Analysis
-
max time kernel
139s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
21/05/2024, 04:19
Static task
static1
Behavioral task
behavioral1
Sample
620110dcdfa0ab9a4e65dd958cc2c443_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
620110dcdfa0ab9a4e65dd958cc2c443_JaffaCakes118.html
Resource
win10v2004-20240226-en
General
-
Target
620110dcdfa0ab9a4e65dd958cc2c443_JaffaCakes118.html
-
Size
68KB
-
MD5
620110dcdfa0ab9a4e65dd958cc2c443
-
SHA1
3ab2590191f71cf2b0c3db67e1f51e049f29ab85
-
SHA256
a9b375ada619b65432d195ec1dfb836fc024b2327dc34a369bbf26f0ed2c8ede
-
SHA512
cbd14feabf8bb6a0ac024535ff8c254f343e027adda03682dc9cc6786bae9a2eff1c9fc8e16a6ae41e8ded31c761fe5f32e0a5a7c5069434c4df8ba5232891f7
-
SSDEEP
768:JixgcMWR3sI2PDDnd0g62n8CdHxzM8oTyZ1wCZkoTyMdtbBnfBgN8/lboiGhcRob:JvssH1MxTSNen0tbrga90hcJNnspv
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 00a2141836abda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422427013" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{43607E71-1729-11EF-805B-F637117826CF} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000a77baa5f01cb19f91582e5828c9edf76274699dcb8ba87a2c9e5ffc8e580f063000000000e80000000020000200000004453cb29dd25ab7c6fefa4cff0b4649584431299e33b0dfcb4b0d82b817f8e7c20000000c96bdbf04835b4222f2622313ae04aea1c74d0cc80e351bb01838001f35f9376400000000fb1e4fbd93878467a86dd65d2fb7bc3d3fded2d1ffd14e43e303567e35f2e112db172b35265d879d662ab435804ef49ccf9c2ad57a7604bedf477c6fb317859 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2436 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2436 iexplore.exe 2436 iexplore.exe 2356 IEXPLORE.EXE 2356 IEXPLORE.EXE 2356 IEXPLORE.EXE 2356 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2436 wrote to memory of 2356 2436 iexplore.exe 28 PID 2436 wrote to memory of 2356 2436 iexplore.exe 28 PID 2436 wrote to memory of 2356 2436 iexplore.exe 28 PID 2436 wrote to memory of 2356 2436 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\620110dcdfa0ab9a4e65dd958cc2c443_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2436 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2436 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2356
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f24391678da084ea50ae4dd08746aee5
SHA1d60fee0684a59e2b0472b9d5bf98c84eeb6d8833
SHA25653a691b08d472b36e68d7006c1ee1d9ea2250263d18ee83d26018b479306e85e
SHA5123b9c410ba193d04554caf7189ab1ac5a17e930256d05349e91d63d1e26bc6624145ce5c63e6199fa51a9520f4992417f4f81ee39d273c62b3f5f1f02ce249315
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5518a6fb3e91cc165e54826a47c739b05
SHA111671abade5025f04551b71bad4623bcdbe583bd
SHA256eb19afa3912eeeea0011cd2a418ddbb68654f7da207aa80f1f3f7154f287c900
SHA51238473a9e1125142324d96509772540d86d39b818ee247ac3409ea9cd719d051efd6d5a2d7bed183a7e72463c0c7ba5eb4bea5d486981c0706a02e9abf71af71c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52177cc35f6e1970c4387dd9f69bae7d3
SHA18b2a844e37dcac0b7f3808b010ba8eedab205e25
SHA25658032f0688d49bf42fa04a0c557b6f1ef75d8b351aa0dcc5f13716b487ecb5c6
SHA512b3ae184f7dee660226c5295debffdafd6ca580ab61dfb8ac3b85d5e6f96267f44e3a9e8bea6c2622acc97185cfb5b9f97107fade1f17b2006e4e74c39ccce736
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59ebab250b02838edbfcbd14437e7542b
SHA1775a4fc8561af6aed55939ca1265e67ffe094beb
SHA2563a740811ac63f101021b90462d8cfb3591109220d35da5f038e6452a143d0da6
SHA5129514fc819604abd23c30cd1521698a637b08d20cea37f3c989f391144fb1ee00efc391c012bc3e13b54414e16df926399d7926a0c04fda2a20548d369be8c86d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56df5fb991c0ce1b9e1724528b3f55547
SHA1a4d46dd957fb12ed228dbae6f8bfdc4ac6818663
SHA2567edcf37f2e6d4a7355156943ef4a8f2e8e1c0ab19623e0fd0c0cd7277191e254
SHA5125a07d488b860548f2ac4e1ce5f749008c00358a923fe9e80e1e6606b6c1b8e8bed11f417f4bb60a31fb1cdfaf7ba4ad3e764107f8dac92f37f2c9917323ce744
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD504a93cf718bf78313e8e306e48958e94
SHA1e5fd4c7c06029ffd2db9898e092467ed11e85cf3
SHA256308bea1986fc47a9fa19138a5d795438919194b3899b59ffc0b674f596a2deba
SHA512a3f4bbd55db7d8044736394dcf75f271da4fbf845321e1d71d28a444d8da74d014eadbd8beb8c9df737938f595999056565124b81056cea097af83d415aa57f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD555f86cca7f989fc440c6cf8eb4f3d006
SHA17d8092f2bba849c45c5217dd86a0a649fe416d67
SHA256363604ac302a724c2ce26388552b01efcb9a906513ed34ba6fb04aaa3740f837
SHA5125c30082f822af288f4d27c868c39ff641e4cd5d3964c7a7a5d4c58f7c6d53a10adeaae693ba2c9c6ed1b7c771a347bdbebf2ff9200d667103977948c37f3131e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e6cb08551a4a276fac5133411122d3dc
SHA1c7111938da00fd522b12a1ca98c8edd681d01304
SHA256f265769611d7fe744889bfad12a8387e6f9be629094e8a5893d21b2f4409f004
SHA51214f83b1ce3ba267e522b18f453e5985368fce50a9b8acaea9375c91c44394d4f798ba6794c68c7dc447a95f5d96250621aa19eb9def73d3a0d10ebe7ed618e66
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b71b3a30f1298d50b87b9d217bbfd8db
SHA13f5e589d29ea74884b517dd81c51da6737f98ca8
SHA256406ffc48e84f8573c207a65967417137bc8799b930a53c807a048e0b4e0d0fe8
SHA5123fea9e73df764f2f34882abf504a8db6e8240bdd9210f521e5870aac8e819a0cfd633fb46b50bbb9769c4ee3924234071e9104b72dfae2b16cb8a8640c902c28
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d25845b624e288765be105ac56e41a63
SHA1543c1845994b03b521d1cdbc7e44be6dc31f890c
SHA25617b1b2029de5455788bc29b99bd3051e9a12bc895fd69ed3122e92e70d1d38be
SHA512b2ba188535c8f4ebf23dd177137372985ae1f97b119dfa82ada590a639b8cb77236eeededef16eac4b71a0170426203c105ba20eb9bb8535b41180a3c0250d0a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53f6a21b592775a4f8657ab854d9017db
SHA13b397ffbfe8f4e52e5abde61551d9cd9aa0a271c
SHA256f3098d8cc7e246e7b135d9b66b4e8d1ae397d493337f878f2003ecbc54d0e313
SHA51283f04f0cd416d239867bd9e99653d97cb54483d3529007d5d0205fc2042918a76dbb0799918cf185137125110e9966b2b43051482bdd3f4e87b7b5232008a28f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d97bb140f856f3c5800738c4defe2224
SHA134118059d5bf0e4e7ff4b80d861b7df7d2141295
SHA25651d7c8ca8a34e49f20beb9ed944cae493a7ecbce54c84ba4a691fd20d9e95f38
SHA51287ac706210e252d7480c39bb1ba5ca71bf3e491c7e2b5b897ec1697eaf79620a9c21f55825a92754cbe2c78f33d1f45ecc2a19a495eaf87bd37af1a5dad5c174
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD532d3aae83da2f54484816616e6d2a779
SHA18c4f891c7295b8317519dff46e27ee2e4004111f
SHA256e79cbe0eec1447bc2e8f094f9820d7879c6952d44086012bee5aabae0fe0b466
SHA512437b7d56b7561c2b417410e458bc104e3ef8a5f2bc54f63bd55076ceafea73e33cbbe1954a331bea2d4c65871dc46a3bd538c6a81bbff7535b0634f36574ec83
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bfd6ffc60cb4b05ee2042cc49cf61184
SHA18d9a7a1d0035dbae51ee1c59471cc48512196a05
SHA2560e261e3410d778792167aa7b347d819adb81b633b011a7aab2f0dd488f991bc9
SHA5128d77829ad9671e1209a7464f22bb8f47f6ef8b29f8998680294c0cb6f9f4cae37169f343ac9c5fcbd8a8524e991c92c5356c595c9d196157b894fc940d73fa12
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52fe4506a90e78bcc9ef44530b359452f
SHA1d46c0a45fcc3e6c7a560598d8a7b773c527b3cbd
SHA256b468eea425106996c864dce9b77e1e5c2f67c6f2d0ada2ae64888fe6bf1f33e2
SHA5124d19e008537e19a019229a1977b27e3bad20072c01a7c358490103f62cd230be8c7816ed995d901058f27b0bbc42f7807bc8da5a8647647bb0ffd0190a8113e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD543a588539727a1373a8b3f75b1139e02
SHA1669eefe999525125dbb297ac9ade50dc9a8f741f
SHA256b48e654cb794881307029d50db27e4b9c1045549e990f4bfdb1b54f46c29fe58
SHA512b03bfa1211d86dd87aeac279e28d8f4effb6963d94175aa10d6aad4c1e0cd3b44d70c4cb49004ac9fc79dbd334725c165904c7dfa8debd2181b9e8733b167cbf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD516071960d3ae58fe59de48076c9cd6e7
SHA10c9a1f1230d84f3603cb5e29f2cf4078fb404736
SHA256ab1937004064662fd50685b53f5a201bb6962b9d552e5a15846480a7a97f5758
SHA51201d1de91911328e56c9b64a12151e52d043da2a893a003af202a7e49100f03e48e28054c6a4fe09550d80ae03e274d17b6409faedda81fddf9ed727c06c70ddb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e5bf0659e7379fe67df20c9c7838d026
SHA1d84dfd5ec19a481b5552b8af4f61ef8b55ac2fae
SHA25685ad375dccc0f1271a00df0975c7bb533e9b1b37e20439c7e10b2a89b13ecbcb
SHA51219f880fada694921920b22164f2e592ed7637ddaf245d81e25f0f4234291a974a1dc9dfd483cf24ed31cb961cbc4a6c77d4d2748564a4ff965a7bac6a27f018f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59152d2a8ee9e4e0cffa0e9d1e9888707
SHA176b18793bbc2327cb67b04f3cd29ba2b80220398
SHA256db95bb644e436b722c92ae1cd17d43186144ff0840db941e52617743b4c9e952
SHA512c2117472ce0d3e096326effe79b468e3e2b7818ac7b876c699d5f56db8d09741b6f2ba58d57beb77ce4155bbd9a72c8b635be4a1ececb6e8d5068d05c7379ba4
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a