Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
13-05-2024 23:53
Static task
static1
Behavioral task
behavioral1
Sample
3d1903943faaf8eb10941cd632fc76ec_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
3d1903943faaf8eb10941cd632fc76ec_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
3d1903943faaf8eb10941cd632fc76ec_JaffaCakes118.html
-
Size
23KB
-
MD5
3d1903943faaf8eb10941cd632fc76ec
-
SHA1
7ba234ba8f17ec10a1116e92e8534fd929003af3
-
SHA256
519bb9671339f9339ea4a6f61c3ef06a22354c49c7eb3b57e0a11931fd7de03e
-
SHA512
17238c3ca72f4322323465547f4ec8e6fe4495fe5629ffa741ddedc99779814344beac476b4c822403890dd8674cfba3711da26cec2b8cec00e937cfc76aa1e6
-
SSDEEP
192:uw7Db5nBGDMnQjxn5Q/dnQieANnJnQOkEnt3znQTbnRnQ6v06J4RnQNjMBgqnYnn:eQ/Ev06kK
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421810935" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc233000000000200000000001066000000010000200000008b41a840d3b98c65e67519d3ff847b497c3123d53e3482e9ed30a5e81fedec69000000000e8000000002000020000000ce80eca6ea58dccc7a36aeca74d14575886bbaf6a99062832488144f24e313c120000000ceaaddfc33bba7ed2515be8163425442df43dbc6438d1396f6b5e177b832610c4000000076a038a1db182bbe07e1d2a5a41565bcbee055a5633f12b5eb6e6a9b5a0c3295dd2a36570cfa89f324aa3789fb57ffd146913a83020f59420c5dd5bfbc28070f iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a00ed7ac9ba5da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D83F6421-118E-11EF-9BF8-4A0EF18FE26D} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1708 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1708 iexplore.exe 1708 iexplore.exe 2540 IEXPLORE.EXE 2540 IEXPLORE.EXE 2540 IEXPLORE.EXE 2540 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1708 wrote to memory of 2540 1708 iexplore.exe 28 PID 1708 wrote to memory of 2540 1708 iexplore.exe 28 PID 1708 wrote to memory of 2540 1708 iexplore.exe 28 PID 1708 wrote to memory of 2540 1708 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3d1903943faaf8eb10941cd632fc76ec_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1708 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1708 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2540
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54520e101f2dd49210b53b5a48817fc6f
SHA17c1709f88b43820023b61f6adbf17d90772a6d83
SHA2569923ddf1158c706c206e39fd6ba044ba357fbcdd1b59d92f5249d3f24b094b4d
SHA512da08cf8030ad335d6859747d12b0b5cfebcb7e43bc39ee268663de946df74804c39eddfbeeff3bcfe7020eb4602343150fe15f132eff231279d8a7a34d4e6386
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b1aeaf632be0aa3e9f85027391633483
SHA160014cd46c0c9b19ee2ca895d50e99153c25dd1f
SHA256f303c34e971835d88de094f8fb27cc52d543ab446c77b0ff0b343123b8a37f71
SHA512750691ec7f4b7c3ea633830f0a33647e3460a701dddabf9b394693712a2d68a9948030c7bf0e22d9cdff7cfac97a897a2d6bd017c98f1d7db45dac657fb61e4f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51f84cd235f817e193094a4bfa0156f2c
SHA16924cb7f3c2854ae4ca511412804c22d01973d41
SHA25675ca1bcd50932883e7a20b3b446df9b3573fd47a839e0017cfadcaaa26970bb8
SHA512a92225f84d96918b3e81c564e8b3e3d3d35e5d645e3f53a2b0116f6d4b909ed19b5d3b8e0dd5137150b1f1fc105b0acc291ecf9351f3491fbf69499a44c71274
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ffaefe3db37975c803fc01ab76b607c0
SHA1ea32215e2d614fbf7804ff647e26aac42b2bf6d3
SHA256f35762437c61c5ff77843ecf60a04b2dd2adf763681718cf0fa3f9707d2e159c
SHA512e994bc13059f2dc76d58ffcbc2381f9787be586e9e1c9ca0ee340e8925f92fcfa1ae4add66517c88c86516db7ed08c198ed5a5d9bd04b812459e11e7c57a2207
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c97aa6725d1c45cfc46fa7efc1b45fe0
SHA182ed743dab6d7c828120e824d23ffa3e91de3d4a
SHA2568293771b58c27708d3c7a33183a83decc9b198c2e76fe18e3ca3d03f11ac9b35
SHA512882f35bcc4bdb0a46984ed3da528e7aae3b8ffce64c8efeb5b561491dc0dc616152e85884c9926b2b60ae82b67ff314357fec0ce48f180bb4c3c32f512151155
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5daf5584a270695e7eb797e8d40dd2784
SHA12d5e625bad123f8fdb1559400e678c280e189cb8
SHA25601a45b87f2262d14645608df34bcb6cc23ab2ac3f20b9a822f7c7a31763322e7
SHA5129414546326e7d74a5cfd621f9a9361dddc5af6d4d155ff7b0f4f7fd73853556013da7c2d4fbe20c29b88eb3ce473e8cf6b968e7c6375de8b7d4c07fb5ce39341
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c0c0e7df448b61c916bd73d6527accb3
SHA1a3d4f76ea7ed075c3c848b9127cddd53c808b462
SHA256b7a0d225832b4666f3a8dafb99814593f348b0e389ec12e1c19d1c9d755bcffb
SHA512283b959b15d7207b186a7121bf7a8a75ce3a093548703691cb58d56f183b028e1c55e5428e44d651c148ca715d22060bf311de6805601d602da71b1efe287c88
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c5b1c86730d73d4f72751d7206fb8cdf
SHA18de4f01c830138830fbf11e6b8c9a9d9f1e5346c
SHA256b2044bc9f58ec309e4442345de2ce012ec1925a0775304575203251583bbb0e3
SHA512e36c6b901d2ea856bb47f6da974ecd5dc83db922aa74be08a79fdb204b38c3bd39d0893bd227022abbd6bd636748029ecec1d2df38bfdcb555614647da8b9474
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54f6bbf2627b6b5020460009a007ec1d5
SHA17dab7472dfd5a8afa4a7c44614c88350933b50af
SHA2562ce75d579246e56dd4b2457c74b25d43e6acda4b7061d6c537e5628386a4cec9
SHA5128e4fadadbda9933b64d1f4997435bb134f812a74e4774d235fd5c528adb6ef3ca62952445200a8baa7b0a983f6d5a99037d66e6d1331538668083bf7abfc7eab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d441a051d0cb7d98f2634d5ed89b1971
SHA1b7e074bace419afb7174b7fc542c064a359d5b73
SHA256d8bb47054962e1c8cd708bbfd503122e79d65eb89afce2f6d69d3ba014cdc24e
SHA512f0a5b3b364f81dc73d9212be2f0349299fa4783c4c979bf02fab8be36b30695cb3b612080a18d9d6453777fe67e723c28403ec0ad50ef214a85ebb66cf3d6511
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD549dd29721ce9870e943f0712f4cdb335
SHA1cfae417dbf4822f35582b03ca3ea140cc4e2b4eb
SHA256dbbb6d63010f4c087abe5abde8e44b91086796d8aef4694167ac9979ae9382ee
SHA51251ef78f16040a37faae352665b0a071d4795ae2e1f708f3a9ba1f56b4c36a34338c7962a0722166c002d61e316ba559aad2d5e59226b74245c51b19ed68f2469
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5df506b027d75547d88bbf9b032a3ab49
SHA19ce9a19dfe44da6fd87716a5a199e408a871bc04
SHA2562705a8682112958e7144a40205d1e1d2efc5b95bb7c1a4136c17fbd9033558f0
SHA512c0d0fa63b8d86d7378ad411b30febb91f117e2d39194502a6e476f8b8ceb01aac9b6d1325af1710438c7ccf2618ab12fca50efa83ba5fed3e1bf9f7484c246ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56c61c958045cf3bc893b5b9ced62c002
SHA17f151e4c1b9d3892173de5c3cf21a78989884895
SHA25672e62236d46c00f40f57717cdfb6569be70fd9633ff8a1dbb79c959879abbee5
SHA5121b226b4826a101b3660b9d6170777a3975d14f2d8161aaa2c94aaf9b92eeee0cb63ab3ca0329a04803f2702607ea858a327a13588ad417976bd8fd96291ddf3a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53729e2920f2f993d35ca635f853099ec
SHA1ce5d216febcf87d3c696118cb670c77d737e89f4
SHA256b49377edf193b5eca3b7801b3d58c399fa8da84bcfe567f8c7dc1f6e1ae29cd6
SHA512b64e60747244523d254d481f949a5350ae305746486cdaf86d26b049a8ce64295ca52fcb22bad8eb26628e5fe94f2962bf3ec0b4ef360724a64ab64af8768f01
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5958d0aaed2310ee4e3ae02b9df743d2a
SHA1cc12ab585a2ca778029d6616198d4a08cd978c2a
SHA2569fd703105898e0789e1dee31c4c6a33db6cc0c374da3c0733b2a34d4f3b5ba95
SHA512dd2a36bead6ebc0c494064d7b3bc0de5bc026ce3ce3bd221b9b197f75d26b66c84e3838becfe00e0ed8fe6a5d635d265d3a4616d055dac178e8cbfc013be3fae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c1f04e24b987a0c6ec1dcf54fbe9f27a
SHA1c0a34da0e07f53fabcdadc5e9c192d903aae84e7
SHA2565a6dd44f6970b5c6f2afdfb3b808806567d89f16297da878730446ff737def2a
SHA5122d18f7bc608454bbf9c3b50213290f6d50fa1077d579d0274a4114f558e9f3fc7dfe2c47356f26de8ff3be87652a34cb779a0d5d6af4037a3ea71e56cf88dc0e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e0834e53e81bd695ae7ad8940626deba
SHA18425ebcdd4f9df59aaedb379b11953fd3212d230
SHA2561e80baacd15aeefa583d5d804fe95285824d41e00adf5c197abda8b796f5407a
SHA5122233c51f4f525c3f8082c92e33cdedd17621d65b3ddbd5c48934a6e32cfad03cc7dd0e57e4acbc42774916d859da5539f1e0060786609140bd029c76d7c9b222
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a