Analysis
-
max time kernel
136s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 10:09
Static task
static1
Behavioral task
behavioral1
Sample
3990b919fb0de2a28fefbaf0cea02110_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3990b919fb0de2a28fefbaf0cea02110_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
3990b919fb0de2a28fefbaf0cea02110_JaffaCakes118.html
-
Size
66KB
-
MD5
3990b919fb0de2a28fefbaf0cea02110
-
SHA1
64b68478d7407fe733eefe7dda85f37422815dcd
-
SHA256
7118fe3c21309e5a1995110e2152523435f2fbb5699000c59a979c78ea707b38
-
SHA512
1abcbb5ce72a653c587979f61dd0cfd06769008e550f7e16a3a4faab571d9abb8e3415cb0953b62fad4d5e62f8c731bf54cf4ce6b23a030ac27ce18938473d32
-
SSDEEP
768:JiGUgcM0St8tN99OIskXc3nsJqaoTyOqhCZkoTnMdtbBnfBgN8/oycc8QFVG8sPq:JVP+lgnoqDTIgec0tbrgaCcFNnzAC
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421670462" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0e5649b54a4da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000fd0662755b5a44af5cc16dd561a472975f1de1b0450ff2d7d1169947d0b6287f000000000e80000000020000200000000567a847c76469a2febd5818c9db84c303110710d5eb7b31da1298db765d910c20000000796da2ecef26337d8a13bf47d683e72d1ddafd2d711cc050e16a495b149ba83440000000baebfe4a8ed0e73772161c0b7b4144ccc8ee7ac15a527961654f78690bde78c1152a0a06708a1d9b32777a4985b4051534518620141dbf2c3e144d2cdcdabb41 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{C615DA11-1047-11EF-A336-7EEA931DE775} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2248 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2248 iexplore.exe 2248 iexplore.exe 2472 IEXPLORE.EXE 2472 IEXPLORE.EXE 2472 IEXPLORE.EXE 2472 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2248 wrote to memory of 2472 2248 iexplore.exe 28 PID 2248 wrote to memory of 2472 2248 iexplore.exe 28 PID 2248 wrote to memory of 2472 2248 iexplore.exe 28 PID 2248 wrote to memory of 2472 2248 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3990b919fb0de2a28fefbaf0cea02110_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2248 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2472
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fb81e2a59c239343229ac28baa075364
SHA13cbe2142565fd76c6e3d52e5ca8876be6a0d56cb
SHA2560bc94fe24499d4b32f28aa194cf8da32d5734b784a54bfbfe47b19b2d70cd54c
SHA512fbbb249ac347627286f924bc5de60222b01ab0fff7d877c1beb5df817ae7febd8dce669d06035466e12116c60656f3b8803b94d9a3bdf0c68c4431f3119e0e9f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a328253640d4be4676b8b19bf6e86da1
SHA18fad08f23d50cdc670a6d97fcab19abae0d6df98
SHA256d03a3f7b9c95b0ee916e92ad271dee000e365f4f60936730c828228f878b152c
SHA512b22840fb6f964ccaa9a3b27c22221472ce4381bfcc72c537154e4bdbded5635d011dc3c13aa97fd08e2468191b8b4d4b3647c554008e96abfdb3fa7bde4654b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e1e265daf8a817f2a0b9811e4c15f089
SHA1dae2b152d50e71422ebc73b1414beb7e4f51143b
SHA256f1da7475cba14ef4466470bf6bf68bb337f7c576094be07fbfab06c24c8f4eb8
SHA512683efe32c57310fb31ab361d6f01189a43713d39c3a1cb9a5b0e641b68d1bf911b7301b2d71b3cf315900bdff42002d5e014147e86a0314bf82c2fa6c9ce687c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58ae00bae65d32122ed99b4d97196eb15
SHA16a8dc2007544ac771abef4a849cdebdec128297e
SHA25626b306ded30157ea87489aaa9e7dadb3ca3b75750454f823efa585e36004909c
SHA5125333f23a581f00eb674dbe67c9c4b9d295ae78b5a26eca6bdf343938ec6bc3f6ae6f6d29e3348b49add039fd967cd27ebc92ef738a2e2be44b90a0e5963664e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a31c9d6e6aec8d983233324802fa34a8
SHA1242731da53dd250397cd897b5de1e174ffb01491
SHA25628360d5624a94ff58df098669dbc4472db7b1fdbe15f8ed024bc815879883b5b
SHA512aa4262a3c44d398ff577af8fe7ee71a9a28128f6e6de9827d5640dfde9d845c646bfd28dc3505c50ec7b39069e255eda6bc0ed9e381809f3154d3b98bf66e446
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59d9d9d487f228e74e6abea4260bd314a
SHA15682c8ab70c6ee3bed9f2b2afd218c048a76ff56
SHA2565609cdf8df72f710e385a5db247064d7269af68af9301c6a09c7dbb7f97fe579
SHA512ed091689bd6bec1c833444ec15f7dab1d2daede9db150cd5b9bc63cdda3cc7d41a38095c1d4852dc16497fc3fcba47130a4db2536713a381bf5ba882f8022374
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD564f45350cd2596f0226cb4ebf24e2f5f
SHA10439078dcc69f9ada4578b6fd4c438bc672fe898
SHA256fc9721da8cec4edb06cf4cdd98a668da1f03d263088ece3073f15781978acc80
SHA512dd81b4206fa789a14d4623d1c8412cc639ac56f9dce8712ca65a3122f019785779fc50ac667b34cdff454ecc8affd67a61e8486e32c1dcff1c776769fb9a6f39
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e4fa92e8a698949d084abb5bd16c3468
SHA115ff4f9697a6fc3f1487600e139259a9e34abc46
SHA256b4b1308002106c3458d14eaa6754dc6506c4e85b272e71eac0efd0ee3b2f8a30
SHA512ba3e9b9ce1ba0d4f695827fcc32f750a00b9ea0b32b15830b8c46188ba64e13de19dea5e3654baa510eb87cfc96a92b8d2681833cb2c355db79afb0adb56e15f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5169b601341aee23174ba5d59159063ff
SHA1b8fd39d157875f2dfd8302a58c9b63766c20fe92
SHA256f806c61b6efcde3d167d130085486101f54551ce2eb747aedb1cfad9857e1ef7
SHA51277a3fb06c92fe100c0a4dbf980d7562d7255c38328d3da1a4f91222d795728e648bc3bbd2dd68a8d9496cb2f4afd180cf62dfbffde32f6a31ed55cff72631cec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59adb7a946fc3d1af76cf1a2293e19186
SHA1099d1953e9bc614c9cd80ad996f27256a6218d31
SHA256274bdffa5f99ebc364b6f0689ae8117d23ecb343b76d5970a759cb767c6858e4
SHA51292540b27377fde91fd910c2e049f8ffd6772c75aad31e850db33e9fc3c050277971d5661d09e05ffdba124d5a281c105dde25b5c0411b5b879a7e2beb6e97916
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e969be509f8648ca973df34cf16761c2
SHA13ff587cb862fea37c834f3b1a2b2a0465af1ec9c
SHA256133074ed932a7b930e715bf514cccdb396a595e64625c4880a0b4e8e2a825fe7
SHA51263571c17e70cc23bb469ad730368febdd913a4aca830afaa51d836e5171e4d51f6ee5edd355dfc8f2ea12f9882294695ff134a6fd5909f518c94fd8a5dc7b45a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59c45b8bd72b36ce5a9ea2aab83640102
SHA1c1363a33fe848a766a176e97327c388d3e4c96b0
SHA2560c9d5fac06f19b917d5409f3da05cf6996c4373211e557fc0d894d3741b7c17f
SHA5121b532a53b4ddf0e42c6bd65fd2e4c9f6a787ff86149a05bff5e1b663b6193d7209c60ac67b26e7dae488ee1d4140700db1b0cae247b4cd00438ba0500cbc4cf6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50cf8f417ec38f525ae6fc44c175a40e9
SHA188a65a48e1f356ee423416554801543adc4a398c
SHA2569d9075bc37fe1b94251656aa800e6b1058444767a02063c5347e22adb5414810
SHA512c72c967552bca6b9095528a4786399ae48d4d96826044280c3c596668027f7261da69b94a954a321221332df1bdd31b3afe11c1a2cde7259c1fd4334cfef7b25
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD557f99397e7b7206cf6c739edcd15ce23
SHA1f7508838c54299110e2602b80c018d64845fc81a
SHA256a696d27ccd5a8ff1c9ddb743ca0a5057fb70110d574a6e8f7987993b2216589f
SHA51220ac44be7d2b439b7444e7fba0f0498336cc9d09c81ea76e18262fc850c852dc03f181dc74abf4f0ff25c8032dacbf714712344fa6a6b688b846d56556342f1a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD520bd8840c5c932cf9b23ed6dd704a9e4
SHA1634331a55e211a0a02aeee9c391ab000cec73e5d
SHA2563eea5d712710513b9ff91ab2ac44686eecf516a3781aad6a7bde5d1493b06831
SHA512f66168166f808308ee01be16c9ded2e3016be3ad6d371139a2f656265ec752636f8a6db885c75241c995deb7fded10ce19ac04b29e1b3d98ae54f376ce2d2583
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d466904005394f837f37a5e40fd486b0
SHA10a50d9931f36f966e240f711b04583d9f6f29bd9
SHA25621f2a43ac20d56118549abe8a878640a3ce34d5df4ee8ecbfdbe6a699a88dee4
SHA51260f9f351f54e4eaaf1a0619efc9943234ce981cc794cb0d1b9f2fa374ef497aa2a67c23d95efb118f0cd1efe4ebe550e7e2db5e08804b5d224997eb97ea34add
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54b2eae8d37387ecd3f6ab4f925fc509e
SHA1b51f2764ba3867791a330f24547d06454268b671
SHA256cf59c9f1ea2ed9eda6111a62e58b153d226b916454b591d6b75bd7fafd01f089
SHA512a1756f63b7ad724ada0fa06ed4f7b1e30543f128f3cb9b2c2b15bc25a67da0f04fb1f42bfcb8bb222c41bd6d62b750efc226f3dda8871f5496d3bc7b14c4098e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e056e531a4826f7a6edd4b30af297c91
SHA1fc1096fad1eb08c0dc0193eb62748647ed56db46
SHA256fb10a2dec33ce867f274ad50fee40cbcb78d5d3e5efe6ab0e808dbe9b1111c66
SHA5126845f41118a68ffcb636d05ceff740b052b3d04b1d9ac8e6f9ef2cef5e35015ca60fc8aea2cd825a9e979b192609211ef105ffd6ecb52c7de332412f90fc5ec1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56821afe308c98218022edfcbc1582d33
SHA1be0e52cc5dbecf799408378efc18185f210f66fe
SHA256f062501acbda1bf04404a16157fbf33c1eab8d97e23149c0b8a144b360a5dc48
SHA5124f7bd55919fcbd6b1791a212b56cf150dbd8f6774397143bc24e47bbcea3b54f33b2559f1c1bdf4c0d42129e807ecb1443b3409d1173aefbc4f0a58124e3d33a
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a