Analysis
-
max time kernel
117s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 01:54
Static task
static1
Behavioral task
behavioral1
Sample
65994c351f6aaf1b5539f0ce60f5aacd_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
65994c351f6aaf1b5539f0ce60f5aacd_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
65994c351f6aaf1b5539f0ce60f5aacd_JaffaCakes118.html
-
Size
26KB
-
MD5
65994c351f6aaf1b5539f0ce60f5aacd
-
SHA1
ca085ad5849e481ba21fd3751110d7fc427329c2
-
SHA256
bf36429a4b784e88383b88a48afc35daebc5d40816f2eef8dc3cc5df8102c550
-
SHA512
c0f628715f51659979010358465b16b377577c0c78537984503db1083f4b46fe43902b56312419ee32a5a6a191313b27f280adc3c7496a45ce72fec322bef057
-
SSDEEP
192:uqvn3Xb5n1enQjxn5Q/snQiePNnYnQOkEntcinQTbnxnQbCJVevo7Nt+Fo+NzQ4d:nLQ/Eygc5R57O
Malware Config
Signatures
-
Processes:
iexplore.exeIEXPLORE.EXEdescription ioc process Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{33ED29B1-17DE-11EF-9F86-7EEA931DE775} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422504727" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000001a7339ebf1199646896d7f1aed8d6d320000000002000000000010660000000100002000000020938fab40ad59d18ca4068f6a3187fa303f163ddf433bf8c7f2cf48a7834056000000000e8000000002000020000000562b0b96e8c6f14b76b0a430883d2a201fddbf0a64096b131ddd82aae8e7df0420000000f23b77c0557cf620069afebec7e27cdcb34c4437c3ac37864cdbaea68f021a234000000086cfd554b18a8d34d946281dcb86c8f344960dbfb3ed349f00ca50746ed294585e801058c780b22cd91da08912cf03ed0e1a805f3a86faf9c4442dfb63b7e354 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 802b9708ebabda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
iexplore.exepid process 2168 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
iexplore.exeIEXPLORE.EXEpid process 2168 iexplore.exe 2168 iexplore.exe 3012 IEXPLORE.EXE 3012 IEXPLORE.EXE 3012 IEXPLORE.EXE 3012 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
iexplore.exedescription pid process target process PID 2168 wrote to memory of 3012 2168 iexplore.exe IEXPLORE.EXE PID 2168 wrote to memory of 3012 2168 iexplore.exe IEXPLORE.EXE PID 2168 wrote to memory of 3012 2168 iexplore.exe IEXPLORE.EXE PID 2168 wrote to memory of 3012 2168 iexplore.exe IEXPLORE.EXE
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\65994c351f6aaf1b5539f0ce60f5aacd_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2168 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3012
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55919721f7a30bd4bc98be8f8eb73af5e
SHA1ae293900e6240c47ca6e0a55b0b9cfcb068755eb
SHA256bb815e71f7de871ce2b1140d77ac2682835ea4b384de1ed3d263cc15ce7a19d1
SHA5121735d0148635121d065edb465e047b100dfec803851878e2f17bcbe5e21fcce56b30b81abe7fc7cb8b950933b4ae1c6c4c16b75054de5d9a944dfc118637cb10
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54154db600471fe08417958e04a7d4973
SHA1fff177d0a5c3e9e279fe0c2c6aa1637a7831dda3
SHA256604d6f1f3c551335ee2cda76e2dff06da0bc15100af98848f6825dc2621bc1f4
SHA5123fd3b22bbfa81a9c9a826fdcc760751f9a45c07eb5de9ffdf79840d605c0ec9d6f32394df0b39147677c3ca9200490b05ba8bce52163a1770378640955a0cb7e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD515cd156b26c2e2f7eb16a6def17503fa
SHA150697ba309934b2b9e64e60654cf043ff4c32f0b
SHA2569c559cb88b8356b52a96b5cf1d63790c5f74ac3b02a4f8b8014399f04baa3e47
SHA5126790bd25b7c3ccff3f3f20a2ceb914abcfdffa45a8420f79be714de35e5c6306855179b5e49e7d7a4a3a5c905ddad12413baca14d00b1e35343ba52b12770a3a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52cfe67bd09c205e2f358b009fec54fd4
SHA137d3463394c898f2066315168108ba0000de0520
SHA256f4c2b7a535eee0c3fc5b1a7aba99e24dd022618b11018a813dfa41b1e8b1d47c
SHA5121657a653052948598d2bf065abe62040852c5cc8bad4b07cb8879c806e07555d9686811f2e35df56b113baa5f60507ade64fff3c756e1fe1e97de3134938fb04
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58ba2ca2b6ea60d4bb98d763fc2140b21
SHA184334ecc92187c07ae7edcb9ef9c6e48f571d090
SHA256ec6f629ad5c74bba2ec7a4c8fbe7aba70aadc6f08f8427cadd6b7acf88a8e5e6
SHA512c18583d34cef02d6d57b020475966315be4836fdf4ad975192508e233763f9141456d29372b8cc0052556e9af1c2b4248b570244eb812d14094cca0f0d21bfcc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b889be737cf38b75da5fd923c4f3e32e
SHA136fedfe2bcb76be4198c5047a90637a76f63f891
SHA2561c39018d763faffac9450876aa457e918c8c21f9848a2ebfba89967a1de88a54
SHA512e6ea4870f02ec61a35e345aaffea30e6286413109e7d696592408fadc666acb8fb766250a0d082bd47af132599fa48f62d188fc1436882bd4939cbd3579194b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD596e48a65e0777a38377f36ca84000fcf
SHA187647d08e882bca4bf438daa4b7d79a798d25db3
SHA2567d9d5994cf2c609f9913a84380298421c4348dda59f4be19eb736e57421198d8
SHA512f144195b8902a717b4cb2460013f05fffeff62bcd2bd5e222b8eb03f9bf6f86acb703c5b148be54fca65205bf68ce9c2f61e6c24c01e8cb0151959c767c9b039
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD524b4a99919b34f91812ee7f6d525e2c7
SHA1a68c8f7c616efb3245cc76c7c9ea7aa1215b10a2
SHA256a14e96fc5eecf4e78544b2ef0e0f3cc4702c8e1b2696ec15080c731724ded043
SHA5123c76efc8d0af689abd89d3b8acc0665d0d99aee6f003accdefb22d18b75e46366c20189fd8d7df999664b4c72375bf89b80bc3c6b2e1330bffef98f03d7a98c4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d19e22ba3061c1722d09073f7d64f007
SHA10a340e7a3554a56b5194f680b15492955b0c6b6e
SHA25652fea01ac652d669d0a4eea83ec16238c927324b3ed75869d43e40a998136ebf
SHA512a306306b435f47f5b94eff2f28fc59e1323348f81f212250bcfb08ae04c2c967301295418d38ee5595dc3f80f929dd5553ee705a1496590fb8d10773454fb2ba
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cec9bdc744aa1131938c45e88e8a8c71
SHA1dee53e4ed4d8ed2a962cac615e0abf613861ad1e
SHA2568e784264aab8b7f5e891ede351009eca5c686f2a6e665701ff774a84fbac26d6
SHA512de932e629004b154145905d6963892647e23efd80efb08c0904015cba8ecd8cafa018cd5ba5060d829e03f748e638cb9520431532c45320f34005f7a16d39e22
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD546611d3874cacd26e15837a8019760b7
SHA1c6524130eee903b276f19fa5c2e1b3635c93b520
SHA256edc370f7279c07302e2aeb235e7dfe703c929e33ce50893da04d49f4439eb3f5
SHA5120e59bc97ac7afc676822ddb7644780ea8c43d1d7edd01b31c78691eb0ce56cfce839e0c0d0ebe1c4d110ef7dd5fd93cc2763f15e851bef435696669646e372ff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52b56c82e88a76da457451bf94d64f01d
SHA17aa9c474919f474969ffe16e1cf945694e899861
SHA256bfbae3d6c905915b457deebda444319fc1b111cdf0767f3ce76f2de1d6b13e93
SHA512eb6d4620ee752b8cf3fc82d072d33bc21706e315e1572c7f301abdd26ab8f39bdefc716fdafb734e333213c010facbb8b7c8d7641ada44aca95b8f4d36484d34
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59bb5b44615412b230ba8711f9665ed52
SHA165c67f7733ecb8b530f2352da78b7ff5c91819b4
SHA25688f33ef709080674e2900758f8b1945e3b1c82acfc4c8b3c1133a3c44df4efaa
SHA512a08ae797425910f198ca7556c1b79a4de6423471cf123d1ca5b8ad03fec886b6caea191c2cb926f307b4b99940d0e014aa0cb8bddc6a53321a36fda37ad24a2b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50a4734bfcdd0e069709515ffcf50c236
SHA1a43b85e7193ba5ab678a7e6666e9e3199c9367ec
SHA256850de7ebb4032bc2f7d841441c9399df26815f80ddbbacb6b533805410375212
SHA512208cbee39adc49c0ed436ff46238ef544936ccbeabd15915ccd12ab134d122a7aaa1b9629d7572e709c1d1f0fa7a5cc35f4183943f57cbe14d75f1cdd25f23ff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e93cdd457edadcaf7a545bcb3d6c8da6
SHA1cdd62b4236101ea793dd54892d1991a4b513d549
SHA256f532d78db162343a56b6bab2f36842b79d42e18b2d1aebb23db7262cea149571
SHA512774b45d3941313a13223dd035ee3b193c8371b6bda18b206aecdc49852131b5fafe7b5b7fcd3357e4255fdbced010684d8d3210c432354200f35d30661f898e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD527d9d274c66ebfb889d8f293f7d2666e
SHA14cd3a54ecbb3892e874bd569853bb8c800095f52
SHA2564b85919be019ae789c851b37cf3bf20497d8e2eb5b7de6c3bb58d3226e5dc357
SHA512066d57561268ef46159b0117734e73fc4ec398b6fd494f0166f617c1a6d193971b9525768f42c48c3d31f64d0b5ec3f800449bec3f5bd9e28e71ea7b5d1b46c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD521748779ec8505d3ce50acdc953f2c68
SHA1c0118b94ca1461d47e7b6bf855d32ca29e7fd45e
SHA2566d5866ea35228468db6a07e7c2906b835daf6cf8e521a8b3247191868dfaa9b0
SHA512c6b1998ebca6af98b46eb2865e0bcbabbf67c17fdb74ce6cb84be36de6d46f1c555e44e2ca2e5331b5ae88cfa149455fbddc509b56329c361c5da7567703256b
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a