Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05-05-2024 10:37
Static task
static1
Behavioral task
behavioral1
Sample
174a7f3e94d62246e07217bf4bfc9737_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
174a7f3e94d62246e07217bf4bfc9737_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
174a7f3e94d62246e07217bf4bfc9737_JaffaCakes118.html
-
Size
4KB
-
MD5
174a7f3e94d62246e07217bf4bfc9737
-
SHA1
ca40b5dcf85982c11e090aa33bff0bf3349295ae
-
SHA256
2e4a785fcaac4a835a066dd58630d0c0fc49a9a6fb90f215d20a89609b73f83c
-
SHA512
ff41c5673e63ad948cbd5d37ccae50887fff680ef06c061f626021d42859590f08044d803c39e449831494c867d7720fa2dc631fdd8e650d672653c447572e1a
-
SSDEEP
96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oH5fFdd:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDY
Malware Config
Signatures
-
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b016965ed89eda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421067345" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a9606900000000020000000000106600000001000020000000b65c3ee7883556362d1eb22490753a7d054768ae0636398ea5c3bf38f09386f8000000000e80000000020000200000002e93575ceab20654709551bf374a7cecd919df4c6959377bc8909e71cecd019d2000000050bdffa3a4c0cd24b299505c1dbf55e984c45f52507ee829893ca54d66c285a7400000009cca8732d06f70ab595f7c73dcdbd1bf4180a91cf52aa56fb964dfc0a76c9848666f75a107a97fd0636f854f640083f7207944e51628538ef1459fabd0f6f8b0 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{8A140771-0ACB-11EF-91A4-56D57A935C49} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2936 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2936 iexplore.exe 2936 iexplore.exe 2172 IEXPLORE.EXE 2172 IEXPLORE.EXE 2172 IEXPLORE.EXE 2172 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2936 wrote to memory of 2172 2936 iexplore.exe 28 PID 2936 wrote to memory of 2172 2936 iexplore.exe 28 PID 2936 wrote to memory of 2172 2936 iexplore.exe 28 PID 2936 wrote to memory of 2172 2936 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\174a7f3e94d62246e07217bf4bfc9737_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2936 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2172
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD552ce060ac0bcbc540c2e2f830a662fe7
SHA19eb908414ca81871da059073f650a82ddab410c5
SHA25668ae8550c15b87a16caf200172695b8b0afc744213a847167c85f06955da7057
SHA5127041a45b6251e2a64661581ad22cadda84fe0ec81a6a77722a05a9165fcfbf70affb933bfc98c517d8c7ce7c40a08aaad7e87993e74319b7a5b326a23e7a4e27
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e21d9f5d2d61be7920aeefa43e62b4e9
SHA16e9713c6c6717c79fb798a69d182570deea90de9
SHA256c04ef79b34b652d673ad177db64bfe369eca8cb97af36de6c03f2c92e7f92f78
SHA512cf7aa747093af9a268a0a198e2ef5a17e841d51cf71b7c08274cf47091cae21c956da4bcfca1a8dc43bba2455dc4a50ea9a292ae4125f698240ffbb66caf810c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD565b928008d03dd5056c81dce3811cc87
SHA15e9d538010325b6ab856e33a04933ec450e4bcf9
SHA2564733c2928a65412cf535f4fde41b202a5ad7c5aab8f055b9d82d732a222bdb59
SHA51265e7bc5550494d4e25ce0fc0475e158accb22066b5088ab0f47a068c2aae000a093323c6d21a3afa1a3cb23a2cd118b4e0ff4950dfee9e7d27c9772bd1c52ef2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD549524140e632baccee0401299037f326
SHA1401f25e543a13d029376d79c0ff1f363bac07baa
SHA25699e7d2e07dbaa67108f951fffdf8d91b0d8b6b5239a140d434aacf18c60a1d54
SHA5120867542240270bea8b4beafae38cb8db3022b5c481b6c85e7892feda514e5be4acb961c67aeb6528b8bfb91c42f2cc6dc6273108d602183ce7ed70b5aec57bcc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58a9ab4aaf4b5cf47bbdc42caf0e636ca
SHA1e9340200bdacff34b22a2ea917a38aa9e6d21938
SHA25664b541972289f5e81bbe765cd80067a01aebc8c3e5cf03f459f27f96549d6a2c
SHA5126a6f668e0ba0ff97d1814019e294c064548e747f66c2f98409d877ce16b16d9988b153d0c091bd3396a25cbc11da74867cec22fec936f695a83138c46dec7f9e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56c2f3aa1125acd9dea2975e0b6727b95
SHA130b1ea76779f709dce07c523c84bac03281ecef2
SHA25673dc949fa0904eeb754390ff4c6c500f997432a811617adca4658d9f5d8d61a2
SHA5122b842683e2fce552d1e7ee4329086f219c9908594759cdbd0fa5895c77f04b8d14e2984f1ab18d8617539ad5a9a28e1938d3f94ab3630b163a278b2935b129c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD502990060d34d1717394fbd6090e75da2
SHA1dc4653a43526dd3c1e2e248a275e59f9c81f602f
SHA256637b5669add9b5ee32671566fd4509929efa0d194215628390d0ad23f8095f00
SHA512dc10298a6e58de9c98d88c1276642a0d3e4ff21ad367cf610f22b05151a9adf33bc17f7aaf2a93cc8b7264369d059289b9183e70d10b2c58d37a9ac5275c1eb6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD559cd1e7e2a941c2da9bcb95a4ab67435
SHA17d9c20786df2cd0882f10611ba42ed8d3e30db29
SHA256f2dae106bb5ec968ca852f0bbb7cd8e0be29fbe84e494dc1d63a32f8721efff2
SHA51258ab8d19db3aa874fc1a3bd2458d377814732557ea6618555e681a227fb1ed2949c26d1ef977b80fe7e4b7590cd2fd5bddbe1d422bf55caf67cd417501311167
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ab10357f18ac238e89fdd18ff23f6e32
SHA1de1a05ba441a707d04b5b33b8996fa27ee8dc5eb
SHA256de7dbe1cfd69ef2e39181ed917c98474832b016bef1688940bcedc02c869501d
SHA5128a1e2e837a8394363a85781957482a7a8d09bcf147a0b87724ed2ce1ea39ec69f894b0184db9b2ef92e7fb54ae42ad059b3a626de6dc440d63fbb3b44a3d987e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ab6ead21c1c1e24e1002191262b51d56
SHA100bed3a49ab2b3407290c61c27bc55b7d7ff8928
SHA2567327268d97aeb292a8d41597b0da451c0f07669ecead421b51fd9374f71fad05
SHA512524fbc211dff9b48e83a5bd05b9a4d4ca473be76dbc9e46f415090fca0d10c519ffc2606c4b08cf9949f3c7a167fb4ef85ec17564192d63f40faaee8360e446b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD516e8cad829cd94470087b4b06a2ff7d2
SHA1d1ad3bfe1fc5b469c9d814c1341d147be1be7b51
SHA256ae9f925f573fec3de70b116736d13df6045570646f3480401543c2de6e0046ed
SHA5124451359460dc681f67432fa50db674a6585717a42c5067d4b3b1906ceb946d52245a3f66efa625c3b3eef67af5f3148c1d431616e8a6de44393f90ff6d68bae0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD539901395404466772610e018541e82a8
SHA1baf2cb26f921c05f50f808c07ac182e6a5bda80d
SHA25608eeb2988ff262421a6475d1c5ecc97a6d7b364df4ce5458a7fcfc7f97cab210
SHA512e7b1fb1e0e9180a54d0cf0f92815a67b4c5efaf118b52bed812a55c2c330bfec33a96f3a1bc12ccb9c38ef1015b20a3ba2356359f33261615915e94df0fa3efd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b376b2bcd13c668556e3aa2cc5f645af
SHA18b8bd56f21e58ccd713bbae9811448a6cd2e0cb3
SHA256da599cfecb7308912008ed38c0b0bba948764604b6dad33e4b31655bbfac2c9a
SHA5125c816d2608a225fdcbafb132834fb0db272f2ccbef5f9abd072ca4bda7278b045268fc54a861074aa004f94b097987214a713e04ef74151f9b32a041a56503f2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5701ce7c69885d4bcf306d06454e35e21
SHA1357d5e9448801e0f1d9409b379f45214de6234c6
SHA25602d36aac10a0be001e9cb85688d19fae3766e0783a16442e3d4ce2df7acfeb91
SHA5127ac0864a626f9102e7d93812865a2dfa0398715628561b824b43f43d055fdab6a44ef52c06b74b7265ac8ca0bf6a5cc7e205453aa0e74048ee51cc9a571c08a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57f817346b60d00f2148715208a3f5386
SHA16207e8036d17fe7c88c252a5733beb879f02c89c
SHA25644771d6b26e5a496c14e74369858562b2fbd7452eb6c9da0c8463b20f4d6ea0c
SHA51267496fded99842e36090ea7406d3613e612402b1c9ebcc35ec67f7594d2b1126c027e7b569c129a4cda804e276bbaa93f1fe7468f51afb7d2a272c997c071b48
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5db7dce1c05f0bc7157f44f7957dd0917
SHA19fc14538a9b7e33600e808c95d5f954078d94ac5
SHA25696d8dbda4e800c14f5718ea08043debb84836ea16afbb1eb9627094f299ecab9
SHA512287b4e0b080386d9aab47f656ed62f783dc3f978e4d0425c506c0775b915c90cb8f637463d1fe6e34a53af50da92a92834cb09a7559944ed159f13df0d9c807b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e7e08ac2d734a51d5ef66a6e5a595203
SHA1cd4e786c776793816c7ea512c32e18ba2eedd5ff
SHA2560e3630db1a8ab4a623ad9d6dcf11975584d2042d4046e3a23279696db1918000
SHA51249cdc8cc81f0b34d4f246119a31aefc51e61c87a6b667401381947f02577183768fedc15178162919fcb016250097a09150ba0c37766e3657d71fa3236548839
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a7c8d99f91ae47237cbddc8f372b004e
SHA1e35e447502a183d36a14e025c32e3902dfbdab0f
SHA256332724911375202206c6ec274666963aee97e8e127d946c2d1acc8966237ced8
SHA512ebff9c8558ad7cb67c63ac6c2a83e818a2930cac01d3f64b8cc6d70305b3af0614bd6fd11616fc658cbcd6a57164e289b2eb1730ecc6d38b37209a47884390d1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD593de4792faab0b22d137f4d11bd225cf
SHA1c4cc204a60755482179e1a028a41c0013c8dada6
SHA256b0b80177529ee328fcecc54facb6c26d96b4a67fb8f8345fcdefd31614200696
SHA512a20bb9df353f891197c52a9eeed782cd786a3901e1ec0337e67c82bf95c52bc0e46b63c0a35afa2c21b00b1a73b0f26774caf4842d6bba1664850e1f355c96b3
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a