Analysis
-
max time kernel
144s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22/05/2024, 10:11
Static task
static1
Behavioral task
behavioral1
Sample
66e7210cc52fed19d75c45f7c2ab56b0_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
66e7210cc52fed19d75c45f7c2ab56b0_JaffaCakes118.html
Resource
win10v2004-20240226-en
General
-
Target
66e7210cc52fed19d75c45f7c2ab56b0_JaffaCakes118.html
-
Size
23KB
-
MD5
66e7210cc52fed19d75c45f7c2ab56b0
-
SHA1
7e48e508cd579a683f5d2de87682680e90976a2c
-
SHA256
7edccbe7e8d37158974d9cbee253167770935bbbee92721a9f1624572f215965
-
SHA512
c2b1b676e45f4d3330dc7f459e5537d8ac8d9d0214b2e56623d6adc6ec69ad5cbf981f4e5311e9be4231fc9b01909647251720c0d2a4198cee710a974f78681d
-
SSDEEP
192:al7vFZ7vav69TsVi7NaNehGffhYyEWfe36iWfFgBCwsEg9AWfUvkiZLVdWf0cvWq:Mfm69lth6uj+968SLVPnHj/jyT+FM
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b023137430acda01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{9EE52CA1-1823-11EF-8C27-FA5112F1BCBF} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000413c49408122af45aa444edaa29c04f8000000000200000000001066000000010000200000002fa2ff8b9f293e1c8e9dccbf953e228323a24d090eadef30c1a5e715580314eb000000000e8000000002000020000000799ea52a8507d4e23a88c14dda012819dd7ec3af60d322c95bda182d640c71a820000000979274fc0fa7ccb32f98e9351e947528c87397445c27b06c9b59f00e85e0ce40400000002643d72fe72314641ab5c74614c52719bcf0763e6a650a1899a59fbfe517010e0f96e656252ad38b85e720f40cbd653ecc33a72b2dde804fb0171ec2ad4ba585 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422534543" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1760 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1760 iexplore.exe 1760 iexplore.exe 1296 IEXPLORE.EXE 1296 IEXPLORE.EXE 1296 IEXPLORE.EXE 1296 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1760 wrote to memory of 1296 1760 iexplore.exe 28 PID 1760 wrote to memory of 1296 1760 iexplore.exe 28 PID 1760 wrote to memory of 1296 1760 iexplore.exe 28 PID 1760 wrote to memory of 1296 1760 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66e7210cc52fed19d75c45f7c2ab56b0_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1760 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1760 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1296
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55d681e97551cff6344dab91a600ddb91
SHA1dd7b1d1755f9fadb30c969723a855c616f686d9e
SHA256b04cdde06bd77e9bc1f3ddcb7a73943ebc99c6284aae96d2338a2a94ab9c6073
SHA512664fab8abcf7c92700a3a4b6579e1adaffad87c584d756045b8de4a3f285ce168985187e89873e7055ee033208abf85adae19f4430fe833a4d6633b7642e1668
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5afac62ef2e1b4f20e5e91733d169eb11
SHA1983c147dd229c8ce16d0c49464c224b8bc75b543
SHA25694b5f04e41877fd08e3a9c8868ba4a596a8e2c7b35d8fb4226a3c7d07adf8399
SHA51239332ff13476cd206955855a9159d9702033eb9cf0f6335552dc789c373d5e322d1dbe7613d4e493bd5da9529a2a6a94493454ff92272f686ca4be82ede64167
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ba16589f39d3f1b230b7a0d65fa2530f
SHA1a57aa53c4c24568c0494105ef69951db11ed6204
SHA256ee23491131dedc6ed478bc8622c952f7ec825fa2f11c2b845295018629549504
SHA512f9f058da10f9180598c0f5fd841aefe9254dd78dd94ef375ebec98fc20e3c3025b561d3d7a8e3fce9ce7c936069e615b17b79d7f57e8fc5f72dc821da9de88b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5352c4777a40c4bcedc1137e95624c62b
SHA12ac5b11326ed567ae1dd0a234b1f32489b904b3d
SHA256a7a884c8cb4836f00299ed350a5d92b27a9658a922612e091b3117e5ab53e38a
SHA512c859b3802bfa83f7c895f084956939a1b7dc9a42a1a168378e33ecde483271f6fa97658f8f2aac7de8b87faad0cd49905378c20e9578256ba0f8f0df063b08bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51ff82deba3cafae9d8ae277c733ad5fa
SHA115d09598cbd3676a85a23030453fc56f9cccb031
SHA2568abacc55d274b8cd20b67401288ded392bdb01595e9d0d29c34749cc0880fa14
SHA5123eec68e52c6cd7903b02f5540160663dad426bc39f1c38296928baf5dc0bcef76456b9f5bd245619a18a85380a75e062921f72b8803bfa9deade761fcdd64992
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c7eebbd22c7a6ffe152ffa44647e7fb1
SHA1136d73199b9d77596be345128be0c224f017bf25
SHA256a03ddbf2c3fc4e729d770a3f5f31365edc90e8f5296829fa6f12e79d2913bb4d
SHA512315f04ab2ff06af707ecf710fa9641fbcd1c8b187d81f4af32254460045c5b899dd90972cfc60974b0fb274fe0d722c9f056fd19131be20ecb69c7fe0b7bc4c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD586d9b8b35bea0461ddc0bad6445b68b0
SHA17a3e65f3aa47a5c405e5a2718ef96fae86ddb0d2
SHA2568fff9f4904ec24847c7a987012f51d739b0fa5a6919c4f432ad32bc39f4ee41e
SHA512b9f1854263398e23aeac0c7ee9a2b3f794bcdcba89aee944aa83ca936d998ca9afc3031c102d50c47a4dba8496e0f7f06b4e214d419cbcd658f2d7da93fc315d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57d228046206c5eb5cd44d1f80a932821
SHA1971425b275e7030ca6dcea02ef86476279e6ed98
SHA25652116fc8c78e1a9a011264616530d4ee8ca25ecf79f99c3fa93215d5cd15133f
SHA512d3a404b2dc839360cb41be045283d720e1cb64112d40332cf88452eb00c7e7eb116557da9413b5f17b1377bc8cb00d913e19c4a1554898158852230f139de618
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cd8f91ea4c533ff19b802090f6e8837e
SHA12e15ea19e29a3141db1651c1bce6ac0fc05113f8
SHA256c4e35d0eafb3010eb2c7c7f08aff3749483987a3b9d9c2bd98b5d29e256dc413
SHA5126855e57253e838be9214a63e153f34678c5fd80efde8a98385d65fcceb88c3f06e391e1889203499acb0214a6bf634813a76c9698a765466e40bec1525408094
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b7c0f3959d59a6b1794d7e50a9914013
SHA174eb45a5a2f673004b711ecfa8642c6e9a9fccea
SHA25633b7548d616d37b0c0d0f027be0a04f995291b429cf50c9688a8a70f162439ae
SHA512d51b0e74528a82bc6cacf3c752b589b9d72abf4d41a9fa8efad5edc06173cccb61e7acff3c0cd3268a97ebcf1566d6ae2b1b606538288d8c77eada6036efbdc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5675df407e0accb4c804e3658aa9a2c90
SHA1f50ca902e88e7edd43aea2be66c4523260ff7a83
SHA256234174443380dac2282563dae52a6af4d1b9e9b57a97f4f82ba670b688f0f255
SHA51248108def499a43487d80cc5969ead307f3a7f7e3e786aed2f90721252915038ac784ee85d82801d5da82d47f9f46b45dde7afa035f95d4942e13d2d927dc3517
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57593ed614805e09e652069c2a6e289b9
SHA1f4412573057fc4666878d08bbcdb0994771dbd1c
SHA256d9c1e7abc34cb940e33a344c3dfe5eb6bc24f9a9de98f4a676a55b896d361cef
SHA512945be222ef016e553a2f9085c68e1273f0ed8c5efc1cb8217c0562d3b11a71f623187e73a83e0ad5b4ab682aebba3b0e42cef115f12d9ef0378d686e2244e486
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5790c8765bf0d21dbf7d3431393c9bc29
SHA16e7451ab638aa25de1e26ae2f44b071a740d2efc
SHA256faa62c70268c43572af2368dbccab64ab8838210c3564e2e397f10c669ec166c
SHA512e4d9ced1d91ba8d32d771a787689c94a15d9462017f5f7f3c0b81553542ab3e0e9a395d9ab6c4b6bd61aacf265f4f6bb478dfe5f3d424e2f2141a1bcda2e7b15
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54a7b24e1b2ab40fa1a5d0312c4fbc542
SHA1b030dc3b0096b5bd31b334409218bba11a7a40db
SHA2562aee58a9de9906ad93687850ad5927941290ca88017da1f7662dc75ad61aad8b
SHA51211a0068f01f31e110d91072bc45dae046aa9992df879eccbdc70b48d0aab1ba63a0b2e5f614a2ef99a54cff9da49c43424f0d5858835caf5ef0c18b807d8e2ab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59b469adc2f0ce2b96283bbe258916481
SHA14b692f7a2cb1dd9f34543f8f574caa46d0b4389e
SHA256f71f5edb64d4a77bd4111f5f99c0c569bbf37d280a51159c9a81c0e7f2113c15
SHA51254c9a412a09074647df6a33acf0b4cf7122ae9a3e8f0f6419bcee38bc4d6dadffc352dbd647dad1d1700a0bd1bcf1e476cd55bafe5821ebfb0b0d694b904c646
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51d4346bad05e971e14b7745b5e9d93d0
SHA1d0980c32d2064405ce0f71488395261380ab82de
SHA2567b8551978e0e23573a39fb14ad34fe5a2d7a46e79454dabee59ec01fff35c15e
SHA512d181cc08f2d5dd7c2f01d8c392613ad1089e171bc2d7c0367cea41456025e1aecb27389076877004ddd2c1c52d9428c219a36ca8526ae831cee484604fd64746
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD501b7d67b48bbb6d3261d0fcf20560644
SHA18dc8edd34571501e776c9d45734b0ceca196a08c
SHA2564ab4859d062f5c2931fa6bb8a6f36c116deaaaf865192e99b6fddfed1db0f09d
SHA512043b4e03c9f496a8b9fa89e42761de0d931e9fdb5ac22a193f218d6c2ba46b8b007b0520323c3f29ad371e028505431b2dcd79b13190dfed2fd962b953427865
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e36cbe693a4a4d8b839c0f482e983a11
SHA19f0b0716493362819bc62872eb74dbe25c8dbe61
SHA25661bb47758966e6e7540cdf1869c9c34102b2bf9a38833178774178bccb633c3b
SHA51213aed23230b046d14d39b4bf9a54e8a7dbf6dfaacc2be488802d0d7c780e15066fb39db149bc019cf579f7977afa748df165e2277f2247372398c7ef374d62a5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5775f88153a7699cf76d0b70e75c1bb4e
SHA1c3f88a7b68b3ec223fa8a95cdc50a48713ab1c44
SHA2562800ec75863fc0309cd26b07510a1c46598acac21f1ff74c8ed449167b1c5a58
SHA5124ac333dfcb6927c0f14119187ac77da73a30a6f0855adbe25ac0c692f5fab2d7e0924bce1181866699408e5b2672ed13c00f0c50c14ef2d361224b36840ddce7
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a