Analysis
-
max time kernel
135s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/04/2024, 07:32
Static task
static1
Behavioral task
behavioral1
Sample
f54890ca6e916cf79ee22584f0278a05_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f54890ca6e916cf79ee22584f0278a05_JaffaCakes118.html
Resource
win10v2004-20240412-en
General
-
Target
f54890ca6e916cf79ee22584f0278a05_JaffaCakes118.html
-
Size
28KB
-
MD5
f54890ca6e916cf79ee22584f0278a05
-
SHA1
4aea3297272c714dcdd1ce871a2032fe9f9fca75
-
SHA256
6c6d0e36df4e70825788ffff97d8ea5801a794130aa78ee7640e4fdee2a5b2de
-
SHA512
3ba89253267e1f9508bf7a6f63414c39968e6b779b056fbaa522edc6f533b5ba587d2983f29570f97bb6f4e93916a9e1deb2b3d17d6bd13d8692ab29a545224f
-
SSDEEP
192:uwX0b5n/k90nQjxn5Q/vnQie2NnonQOkEntxZnQTbn1nQ9e42m6MBomd/Ql7MBWb:vQ/UBeEomQSvC
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 5027b6719990da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{9C34C8B1-FC8C-11EE-9F79-DE62917EBCA6} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "419501003" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-778096762-2241304387-192235952-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d94d2d3723739f48802cd6414eea5c7e00000000020000000000106600000001000020000000bf1ea6c49553a89ecd68b7e949feda91d81d064f74cb0724a9b07a335fd33f0d000000000e8000000002000020000000092fe9839246918f69dc5dcd5ed5f2d2f992d5a30ff264a47faa2052a1012ac220000000a4be632cfa57299456bb17a158d003813025bf87a54301f44ba67cfca0dcfe6a4000000065ef5404933e233c99acece5099eca10348c9a3d554391f4cfb3a7369cd503bc40d8a82e6aa3d13073e23f9b58e0e31762e5aa7d7de7e044715e92804d6bad02 iexplore.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2528 IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2092 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2092 iexplore.exe 2092 iexplore.exe 2528 IEXPLORE.EXE 2528 IEXPLORE.EXE 2528 IEXPLORE.EXE 2528 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2092 wrote to memory of 2528 2092 iexplore.exe 28 PID 2092 wrote to memory of 2528 2092 iexplore.exe 28 PID 2092 wrote to memory of 2528 2092 iexplore.exe 28 PID 2092 wrote to memory of 2528 2092 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f54890ca6e916cf79ee22584f0278a05_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2092 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2092 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2528
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5966146f39e6dd03d1143b570f64787a1
SHA11543dc7a3a59951e4c4390d9fa8e1cc5137330dc
SHA25600613ce3659d0761b98e7401cf8183a48f15075ffeedf497f80a2749da53c739
SHA5125a7a369f9cccb004f62aeb9724633891808a90b897f6dd6bb949d6a00cdb997ce459e60eafff879935c9db21a84724b3d3bdc5ec15017bc0b14964b32b3ae157
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c7b02288ea64fd880c875c5611b38f2c
SHA1aafac2e785ad3677a40a6f0fdd934e9d4e23c9b8
SHA2568ed2d42b84659c6b86726f82e283bed988b7aefe2b943cb40dbb6e5a811e8bb2
SHA51236f2bbf00622d060292792cfcbba8d405eb768394681cf231b11d85f0342237a503f0c7b0f434df828c5f17081c28faa516e4e796cf83b1f68ef3bb250c030b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5155c6960e5836c2d74897700d34d8d97
SHA159c4207b80fe703da6610d9c64f91dbeac0f4536
SHA2567b78919a6ad4aa64e44452167bb02aa1a6f61f21f7498fa44fcd939d7b6bcdc5
SHA51225b0fd56623443ef848e3c05c9c6483cf0dea77ed12fd9d394125aa7f69f39863f07dba9abf42b6af8a9638e8ac272c6fce304adb00b61a406ea742f094cd468
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5897dec6bca460737e54701bab111286b
SHA12015819f7e6fa3bf429cd53f2051a383521540d8
SHA2560b090b6dec9a2bf70fe710e100cbedd29b9f50e54596f6dc0d08abb2f0eeb6c2
SHA512a44fb3cd6ad21874ba85f56725f37af1d1a9e8b2cb86617ee7fd101d23f6dcc2be73eed33a58581cf61abe65a6ac0069d0d231acbc8374106afeeae9a62e5b5d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54dd73b9faf52f775475e5355dc693d9a
SHA1d89fd93de3d7b4444c15c191544a3d606556935a
SHA25614866ce083483db99974509ae96cd64224aba182a12ac78d3e1aaf47e0fc2086
SHA51232eaa7864649fe06baddc368d5397f5d9e1a085834b72e602f2053ebb2af3837ac792fe851e814197aa8759e9a60c005fb3926a512e939a383420ba4f3def6e4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bb9bdd7d1479fc719fca89711d485ef8
SHA1a8a255cca7a9eec80dfe322e65ce10e24e0769d1
SHA256178259f6359b6bf8fbfc4bd099a353cf73a380f036509ea58eb3acd1d252de92
SHA512118495d26341530fa02bec61e7db16c9c5f8151b65d185477c2a98fb1b9b21305ea037384c4fc3e511e00328319a4515fbc618cb988d58b9de6f321fe7ef58a8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50c06dd380b374f5746dea42f9fed0672
SHA11387e8d8d80fdff4634f8cc0f3d3efdbcf9642da
SHA256f96321661d84f68ba1c374542bacc5e3919305be3598d44330056405cf09f483
SHA51248eaee42b897848c8386437bad9c6bc776b33627f74d64baab7608e50f136f50aed8aa65a0d5ba8aa5a90ffef9d2bbf77bb423cc872d0dbcbd8b0e2c962b6303
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5488f4c4661536ed21d8e137d45947ad0
SHA10898095d86a0ce2597efbcabb22e1d3b501fde2a
SHA2569944dd92933a88935a9a720600806bb671ab1137c4896bf384207c649648cb11
SHA51273064aad4b8e8e1530ecedba645c75076054f89e95ba38298b14722ee4b2a709ca1292dc5d5af178378f623fa317912a571bbd284a01958308872f8d6f3a4e89
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52ed3d5f64512b36f39aea39fe5b7b3c2
SHA1d73a496b42b9353b9a3cdb7e5a0c78f96d8570d0
SHA2563a292c10ba28cbf398af2923ea2340ccba6029822b1be51dc15a0881c015fbd9
SHA51234547e080b0731a5ea01cbba61282c4f0f55173a7e1454a53fbdae27174b1bda67f231057a4f463a454a815777ab97c160ee8afaaa0f73f02e88601b8a712529
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c1caebb7323a549d76fcc1341680d237
SHA1022eeab869185a398ff7e44781beab2095c95472
SHA256859cd5e50d3c627dabadc491f13c3bf0ff38339c11e47de2539cec0f08ad66e0
SHA512aa455f2a897fa3f2fede4f0f1864dd37bf6b51ec53d7bcbcc30a7255ed3f3694c5f5be1c50a46d951daedff6e18e140d0ef5b2a1c8f80adce2fc92d00652107b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56c378ac163cdd8329267e665a3992e18
SHA1f9ca183ac00c7879fea88dbc09ad27e855f473f1
SHA256305db15bedfa06a883aca1d430b0b20ad7d61d10afb1f1281db7e90dd13b2744
SHA5126ecc71b513285d03049c5f69ab2d95d643f778e46eecebf92d96a63e3c179a6ff03ab688d33228703bd582e04949db365ff5961ea60f74abc09c6cae4fbeaad4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52a56a4fcb46644b54e3c12b9e823d8e0
SHA13c65288b563290c88a2b2ef63f3ed5599ebf74aa
SHA25613485eb7fbd9fe1986ad103d11c2fc418d753e0d9d444161b7c413a0daea952a
SHA512ad9251737473bf991560ab1922eebb9bf5ad1ec5648c4f21ef98ac3328d159f3f7ec3b75a4ff2dc552b23662a45f082c860a01378a6138a5bbddc4798c450c3e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a35b761f3a9c2393026a96ec464ef8df
SHA17810f0a8aecbfdc84b98ee1a40ab563b9dad8782
SHA256762035d52661cec7bd57e4887c4bb2042439b391437df4a656c80cba08425a77
SHA5126f618e09c3dcdd64bcf1f3a0a54f4fd09018d00d4478fbaa99b944402a1818d7486907724ad10c2d5988ec6c1eed6d84897b97d1b4e6f07b44bbf879e6d3ccb1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53c8c70fff31ba86f8d710774f3fc2fca
SHA14ae359d6092823ee93144aeef7bd2de7ef551cde
SHA25651e42e4cd5c2313486315bac3de56751c54ecac816b11b8080ad9c4de4307bce
SHA512e6a9115674c9c2d1f703dcf70d88923da254c77589427939e9d6199aee111f6f348e4762c36be21328cd5b1a2b90d536507f156ce521fc9df5b548327dc4c536
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f7220c7493e59b7024fc24ba003a35ee
SHA152263e634ead60b23467830e5cc8a48a0ec42526
SHA256c8a0fc1a57f6ba68b84f5574fab03bf92b58536a901c61ecd9ee5049eee6f694
SHA51260a92bb1a95bf1cb6fc52f14160bfc752755f8657e3153e1a09a4ef6db6a4bcac60d7bb8e01630ba15cabf89cac20bbdace0b2d8a281761802eefc18e483943c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD542342fa35eb6e412a4c620fdd61bceef
SHA1fbf85d75be92f7493e9d39819d0915995dc0651c
SHA256e13a1613ac3dd93e69e416aea00240c58e1ea4e1c07efb7c2570a0a868faaa0f
SHA512d2c474165071800d653950e23a31f99cef1a2e7072e709233711ff37f45a11ddb33a60dccdd6645dbdfe5637ceb058c8b32a8ac9dbfd356a6af379b4fc1acda4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55e6afa76b58c3c0657d3d2ce043d3eca
SHA1a679a63389f6812ed8561487dda96f725707da6f
SHA2562889c824dee6cae71159d6535180a202436d53e123f18c71f4e0be3f8c5a5778
SHA5125121bd683cd3b64e5a30cf528c885160e2e3a2c7644947a895b44aa7e93368f944f5b9f9d3f241c2ca862aa77586000d065a533ede9e2f4e7abb528173ba920c
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a