Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/04/2024, 02:08
Static task
static1
Behavioral task
behavioral1
Sample
022ccfca58aebddfcd74017b909b9980_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
022ccfca58aebddfcd74017b909b9980_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
022ccfca58aebddfcd74017b909b9980_JaffaCakes118.html
-
Size
460KB
-
MD5
022ccfca58aebddfcd74017b909b9980
-
SHA1
387609313617c3d78e9a744923382e1a3d41c073
-
SHA256
d443ec9cbe0092c4e5bb68cf017bcb85a2896fb514010584a9cf92de7aabaee4
-
SHA512
ad3bcf1bb6d9ef622ca00ee5726d9885b664e099cd34e5ff610be99826cd19fa1676a4f545b5be1285cbc2f2cc57bf120c821103fc023604330e673356533ebd
-
SSDEEP
6144:SfsMYod+X3oI+YsksMYod+X3oI+YNsMYod+X3oI+YLsMYod+X3oI+YQ:45d+X3uy5d+X3X5d+X315d+X3+
Malware Config
Signatures
-
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 50de2edc4798da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{03A74491-043B-11EF-8F9A-6A55B5C6A64E} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a9606900000000020000000000106600000001000020000000766d1f68ad2364badf904b58e8373c9985c9806bf9cf68764763c57dad4c0b24000000000e800000000200002000000054c3c2b0f462c964fb2aeb151abb743aecd13a9aa805ac2631fd147b0e9cb5562000000020ed7ba46d59ba07733b94c06800fdd90bf28d137382b21ee04db09e00b5a9d940000000a9764a77d12ed34b46c21268c89b2cf21633f45d7025f4177a4cfb76d86816f21b3a68cc5404f16ad5f6f4890af6d00794abb85c245287bd065a2b7c9078c377 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420345565" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2128 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2128 iexplore.exe 2128 iexplore.exe 2756 IEXPLORE.EXE 2756 IEXPLORE.EXE 2756 IEXPLORE.EXE 2756 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2128 wrote to memory of 2756 2128 iexplore.exe 28 PID 2128 wrote to memory of 2756 2128 iexplore.exe 28 PID 2128 wrote to memory of 2756 2128 iexplore.exe 28 PID 2128 wrote to memory of 2756 2128 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\022ccfca58aebddfcd74017b909b9980_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2128 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2756
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD562779f6b7e3a078725efe5608d53c3f1
SHA186ab45379893be83617f50addb5f225d26193674
SHA256cdb1cf81e15153b9e2c6d14aebd3408a815a8df8383a8af5918fcaae1f14af06
SHA5124d5e518a69307c71e4f4bfc4bec653dc76257a6602438ea82b658ac85e47af3c934e556a7880eb86604e33bfb048795fb0392e26aba7ac8bc8b01690cb55e257
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5be9294d2212eea01179d6802a688e293
SHA1066cb5fe0a656ff1548a825194014ec306e5690f
SHA25683d737a24b9332d12be75bdc8deee6cef7a744b3e6dcf4345101b037e5d390dc
SHA512fb62e4e08dd46966f55e72fc3531ae025507a770609c74b4ac0a562c08ff6838e52f59651234dee85db9e054852349769050cde400bc29c5e09a4cbdbd26d637
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5eff671f649341d3bda08d7939c312e5c
SHA1bd334b0a7907b183dcf10d16a4c54060decb7fb3
SHA256207630e468c4eb288590d1f5e64ac0ab4a598019095fa725416845aebfc2c83e
SHA512eb6c12758180aa59d40a12582f29dc7710407b9059be329a14600ae64c6a5bdd9b764f977d1ed2b9e953df022beefe752778ec5f142c5eae482ec8483751b4dd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD549edc79cf1df4f0b4c4dbdc4d53fc299
SHA19916703477f0072ae30eea1ffe4442ef4047e147
SHA25673f9b1f80f7fcd9b0527e57ca9013184230b15658f6b13bab549f67964813095
SHA5123dc4ef3b13f2225c585823a013413b8e91d3b7d69681474452ad0658fa2203bbcc2a3e3d62d54046a7f31dda7f027df192e2eec2f647f887adcab675e37e48d5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD564f31ef1660a06b11e9fb5fb84ae0efe
SHA16f1ede625bd87f2ea6c3ff3e1a5fe651d315102f
SHA256a353017cc69c370f64c9c310567469b505e36fce8204cf785f834e8954b5208f
SHA512e59de2b4b01704240b20396fc11e0635076b43809ce7fd152c610b8097b3001ffc7cc2166ac46435a63e558fe687c513709a65bdc46550086b88d521990cb0c8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD524388f663430615efd8d2408defc2f1a
SHA183680bf1fad5d38dcb870714d51e2d9ffedb940f
SHA25671eab3385985ccab8ca146b059b7f1629cee14ade941f2883233461771731474
SHA512e14e5032c17513b3e9bdc45268ce452aaa71845b9a1f38616a74122f123d9191bef61b7b4396782f9c81452d5d61beedb95de8a3637f66fd499930567d1a0cc6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59b04511921427113d875bfd33a14fa4a
SHA1fede3f5edbe2438661adcc1d84a5954ade374e9d
SHA256a419b2117ca6317c051a040404abacd59ca0c02a7742e428396b2d4d525dc4df
SHA51248fe9924f865822f2b5845d1b9fbc8ad49127d426ee0c51d95f04d8722dc7f8bfc66b974b2935758ba3c15a3a94650767b58c1c8efdafc31c89e2e68023c061e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD508788932887ab5313b1142f8f583b4fa
SHA16a46f7fc560121cad36d92f00dff5712bafbd233
SHA256fc145d049e4a53c5bbe5a0500d7a289ee209320338b8a9fd8c10470208511e5a
SHA51278900096bff12c319e8427fa8d7edfd0df6ee8cbc5b1237a94e647c4af27fcd2b9229154f43c8e1e3cd327e3422d81b568993d13223b1bd228d9c053ed17953a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ced2927cff81d918b39c74d2f81c05d4
SHA1199d09457d007e92030e2b695f8ecd5062b10867
SHA256e08d2bd340bb894f8f515893841dfaab8122ffe983113d12d61e1d753dde1b12
SHA512dbde1264af14e6e27a9038bea33ea5cc5c3e5c39f3a3faf6338a45f5b0719fd2a32bbbbea0a9688c66590270cd9604a0453bd2ccdf574369979645231210ed4d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54d7924b05bb0eef16a8aad7be8821740
SHA12d1ba0a797dd85226de9045623c60844e1d083ed
SHA256df93320a7b6facd105a6e88d4df8b0b0f2577428fb4eeafd74601faa6f89e226
SHA5128b901a48169c4750338b8fa81f78340b1be908e2859a53e2cc6f3e0cc8c697a9ac3d0a6fb2eafafba5d566eafb412c15ea06b1f6fea71d9204c3113105e0e2f2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f1b2e97cb33cf99097a5dd49404ad216
SHA17d9b45c3bcb3e00788933239433413bf70eabca4
SHA25646a49575e1760502cbff3858972287a82ede5d5f64005c84369269e568aca7ce
SHA512700d11259be93edeab387f39ec507dc372266d06d3bb8a7d0a864ae6560412dba9134378241f950f2dbcf8d41474f54aae155f2200fc82c2274f4651c6a6263a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5743182c8b7cf1ed5e36a44a398169e1a
SHA142541657083a383c4bb8a8a9446233b1100f76e3
SHA2561a0f091d9543196dd2061868c8a0523eec30eba6e3e63076d0c67fc29acc2f37
SHA512d7d2e8ec8b1a7aa9868959c2fd01e1e845593d366229e800e6760ef30a10d9e70e0cb6d593358a46ad825842e4ce3a262c56d2c374455d82dc0d447cfcc86ff6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57980761d3c9cdc0a8ea9ae4d634b42c0
SHA1d269d7bd1c36eefda9d1a95e861460d063a5694e
SHA2567a20010972fecd22b2d66057547c06e27aa2585575fe8cfa438ede8ac4bbce6c
SHA512707e272a015ab5b278050aa2a5e05736320b907339d64c674fbbbd675612a9b2faa8c702561b77479a1b4409fe6371aef234ec641977b0f33c1b3be206209c20
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59f158702ef5b302ca8819042650fc9dc
SHA1851aea4798146065b5ab9dedf99fb9497aab7178
SHA256ad6c45aab25251936e247607cfb6019aac8ea60072a759bc33daadaa92eebd50
SHA512d174af833fc53e420551c57bde55c72c392164f157758ed703a4a60c8675f067a0bff14d89dd6767be98267a851835f7ba9e4ae05aeaa0b4e83a9010683c9842
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dab2c38b23b2f13b2c66bb1e30c1d848
SHA1950816713e79c1ea159749ad1159cf1a24156e37
SHA256d3ef09a34789aac1e98a8243151b1132264a14948da023dc54d894674b2e9d21
SHA512dfe24e3d0922499677fd6ff4dbe7d08035b6ae6f6f217778e6a14f3ed6ee1425baf4916913cfd93c44913cd574fedbf179043d5269137520702e0da1f3315cb8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c9fe26f914781be0dba6e6cb5b47bd64
SHA101fa54d0d450e10de0a153b8fdcfc4d93e643dad
SHA25635c0ad3e7de6011447561979135d7c9068dd60aacaf26ddfe232ed229c639a04
SHA512e1f4adf1d95961da76176323cb8c446f52c29b4cd3f058931c15b8b5cb2c99b2d17eca02dd7d594d2dbf83239786ef57b6bdd4435f6f670736d7b51ffc4faa40
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51bdc38ba98d25445b6c9d5f49b1897f8
SHA1f956a2514bfcdaee0d7d11f53fe45da9a99c2eb6
SHA256c91b51b7a37a4a1c98f9cfa2fa5940bc3326398dc5be0d97fb99032815878d7e
SHA512355fda5d79d743154d5c1258b01d539de78e503646900647d98c0a184369938c087328191137efc765395fbbc38069c059505e2dac89a4feedb82de12e9aa208
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51577e0dc635b32bd43ddd204d2cd4ca0
SHA1336da3b149c012d47f164acf246936d0dba71e33
SHA2566086c9639b7cba14db834ce76825652c382203b06fe63ce477df45c33d887b8c
SHA5128a3ead9c56766597236235b4024208c4ab7efb12404075639028d2a3f2c7260edc9c267b2f47c697b2a46c764310c093f0f68e531b7d8c69955dcc28de5483ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51e963e9247754621a00f917a8653fb8a
SHA1c7730b6b221d18b60c1aaff13846a3f872468a92
SHA256b472459de716add50329288fbbb6195edca123a2136c8ba8fa64aceea2afe3a7
SHA51293b553b8ad11cfc0205d1df2e545443ed0db311ee70f3428dd1ad549f9726dc3a2c88dde78e31c58bc45f155327956f6d21b4fade87abbcb420621c601d2dd39
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a