Analysis
-
max time kernel
133s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
10/05/2024, 01:12
Static task
static1
Behavioral task
behavioral1
Sample
2c9d9b6e2167e5f5f49dcb9359a74210_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2c9d9b6e2167e5f5f49dcb9359a74210_JaffaCakes118.html
Resource
win10v2004-20240226-en
General
-
Target
2c9d9b6e2167e5f5f49dcb9359a74210_JaffaCakes118.html
-
Size
916B
-
MD5
2c9d9b6e2167e5f5f49dcb9359a74210
-
SHA1
cbbb828d8f40d13868e97a584df47a299859c6da
-
SHA256
10a600e21c2f4bc279772b1dfce956d7a3aaab4da874d544301edc85c51137ec
-
SHA512
e095304c2d833d58bf0ec46f7683259357365cb6c9f7c8ca8e7426cb67c6aafc1f34cb58942a5c363c429f00e336d4efadea0b4de5064d74a363b231fdf6e675
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421465437" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc23300000000020000000000106600000001000020000000e523638491ed13b74c0c2b35d0d272959b5fee851195526dd3f9222552c8f2b2000000000e8000000002000020000000feb7808813815192bae09fc9bf9edc3f5e76ba8a8db2bbfb734b398b05b22efd2000000081a68b85ec46a6982ea03401b7ade378ca9c85a5f99ee426ff68a4c46c3c99fa40000000d42ddf7ec6d00fe598e8d06d69cc5bb3111618c017c25bf92e57ba6ceac50515af8053a5ea7613b8c1f9978d69e2fa394fe5a57409d68a9a8b0becb86ac76d63 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c076772e77a2da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{6AE50961-0E6A-11EF-8CD1-FA3492730900} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2192 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2192 iexplore.exe 2192 iexplore.exe 2288 IEXPLORE.EXE 2288 IEXPLORE.EXE 2288 IEXPLORE.EXE 2288 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2192 wrote to memory of 2288 2192 iexplore.exe 28 PID 2192 wrote to memory of 2288 2192 iexplore.exe 28 PID 2192 wrote to memory of 2288 2192 iexplore.exe 28 PID 2192 wrote to memory of 2288 2192 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c9d9b6e2167e5f5f49dcb9359a74210_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2192 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2288
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD526572f8d4bf65c8f380e4ea1b60e2eb3
SHA12d9b997dfb846a83b5811940fcad8b4a9cc459fa
SHA256e53719c24309a45a1b71953157425ce17c52f457cbb0dfd6f9da031f5aeb379c
SHA512d4b1bf2df538f0671e0c3a1a30b72bfc571392c68b825f78020ee5c867b1485b6c7fdc1f96bcdf6356f70fe9728e7d48819c6cb93f68f45e2c9f9e5bc025998d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a7c3ce15376149af8bd699c4ff7429ef
SHA165adebf1ff20534fb1bd4680531843ee205f5138
SHA256744a2089f83428474251e5d97ad7f3b39ee86e3f6cef002e5a8f22ba4d412b56
SHA512e9f11dd75ef1bf1341b8c2f409797a555cf5384ab346eb27385256e861404fd2da5856638d1edbe3d46ca61aa1b29980ebc2b0cf42e34ced109d31da837d568e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dd6571d5ddc53768e291d201b9a255b8
SHA113f577ced0f4b55a91c3c38b9d18a1519e579eb8
SHA2562f0df1a198afdd1fc6abc24d56284a06ce34624cfe3f60e7062aa0400a214c2c
SHA512ee1ed25ef82b144bdefcc09bd89e6bf2d201291ea55a22fd2614c048d2f63b891db5a0676a732c806e3b9579066c3747ab6233e9d24c984a33c0422e8f0020f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD538bb6741374d8e500269d2b30f2efd96
SHA1fef7b96177284e9924b1029c8781015aa77192b7
SHA2568270adb6f23edd0ab0b8f01f1f70ba470c059a5ec832bd709bf009eae60ae0d5
SHA5122f977f4fb8ef7ed1c1379610dcf353259fb2d8d853b220994d6accfa50d688bf7af133498ea781d029f9ea7a3c9b37e6113bcd4e3f541c0387826bcc69046574
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5824f2c22c719619a08378938a1f09580
SHA19580d35e80855bd10e47f1664bab4381261f0267
SHA256fe9f47766c976ef98078104cec614054b9b761101601c9bd13c63a5800aa31e9
SHA5128560f9239e5e625bbcecdf672a737c0990174a834a93fa45be97e69bf3132b215734e3f51f1accf3047cd8e17909f319894b44a3459c83bdd625dc44acc06140
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53a8db93cab8034b68fbad0ec6ec6dde1
SHA19e8f6b20a21136ba77fd6db2e327904a6acb1c84
SHA256df1f642621df66572ddf4b17ee81825fb54567ba6550ea48c0742b56480783f9
SHA512143ac427c7026fb8c48a4ca77248325676aa85fbcb1bf9b5475409101b68967cea56ec8bb9a482af4dac88310e11cf5e5ee0517bc1abd3930664cb1d7edabde9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53b9f3c8bf958bc0542412de43b22e2cc
SHA15f91ee69ce46379a0a4c9a3d62c568290cce835d
SHA2569bc59b714f2f8183952aae76556cb58e97d41a1f58f1786efbabc73b63219ee6
SHA512cc346544c7062447b45310a90da8045fad7068946f688374e9cfad3a3e7d840d4325342030c44aabc12385f2a9c6add4ea09c64e439f1558e0314c9bcffe6bef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5428f92e24905ba80e614de67d42b50f0
SHA16c9c215e047d79c8b92546ea2c4d3bb72bf46600
SHA2564ca2ad2be5e4b42602f54bcfe68223bfdcf49823c29298699cb147ff0d4d50c6
SHA512f709ee60de551639cde52947b420250b2e58e66f46b6ab95f2bfedbce749e768e731dcf7f4aaff82602cb5dfc86246429f14e3232cfd9aab609a491963f1e540
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b8f729e36f3dec1b6d845c5d13225038
SHA105d3b9a04d58062339968ee2a0c0275195b07d50
SHA25676159772e7f84c708bdf1239a517500c304e534bd2ae007e90a904b8b97a5902
SHA512ab91908df2d58118743855d92824f55a1e19186dcff4cc4d13c8fbeca51255a78b6a395c36e6785437b26c36a745db7e088973f87dc066b7a38234623af76c04
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5172b827661ea0a0ca1578bd2a08fc1eb
SHA1e3d4a6374314a642d042504ca8881581f6553ce6
SHA25662fcc57d6882f9d9115e909c55582bbfb0823cb9133a7df86de435c24e6d1018
SHA5129a7c69ca7c5c5293faa27976a3a711a4358c5c7935a555ce29a9ea74d77d9451a8413f498639d6ce6b3905219cfc065e12625cf4ee33fa7f3a32ed16e6b13149
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57afb1f4cdaa75dc4f352e4dd08d98abc
SHA1e89e7029d905a5e2c108625ec391a16a216544e5
SHA2561b39066daa8e8cd385f6dcebd27e1cbe750fe539aefc02c4740bc4bb96c92f26
SHA512a72bca1c31375942e7d49bccceacffca6684e2c1d1fdae735ddd61d2637281b4e3c3fd0eaa7c51bd7032addc29bb6400104ee1095b72bea01983b7f94ae81960
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59fed678c9a6edce8b2f50fb649a2c77f
SHA1e99e78271f132fc9b3844be66d128c9f076a937f
SHA256bc5d799fb88e06d40a612c20bf1c46e15c3f3c0144628ddfa477426665c2d454
SHA51229e28649602f36e024b872644bf3fe8c663a6ddabcc6cf2631ed03ce5c696086fc03660a37a1bf91fd255d35c409135c8b8cadf9e7cbd7c28625fc64b283f7b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54841e87b24711099c6acdc36402b974d
SHA1d4bdaa7985902e8d2ba697fc67bec24b7cd40696
SHA2562acbf5201deaa8cff17ffc012016425a6a2e07ecbb0c4dc735e56053d9108300
SHA5128884e0107374f827938566b94dbc5203c2c951712dc40f5a4d07e3cf12ca5edba470874d7b0310bbd887f5207e9d45b2e6a3c6bbfd699861a74e8bda94bd1bef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d5764575f1874f330140dd7ef128971a
SHA149388d414d6daacdf609346fac5fdb9c0b8c8fe1
SHA256855727a4bd6fbd033ad22e365f26aa77bde88671c5aaa57c2c2e3c9539344211
SHA5125660d938997d43a1d903c51b871dde84587e4e3bbf4def28b4900960c1ed612c80214a0b09754f193fe2c050182dd14c39896e9c2a5758d203bb8b9dde79a745
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD512b7476d6f025e70b9a0fa00ddb08637
SHA1a8c5bdf0691401f699b1875bdc9fe6618e95d7c2
SHA256050701e67cc82249da64eed0c99b82f40a868e6067595b8daa27b4121962327d
SHA512a19dcc5ac06cf85ec9eb230925dffadbe958205c236a0640261bc87fc55e392868c61bd6f09c113a52ff421124332b8a4c714ab503d7a9db85766de6a1830304
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d0764b44da639a6233cac8c89b3e17a1
SHA1d289bd5ae706eb784b175007a0b3d3ec8c85ccdc
SHA256fa72137a098b6db244fe1c6149d8fad7cc8b5237ef834cbac871d6ac3623f8c8
SHA5125b226f27b83bf26cad99c1bc760ba0b5efd7ab7b238e68e7d10493e37b0300174078d2ce82045516aeb7cde50604600869e5f538be2e2f857e25d71b589ad0ca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aba21c930fa977221cfb7325a5023fdf
SHA11cefe88d0f279793c828cdeb2863fc9883fa37d5
SHA256577b5cd335012e9350ac95b91f075de8bc49082adc5365f710362c1608978a53
SHA5126ae217bbeb3ec551fc6165ca4e2f8630b99fbfaede81b044c64cf8b7721c1545189b1f8ce54d097845dbb104b4d9f5d17c3e9953d9edf48a48d41e5b74f109e7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD591e8419fdae5be198b1de183718e8fbc
SHA19d18c0e3b45a92d08df52fd9f2216b215766ef63
SHA256fadd52079b4e5bcea512d0541ca81cbc16b7071b22eacd2e94fab8f8e4ee4c4b
SHA512a550140370371854c37bf2b53c18a927d9c5365b333e4e8299661b25efc1c44cf770d39c00160c8b9e95d26a5eefefaae33b275564de9fe3bd88039ea3ad5952
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD580bc3cb7f1412cc313c40a5c395c5ca8
SHA1d4f779e01811df2c1d7fe6f4ae1b2bb8b34b360c
SHA25699e2818bbc07148e48623d5fe62c64da6e2bfab6f926861cfddbdea45bbd3c3f
SHA512aba6765a80334f208b37222fc53c95e586d0ad63abebf5a415d5d7251a1b208b4a3cee03b5dcae8d16b88889cb628134054be3486ceeb8b509d94bec79ae5731
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a