4694462ea1a48ab146ee9c18fa8dd972f961ee7fd8d4809a97856ea84539aace

Analysis

max time kernel
143s
max time network
144s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
16/07/2024, 00:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4c206ffcd887d7a1391f2d9c68b685a5_JaffaCakes118.html
Size

19KB
MD5

4c206ffcd887d7a1391f2d9c68b685a5
SHA1

c9614a4fb1f3128cc1b35013e69cc295f4dc7f06
SHA256

4694462ea1a48ab146ee9c18fa8dd972f961ee7fd8d4809a97856ea84539aace
SHA512

a74282815b10d07d217c9559f6a0d2ad5f34e2fef07fd5fc28ef8a6945cfe0a2bc8a82646df376879d3c6072007435824920c68f6191cb6d26bf2e2a29910623
SSDEEP

384:vKbt4FzlMm3T5GFq5IUVELdSOyM1OtEP99YR5QG7oTi8hdqp0A5CeRW:SSFzlN5GI5IUVEBbyaOo9Y7QG7oTi8hd

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c042d1f419d7da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427252771"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{1AB370D1-430D-11EF-8E5A-6EB28AAB65BF} = "0"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e337bacba951544a9a832c52e69bfb0000000000020000000000106600000001000020000000b249620dab59b0ada19b35063a911ea7747d34eecf4264709c80b1175fec46a9000000000e800000000200002000000063a8bba459be1a579d207eeb6dcec92527cac99cea05690e4abebc25914ab589200000006b531cb6359ecb9ba16394bd1517d26015b371e6bb0852fd7ed7fb60a0e6dec24000000089dfebfffa562994851fe2123888966ed18ad9a1a026275b0dd2cefdd3cdbecb99fd25e77afd121836d470398d13647da422428448f72fba6041145809c18466	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2876	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2876	iexplore.exe
2876	iexplore.exe
2272	IEXPLORE.EXE
2272	IEXPLORE.EXE
2272	IEXPLORE.EXE
2272	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2876 wrote to memory of 2272	2876	iexplore.exe	29
PID 2876 wrote to memory of 2272	2876	iexplore.exe	29
PID 2876 wrote to memory of 2272	2876	iexplore.exe	29
PID 2876 wrote to memory of 2272	2876	iexplore.exe	29

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4c206ffcd887d7a1391f2d9c68b685a5_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2876
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2272

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
4a7fc1bfc44e7a3cf97551a484ad94a2

SHA1
1d4607dd7e4a1a1b65b4c798958b0bb552655fe9

SHA256
1c577acecaafcca44fa0c048b5ffbe0de1e172c2e5de1156fba8b41d5fd0b08b

SHA512
1d86c261a476f4fdb5ab799e14c3d12b324c2b596648167a0b6977214fa6956cbf30b1e0a40e2e7c0554f5f6411ca61cfa4c69ac47618c4b71f71b5a700a6f00

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
187ee6df79c8a3f0099099a064c427e1

SHA1
e70214250e75f56243d24a27ae1f968ecaf36e8d

SHA256
b4c526255c1be4061fc043ab2324b7ff9c0f54f76da6699e178118d88808ae15

SHA512
9b4cb68cb39583ccfc5787313bd097a3aa398e6a3650e76a5015cdc5daddebbb91686f40fd83d5b523e15a8e480fa85ba86efea63ee7f378b6f17df8574f4305

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5200cac7234c389917e366ebd94a3387

SHA1
f2a2b2c776764c657b3fe9715b6a2f0db1fb3cb4

SHA256
8037e5521289826896c90beef1a6f1dfcae4934c9b7445e3bc70c46d98d486f4

SHA512
fb166869e77ebbb07e0a199cb2e001b886b18f97b22f557b5f3a7f16d925cb7fe6d8743e47434d2748047cc12978188e29dce09c9a8610f4fe770f07763a3085

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
dce15ad6a66e7f055e8f4eb472628283

SHA1
b8b0d018000a43d99c679e8ea4e816d2ea5340a1

SHA256
453c018bda55e54f96e5df2e889ed09ad0f2e25cc77ceaaf3df7b514e10169d0

SHA512
e8b55aef9b8c4502e3893d8399381e3868c449d6cb24e16559aa005f9c710ab9c524eb8579d5f42c4cdc828231dd9e453c873763def1ceafe10edaf727c4e345

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b98e6dc964e4b0d5831e8f0d565567da

SHA1
3261a9eb58e7b483e58eb7d8b15acda7bc62f6a9

SHA256
a79f7446c9924341a5659567ee7aca4283198ef52eb9a5fdb1f44a9a8a4b8077

SHA512
06a52413163d5318d6137875c3af4aa33afe24d50f0a070b9419f35b64b5bea32428861409607bd0fa8ef6045de899f755f88cf48dc7b3cae7ff5f69150d30e3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
30b62d256e49a3549de33124c7af0490

SHA1
18b083a96c9828df490beba050b4fa7123501130

SHA256
d0a6ce0ebf125fc3594e1ad0405e27a4f83b874643b804ae7550aa2cbd7167af

SHA512
76094365806953a7d5cb4fa85d2f84c4daed5cac347de37bd769f4a77aa4a4d1efb13e77eb58f475efdda79c0b131887525f660f26e0611e559c2673a4684ebe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
363de9d5eb1ab9850da987eb9b5f81ec

SHA1
fb17941ad3ad687770fa9ded4bd18e23da45e053

SHA256
0ec4ae8033605913266ac5808416766fcc72bc4bec64d53ae32787795419ab2a

SHA512
5d9f622c15359f7c9cb2a2ab559e5c4e2d599392f6247f379c5c47dfb3d77509a1164ba5c789ebb3a81a480edf4b31e777bb9f7db7fc51b916f4aa292e12248c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f3439010953903f605a8bb0e4473693d

SHA1
21b922721ce527b43708167096a09365b4cea848

SHA256
65ce9b790de63e44f389c62465e1d25f0363b6f866f263757cb0a719d5e1bf64

SHA512
b13d4c1eace4026b7b32e59fe6ed46e187d6b1b56641ba5f9f3ee081865351ea9289076054726f14eb3bb97607a62acdeb6e64dce10b04fe2d9891b028a8af48

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a5260d907beecea510adfb42f61a5467

SHA1
b3dbf7908a2cb7fdfcc232356facf750c3e71360

SHA256
f919d453e1f9601578a433f45d2fceb6f358cbf2e4e88ee0abceafd99bef9556

SHA512
9d52cab7a4353dd10db730affc5cbd331934c497cc008a8e158ca750b29b732aa00933865821b426edd04341421db68cfe9d468d251fa081fb6a314f502fe08f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d03e6eb975cbad7086eafd020977c67a

SHA1
47330d0e4235da065c1b29b8e527b2383499e7c5

SHA256
5d76ecb5534d10c3fd1299813899b42116136575fd4af00f7c08034650424957

SHA512
b1e8ff9c97e1555c17369b23e9972174f305a4c7427587f479af0ec1d5e50f7cd0999d776ddd325bfd983ded0d6e5dee25468c2ec1df9e660b52104f24468685

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
2c6c2c4c284f2bd073e80e90ced84f7a

SHA1
163741ad8763ba8e51976faeec55ce05d85f8705

SHA256
1d41fdf062c3a508a008231c8be3ec658dcb0d0f57f455f19bf94dae3fceca95

SHA512
9547062a187497a8475b336b6714b5d2a8cfebfeccd623dec51edd5a19c82ce6bb3df7b67625403b8c920df37cc145b73bf954f309e3d60ce3bde9c0e88c40ac

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e7eb2b713addb60d86fb223059b8c26f

SHA1
d3a6f4650feb04a3ccc6d8db7222f0f0e5a17ce8

SHA256
0bb3f815cb59b0694e08e06fb772dcf9133f113de7a6c1582a3a6d498b4ca681

SHA512
11147971069ebc8141466f1275c5ba04cbaecbe25be5b64dc6eae8e16395b889e1840b26a6a987d366147b5cffa245719aafb33899b18317c70690ff3256cc08

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
61b877b428ce4736cda64b24a57ae940

SHA1
2f3cad4ae84ffe55c366e8717c5fcdc289b0cc05

SHA256
32345031cdb7b2d009ba156418274a5b5881f59d3e4173e82b11d30d3ba543e3

SHA512
1257272ab5fb592fcdb2ed5727fc5d421b12efd85ebc769776c83fc878f6a643c89670c2f4b07ee3c6370a791a22ced7fc31b161cb8fa19faf869794d23a92df

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
8f2e96bde51d03fa9482fcb24ccad3d5

SHA1
c5f9204ad9a49d71178be5472c89a46751750eab

SHA256
6ba5ab3b6ecc2f4bac84de47f4bcd9a53631adc51a8cc56c03bf36e505c35110

SHA512
93e63810c3abb034391af9e85a530ad94955657246a847ec918dc328e6f5e18b2fd5a6b7219ee4a7cedd8d5e37fabde7c7aa86a6c545a83778840429496952e9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a124cf5cfb4c530eaef91105521c8a7f

SHA1
57650a0eb1c5c895bcb8f5806a6be2256d67b4a6

SHA256
d57e41d58d0dd7a125da5525002f9670ea4a002f739f38d38722a2d0b9722578

SHA512
1efe8ee80eaec2256ed2c0ad3ecc82885479ce077ff4d207762a6e31e08049fcd7a39353323694c9839d28dc20ea244986dedbe48c0330b04162ae2bcf5f4f4b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
47f8fb351bbf6bf7fd36a067f4ee4da4

SHA1
e2af93573a1e43a173a27904c75f9716ccf26f65

SHA256
f4e4b69f29224d1bba061f2091b4db23df8d26714241f47f0600c6ccaf0d9243

SHA512
f4cb046b60a146fd23c4d76fa96b15873d67be68e353710aa3b5c46b8317ae27aaf6b4f5f10adb85f192fc4075191619ae3c5bbe27e9e1c7df4970e0208cf835

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
af26dbaf921c33f278025c657144b1f0

SHA1
d58af039c970a79f6216e287204ae59d10a3f85d

SHA256
e1b6c1c4ff7a4be43a31eb56d3c445bc26f64d508f2beeb9bc81299fcf675ccc

SHA512
0879fa738559042061603e8f6651e46b54d4cf00560f5ade16f29bdad8f808e0d5b60be317a30552b9aaf238593f97f68cc967599004627c387fd12e0b1e5e2e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
254996715a2b70570a5d5396ea9fb478

SHA1
d3cf91fb5b345ab3169e24bf9b01a386ec81c7f9

SHA256
8fe52994417ae6963a3262f86507309a1d40681562bf8b5160db90f709c078ca

SHA512
87f1fa129c5e30446abd33584acd5047001d1130d9756512e5ee2415878b42b204bc78fb2416975c675ea3966c81e592a29f64740507f5041aefbe3a5821f055

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabD9AE.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarD9B0.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit