Analysis
-
max time kernel
136s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22/05/2024, 12:15
Static task
static1
Behavioral task
behavioral1
Sample
673b3718c01e3f90e49d341e582a858a_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
673b3718c01e3f90e49d341e582a858a_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
673b3718c01e3f90e49d341e582a858a_JaffaCakes118.html
-
Size
214KB
-
MD5
673b3718c01e3f90e49d341e582a858a
-
SHA1
7ff63a1183fc989f6a4dd3bc902123ddd895ab36
-
SHA256
adb7abae6e1b558e96855f29fd18769ec8a3761d144832f93c47398e45001ce7
-
SHA512
be091ebd40c6731426e182cdbbfa29feae04136a96cdb917a0da61111d89b5d7440313baef008187e0578360cc471b1d693d8329c3b9e50863348aae61395337
-
SSDEEP
3072:9rhB9CyHxX7Be7iAvtLPbAwuBNKifXTJP:Bz9VxLY7iAVLTBQJlP
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422544253" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{3A1D3081-183A-11EF-8A46-EA263619F6CB} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000003ccd7282bdfb0949aa23f979b130fab70000000002000000000010660000000100002000000094c57630dfa3fe6cf648d149ba6571c2bde76d8503ee7ca5e285a7092432a34d000000000e80000000020000200000006d512c19dfc13dfa157bffc319c5607cdd8cae107c9c5b8f2be465f4c6a43d40200000002a65f8efb996426565a196498f46452cdec1a7fcdb309e5c8949fed332353bfa400000009485c9f9fcb5df554a42fec98e6f38fd2850bb2e103beae01e15d1c6ee968350d388e8811101a6dd43569ef5239ce730c2bcb8320c8ecaafff907b77812c548d iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f0bfaf4d47acda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2336 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2336 iexplore.exe 2336 iexplore.exe 2164 IEXPLORE.EXE 2164 IEXPLORE.EXE 2164 IEXPLORE.EXE 2164 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2336 wrote to memory of 2164 2336 iexplore.exe 28 PID 2336 wrote to memory of 2164 2336 iexplore.exe 28 PID 2336 wrote to memory of 2164 2336 iexplore.exe 28 PID 2336 wrote to memory of 2164 2336 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\673b3718c01e3f90e49d341e582a858a_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2336 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2336 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2164
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c58c97f741793407fad9936b1022195c
SHA1671db1790992021a28a87d23fd93139d7cec3317
SHA25627da2548a85e84c996ecc2e5f34c834525f0f5d960389199d286d9036776ada6
SHA512e77f762c1c935f6bee950e0b27b778258434776d33b1cbb4521f73a38c212c4fc2a031000ab2c4a4065145898af00ec4e26192bc8ac03260e033adb4a494e855
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD563a8e14d320853350f736235f0f9c321
SHA18655579c80b40e4605b5f6a53442b1431a4896d9
SHA256927d68eefc5ecb07e7c0e5e9d7a2758e42eea1f2f964267202843a80e6218653
SHA51203b177d301ecbccadb9643e1f313ddfda5e635c6308d4472a85625219b7d2513e5786fecee9a07c081e375a600280e513ba6bb1efd8db30fc9bf9d8a0b270d27
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d28c7b8a367228ae8a117b6c0e0b77af
SHA1f121ef3abbf0f31f040780f74654b3dec86301a5
SHA2568c66cfaebd7ccd79d8708af27c8781bd94eb25eb056f834eb55f6f75c197842d
SHA512f489196b93ff26d107aa49307d8896e4850c87f70080f311a8b31b972244c00ee9895fb58247b3179723219ac80a78656481da47c8afec1bc62df4928b656bcc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56670a1176dc56f89126fe0226e1bedb9
SHA1cb0789f34d06cc2dcc46ed150cc34cddebd90abb
SHA256f41b3672d3f8d7c9bcf3848cdaccae2fe2e41d560520c778b8303b30f2ff765d
SHA512a5f01e4f2f25a32236a2d0effdc3fc3462da25c9f18e02d81d7cad5d5ee01b7ac231b588423d46eb77233cbee04a01673c56817dcf39bd6941b8084e768f22fa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c22f708f58c7c3683c4209f5bf4dbeef
SHA148cc894f2187d337acc94a737b95850419e43557
SHA2569eba12c583b5aa6eac83802db089a9505a3e6e139e21da5c532bba84f18dc8b4
SHA5124435ec6f74015a3c91d595a14981bf252c168bebb558c890abc5efc5299fe2595f31ba6d967597a29a17f6d56ea87d23814f1c530acf8dc4d83e3fae0e97e1b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52bbfa3bfe6d7fccbc30eaf1e143da77d
SHA173d20430aa1d107722dad7d62101f3a2b963dd65
SHA2563c54f9ce7f502fb6bb04161fb8c1f819389757202f86b2b8bd7aa5dd2363e454
SHA512518fe349ab2af38bd5aac304083b3d3840080e4d38edb13b92d50f065e0c7d29401af32c6e8b7d72eb25d473b4599296140c279038d602cecfb42f20f562c5a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5995a6d8871cf76d622c97a02afbf9c4f
SHA177c2c920fd186c5ba950791d8d4d8671a105f5ce
SHA2563e4d943da782b3e139da357ef66b4012da21f75bdcc21541d50a2b0fa85f4860
SHA512525ad21ae85944f9e7d4bc3295c979c5c4c5db444b5c480358eab6c2818b32faab2651238335a2f5aeb9cf05fffb532c125e72894b8e09d2210f05b9731ab5cb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5770f872fce1ff9d5302ad2190deea792
SHA11a59a9ea3b18bba44796016271df0b869680fd66
SHA2565af47d84db0d17ba23918adb2cb5e95c1dbe68f46009f5d868e50a1c6afaa96c
SHA512387ca8462fff5bcdfd865bb1bfed9cad424f94522946975c1a58afb411e3a6d35597ea48b3afaf77742f401749d83a97a4f865456954d1d32c95ed6643ff370c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c5862fa46c41b9b334360d275cfe03d3
SHA165c58106679cfd5224602450231565b568a50bb4
SHA256398643116dc912286059adbbedc69cb73199c867a8eadf2aba31851bbf015c74
SHA5121f035d8f271af29a3af2db293edb8beccb6f674e1790bad2b4fff86cfe77923b2d0cab7df1f39c029f2219336701b0290a1b8c586898e68fc6165f9bf3f83bc4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5de7ce953d2147343bdc695b2d741bb21
SHA1c37c50c988860d0c494c78c848d1c7943f83b79b
SHA256d4e0925cf588ea41099ad1413529b196603e62e81fe435c15ed3c3c2dcc708fe
SHA512fbf78a99a977e7d809a622f46a072932401f7fdee89dca92aa1520b594fe5fc70b8f856a7217c41694f6c970068f6fa79aadb0987a398ea181b979244d7cbecc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53b1dc899c1c0a187951671d6623d400d
SHA145ff33f7ce84fbbd201f4272a524ade42476b751
SHA25640c6bd705c2328b1dd7036525052020c0bff01f7474e1d6bbcb143eae3e4b7ab
SHA512cf69103e8494e2111e8c6d2c29f605cc42dd4d1bddb714215ff32db1a428542e3e600ae6b04434881f747150576888c9c8d3e23976f08b3cd808ecc2f56b0ffd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5282322d1a1e008e5921a5a797600250a
SHA1f90cf5673c01a301616954166224639ec54c6d64
SHA2562c36713f4e23003271265a5986aed5e649325ed38c46976bf4fbe289403fc935
SHA512f8cc4330cc756705084d20796e11eb2a1612d1ddcb13d03febc4994f9b2c9d863437d0bf84d6080fa7639058b76bd8acda27a059bd57baa15124f36a9bf4beb0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a6cde14708c1f9b14ab6e88297d8b2c8
SHA1caa668f1368dd9a2f7a574ebfb743eba5f1c4650
SHA2563f4164fbbe0b2b0eb8623d2ac72c3b0d17fdf7cf8448eae8bd63a8564057c072
SHA512c388523d938dc027c7dd58bee0fcccd0275527d94dfd538fec9cf243cd8a59859a680a1713286f8943a4bb177b169dba64ac8e34e16242be8a56ff9bd421fd24
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD566ce7f9a4c3c2805d1a1fc7048dedc64
SHA1576d11a92336427e1e0be5a4b0eec684d14e7f11
SHA25658dc0f06179ced701b3800a6b6d8be842f7de3fc4f75cc8109a434a2789973f3
SHA512d1fe232ccb11e0c32d51aee03414fc3784d73ad286e8df74f0025405d8e9242e972216f4aef3b317c0e61fff5f24d97ceb0ffeac29bd88470f10d68cde85d954
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c1e0d7f9ae1b97c66343322afc42b38b
SHA181495697565480cbdf66a2e6b9bc8100965052fc
SHA256a48aa4337fb6cb1702058076d0482aff2ef2d9ecc8b762b2e625871cb2108347
SHA512083274b6b043ec5b2c75cf697323a1bdc2999023ad4d892d72599e722fc7530b64af9eed0fdf178ac6cad1f7cdecdaec80a34c4f48b7b1ddd14207cb67426edb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53606a0abd788eee25b2ee6441df1a753
SHA188b5cd3198da9e5f90fc925cfaa24ef0c5faedb1
SHA256d7f98dd08b1a541c5b9cb8af71ab302430cd64e574f9aa88449221e9a855b41e
SHA51204b5d1b2a033c7a44b822f0a501abd4e714d419f0cbb9641038245a460bc176c912276db53e63a2f4efa8ff99412c78b756a619ddaf4c4f01a047af3f427c597
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59db1e41a6f0ae12ff548241f8628213a
SHA1eaced24c32f172cf6ec7cdbbbfc01228658d411e
SHA256b95fdd322064bc73ecbe029315ff4b0c03e1ea5fc0733a093b8db9bdd5ed1346
SHA512586535eb95d8fcd03cae6d5f0c351ab20e17c6f9da421c74a2cde2df041401a59ae8559632b0f6ce04ebf776cd0f3ee4b0a26289d8836ca807754a4684569548
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a