Analysis
-
max time kernel
119s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17-05-2024 16:37
Static task
static1
Behavioral task
behavioral1
Sample
50721bb579b2428c1c4eff82a4266635_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
50721bb579b2428c1c4eff82a4266635_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
50721bb579b2428c1c4eff82a4266635_JaffaCakes118.html
-
Size
27KB
-
MD5
50721bb579b2428c1c4eff82a4266635
-
SHA1
18eb0998336cea1a9de22d9765890ea113c20b4e
-
SHA256
b404cda4a424c04573d14e2dbb6f1e10e77efde1ef57545a0479f496f98b93e0
-
SHA512
0baa7139146b5eb645c0f26142f35a4d7269187cdc6cb4b4a3da07b654e7c37346741858f68defafa1c5347dd637bf3ffdfd7254da80904a51b27b59542eb091
-
SSDEEP
192:uwfsb5n6unQjxn5Q/xnQiecNnxnQOkEntrLnQTbnRnQ9e24m60ZkyQl7MB8qnYnq:PQ/jLgKkFSeBy
Malware Config
Signatures
-
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D4BB6DA1-146B-11EF-989B-729E5AF85804} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000ee73a30f767f3932fcd38e7c1ee6cf551c7e0021bbc47ff0090c696a4b0513df000000000e8000000002000020000000130aca1500ecc319cac12a3163403d5b4d2eb86ba5993b0fb1b1fe9205ac77f320000000a8d503e6135e446faa116cd36d3a659ff01f1e7475d21a88d840f93ac703731d4000000061715488081e4400fb62ae44fd198484ddcdf381ab55287ae85b6f48402c266a32821d4ee53f849edd5a2867c9331b912c8b700b0833c15ac9092955de735bfb iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422125752" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 9022e7a978a8da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2700 IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1708 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1708 iexplore.exe 1708 iexplore.exe 2700 IEXPLORE.EXE 2700 IEXPLORE.EXE 2700 IEXPLORE.EXE 2700 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1708 wrote to memory of 2700 1708 iexplore.exe 28 PID 1708 wrote to memory of 2700 1708 iexplore.exe 28 PID 1708 wrote to memory of 2700 1708 iexplore.exe 28 PID 1708 wrote to memory of 2700 1708 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\50721bb579b2428c1c4eff82a4266635_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1708 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1708 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2700
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57d440e4038d7e27c6a31c5086761da14
SHA1f31c1c0071aab49d771091dc1ed9ca05314dff51
SHA256e7974b4305027e633a4eea6be433dde74f2cf18b09e30224e19faeac6d15f22e
SHA5121999cd2553668562b4c057f13ff434595ef067db59812b4e290eda15debdca41f63814c72ff973919a613a0837b9e49a9092a5350a3da710d8843a59297492c9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50a498225955381a06f2ebb73bf395cb8
SHA1701eeccc7fde4bc046b8f4d39495d3993be91bb0
SHA2561a8aac7f9a1f58d2bb29bb59a6e70b12d29661e46d2b5d3b89ad4facbe90b360
SHA512edeb1d022c3adb8e5143d8f8e8f6148658e980fbddfe051cc18529bf7e669098049065914e832f629a59ecdaaad51f746de37ab51a646b71fe5bad03b49fcd9a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a5dbec49dd238ebc5a0529a38ae4fe70
SHA16ee3f20393f42ed40f0a0440dd158643702856d3
SHA256f13171197ff7ed13e020798a3e506db336b26f353f59135fde156ee4472e7245
SHA51228cf3b4c2a37ebd28d2f2f32dac690e6f60f8360904dfeb12c4625a710eb0fc0dbc0537ce5d167eb456964470e310fc1e583e0aeb8171a0f1e87c92ac00f58a6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f9af0815fada4248394f76ab803b2594
SHA19cfb019c4a44826d2def762cbf388d72f903715c
SHA2562b60fe744c6c85218f316328f47504d05604521084fe57adf498d03ed8efef81
SHA512a94b799aff49262729739ba108fff7a5f67cbd09e63a736e41fda4b03a4c9abd73457b51da8cb1049bbc5048fad50486401131fb692f3db960f8613599cf2f0c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD578fee7394eeca9fe37da9e4e37dadecc
SHA1ae6023825967aae04c7ce35170c04ea54f8715ab
SHA256f7dff47db171a8bc5648411e4d38e3c28ddb370c153e8f90990a2fe2acd7c610
SHA512bb95418c578cc64600a7e3c96b6f07a727b7f79a12a83f282351f7c11834f32755a480e1765d10ebcff2bac16bd7dae266c22939e46880ab9152fc6c177aa81b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD572b78e8b9bb7b0c11ac18cdcb0c783bc
SHA1116370bc1d442cab587471c19fa325d497956cad
SHA2562ad0d1852377c7ecc3b8c56fe25bf4467d1780d1296c6854b5a60778d6bcfe03
SHA5123bbddde85ca09d38e5e8405054442b70324e63daad12102d699b478542b141682787f98347a35b65f7ee0fa7445c6cb0e7a29b9d4a53fdc8955eb606f5699ccd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5173f8a374d429aaecf32c9352075c0ae
SHA1dd2ef67ac04a532a72b12ed61b3c46ad04f03247
SHA256fc635d324b4435ef7157551a92ece50e36d8c392676b6321a435bbbf58958c99
SHA51270729837c677a99b276f3b02efa493b5e50276fb2b49022f710be1e4a4fcb0ae9328fbcea13744a899bc8366b915f8bd390ce5948faab63ac76cb3c0cf9223ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55d1a84c8840cf83a504e83772af6754b
SHA11e30583bd85b3feaeb17954b9f42ca4cd9864463
SHA256ded865d0d111e9c2b4c127c5c9658ebf2747b86ff571eb3896a23b1df6e94a53
SHA512ea764f2202a4fd5ee08783822a85d68965b79e6d3ab6c14b005b140d2ebd1063708232537e7a5eb6cc3930f5432e812203dc76ec8ff2b910c2c281af3aa55c60
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e88829fcb34464cf001734118042a26e
SHA156323c39a40cd08ab874b6c11c8fc34628ac0a50
SHA2566662d571092414a191a9eefd07420db60de6fdddf87f9a3281eaa61b64afba6e
SHA5125a3e8da29a0661ca860e650236de627504b6f6f893d1cb1314d09ea6102789b2da8fc9464b43b1028d4534cdf19d1a8aa980e2a5d9bce612a64b219774d552d2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e24c53c3e3d1f84eccb35575b631eda2
SHA152e0e3b7d56641ce27bc3776a5801bf526291346
SHA25672935a13103595d8f0d26be16f94a697f39f65a6c0f9619f03aab0cec1a0c6c9
SHA5128136ad1a6ab2ccd625a03cfee475db32e5bf37bea40dcf89117c74f47b5592c7dd6a9d5215eedda82b1d25d1f067692b3dec6483ee2d9010cb5826bb080fda82
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD541c6397fb5ec7d993ab0d50592125d91
SHA1a10048a542db440373bd562f23062dda23851426
SHA256ac9081398bbb6e1618e44f4a2c734cfe3b3b5cdd7c22b4bed105acccee803e14
SHA51276d1531927336a7583cb8ce3528cd4f27d9acac41a7260270250875dd649f06d9f7f0cba336c1e4c85f066a07204b3eac56d2609a7749a174981c7b5a8f44c2f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b9fdf99478d7396a022404d7ea92579d
SHA1f9eeea7aed15acab274bab146b432ff763422cd1
SHA2561012b16bb93dcc33cf3716e9d1b8d8fa7f439c22dcdf34076ce72c32e34d5022
SHA512b247f793ec13fe1d9b3e77d8b63e09cfff9dbed3224edab3a548148a3f33c208e675f506383d26cf7d7d74529e230e4ea3e151b66cbe829fdd6ca375d8a00036
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c41cf042b8a20692f174cf09a1da9915
SHA1253e9ce8d1b0c90e50a54bd673e59e0b0979db50
SHA2563eac1bb2cc034c95534d86f15f9c07aebf9d9479523eaf1826735b400b6407ad
SHA512493b4e37ba59f33c0364688548e6b408aa3aaffcbe5937e32e8c8136bd6dd4517e5c750d276e2207cecb694a33aceba9e02c525c8851976bd053086379c1b6aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD523197ccc13868c5a3ef91604326c0fdc
SHA15dab5532c707d6ca413e5778724983649c424aad
SHA2561dcf33f11ffc9ff4bebe6456238436387fb44a50ab8fa0e8eb94ab9cd0ba9154
SHA51203f0ed5d5f6f9a1f21571c6b6e9a6841d9626790d3da045e5e8d7e0eaf57cead71b866b5321bd09c79402dafa3a7f1bb437b2170196a7ff6273cf757371796b9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58cd89b4dc0b1bbf507d568d702d33dc3
SHA1154c6f0a3998316a5cc928f98d62ed83c6112f23
SHA2562f32ac3b19139701165082ac942fa5999051bcda1073605d74adfb6575b9a11a
SHA512ab43bef0c71f3d25efd9ac2798e1ec4a7a54b6eb6225695819c1428aeb25e3637c81bcc1dcffddfcafaaf5a093c14d5d082cae9fc5be1120b1dc8bd06642244c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5077fd3b8416d4c50cb4e7c6efdaec610
SHA1d746782e3ae4f2865aa63559befbc53bd4341888
SHA2565eb0593740963d887121f7cd67bb37c82f49f61b222b597228ea7431b50f5c4c
SHA512bb6f350462181b8f4c9bb944aced1716fe6fc057da3a557408f10a13d7466b2d42e0d0434e8709c8616a2848365848c47564879e0fa5efc7145cca2200d0fa70
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f0ae8a6a34c4fe7ade40fa0236b77b91
SHA1eb5836784542c3e737f2b4ff785199493616edd1
SHA2565608bd2dbd3a0c1dd30dd43fe7c9701864934160e5314b51ed0122dc57677ff2
SHA512fc4c80c13ef7550eb9cedbd0e4c3a5e974b05ec74daaaf7f973f533b60c5ebaf1da7d7a9be10798238bdb1c4fbceafe31d225b2309164ff674958ae767892732
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a