Analysis
-
max time kernel
119s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/05/2024, 02:26
Static task
static1
Behavioral task
behavioral1
Sample
113d8b282a47ae3b567974c2ff783d84_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
113d8b282a47ae3b567974c2ff783d84_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
113d8b282a47ae3b567974c2ff783d84_JaffaCakes118.html
-
Size
2KB
-
MD5
113d8b282a47ae3b567974c2ff783d84
-
SHA1
44daf6eee944eeb71f5c62e2d13b0b051f76daa5
-
SHA256
a7049062fc33512948cffeff7c49f7e3681a0450e8a312a256b7f628f7a6b571
-
SHA512
1510d8bbe3ef17e04f191eb85bb041229c5a45f38c62ab558463e0721d7f1264b37cff580a8a70327ef45448beb28c03f5150e444ebe72631770877c46aa2e3b
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BB0756C1-09BD-11EF-8356-E61A8C993A67} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 009d547eca9dda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420951464" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a96069000000000200000000001066000000010000200000005f272609954254fb56241c3c0ad9a6e896ac654ad79704ed9ff3e100f2203d04000000000e80000000020000200000009382dd592edc90b5347a625142c11a4c2704b3ef8ee9321b1859fe584271528e20000000e6039108f21179252444ca19eca4007789a78c840b57bc2551c2f8321cc786d94000000068fbe540f426e3628d7bb264c36f1112ab721be0df98c6e2b53f61b99bcfe1ffc6aadd752cf87dbc3e965452bbed5e4dddf7f56c4ff26e929bc7235cc2c9eab6 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2972 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2972 iexplore.exe 2972 iexplore.exe 3016 IEXPLORE.EXE 3016 IEXPLORE.EXE 3016 IEXPLORE.EXE 3016 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2972 wrote to memory of 3016 2972 iexplore.exe 28 PID 2972 wrote to memory of 3016 2972 iexplore.exe 28 PID 2972 wrote to memory of 3016 2972 iexplore.exe 28 PID 2972 wrote to memory of 3016 2972 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\113d8b282a47ae3b567974c2ff783d84_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2972 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3016
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD594fded19a786824fbc4e1066cc94a353
SHA1225bbfffb0ba4e52130af93deb77a0d0829f8ed2
SHA25652f535fff8978bbc7a61d1ec3f8c59c4edf53a1e0c51ba2f368857a821afdaa2
SHA5123fd177aac6cbae79bf92cd39408a5474774d7c1d3cce4c9c9f68959b9ad9b39dbb37641f6e9681172f85bcf87396d8f10944a831b9f0fafe91bf5c8c03a05ab9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD542e6df0bbda54305f7a0273856e4fb54
SHA13d8414e85821a2337bd6938fb41adba8c0291b2b
SHA2568843abfc119aeeca1074f9ced52252a11376420a88fda65d0100d073411a4e9f
SHA512953ca163a692fcb56f9f67b3054ed1b5eff26988fc64ad576ba0a3090a8139a317fee1f3f907fd23276deff0db8c5464a9c26d080ddc74cf83991ba9a80ca8e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fb75f0eecf1982477dbfb197c52a0f87
SHA196cc909934966892eabebf2a67ecb2b754bfc488
SHA2560ae153a458c53ab283988d95e2fee3f2d27ab9a65684f4120f0ef8b3e64651ac
SHA512b0058d94776952949c5b013205aa4a5c8b678e47025cb974e97326617066cc622320ba9aff6bb270542eda6901e99ab5bbf53d16405521834a7738f486afd5a2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55eb8688e8596b295450705fafa8ca5cb
SHA19c140064697c5d82a56e7783be649d0a95dc2b9c
SHA256bce8ed007b09b22eb788e154a1772a9bb2bc0a19f110d839e9cd22861e50f883
SHA5128c8afb0ca07a37e2877f86b5a1bf1a727e663227fd9dbf499580f52301291c30dcbf07e8f12038f7fff981cbe895557cc551b0f550b8231fe390c62caacf9227
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57f0040c19db04924750827c62f82cec5
SHA150eb4c5efedb75dc6e62582dd42e10ee55a89789
SHA256dd41017aac3c0598f8ceb0d8404bc370c8b3d231e9b5ef0c824ef6144bdadcf9
SHA5127be627bf27e643d7d5419cfc3a5c27eef8c27d6289ca689a593ea7ff916ab91613fd77a55093768a048e7c07066c9dd85c97eb4ab051e3e9cb8b3ae2969874d4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d045d65cd73572414270bb3cd3529798
SHA1ab48b474c82fe3105afe10678b38a76d3924f9e2
SHA256028e94b96f2e1df93b3374a2ab762fe29e669b3d6a99047de529125e61a30f52
SHA512e7ccfbeb75341a967dea3c6b9d310115f93d8ed037d72fe44d210e5f1aabcb9ba01d34cdde03042d232b04253bb57f9f3fc66c4c7559452fc80c29645b465f96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51b1832e368ef719738e45fdb235995b8
SHA12690e5f8a3825ec222aaa397ee19f09c0021129a
SHA256e3966760f7d859277aed06325e79551bf95ae3ea04defd77c174f2a7be2f1abf
SHA5122becf0b9a3475aa5ac8f32e96649b3caf5ae6b8889fc8d99e99dc326ced8648408e7156a010eed3cff4f8f7b9a066afa416075fdefcadbdee3587130288e7234
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d7eb5e435c6739d98cf7327cf3a3cbca
SHA137a74f9f6c496386557d444160ffe3ba577ce5cd
SHA2563f9bcf49ab37cc0983a6958178d7b25e54affc6552f648fdae3ea711138a737b
SHA512956e6163c5a2b8dd55a0330d779cf861641d80e28ab01528eabf40280b0ee906c4418297866c5b0cdc2ee1902595bf24d92e3f424544c327c357f71932d35648
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD573192ab4526f23926d95bbef1f47c6a3
SHA1c7dcf109646bfc2f71744ed51a28a4c34a76930a
SHA256eb52976452bb5a0adb9091692fc192025075273cf02500af097c405d338598bf
SHA512b21124b187e383e97c42ba1c97cf7f6766be6c40a2510a456ecad88f406f3d0ec1e8099f72fa9ab736181aed95541edb02f5fbe7e909b906fa600d3378a3ee77
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e1e219dcae1209525bd8509be4e7bad8
SHA126438bd9d8ea86f7de4a3eaf6612cb67561674f6
SHA25691337a0ad5a0da85b8e8dc223caa783f67a8f8975bb70c5c663f46cb9410f192
SHA5124a1c8d36c1efd38b8dc18fb79543bfa3804092252e85abbba1b890197bd57d8504aea66e4216be1117b07310fac97d878df704c06f173164e65eb0eb1be898e2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD553cf8542ad495c6cd488819f927474ce
SHA1ed3e335d573868aa89238649985816c15db1e404
SHA2569a67bb38e06c466e8dc91abfa7b766886d8ad5925ede6c4da1ca4ba5abee04ab
SHA512190d2e9293b8b8f47477e228849774658de6f19f72c5eb942f8646caaf02f4bd449a675e605bee1a23dd2a9cf6d0e2eb6c8d030d8592c34f2fb85d5aa845a2d9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57bbb2e0ab60174a1c325e94f52612cb0
SHA106f8ff0fcdbd708bb8772442e2273fbdd1d0ded8
SHA2561b3f2080ec30f983c64f08485dff0bdf7f555c05f07d9d5d9699e3f06ffcf756
SHA512606a6bf906c7b12171527336e1be33ed0dedcc9752081cf72330ff7a26f9d1b43cd7b1d970572c0cefab1fc69e8a2b775fa7874a797bddbe41c6219b8cd4640b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d215b58b39bdc5b33a57725488ffbf2e
SHA1aa1bfd2ccbd47c35f24dc7ccdb61f0eb767982d6
SHA25649388c270e2293a22f4240a58e66879547a6f99fbe0261aa92a18fe9343a997e
SHA51260cb429efcf8b3447f941e85777fa468f89b4b953ad16a45d46135b2b57722d67d690fbc0dd485cfe1631cbdcf805787d719aa0d1df04345ae921acbf68f3cad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54803e82bdf933a09228327c434bc8ef0
SHA19aff69224116d148c3962af48f811844fa719b3f
SHA25662b57be776c799b3fe990d2ce2992c2f8e48809470dbb89ad83618043b171506
SHA512aa127ce3e3000836b59950df81d92126ec01d45da0d7dc6752855f6e9b33207b092a19c8cb3909ce644fe258afae8adf192eb9d3d9ad3cea6a32644d9b40ba86
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f14e8cfd46e9167c8d81edc19619d013
SHA1b9d1220bc40b894fe331d4682087ed7e4810cbdb
SHA2566e60f93d98a5537ede6360882b92fbf7224141d4bfd151467322cc86b34954da
SHA512539fc59fc5b7dd4572f5700c2acb8ebc8c5873055a91cb950792eb94967b58dceafcee717faa67996fb55dbe63a23c98413c529497ead3ad3a5ea4b5a9101ae4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD583adcaf7cd0f53ff8a546da555aa6896
SHA120065f7f535ffa4567591cd23865ed02d65fb8bd
SHA2562e878ea0567ecc28c4bd2df329e7b176b8fa06bc7c653fd18e60a008f2ebd364
SHA5126300019a8e13a9667e6b17a5ff8a01dd32a1b95048c90cbda12a0fd0c0bb16aea80aa480ae307443e1fe80b791279d0f462780505c7161ddb7a7f51215052e96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50c02636d45774992785e1649f1b96a93
SHA1d13ae879d0cb2a4e68d36c8991f5dad4c4ddcc40
SHA256954248ac357280da998c3923b15147b1001fefbc4dae97ebbe2728685968f92b
SHA5121ef096137d58922c655bdec5ab5a9502fa0b11f3583b1ffcbccae3da009544fc4a3bc8225c4d2d841a79eaaeb07c3adefef6fe3ebb4c1e93f1117537046a6423
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a5da59498680fd0c689c0897d7a93748
SHA1f5d1a1cd5a0594d013431d38cbd01cd5443e7858
SHA2566e5d0fece6d5f6f4f09c6e29e417bd9434c73d5a0cafc8c5f4293136ea51910f
SHA51203257807820aeeca94b975ddb15d900c5b525bb688bba0dfd94af9900697ab9c514243117f2ed20d348c5e14e57074ea6c31b4f699765ff4f80feed3d013879f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58f1776b9d50e6dc1bf972ef146fad4dc
SHA1901f22b8dc89ce51eb5e9d3bb42c65bc5c468b73
SHA256b0b93360664e27338e88132fba7b8d22b969695f0e386ca1938e6a3d0ddfa7e2
SHA5124e47996844ab21511bd9cac4b2444ef1e1b337bf0f7c2520a462e2224be1f3e41421e306b29504641907e8b80cb469133018edb7146b3d36a2c3dbc828013090
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a