Analysis
-
max time kernel
118s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21/05/2024, 07:16
Static task
static1
Behavioral task
behavioral1
Sample
6278df88869c4de8a556fc1f90d55061_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6278df88869c4de8a556fc1f90d55061_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
6278df88869c4de8a556fc1f90d55061_JaffaCakes118.html
-
Size
67KB
-
MD5
6278df88869c4de8a556fc1f90d55061
-
SHA1
aed7c68f00cb3278169b3911c8c349b018e8bc69
-
SHA256
74ed606295c39135bbd1595f364790a5687cf3e7b1b39b65bc64282d66ba3c31
-
SHA512
9e063efb73be3949fc3a7165fb75ca76ec359f52bf858f9afba5c4da9bb1ec11a1799050d242853718d0ad3322f2be92225a86906b20561791a03db1eb1577af
-
SSDEEP
768:JizgcMsSZ8tN99OIsaI9jL6C0OoTyfQCZkoTnMdtbBnfBgN8/oygcR/QFVG8c//L:JHW216C0/TePec0tbrga6cuNnzIjv
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0dd000758abda01 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e861098c19b4244d8627ee4664a960690000000002000000000010660000000100002000000020dcf0fa821bb94980c01c209d334baef93977d648014b978c9677539c75c49e000000000e80000000020000200000004a3e8faaddf5cc045d16227b4dd5123d6fcf3ae78407b712713fb26046a00a5b2000000002d01fcfa0ddb41c93b8c5c029810f5f905cc6260cf5dbd1eb420ef37683bbc540000000b1c147d51baed967befcb57c364ab103e26501d1de786f28bc66a6613551fef9fda44a02f02ee2b030a6a651b90351b1bd878e8381e9f6800eb2e2459d4bc511 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422441588" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{321BFDC1-174B-11EF-AB41-FA5112F1BCBF} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2276 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2276 iexplore.exe 2276 iexplore.exe 3024 IEXPLORE.EXE 3024 IEXPLORE.EXE 3024 IEXPLORE.EXE 3024 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2276 wrote to memory of 3024 2276 iexplore.exe 28 PID 2276 wrote to memory of 3024 2276 iexplore.exe 28 PID 2276 wrote to memory of 3024 2276 iexplore.exe 28 PID 2276 wrote to memory of 3024 2276 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6278df88869c4de8a556fc1f90d55061_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2276 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2276 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3024
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54e75329d928681340d3dba165a4222bd
SHA1de46689fcd197196dc80e77b890b453ccf08a78f
SHA2566a162888be8af3c4db2b20bdd9093a8a7dfb6b2707bf819de97141483f6ea56e
SHA51215e2399822c5a6a19beebddcfdee4a7cfb859f1b3d1bc13071eca5c7fe722adc499d199026c38234984b6c3449b22f766f58969c29232009a5a578f64b09480a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ed666f3bb7a9474cfb8782e624c57e5a
SHA1f0e38804ceefcc427c3234e4db833497a29c61ee
SHA2561bbd66482e3ee632e7e033743b1db28e73ed1678d1aa931dec33c8635d4a1e81
SHA5129b5c515d72002fb58e7bfd0ab0c5237aaa9e428ba8be82d0c5eb2afe463f26a94f47498ba7627173c9b30dd8fbae26237fb609dea2bca5818faf983bbca16246
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD574305e6c4ea562950f4ff76805b2c83b
SHA10bca126b93ed4f59fa1e25d7d5c2d71b090f9471
SHA256e18c53e4b7b457bb985592ab921baa954b425766b7db78be1640b039826c350e
SHA512307e8c947ec6e655be3463d37b8da72b41f1174fab2da6f00964c9b02d0b55c851641075f89763fc059976f9fbdf44a961fdb31142d2fa311ffbd218f4847400
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD566f968a138158b02a6a91cdeef8a64a4
SHA1c9d15327c888b9d7cec7601e8e96dd01d8c985be
SHA2566e13cb0d34557a8f02037ff0a31403542f3f708e0289ac0badbce113a542b517
SHA512cc76135a5577c0355eb1937122efe19613fbc6c91ef8075c1dacb32802a8ab10f12a96b6f70d7c60551d6f443e4e83f1ade2fac3b4d8ca2472d74b7b3d8e9d5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dab2db9d9b7a4b1abd77b1b7e5d0b004
SHA108d5e481a2cf17aa74f0e35e36ccea47caa3f822
SHA25625e119242f9315875470d2fbeaf1ff99bb336c3773d242058bfc8c5011ad77c6
SHA512dbdd92aa49dcc30b7ef93efb79fe803b23d8003388f97c3824890e1a944195a5fed12ecda75e37ec8ecd8286c1160760921aa13ddfb67a0e5533a6f13eee7a2d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51529b2cc0a2ec487d921d0de4cd069ff
SHA196a57f2551f025cbea8b4a17151e40329f403f5c
SHA256e8e2e5d34478d10dba20bd93e08819df052b699bc2d54305c8e057038bbfb43d
SHA5129448986b815ed9fb77e2fdb88abcba5f946236315ddfe513fb57906e144b4421139b88a79cf6e5a2a9b044515187fa5eab9cd7733ccf5e30c46333e7cd52b4fc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53cc12b9260e41bf2da9bc199753e35e5
SHA17f5b556b73b15a173a8ffb3fa8024543824da288
SHA256bf692fafccc0abccae3394aabe33e4d42401313194b04011063a3a0b1be41bbe
SHA51255f5c1576aa7a903a33f26c89b912aeb4ccb1f7574cf052c51e9321377303e6bc73a447b0909c566dbed65827896cac1afc019fb3f0b86c85a2ad893219f4cce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD591e25cab73ff7489bb77a399e7bd3de0
SHA1ac615add92d31ce44406b1653e8dcf32382bed48
SHA25628c49a26e12d2d01cd1340032122a5808a527645884c68b4b2e7b39acc08b531
SHA5126737af5c03963ef6780c7da8dc645a0c5bbc799e22e8aeccc8f7e29a57e91f1781e5ac00b7ac99b631e5dd357ba2adcdbcf951cfaaeb43b683c96fe7285a69b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ffc2d38557f4329aec69d6eb442668db
SHA17798063c4af5ff77991871041aacef3c79672890
SHA256eddce84a9ac407fe5696e04d182ce5a5d39dc123f3ef46f55325c0d3344bb1d2
SHA512be35351a65fe2300f492e8a975cfd66d06d7b4a0bec78d9e1f3abff9d209576e61960232c1b7aa79e76d61f611e580aed7abae28513364ed335a909b5c470462
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52e94d345e17bca7277f883447a62851e
SHA11ca81cdf180503f15141b2ffe817262a5b7e589b
SHA2564bedf9f50c3b1f7f4f05745583e33941e0d91dbca53aecc30d73a63091ee5a5e
SHA512d62271f729cf64bd874d165be5efc1eaced9c149048acef59aa6306aa1df465d750abe810a70fe412876c2bed941e56b0aea68304beb6d52503fc8bcc11c0c5f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53e66cdc02a59e2e24f1daf4b2530d726
SHA120cf4ccb47ac493087842a90bd9af0b3cc2a4e67
SHA256c95e3b481c76e2c8e39d9bec0bead458f389013c6378813a7f9364838f293a42
SHA51277337cd61590244846d1510ffd946c73b81662d47ad20f269fcaa72cc3b409b5ca5693df8fb2a3ea09c89261fa0e07ac842220ac9f0ecd5da00ab5686cc88a8e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD540d443597792e68d868fa77eef353fce
SHA114dbbf5998a4177ab86f35862234369f224e3b01
SHA256448d655a198ed18cc78de28e5576141986638e60f25f4df8f453f3671f983498
SHA5120909e395751cfc5c02fafc90f0a174eb38d2bb384f31559ec422dae65f2cac568280f32322a62e37bd19efe4f8b0ffc84dc8de7704848b2c610fd1c3ba678b61
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d344cb653642595b1228870d5badd2b4
SHA15e3ddac8fd6ff8217286ee320ed16aabe8f6ecfe
SHA2567c9f575d6fc28d786c51e295cb50534978746f1f12c9838a3147fd54c66e9a0e
SHA5123f36eb655072e63ea3c5f32401ab3c83afdf71d420b6a59630f69f43399fa574107e9f604a2e76259c1e336519f21c65c284a96f869837c9e7eeca2eed678854
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5505c44db3309b3ee3778e04fa7be403f
SHA1dc01cff8d2ded53b17098f93a725e5141564008f
SHA2561d3c21aeeaf078b2daf444b02de0c5f7fcdc2d03b925614240e2a2040610c6a3
SHA51241f33c03d0f7da7a51b3d25c29dc5fab79d3d58e9734b2ae325cdb6027f5092005062c077e2ddfef275c40729e0f1b72a4f500863b03b282c20c8d2f3595bec8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59e924740d9d1bba3d5d6fa6e443d8bc5
SHA1dbed607c7583febc5f0c0e11fa8f581c3a8bba87
SHA256905c977e5a0660325f3cbc299763f91dc65abd8b4ef975011e46604ebcd11b7f
SHA5121af934a67a50786d53afb6deafa3db071907e84eca9db7a67856b51ad71de5b8d83023c53bd7643a806ff06479e66bea015260276fc39f53f7ae95d32f93e17c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD558f8ea36da87f65c353a1e95712fa194
SHA117085e59152149b3fbd3bd1a6351a3216c8a3ace
SHA256a2cd31ff2e1a06ece996fda4f871c4f900d67e0f5022ef189424a4385098f54f
SHA512413503d36008e062e14cf61a1edb998cea7222cd9949c5e203bf60d597fdc418f7b9cdac89300988967bd2de4fd4b7717e236f407c5c4b7944468b37b70ce2f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51aefb5056850a8d3a380e6efede7098a
SHA1f77874b50632742923e1cd85788e8627708f0250
SHA2562a0cc5728a50496f6f2b05aa00c931c71703ad70721049fa7f49ebd709072797
SHA512f854d9d0567e063a83daff2827ce1a1ad33ddfc769b0974155fda308b4496c75e8d7b1505fed12cd6b590ab2921c575644ce88e8ac44bf1f77c2098592e81b38
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57380ad905f77b025cee66616f17cb617
SHA1c182c6b2124a3a7ccc1e8330a2317b8f9441226f
SHA256e3cd39234488f88c793ce9b5630472065734e4edad25df7574bda2e5ebfcd678
SHA512cc90cb45391e0ecf7b91f2c3e8aff83038c425a6227c49bc064a74e3a74016d46aec791609c67e36dbffd69c78c2f3c6e7b0a23a48606219287969b0722fe141
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54dbd8c9b7b91b13f6c42011cad4abb4f
SHA1edf82c79663c018847fcc40476985729f0807570
SHA256adb1e7423243842a81957928bbf8a3a693f8219e7213430f7015c461fd061e23
SHA51299144cb769df65fd33c4d7408a634e74c2b848f1d706ffd32b9cd55411649d1a28d9d43985480012a1d0f1d9ddf266fd4bd8873c8d987787cc616e3ed4a75cdf
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a