Analysis
-
max time kernel
139s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09-05-2024 05:08
Static task
static1
Behavioral task
behavioral1
Sample
286d330490838745057ed73de837f89d_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
286d330490838745057ed73de837f89d_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
286d330490838745057ed73de837f89d_JaffaCakes118.html
-
Size
69KB
-
MD5
286d330490838745057ed73de837f89d
-
SHA1
9649e85cec86250347857e2da8f7d196518c5c14
-
SHA256
178a1fcf981e43df80a67123798eb1831d96a30c63756f97c67708db0415ea27
-
SHA512
7c49f61b170c4269ad458e8553bdb7f8cdbbe390c81c8cda3a5dc19caf0eff0b2869f9deece5ac8b84aef19ea836cff1811cc5f08059c349d279f4829a024136
-
SSDEEP
768:Ji7gcMiR3sI2PDDnX0g6san6uzB6HoTyS1wCZkoTyMdtbBnfBgN8/lboi2hcpQFf:J3eiITzNen0tbrga94hcuNnQC
Malware Config
Signatures
-
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e05f1607cfa1da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{327270C1-0DC2-11EF-91A4-56D57A935C49} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421393187" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a9606900000000020000000000106600000001000020000000b491c6b234256403d43345204a7eb44a985e6fb7a3b1bf09e988313df7a1e502000000000e8000000002000020000000f9b3306186f12e81c802dcae313ddb3b9ff8acd7c4ae165faba5323bc00d66b520000000e02678564094a1bceca430121befe9195449580a67f5bf81cd13ad9b8523fda140000000f2908967c875cc4aa37bcdc61892148ed143a703d6422318da1e9ae59286d4e1c6e1e63c955c0c5e2d44f0f08efe8d0fc3ec94cb2f5cd09e2f6ab61e53812f20 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2936 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2936 iexplore.exe 2936 iexplore.exe 2120 IEXPLORE.EXE 2120 IEXPLORE.EXE 2120 IEXPLORE.EXE 2120 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2936 wrote to memory of 2120 2936 iexplore.exe 28 PID 2936 wrote to memory of 2120 2936 iexplore.exe 28 PID 2936 wrote to memory of 2120 2936 iexplore.exe 28 PID 2936 wrote to memory of 2120 2936 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\286d330490838745057ed73de837f89d_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2936 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2120
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59a3b6e3ea6bdb40b1f760bfebf9ec249
SHA12397d0e805b90e39d5ae19c3921c776cbaf135c3
SHA25643a79b9966f2346907660f1a3a06290e9971b37c7856fb858e403ba7f9aaa9b2
SHA512a8d4820eba832e1587c2d91a26e2c9e85802e8216d5e9dd491eb84768d85be4688aef59b1cf4b1ef4cc4b416f0d5128c108a86844806d60eaac49a907eaf9290
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f4f33eeaedd30c6c66ccf545c7a18fa9
SHA1755bea41f2e239694c7ba070673bf8006c63e5ee
SHA2568b1f81a9ad62cf834269c0b8f4cc465b8501043ae3cfc50dcfe885bbad031e5b
SHA512c00220ff525a8fe1c3804e37ceadedfa79e536aef7d6789137746ac41c0c12d2bc0e4bd6cbe36d5ed5dc3219dd460aade33a84d287ae0d5131dc85146052bb1c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52970ccb945ef50efda637beb38709652
SHA16caea69488c59bfef56805c738186b33666ceba2
SHA256d199a890bdf7080a4d564697cf9fee70f3055380cba6e7ac2e74156cf4425e45
SHA5128dcf0bbb61c0f106e7e1f1b4c9340f566877e28efa170b5f2a8f6b5a7dc405ad3b3e69894cdb15b453d994af1eaa0d77315c3240dee4c7ecf7e41fe09b7f0ae1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e83ae8286c41e7134319849a12006804
SHA1b3b90c0724e581cae17433154474b496877c222e
SHA2569ea779761103df81654fd799ed65a7ca487808e8e9416b5a633934e3d762584e
SHA5123ce2c226b77b259330ad0e34d942e99426096f4cf69afee37996c36ca4723e5bdf04dca5ccd88261fa950c2ccff054ac8f059d94db46f17cea1fc8e9ad6c1d7d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53d7d311f1f4b38a546b0f8bd84f080e2
SHA1ba9c3360b09b11392e4a3015fc5f39a579bbebf0
SHA256bc4bd2cd452fadf580ab03851cd53711bcf493615425214580005fa93217889e
SHA51250151e58c128d885557cb490b4c19b87be76aa6daee9fa8c562cd6db27ae7b55b9ade89c6fcfd3427bfe9c7f0932c3d5e069770c8dce20a4f546734c31602fad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD500856aaf19b566257b5f2848fd6ffddc
SHA125145bab0887cc9579eec97c6b73c8199492dddb
SHA256457cfa3e438bcabdf8859b21bdb716922985621cb3705aacd0d1032638641c1b
SHA512b5627814cf45e868ab0a14498df3e407d5de39575a456d2e1a45d594322ecf6894b55765f9ff6ee1eac029af0dfb4a595f0a98a46942c474f7e61c7edf34e26b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59d624e725350e3984e83c5846f9b5830
SHA1321d5a49da4e5e082bceb0d18decb9fc3220454d
SHA256abf3413262d17c0f5173707bc1409fdf8edf55b94581c5181fd0ee88d880619d
SHA5123d4ad1d453a36ff5495ecbc4b17ab27abd53e51b35167588a00bf8072d8e620981edf0d19a2573b5e012f95fb62deced133dbf89733229af0cf7a9e9598f84a4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ec9fa363950bb3c87c8ab96b5813d788
SHA1a9806abd52186b38d1a1717f113db8204f630502
SHA2568e5df847a8a02820914f14b796cb13af611a704c185bddbc3f05f0ccaeafd543
SHA5122d32c975ae0abccea3cc04c63f9f6f9bbb59a7a1c835ac729c4f58aec819fe187edc3d85c653576f8acc4ad2897782d6d781775750f9b961232e08bc55244352
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD502e059a21a09ae233683cc8807e23d8d
SHA1d6ce83f220ad64393e459bad880362c35c1a0782
SHA256b17e72de8d1f1cd0c4cadad5c20513ae818291d78b5add6f3c1a9224e922d397
SHA51248a9171d802f900e15bacdeedbb9e2f20a8b120cfb5c196404f58d7a497e6d58bec9b9f56b97a7736bf9281f01349af391a227a9422e1abadd01fb097b30c81b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD519272b462d7743e1fd5c167e8c3316fb
SHA1e73b1c4b576421ff1def7beb76ad721f3277bef8
SHA25648e35acc1760b1a9f5856b6548b945d818ed57be699dd918d155390da3c93ba7
SHA512bab91a7781170aa25fffb6142fb925714fbb1507e09fb8c9c3dd8d5ce5ac3baa378c1e05ffcb792c4fe6506adf0e11cdc11f472bc9d4c412da1bab4138602f4e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f4cc417ad741e2679df5ca80f253e443
SHA1a1918b91fef78570dec8e805fb5b148c5ea9e2d8
SHA256973ccba16f50a8d0886bc7ff6a3e65366cc71bb555a5c13bbf67c96464f48e19
SHA51214c045f87c40f2096b768fa3f98021d67aceb7f1fed135c346b35eed907bf893369f253a7844dd4a8cd57a9c4bdf08af7cf0309424d5532890e56a5b8288992c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54b9a4be09f0bdbce43c7ef10d7165242
SHA1b6b6f20164751fec6a61476e6c6686dee440750d
SHA2569941ce06e5d845da4c5fc016822651abb7e703d68a44718c73f4d22314338a42
SHA51212e2f3d7e652a1130b32b29a1dc436ea09fb9b112f2aea207fb4ca222a49198c0304dc7be02b2bf530fdf52c38e3bedf21f476cf3878a972896c9a7c108314ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5717a2ab6c05e87d90e474a1982585deb
SHA1f229b10c2b8a12dda7f24eddb5e39aad2f5bea86
SHA256452447880a30df6c265d7f9f40fd2e1d25c9ed9da8c37d5d0b449e4c8ec04727
SHA512e804d11e74fc2a30ba20f3c19cc49fce529fffcf46fce32771237f5615915fce4e47803488584373877db4278149a19e23a27563e8d427c7dbbffc5800591c2e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54a6c55f661acd3f894077f96182d1746
SHA134dfa98b950085854b1697dd959cb4edf72e3642
SHA256329e19300da41e77ba8275dc6b0e4243553612e636dad7a1f47a6b8bf9b16ec1
SHA512383d5eb6458d28c2823a28fdc7e227ddbc90f067b83aa5990358fe4db7372f4533220e00e67e8a96728e1f714f130a414b682e3d36eef9f48d5804345e356923
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51dcffa3806c4a59677fc91b7d3470f95
SHA19ec4c38c922fc4fc41f6b58d005df5a940d9f397
SHA256f134336c489c0f126e4cd3ca23b74b7485e301f76f4dd92bec05f34f4d67760f
SHA51257e06f8379c02050b9529ad417cb6d3450494f9c8f071ec16ab34b90d9943c2f704530fa9454b3052a1b3bd2758d1ac671722547e974637776a9169fd06da34d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD557be4ba149352c3aef33cb5e9e68f7af
SHA1e6c891907c5011f3928082886a6c47bdf9bf0c7d
SHA256ca7f9e99cdefbd5f164f979d1dcf44bf92bed19966a4eaa42a6e4d2c316635d5
SHA512006930c90767d5c46fe3c3df05f18eda9f1e4fe659e653250bc2b3ed950ac41ca131f2696ba243ffeca2e6e6e01b1f79f5475825d807139e8bcd3f4c9bbe8e04
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5de98ea7b3d7997faaa113fd33fcc4ece
SHA1c136f970a1515c2df70c302f131791e2cbbb7832
SHA256e0882234a610f2f292f50e02a6c00864cfb5786b33e54a2f7f162ff86656d2b2
SHA512bbf47dc1c465772c867bd056ac9ad86d29f7cc7936cb89aa001593eb35745f37cf6bec7bd92def30985964e1246e03b15b2499b84753ed71633a26459abe7990
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59a35a199847de025024f6b80bf58db67
SHA1e3161b4a11e825540de91c386d779ae372604312
SHA25698c124b15ec03610f3ef63837c15e88cc97d94b763a1554b297f9eedc20439aa
SHA51248dd05427f472e272a31127679e87a2f5cbbcd13190d4d67a836d0ada0df6b0e1b123f19a21b80b82000f86c567a462e09482ff5ac3fb2b0ac6e2be8012bfea9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5389dfcfa4b3e20f776dc83152c3cdca2
SHA1e0f8de36c3fec6fe22421e0f7bd7424f0dabad12
SHA25639a9feb59e00b941955c5d106796c141dd032133a7b78bb9ffbae92b6e7dd6ae
SHA5120fcd830eda2fd3f24ead5f81f2e006df72e2c35edcbc1d2eced3020eb810f4a3a9ab6737cd9c67b22bbcf37cf553ec3e383e6b1f46630f6383099540d658c02d
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a