Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09/05/2024, 10:48
Static task
static1
Behavioral task
behavioral1
Sample
299819883952c4e86676a38b094e3e9f_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
299819883952c4e86676a38b094e3e9f_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
299819883952c4e86676a38b094e3e9f_JaffaCakes118.html
-
Size
26KB
-
MD5
299819883952c4e86676a38b094e3e9f
-
SHA1
21f4c0c4c3b6b1c6929483a6d09b7ea3cb06f560
-
SHA256
867e33093efc796dccfc8d3c7dd32b5daef25f7be719b203d127023b41c21657
-
SHA512
91ba9aa16674b740699ca9fc420677a175aa1f132cca9318df6c0d990a7ea79955bdbabf1a9ed09738e2d8ae03c45ab031462e1a5a1a6565cfd336c622b15cd1
-
SSDEEP
192:uqvz73b5nhKnQjxn5Q/gnQie7NnonQOkEntQCnQTbnFnQXCJVevo7NteFo+NzQ4Z:nzQ/wygcZh5i
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421413564" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a96069000000000200000000001066000000010000200000006ecc88911562058e78c0fed0440dfa689fb610f8e407e0a5bc4e27e714a3af95000000000e800000000200002000000067b416c5297b079e6f2e2f684a11a851381beaa40db39a0bdaff2a361c74b15920000000ecd974862fbc0fad9c9a416702a39496b23d50f3fbf9f36f0a3392eb4e11772840000000052b4dc1236b534959bd9e296ab5e5898d04fc7ea8232a4d2240fa311946e0cb198adc2d156e3896b6f3a82bcd809efdd2ce2e635efb22c900664e8a30820cf9 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 3048fb78fea1da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A41B80C1-0DF1-11EF-9034-729E5AF85804} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 912 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 912 iexplore.exe 912 iexplore.exe 1788 IEXPLORE.EXE 1788 IEXPLORE.EXE 1788 IEXPLORE.EXE 1788 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 912 wrote to memory of 1788 912 iexplore.exe 28 PID 912 wrote to memory of 1788 912 iexplore.exe 28 PID 912 wrote to memory of 1788 912 iexplore.exe 28 PID 912 wrote to memory of 1788 912 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\299819883952c4e86676a38b094e3e9f_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:912 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:912 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1788
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD519215c15b3e827c8dbc39f59dad339ab
SHA11173887ec50f90c9751fa613c46cf03d4a1fc931
SHA256cc2a17f7f8d621fd747eedc5b5013a70452a8a686237b6fce4b8f81cef73c686
SHA512c2b1d37ce4d67f715fb5488b28437ae857067ad16078c9443e6920a6d85afe49fe809b769423082d62f68d7478708fe2345cb84a58c66d52ebc06043544620d1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5845f825446580d1eb2f9fb9bfa67b22f
SHA16687fe19b55783b5df0cc0c13642d965456f3959
SHA2568da5ea0e45d8aa59a7c72ce25786aba798fe84050958a97553b7f21d410465e9
SHA5127db18be34e40dafea93437bb2f184b3fcb72771d66efe62f045dc4e0fc7a3c232c60ae96ebd738335c28fcb726733e1d3c0dd1d36f3898952fe699578620ee5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5abb4618eef1d91ab8fbcf79c97fb8a8a
SHA12da5c1fa4bbd048d07a332e82a8ac30c5ea8b12e
SHA2565c01147db7d8988772f727e66ba6733ba2a75db8468940060dd87cf5a2565bdb
SHA512d87e88330896e8b43951ec8941a5ec5b11dc276ba0aeef5fbb669b26b9156ba9df4ffca1e7b1a78ec44934fb604a6ee39825f36ff7761e542b9fe754a5d0c07d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5034a12b124122a3bd177fdb9a1c4b252
SHA1d1cb274978996f45b4f825e971fe9aeddf0def40
SHA2560ee2760769e79e5262829393d0db8e9a12455f9c3767296ce0b2afca32d8dcdf
SHA512ec086e15a922af9ae3d6c6a56a389decf42ef58b5ea8b378efe6ac95adbe9f2b7606f097c7a4899d449da12c4d0e657482e95a8ad6936d907a065e5b95fba1ca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD571eb39c3b6a68f12e74091f82ba4242a
SHA11d43f2a8e474ce1229aa761a64b1a810ab1c8f40
SHA256eae24e8aad15be024973cb83a5737d824c9a4676d403ca99eefa0c23ac21998f
SHA51219956cf1b3fa84e4856c5af0c08417926f77e12cb67a49d3517772b88f62ea52edd0387f9180e81c4b9a5f1c59b04dd8e86b1bca7d0bc694b2f5b8ff53e899f8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54b262dc301b3c3a89edd66b229b075d0
SHA1c061827f123598dce702c7bd623d9998950c9eff
SHA25603796ed886da8c921263b21f18f57d23eef243a1bf4ddfb7ec5467feca9927c4
SHA5120c532bd978e56762314d94eeb1a35cc34bf2df7c37edbc000bb5ad29aa5f89d83e144ee811837f04d897e91848cf60e1cd1cd1aa7b47e5a8c7f312e7300da1c7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59913131b7fce1a3a990f03412c555af2
SHA1b82a636ac1dce6c4bfbf52544929d52bd7e62109
SHA256d9098c0bc578eb626107727de6ad517171656251d7b6cc15cb5a92683b38ad76
SHA512eba85d3308c5daa13168007c3c5cb6453c9f41f536bc88d3c8459bb582e711b6ed2b2dbce403b75a4bd688aa37674bc205f77ebb7018a6bf69540e01cc8e3e85
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5588a92792341bd44267975a72dc701ca
SHA1bf2f3ca4ea2eb96dc41d12e49348286fde0c2267
SHA256650ba5b206ca0459a379c8a372a7622e2a1a8261bb8c7a5b28f0ec917c19455a
SHA51289fe41538c74fcc6e97f7782154cf10358040eb09540d1c4d9c47fc63489f1bdf82287964dfc50d3b3b62b60f9e2e5e78002b6a8158671993e088862ab67f92e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD568f10f7e5c1308d2c11209832049ef91
SHA1293a00dce47befa1b8c74ea500171a6853bb2fed
SHA256503c9c6e78b24b773443a485f487d0d383c5c7772658547f67b25a8e9efdebd7
SHA5122420886250cd3c59c1365f05e1a63639c1d860c1b6610f1ac576c8d8b030cb18f93a84bf7d45b8cf5787f3d260a74a3feca60f5e26f9d79ee477f004ddb9b2f4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f4f58648adfdb8aefb54e2c34092d09f
SHA137766193ae49d779ebbedd136e364084344913fd
SHA256d7c3f2c06cb5321c1ee4ab777d461207fb41ba19c7d89ac7edfed9e0d5055413
SHA512428728bdd6fd7bcab18b9a0e6a819ec7cd4165219fa9b202d8a01c07aa2e31f0e99a801fc6be7ce553bf0bb4e028abbf022f32ac84912a2988b57fbe01f43ee3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD566a4698cbf6a4d196267bb135383d487
SHA1356979414df8226d6ace8713c81d5cfbd8d9d098
SHA25656d8881d5fc7aa562e6a9e31b870e338d21274325b38556ca155a7fc9b651b16
SHA512d974a1c88d3c15866d529f1a5bda13901ea770a9cb4d7fd6c3d34e8cab2ee9d4aa945e68819f83783df2a451e44b6e1fb48802524f5116637d3893e52fcce640
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e44d836ca7a567ed12f7bd022c607096
SHA18a2cc05c9b454785ef5a7d53758972b1d8e4b802
SHA256399bad2e876f167fb7add56fb48113d7da8fab3640587a9751ada274ab1f6afa
SHA512c51c4b558d6957c22621a325ef50e90b61418fc1f3f6f8e04ea201d37ade02a839ae740ea99b30e695618a80e8aa45669a5ca98dd7d613c5c412357de0339562
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD570e5ad270596393f24a99c794e11bc31
SHA144e6dd940ec1f81a3ac21ac55a2e93945cbb306e
SHA256f4067d85db06e8b4ca71cbd3e826b9de885e9fed40748afa3c529316ad97c6b9
SHA512884558b23d5a62f630b744b5627b9ceb92e0acfd144dc36cb4d60aa446d2ce7c349561b5ae5fda435417ff42230e22b80f22147df4350b6a9aef674242b5e528
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b7f3a303b1fa30ceba42f2d8965ea58d
SHA12119d3f525bdab2e5c629ee136f4c467dc491010
SHA25629edb1a802485b9f0f785c6d7feaa933f54689c44cdc732739e3d2dcd8349fc7
SHA512fa2a335c1fba9e2e60ccd71668be1e39d5a4430257cf0c0f96e83cce84f8db1e22a50ac7f43b1eb4001dd02a5e820e4ad0d5fb1c44184a05cab5f3c3adfabc01
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d868b43929c12aa6f1a727d7e40ca646
SHA19ff7766e3927cc10b921042efa25dd58da2cd2ae
SHA2569a732545081ae9a0582b79eec2d442b3030867e8ad5c6d1c297334879e5fc074
SHA5121fadd9affaf0c3b8c2a95d934935041752a34a2725b72d3b55811d2ee1654a5719b4a917c1320f1113dab04053efe86ae2b2e9c2a8b78920184a51d8de469e19
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53349f8ba9d393293a87a51719d7ad42a
SHA1bd80029029be740b784204d9d07bb6c5506cb43a
SHA256d72421716e4946fd36d56c883114d6f223cb4a43d046374da8f9edcf3b60d3a8
SHA51214148e3ab878c686e5bd1866e33fc6355911107a624e647c2d6a534052832c27bb1ef81219315023bca5928bea6bb75dfae55f6752d104129b516a9dfc3f94fe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ab432be98f3a1300cb8e790652b5174b
SHA178da221da477d656df9bec397ac4a71b25c4133d
SHA256f2da52582aa0f3af6778e9693d8dccfafce579f98089e2f072b82a13111eb41a
SHA512b86040c6fef6afe827fab2c405d842103b55adafd130e9f2a3ff9ca67683096be80befbcd4fe1a04ff31d5dd2f90b0b2c89349e455b24e673e913dd584715858
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a