Analysis
-
max time kernel
136s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15-05-2024 22:06
Static task
static1
Behavioral task
behavioral1
Sample
484051dadb745fb1429cdc3acf1dae50_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
484051dadb745fb1429cdc3acf1dae50_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
484051dadb745fb1429cdc3acf1dae50_JaffaCakes118.html
-
Size
460KB
-
MD5
484051dadb745fb1429cdc3acf1dae50
-
SHA1
2f6b34c905e7180741ca650d14a536706b193a47
-
SHA256
9e37bd8796e2634e2fc29dc887b121e067c4b10b07f2ac6b74ae893c940e6fdb
-
SHA512
cd31f063a075cc689c0aea3d66f5383e94344f2215b73c02cebf331b7b2a4d42ea9be6a402fa30432984e83889f9bd178ac53583b8d2bae634d9bf1049fcfbc6
-
SSDEEP
6144:S6sMYod+X3oI+YpQSQysMYod+X3oI+YCsMYod+X3oI+YLsMYod+X3oI+YQ:55d+X3l5d+X3K5d+X315d+X3+
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b0000000002000000000010660000000100002000000073511bbabc03db7217d93c7583a073d032e8846665df31a877abfe69dfe5be94000000000e8000000002000020000000427d02917debdc5b6c185b47b5cbd96e20168056a6019a422bd3a7747c1190ae20000000199832e33cfe54197bd9ab4a12aaf39cc3d084860eb92f7770118333007e1b7d40000000e08f769572480c2b53a3b14f71123ad47a4ce99f1ee500c0562a4a4b2f9f646381b0a28675a05ee166c00714fd7b63fdecb44e6cd354ba9197f1571f391e3c49 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{543DAE51-1307-11EF-ACCC-D20227E6D795} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421972637" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0ad0a2d14a7da01 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2020 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2020 iexplore.exe 2020 iexplore.exe 2864 IEXPLORE.EXE 2864 IEXPLORE.EXE 2864 IEXPLORE.EXE 2864 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2020 wrote to memory of 2864 2020 iexplore.exe 28 PID 2020 wrote to memory of 2864 2020 iexplore.exe 28 PID 2020 wrote to memory of 2864 2020 iexplore.exe 28 PID 2020 wrote to memory of 2864 2020 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\484051dadb745fb1429cdc3acf1dae50_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2020 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2020 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2864
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD577b2352c17b6981f887c9d7b7b759629
SHA127833cae5a468a0590b31eeb8cba5165652f4f06
SHA2567a4576a183363eb7dc1975052fcc54a80a944ce4429c5361a963d7308555b3b0
SHA512e6274a406b71d11c10c950c8a9263a8742b625eb0ccd1ee26f31fee76e055d99b0567e96e0f858e5ae3502fa43b7abeaaafdf5e82e69d207d7937f4ff6507499
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5324d9085b277d5df0cd00b23fd73d014
SHA1d5fe4e58995f8b42edf07a2401dac833df90016e
SHA256cb5d600a0d04f1e773e3d8508801cfffb265f87dee578a6a1bbb4f4c9ccd0015
SHA512e7b4a9fae8db8bc9d255639e7da1a4a0126d7893eb5eee41473455b3d727ee60518a7ba393a23c14d9c94b67f0f132fe02e5155ed6436254215a4c69cfb709dc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5907ea85dc2aa7bea1160ac8f5b70d617
SHA171d83c506a20679bae1d02cb0bc13a95afcf8cd6
SHA256e26cef8a37e6fa8012853f2201792f178defbbc26fb6044744bf8b3158b57ba1
SHA51246b68dcb5d30a3825921325d37c8bba47473728dff2f8a607ed609c122f77cc6293bb5dd14aa1b4414067c81c84799b08877ceb3a944814c5d0f1a1465eefaa5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50419850e6c756c2f4d5963b010185448
SHA1753674a27c00845595700f9c099a2933c753143c
SHA256e43c9bc77800b09af4ed44133c452bc82cbbc9506ce640fe347175e5703e0d67
SHA512eaea73812007e0ad97ee84e77b27ee2df4cacd1b5d0eb56829dfa6f9011989dd64f9ac48bd72581cc4d9058e593f0d5fdf12c48525500f1800f2a0239bbb23dd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5eb8e6baad8426e183037c58cf999f826
SHA17106a06605990aa6c49af14b979385f16f38c1ef
SHA256e3bd1c4e0921c40a1ed940ebe0f01b6398e9cb3ec4e02959d74c67de0b9865da
SHA51293a00f3b49bdb0def95232c8a7ea13b4b9418d9f390575299a5ea86aa66a3df3cbf45047b1f406b5d763935bc86f2936304ba800faba0a51950de2b92bc74461
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5907489e75e0874afb3d90da64307aafc
SHA103e7dcf24ff37e32665445f548c5d1096372baae
SHA2563db5ea0a46592cc65e223533427e55c9a0462296e742a1dd2197757ea843ac72
SHA5122b215230e78729bdd60364e593cc828ddb61bb386a1f7c40752cae46b83caf9e429eff8d4b4a44439f9cc2d40ea676ab011826cde0bd21918eaef105af53aaae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56bc82fd15b3d7c43895b41317dcc14c6
SHA1b76ed6f7da57a95c31bdddc10aeda9cdd4239490
SHA25681c14330c59378082795db07a70a661d972295fec6a0acda3597d49fd8679f43
SHA51202f6f1d7d11d0010dc4df135ea0439c46807d4adf4cd70ccbd3c1d26cbc26094a3c77bf9cea991683671e3a5ad4ff679664c090e66446bd0b805adf4681b26d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD576929a39698994fec122451f12b6fb9c
SHA1af07b9f00560ba39b2c42acf41165ed3c490c600
SHA256856f836f6a5a8ba6c5437a7384801f790521dd2398741a4d3afd096293fa41e3
SHA5124d45997f524b7a3b340f500a097340ebaba5b421cfc07d5c03cd8f7b75eb1f37436f09a2c23971863a1d87c0cb709b1221417455b2cd80309691f8990d583c15
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD568819961e8e84b6f885b3bd5fac50205
SHA143ffc492a4e95370a2f32e804e8d8afbd7b61b04
SHA256496b8623428da9cf9c18dffdaccbf44f058bef483bf6f8ba6eed1ed27186ae92
SHA512c078a8ca7d024de8154e05ad43fe77198c4f8bb949aef0a09d6460e49195bc9a70dc807d01fa7508a95c985483d7edacf0f0b7ed8e85950335d5c7c72fb9d0b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57f1af20257f3955537b38a7ebc0aad26
SHA14b9eb0e8846fe38032f9bb6da81da3022faeaf26
SHA256971e6a0f29bdbb789e7aea19a5fa377e4d7dc7499cc1a227383dedb709dda6fc
SHA512a10419c9fcf3bfbc6c655f8f36de02968c436490592ccafb43188de393c386098ee3352baa70e288238f88563897572eed790659ecedee0fb654d59022efc5f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5041b1f18f09e5b854aaf1669299bc5f6
SHA15ab047998a945834d1dc236b025553c60dcf0a30
SHA256422ae19668aa267935a89b06f08d7aa0cbcfee4b527ef4752509b11c1ed0c484
SHA5128ceee1de56197d178ad7d9690222ba797219a4c3026f98809e5fdd7a0256ff1beab237bcd1e24ae13ee3f101fc8dcc12ed0601e305e0a240b19c138e85ba9a1b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5af9f863efe4326bc442d4a9afb696afd
SHA1a22fd61fc46922c2716b72f0f1732b80e665d938
SHA256cb61782f216138a1a8246d2a8b5421f1a8a41af5c7e9ff4533db3c9f85c35a58
SHA5120caec9c284cb34bc9110705bcc17ec013e6d91292e42a8c9123f08529880e73eb688f4ebcff083358121790a06fb5f09693b5783bb194ed0d203d1180a89fe76
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59117c572065f8815bf685378d2131ac4
SHA145cbd47764482da4fd3b07dee504375f12f3a4ca
SHA256c0f08138ba451535165c3e8ad70c406dda3ae532b97be9a2d2060cf746351703
SHA5129949afcf0ed31a0d99b3206279c353729a00af9b0267b83554bffd1b7cdb511be2943fcdbb48e66a62b00472a124de3af2b555131325d2dec053131f1a51abf9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5525aa2d5b3131b6fcb10d898c045adf4
SHA14f5078dec47843c1470c5ffd5007418b8091c187
SHA2566483a788ecd65721fafe0d2a6e9bbe1bd7fdbd116bf2b860a000142cae3ef824
SHA51285fb6542e97a066dd2d736ebd54e4e37d04b2f406684c5ff2184f749a7a2eccec8b593eae6ff1a3e96a742cc95482054ed8595ab3666fa917f5752e73d3ed0ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59f93e880a5e3789e331805dd3351b8b5
SHA1a73ae4a3c0bd9557388320957496d02f1ce16e6b
SHA25687a0941809a92a452001e28b8778e5bdbf4eaa2f5c3d741fcb9f1ad542f91f1d
SHA5127814d32a6ab8cd3c98e79b302fe04b63db2ff075795ac9424961c396637ebc010b8bd87cca72067042390dd659cc049c1a751d7d2d2f719b85c9d980a043daef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57fe4fc0fc3dd6655b5a9bbd424755eed
SHA1b507da2bb6faa11314305ab65bf24992dba754e6
SHA256ff909a3a451bb2f7dc5a757505b591d2ffb8d38e07af2ec7b5ebc5f3debfad0a
SHA512b367a784cf654953b1a6eb55c1bca7f7ef4effcf9ac3fd338f10ca449ea297a0fd88b81b0588291044ef065465da80666d4ef908f2ca984dd0cdfebf42147543
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58d587424f89f878ce003af266f0e6910
SHA1420e4909d6c3aa7c91a59ba9ee8075a34910d881
SHA25637b177163b1ff57bb7224021044aee056caa78cfae4b27e15995a066e1c30cc9
SHA5128a66dd809ca083334174fa3637a6b41fe28766100ff060d3e8951ec197a0ba4981ad9313c8251e151ff82f555c005e41fb592a8cfe2d3d4247eb43c031bc6037
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a630b52bce9c23c3155bbe21571fa29e
SHA17059152236b930ff67a060ac7cca005a602435a0
SHA256cfa1178665742ab293010d2d27485408a61c2db151ff242721b7c0b70e29773c
SHA51241a10a1d2aaea5ca939d5659432e501e1a79c1e199bee7ca3a5e8d1d5a03aeab404cf13b1e36f1e3e26605c685eee773200d9ba57cf175703594e75664b5acff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD598a4ea469921fb631899060ff4ccc543
SHA1ca75a44c5758992b097789a5ca2b382f287b8e43
SHA256a88e42ef66631cc028abab322d7ff2ef173c626be7e0294e5d04f16432911eb0
SHA5122fdac6825636097fbcbc337a156b23fbef9c4800956de094ad14939db78103d3a19f05e606e7179c3f6c48378522cc391f0496d6d3fbdab13b5401accbba0077
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a