f4511fd20a4faeb9a0dd1fab09e5d81bff56a7b48879ab97b510753cdd2dd1db

Analysis

max time kernel
140s
max time network
148s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
17/06/2024, 01:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

b6215c90486b494935f0fa6205353789_JaffaCakes118.html
Size

3KB
MD5

b6215c90486b494935f0fa6205353789
SHA1

8fe29d9e3be26d412c11f7936fb86498baa709c8
SHA256

f4511fd20a4faeb9a0dd1fab09e5d81bff56a7b48879ab97b510753cdd2dd1db
SHA512

25f0a059cbae835d0ade7c9a77e6e2ecb63b9454342d97baa04a0459aae953cb153b23896d33b1fa72657ebf5ab379aaed062df9accf3886382b27db1c1850d1

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{272541E1-2C47-11EF-A381-7EE57A38E3C7} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000006fb3d087c4ee9c4bb22550fd83a0390500000000020000000000106600000001000020000000c16e17d6f313e8f4afa67a1aa7075cd9539e95b58fdc04102a642aa0944d8a48000000000e80000000020000200000001af833aecd6b031381501dfff26e0e63eec9abaa276e5a44936548d12af24221200000006ab96c09f108240d872136ab951441bf55ad2a5aa3af589ff465c232788a0231400000009fac1c53ad71594396b2410f75b160ba16e3c98fca8f6c405ca7c0c15b3d1d5b4c42f11019642025bf9b10de44bd3e7b9454f467147daadf616df5a4f5944823	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e00ff4fd53c0da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424748826"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2940	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2940	iexplore.exe
2940	iexplore.exe
1216	IEXPLORE.EXE
1216	IEXPLORE.EXE
1216	IEXPLORE.EXE
1216	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2940 wrote to memory of 1216	2940	iexplore.exe	28
PID 2940 wrote to memory of 1216	2940	iexplore.exe	28
PID 2940 wrote to memory of 1216	2940	iexplore.exe	28
PID 2940 wrote to memory of 1216	2940	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b6215c90486b494935f0fa6205353789_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2940
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2940 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1216

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3766ef561a3ed0bf7cfe867b7c426a21

SHA1
65f8f59295cf4f91026485278d4b779426fc1fcc

SHA256
f1a8cb41584bee1e21ffd104bb8165b283d7a2f11299e157ae4e4284f99026ec

SHA512
9d3b072df3f6b16a7998417a445f5c1fc8ffe05b43f92e5aecc39a8a1b9ea6b59dc70263a3fc3dc5135fd2321d7c00483c2d4cc088c55d4a51f6faa693798108

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7cf3c4ebc617d5a7bcf6e1a1e9b32de3

SHA1
5f1e9bc65fddddb1560f1e9eecb4fdb24cb5ac75

SHA256
e49a78a9dea8f40331ab4292708e2d01e467790b4d713936b37138b293d905c5

SHA512
1c7f4a56ea1cb131c859cb70e44254fdc631d05360e80987ccd86c4f13fcaafc1a4feb47dad90b156416e2b8f42c58eead5c3f3449d2a1872d7c0cb6cdf525ae

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
afd5d940d6c14dc31fbe0a49c3f24a7b

SHA1
3b0c3d1dfb329b4492df4441665888a3a3ad800d

SHA256
895a7db8adb7ef667e2361d200ba9177bbd67c7f9ca29ead49a63e735efc71a3

SHA512
55951644327ced3104a02f5db6554b4d4e11dffc6d2f66361f44517a951f5d9a6c4498b58eeed87462181a44721dfea796627fe60d06e32cd51a2ec815f7c1c3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0fa398e2eacea4c92407fd65bf7dd623

SHA1
304e9d06cac5039ae79e4a028b8c580377321809

SHA256
7afd5ff95e10321b729de0a9804b80d898a24423f67746b1af4156fdcb86a5cf

SHA512
a3f8e366a9609c720584b50afc077d2db343782d0241fda5224d539412b803a4031c825c4b79d2fbfb57be82fcc7d05614a033ceee540b5efad174571d7b72df

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1b7701cb5307ba338ff359973c11111c

SHA1
8931e67f052c5651fd03ec3c9a3d48672d04ec87

SHA256
61462fac9184119fad846cb2aca59975b5e51e762850393c637258682290b75a

SHA512
8a5ad167ff8b75fe56dc2d3b0ae1554752f71c38d97da1db9ffaa3759e9c441e4bad4b19e157a50b1af32abf5f042c275e5e6e0d9b949418f1fabf4379e57bd6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6d097f0ad86b052058fb065ded07618c

SHA1
063fea7593a8b92923b9d55cc15db11c3372af2c

SHA256
7007b86800d4c5a11a4104384559754e067dbc421ad41297a7b4ab9506529c1a

SHA512
9a4507e8eda6143d0733c8fc350c1bb246684fd0d3e2d621c13c067f89ad7a2322b87b480212225852d4efcf01c8bef57f6122809352fcad4519aa6cdd0959cc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
16d96f323b79333435407b9e14f6b448

SHA1
3cfeda7e7694672ef6bbc7308e366c91501994d3

SHA256
7c7812f03092b23fecffc8f0daabc15ecd9181fcc3d4ef43f5099418b4b738c8

SHA512
f0708928d1ee481fbde83836e54c08837269f51fee11e6b763fc450a551f4b02cb1d2c73968a7f12bb6cab145ed647c50189166defe26fbacb66a5fe426f3002

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1be183d386d7046c9985b120622fd08e

SHA1
9458dd3fec2ae3cc231e0f1806e79313453ef282

SHA256
22283bf9b44cc82a3a1a4e42299f8d751623f59b9799601a2f1d36721baeeb7f

SHA512
8155f807fadce90cf78aa6b6b00b8131c75dc9bf94b6bdf40a179622e33071a0832225dfca9985aa6ce235709d9097207f0b68d095c6d014f85fc0fad9c52cf0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6faf82442e1c2c93050ccbb0491ef691

SHA1
a09d339b8109dfea7c8f9541e5d8fc6aec70459b

SHA256
04b4f66a67352b9e29cb2f3c681121c7119414c04fd09c956134ad018f636502

SHA512
b4b34403c8454a23a1eb7a92bcfecc79d9c2c12f0ce5f8e7faf69a81d26b3c296c7e489f01b211a375c08fd635b3bd21f3727cf8567eb47ca11a61b5aa3b5caf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b57cf16225ff3c91d95e147c088e673a

SHA1
9560311a7f0704ffc8feb638ca53795c842c23ef

SHA256
ec131e0bfc09da44f8ad363c070b93a9690e047e5cfbfc7341f1664dd1bf8866

SHA512
2952b711bdd6331599881ca8e6a06efd3bce05d77b3bbd25340c7255f013100850a06c3940eb1295eade7a371768398ed1c182e4ea70796d5ad23e00fb89209e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6c98cf0b4da770e67c90d36dc7daf36a

SHA1
24fbaf3043f9331a3cd4a74a08706af660f7279b

SHA256
9e87d7dfbd80486e5d832f0cccd5f3164ee7730515b8b6cf8960e2d2a2a73180

SHA512
9ee10e19548fb3e99377e224f70098ef8cf198173e552a026ab42032e98854b9e451ecabbf06986ca96ea7e093696844062371ab7b98510174268559f2044675

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
15359f53e79f833a7934e5a855922949

SHA1
8d4a647338938944b70b73716e7db7732cb1a55e

SHA256
a47859bcc3c3382ecef3e00af9dd94dbbe2e8613ea7f177d7c215fdcec10de20

SHA512
24ae4589ce796632171f1e946408318099764a647c400b78c678aa8066b1b2276e9e400c5cb0cca782c71fdd755c6d696fecfc6876053356a4a82da961dd8e4a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9043febfd2b25f22a3c8da19de266ae5

SHA1
d4c05c17ece7e41998f45560ca0c474f71940c73

SHA256
f949c73a0b7087e261b445ed1923b516e9661b90f5c30bd92e62f30f2549700b

SHA512
3af2a6c71f1a9a5badab8c925a286102449414c2ae3dbadd82190d5ad51e8766021418eafe756a0cb530398fedc8c0856077c49cd0b5a0d4609ce6b8f5d35e04

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
36ee27de3539f456f24c8adca55f7409

SHA1
36ba98b7368d9ee03e6499a07df60255d4e948df

SHA256
a275468f837b60497d7983702b8958fc979645341386904d924eac35a0a7ecd8

SHA512
dd33bd7d9d843b046270005f06cd4e0a1f19173bbb8128c23614b16c7b81e6796b831cbfe4d0841fcad2a95d885b84d33a2fd2960ca71cbfc9550de4a256010f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
71b1f255e12cb7b8ff0c6a3b26a187dc

SHA1
459a43fd978091526801e069ca38be94629c43bd

SHA256
b6725f273dc1f971f827adc9df654d6b2036b738568a789d0b265fa401ecf88f

SHA512
f5fa4d9c71e34bbbf95102bd1de6bc2b5a83ebecf3b32e6da54820fd6d9ad7bc31974b69e43d3173751254903a19ddb32b08a5a963dbe014e368467968e58698

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ac8f6aca8451200119168b4908737882

SHA1
358da14daff182de14809f4781a2239fe25bce73

SHA256
86554fae85ab088578703dcd3ace17ce37dedf76379714e1b720bd4ad553d25b

SHA512
2ce705a60a39bd27b314ce3cbdb73aaa2e33e0df15ec63d6e72d5ac7bb43f800fe5ac8b90f34b26b955cf9dd824b3c0598985f687671e01baa307f7f33e37e92

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e4530dded13e33db10fa788eaf745975

SHA1
98325d471faa60af1619294710be09d08903ca63

SHA256
7446826f1cbf91e9d57a1414da5e51aa3f5743505546466c674d468bc46b2ef5

SHA512
42bd1d34b707318b225b8b61afe18c82d85e259318d98b7ba0e6c7be78e6c2066980058e60b253983f443aa0d7d8bbc708eafa313566b937a7bbe6e810250885

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7908f522ba50e9b67eb47d672a577c5d

SHA1
6fc5f6d573b6625249588b06bfeeb173d31c10d4

SHA256
f23855505904b42808fab0d94bf2712b1fd5bda63e41b80cb6799f71541cc9c7

SHA512
0b76e0da2b3c804bd7e7986dc25ccfd98571865ff599979dd3353a3d5d689cd12562e0d5baaa49273a83cb2555ab518eed0a13fd6f66d362fe291c547b55645c

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab4B46.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar4BE5.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit