da19d38feb5ce97209a4542eea575212067a9badf891a57cc6b36336c6620ebf

Analysis

max time kernel
122s
max time network
128s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
12/07/2024, 21:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3f09aa590ebd20a0caa48c2731120b69_JaffaCakes118.html
Size

9KB
MD5

3f09aa590ebd20a0caa48c2731120b69
SHA1

2aaa20eb7141d26db707a9b17febcf79999d89bd
SHA256

da19d38feb5ce97209a4542eea575212067a9badf891a57cc6b36336c6620ebf
SHA512

5a9277a29b01b9f76608f71ab7daa030714bbe2f2f5df169ab28e3721c6f77440764d53fb2811d0548aa077e35ca47344fad80e15000945daab3ecabf7f809bc
SSDEEP

96:uzVs+ux7ffLLY1k9o84d12ef7CSTUSGT/kPs6pUlVHcEZ7ru7f:csz7ffAYS/zfUPHb76f

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{1295A141-409A-11EF-8FFE-7A3ECDA2562B} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002aec918cb9fa9248b7812ac80df2e74c00000000020000000000106600000001000020000000c05392b79a0eae15e9d8f543500f565ff27e1be9177694b7860a0347e16c3d63000000000e8000000002000020000000126ddda41c6b29409b46380fa1c1cd4184a8ee3c58e67b088e5c862457e5b40620000000ff7f5951e8ee1c320a9d0284a053908a41a58d99fe00faa088ad613d60b84ed340000000ae8a850fb21e62e488cef3162b8faf112b5ffc1f41b91b3b16a438fa4a38bb6bb5b17769c1e92044eed200afa408c24cf0ac0ce34ae8549bd046fb6c83d2553d	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426983463"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 40f184e7a6d4da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3450744190-3404161390-554719085-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2660	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2660	iexplore.exe
2660	iexplore.exe
2708	IEXPLORE.EXE
2708	IEXPLORE.EXE
2708	IEXPLORE.EXE
2708	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2660 wrote to memory of 2708	2660	iexplore.exe	31
PID 2660 wrote to memory of 2708	2660	iexplore.exe	31
PID 2660 wrote to memory of 2708	2660	iexplore.exe	31
PID 2660 wrote to memory of 2708	2660	iexplore.exe	31

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3f09aa590ebd20a0caa48c2731120b69_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2660
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2660 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2708

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
b4f83e2209945eaab9c34fd1bcef2193

SHA1
70beb986ab313ec6110af75dad3f65902b6f845e

SHA256
bafa7ffced072fff9dd36ca3cfc12be7c64025b0781247e1c3b88317d8e07513

SHA512
8d04f0db26069828ceb9fc1198d2c789afc5994eb5d971fa0c90ace7932ad77a1d849b4bec8a9839365eaf1942ef76ecc8969d92fcc430166c75d19d3e3b9d5e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
9e5fa1bb3c18a5805f4e45e960500108

SHA1
bd639d636cafb54f0e90b9b6316c05421085c30d

SHA256
ec1e6b5855bdde4946e708815921abc02da5c73531af6f8dfb79dff75297ff69

SHA512
881e9b4ebd341e36177c8bb31317865136f8edb21f7101b4c821ad9c86f920899ffbb5a7df0c63b76b0919b85cb7314ff8afd5da8f797a30629d5bd10ee26b0d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
90fc3d19fd67553ede160cc1057c2b9f

SHA1
9c7a19e0803287f4e34e5daaf054fa67b21ea96f

SHA256
69ea30f6f44858cdbd1c9061b694116caa2a4cf9a84ecbe2cc5da8792a762198

SHA512
63078304d73dee32b163d516f99046c458e17849f6b6f3c97052129cc3a4f9557788a8712ce37fb8ad599f14b7c69997346647f86fd35827edc5651b5ae12a6a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
5e74ce568ee763bf7216e1871be7a7f4

SHA1
d09c3aa9df58112b4cce6a00330ca740db0fe9a5

SHA256
86fcd3ca13abdacba983aa438857b32115b60dd84fd5ab94d651c41dbed91987

SHA512
e2c4e757e71043a872d5b56316ac8184fc41d2ef345755e9c452e7c1e0a5286ff8bbd47cc91562cba1fb8dea3220c2f6181c734c6d2a51c27e39f44f6075e03a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
514412cf8d2b04e77cfbf7009295f77f

SHA1
778deeb8221db6e40697e0b5e5fb4deec150d7a4

SHA256
ea3d6b8f158d18ac9dfbfe7c453043baad3b493f939bfa18993e9df02aacc336

SHA512
c7316d9ecfffaf4bd322fe76ef2bd5e788c6c0d9a15fd27fc37808518d1bb03395dde0914b4184d2269ae6af7dccb6fbecdd0aa6ed6dbe643c612ce221fac1f4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
dc706138c1d60b826753fcff24c34295

SHA1
5a7feb9f7ee28fd4b435004f931e088293c3208d

SHA256
5bdf32a88a1fd03cd4fec87b413031a7120688cd1fa1b98b819eaee5d622e540

SHA512
755d60fe02f31358ce3d67024fbfad3274ac675263a1e96c10442c731229a2074eb2a2fec026abef81af8ff31d3e1ba6a35007a8f5f3c1ef4b1ce970838b9782

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
be9aecb7e4cc014e540e6b7ed8c0edbf

SHA1
c8733862d979959fd00964a3d5ea09dc5f31db1f

SHA256
f355831cc2fda9274b325731c109fa62c56e49cef859dd13667f498c9159b282

SHA512
f14e925cd6b0c2b695a8bf8008b8419aa30ab60a7c52064a167cbe6b14b55aab00eba883e2abc98af823ef8c3800110e778a09b62e701f118e84e22faf008033

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
a7e2147149aa1deff1fcaf3b15feeebc

SHA1
e4a1b993f46a3ad3400a24f4582b0123019d9edb

SHA256
7042c932b8a90f4c3476300728127d679560380fbbabc870361373811353c04b

SHA512
13ca53868fcccc8e8eeca7543635aabcc75a1e851c5daa4182cfff546dfa4551e207efe8f43b7bd4545ee83bc11faab315eea28e5e9482b40792eca25bb6d308

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
a3e2a23bd09f2386ff809ea359cfedeb

SHA1
e99677861fbbec2674858cba96711fbee3aa80bf

SHA256
ec4ce84754986df9ec4df89123fd358a1b48f67491163708e64691263ee0cc9d

SHA512
012cc2ddfc9e110fa3c21dd817681cf322d7064dba2347626790a05dd0df34f8cbb4c5249c5476112cc38c8e96e16d31fb589c0d1f6520b82814a851e4809071

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
47c22da49a538039c1e6f2655fbae5ef

SHA1
e6b60e39bffabde1c2e71a90d9f5277dd0aca540

SHA256
d231817263bd63df31c0f98d12d5640da5d8787c8b494a78db967c492c2baef0

SHA512
67410f319e4765ecca221b28691c6e67da507b8b38cba17bf2bac419368fc5b97982e07e5097f0da739809c43f673202a4cb5a94488980eb7f38cd2c02a8619c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
555e30a92535372057fb9233261d50b6

SHA1
b3477b81746b18c217128887014872448d0d186d

SHA256
5b06f1a7279bc767ac0bb8bb0bc37e307fe56720a027225d93c97d4ed53d8c9e

SHA512
6c3f3db74e418edda805de5cc751002f54811307e7d74711f4c7378c0cd6bfd991cf80982c80b287462635d82bc56a29ce80886b4392353cc40f239fefb7547c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
28f3859e240e40e2f2c241f646139cc9

SHA1
fee6808ead03202a380faa7c473254a60c88bc25

SHA256
99a64e0582bce379caafb3c06362a3fe780beaa1ef958a9ba2ed602990d0d64d

SHA512
5dba545e5f79d4855e77a4d3dfc4d750e5450b9030ec766be090ff4835d037dcf890d245619848af41504297f72e61787ee9068d66fcc36aad787183818a3f72

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
e91831249ea19b74e7c9a62410de89d3

SHA1
e5ac5ca88de82780d8584c3f6dfe27a4af2e2d8b

SHA256
da5b33bb517f6be237fa199f57731e1557d746994f40351218b7bf52ed4f5b4a

SHA512
f07ccf19d39f2e2e9dea550abf3820253df97b20c052291070cdb5c98f6293cccf7e947d28e83f1083370ff2f00458907d5916fc01a276cd06bdfd07f462338e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
581740aa35f6b3e43486301e25ab4faf

SHA1
09515dba31d7840746621b0ad3e38d483fb0a7c9

SHA256
23833011850bc54a387b193b53b843fd535771747367579356fa6af93528a896

SHA512
dab800da3698b2e206336bfb47cf6103ed7162322979bf96b9894ef032c9f105e93a34b2141ec647409dde4a012882a14d2a4d43174dc97f425c07d4ad8ff443

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
119a47452a013f08dd1531ab9893c771

SHA1
9878c7540b99ece33a41acbe15cf9676bb23132d

SHA256
d5b127cbc7bbe5c9bc41a7e60d4af1628b3f110e5d19657eba0a868110c8ddd1

SHA512
1d418d1b642cc89642fe9c48fcfbd2092ac433c31c06fadef974f0b3b1e9ccba2d69a2633191a84855bc687dd3221d258d416fd3e5b9ff7430ab215b0b5a5d96

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
c5c8902eec8544176e1c990adb2a2f5c

SHA1
443cc887a01d95e36d48a2500e258ddee4e145cb

SHA256
84afc8d77d9bec897d2ebb4e07be90a33b5f0c9cc8a424c0359e62ed67335828

SHA512
205aa4660239e6bbef46f55cd9137eafda532135cf2ed252e3eee2dc34ba104c42042d1b91d9b41d59ec1e70d8843dacb3fc854b7307213c9a30baf3f9dac307

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
2d14bc3ef1660c233310d955ae1a98a5

SHA1
3749163672ff8e0ffcd7d445cac173ba7fbf52dd

SHA256
6bf9b35b201c4154eeb9deec50629d6ebbdca31061f76c9a0cdf636634152d62

SHA512
586653728457d2457f7c083686b74d4d0cc776507ce401a00961afa295a3c2b665e8840c63884f4c9dcf759e4c1b604679306fca4db50e30ff8a96b76a9481cb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
304B

MD5
e0feb8a9e113763dc9d8e3ddc3e7a945

SHA1
41b94cbc1e0f2af150597c4e2ff20ef6965a531d

SHA256
787b2522d81f0ccb934754f15a36bd3951f6f278247793bb4281a933f9ba3d99

SHA512
2e84a7bd534b221375376e87cc793fedb50b4324eafdad0f52567bd1579fb8990eb854825e31eeae9fed7dc79bb2fb37b4da1f8e590ed9e34f154b678ca58815

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab4C5.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar564.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit