Analysis
-
max time kernel
119s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
20/05/2024, 11:07
Static task
static1
Behavioral task
behavioral1
Sample
5ec0186558816aa375facc7e229b37d6_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5ec0186558816aa375facc7e229b37d6_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
5ec0186558816aa375facc7e229b37d6_JaffaCakes118.html
-
Size
32KB
-
MD5
5ec0186558816aa375facc7e229b37d6
-
SHA1
311fa10993647102dedcccee739d38b5cd43ab94
-
SHA256
7bee66296d9eaa7f1c2531ae861cb8de13979f78679e7f48d6ba62d1eec0c9f4
-
SHA512
2bb60b295c5228e64fd55286dd1cfe1d6fcd118e2a26a221397ff21af1719e77c8e93db75b3a584e4043ffe40b010dc0afd0d149d1100d304a9867e968bcbfc2
-
SSDEEP
192:uw3A0b5nkkoinQjxn5Q/InQieTNn2nQOkEnt4WnQTbn5nQmSoxSdQL9Ae3KsycAU:2Q/FPxPNKsyXTvBQp
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2ED58FD1-1699-11EF-A538-5630532AF2EE} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0af9403a6aada01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bd2a7708e9798e4fa0b20f3efd8e9361000000000200000000001066000000010000200000004a5e2be66cb07e79917db5f70eb734ce7defd5a5e04663cf683126b26db5b107000000000e800000000200002000000050c3d3def6a7b9716fd9f1b51ac85cf020671e8af368c965037e5420c41ff8c72000000063e2360b8775b12ba82590345feb36c80c592909e545d4ba63d8f50e2607aa9e40000000625122f3eb992ea0b13a78ce110a7c0b5780123d0d7d7035a92891972c71554a89c96bb654ab80d97fa264e26e16a958420151d6cbe6fff47b6888530944849b iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422365131" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2348 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2348 iexplore.exe 2348 iexplore.exe 2712 IEXPLORE.EXE 2712 IEXPLORE.EXE 2712 IEXPLORE.EXE 2712 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2348 wrote to memory of 2712 2348 iexplore.exe 28 PID 2348 wrote to memory of 2712 2348 iexplore.exe 28 PID 2348 wrote to memory of 2712 2348 iexplore.exe 28 PID 2348 wrote to memory of 2712 2348 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5ec0186558816aa375facc7e229b37d6_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2348 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2348 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2712
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bcf3e113dec888ca534850e19c4e521d
SHA1fd6c738e3722eeacb92cad91fdee97a5ee61fdfc
SHA25664694169c5fc7462eafa00a51a86ec0563d91c83f83a9b1e62cf27e0eaa128c4
SHA5122747fd9ee138526fc87afef5eaf8b4f8cde89ab3bdf14648f3f176f7f50fb1da6ea33df9cf4d0406e0e55fd294843bb2f6b78eaffd110b927091bdaf6f730e96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58423b0bae3f7ca4afce772e891cd48b8
SHA1059e847b4c3508fef96ba916572ffaf899be1a97
SHA2569fea7c0c9beed448ab04a69b27b77e878648014669884f15802081f4b7ff3a07
SHA51218aa48829e07d80eb4fb207511ad0619569620b084d0df0386d411c9574ca54c0b1b8eefc26caf2dc35c8647d03a48233ed70c49f8eaa6949748b6d5ac638adb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b17933122185f4c7a70e5880e1eb31ff
SHA1b93d44364f222db444c24aaf8a170e7c370a4a36
SHA25682b18860e1a0723f6774b8148ccf74700f352f56e026daf82dbf87cef4a3a4f9
SHA51279a54f61b98f85bb90f9c02c9f59dc008d72cdf3e63a2a61d376b2a0a4991083766a14ff312c7aec7e874f0bfa5933112c22344f3b981cde258341fcf093828a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59a27b07ae1bdb334332b3ce3a08e1aec
SHA13fb910bd20c729814649eabbcea11f845d1d8ea4
SHA25662d5c3f381eb475294f68d09f052955f7d3f1d1d78c7cfd1aa8eb1a387659390
SHA512f084ed603a7c4dad71b0e3eef6a74de1378291c57bffeccfadc1acc0ff6b28e67b6043919ff6b74b4bd7cc492ebf8e6551412e4dd94bddc3461f9e18508f29b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54ec6bf7db5d0680f50791eab4cf52e49
SHA1119141fbd49c4fdecb32d849080d269e32822380
SHA256bb8c6ae03562d286b31a4d9a4d00d78e50bfbda6b0efc3d81b7b19c516c800a7
SHA512808f622319761622076fce442eefc80a03022232f2325352e80fe3c3d3806de6b21c87a1822589a2ebb426103b1a36fa2f60fd6b420aa7e2b3ce4d229d196acc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bf69180de765cb5619584c806bc8bf8c
SHA1d27f2262e41297b5a15b66ab2f764c300f041411
SHA2562b58fb00506f77a0cc93d9a445dfb19c44397944cd99a19efe3c888b63afc6d3
SHA512e653bf55cdcb23fd9599c31b13d727054e123d621d13f5ffd76ec0bfeef666364a577be2d9e124e5644589f1525718175d80b8b0780341ab47d364aea34bb339
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57c19cc3ad957bd4dec44b21f887a8020
SHA173e592ade729cf809ba18b9ec891069dcca24463
SHA256390ca901cc4b151952cb0c85a6e55d48da91e79967ef3fb5afe268c5da2a637f
SHA512676a66779e0853c2c01b4eecb38f68a0dd96762d65731bb488e12f8e25caa06ddb4d8c26e1b88ef9ef1877bd9ee5651cffadc58347892ed2bdc3ccf456c06d22
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD539806db460dc6d42d38a16532a99b3e8
SHA1625592ae244741d3441a55e62f150de170bd3c9b
SHA2561700d6dbd5ef31b28cc76c89ac8950cedf9063153a19b3fc3c9ae17e2dd04862
SHA512d7c59b74e8cb4eb700a50e96f5e17dc6cf6a4f76c62961d30e1c625f367ebfa69ce9b6db43101165aa0da4c02d7b470f0dbb1ed2efe87a6efb64523dc05d615a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59aa2a3d895738d2c21a75fee98523ad1
SHA171fe1d2df8a3af8f5cc2c2f7d6293d8d66770b0a
SHA256c433239ef104216a51a66816777854283a00290ab45108e7b963c9f148ceb89f
SHA51201255c0d637a09dd598b07cc1bf534721a35e4b222cc1a2009e1948475923fa335f8e4cfc5ab7e40623b56edcd0ce4556dce3e46f6281fd225ee995c2dbfcaae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD506af04a93a2e399809c4e6aeb027fdca
SHA134965c31f60375b95a3393bd18974716eaf8a71f
SHA256d3bfabfc372696608512a6bce4a19070c5ee6e9041f220bb88b12eb86904c223
SHA512468569c4e4bb367c764e05826f3d98683232434590a0f11b9508a0c6968723e76165862006d42aefa89526f249d0411c782cfbb037ef4e42aac8987dfc86c2da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5da55d798bfa4849cd2cdb94246788907
SHA12b1a605958f9b2f1bc8c84746d2769afa786ed2e
SHA256dd81d128d7e4875a824d4286b7390c78374e410d8c47231b9cf6917cf2c133d5
SHA51267eba713c3f41e82a33203414aed4e5396b8497563cbaaff4eadd48f4085fe45dde52703b23a4ee23bcdf70809202678650881ed4b7bd5d15146e32943ab3f0d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58156ef00bdb10f413a044a8cd466b9ae
SHA1ac1d0cb38db259803c016855dd1265786fe55801
SHA256daa1177cfbb3ebee3cc0056189d3a080ac39450f21d55eb96b6e792b25bf0ef0
SHA51294939fab26a83d88f75ce25c0eb61ca541eed54e65000e1e1625aa2d8e1da4bc336eeeaf9e17545936a6f4b4dd403974288ecb11df76706365bfc51d3508f727
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56ac909d1bd35aad1ddf4b73f71c349cd
SHA1e041107e22168600c7e9cb7691a491ffd65d5fce
SHA2565069d0b1e8a45d96ca5cf897e5fc41223319c2837273b303a5e47e4abd806af3
SHA512b9ad5bb9a663725387589d32b51763a99e6126877ce0455febdee27832c563d0ae00616fdd1a5d38313a1bb5d44edbbe4ec192755a6d679d99840d0a9bb0082c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53f4e7010989490890d26fa328d0d5eae
SHA15dc82cc0ade52525ec483c85f864852cfb0e7f27
SHA256db82dac3c5805d71c7490802aff4609496d5cc17e966391a2ba5a83d0d201de3
SHA5123bbb06b2176e3df56285f63cf6ee74b7e2595608c65b27f006aac2d5f9861c7d35ea8fed4592b821d04a2d647b7e6ef0707cd3a51f79af01e8c2553f8e70257b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cbd6418672ce3ca4bc312560679812e9
SHA1b2cb17432e419181bdcff45c83ab1675d68eb21a
SHA256129488b48b9e5a207b011aa7049a501b475b5d976a86315d36647c87e413c486
SHA512aa3c0fe98c933b149b679e058138aaa49f82135aebbd6d5e05be102b9f40156d7da8dc2145e9e87dcf5168de3b92c1d91950c9aba66c104167f3525f0145a8e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55c2cad9139c681def2f4f76b28da9d7b
SHA1006cdec5b70261850d43190e1ba795b65cb95b5f
SHA2568c3b79879d70e34c730676fe097ce61c6aa833bc58e443db520d6e37cb3e7057
SHA5127011d59fd2e7fdd94fe210fd31aa1dc5952dccbe0b4576465a9b417cbc8c188af282797d068f82088c57d2792b2f83769d692bdaadf3a7e56579251face91e56
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5160a38278e251eb9283b336e01d38380
SHA1e96e375b6b6a6d0ee603b32b036b267e80b4e7f3
SHA256c9b01d4d556e7afffea85b012d8fa95f737e5a8e53eda084244509211fb89913
SHA51264d2db30e30ca056e2e0b0f173d85d96f75c26d8489908473d77eb8944ba0d300ad47ec5a88ec6bf0e8ae49dc8fd43a358756019a954bd3b10db94be0cf802bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52b93ab6bcff10155296fac734050db09
SHA1043dfdbbc5dcfb44b5e488f4653e2762398808cc
SHA256d5132a2cd582955b292c943c89016aa102ade556f8004ada8329d08345610c9c
SHA512f9a7bf3a3b424ccb071b41d22c91993575f306cedb5e71f551a36e5ae456665554b54fc59ac7bbdadb50f220318da954e09b987d5bcb5085f4654d8def783dec
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a