Analysis
-
max time kernel
118s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 14:54
Static task
static1
Behavioral task
behavioral1
Sample
3aafb8684541c3886be6f2c434a371da_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3aafb8684541c3886be6f2c434a371da_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
3aafb8684541c3886be6f2c434a371da_JaffaCakes118.html
-
Size
460KB
-
MD5
3aafb8684541c3886be6f2c434a371da
-
SHA1
294846f12560aded125076685d4bc13c713c63c5
-
SHA256
01fc4f31155318e81ca5b18564466cb88d3d5448e446e68fdfb73e93bba87634
-
SHA512
07d13e4ca77b616f7f301f74577660c7afa9d52c6e159ba005afa126fed37c0a9beeca298d2b5001dcc7b3648e4b494556c3a637f856c7f06cea418baadf9b6d
-
SSDEEP
6144:StsMYod+X3oI+YqsMYod+X3oI+YvsMYod+X3oI+YLsMYod+X3oI+YQ:a5d+X365d+X3R5d+X315d+X3+
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421687541" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{8B16E351-106F-11EF-BE0C-E2E647A5CFB6} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc233000000000200000000001066000000010000200000003fcc876ba87ab8208a60369841d7f7b36372ea4224a002c55f3d78519ede2423000000000e8000000002000020000000579673f570fa7cd02296c24ad424084f714ab4168ea9adcf32f888b8fb0ac59820000000439ae5f74408fa26757c9f21b26c483581c1f9d1f0fce9daf18ff42d5eac9943400000002fb6bb2663e67ab23d1eded7e933076690f8e43a9cad641e4f92e4b3f46ea34984fdc25e83d158e23977b9c27cf62136eb13058bbad5c33e209bc57344154ba9 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 3030a3637ca4da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2916 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2916 iexplore.exe 2916 iexplore.exe 2560 IEXPLORE.EXE 2560 IEXPLORE.EXE 2560 IEXPLORE.EXE 2560 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2916 wrote to memory of 2560 2916 iexplore.exe 28 PID 2916 wrote to memory of 2560 2916 iexplore.exe 28 PID 2916 wrote to memory of 2560 2916 iexplore.exe 28 PID 2916 wrote to memory of 2560 2916 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3aafb8684541c3886be6f2c434a371da_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2916 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2916 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2560
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54572864ffe986af61fa71d8ce4ce5d8e
SHA1e95170e68632e61e68b136b473429f242f58bf6d
SHA2564f06aa817bfdde3f75cd25004a6c59d09fcdbd1c9a663a9ffeed9338fec254a6
SHA512558e43a4a16447393deff8418434bf36f7304431f804f5fc3d03ffe154f8e04c504329c750c897e4557dd237ab59c036131c88488b5a0a8e159ec8af3a96ebd2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c8dfc64ea7689477709aae4c5d7d41c0
SHA12b558193014c88f20cd3d756a18c8df151d451aa
SHA25622889e1d6135d3868da9ec3873def607e7d905a331afe808c5780f8389728c94
SHA512dcd65e04c1bba69c4981f8985d1129d38a670cd56eea94e1cea3c1b3cf780cad5d21c1b27ced59f183ae012b6656a660745e029ed0cf5ec511287b24aae27cd2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59cc69b1209cac1f04ddd133a82869933
SHA148ae2093a116e1152b95e70ba5276f5eae9e69e8
SHA2566fdb822b94c38e70ba055e5204ffdfa8422f6e9a14f48d48e067c9c3a30902f5
SHA5123d227aa8173129bba145ca65d85bf08a6a09ab7335161ded40c0078b76c0b4643b7fcd0f61f2a2a35bb3041590a75f2913820769d126b7841fa2df39a85314d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5198d05ad9274388a5db4bbcd28dc9c2a
SHA13a7778acf874495f829ee12fdaed2e391d69d03c
SHA256262962d7c2530ea0b49563caa3c2901c52eabe1bb8894a931ab28a4e0df163d6
SHA512dbc041865c5cc8e15b3a35a595853360a86592ab325900792fad3cbe987f3e372b68ed18fdf06534be0c4908ba306d9966d749f37c6969cd16a658d19c45cf11
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c560e34ac859be67f2d394bd6e2889e5
SHA1261fafbde85578ef90d0c8c5646d87c31ffac9c1
SHA25659ab9cd14d38a86d194426163cb8e9db0b7f4128c34806e322f7054c420fedba
SHA5121fae4d98290df8da96d4d0e13bd9de9095c2606579b0f517f8502aa65fb67ab384128d034d3a32e7a9833d6ef1f50e597df5f5a329f68717222399e9b429e79a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD571d16906088f25d107b0f1549380d982
SHA19b44a4242c969f3343e8af31b38f44d14a2b3ebf
SHA256ccdf020273b2436cbd59b3756a2cd8eb6484365f091549e5d7ebb6b5a79266b4
SHA5126e7ebd6e6fcc7bcbf4fc34fcab3a54580fe432cb7394038a7c47e2a70e5d15b7242a49e84c0fbf66228c213dae91d01d34ad67e91757e8f61ce9ac57b6e78596
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a0252a4d768c5b9c42a6da3dec3101d4
SHA1f1a74c59ed9f93bb2d05a66a9aca164818c176df
SHA256150ab123cadf40dcd49596413c44e2874751ad7ac3ef65d70cbff53894d641a3
SHA51296f7dc400ae9cdb234924831ffb08164f96c364038de48c840cbc7c40ec01421f702206dc1b1ae6b1503e55fb2f87173a36284cdbf3030c909e747ad5c2fbacf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d215b4069de00dd5d747f3c6ef495a3c
SHA15c7e24c2175d786ce0a0e8d34116b9fb6bf85a33
SHA256cd87ddee23323149e8407c8579a38c9b983741b31d1e0dd6a9929e02b7e238b2
SHA51266e1d66615be30dd3c376a4c4811263832a789503dfeae89bc2b41c7cdb844a4ef09030818bbb7f4626ccf826153eb5ace70bb0aee2d74d4bc52568f6a9ec6c8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55f3a76dd40bce0aef06c1ee93f1a2d7d
SHA1075f21bc6d5dc39194d55ac30722c97b9d17a84b
SHA25663aa2bae75632d471259b51c5f7421a20ab9df92cac2852049e8b662b46b51d0
SHA51264f5d98a3c5165f23802968745e605d51450923ce9afdd661b243d5fdb7a2b70658869faa00cbdec8003e23b07936c03cbd3c4ec4fde6c8da2c07858b68927af
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b93485479c2f05af51d4efc37c19fb10
SHA19f76e4477e9e7178712f5ec1b96add33e4061b33
SHA2569699903d24dfb10dd231729199228a4ad79c73e8288d85e3b3491691795844f0
SHA51291b0002d68675309b0fdf4523a76a2ee1ee8795d2b6446a27c9077593e1297ac5c6c7e6a8f7e193f6b99364b7e9603e5c18cf69eb2ceb904f8e07ab89459ec3d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a38f9a58103c9ecc6d593745a0294859
SHA150e16cf3f384eee991a85f6ef07f3bb0becc5cb4
SHA2561b53dcad320698b0c21a80ddec365e16226423f954a01d2026e3187c26705760
SHA512b07f9b4bc7767ecc653b24d56ecb240aae5c1e39d682f61bc600fffcd109cafcf657456404e4c8899ea5f1e44ff7379c0f60686ae1f31da61449bf589f7e506e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e38b670e976c3a96e485fc17da1d7c8d
SHA12d38950a6e4bc6334269c13a2c11dcf86b7e17c5
SHA256b75f89fbb4c3fd88db97956404aac0349a3aa14e2111c49def8a5a011a879658
SHA512e3cf5ef4ed4131d236365b5e8f952c86483b9d5ae47ddf4f15e564856e5245ce125acc339587def6ec94dd38bb78b687efc14e67a7cb28cce954547baed83fa7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53602899c84eb0090d3678fe0ec256306
SHA10a79176bb0a3f3f5172e922381e3661345d36ff6
SHA2562518bbb8824ae3d96a1101ac6ae756b9c0977aeb2c4fb0c578b29863606254f6
SHA5120f73646d7d53cfdfbd5c2c8ec0bb4fc5025faca03a0db3309df7c87eed4ccc868244839b65993b3bf3f583fdc1b09cc699fdbcdadd4bcb3609771f69a849f69a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51faf799c72a9181ba10cf9bb8faa2c81
SHA1630c073289d381d9c32d8a682d31c97ec929b674
SHA256c0df178ad8a7738cfb89ce460c2e4cfc366feaeeab14d4a942a16bac267987ee
SHA512f45784881115f4278f1ae8ed4885225c2070c5745df8554f7ea8c59ec7bbd3eaa2e710e493924a38fc491fcb4c64167553abd5eab043bc31571a9202a5d96d61
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD550b542969833cf6121585018df97f8c6
SHA1e91eac4eb51d81122f98b4762122b5cf95e5019b
SHA25610534ae2ac6dbb9052f1345a47d8de037da3be6b43fa9ff0c55ec222c5c51664
SHA5120e199693458eed74940da15d0d20c8faf410b29144a1859c5aab6662be26e9cab35acdb4eee284595f10f293d64fa44edcb92f0446aa34eb815c35d541c4d80a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a78281a27fa8b35f73d1687e393bd8cd
SHA1f193170db02d30d41f8169f29b45057e80882cd2
SHA2569b7f6fb5f3ff7328d9e7baf2bfec863e8dca413d54d11d8efb546d01a8884b11
SHA512cd4996ef0092c4d489b6df3e739e936c6bde836edc9999676baab2a58ef5a16e79c5bbf3637e226d9b8d1a59770b459c7a4e43d2dbf963b8a282c7898a24d6fa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55ef35a310fabd8d75b3fe07c59395748
SHA1aaeef729558062f08ce8f67ce0e78f2038e578e6
SHA25662623ca68df2a52f320a763e2cf1b228f43650a7f812692ae9328f77e6de7eb5
SHA51290849de75ba155af6ba4fbf1a218888c82237b7db4daceea23212f863688b00121556913cd45068a29e140f9caac05b61fe1dd0594db4c9f0fb62e5a8f77226f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51c13268003c87a03780b8202392a51a0
SHA182d3101882e9869564835f0c7a41fcd56105ae53
SHA256915b95a41addf8d3948241fdcb1a311a18d8bb46020a636b0632a788b0a91428
SHA512592d4ab1860ff1dc184473d07005685ee0af90e9156c50dbe132633e65b0b30fb572b1fcf6aa439034a3c64111a868809072b9c19e4583b37c166e11bfefc9f0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ef723f1e3114dcf197b4d468b530f685
SHA1e0aa4a6d6f4f0c877f3a6d54a8517e023c97f582
SHA25669954f23e66a049a66ba46cd112cde1a9fc6111e8994b3aede911d3c6c21ea1e
SHA512dab42f18ae128fbb560188a26d3f7ab51abf30de78623c4781b794c4563cb9aa2f93d6c1ec1a75b684015d326c0d83ee4a1eca71dabc222ebc2699883c7904b5
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a