42455ce5aa793a027564781ad5220a9715f262de4d81b7574d2c97a7970594e7

Analysis

max time kernel
121s
max time network
131s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01-07-2024 19:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1c498187b6c995df9bd38ea9bc542bcb_JaffaCakes118.html
Size

10KB
MD5

1c498187b6c995df9bd38ea9bc542bcb
SHA1

fff4e1b08f323ed58eb3ea367d566330c9320bbb
SHA256

42455ce5aa793a027564781ad5220a9715f262de4d81b7574d2c97a7970594e7
SHA512

fd3106c3c461ef484d1e21e31721a07615e11532ae348ec48489d0f64415ee7d4679b6d01a867740d33952c4b6f1c8a73fc4f399fa084e31b5085445e543063f
SSDEEP

96:uzVs+ux757dLLY1k9o84d12ef7CSTUwGT/kWV+Upj0j3RhRgg+gjHggclVHcEZ76:csz757dAYS/1Pqj098guPHb76f

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{CF7408B1-37E4-11EF-81DB-4E87F544447C} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426026001"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 203981a4f1cbda01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a2300000000020000000000106600000001000020000000153f496e45f130106d91e5a8b9ac30247650be32891fceb8d0e76d30459e3cf4000000000e80000000020000200000000d6c4b6f99cad698aa179a692f44f845193bb9bd5d9fd64c1d1b9c60f0a87e042000000091f2042993f27439163444747d79cfab5917aa425115e09270b556698733882a40000000626e2bbd5de2dce2457a0f372340c570e1941fc9f043f827ec7aded84255d1a1b436120efb51ce03565083763743769250adde942d1702591efec961c90f3815	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2176	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2176	iexplore.exe
2176	iexplore.exe
3060	IEXPLORE.EXE
3060	IEXPLORE.EXE
3060	IEXPLORE.EXE
3060	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2176 wrote to memory of 3060	2176	iexplore.exe	28
PID 2176 wrote to memory of 3060	2176	iexplore.exe	28
PID 2176 wrote to memory of 3060	2176	iexplore.exe	28
PID 2176 wrote to memory of 3060	2176	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1c498187b6c995df9bd38ea9bc542bcb_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2176
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2176 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:3060

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a8d5a460d3753bb3668c4b8fb44cf191

SHA1
cd307562dc5da482b226d8b8a808062cb3e0f997

SHA256
0d94629b100b5f4bc59e065cee7ba87857bd21cfbc0ea70feb7a006267e583a7

SHA512
7fed6d0afcb6f037fc7b433a4232f8d720919c60a8b1312d127138b36649af6415b476ab7bff2e70c360e62676957030da87f3d9c811df6d4373a4706c5cbe8c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
791dc8aceaac01619bec883be33b20f7

SHA1
99c6559d32728956094576541101dbbce929b0ce

SHA256
4de30830baf3d7a615d3c481018ecf7fd6c52e26c9945a36a8760c10d2e29b29

SHA512
ef93a916c05a7f70fc77f4fdab80487c0f2b6745555de9c20fab7dcaaed1021f8350bb0dcd4f320851b2124957419fecd9f54cdcb35fb941fe1ea851d5f4de24

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0fd1a2c4ca619bc82426d32a1caf0b8f

SHA1
68d571983c3297387ea4089b01bc98db8ea0d5ed

SHA256
5af0415bccdfbf00af6a199a7957288b4e0b7da0c55fcbb45cecd34932066dfd

SHA512
7e3bf8c35911d319136c8b56fb81ad1c30a5a3b7df1782b2955b45d2e63ffc5fd89ad49c1b6dc4457b2f090e0277a244fee65f222816b813ce1e0af651eca24f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c0dede0a27b9f7ce35d2a2696a0314b2

SHA1
11f83350d327b6179f5313d7c08fadc74dd98b81

SHA256
6bf91c652db860a4eae9b7141dea239d8a02d75c4b3031bdfda467710c9e60c0

SHA512
89f7afc23c83345b571b8dfea4eaf860e735dee5ce7854b9260b48b28f4cc59362ded0e81952aee0adc08657660322dcb3e3e8ea335ea9da9e1adc801d013604

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
87793bba10e65310e25a8cea8eb72c3f

SHA1
765c825d96af8ffcc337ae6cb908b87e774b4915

SHA256
3306bb8dc74e083888f984c0ffe4416b427f489dfb89b6404daf302eb1aefbba

SHA512
48c5aed6be7051da5e297b99d0be1c336ec0c7119a5e9038013ce3dca11338d841e9be86c3168e0f9397f6b73646a74299debf0abfb0976dfa35301fa1f2f26c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
dad74767537c093233878192e54700e3

SHA1
b70cf47856205df6ea314f7784e1e1f451c1be1b

SHA256
ff8afa2c50d47c99200338592b096d217530fc6801a3b4b1308d3d1d924e0307

SHA512
77392a0ef36ae359b577e891e661ec3a046e9d64ee0ce2b6d543cfe65e84c11d5a6a7d685c5fd7939c87b602eca0a68832f52180e3c545492fbfede81be90da0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2e5747e829aee13c5b2cd1a320812729

SHA1
d6947515995fc34b205c8a0f393058549e237237

SHA256
355e00db24f8df4078345dc8fab1d6c167d1f78e8f2d81aedc4d9ff39d72c62d

SHA512
737c4de8c5dd91b4a6daf552036b5271579dc0e8fa4dfc63759b12b2ca5341cc9b092473ca266cc8c5b1455403ab9ee3b87788491214a5b0b944044675263c50

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f88ad3824281e0bc26a0c240c1dd667e

SHA1
5c134131676ed641e05293c69b490244bd09a430

SHA256
462b3c90a1f20fd30c15cc95a60d2c8d85e90317ae6649ec0e2aede562120431

SHA512
a51a6900da5cf40c3920eefef959df7bbb8d35ecc9cad196c550e0f1381daf56736b79b630f5ee5ac3af4b16737aa9148dab62a4bf70258318bb0da9967c103f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b1ccce8e5f286dd009156413e43a52e1

SHA1
ab27bdbe3b225fff92f91db86c5eb16b5623712b

SHA256
6043193fb10618665e1d43174e4d538e03ba16a65022565a3c52c3519faf1ca5

SHA512
2e2eee608c462acde83e6f495d26348abf491e176e7312ec2e926ef8058789fac66171220458f270552989659d27c2b240e9468c89811fb5b33242823fda557d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4617a5dcf11080017885a56bbfa50de7

SHA1
5d1d46f775242d474e6cd90e6567e5510cec09bc

SHA256
69aa572db0b8c25240ae68f46d12918623d3a74204a26454d721e5ab45993e3b

SHA512
4dbfd867be93eb111db7f5fa5a3513567fe5ae330cb7516b338d8918f85636f71424b671e5b66aa89fc60a8c8ac8c229dc42e3a3861b1c80e22b49cb729b9c4e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d5e02f1391efbdb646cac155a2460217

SHA1
bb7652be59a9aa61e434b9194ffcd83e58b78e40

SHA256
4155573781b4aaf9af3018cd91b1c1f25475b4209b9156cd5e987daebf291d1e

SHA512
4e73334eb41195274fac2507e82998bf98e97ba1f1edccd2bd8fa2afddde4b789dc60709655cf8df3d2f07d9b11d5a27ef9b302e37d8e05722c08da4abbfbbdc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9f310cc0969f97218108be1ec724b43b

SHA1
7bd44b815cf7db9f0bfd16345b9e25025d0622c3

SHA256
7a39abafa35d8c8e01be38da20f92eef6462fba6cf0692dee6415dd9ea16d207

SHA512
67b430323b47ff1f1c3171b738f40237017de8a3b832cdb4124978f813f4f26e30110985559e06ba48e5f9e825bc04e1a35b53831c990e2400a8b5408d90f153

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
857af8c67b24c3d76afc22bc5aa28dac

SHA1
844a3ed31b3a49aabd61e419b3339c96d1b4df5b

SHA256
c9ad1f5b5bad5948561498121f84ab7010c26418132fafec9df862ca93fd7fc3

SHA512
f20c1e00c57276d33deff9e3d181d34f1a52a57055e4853852e7c933c36b9796b8588448da9c9675d38fbde241875a2c0508d38a85532ae36fce333f90cfac6c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2e42a7b7feb36ef0cebc1b471bcd09db

SHA1
9b86ad72a90709beced734998aa3abc605095235

SHA256
97c9d3cf0f3a2c5e2ec3c468a8dabc113cf0d5473274c24ae23a850d00f713ff

SHA512
8a82d174103d4f66bbce1e420602d55155def69b09ef50fd7f2370cd96420c4a75b4bcbe05150641eb7d625e2b0f1cee61dcdd2a7fe0727fd2c30f469fbc1148

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
552b81424e1fe62acd9368e54d45b63c

SHA1
48a082174ac1465872a0a92ddf7dadd0a67269cc

SHA256
05dd1e580831fce0a94b3581cecad5d7d44b73c0c386c8a2b523c31e4cfe8387

SHA512
83f65493821c51d66401492241ce2193fca57acb6e01a3ebff8a73755323d777bd106bd00e54523f5d0d4c459ca78b8dc516bad113f6758179c489bdd58adf73

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6987eb8ae3ea437310316c64d4d5e24a

SHA1
d758b134c9549c23c21b8a25b3a826776327a4ea

SHA256
47a92008b4186b0f4317c9d4225e41bf8c7a870fdab25ea98d3b253006763fb3

SHA512
9439751495a6d9bfb2681415c409f86f0848a09091337c35e2748068b39b17951eda40cc8bc0f1065d55a848e76de2428c4e74f9f76d8d578ce73404b67893f0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
dfa82c36c8d80343e6b94ea06c93fb77

SHA1
a5a558b6bd3816bd3b9e881700b0848526b1f376

SHA256
54bc9c92bbc4d632a40a8cd94c16eb90c88b5990842f5a37b745d7a23432672f

SHA512
fc918b9a488034c6bd4b9afb5969eb9e2dca34c9a405bedacccaf46e88a3b07dac457a4df7171c57dd012e62fd8b2f41ff564a3559458f2816e851cd29628ff2

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3381.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3406.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit