4008a6cb3e3e2f8b5e3275136418d51ca90269e46de20e7eeb9cde5fb5b198c6

Analysis

max time kernel
119s
max time network
127s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
16-07-2024 10:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4deab13a1334b230875a3cd615025021_JaffaCakes118.html
Size

53KB
MD5

4deab13a1334b230875a3cd615025021
SHA1

bc0a5cd98b1cfb13ed6af243f63e26dd23b7885d
SHA256

4008a6cb3e3e2f8b5e3275136418d51ca90269e46de20e7eeb9cde5fb5b198c6
SHA512

95a764ff7008105b3ac8c05f0c1abfc3d21f387aca73530843dd831d3039d047fd88483ac5694106dc2c00cbfacdbf17ac543ad7bc99c961c4cdc80f201be20a
SSDEEP

1536:CkgUiIakTqGivi+PyU8runlYS63Nj+q5Vy0R0w2AzTICbbGoP/t9M/dNwIUTDmDi:CkgUiIakTqGivi+PyU8runlYS63Nj+qv

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4A384051-435E-11EF-BC39-5E6560CBCC6E} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427287639"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000930ed985b08cdd4cb38e38023150682b000000000200000000001066000000010000200000009cb492d98a6cf383e3910af0476e90c6544f6d6049ba7c2dd4eaabcab604e0c7000000000e80000000020000200000001972c9840bfd8df204c7898533d0a186a627a429a7b2109065bba802e25325ec20000000061ae77f2f35c9dbe754e2d6b21a3d1ed1517dd41053537869eb650d962b8b4840000000d5eb743da8dc52d4b5f0aea43588e5a835799c28bcfc5efc2937fdcd06bba3efce6927bbc6464ed78d7b9fed6e078e2db123846e239730ab9e2253c3ec6ed492	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 204b9c1f6bd7da01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2648	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2648	iexplore.exe
2648	iexplore.exe
2824	IEXPLORE.EXE
2824	IEXPLORE.EXE
2824	IEXPLORE.EXE
2824	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2648 wrote to memory of 2824	2648	iexplore.exe	30
PID 2648 wrote to memory of 2824	2648	iexplore.exe	30
PID 2648 wrote to memory of 2824	2648	iexplore.exe	30
PID 2648 wrote to memory of 2824	2648	iexplore.exe	30

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4deab13a1334b230875a3cd615025021_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2648
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2648 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2824

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1122cd03e0f4724610070b93b24ec986

SHA1
33bfa210997a06c14af11da95afff606dad383df

SHA256
10e308e90101a46904b0aa328675dd8f98d2910ed099b76a9ac35a5c83a162ce

SHA512
5749160ce574c2b3e15868592200ea009a2c988f752a1a7546a5d8e827067848af4f0c9e84763dbb32abaa2e9054069df28c3dacc668875767547e63f018b4f7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
76197a3a84eed92a1b9138ad3130ec2b

SHA1
3cda2dbe7bff643e509d29786d99c303d24caf2e

SHA256
487350259cc3534337963d6690af5cdf31071707b3ca603942b0fb2daab15362

SHA512
0fed7e7dccb022f276987bebab644b41a46cc72a2a09831f593c9d17228cdc9bda4b6ea22c5941058142123778323b3b941dffea8c66a6b42f97a5db6a3195f7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
73cc5024a5f0a4df525732674a243285

SHA1
01232a03f66b05f77e91f31b477aa8e76f9cd5c3

SHA256
421a58d595257387d894e3c5795c7b37e06e34f3e7d792cbbd26300688a043d4

SHA512
21ce3afe51f1294646ab43512a5f75cf20a6e0633e0cfad81f8ffed7fcd565b7c5a0529957085c273a15c3d3e6de9752fe138cda182aa60895b4dd91e51689a1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
eeee59db57973a0b5de8aee36cd76390

SHA1
7aea19106de1419f03059c69c0dd48cf84065486

SHA256
49fb251f77f617acc6150e7559c7ecf6eff69e7a3052ad2bca37e7d6dadb87ad

SHA512
04f0154a5f73726a29ed8f44396b002d07bb0b12d6c6411525561df64c2c15eb19837a0a3a47f10906628b1c75f9025ba883ed036dadfc591417d77a6787286b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
778168a62e512aff65b6f0f67347fcab

SHA1
8e5e573fd375d4fd9a3bed71c413df853fc714c8

SHA256
f84941ecd08c4daded694566ed8b46ab7a461eb2df088fb366ba06a0650481e1

SHA512
1f1487b6ca189513bea1c8081ebb8ed4d62fa2b44cd6f8f8cb00f83215ca623e2f59d1aefb9f7884dd9590c192a0061823b0ac8388c137250a7c0c693f4218cf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
15ceb666fa24a70c63262dcef007f885

SHA1
768814975d3b32071aa5dde253e8c06b58009942

SHA256
92e5730ed7626a610a4d56b5cdb67729f6b4733835e7513d31df0f124cc5eb8a

SHA512
a73ae067088878b344b3cdf34c6ecd199384c6abdbf34792fd1b273ebe613dd000a199607d0a621ed3b7bfcb9a43545fa4f7cf2e732adff66782a42959ee1d6b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
eb395f89e124f99ce7e9d18a0754d0eb

SHA1
c90d2894f477b8f4fe6e35ca1efea4ebb3f5effb

SHA256
b9d6eabb6546265256524b84021cbed77761ee2e424e55ef5d81729b6c676ebd

SHA512
841b4ebaa7f183948801ceb7541ddfabafa6506de604c4d275489d1f5fdc36aaea4ce95b6a4855a054ca3372df9ed0a34474a2a15ba4ea6807d3aa2c6985eb02

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
9bf97a4b196307c502c23bbd98d90da5

SHA1
cc063eeb5cc6e0f994d2454e9758581d70e0753e

SHA256
74781b78c23df8c89b5fb202a667482b587aa5bd577c4a3c7e5b47ff4bbfa44d

SHA512
44421e7c1fddc5a83afaba23ae1e73d26222eba8a551eb8e6c220687de3dacb1ca9c702f2eb8e68e7a61014dec0face500e45e6007783050a90a42079338763f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f3dafd2b8204960633fec73841bf5c7f

SHA1
f30025bc241ab0a3945bafb6baf0e0619dafc212

SHA256
2a20ed81582cc2acb8f60f46bb5f127bd2b675f530701146f7490bdad15b99a6

SHA512
38f16a1e14de2633d413a9e425f6bd8a3a83f61b897c68b13d093c3e14e2c5726d9a3d567c2764ac64485249a81e7f949e471062b213f4810b20a7a322e3b579

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d638d5c4788d6dc9c518dd951d35868c

SHA1
8893ae543ccd17e85bca082d36dc54890a0e981a

SHA256
c05aa66bdb49150cbeb087ffd9c6a7ae310679d7e66079fae6e19e034fa95e77

SHA512
027da861667e4800d053d3c4afd47b6549805067ad3dc663a5776b712d926e8fc0a304b7cade705557f4a1cd1f3247deee3d0041ec7602883b66d0a635255fb1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
c085ae2d1c19406e5811089bc8dc4673

SHA1
1c8b4982d86aa2f3c71de1ab88d31ffa3ceb738b

SHA256
f41a40f8a7ba2e21444323eb5b48512c4df125773920d39093ca36fdf597f028

SHA512
979f34a37986180efbdcfbc511bec608d8ee3e04e1cfe93b2b690fc1f2d4c110ff41586798ddc26162309d13e0b21f3be88f8833a98e8feab4a9ddd44269789b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7eecbac57f5a9d9cd66d6700846dc254

SHA1
9fcd0f385d4651680cd26fee1444b33164c5dd16

SHA256
19ea6e03382965b392002359d45c0cc99fb1ba3aa64a22d95131ac445ff0db13

SHA512
25bb15704287ab2d6a295929d3e56f9332bee7315e7e5e317f08e486745e8463b024282d922eafecf3fa39ee33aa8d0f00838f4795176ae2580c3e998cda6f81

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1a5a0d0938fd4b480978c9b87b32a3e8

SHA1
e5f6ecdfae52c09ee4e176c4b465627ea36357a1

SHA256
5f62d414cbcf63d6fc4103474a03dd178d1c82339b667e9e98109242f0399950

SHA512
5131781eb6d53d09472bcfc266083b5bcdbc6bff85220fbc286153e4f3bcd40ff85e97810639afb4fa80bfd4be2aba59301253fb5c2c6ee4a10b042ba0427963

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
613d004a9a09bb011ce30340f363d001

SHA1
89e898d4c1c9856fe68ff02f7b955f3355080aae

SHA256
bf0d59d859da7788d6aeedb08b43688a4c3d5cf95270db4ede419046018b3e37

SHA512
46de69b4200dc02b76fde78ddcfbf7262474658d4727288c31a7e0ae3ad3091b22ec93c44b3171f0bea220491959c5ef97fb157025de426dc9cd8ff9b1dddc41

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
5e268a768c2fc085ce42c098878af8c6

SHA1
5b9783c21c4f26c4114efa938e85a99de49b3001

SHA256
f25e77ad4846bf4bbb2702b415ce9b47a80f9da60c9090969c92de469594b700

SHA512
ac104eac332b4dbdb9e1859fbaf1cacdbb32c90b821576c270bb90dba26285c27c864aa603e1cf77f2f8d4c0dd1b74b09f5970404399ebe98d908e41178ec874

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
92473e852cb309cbf259fb4890cf07a5

SHA1
083ee764c1563d0447f6d8498a24accafa7f15fa

SHA256
394a5edc3f3d0d278e12beb880dd9b03c57f105514e5d3cab7a41af510320594

SHA512
0b0c3ae49e241cfabb7199c8a515d23cd6e9a1e76f719a8b67bf2f46dbd289cb71ec77f27c366449602312cb5724ebd94e722e11357aba8bf9f2254e90629c04

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
67b2422edba5779b02d3467e08c38b85

SHA1
7e3523fdcaa6d7ed3b70cdac706cb65fa95914d7

SHA256
17f88b3346db4c815f02631b60fb1f8da9905ce5cf4faae87773ed8731003d50

SHA512
9c1d575ce4116da079b63da92f99ac4e1aa4b0f729c4dedacdae41a88e3818fed34079ebe16ad2800aef145d4e144fefdaee1a7d41a12ee42d1552c2e45e4d20

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NIUC9X25\style[1].htm

Filesize
706B

MD5
67f3a5933c17b3ab044826d3927d0ba9

SHA1
5957076d09bacaa6db8ddc832b4fd87ed8f05f8a

SHA256
97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64

SHA512
03ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab29C0.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2A32.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit