Analysis
-
max time kernel
118s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/05/2024, 10:06
Static task
static1
Behavioral task
behavioral1
Sample
4a89edc64f4e63db26d3be7a25edc698_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4a89edc64f4e63db26d3be7a25edc698_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
4a89edc64f4e63db26d3be7a25edc698_JaffaCakes118.html
-
Size
152KB
-
MD5
4a89edc64f4e63db26d3be7a25edc698
-
SHA1
a57695146b5e8f7eef72924f24770f572174abac
-
SHA256
1d1ea305b63c5f504867eb0063a741772d292abda4f960ec6887ff8452e9258d
-
SHA512
213788618feb31e7c300fbf07cd33feca9c1015f3ce19cc27a806de2ddab53a0c7c95a3cfaabfd3178197a0eda356fdee9d5226fd20c7154bd761ffbe43c3edd
-
SSDEEP
3072:SHkjpdqdH8kTyfkMY+BES09JXAnyrZalI+YQ:SHEjsMYod+X3oI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 304188d278a7da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422015869" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a9606900000000020000000000106600000001000020000000a6e52884d4a2c42829a6c83b03968ddaebe5adb58b61d13907314ec1456ee419000000000e80000000020000200000009f95c23cdd76f81f54cf0c822e899fe57a0d841a48c00b6910bdf0de28a61b1c2000000054534ce03208fd4973e4af07e5af6b4162eafd0ca9ef5a45170ad6b3b24e511e400000002163465542ba20896a992a9524374c2ebc1d60b4c45c7bea3040ff87440b20e7fbecef4e9ed0c1bc8673e77b9ed2d5babf29442801280cff7cd73fee15e8e158 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{FDD58501-136B-11EF-B0F4-569FD5A164C1} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2192 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2192 iexplore.exe 2192 iexplore.exe 2024 IEXPLORE.EXE 2024 IEXPLORE.EXE 2024 IEXPLORE.EXE 2024 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2192 wrote to memory of 2024 2192 iexplore.exe 28 PID 2192 wrote to memory of 2024 2192 iexplore.exe 28 PID 2192 wrote to memory of 2024 2192 iexplore.exe 28 PID 2192 wrote to memory of 2024 2192 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4a89edc64f4e63db26d3be7a25edc698_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2192 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2192 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2024
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d59e9512f55bdffd57df9ede0382a333
SHA132176b3471507d09d34b0e7ddd03b9bdb057749a
SHA256096a456f3797e628da20c4e86948e42bed6ff438d737a8dff435e9f9d3c2689c
SHA512fea9108518c4027a56d3a76e540fe176e74bfdb511cf990865cc5508c978c8ca3c632abb7d00b104b5c74d2e345192d7f1d3ed0479e7965026b225488ce2fc24
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57b015e05c05c4191253e598b476f48e1
SHA18d0c9a389dae8db7ea627911ba4387c2abe7f1c8
SHA256d603f0b2324bd83706fb6267b348c57323add6e50b2a524d2bdcdd8237392de3
SHA51265cdaa8d9da36491ca8d49b7ed971ce60f06f3b67784c34ef6b293bbe6a99252bc364e18fb5becdeaeb469c6bedcd7b27494066fc39feba1c52dcfe8bed5b17b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50a32459b67970ac83b1dc97f828f9215
SHA1f0baf801dff78e7f85897221a7b5665a7f92c30a
SHA256f2818109b407117e5a9f8a6a3f1d1251db8f58fb7e861a17d7e0bfd614c8a9ee
SHA5125cc31443597977d3567ae7568e90f6aeeb541eec21e8373f81e60f7051b425a4b3bce4f99fb9f5be27021feca9dd3e23415380c6d9f34e97e4f1afa30d141a7d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5301d939eaa80a69fb025f833f813af03
SHA1d9422227ddd9827926df952cdd5a2b1a66a899a2
SHA256e4599f3ef5a5cc86ab203e0756722bdf02865ccb21fe1b01ce4a631b3033872c
SHA512eb9b79930bc7a9c74f1e4d8e95e06de8b14a8f6a596dc6c78463c1905d044ee97c42ea0b79ad807391d69e46d315546d35207496f084605bb18374b03df1b952
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD544f5838b5d1c625fd282483c287d904d
SHA1f5a90c13c1a26502e53b7f64816d313100753f3b
SHA256e4b07963ee16c2f9c14e96d7441542dafc583bd351f4a22caaca1cfa9ce2b471
SHA512b142c6e189bc4ef2acb4334928267e0c244516abffd378c9c18157daf9d17f477c3f9411074d4a1ad96841cbc6dd95d27849b088132a9bff39aed47db964d0b7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51673995d0c51db7431188ef1a495a3ef
SHA1a265ee3166fe7384bd307e0aac8ea21b145ee4d5
SHA256c0d4e6fb2e0bc3efcdc2e5b5ac59a60915105518e3ce5f0a1c82713131731226
SHA512e5894570b8f1eb4907ce9b23134b7908754da85f2dce403897fd831edd947b106602fc3c3f15bae8fda0f22f919b60db0fdf5199e3ae550c4254579735a16132
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5baaa29ed754ac048f10c35173b5420d6
SHA13f3e6cc2eaea88bdba0c5ec8e7c4e3c981bdbaf9
SHA25672ed6eeae523ef7af7f2f0c39275a90a6dfda012bc031938a042d016752a1810
SHA512b2a030f764b0ede7e9301f18e4562d489d3aac02187d9a303de419113ba972f5677a69560839b1eb8fb3a526df207d1d48f15397d93ae231fcb66f4f37a2f687
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ae60b38e22b306f1c7ae42e6d4768347
SHA1ba1b53ae0f016e87b0f98aa65667233266b79905
SHA2566902fb087265113ce43251d96fe71839d6f9fc5d60ee484dd99a649c851c2337
SHA5127acc77396da641756488c1bbb61c0624452ff096607572cb7362dd23a0a635d605c486bcd5062592bdf2a2481988fd9fbd65ae1f8660e9cb2b460780617dab3f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52073b2a515b367087aeba1468f4fb831
SHA1682ec974b017ad518dac66441083a3160ec40dd6
SHA256832447744e417e095d95b34eac3c901954677cea0449420b1980a5c3d5d40695
SHA5122240de04fa1a1700dc25c1ea10a05eb0958abba2a8e6833ad18d626729cc0d216ebec31fa0b8e092ee28651ac9bf9d09ec31e26d1021a60c9a88279f95faf1d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD545b22e4d72eb81507458df95b8f55316
SHA1819d09eaa52c90c1fa761f93d2d2f9b4b407b91a
SHA256c45483270721349ac856e90003fe9fb5ab9fb8d69466ba8de2f78a1346c6c73b
SHA5121d1d27e8201ca0cc2e7774c20c985fed1fe89448c431504e536f93fd280264a44e5803d0adfd177b23da7ceb413af81676ef421bfee255de81e320aee8df984b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5919bb3e97ef10a115f5bc67fa72cd921
SHA19b1537d4a1e9dda3df800219732f78c64fe90797
SHA2566e1bdd4357b54ebe8d5e140377c9985bb78ad08ca36fa62c2b4fe0365ab7a9f1
SHA512ad008287db4da6b73ebd81871abfe6272ec0246a6cdc961a0f66aa1f02fc19010b4b02d958c8ab227014de0c11839e2ff44adbea0dbd7b86017806638fd352d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59dca0ff6bcea2e252e2d7f6f05af05e8
SHA17a9a718e9076d8b603503b965c5fc73330484619
SHA2563878e85b0e2f5ad3a14b067514421770f0816800ce3e05afce56666fed7c8f3d
SHA51259afe0ccd3f155c2ac7b01f2add6d5a57ef3cb33d825a14a478de616c0f85ea28f9c512e73b88a4f882ae7db0a6568c7cb099916d0a0d8c4bc6fc381416eb67e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50cb62086b8f47f309601b16d378d308c
SHA16ce0e826d3131925f0521d545ad496df69470404
SHA256698e0d3d5bd62aaa55cf195179066bcaeb1ac9a42eb586bfcf208308091da116
SHA51299cce631528e341b88cfd7a315b2c8dcd94f346d4f4436dd9627b4abafe0f52d7508e3631c6c9e67cf78d596ca1991d293d325de2182ea13f086c079a86bc80d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a3c35c8dc13de550bfde05b9d463b2cb
SHA1af7f3c9f1ec3cf04ca9770f649f434fe8bc70a35
SHA2568689cf8344e047e7954d0b447a37234bcf98f447adac0542fe7e0bfb79e22dcf
SHA512913a39979d902e3da07808a1eb491b7b74490a90fe058a22718a522c3c148f948ac9393f63e3f23c923843d5a423dd2fac29c46f3ea7986a346b116d9bc4d776
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ffa4bce0ee51c143e20d8cdb565d69e1
SHA1350114c2b5db3305b9f61071bd46992ba574c13e
SHA2565602d857fe28045b87553ae25b2fa7da2c452856eedac9cfafef34ed8ac95016
SHA5122bdfc051f91805b312f980f575d77c92bb1c78352594b14202e222f3ee7a9973807dc2ba11758a643354f98eeef6e6b230a90f7ea16836137b629734a6f21c98
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5342b7abb33fd8d6525c4e7b479d27818
SHA108d60e65575ba491e4544310878b392400ab7369
SHA256b130328af1f57f6a2b680ff9e88251db8eb30c0c227aa366d8b20597eedbf5f3
SHA512c58e565201a6aee7cae35067debb5523502bc15c02ba07bf26e2a160e09ffc7f7f4335b4888fd3091074ca89a70e5061cc043b7c6cddb7cb2f6ac3cf8b84c479
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD549fe0024f9890e868e8fd8835090415d
SHA1baa9f1afccba3c00d5907efe9187e2dc286f7a28
SHA256725306f574030434723258097e214630ee1181a7b07132d4806540a1f654bff5
SHA5126a967043dc584c94707802298d56a4e9ad4acda726f8c1911b7fed1cf14de192e61d91112a5cf17e85206157a84176f05b0feadd9a7d50f8df695c05aa9d9dc5
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a