Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
03/05/2024, 09:40
Static task
static1
Behavioral task
behavioral1
Sample
10366bac0670fa5a334a5e14c59d736e_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
10366bac0670fa5a334a5e14c59d736e_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
10366bac0670fa5a334a5e14c59d736e_JaffaCakes118.html
-
Size
23KB
-
MD5
10366bac0670fa5a334a5e14c59d736e
-
SHA1
9474272125a66521030dd1229ddf32f97a48cc53
-
SHA256
a70447de6e5a922af42a9ade3d3288fc16688bd4ceb602b137a7d9a4d3eb6fda
-
SHA512
4b0d6dd7a5101c3e5eaf9e4b68080aac4adc8fc8219dda78f50fc856802a13b48cf0372716cc37a6639c0ffeab09df1fcabb40fd2a40ed407f2e8cd59396b572
-
SSDEEP
384:tzTkKJwkRIrXPb0pwCDYcbQ/BmxtaBVK5Ow120Ey8IZ0aZESd:tzTkKJwkRIrXPb0pwCDYcqmxtaBVKUwr
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{25B9E511-0931-11EF-BF93-66356D7B1278} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d08f6bfa3d9dda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420891084" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc233000000000200000000001066000000010000200000004507c89f88621c21455243b4c33278d0477a3d7d46e1d7a1e8ab47303e231b25000000000e8000000002000020000000a78a2a3c469001704e1645a9cf14712c9e9cd006c0799a13000048853c42d5322000000044725e731e1dc01e00137b2870b7e963764c89ba5cc42833d4c655c9755222f640000000dd5c9c95db091729845cc5c5eaf20d78401612aa7946966f0a6ed1a4f48798396825f543977ee44a5d9ad9bb8c9318ef58f7912ca21973be933237b58acb028f iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1028 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1028 iexplore.exe 1028 iexplore.exe 1332 IEXPLORE.EXE 1332 IEXPLORE.EXE 1332 IEXPLORE.EXE 1332 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1028 wrote to memory of 1332 1028 iexplore.exe 28 PID 1028 wrote to memory of 1332 1028 iexplore.exe 28 PID 1028 wrote to memory of 1332 1028 iexplore.exe 28 PID 1028 wrote to memory of 1332 1028 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\10366bac0670fa5a334a5e14c59d736e_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1028 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1028 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1332
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c5f37900d27477876b8d4c312048be97
SHA1d05ee8e538bcac9b124b9ef2868620241a6b911b
SHA256fd0c4bfe7ac86ae6d1795bbcceee9352c0e014606423456a9f4cafc58fa2f441
SHA5120165358644ab58a42e6342ee7cc6943e8561803a7b6f1a152319d273e9e3c94a85139a5f1b6fd00227d8eb60e48dcb8416bf28a290ae8c2570763a3477e663e7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57a90ef0c4a40227ce6f8abebc3e942c4
SHA1da03e1bf2a4342b160736801cc572049b53f1b2b
SHA2569438e92b35317d7f9b4eecbca7e713ad76a2ee5910a6ff9126b6756ebad1dc40
SHA51263ce660b224133df5ee88e3e1bd0a63b0768707a47645bce775b1c63ecf3426949c6260cd7c30900d21d5e23ebe39134733ba1c4f2ddeff80928c21cdd559366
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bfc4d4cb6732ba851acd55f3575d9ce2
SHA1dda0859f228b1885fa621a79c54d0147fc55d338
SHA256863e43d75a5376d78f7c693ecdaf482f9a4d780621a92fa1094a9d4b01e75053
SHA5123bf2ca32d590966f1db6890a8caf1e107f73ff19c5810ef7c5c3f3fd444a2ea67e9cb0ef01e16a3eb6d57f897265b707b88345a02d5b2d6cc62f83b59dc171b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c5be16ffd1eff80e9e75250b034419a3
SHA1c59da903e43f1f5cdac2746bc5d4607ef1411261
SHA25659cf57cf99571e4318deadc794293ed417cfa3f00979e0a1790020697be0840f
SHA512867de2c779cbc0dfb621e915f185088c42d94339069d50caec792e22b487f2a5e1bf4d845601bb4dc3a335681348e84771701ced6c52f1cbcc40ecd2209d16d5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5af6b4e5ac9b823a74a109ace8eded093
SHA1fd502f608bbb806336f8f4396ce5fcb01083df00
SHA256543142fb612ab7b8e4f31611a9c25d3ca39f021fdc098bbef58314c2699ae1b7
SHA5125a2fa1c8b9200054c6570aa430cbc5e38a7ec2014fe97c5963123252ba1c14effee94710bc75c2d8d3eb322876f37c7fa963afa683a60b76ba9cfbce56f3f769
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58e19173a223abf1af62d78af969b2476
SHA1f32389f77423b68f68c884d7200498668fb30f90
SHA256484cf479c7424e626650ea5c6a74fd66d88c15e378efe9e24d908eec74c112d9
SHA5129848217a006ab37ea1e24f9c81220963e96ca2b6860720bf8ee65f6c39480cbd093b6c0bc38ccb46c9e2483e32b8a863693ea93374ce8415ae976f749be53f96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD573315f1118f57ff42fce4c01c3ef9f7e
SHA1a92ef40fb6597c61198af492f1dd0acceeab73d9
SHA2561cb4bb480fbe929522d7774e8d90ccafb71f9740af38877c21ace6b2b33e8313
SHA512d16e367db60fe79c85134ebf80bac0063f9cda745862b51878e9f1b1904a0ea7f9b64cabe418eea0a21f452228a4618a2afa676bfbff21ed4ab1cb3d88717342
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53d721b95625f7426e0a40e58212a41b7
SHA1508671e031d44ea26f61882a8771b210f3fcf6f5
SHA256740c0410cd3e4de6f692cfadffac65f9a8b1e7359b3b57892a7d68251f7e5e94
SHA512c46ecf321bd214b2a082c29e4ffd06b63378c963f786b3236b22435b61c08f0f2b08292bd8c9db9692ca687f1dc73c18b380a388bc2a6f1323b1a73093299707
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59891895a095fae0e5d845e9923e33375
SHA12843fa2a4f5ae363cacba861d5ebf503015fb7d8
SHA2565471b61043ef07dd14116722cdaf374503a309a736d4923a1bbe76b3bcbfc23f
SHA5120e266057d15ee714d84d4365b5495303886dac8dfa6e2035181c6803e64a88b00cbe3f775843035129033d82fdd72e30f420084aa0f272c097c2d5af4d425f94
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b4fbe31dbab82b4bee516eae0204c54a
SHA1b8f39fab804bf2fc191f76f26d2c53bf9947fd4f
SHA2562a2ad7b374f0d6aac1b54c5aeb62432bf4452933902a6056fdaf8b2ad72810cb
SHA51272a97725d6bf43719c017479cd8b4f9556fb14019d005ed99ff52258be89e9f7c115f4ab8e23cf3badb03678ea3fcfa0066dae13118b8b676dd9768f70c28db7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD593af5d5901b473a51f60c1c11832462d
SHA1c68668609aaa0702ef25dc238d4e6722e85bca67
SHA256d03d6200862feb430c54dbc959a091ff10cebc79eda9f1a4bd733748f7068d90
SHA51286b05663b091722f0825db74112f93b8e331d5c170cead148c6f4fb806401d8e41fb018a5874de8abcc29ce3a1468193ac73ca042dc751340a2e918ca82e4b82
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD541b6dbccc5d4a23f40f15ca0a1c85c28
SHA1f2b8fe288e9f7c641c3e3893e8203fc1ee2cbe15
SHA25658d6a93163df49eeb08c8492a9b7c5ea3bfaf954d5b1043090b3ba6e168e07ac
SHA5123287b3299e67d4851034cb81be245e292da745d962d198736aa8413ebdf0c4e6483a44719784990c091de9adb08766d38ed468ea6a657da3ad6313309f72f2bb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD588af11c41573e71db1279c0d4fac5345
SHA1ea1413c184aad9a73d14501e7a85aaf2780b197f
SHA256aab073d940725ec5d97503c73c6560e907ab3cdfa6a3716f486af688efea70ba
SHA512068e16a7ca653705e74817dc7224fd302b8cce54d540c7dd7484eed1c46ad6d075950a02fd41ff283940337aacdcfa13f1a8d943fa2b5298b0685896d0e66600
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51f81ed176deb5b942e1e5c73534719ac
SHA14c2af2262d8d892c3c6abb5c1698046080ee7cc7
SHA2567381b84e8f53386974ffc3eb3cc19d725b5e392b54414aeb74d54f3c5b67149c
SHA5127b1bc0c4797dc2712d09e397f0384cc3b1f192fcff52aae189b95cf688b70afb152f9a67c32855fc4b1447db03e4cb838dd2cb36d9cd243ef91f70b8e1362dad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d9cd438fb4dc6c6365c24b4dacfd1a5f
SHA1d26ef4f40f527d0ed79222c2cc79a81f09353ced
SHA256fed27be1ef246c0cf14a23d160693a50c56db3deeb9fb0bb92e2fa102adf77a7
SHA512cf4dbb883276ad8d7962200e94865f183a7e97876edec64cfa59270ab96ff70df7e3c1237237fcab1d4323523976c03367f3e7340280433ec84b8cde70125f44
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5db8822d9284298475d8f31ac4dbb9ff1
SHA1ba4fd385edb25b878ea45867dfbfe140aaeaeee6
SHA25651b740e0cddefb86f1677ddfdadd5aea66b5384a3cb31975604f961af75fb12a
SHA512e5698bd2e46dadd620443fcda7d224aa847f244dc791263262c1704fcfbb0d54da271ad2194a2caddb302ce59d30f14edf91127195cab880ea016cc8e083392b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52248138b2a949046f8abada43c5bff29
SHA11b0224f108d25fc2f82d5a296b55d5a576728788
SHA2567ee92975f1ba9fb6ea0fd7a24ab28bd7b42194befe97b73918c42ab5e7df8ff6
SHA512e123fc6cfa915c134f63ed1e4b73f370dea9b9acc4bf0a6b936ec2818f3c009e66f7ca38551d7cc719e8660f4a66c0da8e1f0f5eb5ce93fb06ae74cd393d5b88
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a