Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
25/05/2024, 01:11
Static task
static1
Behavioral task
behavioral1
Sample
70642345f7b2bebd6064ae92b237225c_JaffaCakes118.html
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
70642345f7b2bebd6064ae92b237225c_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
70642345f7b2bebd6064ae92b237225c_JaffaCakes118.html
-
Size
116KB
-
MD5
70642345f7b2bebd6064ae92b237225c
-
SHA1
2d1d9f15df50243bd4c52fbbf86ae5a79c355448
-
SHA256
35270dfa28165464acce5c94934bb1f422f4f9674eb49881fd22ed9024c5ed86
-
SHA512
8b0f56ce088d350314063d1ea64a2aa8d02cbb6fe063bd6c1801f1eb29fbf5632305a77955e37e71585a00644b17022047e567e09794b43570abbd5051ceda68
-
SSDEEP
1536:SLXyyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCW:SLXyyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422761333" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 20ad397e40aeda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A99E4981-1A33-11EF-B5B3-EE05037B2B23} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d10000000002000000000010660000000100002000000097b45f492e1921a95d9b09f3a82705ae0f3ccc9ff075f4eb34e742b137c485a2000000000e800000000200002000000023c66ea56601cef422481c86dd88f2eed3348065f5c9119bbd51d4a8ef843b3d20000000389aefc823bf533687e7820b150eeb4ce85cff1545eab4025547dc5c207cd8af40000000313d83c7ea5bf43a673208515b38ab36eff6e27434f7d6bfe99c43057a6d25b79d83f5bd684d11a11c85a636784482d6dacc8d62f1c483a93e67fd45947d011b iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2128 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2128 iexplore.exe 2128 iexplore.exe 2808 IEXPLORE.EXE 2808 IEXPLORE.EXE 2808 IEXPLORE.EXE 2808 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2128 wrote to memory of 2808 2128 iexplore.exe 28 PID 2128 wrote to memory of 2808 2128 iexplore.exe 28 PID 2128 wrote to memory of 2808 2128 iexplore.exe 28 PID 2128 wrote to memory of 2808 2128 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\70642345f7b2bebd6064ae92b237225c_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2128 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2128 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2808
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e87eb310b2a57e9857ca5471c8a7f523
SHA19c1f897c013ee20210ecae02a02f3c66bb1609a0
SHA2564adbf16abdfd132a72ed8dbb7900fbb71ec2a0f53d6e4f09c104c054bddb47e2
SHA512ec14a594f31883ead7394762e6b03b43039bc6754cf5109ed4497691047b55d8526db5e44ab9beac2bc8ef77519675144e63461cf1ee7540fe2cbb8972ed8b58
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD514bf96e379790d63b7f0b93599c8986d
SHA1aea27a6b8b4f28494cf24cc416f3109671595cb9
SHA25679a9089fad4d72f9412d7f61d72cf524b3ecdef094f1c0ecd4fe3c5d5b230b94
SHA5121849268e57e4c27f68f27f88ac6a85389d07fd0840d380188173e4428109f026b2d5d739f62256e93b9f060f4c3f9ae1181e8bf7144e89669bc5d842edccf6cf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD574c73ba5dfdf8ab826d614d55cdac275
SHA1944269a9133df26bbe99088d5045c7ce0f6596b6
SHA256ecaa77bbe94c290d1eb577fce2b57e706e96d0a4a36b6491e4c02afdb7adf2c7
SHA5120e00b9ef0514aa7332e0070a816066a15abc3ce6a3b15d4d98530850cc98d96ed96cf6fa0896958310c387eaf9a69116d36b8692e0610ded774835b96dfcf4c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5406f8706d958487aac27cf51d1823caf
SHA19e964cdf444bd2fb61fc9daf1542412a5b6bccf7
SHA25612264ae2d61e6955a85d638a4837b69222b3adee348cced79f35aff6b1380563
SHA51269211594034591b604b6bf43658eb8777dc9eff531d3aaaccbfcd45e8d31a07ccd91f815560503fdcac138dc9ce3ba67c8cea48abbdebff61848f9e45751b7a9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD536f7aa1a4ce60da3b4fa60292ad259f3
SHA19e77d3352116b09851e34f68dd75a202f3822197
SHA256dc9d2f85a3d1fb7c58073764e60f8e9a2a7ff8b12174faef8933ec39c8001ca0
SHA512bf9b47c9bba918374fe7baf7df031d968f9e8d93ff95a5ab4aaa7d5fb95aafdf52100c1731d4193ad8b9bd381910aba3c64673423083de6d77753029bd66ddc8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD577fc30b38f2303ee005951803545c10a
SHA1c92e435c3759de3a44a0c73d5b95eca99ae20339
SHA256a48faf2e0bb32a58987bdb4888e5d5f45356f8844010b2bf79d9dfd3d7d06af8
SHA512c11c4b759446c433b41c0c8f97bd1b1c9117299b3171365e183099ee3e758a79d3d72c15687bfe42fe1565daa2fdefcb7691dd57052ffdd52d63c61a1a0503c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fefd294d772d9ca4acf80544d9cfd8f8
SHA143d5742e871a51823397b5992e59ea0fc0c0292b
SHA256d844047197f35402c75ab6734018c730e11d59cbd618115f4799d4be5202b8e6
SHA51245dcbc07b8c9d9a04e337469fb8cd07bb8f954b23bb8b25b03b364f05a1fc32b162bd35251bb3a9c26c547987e6632a3e98a021822a1c1fd88f2d550364f4773
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bd8f6b84243f152ce1f19e46d2e8b7e4
SHA186ba4d189b8e2dca6f596b99dd1e01c0fb9c216d
SHA2565242062d7da372e17e80d38105cd4dad35d7a88406bf1c8e26d799043aaf5786
SHA512ffc0d9981ba6f144a75f4d359f36b7f0ab2c60fa9bbaa222f67968de567f4567226336b8a4b3ee065b22459e609491cd8c62c9842f62b9b0de72587ec5feb479
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a5fb8d071005eb0b4fa9da0c58bfb875
SHA14bc6bc85d2549e4b0cb7ce582d2feb958b6382b0
SHA256ef2051505d7973f8c4c031a6163486c0eb3e7cde497fc28eb0a1fc61f19625d1
SHA51299c0d1a5e798337e7ba06bc08dbabc0b114197b8e78c4e76a28d1d5eb11dc9edfed08a1607328ba320f135f45e18243840558301cd3bbbb6fc193be0b838c217
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54c138dd8ddd58c1b65b4d3f5b7b32cb9
SHA113221ec5ceefa4e4cfb8677a034fd59a3028d334
SHA256837a340d8a96e10c346eabeac5b3661a1ce4f3439592effd7443e086441fe528
SHA5127052dbe87bedabe86a664936d55d32afa7c9623ad7b46deae2b7c07b50420370c15e0ad74d2705b4e6154f17ed4a21daff0aa65aabfa2a4fed12d5fd3e0947e4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55d1a77ef2e0fddb0b45ffaaeabd2cdde
SHA1c15ac2250ff98811022ff6645f7c7dd7d60f3abc
SHA2569d32ad12c7bd2a1c9e7925902695657fd75eea7f2019fbf5e31035e57244b9a4
SHA51221ece4870a1695f20bcac49fabaadd3b75ed4f5b36feb538bd71e74e5dc62ed80946c581ec002d5aff1b5d103af349f74be666b5086cd8fa72ae5b37e3a0c2ca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59d78c9c2502818ccc1e51b0e7921f5f0
SHA145c3deba28c5ab74a6ef6077ca67915fe47dc226
SHA2567f584f276c89f9a2c091e88e10e720c2bac869fcd8b6c3c78f7e2257df394989
SHA512a018c163c0f626912707ca0f6f7eef287c46b015907109248d5e771ace2942e9da34bfb50458157adb7c8d09cd0e8ef00a71e8c3766c4ce9896875027500dcaa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f4af010f7257a41cea6014e1854692f1
SHA1ce74d91399e9350fc20f35467d1303c95ffadb3f
SHA256d5a32165920585775bcce5b0859a053fea185c49b63a36ed1d27666c90e89de5
SHA51279f4ba956bd998564942a412dc00c9a63458ec7be2b070818481e52cc0021ff14608254709274d8b7d6d71bc01be5bd3d0239fcaf3cb3a76df571cb04072c878
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aea281b9a23bbde111f55ff7dccf788f
SHA17557bd4f8f7be9891ddf41f8ef6357d7c4ac5e98
SHA25651700b3f358f5abb3f712226b3a030c482f7b151da7e48ea24aee9342c281124
SHA51221d89ec33fa5895f2c6cf5be5f4718ac88f51b0f6c0e5d126de7d7282636f193f1bfac9a574e2fa3b08c4023c8144ecae498d7852f1bac4c48a10fc7ee1aa725
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD542f51a0e483f156fd986a8a76cf4766c
SHA1a3fcbe4ee854fb9ba8c48486c5d8c1ef19e1b345
SHA25608504e350f372fd797848912fb911d127b85c6f19fba4acb95043177d31fdc7a
SHA51249e1e1a04953a92df12e4de783ce5faf2b0d9c49cc7cc58c5ad0ac7f0d331bc7ea37de6064e330d6e30dccc49a168099e39f150b321a409ff97c0658036e4bb7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c22756dee22405acc3071e8c85072b39
SHA181502dfee378f6e639270c9ed018b46f87207d1c
SHA256a5cef5811ec7b0822e13bc5e7be317d3fd572411e063f49d9a2a6cfca6412737
SHA5125eca2618d710c3e2af2b18bdbe9216361b39d7671696560c8df4c30ca70d6e5a3228d1ce865431b56d005269a4680378f98eb47ce8f586fada0634c714502988
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d5946bacfdb8c469bb6296ac1be9269d
SHA17862a5f0810b312baacaad0beb265f7e1dca10fc
SHA2569b938f799f6301a214d6af7b37741a4bc856aa128d0c4df56310a4256734684b
SHA51285c9215754348ccd0f5ddc3fd621d2653f6e228bf6ffaaa471be722cd0513d52ec8042e2c0c2049b1e24e60d59a01311149892583c60b7e3f11f8030e02762f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e14bfafdf343e059bc7a44c6f9375096
SHA193f9c24e45163d56832061cdb73e010ef6b82f03
SHA2564675264c094857102619761f5f3e8591fa51f88b742ed28012916d1a4ce9845e
SHA5120eb8951b9a4a1453da907251bd5ceeb4ec0ffd651b4ae84a6a363fb36f4817a5b79e9d30e6ae181215221aba03325ffb9f8894822a45fbb13f7af961ae592ec6
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a