Analysis
-
max time kernel
136s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
16/05/2024, 15:44
Static task
static1
Behavioral task
behavioral1
Sample
4bd5743c35a218ba8a8e0c380677db57_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4bd5743c35a218ba8a8e0c380677db57_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
4bd5743c35a218ba8a8e0c380677db57_JaffaCakes118.html
-
Size
157KB
-
MD5
4bd5743c35a218ba8a8e0c380677db57
-
SHA1
0f4a53b538ebfa5718dc55a6ed6b60928c288621
-
SHA256
f69686d3605e4c0ee7e813c23da3abb38542e40859120502fd027613f8ce15e9
-
SHA512
d95cf4e1df6a6603ae5dc83f537a1528eb83ddcdf509f54c63343d87b7c514d8dd48c45e62b076038471583080c5f7187368f0b4c001cda126c85135d763200f
-
SSDEEP
3072:SEeNczFF08yfkMY+BES09JXAnyrZalI+YQ:SE2iFFisMYod+X3oI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2B923721-139B-11EF-878B-CAFA5A0A62FD} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422036132" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002dcc56832ee45b40af0f973e997a3e3e000000000200000000001066000000010000200000006cd73bf4384733c0eddcfb3b63340d14d751e28fb31e7d715f858654bc02721c000000000e8000000002000020000000b66a7ec411a74350845c6e2fd2b36a6cde5fc65e923f0de67d25755c4afe608d2000000038bc2580ab86d83e116f3194eafbdb15c1fa8c2daed471e9eea50a4803c5fcdb400000002d38269fa8b224e032bfd0d875b9afc2b1087b5d7c640ef9add428c6210694e35c37cbb00285b8e51f613267481c2bbd07b1a5cee11a9ab3bd7a16b190b1ace0 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f0d75d3fa8a7da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2128 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2128 iexplore.exe 2128 iexplore.exe 1064 IEXPLORE.EXE 1064 IEXPLORE.EXE 1064 IEXPLORE.EXE 1064 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2128 wrote to memory of 1064 2128 iexplore.exe 28 PID 2128 wrote to memory of 1064 2128 iexplore.exe 28 PID 2128 wrote to memory of 1064 2128 iexplore.exe 28 PID 2128 wrote to memory of 1064 2128 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4bd5743c35a218ba8a8e0c380677db57_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2128 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1064
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bd11f3071e66a36b6fb41e684999470c
SHA1b979050b9f21779da88407e2965e5aa1b9f7080d
SHA256d3e42144d8ee5400f7df3b0ac017e0eac8e48827b17b5c2142a5467810c99bc0
SHA51225d572dbaae60be8f3dbfb261cf9bcfad901aaaee5fddc068092bba6433a40d46ec323b28711ccb8507839bbcbace6eab1ebb31027545fe988572302c5f0f779
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59372069aa1bc1f66fc82465bacd4836f
SHA199ba57711df487253eec78849bebca9de0add2fd
SHA2565a9de18d850e873cc4f2d5535f19cbf1c4f498c092acb3982141bfa9e8936469
SHA512a6d1c83776272e242100fe4a61d24e6759274069df27e60efdaf9f32cf929d8ac2f7076033610ab72c686bfa6a8325d74a6307cdb4292b023e33dd090c9f212e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD552c57003052114ba79d1bda421da8817
SHA14518c44cc3f5692311cee7022076dbe293b36ab9
SHA256ac60563bf2737b248c6306a62389f45ea34e49e9fef6a0884028ce5e60e976a0
SHA512c5d313f77af7f0bb06b1d1d5e8273de1ecaed65f7112d352385133c3fdb1c6f20c9049f7789a6afdf6fa546c463723427afee482398ca362546e9884d9b2c925
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD586d95d585055d33fbf7d17ef1d2aac1d
SHA17e5048c2c7b08b1c3ccc41f797d0f576e5833e91
SHA256b0f6641dbff97caef97554ab226b1b60064d85b0fb46567a90cdd0dd24b14531
SHA512a7be80e368e454242992b9e6cb6e5f4120f32263622efc81b370a31b5aac43fe4dd7a8eb8a6524dc67968212d082c6d0ba5cbf1afecae355e8a9da041ea221a8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c4945a401b3aca29e905338c18148479
SHA1ac1ac4117e299270fed1ce030f8a35ea5fca306c
SHA256e84236be90232264d1a16b27fafffe8ffceaedefa26a6e071c043ce0d15c2f28
SHA51287693b945cd5f10ba21f9a6dbd7cde648077d9dd14238ff003667bc4ed81f4bff859bb543bd7df7dedf7df6836d96ccd70adda3411576fe729e88143cb3978da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD512f3f88e07f9cce338a3a8f921bb7be2
SHA18ea201ad6b14ce5c39da7e92d261fe2e69f8e9ef
SHA256e51ddfaf3f01e6de20d4da2e76b230ed419672902cbf81d48124bbbe953e224e
SHA512f7703e7baf68971ed1070f1c4917621e514f6cbea5f215f3b80e65018f6a20bd04d567ebf55b7c76c58e0957f91b015e3d8cd04fabe3968a9e38699960294cd8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c83a690621a3a92254ada34d60ff7933
SHA124e59274db45a601f476d4192e6f7cda6e6c218c
SHA25646c04b72da9e4c83e651c0ff6d6fea9b8545cf62463115e63ce7a861fa626d5d
SHA51275a623229226527444aca65703c5da61bab750ec998296bbaf2c215d6324e97678f168963cd2148279a885d36566a8d4701e6bad06e45bc8eb1b1d9b32c04cd2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ffb04e35d801525ee6fa5b7e6b0c23ab
SHA1e966066fade8e4154ce89b8fba05d738118bdc0c
SHA256bb57b9e9f154cbb66ef82fbdaac5b760534d4630f7300c665e592776018f7d40
SHA51261bb26dbb9be5f13ed649d79d5c9243abddf333b3077cda1c3fbcfa22f2cacc98a9add3dd0ddd243de00e3c929b3bbe691de30eaa39f09b86ce015d989910301
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD538668c11a9156fadbde7f259c303cd2c
SHA161777d3818f1922b391995d0c38f621f2ae15758
SHA2566dc8ae545c1cac5d67dfadb99f1bee4b380f1046e0dc1d2fb9e3d91836d492b9
SHA51276447b2197c5e48ac3df6f8e7bee53e2990b14f2306c9bca4d377e5754589298a71d8a9621413c532fe81bec7972eb23571ba2380b256065bd1cfaf571b81f41
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5274a1a94e4b194b7e827e7d29960ee78
SHA1631a36bc6e53c3f4a33133b4910be1dcf67387fc
SHA25664d85aa5140637cbe855ef2f9d72ef9572fb93edbeac7b94ab4ffd31ceb34bf5
SHA512cc85d8f9d8d3933fe5f380c77bea863d93e096feef22d1fc014c517e91a7a84329e8931c7ad0774b9a2901fc5b261f3d41c294b8c35523b7567209e3ca08bfae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59a744c4278f94604f5fd75c2a29eab81
SHA14d9dd23ee00444e27a34f05cb2fcd0fcf1df0f22
SHA256fee9dae200c07be64d24ce55b4c76bb1dabc041bd99da044b471eabb21248bb0
SHA51257467be10f65bd50620f448b2b0ecf8fc20d5562d01599f1bc29ce60accdd2726b353fee35655aba7968cdc0fae625751964b66fc289db5f660c7000aeb508e4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fcd9d9358589f93ffe6bd1716dfadfcb
SHA15cd9c877b721d48eb0ffb4923c1335dbea791c11
SHA256bb665814424acb0fe01c50b824267562cb77f55611aff814e47650861dc6e17c
SHA512ab083ecd6b253562e2f143b9a58a8512a5059adb27daa2e9caaee8cecb8bc098ba3ed3de75d939818595be20720dfcf4a67229986321bb04727b17ee9545e47b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57ea79c33b723e502b338be766d21c86a
SHA1709321824ac4b990ffc69ade780ab6b03182f552
SHA256fe3feb62609ac2487ba79ab094c287b9e3415b2e334214551c80dd1bba46dfba
SHA512b913c922bc6e2dfb1683705489dd9d8f7d2ef7712c21bf440de450557ad1efb43d5867f8f2ba6a9aa71fafb27512df5be62ff2a095ad25784e11cdcd902f97f7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cdb2389278f6482c72ecd3bb5c524b2b
SHA1deeaf959f69743e95ed98adf36a761cd959d8d5e
SHA2560b70e832e2576f3812e814d0ae061c325fbc952391f78b355b9dfddca4d43e7e
SHA512faac472287430dff744d81e3f73ad9d901262717a1331005615abb4a55c7413b722a9fc9849c19fb0d0cd07f15f2604d68c7836504052ccf2a0f59c9b1d0483f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5eae021c953f7b569b534145e9d542a7a
SHA1c53ecc973a9b20fdd7b7ea6007663d637b182900
SHA2562000e30cc9ba5acbc61891ef8865396bb304f2e2dcb519cfa99d0ada0f1d1cc3
SHA5128c4a4f6b7c926c54e6b068603d7a2d316281bec61d2347ad8e8e524c7664a78123dc153c895b50cb9b147551a8caee375ae90902dbff777ea37b26b4a41bb45c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52a9915593770932eb2bd7dbf6cbe0320
SHA11a2f3b2c207284d7472a3b9ed090d6c7d39ade21
SHA256f80749c7fda009cb4b9ead0d0d98af58fb65f857a00922d655ce5fb330e232e0
SHA512a29d0f58c58b81502a6a5dfdaa4434f8194ebc4c89525410bf1f25088b97c1f62279eac32190d32082430397cd6c638c59936db8efb9f45d6d300e52998773cd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d35b3a05ecd80112d62d897788b5e395
SHA1858260091235f48bac75490dc9021eae0c38f951
SHA25624a1339acc763c455435b9941bfe4805afff86f924eccddb30f1b7e671d8b0f3
SHA512f95d861b1acd8145540cab7b4430c77164ca51c3c31e2115a2e86a1036b363bcf88caa82d6ef40899a35eff9570ef92641a88a8ec083833abc413cf9173dfe4e
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a