Analysis
-
max time kernel
139s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-05-2024 21:28
Static task
static1
Behavioral task
behavioral1
Sample
76d5b9736bc6438e5a40d890a297bcb7_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
76d5b9736bc6438e5a40d890a297bcb7_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
76d5b9736bc6438e5a40d890a297bcb7_JaffaCakes118.html
-
Size
11KB
-
MD5
76d5b9736bc6438e5a40d890a297bcb7
-
SHA1
044315553c2987cc2dc9083781b523e9ba968d44
-
SHA256
1611aa26896ef8bf597a1f7363e08ebd1efef74e2b28e9a40f79a76313aef482
-
SHA512
35722265b0e2eae9955f47bdddf44106fe9298644c2900183ec8bd31f55a428c4760a36c7e72300809756532d03899025bd2d717c3fc71b6c89673a7d653fed3
-
SSDEEP
192:un2RyE6a6bd+JL/jxuYphGWGKZaPBGKxIZmaBG9bmpB+aBGl+nenHGbDGkMoPDQP:/z8miLtP
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 508669bcb3afda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422920782" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000c38fb70f72031e4f90b3c672ece2d5d0000000000200000000001066000000010000200000003d64df3330b25b8392da139e729bc3453805191304d0349bfbad9ea573f753af000000000e80000000020000200000001fa69985a72854264a49ccd16a157ffbc85233fb863cdbb8851187fd94d2f63420000000e4b1c65c49dc728d0291039572eecf2f007750af94274f24a03513c3ac8a156c400000004d5c855357c83af211d02495ec87e3599ab39e8367f73b7be4bd918de38155c2851f128578a587d7bf1ffaf203ee2a4c626df71a8c4f48e61e73d8d412b044a8 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E75911F1-1BA6-11EF-AFF6-E61A8C993A67} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2240 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2240 iexplore.exe 2240 iexplore.exe 1536 IEXPLORE.EXE 1536 IEXPLORE.EXE 1536 IEXPLORE.EXE 1536 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2240 wrote to memory of 1536 2240 iexplore.exe 28 PID 2240 wrote to memory of 1536 2240 iexplore.exe 28 PID 2240 wrote to memory of 1536 2240 iexplore.exe 28 PID 2240 wrote to memory of 1536 2240 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\76d5b9736bc6438e5a40d890a297bcb7_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2240 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1536
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53987175726558e826f24e4e27237c4bf
SHA17653456c582cdd5389d2ac945fd9d4081f1260c1
SHA25673359fc5332c39607e438c081520a1c1c32047eaa326d39e9ea22abd2b0f54db
SHA512aa058064488d56b06d21c0c7df6f3ce5e918ffa7722a3b679beaf03944b525304306888215a0e91cee16d5455610d40d0cfd0da77b6a3cf8c0b93ec1ecbd9cf6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bb5e15d66c38ef42feaedbe4edcd9e67
SHA1735e9a6d2a6e889f944dc19cd43d3eaf4253884f
SHA25669e68fa75f301eccb624d7d123b2797e1fbc0aa87af7e51d2f88814f24cd941d
SHA512cfeefbbef4306f71199e5adbe55a6d6e4b42cae6139c2faf2753cddbc1697a0799098279e4db7fddc53f308d93114e152d2ee6a6c29a61668518acbed92a6e77
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59b3641841221281e19cbea039bb62725
SHA1abc67b554c78f4929fca8e0229b7b79d7e340e04
SHA2563b8afb6000aabe9d11db2490e9a36e00fee9539972473b2407293219c890c8ce
SHA51220fa96c55785ea843aff400e2a15bf13d1445a7c42039d46435079a601569e7370012a3e56cb691cc351b4c19d7840fd7e261ffd9bf2329a6758e012032287b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e964587dc606b69341d97be576fdd78f
SHA1fe206b70afc317bd7dc284bafff44b0ed4905ca7
SHA256029959cc7981d605aad8325ce60ad1fcfed8c437802f9b301c0aa50424b71b62
SHA512f4de4eb5ee7ad1775ce65e85cfbe0d426f13b47d15d9caaf7f606befd5b955bfb2353ac7e7e24343ae77a7a8d61cbd89808bb7a5014041900bb7e82f0a98851b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD552699b806116cd873ad1222423be8f5a
SHA1d32975dac33cf1f7d5e64bf00ef2b3b3e24f7f69
SHA25644a85355e669d028102aa1cf42f68baea044f2abf2f11e66e545a1bb9d982e7c
SHA512b38e944c86833f4fba47d4226231d4f0aabb76c29120f954bcc0f4f4143a3871449ca7ce5daca31a872ae798f0013ce359924487a6af9c573e5849b4a48cb2da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5754b5ab742092eedea55c7f86a67ade5
SHA144e7f38080c6172ba474c959c3eecc7e281fa65b
SHA256420363b0fbbedfc889a9e7405cf7f9ff89628ed8df9e6d19a53239472ff7d09f
SHA512dace61a56f117ab9dec0840fe5c785d482824a21431ca12048984c9dee2e652ab064ff2286b12721ca40e1fb6a55d9e45ef85bf08c0e48220e1b270ef720e1e8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5112907116aee5c3fcfc0f7a8f7b2de65
SHA1b330905df519855834c56f8aba02a69d3493ddea
SHA25607f7aed064f0343d403a2cd79e7d600d961ad17d25f07909de9fecb55c4fc7a5
SHA5127abb7c90cf3dc6dd109c6afdd229f2dc31e049a010890cf821b5d0c454c259b1683c80a3b51d1c98ca1f02d941175745b1615bc19d31137cbcc6e499a599997e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5783e184bf1454d86d9278ac0d125e7b8
SHA1da7631e9def0da4522c993666d2a2db39bd11aff
SHA2561b8eefcb89b6f705c40e2127ef7939cae2e8cf338979ab6b4e1dcc987b6fbbbc
SHA51287cc1a9f7264e8911005c4101d2fc323c1984e1311efea217401ada1fc830a9f7446022fae94dc04578f3cd46665bf56b11ae089523a1a4301816eff211186ff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD567e2d02b580818c9c6b343dcd5e8c9e6
SHA150659d3085b85b47a633ebc796c7c949925e67ce
SHA256d419814dc76dcae986a27042070c4ae53a61a58cb946160027c16329eab0f2a4
SHA512658e1cfa2e9718808c8afb5b53513a8b50e9045a0f6cab86dfef4aaaaa7ed9e7b17fd00cc8ad54f1ae9723f535955c1a29b119bc0b2e1eae3d537a1e841e48ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cd058015c879d413bc7dd0d0604c7818
SHA1b852eacdfc7a54e869b0ff4909ed2f818639b439
SHA256d067a9b1582d7ee3b19361ed96bbadcee0b259d5cb7fbe2d0e52a898d3ae0b9d
SHA512f404c04f1c25c6add3a209f588c4ea99b48f1915853fdb66e0b8560cacf619d06a49ade9bbec579ffa59499245017d8d8a00d5c4181626a58c86e9251b28ba91
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51a821d5dc7438774da86b0d28d271335
SHA174eb80b99055da97ff62d142fcf3f0a8bb3742ef
SHA25651fcac16502826d9cdbdc246d5564cd475b898415333df9886deb953c3891bae
SHA512e666f64098fa6696efdbf4cc5c34bafc1c7272404a626a059ad75f8a04bb5ec0b2f0776bf258198b953df54893ddd5b9f9b7a63ed64ec88d09cb225a4572661e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a9667182ae748c9de2710ef350367d81
SHA16cca006d098e81b2806dad9ed427714a1887ea31
SHA25671faa825c2af05f2a01dc929134c0b6a2dde15ad7f5b105ed6e7c17c55fe8ae7
SHA5124a5d7f538573c510e5e83ed0f35ba8e6428c46d33f8edc6e9e051d8942635e4514fad3ba8d89162eb82ef30c4ee8ce0b26c77460e32411e1d7bf7e93eb767a31
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52e0382dde020cab1e545fd4f7ed417ab
SHA18739dfb01b6c79e1bcaaac99d4d460a56de42e97
SHA256964e995a996d530d47d3e03f1352660c26521b004b2e30ec38089f0abc0a300c
SHA512cded912e5029b0a360c0db55cd5e4742a34fd013e44ec5370a3c89b9e3be46032a9d2debe718ca26ce309a560c1c871a23f361cba9fcd9cc27cd6fa89ab3a17b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52d1a25b0af257a2c0b4437c4bcb1d363
SHA170edbb301f5d67cf6511ac9d761c69d15785060e
SHA256a61ea61a21ea41f8626e528eadc90af91b38a99d08dc0c19a392f3b0763737b7
SHA512e85bdc1ab83661db3bf98622ca619797d7a8499bd8e6d949a9204475353bfcd19b60c413cee8cbe82c91e30b1588cf0b04a7738c38b5704e03e0b7a63c5ba6d5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD502240a5c360c322e6529c0d9d20119a2
SHA12afd9738a897d6dee5e24f3de643ad77916d954f
SHA25629ad3bc1f540ada7edebd4d850a277b22695af4cf7690a605e3d817d3d433977
SHA51263330b93e8e90f9b5b91fe46bf2acdc5969238b2286ddb820ced9724e35b44dee1e6ae8731012caf76cc8a96a09092b3e5b3dea64b1d3d0ec8b32b2b5794e1e4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD565ac664668605cd2006fd636e932a0db
SHA1123466632afdd87d7fa8a71f013c12842403ea71
SHA2568f721c8a757da9a4a8a1e718f91b8a37da5627e74b54fa4820d4b8ce98ab19e0
SHA512f0d2a57e1db1cdada39902fd57efafbc41315afc574d5414693d3124428c76dad4dc7c5aef10f70d26f8f592f10e8f35877e80946ac4f4c52b78dfcd7c4ffa10
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD573a70e2c26bc8dc74c6ee9f394dd08e5
SHA14e7b8783e03b08a9a874545aef8b79e13a9e4497
SHA256a25d12287e79a0ebc7a0bd8809af19ab8fe26a104bccbef79dee8397315a0ae3
SHA51277ed3ab29a880e938c9d85c2b5e892b1899e05cede1a51796172c84ae617fd1e971ae4480eb26a79d295b970a97977a84cdf0d6fc056111f6bd20848a92c6fbf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50d59f9385235b557a24333177d911d53
SHA1bc36826cadd521e8d95226c553b1ed53e110435e
SHA256b5cca5df4adb72e96035ee06ab884d2f09d8235e7a8f3f4a1518de90f67432b7
SHA51248f795bda21e474826c251446b5631105ab1919d3e7c25d7a1247f20b91521e5b37638ff749bc0afecf00b88dd5efb07f11d53ba9e05568183793a5a7b9cc8be
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD573e17f0f2aa7262db1b7aed27defcee8
SHA1b2c5ad6a84671462a65baac7e6d3820046fc05e3
SHA2563fb0760a9d99f66e66732625dd082b13c04714fd37620d9399699bdfca70fd9b
SHA512b2c5f82162fa7da22e631596ea513831d452839ac170a1caf1719d9027a89e1e595a518320c88d37104c59bcd318f92a3373f4760698a303bd83c285f2fcdad4
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a