b3d3e7d4fc8ef413cc1a2469e6b027c408186afdc15b765cd88f4011d651d96f

Analysis

max time kernel
133s
max time network
127s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
25/06/2024, 20:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0f8076050d09abbde80ee75347c379b6_JaffaCakes118.html
Size

73KB
MD5

0f8076050d09abbde80ee75347c379b6
SHA1

9641c6c5a58645d190eba6c0feb3aba8f7d5d824
SHA256

b3d3e7d4fc8ef413cc1a2469e6b027c408186afdc15b765cd88f4011d651d96f
SHA512

61df9c82c53f639640625a56c147d6b8d87cbce0e47f975660cf655c6bb7beab1f21cb3c51ba6394939c25340721f43ccd5d96f419075f3a48eee37a705beca0
SSDEEP

1536:h3LIcwnheG23g+cIXP1Iho/eQJtsfD++GZxbVFknE5mW3crXh53h:mKjWD3h

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{7524E451-3335-11EF-8F67-D62A3499FE36} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 200c9f4942c7da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000006fb3d087c4ee9c4bb22550fd83a03905000000000200000000001066000000010000200000004478038f2fb1f9e50a7a0deea49b0da23c9533adadf35604939f88fbf41c6fb3000000000e80000000020000200000001bc4cc3de8b266dbd6cef0dc80d01c930fd1412b9b4998ddc18ef60fa563443020000000d23dc820d185901c293f54515bea50552baf1242e1e5907ffd4dc1267308dc9140000000b4a5913a87da6af79cef13acb7d63e68320b856c313162703f9440c304d4ed3f6223bb71b9e5a578087975bad2ba8b5b85c60572175cee6c424a1e65d2098f3b	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "425510883"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2652	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2652	iexplore.exe
2652	iexplore.exe
1880	IEXPLORE.EXE
1880	IEXPLORE.EXE
1880	IEXPLORE.EXE
1880	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2652 wrote to memory of 1880	2652	iexplore.exe	28
PID 2652 wrote to memory of 1880	2652	iexplore.exe	28
PID 2652 wrote to memory of 1880	2652	iexplore.exe	28
PID 2652 wrote to memory of 1880	2652	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0f8076050d09abbde80ee75347c379b6_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2652
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2652 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1880

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f27677827c4905eea0ef634d78cf4f86

SHA1
fa5619a8e0aa22ffdb73e8b7b54955b075505149

SHA256
d7e210c5c463e484e512d3c81d02f5b631af0e556846729a98e7715a7a22920c

SHA512
314aa2ee888e6458f7a7413c741b85bdc6ba1ffc464166c4dbc5dc422035d24870598368b63c45c968f71a61a4b2e29208bde1a594623b171e842fa6978aeaa0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
00267be2c652b1b2b135353de51f2819

SHA1
64e1efeb080c943495a4ad1ca147b7b2153c187e

SHA256
f6a61c82afcd106a84363e53189dcd20d14efb02845d199665ed519c49a122fd

SHA512
0c77998e2b3e1ee76310c384939b7fcad070fa67830684473d13b0abc068ae892a9d9d35e83de648d9f7295cce9d7a0a72a3f7c89694e3ecf8a9615260f30c31

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8fef764ca1286892c5f932ab9e6def02

SHA1
328a61dbd083a1e03495688900b91aba21d8a52a

SHA256
54d189d2b2e8aaaffd4b25a5e66c52384537877c000bd096ecc1436f96aaa54a

SHA512
93523165172f0f45914f6dc02f4e78ea90f791e099719a8b3039d9143010cae68e500668fd2aeb992c3546b0ef610a0dcd6b8264852854be56c50bb862f44aa7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
93d27e52eec1bd30257083bfce9eeb6c

SHA1
0c409d2dd9ed30aec2dd7207afc5477159aa4240

SHA256
f9a771d31fbc2234494b3e065aca40fd8217ebad31aec3f7d13ba0f7b5198e82

SHA512
18ea918b34defd0f30490f5770693de250f36a754b95934da318280c88638c4e9324e94b6d7a1993bf34c26a229335bc5e6d02214d175e122ab94c75412eda8f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8ec716047a961d3bf8ce68d58154ce2d

SHA1
7a036842b1f7284022d1433d6d024bb0f046379c

SHA256
bfcf12592ab620fb8c6dd26a825c7d3006561dfcc5ecb22d98aa1b4017df5e34

SHA512
8b13e3f46d4782161c85679f6d22a27816d1d9b54e2ae24a81d63d83408778c260d1fea64ffc3e6d172088a3d20029a3bc35bd27af6462c945b4b981fadadd51

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d4cc105008ac61ddb5c0df9882552534

SHA1
9728bbbfaebcfe80efd75d1f654e35e4bb2a330e

SHA256
c597b775908c34d4e1fe766f2eb789b4ff6fb3f42dc434d42f624cd3ec9a1409

SHA512
ea1d69648ff3a05190634d13da85fae74d4246b652282ca7a007146101d70f0713f9f3b64f2f89d8d841c70d19bf39ccce72cc7a5328fd2a974214719f01d335

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
69699edc51d97360dc866f2980d34c3e

SHA1
0007f4bc9f1862b8c6656c2a3d07bc3161ababbc

SHA256
56e0b4f2aa298db9bd3a175548b47ea5c8c782c94939913a26e38b69e8f6eb18

SHA512
eb3ef75202adcab811e4ba6df2aa50e22bfb5adb0084f53cdbfe4c8fadf95f177126b9fb21df70a5913bf31068f856f858dcb4c7e3e5bb3bd6f64eb253968560

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a127c08095a2b73d717eb7788289dc5a

SHA1
bfb3f2c172942b894bd970db1ed92e4531d8db6a

SHA256
564a3df711f98d46bd4374a73bf2791435d19f59e07a3fd9aaae8c61dcb2f687

SHA512
aa154e4fcf646e99b7416ba1ab34da3178178fecef4ca1ad458d52d43d7688b17d679e01e4210d4978ecc3b278870bdd765c8908fec468a2f419240eb929e927

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b3a01a3a8bcab9c66ef8b639a4af1b8c

SHA1
53182bd455c82e860613b7e6dabe478acbee4914

SHA256
5274c352422f8c927ac977a7bff5416d2930dd81b42695518ec8aa77ea73a9de

SHA512
9325e734c937792e2d34fc2f32d8c9a59c72d50b5b04f71ee90e3a2ad8d4fe24c42c6dcac645989293e0e6a516f34f86eaa2ea98c2e662bf6422646412433b1a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
be0d05477109ae651b6199a3519decd6

SHA1
f7107413e8bb8a91c5ada40c91587d212deef752

SHA256
c068192b0b398aab1f090c32931b96dbe4dd901ed12291d1a74909e0a6dd80dd

SHA512
2cbb65ef745ff5c55def23bc3870fb164f97efa8c2a80e15080a46ac80d9378f47336c70bd5e667caa6b04e7b89c1b14ed98c11596c7e7a3a02890aa39556e6f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
891e1ce1866011f1394791d92ef985ac

SHA1
23193cd815aad53b4e797f9fb6d4cfd5314f1077

SHA256
4cf54c6c8069b2989fa967b640c39eaf62a281b6b53237c349bd5c46d1d8067a

SHA512
022ed1a390467a87dd9a82ffb94f69726371a9d34e5419702563d224045ef9462773db790fae1e4e2d10d3990aef2054d86a330ec321a48dbca2b6f51fb95196

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c8860d20bd0cf5a491e15c80c0220e0b

SHA1
8a8272cc311ef0cf2acc28b25de501c22f6b65c2

SHA256
1f1410b9545788c5b48a0ab4dfd61083b5b20ee11cfaacae1ac8d7f120764b1f

SHA512
0fce7ad65b7e23ccaed639754b616c8744b0627c57d6daf540cbe59ac97dd177cd3f9108d2b22c8a9853964327102f2db00b9edae218506b4c1c12345d84238a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
82fc73077c679719555a8d39fcf15983

SHA1
9f6f8cc2a41c0459c35a9d723b146fdda5cd4a24

SHA256
a5f96dc0931106c3ca619fee82a4d23ff4f4634d54fbe6d1548065b82f47fb84

SHA512
88987bb5bbf97d1c88dff0a5f51900512ada05832c93a751fd53a7584f24fa45c684ae6902bff55704e8f566fc5fc9efe0ffaaa69742dd390a92c7ae41992380

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9609fc896e45f73666199c42de875b52

SHA1
51931d70b1a91dc51c7a0df0eb63fd302db72b37

SHA256
70820e592209c00a32700608dc6a7faf1d8879c15c1652eac6d88cd84bec76b2

SHA512
350bf6df9ff82872a980df8867464e6dfd5785bdad3266fa0438920d962514d2f39767fd2292f7f197c050cb7b7f875dfa865e33bd39f39912de54f95637420b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f145f84c3e68ff9ff39bca8b9783625b

SHA1
c7281989b931cf223e043dd82722b0fa11921074

SHA256
e8dba7bdc153f75161ae5b8b1905fdfacad98cd0bac7fc35c441305b560fd5e1

SHA512
84c1fb48f44840a59a2d4924c0409820bad56bb2e0437db899ac87aa74f80d8c495af270951611b75e2cef6962c0c773873b12fdf0a98e280b44c407e75b04a1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
adc0eefced408bae87bcbf9488cf6f5b

SHA1
4ff056aeda9d5f6a164fb4b56383b9ed27437afb

SHA256
9094d0eeb5b2359cf730f5fea2033e63fd700e6e2aa242062b77e4b433dffeca

SHA512
5446adf5b346e0094fc5b8f86df46308d1bd15be4be41371151774602c454eb428f3dd92003686007ace45c0a0c8d2d7579115b9515cf00f8ea71ed36e1a00d6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6196dde34c7def312b6543a83bd12b16

SHA1
4e7a53299c6e9c21c054511f9366d26c928a8847

SHA256
ffea5c35c6f217addd191a21448b62e9c6513b9a0531630255f1479883e9d84a

SHA512
1222c7f5eb18ad727c926a69193275965f3fde3398b8e19e2e605bc1c1a8179f6f718453e9b365a68b125c2c685ff51e93bd96d528a414104738eb7549899fe9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9a0390f5ad79675e065ebc75c0226ba9

SHA1
ef37f84c31f08249ddde9d51fb61b5b45ad8ffa1

SHA256
65d643930b4ffdbeb035b42351914a89530dfb9ead74aa534f315c2ade144f19

SHA512
696de63cce9806e4dd268ae63e26ac124b42197b7b6ddd4d953a4dadefec4e50259b44769dcbe1286bdc45be39fbf3821e34dddc892d42c55408f539e95a0af6

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3C09.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3CA9.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit