Analysis
-
max time kernel
117s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 09:04
Static task
static1
Behavioral task
behavioral1
Sample
24225ef2f98fbe55e2e5ba0e66c6ee5c_JaffaCakes118.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
24225ef2f98fbe55e2e5ba0e66c6ee5c_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
24225ef2f98fbe55e2e5ba0e66c6ee5c_JaffaCakes118.html
-
Size
23KB
-
MD5
24225ef2f98fbe55e2e5ba0e66c6ee5c
-
SHA1
a7e0bfb4516572ea9a2c810b7fabf6df54338ac1
-
SHA256
6a33347181a3f96a2077cf169b56e23eabef66d9a4eae240ddc1f17a4e6f09e1
-
SHA512
4fd28b053afcf19ddefcb1ed504bd9e364c8529bad91b726116b53a9bd860b2c6c2e59133882c6a2172ab602ec7557b071b7f7c1ef3273a46b949392b84b1801
-
SSDEEP
192:uwrGb5njCnQjxn5Q/SnQie5NnLnQOkEntaMnQTbnVnQKdjVvMBZqnYnQ7tn8Ymn5:oQ/Ye3D
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009b106788dea7af4d98683a8983feb7c600000000020000000000106600000001000020000000a8f9438ad865b88b5cf9dba74f6865ec8dcbb6c16dde752e8f13f2164134f01a000000000e8000000002000020000000df9a4aaeccdb82af472961c95c9d72ac26e9a95f65b86a52ea080d6982799601200000001655095feffbb074a0e5e08714da2714e95350a990affbff376d5ecb39bd8bd8400000003696671cd4aff5d8b2e86ab9eb93fc263189115ad5d1da1384c8e5fcd51033cce04f802f370a159b3ca739656b49a8d08a9cc74eb6396519530e414f1d587001 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421320923" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 604120c726a1da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{F255B771-0D19-11EF-B0F7-6EC840ECE01E} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2328 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2328 iexplore.exe 2328 iexplore.exe 2204 IEXPLORE.EXE 2204 IEXPLORE.EXE 2204 IEXPLORE.EXE 2204 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2328 wrote to memory of 2204 2328 iexplore.exe 28 PID 2328 wrote to memory of 2204 2328 iexplore.exe 28 PID 2328 wrote to memory of 2204 2328 iexplore.exe 28 PID 2328 wrote to memory of 2204 2328 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\24225ef2f98fbe55e2e5ba0e66c6ee5c_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2328 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2328 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2204
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e33fb99fb94a189a95c084f1dae7dc79
SHA1e8b80da7ca142e8e2709bf856f241cd0fb4d71d1
SHA256d0c61b8275c0d0c1adcb693eaf63e2829e5c2df35fd8f0113e5b0a84e19471ba
SHA5128454250656c42c34c8d5bb8c90d825fd194eac5d00d6fe1646da7381ce370e5ee0047fd7ec0c2069dc83fb3be4331f5f340646b79cbcffe8d39564610c2133df
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58a1143134a8c9960c2c301e741060518
SHA111ead9c15c405713023de2fdf3c3c75e9717fe6b
SHA256c1e66b1a0ed64e89430817b1dbedb5c005be1fcccdfe5602f415385d123f536f
SHA5128062b8802cc73ebce5cd00e89b401eb45b438a3fd87e4869d7ddb74dd1850759c4bc98900507c139d11d57d18785c5f285f3760e4f767e7ed9ad5d8b57b061a2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d6fff0b6bdb82b82410f1534485ac8a2
SHA1ee21988750133b8aa8207fc960d28f13c5694170
SHA2568a1975376536ff731b3061be9416b7243aeebbaa9b3dd72af37160824c3757f3
SHA512f235dd3c87f4a362a7a60eab292bdbb35c08c6fa41b675adebdae50da0b6c26d87b98b28cc64ddf43c3e242ccd1c8e5fc160c99b2d94a2695b33eeec6852a2f9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bc4c6a9cbdc843729de35d08bfa124d0
SHA1796daaec71642eda17d52634595acc4beb46753b
SHA2560cd1b015ed941b21e6cff82f4c0d9b5ffc2fb19cc15a8a84bd5e3cc551caba5c
SHA5120256129011bcd59217291e10aaca00217427ec165f8a50dba62b00a71efdf77ba8d3f0f99e5f96756a1aed05938e03474b9568a1531ab7ab4a6d3f346c69a45f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cb839b46efa4c7bd304a1112bb39e52e
SHA178b48a6f5dd5dc46420e885682da702d50b70e1b
SHA2564a78a52be1ae770551af1bd207cc6c7aa80e3005df61f95d834a07cac904baba
SHA512cc2d078c6f014096c29658cf026dedb51cb149e79fa829ac3fa1169859845709a19514811c881ec861ee043e4e5b78257ccf37ca6fdd549ab052c5f84175e66a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5649764bde701311a8d081771b67a7414
SHA17a5f2b676d4409abce29d228b5148e90e857e1e8
SHA25631064431d28bec9cea56cda50a1d004522a1f246d66cb65acaa53530e4f2ffd0
SHA5128c9f4cd971ecd04e160cd0e68cd7f4d28b7831497fe0f1eb6847cb8fdeaab7b595c39cf7863d42d89d2cc200ad8a202be7e22d70cd6265ce50c559768f50fd33
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dc7c2b2a99a81f1cd21c208b9bde924a
SHA1e77871d4a0af997561c02cf4478f3cb8a09f87e4
SHA256ed9480a00473f152061793238a514f596241201c415923334d9cb23167e4b866
SHA512f279ba5780efee36458fcf573388501a3762e348a74cab309983332230b09e26bc9be8489e0732502816c197a78426dbe1e57b01420c6034516b5882610a4f5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a96dc9d19e0fbb72dd896b74889c7cd0
SHA16416481cb49e4f3f310db84d81f0fcf54843a746
SHA256fa0a49f91e1fc44202c9ddf447ced2189943756af5e425980679835eabcb9d35
SHA512961cc170ccdd67165689b7f92830475f92b81da4182869de5a7fe562173d98d42a33c001f57dd813773a18d6c73c8a6ace4d40eb3492f9eed42fb7efb3af02ed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD572e1052108aa193eb7af1f23a2e1a09c
SHA10f9182c82387a3509ffe961f64a3586abafaf7ff
SHA2566946ab7f2f44eafd80cca562f1941e626bae0942f81faa557515b5258457ec62
SHA512de5f39833a8cf11b52c54182c3a3a462c66e7e75df92722d4efafd6c28b25295120639ae19c31ad218957c4918c4c734c767788d6b2c69a08ec682cb538cc2d1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b2d6acef53b4bf6321101ef9f5ff2f07
SHA13d94b248ee82f50d22215d3bd7421cc52ffba71a
SHA256f615a36029939b4ea3f456125186686d39bd4c13dcc0df1a92ddbe190984dc02
SHA5123836d46b7e929381c205b4162491ba40acf4ba5634ef858550eba0fe8782381a4b76b815e28480395b38f3d62f66b28ca973e4e5d0cfca39a5e7e20d16e3fb76
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cc15216f2eab84b46d2aef8a5b4eee1e
SHA1e3db37fef2de0f2b60e6b1207e05b5ac07877c10
SHA2560f82fa805a3bb83d1396b4502aa548358409a8141bf0cba7330270fef3b3c578
SHA5128f63c285e7e12c0bb4badfaef58a73f087afbbe7b4a81211139b6570bf00361c9073807b3d411f756d99833344d1387030274c63f777321c80e7491f048bc18f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52ce17aa846735482f475011a680da944
SHA1bb51f4bd9512518ee331c4a26695975d61434040
SHA256c189feea3b4fab2f34641c80db6f4b2e2e7a67be1a2f998832e021feee3d47f6
SHA512cc2b3b92cb51d1cff83d92a42e5f3134a16cca6093ffc9836671ed02cb13d53c809a55022836e8978664ec9eed492e5bc7875f0ee176564f9d72880e67495c5f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e8b093f6a02ed95d76ebd2584abe6161
SHA19e42b2c42faf9259af2eda0367afdcd709fa74ba
SHA256cd2c51c2c5bfa83c77ddf11b6163f2998d4e5b01efde18fca1bbd4ae8a2d51c3
SHA5120c2db4c42b8f6e13cd682fcdff49b4b38de8d472a22139ee1e312ccd9515c272c13251212235105204ee13577d67a0f208f32bea954dfccaa63eb37ab4c6063f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5744e3f4c8714fa078061f93a5570a23f
SHA1bd2795e44ee3af4b947e0cb73a3e7180add1dec0
SHA256cf6a7218c8a857673d94bd45387312aa706a0215c9be16a28714c3f6d5b2a51b
SHA512e87271a87ead270686cf319f2486e2f9a451b563686834135c8bfd1227ad4b5fb9610c781894ef781267576ece8cade3dc15eda3ca97645cc9ddc4bd9bb041f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5148dd60edde534ec818c6855c6e17c69
SHA122c45d584c0775aa9c546e905ca6b1dc5390bba4
SHA256782fe9cb832230d416d9193a219d40411fc69a10f3a32baa9a379cc57c563dbe
SHA5127b5db02ed9c7a16aa92b0bd9ac8f461e4caee9d074080250d18157d3034d638da41ecffa0d01c331d766201d7945aa8e05448d5d9f9533722a2c5a310fd7dbe3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50dda29b4339c1ba6e8062ab569f381aa
SHA13ceacc007a424855ce2f54902e9eab35b62b58df
SHA256d814283dd2f95ce535e11477cc12616b5e561c49c291a2160ae03d2866c09d60
SHA512e4f3b5b0c8a47428a82c7c88f2fd39bdb53eb5b0eeabe9d584abf977eba29b7873f8f7e6807bd52242a9ef21037bc2ea533024e89a3926da13ab3f436879fe65
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a154e0262a19283a8704fc7011fa2c22
SHA12d0630418da125c8f2197cf5c2d21243722995b6
SHA256f6e49d74dd660801b8b3cee548ec30873080cc277b5ee6608a0ed1e32455209f
SHA512d49fefa7ddef43f280628ba5de328e9940808b3a2bf33f49962348b496194301deb52aafe12a3daad7b491e1dd3b29a8bcbbe854005a0ab9eb5256f16ede54a3
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a