Analysis
-
max time kernel
122s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 01:46
Static task
static1
Behavioral task
behavioral1
Sample
379bda70ee24a5c8d61e5a3913a03b25_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
379bda70ee24a5c8d61e5a3913a03b25_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
379bda70ee24a5c8d61e5a3913a03b25_JaffaCakes118.html
-
Size
23KB
-
MD5
379bda70ee24a5c8d61e5a3913a03b25
-
SHA1
9b6dda6e471804afd12d8fde63b89ce716820aec
-
SHA256
58a6082df4c33f3eb4ec50385aa70c1c36719d95b39527fcefed2c8cb3970534
-
SHA512
064c72d0561b4908bf5b205a4b2476a721f84e663cc3a3ce850baef725e6514c824d39d14e39fd86322d105ae94408efc3ed76b5b9ae528177a15a8341bfd342
-
SSDEEP
192:uWP4b5nuGenQjxn5Q/WnQie9NnlnQOkEnteknQTbnpnQ3CnQtRwMBdqnYnQ7tnQE:SQ/zfE
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a2300000000020000000000106600000001000020000000f1885a11aecea4264aa373f77983f7fe6e492526d5e2a6ecb3d8d32c7cfba8f8000000000e80000000020000200000001e598791ef939070905af17f90ed5bc2b2e91f91494fe3cca7fe048ec93f11c82000000039d2e6dc07510198cf5e3d87d8833401d23f5a9036e6f92e581e725505aa1833400000009ed863786959b57d96d342720d091a62fe362b4969fe99ea6b70b8b14fda79dd43b0f91b4dd9da28b3a97b912ddf4438f8df218d708e2ad2fa32e6f13965c75e iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421640259" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b037354a0ea4da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{757BF3A1-1001-11EF-B02E-F637117826CF} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3016 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3016 iexplore.exe 3016 iexplore.exe 2808 IEXPLORE.EXE 2808 IEXPLORE.EXE 2808 IEXPLORE.EXE 2808 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3016 wrote to memory of 2808 3016 iexplore.exe 28 PID 3016 wrote to memory of 2808 3016 iexplore.exe 28 PID 3016 wrote to memory of 2808 3016 iexplore.exe 28 PID 3016 wrote to memory of 2808 3016 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\379bda70ee24a5c8d61e5a3913a03b25_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3016 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3016 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2808
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55e8e50f2c1c074498647cc1a2b5026f4
SHA1f98570cbf5351e5c405e7fec42765c8b849413b5
SHA256981f07108dac8885dc217f51368a725f9d79be99a1e834ea4472f649dc0c5f3a
SHA512a218c83dce73a325f0faf0ea9ce0ed9190487b29b7cc8530897833768eb9f202f5aa5d553fae7cfcdb1d3ddbee5b4ba93a2631b769aee9bc8104ab4535c735df
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD571531d3bbcd120c027b9997e092bd22c
SHA19df515d9bbbf0f39917c4971fa4dc27497f3e801
SHA256dc97e64ff0a39557c0968ea1b57697095b6ea5ae1eb15a698ed78f1c9e9f647b
SHA5126c96f845b6e635770f3b5a6695612f851bfd27cb19ffcb0f01bcc4fd51950b52f63b15cc44424a3f9e72c5e34e8b4b774bd360487f50c96d62d53e6fc58bbc74
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD573fc1ab7efb3de2f3046d4b2890710ee
SHA115dba9d8d353196f6cc49436a10aeb67785166e5
SHA2566323ca873a8104a7c9e31236d0c4dd655eb30650b1e78166ced80ffdcf1addad
SHA51245b904155c8bb670432767f46d8d3df09d6e3668a9bff85e4ea9c07e6a355a4277cdeb2790bda0ce73b43a0a925b01f501fd67aa5a44de64d00a42060505afc7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD546a3ffadbbd07e49c6f42e7b3a2df68c
SHA1f6402bcf3d51569072341e19ddc46aee362bf9ef
SHA256a73155d71337eff7e8c9929ae14700335b3757ee7806f3a07e0fe5df4663c903
SHA5120c3363a276d033021812c363530dcefd49525eac5fe09ebdbb08abc750b1e922368655774ae7f0fa20178248a42c92c198d5f535d5c1c3798379499f74339d46
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54b54cbe567aa58a3acde470e649a7187
SHA1ef3eaa43ba09992473c7da5313bde0af15bd4d35
SHA25633678b53786bb220701284d8a485c409cb1e06cbe43ae30225628948c6fb4aa3
SHA512fdcc5bb5fea9955393455cce62d91b1740a6076db458f109baf4322713e2df1d0121de97557dc63ab47ece22386bc2769743d6f9815f2967945089746d27a9b4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD591ae14b23ecbaa0f51a4bad4fc1b57bc
SHA144ddea807f1a5b8658a07974a18f4814c25a039f
SHA25693b643a6788f4b7125c91e0445db1c273841145cc1119b04ed92ba48ae8874cd
SHA5124df473b296f8071330c3f6e8bd57b2a003e36d0337f6b28d978a0991dd43b0b7539c0f95fe44071b7585dd43068accb821f38b2c46ca9fbb4079b424a420cb9b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cd04de7fd00b3ebf0d4d4e4a957b9d65
SHA16736b4d2aeb92668e6d7a100db779f6a01568db1
SHA2565290942aac07c88444c96c14dd7ef41122ef3de53b7cfd8c713facbc7011123d
SHA5125070cb51713d618b4efd038785cee5b34c4b7d1474ed7c242c84b61d4d198e7cc51d37a5cbb542635857445b58101e20cd2e93501782ecdfeaaa15f09e4619d9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD526b396511f996cee0f3be720b8b15dd0
SHA164031b6016deaa8b549b12231a95d0573b4f4cbb
SHA256e7f698169d88ddbda82ec748aa02371e6c36bd40b7ea421b7279c0b70ff11d5d
SHA51230360b85e79a54532991f810190299cbde40a6eccb6d6c1aced7e5fefd9425cf5cb1c60764a40bbeba0e3e7675a0b33a08aa9fc47b8d3db50611024678a187de
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50c8ba78b5d10faefa979fc9400961eda
SHA1a697cf391a204653d26aac85d237ed182584ba6f
SHA25629f4cdac8416858513d2cb1659a42765dee8498e59d849435c0ba40db8de44b3
SHA51289859394156db535201aaa8df98f7f1a11fbd6a2b7b60f90c463d524a69b0dcd6e69dea5119c2937798e18e62476eb61f44615922d5a577c1791d4078bc987ee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52477c327369244c6b37292c3e376f73f
SHA19e7e3b90ff41d443c6d7715067181c2f9043c2b4
SHA256b8eb9d68208246edc0d6702176662596a824f5f764c971068f54fb16bcc51029
SHA512eb15d1f955d0ec6c89b7abde96f6fe3a5b750d859a27aa32ed8534577e880533c17b3084cbd469db498837f115437c706cfbe0da946260e3b8bdc5c471b0f222
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f128adff72db6b5b3f3e3d3650d80078
SHA13d3e54c69b9866534dc724d05050ea20f29945e7
SHA256b4749868b4e360526c44e9005676e965def41391556ddfe06dc96727d741e55c
SHA512c3e108493784d628c5a1e12fe8e91ab068c1e11dd25afa544d3ba82aabb1c1c914f051a5788f46c11017a43753cca280c9d0fc5d34eb1e26837d80a169afb1a6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD572a79950c14cf3dec62b2aba9bd74cac
SHA1aafa30795f2e9eddbde80affc1f0c304c99f8582
SHA2562e2bf8640310e7722937587ddf40b051b332535f05596872b2f60ccdf35b3ca3
SHA51271d2ddee14e23184a7c8964fc7277697edfedb6934ad6dd1d6fd314ee7056199293056596c1dd29d8cc7c0c80406b62122b02609518b8aa7a0783445f12f1ab6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD565866310e15160b61d59605954c11992
SHA12ecccf81d7e72baef4deac63fd74ffc601514162
SHA2560b0a7e91a8a1e33ba58d81ee73d3516bb3832983b3bc3f3e689c93befb6863d2
SHA512ee17873eeb621a595f712f7bd353b5dac9c50de8ea9d0f888e0ad1c4e5af441daf997dee7172c8112ab2132f7b642a9420791a179669dd911866f61ace843cfb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dfe2d72a39d17ee1daeffc2499b6f96a
SHA1f447dbdf1c4d2177d61aa2678004e7556e36de60
SHA256c88513ea14c856e2df83f25c38e0acd7746914e61f285556ab1ddfa137c39c47
SHA512301ef0f52dfffe9e0744ef67126358120e27eb8ca60834452553fb5a4aa426f2632ab26d17d67b39b4f883a96b5fd0e4b632ed77833e5f032cd6cf3b00cea0b9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD582211e5ee9211aaa564190f1f3a96c8a
SHA1e05cf2fadb85c6925acce33b833003f0faf8e55b
SHA2562f4e36e39af870ef92bf39f2172aff2dec39961f7e7fa72e7bd2533b9a32b609
SHA512bb4b3bdc60ad0d2451e42e8bad875f19d2809ba9538b0ffbe071f88ceaebf5b4e91eb8206a424f6d691255ada228bddc785f1e1716d029e46bb321182ec714a8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ff972dc03724d9242a85ed4cfc810984
SHA13ee789efce3f6e09dfad70c8dc1d465a65925387
SHA256b4ed7ff70cc77f35027273d70b2e5ef1055252fac2039a9322cf2e8d241e1472
SHA5124931a7a7fc97ee869b589d1b58d9aa36e8203acd25a390621ad037f49c340b7bb97142e895c90d78f40588afb165e40f30d9c3e458d7f4e8b02a0096ee6cfe59
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57cd8b66f4cb11fbeee6ca2cda89b35ec
SHA1901a42076d29a7b4dacb6c14b10f982e07e02c58
SHA256b2c42682b68326c1e15d86e35ac853ce7d4e9d055c57c2fdbb30ac69004250ab
SHA512fea053ee02bd677fd4f27888e0456b4234aa07a1616daa38355f5b9fd2f21728c948f7dc420167479e9c312cd2d8f473a3331f6cb0fe1e3aff18b4c5ff12ba14
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bb8c870a78b5d2f46e360aa770225a14
SHA18cd3534d4f64fcdcefc5cacc555d10781180d46c
SHA2567f8ffccbdc25692a7e99877b691c7d41ec7a26951d0870ab8a8f7150fe2d9cca
SHA512b282a4ff8804a960da513e5cac9fea6577ecd1c754a441e2b322e0411146c61f7a4ab4ba6f532fee2ac0fdee922e8024e06ad33ff642d33509bc067a64b158f8
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a