0ed652f03d202cc3ceb2661d7d7f3079c8

SHA256
c1a2d3f178acd121f80ec3f60662f49bde8ffa644af030980d9feff6ae4f95aa

SHA512
e309e03b00c08f92cc75b556f53a91c89bdcb893ed0310a4d0971f024118595bc2af8406fbcc2a7ca677297b7d43e41dbd5b15c5398b242595a2d54360ba7325

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9bd3637276a49ae774cf02b8c84f6d80

SHA1
1868e05e72d02fe135bb93c5cbc939232677b64c

SHA256
4487bf702ab90acdcd00e317a61d71fec6a667090162a8ac587f6e2d72bf5b71

SHA512
a2536bc37f95afc2db04816bf8efe32d0bc2154f6c11abf42d70a3782c4c2c0da77b865c1f43027fce6e86708b21b48a1422e2e895a7b1042861bce8336ce629

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d9fb41323663a666eb45585d0cd31fed

SHA1
51090eb38bd422f087479cb9c977fa8ae8fcb150

SHA256
f9d0665a63b8256992cf7e767931be8cd6e18b427495129a06ca4987e39b24b1

SHA512
cddbc59b6da8b464e2c328db6db07c9824ea9f9db37169a9911548f90f080db99d40a0e8322e3af7a33240a52975a4c4ab376f536db2b8416edba156f488288f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d92699b72e2774dbca7ed58c39fba608

SHA1
f448839b34270213fa8e6e6b2f8bb394e9a2ee50

SHA256
a750bcd71e8f328e68e60770cd853297cede65833d2f42af532ae6625811672e

SHA512
298a82ea4154317284e141c0e7b34772b389432414e27c535452dbb9b30e1c0c2abac4ee60cdbba899becc02e72ab07130e9880c71b85a3d67283937335cdc47

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f5f70f18bc0c7f5d5ae3508816d4a844

SHA1
4fd5cf89aaaeaec09dc3eb68b0fcad78f2bca9f1

SHA256
3e00b1a2d001e28aebde1b4636daee893def4873dda1554f919c584f1009eb98

SHA512
faa3b0ef46eff5c27ddfb6f6827ea86c068635f406b3d8514c883e6b98f76851c492718446866605ee3be8024359aaa4b3a258ca3b2199d28187881c6c01ed9c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
905146f928e49fe79a66e08d3394dbb7

SHA1
e788675066e1652feb6aeb089f5f2e9751c5fdb4

SHA256
4c58d582254b53b933be3fa19eb2ffc6d089a6572d9944f2ce031f4c090176a2

SHA512
06d3c1950a0b1c271f44be5fc896f91267d9d85543d20ae498a4ea7fc408824dea85de82cdcea2ccb880fe3c2cf9066e2db68dd27ae3e153579a26ffc2da0461

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6267bf9839e6dd4ae4cbaa0367a94053

SHA1
a0f07962193f494c6cef3d9ab5c2bf2aecf0c5b9

SHA256
86b14696d60fd55ede6e05243624c07dbd506baf1dd6f055a797a9aaee8f9128

SHA512
65b857b03161adc14f216c58822533fe3f108dadd82ae706ad86aff3ff50211e16466644d407e622f0da79ca054645d075f59455964efb43014a6e8b5cf12533

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2455.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2575.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit