92df567943d6680c9652839925907bb94372b4a6322eed401f1d6bb3e7dc5e54

Analysis

max time kernel
141s
max time network
142s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
11-07-2024 06:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

37fd6a83220a0fa85194e364d859cc81_JaffaCakes118.html
Size

57KB
MD5

37fd6a83220a0fa85194e364d859cc81
SHA1

ba2988042be176045e924d9fd622d8f9e8e4db36
SHA256

92df567943d6680c9652839925907bb94372b4a6322eed401f1d6bb3e7dc5e54
SHA512

16c951a5b721e79aafbb808303692575fbe0478ad79b3ce2d87bc9699be481dd859ca06c3f5459e04ee3a25e54e855059fca9018dccce991c1fe048f1a7c7b25
SSDEEP

1536:gQZBCCOdq0IxCm1fRf0fVflfOfQfYfefvfofFfgfufHf7fCfjfxfOf5fPfxfkflq:gk240IxnsNN2Yg2XQNYWvDKrpWBn5sdq

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{30F36A91-3F4C-11EF-9AB6-F6C828CC4EA3} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002aec918cb9fa9248b7812ac80df2e74c000000000200000000001066000000010000200000007c6b717ee5d7f12cf536e635430dfc07950850e6d3529032c8cc84f7237a46cb000000000e8000000002000020000000ebe7bf59e81f25e0a8ab0204fff5c11ebcc263967268077eb56bacad058c2291200000006f7a5611b77e3e07cf29a4790c6883e9768608bc595bbf8be17530d4399f467c400000009f61598c672221e16a3fd18d8bf64a140dad562f8451b574c9d3cc9a6cd54a412df13d4acb21846a8f2a6b2d753078c8c136edf883ce36e66aa11a1c9ca06d24	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 602f2d0859d3da01	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426840062"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1960	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
1960	iexplore.exe
1960	iexplore.exe
2956	IEXPLORE.EXE
2956	IEXPLORE.EXE
2956	IEXPLORE.EXE
2956	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 1960 wrote to memory of 2956	1960	iexplore.exe	30
PID 1960 wrote to memory of 2956	1960	iexplore.exe	30
PID 1960 wrote to memory of 2956	1960	iexplore.exe	30
PID 1960 wrote to memory of 2956	1960	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\37fd6a83220a0fa85194e364d859cc81_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1960
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1960 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2956

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
733ba7b9227542c1380fd1ebdda114af

SHA1
ea186611483d3c55ee389e3a346d68ee6370b5e6

SHA256
c2ef6265286c9f9d46b500f1c42726b7c388ea09ffec6bba73918bc2c0be0ffc

SHA512
b5406583660cbdfdc31cf31d43745592e6a5b551e1892f51633f1ce2f5705f5ace6f4aa828124883fbb538e71866c9d2802d5b4fce171ee5d567a021f507f836

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
12a4d256af8581ed8b548e496532d779

SHA1
0e3f51df9600c40f5a3482c466e7cfe01c36f4dc

SHA256
071304fce2301df27e57567ad6aa8dfd0f7b951de7b6f1d3d22d405333e58bb9

SHA512
568678f7bbf262f3a82ed783357700d158bfa15f37e21fb2ad6392632a9c656ca7cf02908309083eea9823acba3e051de5d4f420b583b6f721231366eaad998b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
bef2685651ac11a972ae2b6024f07090

SHA1
480df98a976544dbd36fbe1335d04045a14002cf

SHA256
bd9afe11880c90fff0e70b6f9553dc84b59dcacc30a7135c3021670aba79db3c

SHA512
813e3265f226965f5cc9e57ed1273609c9eef94bb9097ca9d6829c6ee95f2bb22a18c63e0951c615e6e706f384743d964aa9bec64552228d0219799bdbb5e576

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
8c67bade0a5b459d6953aa6d248c8cf4

SHA1
21748fbd056cf7050de7ba6175e13c4b9352e794

SHA256
f3244c73043f621805a1069422efa510aa74fa11185ade7777df9ef54c932a79

SHA512
fb33964630462bb4c9093fd1b33574bfb7981ad7cd4f7077315b319fe71058a63d5f30c2c1684052ab62e2707d8bd92d916f88308e634d46e9597611be6db822

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
039c0d1bfca928a413845db2357cb8c9

SHA1
7185ce6f0988b3a7c455a2279d950e51dca61cbd

SHA256
3d0a966f52b9c04a61426768de6637da626f606b3239db75a6e3f29546b27d93

SHA512
098b76a811225ca8d85db41592247df2465b6e34c3a7e74263d7aed82256433d33be51326e9ccf58d6a1f3f3db95b03e4e8435e050037747b8e45e06eacdf439

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
a841020fe020683edbe738f9da45014b

SHA1
56bf14232b4dcd74f36c6a0beae3d728eca01ce3

SHA256
791f5a4f61bf5b2d0c30bf20ef07491c89cc2204ac6121a3679680edf5d44bf9

SHA512
cc349d25c416504361cb5d65d3fb26848c7401a5db1339038216900c415ade48e3e072f5d2db6823d0771cb6ddafe06f7b534f9921efcb8c60d105e0e8ba6972

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
5a8fe61d697c2150bfa86548bfc2fe79

SHA1
4fa9829b54078f2b2892d0c13f967ffb16e59c14

SHA256
e106369b15f6db77ff29863ef26d32ca23119afafaad5aca353943943e22a3ea

SHA512
03b42547ad1f6277cd1c90e6ae67c28a143abe8538872b0ceb295e18f6772f104522495c2b9d41a690b20d65e0db9a2da954d560f36a708a5d9bf12ce676c887

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
e46942bff0f3c4e2cb3150861a19801e

SHA1
5e68c0245866309f4a127a9deeebc5c844af98ba

SHA256
c55ad303250da415127bf2496a5e14bcda5bb8034be04b779018dd7db4f9ce60

SHA512
87de4973ca141ff189f534617e86abcab391170830c397e53988ed771934d0cc26e60d1cd7194372f30d8dec5606ae56986467e6af461166f3ee937d2ba56ad4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
d686b5110484f1c5ebc13cffa39af6f4

SHA1
e5e2d072d2d15d2c832baf8384cdcd7f229eaaed

SHA256
5ae7fae6fcdd039690275086bdefef0fdfada55b91ad69ae4d3839d8fec94006

SHA512
0d5329e212016ce2b1b37437bf8d7e4779dc805d84bc2e75cf764b3ed76991d127c28df7b2cb4f26c73c104d78f51635b84c7847ba4fb73f06988ecf36e4e580

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
e2732ed2a14c4fc70f9ca833718d188d

SHA1
3f2fa6f6efb8447e136b12495802abd892465cf8

SHA256
e5c27f73c62fa1692d18f4e2c7050542a8fe84f5955f16f1ed7bd342b2c033ea

SHA512
c3c717bc55630f326a47a23ad25159f9d9ec0bbc40dbb13f5cbeefcddbb9734a090536daeee738738f1a11c1cebc5723d7108b88a80759f74a26a04dfdeb8f2f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
e3da59ce8483ada81bcfb3649c66fa22

SHA1
bebf1e4066bfb17a2e4c5bb3c0a94dec146de5f7

SHA256
49df9913b7cc63f0fc54ae0dda5772e57baa44cf566600df0999b1a4965da9c6

SHA512
983a5853c26cd15a9a009076a26280e7f711291884450a63dc75b00d8cc78f210d2ce062f33872a4f84a1858509e5e624b23d239e8f324e5a8b77edf11e3f562

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
e8933d9c0c6115139765d046d2e06f87

SHA1
02fae1a9c1a40d39f7b8a236caefc14ae9df44fb

SHA256
9d657c9b26c95e0c9d8cf39308f3092f59c7a0816f461dc1088335b006325cc1

SHA512
429881106e7920e55f70f217067e635fcafe3a0d837321a914f97a1e44c781042ffa8499e807420d25e1b0375d49b0a7cf2812349bd3f767c36a788f0ce62225

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
62f66bb8d71dfd8bbfe35c80f530d745

SHA1
afaa255961c0a0d8a9d5190a569fcd18c0ee75e8

SHA256
a01fa7b400b5235c56af93cebe9c587484cfba77cb019d7277a60d39015ad19f

SHA512
ab09182508e596f2d1e2640b20eb6659b0f99e4b4bf6ec2f1ed448a8cceeb4966408d8188da76b42f20dd7072361e3bfd598875f80efe808fbdb5fe785cd9c3f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
791d850298b501994b92a1993e1bebec

SHA1
dfdaaf061d812c2718b044b1f4ccd1f80c7a940a

SHA256
2b4288fc82597af931bfd056e47d5783fd6600161853c31100f50911906ce490

SHA512
f31c2189d12e2a2fc23d9a7650c031cad75e9ed391af2d359276c8247157ff61e9451350cb33aaf85797c5efa978efbfa058c90c5f89caa248973a8f8809bf9d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
7b0940f75c02b8fdc0dbc6e79d0e8484

SHA1
cf3f54728719475b38951e9ab6cba2fcdaa5d3d6

SHA256
5d963f6c6651b43eff8297bb06aca9d521f891c8795e68d6fe88005944f7009b

SHA512
0190418cf09437d1e72882dcfd2698150b6ce764cff35f3548467f6b67baf8c8db88a3415a5e02d2230be56aada41ea1acdc247e55b45d9bf21a7ee18cdc70b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
8beb88044050eec67a2ca1abe8fe2b0f

SHA1
c6b4f1dd80f8ce75db5b4f87dfeef3a1f20054fb

SHA256
22080278b9ca1376bb1768f5469189028a25b785ecdc738e621caa466a724ba0

SHA512
cd514785c1a8c8a5db2e517928ba9438dafbf442b07d1832097a9397d739cac39f8c3c24a27419771c363d0ab803a358fa969361b18a0fd35b70081f26e73123

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
26beaae6086e8dd27dd6202aa7a7563e

SHA1
e04865782d6d81a16756d579034f4928918c8623

SHA256
1683f1fa13e9a6ee810a7fb2485557926ee3acba1375ff1327ba60dfd03805f9

SHA512
c72086a79407c138023bbba1449aa41699a3c58cdc118cee7a35fc47ee1c7a07aa69d75bf9c69e5cb8cc08c1023c25c3f4cd07367f991a9d6227a3036b0e8742

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
bed17d4335e2f0571fdaf2026c2dceac

SHA1
eee67ea70f2961e36128250e4768b143e6f00706

SHA256
16dd56dfa978f5f85221888b734878ba293c5d20ecc3d5042493f3fe815c4f1f

SHA512
ee42bd1111a88486c9dc55bcd3aafe1f60345eaf892f856fbd51b86a2353ebaa1c84f1c732ff9d064c1b1b65ab1f696dad493fe8f19a9a76c3ad74924b7cfda4

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabE551.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarE554.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit