Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
17/05/2024, 05:07
Static task
static1
Behavioral task
behavioral1
Sample
4e8be88f302d4ec2535075676e621f20_JaffaCakes118.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4e8be88f302d4ec2535075676e621f20_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
4e8be88f302d4ec2535075676e621f20_JaffaCakes118.html
-
Size
27KB
-
MD5
4e8be88f302d4ec2535075676e621f20
-
SHA1
623781bf0c1429f838aba2a699547b909c5e1084
-
SHA256
f73bc2bb2fc3dd4828fea024ff7315f4a0f8ac04229a595029181dc80c9eda38
-
SHA512
5d6ad12225d3c0c3da212d8a2620ccd3cd2e39c9cf62f882ba8aa71fc11cd6e796b3dcee2623692a84048f30f1be703151c6d5976966acd89ebdd54f29dd279e
-
SSDEEP
192:uw/Ab5nCOXnQjxn5Q/JnQieUNnQnQOkEntPnnQTbnxnQ9e+0m6uJsqQl7MB0qnY2:jQ/ofMgsNS2xe
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002fba9043b3825749a09752b926232b4500000000020000000000106600000001000020000000d942c6da97d8d70d3598b710a1a9193fd589b982be95d0e2aa78e49e432da195000000000e8000000002000020000000fa7a6a4f5e4d321478398c8e6b004f76c77d933154e22d4e5ea733ec49446a0220000000b012230e1ac1cf4c50d4653409ee7a9cbeb417011a8962e6119a29094a81eae2400000000333af96c12f1b0dc6b6d25e27b5eebcd86e6e8747e8f2808ed6aa063521d22c021f4fe0db1f3851c71812d535b7485390462cee2f9181388a3827c48cdfb05a iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e023044218a8da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{6D4F4CA1-140B-11EF-AF55-CE46FB5C4681} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422084346" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2660 IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1772 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1772 iexplore.exe 1772 iexplore.exe 2660 IEXPLORE.EXE 2660 IEXPLORE.EXE 2660 IEXPLORE.EXE 2660 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1772 wrote to memory of 2660 1772 iexplore.exe 28 PID 1772 wrote to memory of 2660 1772 iexplore.exe 28 PID 1772 wrote to memory of 2660 1772 iexplore.exe 28 PID 1772 wrote to memory of 2660 1772 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4e8be88f302d4ec2535075676e621f20_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1772 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1772 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2660
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD531177d55da889a9a21d89a8098106f82
SHA1ab7c17f2f0bcc16021118b4cbc9765eac6aef12b
SHA2565e5d440f59d6e50bc9e7b12e6ad8b268d5fdfb9400195b90e4c88268015b1d29
SHA5126784d2806501543a2b5f29e41be5c07272289eb182deef3e0b17bc679aed2b23ea45828b8c60be0cf769fe9808c2bfdb3457d1fe1815a6dfc7d86ec988757670
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD528dadf420f91c3970d18a5356eef4737
SHA1d2c2e8fc10486ecd3b087d8035b2af6d52e753d6
SHA256f3ec8923dc2112b8ee58d8e3610b05088bd57cd8db78bf494bb62780d107dbd1
SHA5128b740243651c87a07dcaa55936f579a1dc5c3160318c5e7a44d7741f26c77e8fe802ee4f7f8f4206f18442de920f4dab1cc74c0c2ca77d5fa061b096aec7f374
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56b5305c1dbebaec00aa1e3c0d80bf216
SHA1089fd69654084743835f32290f9e3035970a8f42
SHA256c21f1963ac7aec5c245c8d6bbbd963226ee7041055e799fd0af1ad58392b40fc
SHA512904314a2655cbdb96de12cda27e976a956d8bdfca4015e080521d0fc98324525023599264fbddbb1444f4d98e3db75f7ac5f7024d42ef7f774045b82d22693e5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dcafa2c4bd29886045d179a15922c585
SHA1ccf082ab09c34387d09f81a0686d86cd652379b4
SHA256037a504311bbcf16827dba80399069b48099d031a3fcb933d99f6b63920b74ff
SHA51297f52b48854b6a04d7e19c33f6a7b3f1d2d3f721c7be75284155ae5e1eeed1e848014ae133a5861a19472bda2b1709aef1f2fe75f019679f33dfa79b72bf9760
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD530565011d6d1f7975c5b2a57941d81c8
SHA121f393a05ce04e3e3a267c9b7882cf4d8f839d35
SHA2563ae201d065414c0190d87662876e6242b623eb12f4696da5e100dae13fd51151
SHA51231c637c2034156bd426d6d645eb308b48024574af6c32e27b6ec4cf6bf694bf6f5e798565e89b6380dc4ac59cf69249a769ea2633574bf935b25c8412008d8bb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56ca15fefc1cefaba8edabc14db6cf8e1
SHA18a75d91545ee18c867b4d69a2febe555150d71a8
SHA25691965cffad582a5a65ea70a83e137773be02cb4ed67a07d364492130b5ce299a
SHA5128841a83c8901cf16c8539cc255dd42007b625fe85fd83cada699d3af8967a0e0b558758d6debe13ac68bdac920e2166a8ac26a4117b894e213f1427475629be4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53325639b4ecc8f0065260f2d66cb0904
SHA14dcbf73a08dea0ab0e70a534225790accd8ceb00
SHA2564248b7cbf7c5a32cd614e97fafe8c663c3cf2d128c3121f261202665e2765e1b
SHA512a71fef4cc92929a8ace78afcd46e9757d9ac82bb4d6be8e65782d3e2f8d95f388e29883da572857af8830a5bcd25540b36ebc453cee63af522e940afe99c50cb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51f450dd6c3a4c063a51790cc6f1044c6
SHA1f8aed9af6874e9855723322f4fd10c11825c3293
SHA25659b706f1bc0e7df4f0b92a68cba8ccb2899aac216e803579e81dfb682b0ae43b
SHA51293f9d15ac4f15f054f8f492911884ae24d9a0efd88ad0c8137777a9809c947b83a44cfae64a5214195a0e326b19c27efd0d082b9da59b553fe259dc31ea23345
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57fc9c686d96f2437c86026db14a7ae99
SHA1134d677ea36c28f65c6caabcd2ffd370101008db
SHA256d0806be44db4a7f75abcae724755b60c103a3176387f0e85add52d141e159b4a
SHA5123babf437da38c6201d009a4a020e7a035d48e5e5abf8eb31c21057aeb94ee81cad8815926f937aca519b028334b2f9ae4e92089bdb3e000048dde72404e5c956
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d19b2a1c620ab31bb6df64fd59cf79d8
SHA13a2f35ea5338b4448460cdf1078f9fcd3e70e071
SHA2565cb50df003dbf41645ada11225c21f74796332056d1943c7673bc94f8f50ef52
SHA512f4bfd7428a8b2ca5442aa8f22e70d353bc0ed4ce2c5c8a282df3bbe4d44454d115d12f2e0d15a076be27cf871fa70a1ab0003e2d19a3c2838e0478580f17ec9a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ce5a9ca1d43f1270862153e5ea921777
SHA1ea81dea858f8894582aa8e972327227b790987e3
SHA256149d5ea98b5349cebf12a09908ad2222ddef853a9eb669a1829e97e8e5bc6f37
SHA51232804aa233595d248e4afd487f61a02b6dec77d66f25bc8136d07ec47cb3407bc223e35a575268b0717d08ba30d8778663a5189afef44967a2214e47ff58088b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57367f05f9822d5deae8a5f965ecabfcc
SHA194268fc6f9860f0db5c1a1c0a665022bec5c1a15
SHA25608ab16c2a60b4e28c6457121709095ce9bc4dc623007d25704fbe96e0db233cd
SHA51232006fe35789aba2cc1808ddcf2815130e4bf35d0d667f2073a09c5ad45cb991ab617b75ee62bd22833bacae6df8ab653b84494328c46136ddd4656fb8439e59
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52cafc0184df4e8fe63dc9c46727138cc
SHA17bc7594ec39ea1f7d3f1822654c814dd1a7da856
SHA25674d1603452ecf662e56857d21867121fcf476403cd1535edb9c31f22186372fe
SHA5124122a4910ec9756397ee80e9f8132cce43a9648d94ea285f63ebafaa4bd7f01f488bd20f8594112d0a8c25a01c41d18a811759b7c10cf5d83d271a9bad9c8cb6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fe22207b6f6589afb109cd3c941c6b68
SHA112334e91cf84b2b4cd6f4906f57a2b76acd7a407
SHA256c575e17e5bea16b77930ad1797049e2f2f76051d3c2c7023c40cfc53559988d4
SHA51257cfa527451c27ce6cada7f5e8b2c41d1cc3289de86fe2e5d9cbcf98be9aa224f61943f9839d3ccdf1f9521b5efd55b88c5b4082a5b4c72ac356860697c56638
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD513c58e870ed7ee96bb888275273afa02
SHA1f71cf54928fca57d9c8a0580caa252709d115b7a
SHA256c532a30299f23207196351d7f36c993322969b3d707c9815380b02a567277be6
SHA5125a92f304ecc30449959009f66879c760f4510aee739df4dd11746dd1eb244e77cb303a0d329398e40ee28bfa22113a5a226b060e6fe5028c75236e8fafa84db3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD588044370da6c14f99fdee93fa59437f4
SHA1032fa0b0707bab278cc6283bfe91f8b6b4bfdd09
SHA256d4caf682752ca1444666fd159309edee76a494317c31bdff9ae8fe15bfb3fef7
SHA512c67dafe990e1d257e0d8777746aed4728fa93f6323b00ec7815a068b73243e7c0d1b3e895d86431f4934dae8952ab73674665713bd2b84be2d0eaf2aa7a47080
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD529d8f71089876b7625e3c50ef3e10e0a
SHA1841b0d5597937a87c061a8ee4c2542c79bec2843
SHA256671c0f9a0d14e96f1627f338c3650e7a3b8deed3a346e9323ce39fb090ae4f41
SHA5120cf927f05092807516b84e6784630015e2c6ec5dec6be9a17d39a382a3ee099614c8564edf207bbb286edebbe1f96679315efd9cca7f0a1f63870043483d4002
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a