Analysis
-
max time kernel
119s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
12-05-2024 14:48
Static task
static1
Behavioral task
behavioral1
Sample
3aa7947e041e5326555dcdab4391c725_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3aa7947e041e5326555dcdab4391c725_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
3aa7947e041e5326555dcdab4391c725_JaffaCakes118.html
-
Size
27KB
-
MD5
3aa7947e041e5326555dcdab4391c725
-
SHA1
ccbe4de0185726b3518447e9e33f79b0eb79ef00
-
SHA256
8afc0055536497c975d221bfbad155d277493e7ec1cb8725eaad535d16597c91
-
SHA512
41a830d3f34cd35db02c1e9f7fbbcb1ab9a83e366ee663712a9f24ca3ccee92c6d2d2b9702859d9e67670cec5f14aa0ebe7481e07581c6d385fe44ce15068d3a
-
SSDEEP
192:uw7Yb5nJWnQjxn5Q/0nQie/NnMnQOkEntoqnQTbnhnQ9ebz95m60f5fQl7MBfqnL:oQ/SeBA5eSZqh
Malware Config
Signatures
-
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e060ba8f7ba4da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b000000000200000000001066000000010000200000006b5b54ad3140c9ff5b75f1305eebd3d5f5b880165d680212f694c4bd7c567bb8000000000e8000000002000020000000fb553fc7636493da8678cb5166e3401e601768e499c89f07396f9213f71f3fbc2000000022d265ab560cf060703276767ac43a16b1254838bc9a4dca8160190a5912057540000000b94238b8e808c06938be443950902ee7b3507ef64a70b261480e903203ca9a45aa4c00fb7a22168b0e8050fd7c8dd7ec1d7a32592bd4d0f3788f63324ef67386 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BB155881-106E-11EF-94AD-7A58A1FDD547} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421687192" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2476 IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1252 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1252 iexplore.exe 1252 iexplore.exe 2476 IEXPLORE.EXE 2476 IEXPLORE.EXE 2476 IEXPLORE.EXE 2476 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1252 wrote to memory of 2476 1252 iexplore.exe 28 PID 1252 wrote to memory of 2476 1252 iexplore.exe 28 PID 1252 wrote to memory of 2476 1252 iexplore.exe 28 PID 1252 wrote to memory of 2476 1252 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3aa7947e041e5326555dcdab4391c725_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1252 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1252 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2476
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a3e2cec3c6f09565883eb1db540ce731
SHA1975c7575545ef61362a2d5fba849fb7716fad0b0
SHA2566e16545224b548f3eb19140bdccc865d8df42f3245d8625ee5dff14deb832091
SHA5129b3e4695c20c93235e94855e83b705cc2e7dd6a2f71ff10927e74407927d5b26934576cbea00be576f06d89ab8bb8492319dd70eea31ae129ca5dfdb9844efc3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD507d28363a552eb3e42d275a8c40cc777
SHA16dad4de9e9811323270786ea656cceff57c90418
SHA2567ffdbc0a2c237e2febe6eb21f28caeacf320f851a6ef3315025a3e9a9ee5658f
SHA512c39524a5132b6292b28d5b438a25bff92ac49af7d679109fbb99f145e88cd17ae2a95f3967f459f3e11479a57548e54f6c837b3d35369810daf01f52d9387796
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dcfe1f9515fb72bdba1a61ab90365ada
SHA104f0b4096c900b9deca2374182ab986aca2b1986
SHA2567f792145948fe2a20480bef0e819304517ff07882f2e70f0280c806bb0ffb8f9
SHA512acf3f398dbb95999180cbf1f7eaeb06212b0be36450fc2dcc4dfa8cdc21d1c9ee996c8e5071220293343427724cd070c38ca8d866fa6db6a20bc0b59456f11ef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dd76ce8e779225cb20f6023fff66aa3b
SHA1ed7328c8312d27912d316c53f5fc8576ab74e4c2
SHA25649e19906edeb660b8718563505205fb82d55513953f5084e8e0e65bce57c748d
SHA512a2eb7214dd2981dee8893dd70c0179c0019cbc7cf9f793d74bf8303eea38af14e58132900ebab56749a64257ffd8c6940ae2a070379d6e883209adbd5370d495
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57cce4bdf1c94deb0fcfcca6c3c18b5a6
SHA1c0e93d6625bfad8bd22b94116e51214f77c898df
SHA25601ab1309738959bc1f2cc395ad998d67dc8cf8b8acb9a972a0fe3a4675c4316e
SHA5126909bf75732b311ddf10b5f1d9ad2a8fc7928eb11d94401101bdca40d78f9db22eaf0a443d8abcfc8c684b05eb1992d3297d51211d0994c830b2d054894970cf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c0f36ae191b9833636ff2f8baf86d463
SHA106782df727c164d5fb37fbf9de90c1a60b2c2320
SHA256f1873c6ac3aee1de87012c00132e722b4c2111038663bc357d3c8806d437c1be
SHA512b8ec59b6cfefdff337eb1d4a2d17d1a5c1a88078107598cff01457609164beff2fe31cfac9d7a7aff513270eef9fbc49a6dee0b17b286d6fe8141225c8a3a4c9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5080d6b6cb788a14eed8197c8620e4979
SHA142247e561571ae559efcdec6cfe3492136b5d38c
SHA25629254aded948fe62939bc8a927cea327483fd7f45eb069043c90766aa562a6a1
SHA51220f04ca1a06e45e694c044ecfdf2166423152f5a892951afa4aae200b457f165cdcf0791da0abe88b82af7e3c9b11b9362fa8d00ab05f340323f1150dc961124
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52b048c5c6201954d58a9298df975cfc5
SHA1ab0d6641a87d2d3dca39cf7c94bca5a7fc7231e6
SHA2564c457e75b9ca833fbde87f11d03ef1dd0a958537a7aa6defabe886004be356e3
SHA512258494b157ff7796271cf92eed8fd1e36f60b3ea5650cc8d4540fb7d5e8ff351fe273fe5e925e5e70bbb10c6c229de9b50a2f28e94dfc928526a0657c8eea406
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b6f26c2c17fa417c947aae416e020fb8
SHA12860a5c2b2c273c89279a63814165702464e390d
SHA256b2a8dc165bd9a51f97dd1848d3323d2b06e4fc215d024ec10aabc59214ee9775
SHA5126c972d482c62853fb8ad3539ce260b5528272b4b0f9bba5899eec9e5e8381896fb52c6ae6180470559d58ef51e31a3dba5bb4d54a0f43182b5dbf0b1340ed759
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51ae6580f8215a8dce1b73e915aba04da
SHA1916ae21403787e472ecee27e333403fb12cc3db1
SHA25698735e0dde57a058563349eb047ba4cf536deddf3ac2e8100b8a52092d779e8c
SHA512f95f8b4b694555c669047f2195379ed9c108a68f0a7247257fb922f104752c83ab14d9653bb665f55e32baef540379d7c32d22c0bb96d5bb8d1bea76d83681eb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55a447d99188950cd4fc6835af867c173
SHA16832d6a953c67c6b353dc65bb81b827062a3be8c
SHA2564b6d902b6e1c0ae9a1561f2ed8fac6e7d550ca8a25a49934301de68e6ba8a29d
SHA5120b622d149900883993a04548f2ebe1f79257e510bfdafd12f522aca80c1d3833ebc6d0739f0a56fe37763e85127bfe182ba54ebea3086a5a3d3528b6015dcb88
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD520ae8b15f913756528f467a0edf77267
SHA1dbbcea27eda12f386c5bb99a0fdd2e60a7b9e9a7
SHA256c0ffab76c8d1efb9e1a8a260f1484a6b0635c6f598f9cd661a4e523b61e520eb
SHA5120bf9bd1afb62755a7db8f0fd538794e4beb650f36eb86762e2ca8b0668cda4e122e5d1821b4b7d3ba3f02e1f3cc3372bfb18b63862ef58817208172a65f1a392
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d4f97d1d09c92c01ecc8f0bd93710b10
SHA1137227fc0b16cf40e5ef046d42bcd7148d706bf4
SHA256679a3b3464054e4328f35a82f9fc2cf373399a50fe7f5d89665d22f31a4c8dcc
SHA512ec0a64bf3694bcd3026919cc36b362080407d09cae2f091f0274b2001f7f938c3601f12f81aa645e6bf79a028e7c14a3e711d621dc53f4d60ff3eec515ee6bdc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59be9a24e7a3797f7f2aa7f0ed2e45447
SHA1a17f59c77e1aeb0f51d8845e12fd55fb6ccee27d
SHA256a64bd53d7039607425999895a3f2ab2bf938f2b76bd7cff092ec524ebdbb1afa
SHA5125006e7dc4f8ee20ed5fe7e02b2a19457f007db135a26761243d989ccdc243c9e71d8e6834ad615648cfb9e4cfa08cc021b43c68877265a5b50996194ca438373
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD545139c9527fb167aa540715814c1908b
SHA14e3579162b23717b7e80a8b5663fa2e7e86309c9
SHA2563c3e0dad48e0bf3e6d84da2444a7603c467043e8c35dca10615a49f93361383d
SHA512b0eff8cad3a997dec12b8193f7671409574ecd5965fb05bada91096ca4621e3fbb8331225e4574d3022ebe6eead46b7aec02183e3ed35be5856944ae039c6f0f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD556562bcde68f84be4ad0c9f81c328d8a
SHA1cfe84d6f8396a1e2c781b2cae3660c1966d32916
SHA25603341f05a14ba62e547faa541dc1b7329a8a4934fae01a3ebdc1194ace622ce6
SHA51233fbd1db70fd51a84bf0c249828a32ffdc4db02075599a8f9c612ea08b9dc2b89f4dc8b6e6f56621c1af98a5e1971e1f83181614ab8f1b7d47e5b135811456a1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d0a58b7a873d12aea6dfef84ce752261
SHA1aec85432695fe72fe79d9e58fb3f298605b49fb7
SHA2562c32c935c404e71d06b17695655bd9a515f285d2e5f7162b142c4441c14799f0
SHA51281600cba1809deba2800df1cc6edea9a86867531f88a79087489b271185ab410015f961655fd1f6a7b27ad7fb013e6d36061a2c32f382eb522c2ed756af46241
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53d7a631b31024272e1c146680d322db4
SHA18c6fb53c43b88ec67fe4cf91b8356236bc814cee
SHA256d368628074bb98a29c8dae38081140922bacfd9c0e47eb20a9e15c84e7a68a64
SHA512f01bb69beb2491f257fbeed7e78c2af9948d59c6427ed4802b4e6e8e995ede8a2d54b08908d2e2a09c69385698b8b2cb8f4fdd922948aeb2f21f6a46995142b0
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a