Analysis
-
max time kernel
117s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22/05/2024, 14:35
Static task
static1
Behavioral task
behavioral1
Sample
67983c2fb4932494795c0e4a1407f0bf_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
67983c2fb4932494795c0e4a1407f0bf_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
67983c2fb4932494795c0e4a1407f0bf_JaffaCakes118.html
-
Size
41KB
-
MD5
67983c2fb4932494795c0e4a1407f0bf
-
SHA1
bb137b12423eeb79c594d75dd107b750e454e6c6
-
SHA256
3f1dce4abf40306a56beb721eefbab7e25f070403ca72cb196e33456939bb3c9
-
SHA512
30a490f0caec6645eaae6f5dbedecdfef12ed86388e133a1a6ae596ab7737922c39b5a7bbccd29aee6ec3bddbbca90ab2004830dbac5f6cca0fb7de820193b31
-
SSDEEP
192:uwPPb5nymnQjxn5Q/enQieFNnQnQOkEntKAnQTbn5nQmSQxismosnXjKs7KDeevb:QQ/v7xgueiN2Her
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{9974D751-1848-11EF-BE4D-CE57F181EBEB} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bd2a7708e9798e4fa0b20f3efd8e936100000000020000000000106600000001000020000000166ff7b68c92da824e854447a2fd9943b4f710204f54f0587221020b98b885ac000000000e800000000200002000000014fff862d1325ff74638c1aba16b1c02a2f02f8a326285cca4e8918c01f0a0cb2000000072d00e4751d2f1f502125e5393243ff880e3eb568141a7cab0922abe46c51f364000000053e45d77d3ea95e5eead8ea9148934dc664210a4aa8862b12d6e280727ad4b60a808fc4a86c4eb7540808d872ad5dd59a94c1867ec5b9c2eecf262c18a31e78c iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30ac2c6e55acda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422550423" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2036 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2036 iexplore.exe 2036 iexplore.exe 2788 IEXPLORE.EXE 2788 IEXPLORE.EXE 2788 IEXPLORE.EXE 2788 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2036 wrote to memory of 2788 2036 iexplore.exe 28 PID 2036 wrote to memory of 2788 2036 iexplore.exe 28 PID 2036 wrote to memory of 2788 2036 iexplore.exe 28 PID 2036 wrote to memory of 2788 2036 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\67983c2fb4932494795c0e4a1407f0bf_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2036 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2036 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2788
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ef4db71feb794e583aa6b2ce41aee653
SHA1a285d74daaacdb1ec1c5ce1f889afd04628b0880
SHA2563a7b1af1e6f1159f946a825f6914cba6903a08fce2bd439a521fd84cb384787c
SHA5128803ba007571982add5944ee7c76ed8ebccff0706ec73280e5375629a4039997658c527d5614c74714b7d94648816975e538800d920efd392b28e9a20fd8e80a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f45a759d0bd352981dac44d828be01b2
SHA19feab4c83397ca716b29ac791fd8c60e912c957d
SHA256f3a0704f0d27f66962949cf600bd4d27f8aeed3c0d9d5481da33d1e49930ad38
SHA51204da359f77c2201081062fe86a0deba4f9f5edbd50254fd085b18f07afff437fb0341bce74e7d1017c97003f34456b6e615ee0f37a119b1e45bc8cb1f04213f4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD568b37279c349b023ac0ca63024eafe4e
SHA193feaf3c0c4b43b5ec6cf9c00d4c827307471cb1
SHA256f849f08c312d1fb53d5778c9d75c74d99701130667b22116a5be03a18a418a69
SHA5120fb3d28df540cb5277c1cf72f3704e3c4f57aea458dd71b1ed5178aaa6fdf73346a9739bac22e5ab05417eb6ea2118d611cc0cd85ae3987b161d21348a098a46
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50495c02f8ead0376f002139f4ad1e3b5
SHA1f51d7abe0a2227067cc7604b849cd9d52216e95e
SHA2561f96495a76b7dbf023d964c0c294da773641acb1e42da43bf364d08812528891
SHA5126fc4147e8ba8779803e8d1062039212d56dc3761824a63f77771cb9428b74467400c075e026807bfabc112f7968cc4113ce0b499a6cf8e02bc82a3557c43ae45
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56189b0cf952c27f3961db2be15bf84e9
SHA1c4de7534a957a238e3487aed1d60eb0bcb7b5d1c
SHA256c8b035c4fab12b2f5a4a09c71e0ece698d9861261e37709fd51350f0fe43f2a4
SHA5120976e60109ed0adb46d11c5087a5b61c3e851e96f69de887f00358802cef4f6947f1e39ce91d00ca288a733893551563e038c78b0bf0b9a04270ac64c9e3893b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54a859ccfc88c33c43e2ce1f288607feb
SHA1e48f835d638decb5ff99d973ab2991e12e23c079
SHA256c3a80863d7f3b0ea31cbfee5361959e81686c8f334d7ca02e880b056d9c0da9c
SHA5122c8f8334cbced6fa694956b8083d4eef08dec044db7c6a2128292494e27aa5febc0fff5f659c860448c1ed9838e249c0e2c0285faf6d01ee948fa60ddf277a4f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5093f84d55aa15289ce4f10f785fd7b25
SHA1307205dc1c323c6a6dad51617071496694b3a561
SHA2565d42c128c0e95798d40eaac0e30095fbc4aeaa02104dade193a0de2f73e527eb
SHA5121008f370633432bc51c2c932aabbdfd7ee928ba1e094f94aad974a79a312ff9829aa003047d2a47439a337760afd846a651cbee25a6c1646cd08d285b4b6b333
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59a88f8b991464b7919966a403dad59ac
SHA1ca091f8fb40632d93a717fb14404bd6f3a046b72
SHA2565f261d41959d80b25e3bf4c68e005f12b0c6898abb4ec59e899ccce233d21547
SHA51282ac990d1277e00345527a56f34b964b8d21539e4e884ab5a00b05943b9e0abbdd8fef84b58bad0e0eb3c56117a19ced1e9c87c12e91d477502324a43a5a8d04
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD572c68e484fd2271caa89cd4ee2fd8cc1
SHA12b7ce1494f4b8bc1def0b1dd4044586c0b6f094f
SHA256b331a1476f19c4b7aeda19f0f6eed214b205f21e5afa396306f83896c884b66d
SHA512228f06162005255ac7926551d979691576409ee2141f969b6ff20d6469bdd436ede3194294d5011f9986fba800a9ae408b065989a35bc6900634bdece78e8133
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55055d418a30264d6a102a1bb92ac5b43
SHA141aad4fd59cdb109bf258517eb2205024db4e1c9
SHA2566b74c4084bff434dcce0ef2f045bd238fc8fe1765cc28d39892581995a4f86d8
SHA5128ea148f8da51dbb085a8afce6cb508d7e6e1c36cda7fa8fb86943a97d96c949cc6c1b1ff53c22eeaa7b67f3e5d839a74cef9e3fc2691570efc9c3246cc8b800e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b22d02f73d6fb5b1c27eb74b6a3ac858
SHA196a6e119c01d6fe41cc2835ef73ac8d64e8e7f0a
SHA2560b23ed4f3116b21497632154e3df6da19a6fdacb10dc48c5d4febc6bfbb993bf
SHA512b75fedf4e343d92b74b8e8512920a40b09def4b88d1f5cb46549fa89de5a601b2ba08204e7e80809cdfc9437e1d4e0d9e8da8b6ba2504e7b1ee483ee60b6fdc3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d8c57be617b331c2f057c2695088b255
SHA1d87c0079a0493d69408101814c0fb9c13dd460ae
SHA256154b70ece0cf3372622433d442058a434c4afd5feddb7b4e733bfcb8d974e7ab
SHA512cdb6b879c923d6160381d221dbf0420bc9659a7927d5bd33c64ed4adc92e1dd12bd8fadb232f7be103f07d840ace6e6dfee10c6bf7499573501e43d0e9846b2d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56f61b740e819f45619cd9d5f5b058ceb
SHA1aa8f33814ffc16ea48823554c8ffaed85da8ec7a
SHA256dc30f7875496114f32d755338f8c841c505ffc1b39ac759b56164ef1bd699a8b
SHA5127a70b85f36e182b97afe9e7a9fc4427549f809d6acbd59e4106ce17e0c5a6cd38f3e1d05cecfdab289f36d057cf668a53478bae367db6662863d02ab380d8d00
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD520cb4e6f2e8fb753716334bc73d9d640
SHA1b7fbc17ac1e3145e9fd2a6c2999b31228dd08827
SHA256056adc9967b2ffd3f3e2344c8ec4b441ef34de1fb27a54d3f9ea759fa13f9d66
SHA5127c9fea76d92e7939238ea9c4decfec396d0377575b321e8e0225a66c5eec3aa5f75768d7c08cbc4195e3297d949135099edbb7f876bac9c054566e1654b46d5f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e5c9774bd585fe7f06e8eb6edb990ede
SHA18222fd7413312355ac1784c36ec16207850a7d4c
SHA256d9d3de569cdc78de1ffd7bfe96b6965fb33cabec1b7e9de641fe8d983e36522e
SHA51242c38470913ab5cce0613137f08bb6f8a3979a6902231e464bf1fd80809c1b3a5c0d44a6bed52fdb20d1f8e82888f57480c13a7dcad518a56ae70d052be2fe18
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e266b93dfb50d9a2d821ab0339a59189
SHA1437b349c042bffa1f5b39a36cfb13c82608ec8c4
SHA256a7d20e3a492bbb5bba2a493d01704965e73f768f14451580a120d2308f7859f3
SHA5126454110b4c3354770431a24dfb46cd2701d6d339182beacf567f1c3456bd129407cfcf155ce71a9bbe94d5b018f2bcd983cfb6c942cdf434259c6a05a035b713
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56f05bfccc55d9a09eb72c681ad286f47
SHA12931987360c998e9d25cc3239393606caf92b0c6
SHA256172eb8950fa694fee1f67ecacdec4962103b1b93cedccd728f6ec2fdc1978c0f
SHA5124f41e74a26ad057576bda58498f2fd7206f52e64dcc6c00e3c5bfe20657c0d0e4947790599bf02d1147cd1bf8528267fc7f536fafccaf8fd49919004ba2461b9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52c9f395244d37324289c7a176f41c361
SHA12bcbadf76b90421b6d9c8369ef969ec135f2200b
SHA256a7d1e68c9c46dfeab71a470114e9becd63b0276bcaf4ef1b0704931c8098c90c
SHA512f6374192b1118823044236755dacf52e6afe1fc726db9c6243817b75b4eff0b8d5ab180e2eac33d4b5562d9078b89c4e8da4c3d82b3b0c0073e2e6c3973cd6b2
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a