Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
12-05-2024 03:32
Static task
static1
Behavioral task
behavioral1
Sample
3809f3714e3e16192c79e68b4a7f5bef_JaffaCakes118.html
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
3809f3714e3e16192c79e68b4a7f5bef_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
3809f3714e3e16192c79e68b4a7f5bef_JaffaCakes118.html
-
Size
130KB
-
MD5
3809f3714e3e16192c79e68b4a7f5bef
-
SHA1
1fa1dc132a814f889e6a17dcc3217e67820109b4
-
SHA256
7ac9e9106b23b95a4c63a29eb550f0af2b190ce697ec4bd4cb39a1ad588e0490
-
SHA512
55a6d682dac842df5ad1280c9be332f5f16830aef234b1612c7de9dd1de55bb25f4fc583cb6471a165d75ae083a7eb8432d263a10e532afff0c758bfd899a397
-
SSDEEP
1536:SrJ7ku0TykJm0PzKQGyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXAZ:SUKQGyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421646639" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{50374F91-1010-11EF-AE77-52E4DF8A7807} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d051d0241da4da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d1000000000200000000001066000000010000200000001b97b665ba39325ea5ccc962ba372ba097d2718c302bf40709cce763438647a1000000000e80000000020000200000006a6f26866cc71702efb797621af3d0cb50dc09ea3053456ef076ab945520d07320000000af92f2ab698e913a3fda678af780139cf02a3bbe7351c53d621a3cf2843a43eb4000000098d9bb80fc06bf38244e6cb28e137193413a5d8d662a25e1b213b30362b011266557b50c563787fe1d084266a50bfc57d667889485f4f657799bcdb9c32065cf iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2912 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2912 iexplore.exe 2912 iexplore.exe 1528 IEXPLORE.EXE 1528 IEXPLORE.EXE 1528 IEXPLORE.EXE 1528 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2912 wrote to memory of 1528 2912 iexplore.exe 28 PID 2912 wrote to memory of 1528 2912 iexplore.exe 28 PID 2912 wrote to memory of 1528 2912 iexplore.exe 28 PID 2912 wrote to memory of 1528 2912 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3809f3714e3e16192c79e68b4a7f5bef_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2912 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2912 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1528
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ddff7c3b4b8a05add71e522592540279
SHA19b8cb86df335cb88b0fa321b18f31ee5ee96d88f
SHA256b91426619d73a765f5a6c9a4bb89d6366963c9ce922cf1ed3ca426aa3d91669a
SHA51254e3d729cd3765a03102a27ffdb0ab0f52378c5a084e64dfd9d5fc6d7f4406cd634c86c02afd06c883559ce99d2e67b0902083885c182aa393ab75d9745eacca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD537db8c0ddadf6d3aa4a01e440f8a66e2
SHA158274e1d38016ff8ce82badc299ea67475ebd70d
SHA2561f1673009d5264284ab012848cad1a13457d4355284e29eee7c00c9837b143c4
SHA5126f49c29f3ec6eeca5e3424ca76bbbf37dc5dc404334c11b90a944b236bf62cb2d9f84d67cff66379d584b60014983f7571d030769ed1a88250ba5698fe0fc5ea
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD563f72b3caf10cf1ff7281f09be0b1f61
SHA106558b2db59a4b20626eb9d5afd4f6bc3ec1fce2
SHA25688cc93e10727d7544069034f3430193e2b2e571622a90949edf44aa69cdb541c
SHA5127a4ef12429b7c1c544d495a6c606e505f56d991d2f95fc6379d855bb93da52e0d83dc70b15e44653c726ba653e4c66ee204f02c5d6fedd01c943637c7bab4c21
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58f491f328c81c662ee6e5b9cfe12faba
SHA14ea180d0dd963062bd1992bf4bd80665882a2e11
SHA2565984cf59c3397cc7fc4ceaba9694f6f7be11ee931831baa264bebe59867af69a
SHA512198a513504901c8115627dfa1a10b35847e7be7de85f4b9c96a00340fa30904778434f81ffe17b0c8bb02149b47e00e01038ef25a59c47ead1e7301c4a23b48b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b963c32da155a1246442a6adcccdd1e0
SHA10a27e6d333025976628be34401f1e26835d141b8
SHA256a76adc1084184242742b075e2638addbc5238d0f8b70cae7aeb503274accfa7d
SHA512ddf4dcfc5d52621c086bcd9db232b088a3c8da89dba74af9a2128a50eb57739b02fb603453bb4257f94b4ef2ca9eaf518b44450f99f3149ec228d09b2b6e1eec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52a83775b5b52e168e7756d2eac8f0296
SHA15c365ff896df121d6ab2b24bdbd8995055d5b2dd
SHA256bfda2bed756d119a78a031715d2561d96b70f1be74e304df3154c04fdaf0f219
SHA5121d56189838f59251645f78289be5a50b339917120ed5c8387217bdaf10951197e9e13e585639e39bf5522fab4fb0967c07ffaf01dfd9d546a0b7a5a2b50ea9b7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c49c7817012b25ff69bfb316b8fa235a
SHA1249566c0f42238e23e3f80da68b230a68fab3375
SHA25635ac43c9fc1108c0a6a3a6167f52a8086fd342214b2be9edef0d0b8d7ede8548
SHA512871b9163fc186b02b56b983408d21d258b334dcf919755288099e9759f53862f6bd9fdb6ec0c345cedbe098063a81fc19fe9fc4fa0153ab7d4428fd79db896d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b6d37d1fa36d3a8e84fb3f85367d3737
SHA1a26cd6ee8e496d23bf986785c995deb22fd206dc
SHA256e294ceadb801dc57e6fbd7d1536bc76c7e55fd1e7298191ff75fab117c34d770
SHA512258390a4c474605e93609fcdcf700dcc0f7ca155e90dd6340e3cd0d03cda7e39adffacec2b68e3a96332f9a78c27096b59d2d153e4c188ccc4dd99a26420fb1b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cae6ce9bfbfdfe1498764cccfc842492
SHA108d18b361db2af886aac92cad67774cfa5e8294d
SHA2563f27b7a465aec53fd746df2988a67ee475cab2e8a8eca93c6ecfd3285e435b6b
SHA512c1f56b7bdfbb68363bf76f6703f510dd3796f0bb55eedc42bd6d65fb05ef58e558ead754abb98dc77dec09d4490404d4c3dee0f5c931b8e2242fc5af9f6de3b4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d54afc992c1cc0a96585ea676c7441f0
SHA18d45b5b59674e6494993e0adda51e6e207f89452
SHA256123b4858a20c94d987bfa77f43335b9f3668b2ac657e53aefa996d27c364bcdd
SHA5128c25f05cea1fafba51a1bfc43ce3540d8f92384b975bd5af25e8b6f2ffcb106dbd7986050f1de5fca798ad4837b3dadb77300e367376d23d44ef84bfca23e781
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD512c17da2501b745f35eb8200e1da4ebc
SHA1d44c0f62dd56fa3db4e7a0c05594992acd7128e2
SHA256f13ab3c09c9fa0ec6bd2b874413bef17728bb3091eb5ae439d1b535d48fe6df1
SHA51269fcf19911dd1a4a963c58d6db3864b446304d1b973fa524bf52e87029146e3beb6e7e36f93c1efad698c2e620f56a8137db503a0071999bbb4c63734b1592bf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57a2662a6953411520f7308b8d9d95414
SHA1c3063e4f2c17dfc08f79a017aacafc79169679ee
SHA256ae5228b360b9bbb8c54e206bdeee9ea8451324b5ad7d5e6c8c526485d044c2a2
SHA512c76a5399497de7e6baea895907f4acd8cd83771185d2bf8801bdb71531431b9e68a9a2487e4b11d5a30b080fe8bbc4398927bc7c4f6e441d6b6a2bcefdae5aa9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD579502b00ba4766d69ecedcaea01a8eee
SHA1e12b644c97679a839d2282e4e11bc5adb43fac16
SHA256dba23f0e665d9c0dae045f4b4921ca502b275f30dd40b52bdbbf773836c3bb2c
SHA51277a67b327c0e84d08d6525ea757bdda756f51039d494cb64a2b7ca0116c86b6a098707b41234c374631c83d9adb7d22047c8100973eb12461199c2ffe23a7f46
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5054278ff00a3e92e725a6be1459d5882
SHA10a7ce02f97794b67dc26feca4b6aa270e4ad198f
SHA2566c0e9dd8595589dc58def12f6ab682fa733ca85f819b38f603e119ee98fd42fb
SHA5121c819d3f9329feabd3b699c5333f91fa95d0add6e284b3588b898d6c24d4ee9445ae946527d4c056b19653f46449463f7b8946d6f00afb40ac04e7b2cf847913
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56b18cca9dbc00b7187d3b0cae9175478
SHA1342ac72975455c116cdc77bfee46c36c962e8602
SHA256121aab51fff912f1fbb6e479e8dd5f5a175451c010fb7ab0635650552ca25ffb
SHA512c902517c31f1a03bef1aef5ecb237a956acc9ecd57a96dd346fd3600f67dbf56d7b9cb9568ea8592d06e1e7d89f99d4fbc0e5c402e8eaebb752076877b01b1d2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52847bf41ac35df058b07010c9aadf7fb
SHA18618e92a9cb290b9c511e91d5c5136741d7904e1
SHA256c628a3e46a3509866b0e5a6b6a25dbe479ed94ef73dfd14d57faeea572958691
SHA512eb51bd234a69cf4a34445fa5dfbceb5e6ef159efb166dc904aef639b5b08f4b16b80b73edeaef9659ad732c1a7fd6ac404e59c5f96f890adc5328669755cd3ee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57b48add8da9597c300a42b51f4e0a916
SHA114cfbe42b2a710d1b6985a7328cc0aa0dfc70c16
SHA2566e2f3650ea586390fdca5fc6a1c039f2b42e986c25895990180a2f01744f7a5b
SHA512d2ed7445fd82eecfb1b6e337de5872c88881cd4189aed3c37fcee14010427626169e83c976251a071db2cf68d099cbb509ee94acf40afb0633274b6838c88be1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54b91fc24dec2425e765cfb9f662dd283
SHA1485c2bcb19be49fd93e6584cc538628770e6c2a3
SHA2567c8ddc6a7ef8dfcb36e62a2993448dab660c1fd9257fced109448bbd6c1bb2cb
SHA512b405ae2b37bc4f2e1cf8dbe94a11a89285872b8a7eec82b463177c487b659b64a61bd04e45fbc61684e3f0587294ec0acff98281bce68d1b6d44c2db8eb0cf88
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a