d2b691f92d8bc8d4be62648074d80c00b36a4060d843250b53585342b4b8fd67

Analysis

max time kernel
117s
max time network
126s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
09/07/2024, 12:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

306f637f1faf60d0dc76dea565635c69_JaffaCakes118.html
Size

12KB
MD5

306f637f1faf60d0dc76dea565635c69
SHA1

9012082e093309fabbe1c62663a4182b86eea15a
SHA256

d2b691f92d8bc8d4be62648074d80c00b36a4060d843250b53585342b4b8fd67
SHA512

80caf3817e54804d867a599c75baf8b2abcdcce3b48b7326a4d0633d539814824f36d25de7bcf2220deaa9f62c16eedea294be5681f9d11b98bf9fbdec3afbad
SSDEEP

384:sdlIcDVEjR6/gu5ByZqnujhKh0ImzguLZ:Aghsx6xLZ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426695961"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bb7c5835718279428690b074aa627b7000000000020000000000106600000001000020000000c0ff09ac8af65ee3ede00cba9bef466999db0fa20a8c593da37e5a89036df092000000000e80000000020000200000007cd48faf1fbb92cda51e94f8b549bced52145aefe1e2f9d66bf18034d40b335320000000d2be477f6236f8246ca010780b9216603616752ba187ea52afbaeba342dba2664000000089f3a5208dc750d90fe7b4d1b32564d3f2073b1c30a4841cb3150e51e01594263a1849cd031e12847b86ed3faadfe263d9d837bee36caff5622bb6cc6d953081	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 507793b509d2da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{AD65C6A1-3DFC-11EF-960D-6A8D92A4B8D0} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2240	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2240	iexplore.exe
2240	iexplore.exe
2756	IEXPLORE.EXE
2756	IEXPLORE.EXE
2756	IEXPLORE.EXE
2756	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2240 wrote to memory of 2756	2240	iexplore.exe	29
PID 2240 wrote to memory of 2756	2240	iexplore.exe	29
PID 2240 wrote to memory of 2756	2240	iexplore.exe	29
PID 2240 wrote to memory of 2756	2240	iexplore.exe	29

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\306f637f1faf60d0dc76dea565635c69_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2240
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2756

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7472b9a22f6704f44ea618628deb73d3

SHA1
93d040a6f2dd12a4fe6c96894ea84445f2700a8a

SHA256
c9b3a9833d35edfb8ad37a79d475a835934893191bb92d5ee8e3e833e5abb5fe

SHA512
4c55b30a361aaff872339faf77af3fe94bd63ed964377cf54399f7b9efd4ab91ed9da3a64baa6eca516d7940a28869318f31b7bf2bdd0a788389e9a6dc4deec0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
13340371f0ee924acb42d52a8aecdde2

SHA1
bded8cfe8328052950ea1bed7d085b03cc825f30

SHA256
a4c386fecde5604adb41229ab64c928303303b60ee9d97e29017d90324854aac

SHA512
53dd4cc909ee91e92bae1e76a03f578fca7afa92ceac795f081b2cfc6e1af0cc1675afca3d296038759e152bc0f5b8deb5f9bfc44e3979034e91a6848035b526

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0fb7eb3a7ce918648d0b2980f44c5b1e

SHA1
1a92c77aec2fba7b8d7a4d42bbee71ca8241a342

SHA256
dcb2ddb54ce9bf4ddb6c6688b2f2218d479b756f355f051a86d819353c449c36

SHA512
b2eec00c3773110079e13231ccf0781d7131743474b2af4edac936b776c1b4fea476f9f91f975eef463546ae44a39d45f2ae110ad2230e669cc8237ce700fea5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5ca997ace038b529b96f96dcb6c9abe9

SHA1
c4f786efbc4e862de9e6abd1711cc8abdee5d1ea

SHA256
8204b26f5ec281ac5e8c93a6bb3b807744d11942e8d828305f6092506adfd3b5

SHA512
8f90c0da7b6af5deab4cb45b0b0e9689fbf00804b9497a1c16b3491a5ac8e4889c14eb9a8c8321b5a6e7f3f88f1f62c2ee54848e9bd20b115c16d97e44c30d7f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e6f2edcbcd5433b043482f204d5f624d

SHA1
a1331959b19da2d8a8ebd74e6cafca7c67cb5ae8

SHA256
b8db98e76f7e3920e75869e3221a3fd442dce5a7c3b277a1498f84fa25f0be9d

SHA512
ab3d8461644773e42bd415327023ba262cb4e04f08dce67d885eaafad569a7887eac977e2cccc1a38ef17dc807127658528a16a4c0133847d214468a010b71eb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
eac4b1f682c407a3eb36dffd28aae0bc

SHA1
c1be68111696fda9ff87709325aa41613845e6cb

SHA256
65587c894f063a957f5b5eddac3f8fee2b8016c61130eead2c077dcfa4072dd2

SHA512
a577ce9db693ebaa5231fc070df930f2bb65f67cb8548e86254abc63b9a6e689014cf3b126916f0158ddb4b4f88454086774a528b4531e3cbe95f2ceaa9d2ccd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
47e125059f5241319a2f202d54ae9af6

SHA1
4546a76f0ab4069adea7b3e4cf56c8ba6f30157d

SHA256
2821b7ffecba0dce617aad634501c2ca28f8df424cfde25bd4c186659502ff43

SHA512
202f7c3eabea1cee6a4eb3b9ade8885a33cdb935335a0c0a800d8bf30e58d90020da81879f4e6bbc840796b2563177badb7317ecb80f5cfaf0564440ea88d146

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fa7c2bcdba8c502a93b0492026c5e05b

SHA1
db4aac527104baf1ae02c594d1eeae1cc6f080da

SHA256
00c649dc3fa327fb10ec3b146b2188a48b058982fe148cef279a414439bc5743

SHA512
81ff058c3d4d7adf354f001b2a925cc4580982750b604536652c479c904f8616fcc093cfe71234be99ecfd64b9e806bcc37d1196fef786617a54548c37e107c2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f8b5374a3d4a80be95739a0d18c5ae32

SHA1
63aaee0749538a621baace5b5f8bb27530594902

SHA256
eb4004e55b7d19418d6e85b93cd3f26ce252d898d462dcb0208d1ffc0e62ccc7

SHA512
f1f877fa23d3968513bd58d12b4f303511410e8419d902d6a9aa7f216afb38ac7a38199436daebc5f07c0fa0c29634a5bc63306cfcf6fa50dffafe8e77f27196

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b27455f7d1b37500f91405d4d62d789f

SHA1
8f257a092ac62326d8b4510c3f1b8c142e846a6d

SHA256
0fcd586f167b05e4582d70c2203eba6ab9e304ce08d169a6bd19466f8c2cee70

SHA512
34e6a80bee6c8bc14c87878e9b68333093c42688760ffd95abf09aacf15c4d41e5d4c8b2b76c49932112ea6d53cd89d240000a4d95f28eb01c688003534c37fe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
37b31fe723f65795c1d27d3d34ed294e

SHA1
d6a6f9546171de91e5d91867945c9a29a56e2cf8

SHA256
c7c5b5de050e5c20f8f07c532d68014784bb8fb06023e3040c03925b06221813

SHA512
8d451717da6ac30e65ec6f68876d318382e993bad47c5f646a8fd789560206fe896ab515a790bf71dd9c0239cde22f80d781e62063117924c2bf0c7fe4f3020b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
56ff25295a5bf214ce7c6ca3bd81f0a5

SHA1
ed420b31bb7fe29067e481625b2e6a3c0fb48709

SHA256
5879fa51d522741f86e346acebc7d6f2ac54691933265563270e5d431ae56e8a

SHA512
2e5ae2e0b3dc2b7b939a022b275cfba07865fd087d185a18b15e6d4b43e2bc1ba2956c712887d723c4527fef7403736d12610d42aa45decdefadd4fd93383ccc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a6b81bf4026d34daaeba118dd4f7fd0b

SHA1
81d486a8a3db9c57430fff8be2dfb825c34e2102

SHA256
a28ad68ba8dde42a42c7d2c085676986bfcdc616b5649957a58e2c8a1ad5476e

SHA512
9c13edfda665bc2e7e7c80ca186dcd445a9d3e1f230102d240f3cb316b2406599acd3ab1edb0fb8e22cf8aad6809efb4a97553fd6eca3ccef2de549935d9bddf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5db28ca2b79f397d3c4305c9831de8cd

SHA1
9ccfd8af058fa887ee309caf1271cc9da303f0bf

SHA256
c85293ed380723a0effc6529aeddd5169cb103b3602dc8210c5d59272b87d971

SHA512
056d29138c4d00d1c2dce89ae82e1da07c2b6ff6f33b193a7040f725a0470ea0a7d0d44e67640a03cccf2cb9b218841d11636067a5c333272116f34f7b6dbe44

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2ef53a049cf44704b741724c66cc0fcd

SHA1
2b44b8da29eaaa48071ed9885bc8311d1e08e30d

SHA256
d72d6bf4cab96d7f5a57c641de4ed119ef2b3d9ee0c3eed639876c181d6965d3

SHA512
65536fe59ce7d94e6b6aff58c5b9059c0c3830c579a4d8708871c7af73e297dc12f26fa9d1fa2db779d483a09badc487a7f0c161f9da0a19481d06ce5c6e0eb1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
364fe77774fed326a9f319ef684ab483

SHA1
4f03438a35236ed90d68132982d50a3c302753cb

SHA256
31a7d43af057c45f9df5238da2ef62e2f1b123f6ed9138dc794882195875bfec

SHA512
ca728d492e992f99d1c729c87fd622fabffb254cf2549a1279b2d38071200819495c8e4329748d125ff3d657575080db8642ca1ccd509713849abff72a1562d4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
df155937f2c722b869a13c459fcf3af1

SHA1
94493814ca00b08e4a79141d20c21a8e8df42748

SHA256
1152e2097405ec0471780eb9189229cbb44b27803faeacb4c2f29767d152af21

SHA512
1464c8fd9b2af25e98107d862c0c741c4ac702f34bbf183c0c75217c6b4d413d5aa9e247fb8dfb70d62e774d0fdef3d8bb7b409cea8c61b3cf6dc93a44ab7f9d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ebb38e688739d893213319c56fc7e630

SHA1
809a88b573436aa349e6e6052bf9ca2aece80cf4

SHA256
7e877cc397e68df1f79d14ae823c7ff10390d2e5fce91ea903383df468a26838

SHA512
f4fdc90411c4edf6a4ceeee5d072bbdf36f834db2f8ad4994fef439cf04089e43923fb1b33c91b7f8bcfb9884304cd4085c04e751a2c3c9031e4c905e4606386

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabC50.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarD2F.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit