Analysis
-
max time kernel
118s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11/05/2024, 14:18
Static task
static1
Behavioral task
behavioral1
Sample
35019f75c54aa385ceac27d0db070624_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
35019f75c54aa385ceac27d0db070624_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
35019f75c54aa385ceac27d0db070624_JaffaCakes118.html
-
Size
460KB
-
MD5
35019f75c54aa385ceac27d0db070624
-
SHA1
bbac6dad9f68a9af227b3fb3ff2d58903b8c9ecd
-
SHA256
f568612aa1cc0a1094ab5d5d25a54bcbc1a85e0a3decdfc303022237ec246a8e
-
SHA512
6d372f94703c76842cb83cec512ed02d52f33efe4cc4f0821e8ace81db26852a0660209bc965ca18158047c9eb3b124f63f65ca94acc261715e4d25f29e0cf90
-
SSDEEP
6144:SDsMYod+X3oI+YdfsMYod+X3oI+YUsMYod+X3oI+YLsMYod+X3oI+YQ:A5d+X3/5d+X3k5d+X315d+X3+
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{580E2CD1-0FA1-11EF-A7F1-FA5112F1BCBF} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c03b9630aea3da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421598978" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a70000000000200000000001066000000010000200000002e2c2875393919e1277ca89b4a4054df2d0c0bdd97620f7e98f2bb8ebd276989000000000e8000000002000020000000e938ccec3fad77e893fe10e00167dc1f7f7d0f1b3b9c5ec9186487cef6bcb9a920000000279de3f54c115d5bb6466acd261eee94cfc718e11e05c33db6229a9decde9b01400000006395cdbae315d740e976123ee74f80302303e922e35a1833102897aaaf09c19bd4160041afb958fe03a4cfba8180a0856df382f266fa27060655f382abef98a3 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2352 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2352 iexplore.exe 2352 iexplore.exe 3020 IEXPLORE.EXE 3020 IEXPLORE.EXE 3020 IEXPLORE.EXE 3020 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2352 wrote to memory of 3020 2352 iexplore.exe 28 PID 2352 wrote to memory of 3020 2352 iexplore.exe 28 PID 2352 wrote to memory of 3020 2352 iexplore.exe 28 PID 2352 wrote to memory of 3020 2352 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\35019f75c54aa385ceac27d0db070624_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2352 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2352 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3020
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5979945548f0540f292e8c3d8691d5267
SHA1444fbb58e10cddf697951f5ea57e3e4fb129951a
SHA256bec605223153352d66d4f0665e322aa515be605dad7ca52ac490946db892ae30
SHA512d1df8bef5cd0e9cbfc2b420592c9ce1761abfe9c8954499dfb059b68d069ffcacd6acb0f8e9cc45c4ce4970e504210742c13f1e71b8015fcfd893cc3162717be
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD533b19293d2fa82870bceaa589c65b06d
SHA166144fda1184162f7d64ff297e5098b91071bfdf
SHA25624f43fe9b0ee17adac3eda4d2f4aafb717de7842b0ee5b521b1688a72d445b28
SHA512fd7e31ff0d7fdb3a85b567dee883caa8d613233e91cf9d66614082b699fca80d1135ac121ec3c5eb5794667fa244e60a98b113c7d2042788e08843479d61d885
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD57b0e122ef03325e58cce35e583f5f85d
SHA1c5aefb0e3d0f4d97f0d196926011343c40e6bbdb
SHA2566f614f839da962caead69752c54d1e03159fafcd12db1af176dcf7e69c86504f
SHA512f10e3cced05e2bc1296d34c7190ba96d40ff014943c3d6fe8eed951b9f443e231de455223f0743f24e3ab3cb3998d504b99413efc4bffad46f2fb96af8579e48
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5adf450e35384a25b69aee1be096663be
SHA1cfdc7fb501327797171e23af283f7c09c15be7f5
SHA256081bc7432eba99bc2d86ce91eac286e7a86a2884b9fe152366edeb3bb2321c54
SHA51297ede42f87f4edbde9fdb8351fab2bcde54ce2354eb5bcd7352079b5b3380faf0ef107813a56a3b59023d49066c9cc6e47c203c50cabf406c76895283a663d4b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5fc3ca2d5df50da04095328a18489aa54
SHA1735660c756826b49a33b7f713f0057297b31ae38
SHA256428940ef1bddba30c886e07631b3dbea4ad258b569a2dd641eccfa3501cb6f16
SHA512be3710a6488010f49ed399e8ff97508a5d3bd7292c4c63f9fff323e5802976e7c07bd7a26e05a1c03f28de482b2b78781ef2275f3e0e6ba812db163287698d8c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5477e3a296395d778e300ee19d74d4bb4
SHA1fa77e3fb370969e135e1c7c75ed5f5f6bd50bdfe
SHA2563b29eeeb5c6c2c9ceb7c92fd4f4e89fc8aa803b29c7ad829f9d35e3ec293be7e
SHA512867e87dc53e8c0e461d506c81b82b0319daab5d1872dc3e8331c8311299b2600e13a42e05dab1035d4eeb4964606c5b75e0fd7c3aaa9dab059245558844a1e8b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD58b5dcdbf16413398aa57a49cfa834178
SHA1a6b9e50a0b7268ca199f2e33809f9fab46ac2080
SHA2565da434c47eb571bee385e71cda8758681fc0a6546c74a3eb8c9d8cc98f82bb40
SHA512e35b7947f3541dd447dd28f4813282a60f4f94cbfb63cfaeb352a3b851efbf672ba00a620b2a5d96c5f9782894b51da379f859cc9a37866c8ca8c2d5b8c419db
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD54c23230112f111d06286664f20aa6ac9
SHA18c93c755717fdbbf63859a02d170d3d338d7cf48
SHA256e88944173ec68f52be88f5a8a2f2ca0fd0bf63133cc41c21734eb6dd6db23749
SHA51221749dfb976ca2c6a1caca3f3b5c09531d5b78b51abef1bcc6f626559449505765071889117da862a68cae32a577da09712f0deb97fd2df8e28fc789833da9ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD55c657f7d83d81c871e89dba3c7986d76
SHA170a1e7b7cca0f53c5476f8f19ba1941cb8739f25
SHA256405ca3be183eca9fff5b5e244ce511e85d47ef4995c912ebc4b97de11739e855
SHA5125680f220686c66aefd1419b068999f889dfab019e21249363e0fc9e36c02aaddc6e15dd9a0c76fc735d879a6a4f7dec2f7d00e87010dfb353c4aba2718e0b404
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD51ab18f1c387ff87a6f49aaabae2bc297
SHA178d7d0b09f631f68cd9607a4f9a2b01ea3e191db
SHA2569226b6c48c3424cb0bf680f81140059c1d790442d8cf66f56c2cd5622e7bdc74
SHA512a483cb4b75627ccca6cdf6449ad6b4521295c998213a2651335b84e94d0bb29460f89c8c92e8d98fd107a8b942ad6758789cf84133381b40bafa1c302bc0d4e2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5aef795d8f549d1c31f791c3ceeb52ae6
SHA1ee49106f79d82044535f486e22e4702d9e9fd6cb
SHA256bf02771175fd4a85108d8639075f5fbc471ba991bf34d3cc072d03cb0e8fe6e0
SHA512f34257aa7ccf7113ad31c15deeee7f37d7fe4a1fed53b4432c8b06af4664242994e8bc24e99146732155994aba8b0897c32f5bcf843d6c0ff24fc11729515364
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD546aad8027b7d45c5b6c1b04164b4da02
SHA1d0228bba0ce4b7903bae2eba0c644c41675dafa0
SHA256fd35c305d4ced021d76039b337b38130b6dee838f694fdfd4224ae42ed2f5d9e
SHA512422b870df3a19c1f782ccbe32e0b42d711a37d6ed977c7ba6aed931bcec5b9adb369bb2aa64568e8e05e02053bfd21443aebe85f1efd2ca137afe0748e16392a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD50864535c5d603fb7c98cdbb1a0f5c531
SHA1209be451fecc4ff15b65a0fd366c093de42a4a7e
SHA256e9a21c7ea48ac81754e68aae594062fa7b5465dbdf27d7bc271242f11e06f86c
SHA51226c4062137afa6be9b22cb6f6026dfc01a0ac687a946a2ba2519cae617a844b63001f74c9f0a5413bbd41666c4abaf75a8937dd5243f188326bc3d00fcead974
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5828f7541b1ebd587e5e6199e4c1e133b
SHA1a706988fdc846352c9f7dfd49e78f8b5e98cf9b0
SHA256b57206c7a2bd652e4275b1a01244bffdedddb208347ae5e771532ab89bc94792
SHA51235abdec0666dcbe7f0e15114b2558dc0956645b386396925ebc1c627aaba0f73c3ab7782bc720e9e995d1f5f057e3bff7ce778ac67b17c16da5c1ead9b808b60
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD59f04e57f256d1fcf2ecca04546ce2375
SHA1653bc12987d68fa5e2ecde4070e7216aa3a61c2f
SHA256394ad9fe831906bd073b1fee3eaa6d0f4a8445ad347c52654c92dd3efb43868a
SHA5128795abda25e2e4f324b375f43396d4c20689bbbd0a213b43f88276c94db460be1cd81ff8fe84e48931c9872c057fb1d28037c8e72d5ac596f101121cf85a2320
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5847538dc45eb3a83e074b7adb671d377
SHA1d154a1e9099ee9948c8d41d816a5c0656fea8e38
SHA256672b95ab69a185d3547099b68c6c7a90fd152be5afe1fcc70e98e6a6565f5b2b
SHA5121d2d5e6b0687502b11043a9a5e56c754f35993439a22a22fb128454ff7fdefaf796ec85f6ff7a1d9cd2916a42560adebfe52b64a168a1da44b000e84757542af
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5fe2f8686840280724afa19215d4a680d
SHA1ec3210dfc146c97d752ecc8af86c40013fb8bfa3
SHA256e214266bf79d7afa6c7bfbcb1e528f37d7b414f24b8ff9d1f1707243f7eb795e
SHA512255bbe3844f57fccf297e3a9bb95bc31de054996d6cc01eaec472a5651f2fa5af4f91256f2235fed4b35ef895368ef5b1d249991b62eef746f2ff1e0562131f1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5c9ac69506e50a01e3e2d4e266a9cf448
SHA160eb89a7383e5b21876d7148f43d822078445486
SHA256a7d1eb3e390b07ee9e5ae3d677077b85020c16ed0853b675f9c55cf61a6f37bc
SHA5122f57b088e4bb993b074a46cc104b9da6defd8ba473149f6e73bd6ef6aa54caf20f0577c8f2e133c9ef5ab9a9b565cb06d7b84129a5caf053c541a0c0420b39ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5e1a89b457a035ce17e10c9e6c3ff58d2
SHA1ae8150251d987398b0199d1e51afdd0353a9ff39
SHA25647cf68fa03cf7695c7e0f34b3bc04bb4129671e462af1f26b7d592f48f206842
SHA5127316d28e13dcfd0b171af39ac43fc858da13cf7d95ad57e08a329b3c2d2a6dee4aab0df7636a5d32416c9b1c645b7f29dc19b37a917aa73d5d602dc43968bb1c
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a