Analysis
-
max time kernel
119s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
21-05-2024 16:45
Static task
static1
Behavioral task
behavioral1
Sample
64039dd1c6b9bc57b9c0e8b7135c668a_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
64039dd1c6b9bc57b9c0e8b7135c668a_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
64039dd1c6b9bc57b9c0e8b7135c668a_JaffaCakes118.html
-
Size
304B
-
MD5
64039dd1c6b9bc57b9c0e8b7135c668a
-
SHA1
13c5046e95be285699f92d2ff7dd2a81ecc07183
-
SHA256
2fe69515f6420e726256098d4f8c3a5b10a3d9528fd28cb6861ca7e20778ef55
-
SHA512
7df4f1ca8175d9580a759f39449075fd7096c8970d4b3d2f836852789ed988b8c6152bd3b2cf2659800b630a84118766633634e4c864351e1f410c07d897094e
Malware Config
Signatures
-
Processes:
iexplore.exeIEXPLORE.EXEdescription ioc process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422471816" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009dcddba856e3c944b1ab2ef0c01b92f900000000020000000000106600000001000020000000af45bdc91c868e97c87dc6fd024584998aed14c50bf26d6fb338a322b77a5f72000000000e80000000020000200000008c290b72e9d6217aaba8589bdc7cd3577f466b1b48c85b681eeb902d3de3dfc720000000c1ffba81bcfd19170254e05eaae78f538a1cf319dcff4810f9dc4a80699dc1cf40000000e267b5c3e9ea607dab32fe9657b99f18816847e6aa744002939bb46ccd4c3d59060066718fbc1f2068edc8a9da6661a4cb94d62d2ab7a630f953aef0c16f8828 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{937127D1-1791-11EF-8356-E61A8C993A67} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d03318689eabda01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
iexplore.exepid process 2964 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
iexplore.exeIEXPLORE.EXEpid process 2964 iexplore.exe 2964 iexplore.exe 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
iexplore.exedescription pid process target process PID 2964 wrote to memory of 2112 2964 iexplore.exe IEXPLORE.EXE PID 2964 wrote to memory of 2112 2964 iexplore.exe IEXPLORE.EXE PID 2964 wrote to memory of 2112 2964 iexplore.exe IEXPLORE.EXE PID 2964 wrote to memory of 2112 2964 iexplore.exe IEXPLORE.EXE
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\64039dd1c6b9bc57b9c0e8b7135c668a_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2964 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5c5e05b9f98b2b2f245206147b6cd941c
SHA119739e8ad8c3e7caf2a70a604d047a52eadd3a2e
SHA2568722201b8bed3e05c37d4775b63202cf0d6ce81548306ce56870d94a987a1321
SHA5122f7500b35a95c24cf21a4b5a0b6ce31d2ed5da408f08f8d208b6c16154fcf829cb4a5eb0615d375eaa4482a65a18fdadf6b3a19932459c05f47c6cf17f68780c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD56eec2964c394528d4d25c11c92091c33
SHA1925d544c2046a37ff3d92844580536823b08c18d
SHA256c2ddf9beb55828eabc19d091f2e0ab18530fc6f74a94dac3b2694194b7972974
SHA512d7b67cc8e235d9eef15ecef2d65a88b0c886c5d5dd0c2e8d851976198b3ba821ea23ad43f4d5eb9de98380d7ccf0a7759c90d442b6d5a18d1d4e7ea8653c2578
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5ceb569da59347b12c4b24ef060a9d631
SHA1a78286982136272ec049a545dabe35dc7786c091
SHA2561dcbfbe22ec4669e4545b7dc017faffc2e94598b49ee11972496a6e256c96166
SHA512d828d7387a9c6627dfe7e7ce852ca7d5046acf809c5e38299f770278ab647b61c604799f4ba74d28fcce1c02d8dce7ef093e84ab84d6a8f08ddb8ac1f8f40980
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD51aa10e84eec626331a921a2226579110
SHA1f472f296027dae95d97408d224545fd14dfba767
SHA256d20c17fdbc9d7eae26ba6a99468f9d2e203089b0bbac418f61531c109071530f
SHA512b20447dd142869606dc60d82e17ca575ead09e883b98c4fc25e55dd1332a9b2548b4d8ebac88e65d484ca1256292baed089d228ed77d886e3dea35385596465c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD50d6c541e5e33fe601110fd3bce8496be
SHA18c4d1776126e509d12e3d76084d2b43fdffe38e2
SHA2560d143648c88e9b0d4f438debc49c82742738636cfe6ff2b837cf7dc1794bf991
SHA512b985417a58dcb1de2c1fe99dc07e239c2a7064dac215c174641d098cbd02db5245167c0979a2be9459fd7abc2b2f449e0a5c3c5d37b9fc4c1a1560238ec7eb9d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD557f8f977607ffc965c543b5143b7bd3f
SHA1910c91e8e918ece3ca70e93ce690a242e7777f43
SHA25649c4d4813eaa56dfeb2aff246f4936de08f99d86ab462484b03f1f0f95c2a7c9
SHA51201e18aefc4c9459cf87f196baf2346da4ef0214a7cd06540cb52011d16d31976b2911f124bff6be0c4b389bf105ab4839eef79c892ee195886e4786086b7530d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD54a4f4f433f83031990d81ba5caf0c5a8
SHA1a3c32e5e981fa48b292494f2b267aec00988748e
SHA2565fd58282126281160b98b91bfc564fbb60d5ad252e69600b8f7d36ac3864f493
SHA512a8453acb5b866b8989adcfcba14af2f00459a0c3231f6ea8103b4f7ad367fecc60048671475bd688d9411e25e311fb66768fccb59511c23a4346e2fb0784ad63
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD54327c424ba6c840c567bf0e681e751f4
SHA1d2a50ff96f1f07d089203999f9ad3cae3bfce3ea
SHA256429d386df03e7a0d5ba85d2e1090845b78898362bfe82031dab2a16bec54e915
SHA51296e6267ec45bdb62aada2396df9e97dcd4de06c54e39343e954fb80fdf5b0564eac36388273c4d834211329f320028e3628f7d92f448f3c368371e09ea0278c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5daa7abb662928cf5023bdccd3f3edd3a
SHA141949acc96659d0edb0359bb85de3b0505464223
SHA25692ba82e222e99a572d8c5de6cea939bce0938ed500198e0744f69b97ae3866be
SHA51299cee1dede857a213fecb462d81ce56537f5484bba275a7d28124e422d870f200c87cbe234bf2714ac0a70326b50ea402e14a7bbe12affe326ba92690f26f190
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD52f6ad377d0a1526c311609fdaebcf286
SHA148fc149cf6e494573402b9fff481978b04bf7a13
SHA25632c17795fb1c24afee0786fdceaf2a5d05e2cabbc10b57eb2ba2c75fb820ab5a
SHA5121056909a954f115304038227442b363fadf30a6cee0c0ac7f9de3d6e8a77235d0d30d76985e870a1e1be2a7ae8ef3be580e19419dec4f7d59e9fdade85380f34
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD519b9145837f1601fdd418d679d91fef9
SHA15f9ae731e4167b2d2c70d36466fcfda2769fd60a
SHA2561dcb4d6fc91722f32e1334a032dd6ec61e0f43a78082b57f6ef3b705ca2ec76a
SHA5128977eabcf6117ca08ec597a62739d77f19452c7fdc7b7b70ad2a78661650d0b5f47fc0f77740324625a56ff6d1ad73d684bbdc067057e1b24be50fdbf24a0cb6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD51ed45236f8b57d5ece17f7deb1de3395
SHA1ce2976c4f52bd11abd9c4da508957897c60afffd
SHA25651d73e847d4995b6c71ebaeab6a60872fc4063e6e5ca4551f8cced2ea6d9b656
SHA512e7de3063abd560e43963993e0ab072122010bd723a4be63b107748f0e535750d0b7f01dc571afcc9d155578dbf52ae07fdb0fcb0142777122f17207b799f2b1e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5443ec3fed5c59416868ed2f022ecb1ce
SHA1d01ede86def1390804bf225000040ceae8f421dd
SHA256eb4b7bc4a1b96cb3e7e4ab72ecddf16761038bb1f7894fb735c2f21576873fa1
SHA512f7cd5a272cd1cf9262646b7e83f428fdcb08ee847a7378ca555477ef6f0da028967dc1eeeaf6a97067fae9b69f376bb71bb5190245760e01c428a3e8396950c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5ea6355917497be4232a50a8b48e0c6e6
SHA17d497f5272c73e13bfe3f0c8f24bf34ecb012f2c
SHA2560c5da870f3c279c94e553dc2db2a266c7f5313267c04f5256b4ebefc5bc11b74
SHA51234be7851d36a2d262d83a349f339acd5541f660a36c23fb11ae71fbf9061db65e8064e1094b491c5354a34826fe0b8e013e55a396b9abeadcac24e6cb7e5e98f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5258462b018a7f2f32dc52a1400728989
SHA1f57a30b9f8c8f4a728a49189bc5d934417490f8b
SHA256f8d36adef0a9bb53e0847ab177d2853220b9e9425010ca45f6bff12c81fc8583
SHA51213f85b49704291533218fd1c7e05ce945691ae3266c4ddbe38f87dae49b668c2aabbd219d123c3c6f6f48296f60e3dbfd8e4548fb2a549898fe71fcf99aab19c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5d3e496f91c7593e5cf176f1c102f811d
SHA129be2fc649326c6345a5d3276750a37fcb623f11
SHA256742a4e0b7f896df75470dd0dc49ea212f56e5074ad902fad97124a805138b73c
SHA512cecf2b155780b2de9cdda692721dbf44b5d0924e63aafe2b4300c4fe03287e4deecf0a7d9a9d4e3ce4aacd6ae7e69579cb6d796566cba22c316ed88e7ed3caa5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD52b686fe21d64902ecc862b0cc5a9ee6a
SHA116c146c079bf263e78400510e96c0c23c9091749
SHA2569b6ec32a88e0e42c232807b1ff7449f6899ad30ce880e5a48b9f2d7520e6cf40
SHA512f4fea6fd25086872c3936cc409a292346db1963578f91fcb5a536c828ce697ed5d2172b61b6f62a712c7920cb6d2fc0941920616848f675ee6ee203b5a14200a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD556471cb4caf4be4a1b91b22cf3f4ae62
SHA1dac0823d4c3dbe188a48526d3b26fc169db3d0a1
SHA2569265f757fa6714963b821803dd152a5d28b3c59dac430453be57202862be839e
SHA51280473cfe12aa7c49e62b1cf338186defbfad486f48d435f24521e2fabbfa93de1d8f3bea7d6eb7064677ee96f6082be7df54342b5f68a6097f45b1819d0ef721
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD58a36b6c93cb45565784f3b65f5eb3669
SHA15450611acde30e6b894920cdc1fbc14adba3199b
SHA256aab190675a8c4291b5bc0d1770d8d3d51712c83ee84f803982252c7ca1288d59
SHA512228e120e3169faf91da2582f1dae77a53c6e1a3697b4a3efafd08e740ccd356901703474897f7b3c2047292c5cd9a2aa06000abe27cffd2970565a4ea688ee94
-
C:\Users\Admin\AppData\Local\Temp\Cab26B6.tmpFilesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
C:\Users\Admin\AppData\Local\Temp\Tar2788.tmpFilesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a