Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
07-05-2024 04:30
Static task
static1
Behavioral task
behavioral1
Sample
1f73e763a550cc5f28978bb47e2aed5c_JaffaCakes118.html
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1f73e763a550cc5f28978bb47e2aed5c_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
1f73e763a550cc5f28978bb47e2aed5c_JaffaCakes118.html
-
Size
23KB
-
MD5
1f73e763a550cc5f28978bb47e2aed5c
-
SHA1
58a540670e426d86e59a03e0ecdb1dc178487eaa
-
SHA256
5576462baceef587df839ee56fb2987661043601ee1046a1f6672b3ce03135c7
-
SHA512
10829b6e86cbfc19ed8bbf64e696a31431ae0811d9ba5e222d2d221b8db578ee45d2c6d26f3a1044848f1a7a67bf96836f8dc85c1ca882b223bbfb256039cfcb
-
SSDEEP
192:uWbYb5nJ2nQjxn5Q/knQievNnGnQOkEnt4qnQTbnBnQJCnQtnwMBPqnYnQ7tnAYH:sQ/e5i
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{8B161271-0C2A-11EF-8004-DAAF2542C58D} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421218100" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 109fbf5f37a0da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d10000000002000000000010660000000100002000000061e3931c4eabbf730a8fc5130b56826685db07ac9f52a8c27b85660aaf3a0e0f000000000e8000000002000020000000a40a1e89138e46628f4a7e87d9a13e316dc0b594752392b833b1145689bc4e402000000078e8fb0405464fc5b7c7b57070c746dd36ab46ad58d1b5bd40854c9467242d2240000000fe5385352a31b672bbba0cc2ecc6f8c86356426137a1e3061e1db0a2b2b87b4dd16146c99d9d742e37bca236917b7abe0b5c1bd9494bd6aaabb9b8606857cdbb iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2288 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2288 iexplore.exe 2288 iexplore.exe 2260 IEXPLORE.EXE 2260 IEXPLORE.EXE 2260 IEXPLORE.EXE 2260 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2288 wrote to memory of 2260 2288 iexplore.exe 28 PID 2288 wrote to memory of 2260 2288 iexplore.exe 28 PID 2288 wrote to memory of 2260 2288 iexplore.exe 28 PID 2288 wrote to memory of 2260 2288 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1f73e763a550cc5f28978bb47e2aed5c_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2288 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2260
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD559c8334e3c2c99c586309fde103ed2c4
SHA16d18717695066c853e5ddfc6000e32d16ed5d010
SHA25687948b2f23d1758fff994a3733b9ea40318155433dc241e76078990bb0a4c7b5
SHA512cd14ce6be9978fc5e8233d066c2ecd52ab818042b2e1a311e037ede754a2015c1bdd8548d8b7bd6da8ac71adc62cf8858b332b83404efb27ae8737e220faa6a2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD558f844b28db5e9b02b509b7493fe1236
SHA14730b44a1be5da2dca83209d1f77c209e88fc5c1
SHA2563dce9c9f02f14f62accd0f56dd78a1fc50226d9a02c7c58a29286b57f231d43e
SHA5128f47f9776ff200fe60904007a186dd127d3d30cc8ed68845bd6abad0426488c9ee45e3e595f0c331b3a3c52d86d9d917322473542b5e25e665e7f12a95f31806
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58698889ace93b14ffeb59e0c1d695243
SHA1f908a2194b15c060a7e1e44ce21ab19db2bc76ac
SHA2567475105420221f6d16b93488fe3baa486089fac0c4e06e9fd439d9f03a890119
SHA512641d6757956ca7a0b6478a197e1e0f5b57c54cf25278fc867100ae2c534bbae43b555ffe85c54a52454aa6f82eac3cd481eb4ab5a9977c520f3eaf0f8e4683b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f875dfb2bc38c7925c04acb0f6be9aac
SHA159e669a36a8e2260d688ad4a63f7111851535060
SHA2564cb2e9b0799555845e099afaec336ac5928e925ba84a1f416d9bd0387a17c739
SHA512066d29ea6f2752fe8cfee8661fcad91f2326a372dd077d1c33501cb69a1be4cd95fc222a66f084c86d09498d37ff96c4748a120f76b73270f6e3ced3248b8e29
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD509dc028672972cbb2cd9a9c048b081c3
SHA12d1eba3ca4881232322f188ed1ba0fadf393b07d
SHA25648185baa54fcd050afea00ca99a6839d472b3f526ecaee5e1758794076459b66
SHA5125b11121f55c61e82f44690be50e093f5e07ffde9e0c893388f491dcb53f92b5d89d00a20538a017ad42a8fd054265a9a8627b5470b0c56c6ffd033dce4a13ba2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5792333bf7dc7c3be2975ca47fbe92914
SHA19d7f54ed1cd2c5caffba245030da4063d448c3d9
SHA256fd990d31db7c65626c0055006743b814a640e1e8b48b036f736461f4dcb6cbae
SHA51238b362249614da25b7f29f7d15c4839e745853ce214e2aed383f697b3cefbc4beeaddf9e07ad375429aac8a80c39b8d473f51ebaca3cb0a60fd0b0078d6d57c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ecb03a984b495f7761a6016b50647a45
SHA1505ff59bd7fbe1e5c2435d4317d2e147c3504270
SHA256dbdf41a4d6c04ada4100b01c0bc305ec3f983b6ee9210104a947c6b9972f3c7e
SHA51204936be05aaa8f6de1a5cda38b9656e7c52b085b53fb61eff2d310928ed1f3f13807f1fa645fe4dab917c36d0a7a58d45b114e33e1c6787142c1be9e2f3dba65
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5852a3394e9fcf9ff2002bdab50decf0c
SHA1d30b5f6400d8db77beaf0a6aaf7b251b6391da5f
SHA2561936b2f75560e5c34a806f02b505644a9e3d5e34ad54d5ee888027dada1f5fce
SHA51256e1ed6ca2d19687c9776084444d316af940d149520e7d2b7d355f0f770f668181a4765eb7b4ee3c12b86d07ff14372d5dca148e4daccdafd9faf80fe0cfa212
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5de01a30344841d748adb665bc44771ab
SHA17b3549988b218dbcdb10d728e05d44369a4c1a7b
SHA25691925b8afc6ea46087d6d144c6f5f2a7f9269a59cc09f4612d2aada0254abc29
SHA512524f25028b827a77aaf624f97ccba39fc97ca1d8da3b8607b24af936b99e1c7d331168ee34313444f983631bb506c1d4dcb2930069089f7583f3a39dce22d459
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD548504b80496a7d1fbbd4f8df49930521
SHA14b54720200b2d7610eff5d2b6fc74a7b21c0577c
SHA2562d12dc681ddc44734a04b16593e4a5145351a81b500bd9fd913bd7e20808f4db
SHA512081509c5569f04147a8e4931ce047faac9fd2baff5496d1ac72b8cffe51dd5e43c7b47c09d19dcee5f221277990ac2979a5dd38408a8d5cc3569e2b75d8de8c4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD558436ce8fa2da2ff99e732542e190ac1
SHA1c68dc6b5c0480d313587d2ac5bb78015386e4b9f
SHA256a9bc87e802938b277d78ee9db2efe2b063f80de1f14f65880a86c9f00ce8fb6d
SHA512af82656fca7395c9e577044d1d98c9499583f48dba7569e453ccf61b95c40b089d0f54db694e749096b7f13d7c0c5f47bd4e9dfffe80975f42139c56477af6ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5da2021881f4e3a6341883cb3ff42dd41
SHA153573cd585ae46709c268f665526bdac2047f032
SHA2565296569a5750767dd08e84c8c1104174fbd36bbeb6d6fa49159dbc3ff92e5d8f
SHA5128284bebae5e90d2b1299f1252f0b6deec125bd976189dad774aea472532593d05f09c85144872ab78afd8c596fe29cdc08e96b3dc07b607134eed8a72b0c1baf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c597120da277f3b6bb37dc3d524069a6
SHA1c044791c5bc83dc0a7670882750a493691ba8df0
SHA256a55e6f70146562a3c2def6aa97e3bb9ec78ec1afa9612f0902f692f68a6c5a71
SHA5121b2a33088c87db891bef7fbd6358cd769ec3212bfda1703ef2c52a047723eadc56ed8cd21f528aa5e9c46e53da82d750c1cbdb06209e4069639e13af2e2c0d89
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b5014615591b5a6fc8ca0cd35ae9c0b0
SHA180d8021fea20ffc229937f7767f151763bd4706b
SHA2561702bd581aa0d8607e2bb81d9b835a9cba03814068e730dca47a79271c0f02f9
SHA51270575344b556712be9f989ac1ae5c66b2364d24c9e322937fd9f8134ffd49584282aafe003b5602f8f71643de104249052a5add7015b24c2ef53527439bbaa2b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ab65edad8e1729f00246a8f81623cd02
SHA15dd70698582f6309442eb58097356c174be592ff
SHA2562b90a9bbf9a01c64a6c31f93e556403235625a4978239af63ee2d4598bed8d90
SHA51225e5a062283ecfe0dfd360a85d804fb38953d8715f62afb1ce8dd0afb96ce684dc3db2099f371315379dab9e6908a6efca01147ba57bdbe705baf351cf2142c7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53a80a757d0ff99e8b231a7efe18720b9
SHA1f1a05e12ebaa07c5043c0a077d0518c84e63668a
SHA2561244ff4b7ba0ffba3094b35eeafa065a72930e1b66de252519ee4d11a0c7a816
SHA512f620704eb2c7ae96eb14651db2da0063923999860c9c85aa55be0a16cb564dee03ae7eea8d3a00e001d4094979434aa1eeb53906dd347c4dd5db116df36a281d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cc1ee50dbefd378cd21df535e2ac39c4
SHA173a8725440c9320ae04cad5fb470207668d85403
SHA256c171fe4babbfe620515fc3ea22dae5c1ebec0d6fd8fd07c08ce6c98230233547
SHA512723121d3e0cfbafda24e8063a5abc441465874a27a9c249b4f43b0f2f9a928ae5aadfcd615a28c5ebf1625b5260c1f0afff3be89b4de7fbe809bcf892099064e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD516ac096ec17b439d8ec52402131ae35d
SHA12ce8a8bf552290b9522b57d7259bebccaf27b7e4
SHA256c9bb8b559a53689c8c16e60df65e6d219b9e38a0f7d4b803f2828287721ba0d4
SHA512df06cabf4a7baa755fd6fab7bf22c499c02d430e83b7c2d73929da48f2b031455cb2e1190a0d92f103a65a2a2aaff9f53fb348ca8d00ca6c75ca265bc0d79561
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a