Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 00:58
Static task
static1
Behavioral task
behavioral1
Sample
73d59e96ab4e8250858a70e94daff717_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
73d59e96ab4e8250858a70e94daff717_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
73d59e96ab4e8250858a70e94daff717_JaffaCakes118.html
-
Size
249KB
-
MD5
73d59e96ab4e8250858a70e94daff717
-
SHA1
d99e8dceb6bfad3ef2ec9faccde98eb779b438b3
-
SHA256
652a5131badfa63edf91ff1b9417503d6edf79b1c1092d1aed0506fb6e3f4e95
-
SHA512
be5193592ba3c1589c0c055dcf6f4dc302b94d9889ac2a1205c803537b930cfe21fd112c18857ddd589b7caae9e38ed6424d43ea0649e24c976463a94175a909
-
SSDEEP
3072:SVyfkMY+BES09JXAnyrZalI+YhyfkMY+BES09JXAnyrZalI+YwsW:SAsMYod+X3oI+YksMYod+X3oI+YwsW
Malware Config
Signatures
-
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422847001" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000155f6d461821d6378e53773ed9af9fae45a93f5b60373742246990ce4948be6c000000000e80000000020000200000000beefded0311e49169eeddb624374fb29c39dbe92389ba2bdf023942ca260a0a20000000c6a9dbfa62d379ff1dfa10ada9e9b6ca0e710ab50c67a0c51e11bde853276844400000002f5d1ff5f5fdfd191db6e0abe4d6b941021f106f0db3b31351ac1e4eb8cb2ebd98120e0d28e752c35fc8ce6ed7c9e0978e06798afacc6715af76a981168666bc iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a07259f607afda01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{1FBE7E11-1AFB-11EF-805B-F637117826CF} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1232 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1232 iexplore.exe 1232 iexplore.exe 2356 IEXPLORE.EXE 2356 IEXPLORE.EXE 2356 IEXPLORE.EXE 2356 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1232 wrote to memory of 2356 1232 iexplore.exe 28 PID 1232 wrote to memory of 2356 1232 iexplore.exe 28 PID 1232 wrote to memory of 2356 1232 iexplore.exe 28 PID 1232 wrote to memory of 2356 1232 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\73d59e96ab4e8250858a70e94daff717_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1232 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1232 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2356
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
471B
MD564169d6d5eb5867d1385f492acba126c
SHA1c4d1db07d3314d7c6ae1904e664d25d7e97df8f9
SHA256c74ffde595b881b3c36070e2eb64dad28ed37ed50138c745a4182bf8c3bbef39
SHA512f7855f1974de1cb8afdc49cdab8aff4bc5f118cf3c11867fc69e402dcd193cd20c69af6c1067495b59f00718c907183ad1d75f17cb169e9a4a126447f7440ff0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_D14B79B440CDC26D7D21C81855E2C04D
Filesize471B
MD54292056c31672d33c863f7eaa2fef954
SHA1bdea0911cf58d5f5206367c8838d01e592091df7
SHA2565d6f4429102c56ab54da77fd12a32741f5f3368b3b6e0ba2f77a1f499b4a743b
SHA512716df3f8b035bea0a22539bc4bfb541aa52c1cc996911561f4fff1975ef875d0ca2b7fa1f09bc10ab6c398ea4308138d00fb9c17cc62728e6b333b43a1440904
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3217AAECE20956500C22BDB70A7D005F
Filesize400B
MD5497af9e9bf4f54421753a95f84be2baa
SHA17d8ac0d084e05155a8d3de5d12d2c8805236da79
SHA256ffe4e7bc9f939f3e454150952d97b27a7938b42de29b66490781641d5b2d0320
SHA5129d6e63b6448087fad9fcb323249044ce8801e94de7272619a24c1e8781c12f4ce59ecb54540990531ba052aebb0e1c822036a18c99f3b1936719946a3ff732ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51c969e7ce128f31930f167aa2eae4614
SHA161327f1cd094934b55484287bc9906b200f0dc69
SHA25642890977af127c5c2f8719666ccc29fd250db3919da4c1a2394d32f6dc27a972
SHA5128533a3e30f4a5ac1bb5413ecb8fc721691b644de1fab49904cbd28ccc34be39717cdd382a702ac36716cba55560677aafbf54b3918c0cc802cceae75fa1c19d1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD532c39ca8e3dca1c34604ae9a1c4727eb
SHA1ccf552a3711cdab00cc5aaa6066e4260a39610ee
SHA2562f4c18d8a1e1371486281adec343114aae2931116cde52af9dfcc8f5a14999cd
SHA512184970971151a3f801286f9c71e4066b4533e78601cd0b95c3e3d19b80d4df08798482a0b6c268bfe45058f335ecc20c70335aeff313ee8cfb7e057b4ac1e7de
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a41c3eae3cdf1cb1f72eaff154f88743
SHA1c8107fac1e573fb2e35ce17a0d0785d99791aa68
SHA2563dec9e8678b12242da24ea02cb558aa3356caecf68445b58f121c6e4a7221347
SHA512b97d2582d801852a4110b3520d4cd8e9312497461e6611e01b4093a85d761da567c0fa73d828935ed5bf94df7c1cedd727f806d13f312976a55735f07fb2c2d1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD595093bffe5a43ad22b996579f26cd1f9
SHA17b8d67bdf3c10382ce21ad1d90780fbb1db9d1ed
SHA25622d9741d605e4a3ebbf062af776dfbaeedc1f0b365d675b657aab801d79d6820
SHA51299d598a1dc16e2497fadf08ea2246952297ed9b6ac190cdc6acdeb43d2c32566e6742f615cbec763eb0e38991c580207fb42d4661c0e187ad3a33885ef609d9e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5eed5743fbcf8b95d00b39fe17bb36c10
SHA1f9873b73a5bce0cbfddf773747b34dd7c8c04af5
SHA256430cdd7a40b950a07fe5629022aa732a5740978558b647da98c3a12249d1e7a1
SHA512c602293375d79f8e0d9a63c27b8750913d5fcb9d72ce6896a281dbe3817204c867ae2c37c20065808509d8c707c007d4630d6c4192b4800b8380fb1d364853f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d7f95a78988b59aacb17809f3639324b
SHA1e10bed0b8e986dfa1f9b7cf52230a998183332a1
SHA256920c00d90c58dde2a56c05419643102b410a5fcc4deb18b7dbe3036ccd578bf5
SHA512f5c90fe7cc9e722fdeebe4f85b163bd4b481d03189a6d9fed0734ebb104aa9609abbf3fc490da7a69188e9c42f477880b7d6736e6e14ef41b93fbff1574c6e86
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD503398a8d971004771426d96f3bbed919
SHA151fd23c35487930a6dfe4c860d354f49ca982576
SHA256bf6bd402734d6694007f92fdd089e43b709e06513dd414cf4beebb1f39091475
SHA5121295f90017e4cbe44ec391d3f6156daf98c122a119912e3a429fc64ce7a45982b365daa38664715de35af47269105a96fb1ee1e4d475ec3f8414626156623ad3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53420137ebbaa3f610ffe059ab768ee3a
SHA151e989f7684aee7407e23c0227aa2ac0854cf652
SHA256d6b8a196af55a15605fd970cb1fdb4bbc9565cb142f42233f7a2db1721d818b0
SHA512e92c8ce03611523041180b862281bc777e5d9b13895dc860c4f288f7d765a2ffa2963850dc2e01052607c92f3fec81d75ef11ea3d62bd6cf799840a0d41a2c22
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5128d417e142cdf5dd1b84c433c2f0c75
SHA11e03c87b5b6ac66d432611149b86c1cd930a57c0
SHA2565a7e6dcf5213b44e713cc781c06290fb04220f08b546f229d918c3212fc3c570
SHA51277fed68ca37e492ce4895b6806428cf3849fed9c69301d98fe841450ca551c333181657ab2aa9596b3da63aff1923204089881a551f02bdc1255f1f01f1421a8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5524fb59b34596dfee2db19737437e344
SHA1f31d6907d5e81766346d78fb43a5c452b502619a
SHA256bbbb93a424cc6a473b153785967f41a64a8515165c486e5b48da8390efc05e7e
SHA51278f44c340b2c52b959ab62c9aaacade8c7f2c9c0fc6e791d12313d5519a30dbc1f6fe8be8a1332b63474c523a1e2df2d7d550ecd3cde0892500f10acfc2940f4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD522e686f4113b0083d165e24361fa71cd
SHA16a2178b781d917896a321dd63c203a8f8e2f64c1
SHA2564a6099412007128b3c40566f4be6a372f2cf0571fd305d8d0652a8099ad129f3
SHA5120f058a690422ebd09a69c13110c8fbb3e7c1ceeafb230e19b32e6b39d95497d39d2678d086c3844f915c67178d79b797960b87083a67605429a43b89b219aaf4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50391d0def1181696a7c6848f638a953a
SHA1e8908272716d682094c925ca0fcf85bb1957914c
SHA2564f9d80712bb0833fcd7569465c3e8663502e081ffb7675493bd730053de86a82
SHA51209ac44945a2184ac41a7c464523976f10aca42adf1369511ba24a16f0be3523b3dae65d26d6757a13d65886a6f2cdf8e775bb00462c7da6fb0771aca7c540fd2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD516c25a05774997fe4675185c10b77133
SHA16225396f2d5e95078f10857e8e7130520d74d8bf
SHA2564975bf9b7d5151ae11a5243fabb40e8826b16f973dd7daa2ce19463138830365
SHA51237baf0558c36f6318837fe6eb13a0ee1fe0ec0713cf26f62e95c5b1001bd848a5de8e53b30a47e02754aa20fdf212b30801d24b2d2bb4a73685ef31b35c1377a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5325d2c49bd74fc4b63babe2d2faf5c25
SHA1629ebe09c00a93bcb2033b14f50a649fb5bfb77d
SHA256b015770a56e963c93fefba412706b12fe4f0a2727238e89ed99bf1a18edfc92b
SHA512fb227db9cf28c39811a2b779c7eae41872a51f304bb52cffe55eec4bccdd842821efc3fd80e7745cb1df7fb6b1c4d81f5689cc6b10bc89595e9a176271ea4bd1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_D14B79B440CDC26D7D21C81855E2C04D
Filesize404B
MD5d1116fcbc8c2d7e5fd291e083c2a814c
SHA1e95b7b83099558aac1a5ee6d1408c42d5c9e6134
SHA2568235cbc1f46eb70f1139c611b5064702653e27d53e188daf52a4a592a1cac6e5
SHA512053809b64a67beba50024efb46d018fddec025af635a911fd0171f1a305b977d943255a2427c3b9091e19bf7f76afb9838210f43a367f726c572c62ecfc6fee6
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a