d1a8fdec826474a1cfb5c1e2eb7c3d143f7f5621af7af2a02ca674788fca74f6

Analysis

max time kernel
136s
max time network
135s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
07-07-2024 23:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2a33b58aca7d69a76f28db8cf35aa102_JaffaCakes118.html
Size

53KB
MD5

2a33b58aca7d69a76f28db8cf35aa102
SHA1

67caa5960a4f21cd22e3b8f6038765af4e882ee0
SHA256

d1a8fdec826474a1cfb5c1e2eb7c3d143f7f5621af7af2a02ca674788fca74f6
SHA512

47c1a3932c3c9e6f46850608301f2b59e8b3b5deb6cffd01d5db9b638153878bb0781472cc8ee01d56768d12dd648950760a6c066319f0b0a09c6f4c0d9ad999
SSDEEP

1536:9kgUiIakTqGivi+PyUkrunlYV63Nj+q5VyvR0w2AzTICbbso+/t9M/dNwIUTDmDy:9kgUiIakTqGivi+PyUkrunlYV63Nj+qP

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426563419"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{13664551-3CC8-11EF-9BF8-4A0EF18FE26D} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 305aaeead4d0da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d0e07ab1aa2451499174a83e04dcd09c0000000002000000000010660000000100002000000056a479cb1d4b42ae7444fe8e70fd673ee288ba5fbc1b1909f290e8416489e353000000000e8000000002000020000000328f2763b6819906d552ea9420f54af93179adecdff4e69595d5d0fc0014f5f82000000024e7b2704b13dd84aed4bf652b02a1ac541a51b1a8b6b3f1486e819d018c7bd4400000002b2905675dfb1e8f2041cd4f421969ad6ad48d8b2408916fecd3f90046e665def739b9030fafb60f64f13da5d987a968adcd44342e6d70c24276efc75084410a	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2300	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2300	iexplore.exe
2300	iexplore.exe
2736	IEXPLORE.EXE
2736	IEXPLORE.EXE
2736	IEXPLORE.EXE
2736	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2300 wrote to memory of 2736	2300	iexplore.exe	28
PID 2300 wrote to memory of 2736	2300	iexplore.exe	28
PID 2300 wrote to memory of 2736	2300	iexplore.exe	28
PID 2300 wrote to memory of 2736	2300	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2a33b58aca7d69a76f28db8cf35aa102_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2300 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2736

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ca44123d9fc2b79651f4c766550896c3

SHA1
dd45a2f93b42a808c93818c8ca10da1e19450419

SHA256
a6ae7893f856ff035222aa08fa198e90865caffbae918bd247274760234fd6d1

SHA512
b9727b2255bdd56be7514de8f6c44ec505110e1e007bd5cc7428ad18942c2084e80367fca05b459da8875d46efe8af226e37ac0e078d52a8e9781bf81c00a4ff

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
764dbb4d38caa2a8b874944dd8426a82

SHA1
9860ce4a7e8b76546772c99806a61ad99132e249

SHA256
483e2453d97310614621ede4fe681e6088492791a376cebbd4e1985765425e5f

SHA512
4ef960eaca76b85b4a5df84c0d3e85fd1a9b5e03f8e5923b6711db3062e256497a49857d2f86b0bd72f15509896381acd8272d8ef1359623cd9b504ca7337353

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
87827e0ae4434e2007d9f73fa4dffd19

SHA1
b0b402471e1ff96227c991809bcfa0554e23ecac

SHA256
e5a70e232eb5d4610930417af000ad2f87bc67da609c86e44dc324efe17fe18e

SHA512
551d8b51d60764f639e05b3ba18fc79dfb3935deaa1b38f4a07674ebe24320f0a30b2818bcda0537a8a53ef44ac09686a47db9fdc7bf385792418519324545f8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
eeea8a7fe639774d27bb70fb00fb9672

SHA1
b9d20d87948e2eac7199a08af94464fae7d48871

SHA256
bc07ecf824d731bf06e8077f1dbe4029aaef4cd92c081749596b47cb89302a9d

SHA512
ad5daf4699bfc601317e6a0dd7529cbb611577609fab3413be2cd740bd62beeb086a63e7a97c4851c309e4070fbda6507246d6a50e6ff60c328cf4951996c819

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5d92ea68ff908baa53756d9011f27a4d

SHA1
62d77697a87dae01a70a8b5f590d56cf683ee0e4

SHA256
1cf2d79ec0176d095fb82eb7ac0adf98badb74ecb091e3476c67c03a75308ec1

SHA512
ded3f7a84cad26c0d5401d37a9aa742acc0dc7e1e395b35df6c554fe91eff9a6f24382685bad9196fe15154cf92a027af72a7868536484fe9c78feef961497a4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d162e61ecd9af23736f6efa0a3fdabe1

SHA1
151f1448ba86f1689313fc68f269328150b37b75

SHA256
c7b60c6ba92e23e1e6fea105ee5eb6b6a638d2bae381f6ba9fe18c6aadd7fa9a

SHA512
8079c5dd366e13d697084b57d7eab0f18eb1895ff39bd24b019ced1af913c60f336095e8edfe364614868356f6f1b81542b42c4623f4369d0ecb0da76867ce65

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8736b60d2d82732e571937bc334c8e66

SHA1
b1b02f8c7b4d422eadd8143fc4e911c7d55a38ec

SHA256
e6463e44311e9510fbd261eeef3930dd4e3b1b6af3fe4159c4e7d36285fd7ceb

SHA512
5a327d4864cef675a34969bd5ac29ecf257984ee51eef670ed690c5430fe9a384402839c310e2ffa50897252dc55b42d3bee7d2bc9dcd4cda1f97fddaf6e5c28

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
aae01cc9f95d72e0129a3e6350008577

SHA1
27b8356f214f7002e1893297ad57e29d9d468560

SHA256
3ea28e80b98684fd707f91c0e87295e96d88683993d1376551025892f0c12fc9

SHA512
f4538c07d0b0429172e368a9daeb7ab07b6182702fc88f1b74593eaedd505792e3dc02d57cfc9997c213ff59716bc38da7ed7e43603ae321aa08ee95be9ae939

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5acafcd4dc5d7deca14fbfe7c16fd59a

SHA1
4b77f2d4de65b278a73808a999aad925b0239d6c

SHA256
aec6c8d4b835d4fc546528f8f1ca4f5ee022a4f0d9524736f39197140b29cc3f

SHA512
5d4164be4cc35cbafc52f2886dda3e8f141ef29e32ca9e16c640d96ebb64c1b50e915a6ec809603fe037bdda41a57088af0e9fa398981d548f790508c56d1696

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5b3f64f5203cc73999ed0c87ed2aaffd

SHA1
a05c22caec1efe61e653865b759440790d355a79

SHA256
0eea593dd7171b19033d9e65b94887e8d25a36174145ae12a42b5e2f49516258

SHA512
db5f01614e6542442d8696b2288d054245d97934631e232cfbda6038505418c32861659b4e395824f3b8164122e9d82259b2e712a19264516b7923afff5e8a3b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fc79af482649730d4ef338b6dfc14567

SHA1
d9c45b09dfae0d9f058bb63c780047b0f4ef0f89

SHA256
58e404e5290b969f685dff1525f9889b44d04275490bcbc91a297b0a110797f2

SHA512
ead5e5598d3f2be7c05b21835350174dcc7e4ab7e8bed573753ddfdf593314e3df45d223cf694bee57ff46e6ab9a54368d51c88afc4316d522a513357dd97366

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8aa134a02d22a07fcebbaedc19e093af

SHA1
0f4a159dc7a53932a4754f50dbe9871df08c6aed

SHA256
45818412132cf06fca1d6fd92a4854a45eed8861286280cd4c00e0bcacb1cd64

SHA512
653b617f7b534cd4bc84ef3c03a3045cf1629510f9210ffaace5a6581d75beb98af747a0446d7c088aed23c766c6b4d602268953fd5b42e264adc4ad8c7558af

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4419ce41e479479fa5af73813ea0e3f0

SHA1
205f569790ea39dff5c464f5e3172119680d45d6

SHA256
7697ac255e9520ed73313f8f99311c9030aed70118def2478840a4a8ba415c01

SHA512
e167c07494b719b32c99b05fba5fdca4435641f4c2ef7d1bbccdf538c3457b37d3f84547dd4c3cd84d02b5758dcc13c80f2cfe6cccc44577a7b9800daaff75b1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ada6dfb95493029826b3eb58f8fe6f7e

SHA1
f4f499db6f6458c74376a9d0c764ccd3a9a53015

SHA256
c259f5d4f7a0899c8b993708bad67182f118990ee5653b6d0f455a711c4fd15c

SHA512
805de05eae0698cfc656ff8094c5e516631d480209ee7a90814cd041232bb2c7393cb6aa60cf5a304ed9de83aad21e3a509b34830ebeac106747d5547ee03f13

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
20c679586f86864113fb6c60af91bc3a

SHA1
b0de4894e61f2107da702f6d1d0bc5cae7fa046e

SHA256
9c3b97d8e2f679592580f8e5acc19b78ce8f32b51c84a2ccc6e5bd4219dc1e58

SHA512
189b2781d130505d019ce7a22c09b38bc571a79a0440c92a7b0ad4bf5beec94f150639143ddf6ecbe6190eacddc5e2584474dab88abc9215f6fbd365870cbba2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a9bcef7e335fff91f58a6fe574a65512

SHA1
8563becf18a8d1a9347c3e6c8c3865aef9b3f4af

SHA256
80c70ba2168e7c5cbe9db8fad4d4ba506c117db7b6111b5004311b8c79d2ad70

SHA512
12d9d9f7dfe4df31b2847f79e127004ec89c58990d6a3f6d151de573ad666a1fb6d20071cc4ce41a82b548ae69d8713a880d8c435bc06c5c11cb9a791f50d9c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\I819HQXH\glossar-js[1].htm

Filesize
706B

MD5
67f3a5933c17b3ab044826d3927d0ba9

SHA1
5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

SHA256
97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

SHA512
03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3CC4.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3DE5.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit