Analysis
-
max time kernel
133s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
25/05/2024, 11:20
Static task
static1
Behavioral task
behavioral1
Sample
71c7958310a01b507486aa4a6434b674_JaffaCakes118.html
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
71c7958310a01b507486aa4a6434b674_JaffaCakes118.html
Resource
win10v2004-20240226-en
General
-
Target
71c7958310a01b507486aa4a6434b674_JaffaCakes118.html
-
Size
119KB
-
MD5
71c7958310a01b507486aa4a6434b674
-
SHA1
543b22eb08dd609a543bbe6a36985ac204bbc704
-
SHA256
b3855372680cd3eae95a3fac4ffe939366d9c48f6ebe7af744e0e82082c01098
-
SHA512
5d305c257f2803ec99fe8bc4f744c2316e1987b98821047113415cf8b0ce829697532dba6f4f778740fb2025ca5e45298265e491b23295d669d5849e944aec90
-
SSDEEP
1536:SYj2lyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:SY6lyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d100000000020000000000106600000001000020000000e42393703b2ae3ef40576b4d6da3758cf5d32c3e62f5bc7363261b13b8f29854000000000e800000000200002000000078b0417c6108136c447d48d27bb6df77f702bb3fe9449aa754a25dfdabb4441e20000000931696f3bb8eac13d19768921163d129db1e2e8082e53e52b4910e798dcd51f94000000023789a73d87f06fd1dfba107cb437769bd6a068fdc12b2815c7ee02675324b0aa363eb4d25d18aff106f767889439ead1a0a8c3811b05803c99c1fd35d0781b3 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422797881" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{C15CFD51-1A88-11EF-9F9F-D600F8F2BB08} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a024209695aeda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2424 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2424 iexplore.exe 2424 iexplore.exe 3056 IEXPLORE.EXE 3056 IEXPLORE.EXE 3056 IEXPLORE.EXE 3056 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2424 wrote to memory of 3056 2424 iexplore.exe 28 PID 2424 wrote to memory of 3056 2424 iexplore.exe 28 PID 2424 wrote to memory of 3056 2424 iexplore.exe 28 PID 2424 wrote to memory of 3056 2424 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\71c7958310a01b507486aa4a6434b674_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2424 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2424 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3056
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ee1e2dabef68eca1fd86249267ddf552
SHA112c90fbd7661249e4cd14a1409557292fbdbfb3c
SHA256e204d635eac1a9ac8715c108f4a2e7c270771443fa9cf054c99d8a90ca12fa46
SHA512b372415ef3d197b74b37c6b61a2b3ec0297089ec3b2160a226308e5504f17ff73e43059b3bf3914ac3977844b817132eb4afec6766871851612b3ffab48f832a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5916253bf88294c83148f95d9ec76e07f
SHA1296f59034641953eb9e9d4d4a83c15981b09e0b5
SHA256018ee39b44221dcd7253e2e07f1dacbdf28c8351d4e90e4e7aad501c4660a11b
SHA512417035993dda419b76b1ca7b4a2aee8b153b075ffc6b383762c26b72fad4e037b41cde1b5b074201c937ce2a0433a750079055d2b4b52ea67976eb391c4c1d3d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c20f907c35c6e8a2c42e7b2ca9efeed2
SHA148df1f961e7fdd7c5d6bc291029b29c5fb0c53cc
SHA256129bf842d460600d4e471ac6b8e138813e2593ce7c8196a4f910ded3dd95a1c7
SHA512b8f2ab04fab9e67fda6100164dbed124cfbdaa6e2bfa3ecf234babfa3a57fcc6da62ed12370857a18b6b0449500b05146ea5a2eeeb0d9e963f778caf25686237
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5174986e081b316d773358b02d6b8a05b
SHA15cda225bd126b112d9a307e5de91be592bbf6daf
SHA256d69005cc00cc727418713fa1f609df58436bcdd38022cc8cdbe223fb554224a4
SHA512b11dc4d98b56ea59921acdb20199ffeebf3c7621f389468fc1b921bb4fc4ebf2168e0e2ecd1da9ff31036759ce6feb5434d28fbb71835764208214cbe3df1a26
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5173e686e4365158bdb1f09bc8fad636b
SHA1bbd564651887f91239d6235670df214f43b814e0
SHA256cc33c15b7b6b46c5a8c691435b8fea5427b73e61fc139a7614c53aec5fa17762
SHA51205b61fbfa23e5eccc4bb36ea4064c9d0da04991b23af583dda4c4d2c57622ad0e519d05c5079f98b4aad51c587ed896a711d10edaa54d7ecf7924ea8b7ab23ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59205e4279f1366f462b896c34f65f6ad
SHA1dff7eafdb92038d28b3b6b5ac4c2b68bd8b0b2ae
SHA25604a5cdb778555b008b694342ee49ab9f77e688134227aca8d38777b1b0239cf4
SHA512f35d0c094cbb070b169545e0f21a45eb68c0c91b122101c15e247cd35c472b5f3c075c9bc5ab5d1656e5eab8bd39b13a33beca8912bc3a8f361986d311ae1b76
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ff2ac2ac25ab23a4619e304db0c8d646
SHA176feb637c16c5bc66f7aee71c86708c4ca233acd
SHA256c3ad18c889731258f2165c5a867fc7783916187a5b05bcb49406997521790bb9
SHA512f346c67b26abd25a4f35f92aa29d80008201fd29b9396b88c375b0f061c67b8f52e94bb515d59594a659bc7491f721ab9b87344a4b26aaba332d70c793adad80
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5555cd909c448680f8b0a72440ce34c0f
SHA1b94277e25c095c19fcdc68c2fcbe262e19e2b6e4
SHA256012e6dc9b9d48a3d606c19f6e4a17ece11b877ecc4a2874b9fc8e50783e8f9ad
SHA512c00bb52147efdccc13518598f9d3afcf2969d274bc32b18d1f7d705ecef94b8d5500a4ba9ad7cb9028053ff28d5df17033f746baa4341f10495baae110b5c2cc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e1b785198579d642f43e1bbf78ac9f66
SHA18ea8be57fb497015009dad58bd0bf081bd4cbf64
SHA256599f6d370572128d006124ff5dd124b29688df9513f1199d79f75d49f5850c21
SHA512da7472a94ac3f6e551d7ce9127c4218961c95df872684a596fe47df886ae9098feab11e65d022b9bea23d973d1abd608424118494c4349fcf42c10dbd837e2b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD525012fd6b0e739b8054ea18aad08872f
SHA11fb911316097cbc5ed06ab359723eb2bb95ceb17
SHA256be5744646da0c5852cb76d00a4e77ffd0c45762b4c02938cdfe89118fbff53b5
SHA512de2c34d5d0bc638f90d3bb17b66b4939c8bbe99857778e8ffbfae5688e8c6fe42e22ed4b8ec9613a15465c80b13385cc29f59d840495ddad3f460bdf8197f76e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dd43b20dc30a757815e8393c6390e6ec
SHA100f6d52cec0b73ca820aafb38e78b42a59d83520
SHA25602c419e3c3bdc7ace08aaa8cfff47b2b9b31da8cc55acdc928034dbf7187092a
SHA5122886836d3e11955e1cb688c805b4c07329abc0ebbbc7f1fff02a870baefc13fc57618f6bfb140d6f6679b1dad933a4f3e5a08756bc0a1c3e40e8f8f632573eac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b922d3ebc435afacf33ec260b7daa38e
SHA14ed35c073d48e551a74f96d03f20d7e521d93455
SHA25611e76c1bb99fc7e628e056760a98dd7443619f01dcd3810e234ea1127c0c12cf
SHA512142237ee42c9efa1a3e555212aea6c029ed5cf69d1ac10a95be6d2b621f3aa2bc057a0d0f3868da8c5ec77951264ac28e2fbde07ee044325b8266aeda0ea0bab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e132e7e9ad91f94c6f6d9283d94ab1fe
SHA1905e5aa39b2427687786dcde59f0e319d81edfeb
SHA25685663282743deef4ef61d8e38c062ea11ee54aa571a1b4268557f90deca692fc
SHA512f4930734e53fac422f9e6c0a309a2ccd082973c332672ec1e2fa60a12ba8ed93c27d87fc3536a80cb9c293dc161370d450011789963044477ac1482b73644ef2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fe444e8e4c2e97b87ffafda884c1df8b
SHA12edfc996076b54ea3ccf7243093242d2bef15163
SHA2561c2c891548752dc86fcbe6c37fe9d5300a91ed2871539924b1319317bd8387d0
SHA512abc7f91c778145f6ca872626b974bcb0877edef59e59a6ff10d57cdb118c4adbbe67183022bcb51ea61c886d53c11cb14c92cfe474847e6720634864bda314f7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD539a52f2496513c4d777e5d494a6c2188
SHA1bcc672ebb77d2dc9db4840a99f5ace7377348ae1
SHA2564d0045d367b079f6fc89fe27db1fa82d2ca65e7e0f16fb7fa4e5968f8b43070f
SHA5129e10ac1034ca537c6f6cf88eb1a63d0a1cce80169b785b8009832f9f10d44114ebfdf29702f393dfcbcdf7a6046bac7d4d5f796b6b977a8c2fa47d5e8be93a59
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f7a14b8d0e5914736a17dfc38eb79130
SHA129b500afe8f33eedf84404daa9424b8fdc0835f5
SHA256dde907c843bf97607965f185ba3b4ff6f1adcf458b159d16ff6c1c1642a2c68d
SHA5120680b75ec103acd50c5b8c4e0f7d412f2271c67d66c3b409e1ceee605cda69513f43f59d0483d059ea2897e5394c5cbd5f9e4c76d3f35e25e10d4acfc29a9dfa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56ff9619c37ff49cb5812e31b51f24015
SHA1ad644eb7844aee37c6a27f6b12546528c2bc2bcc
SHA2568254be752c3f9d2fc1bf07a1e449f69c7378e95c54dc1b09b1229fcee3609240
SHA51284b7aeafa768c8f2479a7a653d0ce768b9d82ff190448bf1e89613e9764b3c86e1ae106586a4d21ac17942ce61ddd555b4bdabbb9c7d8725bf428f3c52a3894f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f0ed1011d7d7130bec3f23a3c10be7a3
SHA1d031190bcf2a2e4a8925db280bfee42459395f52
SHA256d9b15089dd4c02f16b2ce0ed0fc52d9e5507a2f2f72e4ac17b70ec5d1a87bf47
SHA512ae089bec72f9578e950af07afe1b321aa33faa086818844178f10832f66c0c02f8275cbeb1926df820df29383708c3e484c0718afc57ade30b9ceafd775b323a
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a