85e5d0a8cc45dc769fadb630f95f1877f15b6ac67e29b482fdd3849e715adb0d

Analysis

max time kernel
121s
max time network
128s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
25/06/2024, 17:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0eec4e30bb4755b41569473ca06b3258_JaffaCakes118.html
Size

96B
MD5

0eec4e30bb4755b41569473ca06b3258
SHA1

d817c3297f591f452456585693d6664acc446e21
SHA256

85e5d0a8cc45dc769fadb630f95f1877f15b6ac67e29b482fdd3849e715adb0d
SHA512

b19cea366034a4d341a68574f7db3e02b703d7781b611f24bf17900d620dfc5b30c1df8ab07f7691f1ed96c2ef8771c27f61f9bb5c377bd1cd563d68921ce75f

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{36CB3731-3318-11EF-8E7F-CE8752B95906} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000b2968c6cf60b74b94229c882944fb8100000000020000000000106600000001000020000000f80340977c73772963d85e9c7b944db6edef2126f9aefde42db841f411d4bdfc000000000e8000000002000020000000d196045eda44b2eecaa2dd2b5e600529d6e38ab4dc13bde20a0bf9faff67e81c20000000fc341e8d56e1861521d985ee7df1676ff5aaaa052785675c99603d00f41b48f740000000298ebf903815d69a7e6b9b36f6759357025b639babdc197cdc452fd9242b9396b0f77627dca3919fceab60229c033db2b83be3f513cc236e01718534c7d9cc9d	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 1032530b25c7da01	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "425498324"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1528	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1528	iexplore.exe
1528	iexplore.exe
2348	IEXPLORE.EXE
2348	IEXPLORE.EXE
2348	IEXPLORE.EXE
2348	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1528 wrote to memory of 2348	1528	iexplore.exe	28
PID 1528 wrote to memory of 2348	1528	iexplore.exe	28
PID 1528 wrote to memory of 2348	1528	iexplore.exe	28
PID 1528 wrote to memory of 2348	1528	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0eec4e30bb4755b41569473ca06b3258_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1528
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1528 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2348

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e245eecfe0edc390535dd9954205122a

SHA1
c9f9a0c1c2fa8683a7d884b799fa2f03ef0cc6af

SHA256
4e47ff86d077bc8bdc6edbf1994bb20a5b776bc5950e47783781f94c8c9235b3

SHA512
90389d337c23188fc065e6e27b43d6533c9e2676f6b40139a2b8b8bf96077295e25d507a511bd1f4a2029d2948f66c82886e600138332abb8067a34a5f52b079

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3f9d16155073344f7e3e65fec840181f

SHA1
a57793de13c018f8fc18dc4896461514f2123544

SHA256
d828eebbd67228aca2acee016fcdd1169a47e2b782441676042b7e8872964112

SHA512
bfd2157bab778afb4b1e07a3b68a168d4977b559335f4307d708e976bd24bbb9c11d6ca74fc52e04d4f69677bca857df42f8984357ff5a5fc05f42f3a9e81170

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ce237f1dd0d0add32d2d5fed6a730d08

SHA1
de82daa87f5053d5c167afe8dad7c8c9ba388f8e

SHA256
42c04b1d21d9f2c58aef700c8f1b7c8ab5233f043d898859b172e2ccfe9935a8

SHA512
6e20810d02ba367ee94e0db7524c0b20428086a1f1cccc9cdfe0f99b7ff99c5bf7b82a05ae8887ec71764ff550ee7b5a385f5d66b9314972217f3001acce1a51

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
57bad746707f21fc37b9a052fcb7bd92

SHA1
57fac6c283f0e4e5c18d5421250621d11c7b688b

SHA256
bbe899299bae79ee915d7f87d0b21fb74a1c44090abde424e33039de0f648266

SHA512
8fc0b637709eb7ca3331a2afe8edae4e1c741682c069087b1675e05a7330542a09f60d7131b5a62e21be37d7c7b86863bcd3345f59546b12496aa1d7a912da0e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a58ed091434eda0c047cad6ea9f15eda

SHA1
1933f0d30aecc3310f17583093b5f53f078a195f

SHA256
3e4c85294ab7e809a8aed2e3453c4be9e0cef2990d279389020dbdf14273b4eb

SHA512
0f3c6341f0b3bf81699ca02a3dabc523f092fe693225540ec1f8315ad258b9b0952e07facdf4ee2ddfa524852dc5183b63f9cc639b6414b93a13bebe32dfdc5f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9fe6f75f65b1c898c4fb81b1e194ed27

SHA1
b3e9f505441e3ada115b4bcabebc7fca6b452325

SHA256
1e613956297d65733b05f63a5221f25255196796e771fcc7d97a9e8def791a43

SHA512
f1a5146832c87f83069e762acc53e5b36f9556638d95001ed1ecfb9cdf166412207cc8dee0f491dd1204bcce584b671808ddabd556a843ff720f4af6a018b058

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
56b14a3d093b1895d437c2bd84798e17

SHA1
2eaee53910a355ce5161ca14e444dfba18f5f6b1

SHA256
6bc9e5f7023d17d16f4ad9de081a4a4efe2da910562e2143c9a34b52f7bf12f5

SHA512
97ed9300899bbd8dd92a914510b4ec11736bc119b0b354c09086b739ade544774ce1f963511a0c93db9af1b31432284f385132c24f91aa4c931b1dff29492d6d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8f8dbfbd4b0c92e42ead4431fa7b8a24

SHA1
c964f907ae68bd85a050aa7b01f5bfc2e19bc19d

SHA256
89a8e6256c8ca50744fa999fc6528e8c13d4c5f0c78c23ead27047de5a637827

SHA512
f47977a74e38c3626a34b2025e20143e8f76f686579c3d30f45da17b27105a19d8a9340872c55abc52e2fbafd83e49269afd8895fa69c9e77ab745e8ce7c7bcb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1edd3a2b742683ea0cc36d527deff086

SHA1
e91aa8b77344864bab2db70278c04799f8e640d5

SHA256
d1a124321b80b861799fdefdcf77fe4653513fb283466a4f09fe81d87aff8584

SHA512
dc134d0e17dbc95dcc15f0c016ae8b589d4de8bce591ddee67690c38bbd9a77b706db8bc1565bf98abb943165f541212431d3cdef8e746abe1fe5723c426d72a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
036d910b994a240e5d72ab9b1259d60f

SHA1
377202a2915bde7b1691c5df7f57a46e9accc85a

SHA256
cf85494a5ffb73115d892f094836248f0cce70c98a1ce2e9158471e55c8eb7e2

SHA512
a72b1cd244b52399e63b854d4ea627906cdb1934ce8c02e982a6f65897689754e0c7a102f3c6ab2a2cc2f04b6354b845372e9531e93bd8752550fb3a7de9a9ee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f3d8b87db5ffbb96a570a331b427d239

SHA1
66bdad1a358fc7865a066047f59a336a5d3579af

SHA256
422cb230daa209978a3df482126c55fe1e337056e3c36f38bc18cc337a0bc3aa

SHA512
d9aaec9558038af3d728bc18da4f12a61ecfc59eac94a88c94dec7d9437583134c628cc517cb336bd6ffe0d1e4385308795284f87521b60c9d7579782b86a42d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
59b42f6d5c26b065605b8545b2f9c4e6

SHA1
dbfc4772f3f9a7ac3f20a87a2934d13643a8f0ac

SHA256
1cc6967911cecfa95dd9c185a629cff9a4f9ee861ed7cbc3bed964cb20e57e46

SHA512
9be9d3146156b9355324f85b6ab0a4633cea752e4b87a5ee877e4210f543cde59e02ddd5cfa89315bd6892b5b685e23aac078ddf40c0a5ca809bcb9c3ec3ea7d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2425c37aa8408d0438b5d524991d9a6b

SHA1
81e35ad65bd933f98838be027b0189efbc34a6b2

SHA256
a3ad3f8524e36a39836df24b4163a2520409239139c44c0840a925971980245a

SHA512
4573c1bf7679d5cc900f5301a9bd665ffa24959b878d30bc0144e86be0213b15c460638ad843729ca3d33a0524a62439e304d7150862253496da38f194ab863f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f220a004302b6742dcd01e1efcff33b5

SHA1
f9d85e8470bbf0df014b077b47e0b0091a0e13b9

SHA256
2825d7faaec97fd423a4a87313ed98570088b85af38328cdbc2937ba132317f8

SHA512
86e047a9d3db56eb512e2379650600d79483b22c63f1b78d38e117c990072d8616f82a7652423893005f6469f8be091f3224fa95f2a5b4da1dd4ac471e19e960

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
147767e4e9daf7d98bf87305cd1493da

SHA1
d7c1b0e9c8c2ed505fe264d6ab495fe7361f7f9e

SHA256
7c3e4aed1f3d8bf706c8c9b9008b07fb1251e614b855e296ffa4e715752b6a19

SHA512
e96df77ac53d5f3c1f44633578269d51afc7eb96f38399ff5c504d250d715c9fbac6271f461e5d7885a7844dca05077bf9a2a2c097dd938ba3d07214c57786ef

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
29397ca5c8e15dd7dee2859eea9f9197

SHA1
fa99cc03751ec0d8b2cc905b42ad020c4d83bd00

SHA256
57c9ccaebe9ae4ae33e5c7705b2a92ed66ee6a5ca780e6e5fa6ebd67f8604b4b

SHA512
d619137ce38f4c8078c495b84c7e23337e5513fc24398d664aef8ccb573c2e79de70d7adf67ba30deb298c3c0944af62fc40ab832e9329f9b79cef40f9466fff

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b470020893b0450fc74270bfc8fc4c4e

SHA1
4dde3280e2dc0140221856111013d31d16b02638

SHA256
f6295c682bd78bf43906c1f9c75e1648dd0312ac531d541f70e662477e28f739

SHA512
829d0601f33d915bd787185ca6caf06b9c6d45f8fad413e936c1f1f71b4dea16181863dd6d8b75239c8b1ac970ab80c2c2524f1999b3e219bb72e42f283774a7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
929133333a1e48e247dbebb8165d91f0

SHA1
04b85aedcdae8ba3c4bddb4ebe5464462f787831

SHA256
fe8211c9e6e67bbc0c82669b2b1065385845d34c4f02427f4d418d3a2fa860a3

SHA512
b3ff370e13d8533e97eed947f17dfac908bf662bfdaa5291fdb29ae5af808f0b9484d86533a15df11400e33ba0982534e6a7013955e319055c4d89ac06ec1acd

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab2A10.tmp

Filesize
67KB

MD5
2d3dcf90f6c99f47e7593ea250c9e749

SHA1
51be82be4a272669983313565b4940d4b1385237

SHA256
8714e7be9f9b6de26673d9d09bd4c9f41b1b27ae10b1d56a7ad83abd7430ebd4

SHA512
9c11dd7d448ffebe2167acde37be77d42175edacf5aaf6fb31d3bdfe6bb1f63f5fdbc9a0a2125ed9d5ce0529b6b548818c8021532e1ea6b324717cc9bec0aaa5

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2AD2.tmp

Filesize
160KB

MD5
7186ad693b8ad9444401bd9bcd2217c2

SHA1
5c28ca10a650f6026b0df4737078fa4197f3bac1

SHA256
9a71fa0cb44aa51412b16a0bf83a275977ba4e807d022f78364338b99b3a3eed

SHA512
135be0e6370fd057762c56149526f46bf6a62fb65ef5b3b26ae01fa07b4c4e37188e203bd3812f31e260ec5cccff5924633dd55ab17e9fa106479783c2fb212b

Download Submit