3e204eb0cc401b3ec032cc0cb9f2c79fa494ed9d1d943c6af1dfd083179bf899

Analysis

max time kernel
135s
max time network
143s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
08/07/2024, 09:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2be13ed2b206a1a4e30cb60ddb578962_JaffaCakes118.html
Size

1.1MB
MD5

2be13ed2b206a1a4e30cb60ddb578962
SHA1

e8a4036248686042d2579eadf2f58d2428c1a49c
SHA256

3e204eb0cc401b3ec032cc0cb9f2c79fa494ed9d1d943c6af1dfd083179bf899
SHA512

cf9bf9082c42fd13fa4a06ee217212b13984e4ce2d7c7dcec1de2c02b8c27f2fc43abfa2e9061b68c3f448237fbd7f1d17621d67ceb7dfa5925098dc81b514c4
SSDEEP

12288:A5d+X315d+X3y5d+X3T5d+X3/5d+X315d+X3G5d+X3G5d+X3u5d+X315d+X3+:6+5+o+r+v+5+E+E+s+5+e

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f0e6309352d1da01	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B0029621-3D45-11EF-AF94-46A49AEEEEC8} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426617367"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000d854e951ecdca4792ad3aea80f035510000000002000000000010660000000100002000000072fff2ca9d9c3dd33209a42e26ff7e416ba72facf86c4c8115b267d7cce1f02f000000000e80000000020000200000002be94ac6b5a4f3e34bfdc6167db7bfca927bd8650e0847d89d4f9601400c254520000000f14d43bb3e7b6f7e583e6d34f60fc9cf3c43819a7b3ac206c7dedea9b6213adb40000000c0cbc5c8d12127ba53c50e24acc2b8fff037d0b93b6018aa1c1d76976e88e3bb463b8d2d2a6fc53ddf83f026241043ad252ff14eaf386ce412b8b3d7c6b03137	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2088	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2088	iexplore.exe
2088	iexplore.exe
1960	IEXPLORE.EXE
1960	IEXPLORE.EXE
1960	IEXPLORE.EXE
1960	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2088 wrote to memory of 1960	2088	iexplore.exe	31
PID 2088 wrote to memory of 1960	2088	iexplore.exe	31
PID 2088 wrote to memory of 1960	2088	iexplore.exe	31
PID 2088 wrote to memory of 1960	2088	iexplore.exe	31

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2be13ed2b206a1a4e30cb60ddb578962_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2088
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2088 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1960

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0c5a4f46c10f47ce6962c375800b385c

SHA1
9b6268ec39762342a21a05a3d882d078c5f1c276

SHA256
ad41aa2214ce68c4adf548706257588eb0b2bacb3514a7d51547ef3e41997059

SHA512
73c4e46c6f38bb3522332a3109dff765e1f3f335419cddb5f13d704997359aa632df3c4e90e4ddcf73504dd8c0e74ae2267e8e051f18ccbfea14e8ae639ea595

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
328f61425c8908fabcc8db10d486acb6

SHA1
63f7ea701fc6373d74815ef4fe7631e302c7d003

SHA256
ed614bd221741527407c1626ce2060254b8e856496875d188ba19b0be56e62d7

SHA512
47b6f7bf2111f0a7f584db80a72a96b606bc02823808513758fcde11b3bbf9600e332e9d505724a01667eb7f7c869e2060290e72b4bc46f968802719b3ded43f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d3338931f01eb7f59b0fb9215c530f2c

SHA1
b1a470810b58ed0af31e85510cb4da5834a88917

SHA256
af7e602e6d28557019bed52501bd68ed24bade6878ee297dc9bc22dc46d7fc7c

SHA512
097db0f62f21bd7c1c9a6c7a942b6804d678bb19fccb9fad6884b1390bdebaba78d03325c4dd65d0df6befc060f53e60942a8f0397f77d1aea4394e81b0dd90c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
94f993483d7bc7d81957d2b98c48b62c

SHA1
aa64fa283029063cd62aff0d0c73639e7c6b2e38

SHA256
f435ea353aa8bb1605a5317d211036f513613e0bd696425871a67e1778d9a4e8

SHA512
862ab91f4fdcbc05092a15272adc407c4b297b9822cd1183249680894f4b6d85264a83f762991519468987e10ebba934ebf781435d6446bead6cbeabe29c2fce

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ea96a18415d871e48909b0fac0ff82d4

SHA1
5e61c0be76944dc837dffad5a2647f203f288ee5

SHA256
1200cad63bbfcdd07b92eebbc13cf5d7feea31d3f0be333f5f0d6d5218123764

SHA512
a122d446671ff754a1f13f7ca4fbcc763134746eaa3fd40227ee3150deb256f29023da6625cc214814bc7755b03658bbff3181efbeacfa2be471c5eeae4351de

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
61a9c52ee921994d129e24d173b47aa2

SHA1
8a501efa0d6cdbad26b16d9432e7723dee19ea27

SHA256
cb69fd1a9980a14ec67b87eeb5a29892a547bcbc24c7f63eefb20e924e4cc253

SHA512
826a3e803d827056765279ef8234b7ab17bce57969ca0df5b8574f4703a48a01d7b5e7778f12f4b19badefc4d1767cb40dd3eb0345ab0836f6fb153cf1209e14

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2edbec802d1f2de6ae5303e00c5c5673

SHA1
48a0e0d6116a4adec72aee6a4b1c4d7ef4fda1d1

SHA256
12f6781a1afb3a2716cc516b960b622de0eda8851c025bd0794e74c6884fadf8

SHA512
aa420df144d9a1076089f038a15840d6c05c4b30851dbd47f21752c8494312a4011cf22d398e7ccabc6556122f885712fa867f8a7ce5c7e3afea0988be125d82

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
86281b5f764d242a7773c8162ada88bd

SHA1
e65b6bc677108f023bd753546aa0cd6f61ffc06e

SHA256
486d31e0d5323cc55f9689f7aeed3de54ed6b999c5a8844d3e850ced0e40fa53

SHA512
708a982e98b3453be0302dfc0e0b08ea3939c4ec49f8d97f056bfe67fcab4332464d0c4d07fe76b5d1b556626c7ef0f2a4037814300445056f87911f947e0e48

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1ada605f7b59e0b89edfec97df4f2a7a

SHA1
f31f8507cbd10fdeede9c1d3eb0b3fc3443fbe73

SHA256
96bb0e085bc4f3a015bc2ce8690b93e65bbcc7c12934fbaf1ee1fe41bd64cf2f

SHA512
6154d373b3cb116e96e62a9371382b91befbe0534ca6d1d595cd3522f69bde2d0d1321faac437e7f30a28612796f0f2f91880463d8332599e48798e3e9ba1668

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ec965b6f30ba4358d21cef5107fae12e

SHA1
464b84ac0b1fa4068b1cbab68be62379989dc0d2

SHA256
e2877ee4fd0d0aa49576f396346a3b7f3c86daee707146fe728e2f5efca10e86

SHA512
8363e630478a7ddeeb65f87828e9f953769dd138cb7611d29fa34dd1fb88411548fdb28b05654b2e34816ddfc68016960bc56f8ccef761edf2e494106bce19e7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0e98f74091880fdc8b8841bec708c514

SHA1
8110f7da9f114eaaca672030711bf35a1d4fb60f

SHA256
2db4bbc3b15f3bb9774a88672b8ea789aee4444fbf3780667735005645a179c9

SHA512
1b79f02af803aac1c87b26f5e96bf92067393e270c0877b41c5cdb73f60bc645a30494ecec4443f21a4e1c6b85294e727c81f9a6f15ce3e3d0dacb9b008ebafc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bc2e64d88a40534634597028697782f3

SHA1
e4279f24d2d15a8666cad7ac0528bebd7e0f19c3

SHA256
abd4779eec8b3a75ce8c9de6610efb11c763fe23d8f19f5a999a1aa291abf821

SHA512
7f10f87ca604c2c4418c977e2a5585273ea49bfb91352068798d75ef71946e6986871f8314ded6f44c65b3767db8865012f61b8c22239913e6ef50f35d399f06

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4c81d2d15677f0b9145a05c7747ffe84

SHA1
7a1ca4f623f959162b2fcd22515847d0a2b32c6b

SHA256
ca81b43b937d6348af6b4099ca741621dbf670510c5c67ec739b53f46e8cb109

SHA512
81f8952e1ab74175b8dc58dfd76a43161223357bc0e4b9224dc255d71ea6cda57335fc3d8eb0eb6cbeb7220a515845d2e9c8489cd191cdd6a3e0f5caff1c7bfb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9fb4abc2cf3197c38434fee4787da093

SHA1
75ec05f10d3a905c843d7cfa23c203e52e323c5a

SHA256
bca35cb2e7804ffd5c9f99b252547585757daa42c2748b985aef165224bfd55e

SHA512
fd60d3eb4f84ace1c61b929511fc219b730e18f25c86c5879876cef5316d9a360b620c6f733bc448a7c1ffe73ebfe79cc95d49cbdffb09c2e165f0992a253f3e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2a055f96f54c9ce1257559420ab4820e

SHA1
8517b53adc19eb8c22238969405fb28a96500c14

SHA256
7f6e24e537c58a949018167292a5a4b95a85dfb232cb922af1cda462dd9049d3

SHA512
4cf1111d48aa49133d54ada3e0ead523f29e276ec0aa5bd2b25d86380093737e0abb24a936fedfd4a621e4c6ca917c145c03d086414ea177c837233eb38286e3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e718833ca25eb727f6bdd4e16d6a6399

SHA1
ddf97e15f1b2732c64a8187bb2f7d8bde97b4af9

SHA256
ad85e07657b9a4ae27fc74952f19a4c85df37214aff86978eca0700f322ef369

SHA512
409ba2692c5a7ee20eca0a60da98dcef72619f126ecca334d4a35342c8eb17aab27db177e9f3bf057d4cf052fedbc6441ca444845d00be87c06345f89056e0ca

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab54F6.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar55D4.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit