Analysis
-
max time kernel
119s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19-05-2024 22:07
Static task
static1
Behavioral task
behavioral1
Sample
5bba338777e8094b3e93b7c1a6585459_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5bba338777e8094b3e93b7c1a6585459_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
5bba338777e8094b3e93b7c1a6585459_JaffaCakes118.html
-
Size
31KB
-
MD5
5bba338777e8094b3e93b7c1a6585459
-
SHA1
79b3c23ca9f13d4e10bf8389f8f7a875483c884a
-
SHA256
63c5b34703045e12b52b975021b9a69d44ecf9e79fa74499cca26f25828f0fbf
-
SHA512
6720c32763e3d09bd2ac936e432a8a3f5fcb90c8e56e0151d5187a2c889854de5b27fb3a7f445bc522087456f11090b02af285a8016710cb6068dd1d5f55aa5c
-
SSDEEP
192:uWXVOb5nYJnQjxn5Q/PnQieuNn+nQOkEnttFnQTbnBnQlMCOf4AdRyFLqDxcYLut:1GQ/Ecw8yFuVpLkZQiKJqCQBOGXt
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a96069000000000200000000001066000000010000200000000434890c0a873de5cd179fd08e18996513bfa1d54f9ed1318381fc272265cc82000000000e80000000020000200000005b4dc21e57436617b8cef2c6bba2f61ecd59e6b28e4e82107f19a33da48a2f172000000084829244548a3c9edec211dff3a9eff4623c51bb15ad549d82007adb7a764bb0400000001f4737b6bb67136782453c44c260eec5f9fc3631083b7417f8232a9202a8df1480c951be767511d1b24a5ae079e0d87cd3b16c56eb331d9888f9951fa8e5d855 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0d7ac0d39aada01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{390F1AB1-162C-11EF-92E0-EA483E0BCDAF} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422318334" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2248 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2248 iexplore.exe 2248 iexplore.exe 2772 IEXPLORE.EXE 2772 IEXPLORE.EXE 2772 IEXPLORE.EXE 2772 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2248 wrote to memory of 2772 2248 iexplore.exe 28 PID 2248 wrote to memory of 2772 2248 iexplore.exe 28 PID 2248 wrote to memory of 2772 2248 iexplore.exe 28 PID 2248 wrote to memory of 2772 2248 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5bba338777e8094b3e93b7c1a6585459_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2248 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2248 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2772
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51abb7563871a256fda95fec03dffaadc
SHA1413cdfb26057c660823db465bcc362f887b1356c
SHA25629c038d913e6485d1e61c95f1912af8b7f2a1c5c0cc9848c3f231758f7860b48
SHA51267deaf5bd8b08163da9f40a674bfbe983946d4690317883d6b443db4100ad6198555a614e1b440bf77045d38a8b39fb3a760f0e7d56e4ca4463fa40956cbc80d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59cfe9d4bdd868e873a543b6068319846
SHA14005f9a2a49745f5728aba7b02ca87b4e8a129f4
SHA25643a076c17e2b9672e49b4fc787c1dd1d52f60be47a5adf4716fc25d44b170458
SHA512ba95f0277265ff0b42c328b39855c46deaa6f910ddbf0a661bf9e7f70080ad534c824feef48dc68f8def21cd9398e370d05633b0daf7f2773c9401f03419d192
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD544a2cc470140f7bfb6e8d4d20d25d776
SHA1009edadc606e55054555f7bd0994ab0677dc0bb6
SHA256dd30221d124ec5bd0c9c928c31a928d3edac262c749b7f164e81482c5a0b1a04
SHA5127d8815b561ebfdd4d27fd97204dc81d744e7b17e4dd47f6623cf98140f5c89ea14f1a794e1726378c9cc0fce19fb7023ff5749912e21a63c017ce561cf75bd64
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52999f7c2f8c6d2e6c8d8448f3f936193
SHA1940c1a05ec13d73fb3738973b77e6ccf519601a2
SHA256db35218f2135e9ae5b58012efb45576a8af6edabf940d14dc8f338ca744b9009
SHA512f7f0b656417b8a24393aa20126bf0c8630dee4656d16eaf5b2b0a13f174d6839ceebdc063d65965f36b8db4efe135adeb3a11852c5fc499e6758a5c3e60ebf0b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d775b3b64a4d4cb1cf57cdef59da4272
SHA1ed9e06f5afd670998baec4bcc5ab4cd6fc3d4360
SHA256e43032b1896436db1bc033c30f1a9e0a7439ab73a5e5fbc893371b12c2ab253b
SHA512b797177e0a0365decb2866fee15dc4d0f022d3f931b32a4d5b823a6b3e4acc82d545d5a919975f209a2ccf2c06de2fe5acbd95b17ded9c7ff7ff1fb2c22a6e0d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD594bb11854cc62d468ad423b2f768f564
SHA1f246da4e4dcf314011196ad50b56c36a3ee28b75
SHA256a0c1190b34fe75d9db682c4c1ba8db3cb5e3d34bc0d41d34c42d1bddd69734a1
SHA512ce51b0b47e16ccf1919669449a0bc4ec801426adc384cb08be08193b4281b1650dbc7aa745a98da6bca9b28119420d51944b8f8b0ba4e4eab6194ff010237159
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a986ef0b7c983bd61d677c51282e6cc0
SHA16ab0cd990d2dc9c4940b406472b6c93e291ef277
SHA256d865103abc4ffe98b389d0d05e0a1bd98c1597e9d18eeab8ce00c733fb5566dd
SHA512cfd485646de34216c4b16dfcc2ac089e14df63a0c26cf85ec47c66dd738deafdd3446c77f3b9a09353d912c982b2185e68e03c2247c0478940c14995c52b96d8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54686e505b08fad4a7bc077af497d5a41
SHA1fa36df5caed63c7945d9831531659188d78bc8ed
SHA256ce058d1c678bf61cf9af98d8bcf1606853006185fc9fc1bc079bc5ded6b73bf6
SHA512914db24f11b27641d40a98e545e548b5fb78987c5635adccb71baea6c0c5962c4436de43e109ae0398a50118fc4259c364a795cc13809017ad71a0269fd9160e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f52f8e08df3bc6f4d03025606841147a
SHA166caeb28bb6c11880d1de578613ce851f11c8969
SHA256eb29324354b334b41759fab6a3c71b749ade0e36b83605d7374fa4e1b862eca5
SHA512d19e00bb154302e9e9e4fc63c3ac9c567ef57e1665549ee79958292a8bb8fc36f0f7d4966ab6d8ced5f8de1804eaff2cf5bfe4b2646faff50fe0cc17838f9bd9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53d42b693fb3b50f07d4ab2043e25a62d
SHA180a778cf4be20759a585c1b99b370528862e09ed
SHA256eede49d542907497145b254862689c1efa7c7894636e1c6dd49631ffecaff725
SHA512f70df192fb4d7751ba8eb2ed2c02aad269438fb4befa052d01281f01b625397c651f8a12b00da4881d5c951088d5e593d3fa0de860845e368c59e6fb590fcb06
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50c2dbdffffb9b3f534f06c7040e279ae
SHA19537c757153c7e692c6013d088f562917c85da64
SHA256a715c64565eae0ebb1125f272c2181045b5737ab18b268b23af0c8904f44a60c
SHA51285a8b36729b06e9f84583976118876b17296cc4214e3b0339d093e07ace7c5ec61c4957678032adb2396f3383903d0acd44beef6a5904b15a0d72c9af39298f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f0a36c3e8ab942b71749a9423cfe97cd
SHA1463dc07b1d086e775a642bf43fe4dcee89287402
SHA2566c4ee799193b4cdf4dc8295d971b1e08d66704e4429ae1717a80929abc21cd51
SHA512c2f2a68a0b0018615c667cc6eeeeff4b2518a68209df29d3269cea13c1aeb89ed111c5e6b79efe57d25cbfd48751614ce942db3cde9f0b45d096e06d5d330748
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a136ea2c9feff52f4822882e972cdb91
SHA138a97b4c04db9ad69653803f07ccbc948c1c263e
SHA256905f27e1be1b4514fe561aed4dc1509b23627fb6ea2b25288756a87680e4840d
SHA5124a5eab629cc4a980b270a7cbb7636b34eefa63a6eff88928dc999503ec24d43e699e6d476c0032d6740b4ab4633a56e6583ecfaf15c0cb33043fddfb0c3189d8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57c2a3228d668faaddd470317506a3dee
SHA11e6429f95d6e6cfe09e37d47623d2768d384aa2b
SHA2567edbd3196fecedf752391354aef63e8ff2096263471cd399ad752b00056d1c58
SHA51295b3641bc7d486f615e3a6b5edb78fd88e3af35c1e266a1ed46d54cd773581929d48d948478641cb5e355cfaf4c7cd4e1a24a65ce312ff1f2a0210b7c8efb7d4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a25a1489fc88bc1166c22f4a8d4d3fc8
SHA1306f33040b106d0ffd8fac5463b66cbc94e9d115
SHA256a3fb30e7a3cdfab44baf1a3add9a01a6e1e83d480c8637a14e47f29cd4451037
SHA512aca887c32f562a7ad87955629eb3c1b1a8919e65234e53e311398925c321b9f0d561e60e657332d3d5a6a335c9339930b469ad704a9b5c3b737982499d13c8b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d996b0e2954e16587923db83b65087b6
SHA1c185f8d34ab961696d0155a80a940318ee240b3c
SHA25656514bb4b12541c6ebf4a79e1031c42efb6ce08d7eedd7f9abb39b2c3c889a4c
SHA5122fd9ea673e9aef2f18359f8e90dfd9e29b44f540cc0367959a564b29cab8b22f849125bf13dfba23b9677cd779999666a72b924e2db96933d8ff2537ef3478ab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50065532790de4ff1629c9ef30ab9cb6e
SHA16ff0e99f8bf41da5a3fa571503f2f46dfa934240
SHA256044905268588d8df988b4503cc967d8acc22009d73bef05a690654642644644e
SHA5121ba924bb861d52a52173dfa4fa696f407895a6a605718e29ae612b6c38e73cd371540acc095a1ca3820c328e034b34d2e948ec21e7b6a5a762f349d481e16fa3
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a