0c2272b8a496371334f9c1c54e19a5e29106fd2a1ce0d57ea41ac048f73835f6

Analysis

max time kernel
120s
max time network
134s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15-07-2024 08:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

49188eba78f169a0e117176f682ccbf4_JaffaCakes118.html
Size

110B
MD5

49188eba78f169a0e117176f682ccbf4
SHA1

8ed38210a6702b4adbb094e8c9e2ee0a4139e8c6
SHA256

0c2272b8a496371334f9c1c54e19a5e29106fd2a1ce0d57ea41ac048f73835f6
SHA512

142ce4bc890dbbeda29a3719a980805721c9fe4970130c37a6b06c025f111b2088277134ddd5f6912d489033e3b40b00b5d551f31435954bfcf1142ae7f59ea7

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 508bbb2595d6da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427195741"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{50F90041-4288-11EF-9629-7667FF076EE4} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bb7c5835718279428690b074aa627b7000000000020000000000106600000001000020000000043bfef8748765a3a88a0fd23b963d387c865327cfa951db55a68dae572e50b5000000000e8000000002000020000000406ebe99982936ec504a0ee604b387f2ab299462a32b8e8b965b6189ad3e02ce20000000a5a1faac43cd1e1a4d715d35dc6fcee24159c467688cb09b05fa31fcccc6395040000000792a589fda8f2094e67b81b4d4e5da1dd63c7dbbe250816b246d4d0444e21e4b6417e8af72c8d314a8a13bdb2848c5c3655c084c9b2b61cae905e10c29f09fd7	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2256	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2256	iexplore.exe
2256	iexplore.exe
3032	IEXPLORE.EXE
3032	IEXPLORE.EXE
3032	IEXPLORE.EXE
3032	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2256 wrote to memory of 3032	2256	iexplore.exe	30
PID 2256 wrote to memory of 3032	2256	iexplore.exe	30
PID 2256 wrote to memory of 3032	2256	iexplore.exe	30
PID 2256 wrote to memory of 3032	2256	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\49188eba78f169a0e117176f682ccbf4_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2256
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2256 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:3032

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
11d0aaab5956e568b01405b5f9d64978

SHA1
ba712886cd090dad4c019e12939c87f8eb668e06

SHA256
e5e3debabbc13fc8cc651563695a9cbc371e562f58295549f7f6b005ce69376f

SHA512
8d89f68eb6f0ce72676806154783622b7db52a664e820e1e964da2d2b43f797cee121bc2ff0ed9df324d506f0e47070db23eaf7cd90af076d643b6364c6542c0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
755fa86661ad7a8b8fd0a7cc5b6db27e

SHA1
564eb110ba958e8d732ed1623c3e1a5401081122

SHA256
10b98316d8d2a0dacddb9e71c5266aa6e4ab9e88a223995bf1b87d6a309824b6

SHA512
5b4811ac0b3719a122fa28bad81ceaba75b22b56f173181d65a2fc9272aae1bbe60940aedfc7098635adbaa46cf67c70f0de7675dfec655547c0b9681931d456

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
dce9d44b5dfd4f9a8ec94ed3640a5e5a

SHA1
6456c71d25fa29fc5a8f8994f8c14c7a140f8384

SHA256
698baf5e6b56b302dc23f04c86cb185d416cdb542d6e1c12f90031a8686e8f08

SHA512
a777c35df80bc5ae2ba087fe7d1f4453a369747d25126fe8aa71efb177d98eb80ca99dd746a76a97cb785fc3e9026433038b416c13bb637b181a2764924311d0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
0dd930c35a16b5e0098f3004c88fa0a0

SHA1
022d4fb6c09b838d34eea4df07f9b66d4b4e8c95

SHA256
4035f934d9cb3f320eaa083b769066e9df039cafa8f7777f6bbb9d2f5ce5ed9c

SHA512
dad2e2e271a78c2683961ea82b5881ae46d7e7e0e4ec0014929d1642045b3a76904def6b3049602e441f6c19129874baeb0859f4d2a44734bca19b1a6c00b6b6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d08a361e40207131a026bc1b73671ce4

SHA1
d51d4415674299f8299c72bc4111c2db3dd548df

SHA256
83252af0ca1d4e6c82bd70a01a6dbd76f36365b323d31181e3b73569c93cdb34

SHA512
44ac38eace666649f0f9545842d2672200cfb96823fbfd8c4cd3bf24a5b20607d6fbfa3ef67fbdaa3922c48f8e77a5bcf3ab3387f19d8ef40563bda4a8d3314c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ed539719d5517f245d4579b046a0f9f4

SHA1
6cd514681ec36708659faee3bd5baeb7812fa750

SHA256
056e81edfbcc04715aa01f4e635ce32e4c12aecd9dedba1db4f97c7daf651374

SHA512
57f55c6aa5a9bcaee2eeae16c7b0f54e6f1f97d06cc44a5ee5a4d966aec2992f5fdd9f875b18383a946ddeb597683cb0094e3d9a5d5709311e138ffd2476fdfa

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
00dbae5b26ba39b1b39af9c747c63064

SHA1
b3ca65a8e1a01f7fc5acefa94770eac50a17ac83

SHA256
a44b39a492cf505a2641ee54d365b28819c5a53499551ea07ffd12895cbc6496

SHA512
b9660f75bd611af5503c47d97b51f52b35da83c161e6f38cf598860a2794c3a848f40c0009a2a08d57efe799ceb9a91a97d4471ca47df30ba132a7c89941a44d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a04597d8cb1f57c1b85c8e6718de777f

SHA1
7d90f8b33bcf930109230b54dcc2de4b5ec13604

SHA256
1794984fb58a1e907f5c488e260e085cf62356243864387535885ef9d70fe7e5

SHA512
356380ac5c7a5fe084ff17f10db41b9ea048c8da082b5237e313d81dfa64cfe01d171fdcd64c134dbcc091fc118ab9095efa7e36ab16f5902c0dc900496aa522

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f026097061b27a52a8b755353360a4ac

SHA1
3f53e285e21ae7a00385e2342b0cf5366e875e60

SHA256
db6747e51076a50d8d2a1e0dba588e942f3236e10c98a162d82f39348ae38875

SHA512
446c46ec6f76c01e7213288a1ad5d2d885be0e0f9ca6afea43834d6b38c7649cf459a703acebe3ec0e0c38e210769cbf8ba1b133cb05c9186b3d575094805e65

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
537f6186f34550ed35ee1fd255cdf12c

SHA1
7f4e58c91d7f5fbf998862a06588150ce8c9589e

SHA256
a71ee803ea02f80742a0dd05a0550f59769af153add9f7b4ca971c1c7655f668

SHA512
fdbc17c5cb222cd694d7eb5183f04cc4523011b03b61b4a2c1b1a1780f7d3aebb64444f13c2840b5a9f8e2b587afcf57345e2eeecd6ecdb2ef880976394a7411

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
6c49f8bdb0ac89fb1dac860018bd2eaa

SHA1
9cac093f875cf9b5af96723d705edd1eea51786b

SHA256
ae5c9e0aaf6ff7193ac84b18be4217c4a63536b58e01cf0c2790e513bbe42831

SHA512
33aa5c326609274ccb2cdff04b3082fed9b048b16e68523306e4ac1ed8a5dd3c7325450a016fcdfc703e4b504d3c347cc7ebba70852b5b94d9a10de7495bca88

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a8799e7889e42c3b817f1aecd3d3f07c

SHA1
21c996d92d02516ae9b3550541096f8657eb470d

SHA256
76d47cf7edab6380e536940b7ec4eeb1a8a7a81c41903480edfe8bc01813e8d5

SHA512
3ae91e276e4f0f7054b829f98d50bdf8aa9d5751db92d30bede0bc301909f72b9aff1fd3a8a1fd9d03a0d41486ffec50918956efea30647ea13e4efe1bd0d91d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
bc411a0d5bc7c4924bbd066c90d0fb4f

SHA1
86c4479c643648e4ede759171674aa4b23aad089

SHA256
d846fcc0679bcc403ac4fce0e1a393b152688e411aed00d5f3bb73251691caf8

SHA512
131c2fe8e664bad5c605530b4ad1a3a42983b89f5d465bbe435d0cf665c6a8ce3e144d0b168394c272a134253287c6562384af820f3d565817af461c64362d27

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f44b721edc058e818cf1374bfc08126b

SHA1
e84298531af2288808000266a99dc97775f3339f

SHA256
fe7b279475ac935327e0dfebc465887af6c92fd7ee7712774a7b7e9d340bc0ff

SHA512
98664a8281e9b3323fefc0d3da8faf0592cff587bc80148c4ffeb6d3097f385b3aa0ab0a24b1cc0fd05121b233951e2ed96435c88acb43be38276709d9cb707d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c06708f0e3b682b0b5b39ec2c4b207a7

SHA1
ece51ba42e3e26b708b0b717aab1422f9983fb4a

SHA256
cccca4c338700856edfc8bb0e7fbb2e5ea8131aa59a24aa2599dd523cc3a9a2b

SHA512
1203f3666df546b867a6604d52cf2395fb71c4bf2cdbba16849e50b461763bb9a0fcaf6b647d36a0aece6221ec66b034a1473771a494c55ad853180d0ed6a283

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d7b3754c4d2c4e93fdaab75421b46847

SHA1
5a66977f31851a72053948107302773bff6acd8a

SHA256
f794efa058c95a491d62f285f70f3696fef5ab893af4fde9c7805bdb50f9779a

SHA512
4f98ea697a22d4224a0e5c300c2a776718a21b5fe73f45527e9f3aee71fae17b191ca26142fb1575886d8a1a479ae31587514eb4cedc0359bf5f9d23ec17b041

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
fea79c1be05ea3d783920ceb81f1ff54

SHA1
021d9a312b52192efc647b2baabc0117ce0626f5

SHA256
c3c2517d9bce8ff5a61fde08327695b9802e2a8ff27916cea2d1e5b644627da6

SHA512
4be05ad8df239b9455d462fe59e18bbe639aef1f4a9d04ebae510cdfd5c3e48a156a6f86d8de813cb7149701e64867fe6dbe92f4ae2977a7a3614a64dcaecb96

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
536608c62a03e6b10b51f7eaa61d1b04

SHA1
e18114e48cfa3efc7cae1360cd546f89ed984fb2

SHA256
34413b13568a44e50f80311e267f968a7aac575a7face43827d6723c052fee9e

SHA512
a06ef25d5b8f318afc243aaba413b85b7881d52be28aff79a0fdfcc4f0e2ec0fcf3af93b3a0ed575d001ce1896e90cdc8f59f582a5f8cd7298d53880ff4a1ddb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3B7C.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3C1C.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit