Analysis
-
max time kernel
120s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
07/05/2024, 05:45
Static task
static1
Behavioral task
behavioral1
Sample
1fa202196bb1d0dde54320b84c58223b_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1fa202196bb1d0dde54320b84c58223b_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
1fa202196bb1d0dde54320b84c58223b_JaffaCakes118.html
-
Size
213KB
-
MD5
1fa202196bb1d0dde54320b84c58223b
-
SHA1
1190df1cd639ac8f0beef869d05d6eb27b861d9f
-
SHA256
7e69ea66fa25d6407bf52e6f00ace473cf6f667fa5bb3adf7a9bdd4dd975f694
-
SHA512
ce274c0145579eceee3afaee11864336710d205a7a32b9c96015a939a05f06b5726d1532eb3a458b512b3e4d6f4e58fc7b23e970ab1df3a357574fda2652a8c2
-
SSDEEP
3072:vrhB9CyHxX7Be7iAvtLPbAwuBNKifXTJz:jz9VxLY7iAVLTBQJlz
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000443a4b7362f82e1c6dceac8a2c97b2f13bfe438ffa034c0f54497fbbbe2c20d9000000000e80000000020000200000003b1455e8571448e747a03d33a4dee95fb083a0bae0d1e24032e525f9c0f465f720000000bd7ba2ee5b4b6101d8862e4396d6ac2f8cd5d410b56c11ba87379be077f6651e40000000474c326cfab76e9995ef56affdc458d60f526fc2c9d2fd7efc6416f7ce994cb6e3985a7b1f846482d9f552159c1a8f574ac9330465e9276bdd51c589a91bdb2c iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{FEA25961-0C34-11EF-A6D5-5A791E92BC44} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421222591" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f069ebd341a0da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2236 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2236 iexplore.exe 2236 iexplore.exe 2240 IEXPLORE.EXE 2240 IEXPLORE.EXE 2240 IEXPLORE.EXE 2240 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2236 wrote to memory of 2240 2236 iexplore.exe 28 PID 2236 wrote to memory of 2240 2236 iexplore.exe 28 PID 2236 wrote to memory of 2240 2236 iexplore.exe 28 PID 2236 wrote to memory of 2240 2236 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1fa202196bb1d0dde54320b84c58223b_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2236 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2240
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fd87cad9859afc5a4a299533d4f232f3
SHA1fc8a662b80de9247f0228991bdb625c0c83e75d5
SHA25663129b376428725eb895065ce351c8d834b63b6732063b04ec6e9a2f98b306ea
SHA512e341e74629f2cb8ca9d00181f0304d359e32b11ad92abc72aa826394a28accfbb71385f939d0ddd60cf0a43b51eed4bd02e37178bb94908393062fb055c3902f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bb481708b2a46a28d020a112c142a712
SHA1a5548b632698ccc0dabbba423993519645fe0f7a
SHA2562c754baa759ba492e3ea875b5ef3870e48f679f7c2d7212a6ecc14e6eb803c81
SHA51234bd8165510dd1bf5320d041e9458df55678e2de4ad5da5d2d35dc8530dab6193ae8b865467a867097ea6c4933d610b9122f9622d9bed1839380a8b1e0fe3e2f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f1fd54880b0472f4daad9ac913a673b9
SHA1a9d1a08b1f8956ffc0a6094cd03ef91bed7a49a1
SHA256de88af320847b0554e54b8a69557b9af1a1be3f283e4a1d16ddc41ed3ffe50b5
SHA51263e822663a7e0b3b014e09a258ea6d1069f4999434800dbea4bc7d62cc6e56b5a7cc417aef11ab903fbdfc09391bb8d950b750fe8cef171d4a575c3c30bc1eee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ab5234654bdc31dbb01d05ecce0bc81d
SHA153aef2b8baa84e844409820aa99ad061107f296c
SHA256bb946bd0e8542d7a3d76fb6b6ae11c780f5e71f1a3d09cb05157e807121d2ea5
SHA5123d20156723dee8e76a06cf1aa95f1556aff292555e50f6b4dc5df1133fe7ff323ab46b943b4cdaef1cbc710b0235473ff880ec2e68283c125a161768c8f19af3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d71bdb73c04f5e424f3f7aae1ae0f1b6
SHA14bec614e1bc9a652ead595175fc458667662ee4f
SHA256396f1dec77605b86fa86ce9fac1ff7fcf53afb0c983b22402b65f51ffe602384
SHA512e0e396a7a9fcd5c3117438a69cae27a0621e6bc06182cdced432af085878e100f7d2fd0d543487fc0e8a609f9c4db54dd4a7072c2547e186b11cc94ccc136b92
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56fe474957a366aec920e6720f4d3b777
SHA1c6680b9c17cf2fc9358467f2fd58e1919f3f273b
SHA256969b453f04eca97d3744f178604c523fe03bdff44d628d623e9cc5d32244313a
SHA51203f5e6588dfa109c53e686fe671c4404b6b86b93658d6dcd2e054571a8f34c7ea7dc4ea91dbb8706ba7bd1e4f93c463b98ed157578f647a9b6653513da9f7767
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d85157644b22574b9f735ba3c9668a7d
SHA126a86abd842b5861ee61c674cd7365ac8f12e68a
SHA25628b2ad26ddbabfbf6fb8316e7621071d4669f227ac6ed3867272407046797f4c
SHA5128661465b0f2de09d600414c5907c9dcdc2f56d0c796efcb219edd1e0d68a0dd3c3e861e2cc73dea928135cd2c652d2aa34c5d58f594d7f934cbf5b9d9db9a5c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52d0878969d788c2c553cdd3369bcb030
SHA1fdf13687f7739109db3bc06035243274651e5bad
SHA256e76dcb2cbbab1e7a2b1b611c0b54da3e3cffbe5757bc0f00b758264901ed0054
SHA512d4cf230183af1f6f23235da65c87f25bf9ff8f20756344e7addeda95940e7b3587656d10fc1d32aab742e8ba89c658963c97825100f8d78d969423da0b75f192
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5938d636bbd3b45ce0fc985c22bb2da14
SHA1f14e87860eefbf517961e665395d4d99526298d4
SHA2564c207b2008b52c9868fefd66260865fa1643ba17a88c6b3d1640eb66dfe22bd4
SHA512c8e46f11cd972bd7153ee84982d26c9a06fd806c8e64a4503a87332e0e9936e23b1a91dff3fe054e4b2e3fc5ea09f27f5f7ee69ea86f92937a6d95db660c4d0a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5eb92a0d0b47f63fff7858455105626fb
SHA1427845e7655f69cf1fd8780af994fd25075b240b
SHA256d6d1f7a47cc0d38bc8437d61a65b7465e871b645bfaf1936055334a8829fbc72
SHA51204b5914224544a7c087bc0cd2e478ed598a8771a1c445c73bae8cd5e65e9285e88ae48c75a4182340c8aae14c6b8cd02a596fd8004195142f324b67a476edc0b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5abe761f15d9b50c9d1eae98706884957
SHA1926d89f63e8c932b40371a0df89618f118fec21b
SHA2568fd37e3ebe3ec8b7df997c7104305eec4ea8ef93c91f9696ddb165453842d881
SHA512d512faee990c5e5109d6e1765d873c29b79c8b95d7aa757857dbc334d965773b957e4af5952f7afe31ef873728d2137bf5cc5eb24b062777ced6e6218b0d69d8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fe79cb948f48e3d81b9271ee44e5c3a1
SHA185c1eb68e2aa81ddf5cca55576842b06a428c493
SHA25648dca5d88c042fc9021e27c63fce0d61c3065cf0e33d4b2bb47216bd342c3529
SHA512e636d16ac495e8a35f0d9d522e5ebcd922d633efda80dc128fec229300898b1edad76533b87fa3f1bb1b785a2c3ae6fa65fc7221c3f08d0ee72b5ea5b1b801bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD597640abcfec13dca97281aa56a0a623f
SHA1c2bd68a34114ae4ac5eacbd8d3a5dc90cfce231e
SHA2562d73f37a07d3b72f2c08eed52c0653bb82c4347ad5ac67e3fa2f3f6f576bdb47
SHA512df3fc45c3b8c23a2dcca2441de93630e876b41a14f885f7a5e34820b9f20bbf5b1c5cb880115fb73e8cd400da776ec41c71c7c37ad6d84dc808defd86f531ef8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5173bfcf2997bf86281bdb619be503d18
SHA10ab492ad2045439bda1cd1320ec71a72a1bc5ffe
SHA25654bd689eed3784f33eac3eddf5c323cfefaad267f80419deec90531e7fd64a8e
SHA512a3ba716f65bbca27ee1b4e55a5f6843c86b43873fd6d8e30845c6aa28a90d1089be0a09399a5f99c415bf1757434a6d37097681a6c8f1fb77e2c217d0eb46b29
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a5e55ed120446ee884e50b6381da8233
SHA107c3786d6d800dfbaaf659170197b501100bfd6c
SHA2565aa979f1f6f1befee658bb8964c9503fb1273d81917d1cd006f79134059fe7aa
SHA512d8d20669790d02e007eb23ce4586badc52a1eacd36ed02bbc0421aaa54ebe88b78692836aef2c8e31452feca682e5a47ee120bf6aabd4770c9ea3360c379d5a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b17cc5aeaa06b009caca8016da88a401
SHA11610b24822fc183b93b3a9038ec37898c947c6e6
SHA256be88d38a2578d7380fa826950c21feb49cdb7554bf7e86895661af772dccdaa2
SHA512985269058d31d92b09f0f76d3c5d5aa0b3276f9b349789347e6881d79ca935267d7240b70647989c5cfbeee5fe275bc21c57b5aeecb840d8ff168ca233516825
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5af27d35af06abcbc18a26a22c6030637
SHA19a5aa6c15d114aff53730bfa82da32a1623fd00e
SHA2568ef42258e2a938f717402630baf813b1fbc7f0a4aa01503ffae77a046043ed96
SHA512c34d3fe31f6d0af92391df64f8145e2239ed457bb72403448f85af377705c7fecb3cd391ad4fed8793c1ee2cefed7d774baea609c77cdb2fb60fc13dd4692262
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a