Analysis
-
max time kernel
136s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 10:42
Static task
static1
Behavioral task
behavioral1
Sample
7537daaddc81dc26da880a76b4053067_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7537daaddc81dc26da880a76b4053067_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
7537daaddc81dc26da880a76b4053067_JaffaCakes118.html
-
Size
214KB
-
MD5
7537daaddc81dc26da880a76b4053067
-
SHA1
5797cfd66cb18f093f2079464f37539b74db00ab
-
SHA256
19a77f813e4b2cc83517f663bdc3c70460bed3c90afa2a4b9910d5021c3fd1f8
-
SHA512
f92ac743b52a9f5e8810342da0bb88923c7c3bee7298bec9ff91d77b841dc03aea177cb55a36e863fb49116358585b27d226fcd9d8f8ddcde9c0ffd33bea64eb
-
SSDEEP
3072:ArhB9CyHxX7Be7iAvtLPbAwuBNKifXTJv:Yz9VxLY7iAVLTBQJlv
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d02d33cb59afda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a2300000000020000000000106600000001000020000000a366c669710c3024ddbcfc0415f5295b4cf5041cc41cb15a4c654849d42ece35000000000e8000000002000020000000c0fa8d0c879c30b769a5b17087ee95c996cac6f1da7df81ce028fe605541f3de200000009944f831e1ffdc991eb6555dc15bd7cab591c3b2a91ee51eb8b0655819ae8a084000000055ef1621e6207cef4210a70c6045ab6e3a9058f1c2f831377ac7fc54706270b6496584c5487090d641687c06f6089447dd75e30ca54401a00a8263384052ca07 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B79A7441-1B4C-11EF-99EB-F2F7F00EEB0D} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422882045" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3068 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3068 iexplore.exe 3068 iexplore.exe 2888 IEXPLORE.EXE 2888 IEXPLORE.EXE 2888 IEXPLORE.EXE 2888 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3068 wrote to memory of 2888 3068 iexplore.exe 28 PID 3068 wrote to memory of 2888 3068 iexplore.exe 28 PID 3068 wrote to memory of 2888 3068 iexplore.exe 28 PID 3068 wrote to memory of 2888 3068 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7537daaddc81dc26da880a76b4053067_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3068 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3068 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2888
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54b2465824dc06e8597d8d8975f938301
SHA1f45432c383ba5563eb0b3a35fc086caa4b9f7db1
SHA25612b411f4ecb199fafc3c0e5fff5ec8d48ee8483ec8f8433604103e16974f0faf
SHA512d9e42a83e78b80052017463f14e784b8ab28d6f538d352544d49ade6018d93ee8ccdb3389949270268fbc1d43837edb8f43577f026b7195aec66ad2cdaef3dd2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51a3f2f6e2f3f4577e46d76cb721085b3
SHA1961a9c3246b7ad56114e5e6049231028ee6bb1f8
SHA256c5415f2d013d983f714d53419ebdb63d4bc396558fadbcc722d50e502914c192
SHA5126e3ee423a309c68b050cdc4b6245ffcdb9774af9c4acebb77a555235a0555da50d7986d212eaa416f23b018bd568ff86c497be7ab27cbe8d65514cb7cb15054e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59fb0e5a256502f8b1a9bd0de9433c25f
SHA172d85f62e8c515853444ba03e56fab79b494c7d7
SHA256550cef9e09388c1829fb818ab9db5a1dfdae8b4ffe66f021e67ab5a25f42a997
SHA512f6360955866014edc0ea9307fa2a42db9db33534678ff5dcee3a1c797086be34b75080868cf7f3f30010ba2202e251a2995b94d17c0adc1cc6717ba10806a407
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53bdc8da099d9bb9674664201d0aa2f51
SHA17a7f4351e73887ade95ac17360c8cd953fb5db0a
SHA256e5f3a2e212de982dd602b32a355d0744e01b7dc4bef6ef8de6658980146690eb
SHA512d606be9096999e862a25e186d1400d21154fdd0312ee437ec74ac0dceecad4ae5c32fcfae4a1a5eeac3dc825c628f2cf65a7a29887adfd8b522ff7a541c3553a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a0e6a096a8becc41a3113206ec3ba4d0
SHA10b459de859e72111c54e1ed74083a31e40b2c63a
SHA2561f55232cbb7fe6b3f339435399670a1a836b49b582c2e2c2f8e379c248ebcb7b
SHA51206e14f59c7f12c368db628af23a5de9a7c131242a3189248f184ec50e6b6492e86cbab47a5b7888accef871efbdbd7c50a725f8f8a8b5a676571026605f69825
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD519ee107b585043c439cae67506f14f0a
SHA1803deb10752234e8cb5cd8952f0f62d253365819
SHA256d06264ca0355acf4f5c222db3bfd7e9265c7c2f564441ad65c76857ce62a021c
SHA512c00ea717dc893a4424efa32e803028574998901f637ab69ad5512486b454333a17f1c770dda5227c0a03ea336826491cb7cac30cc6f653be14b18a12a14e5056
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d58ebf3de4834da921ee919d3d344fd4
SHA1aee7bb03ce65b5df98cef73ed18d1612bdb43894
SHA256458fbf1039dd7169610b094a0438790d8e826761135f3fd3bdba3103c8023e6a
SHA51230b08b22434ec70c84f1387f43f1409f3d0b1410ce817690e7b36329d14d51b1c56b51cd70d29cf27295f0300d038762e6d9b677e2a86f9887c4e71bdf1e9e0a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5571884201d0e561fa47ca92a88d408f6
SHA15f4ccd256c9443d5ec157f7f00b0047a390c638d
SHA2566b444b6ac9cf11fe675fe09489624e953c010708cb8281291620e31be0887992
SHA5129c2c7cfb231169286e0eef41086fa5027d91aeb5d6bf88c7fe1b1b85db906b4f79282540c9abb95d53a374de8e44e7ef50674cbfef54b415a040df93186afed8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD512b3e5a0aa9c8ffc88af24b97af0e97e
SHA1cb7e043c3565b076ada35f04b2a900b02b5a9666
SHA256f4bf1e8da004afadd5b1fad3308117f79ce1228a1860f8bf3e772a6f3200d248
SHA51226f72a3e10d06b3a5e5a95c2a174e04752828a80b50904d3464f338a3b2d83aa9d58f74e44187662e99979e9d47bc918a05928ac87c1600819c81f09f27ca46a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c7e102b3394d55ef71f809b8bab3b629
SHA1bba6b45ccfd098d32f0c8f7cac20ccc3e52e770d
SHA256e3a48e2bea6d559c2fb991f9b8b9a7b6f6611284301f16b30a3df24833b2721e
SHA512b1f4b53acc69f8735a1d28cc076ea376d5d58e88aff112fc4611d30c47ac9b8358ca43a4b512e0699508a0ba5ba4da111351861b7bd421c3d2e2c98b7f61e359
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD523415f97efa53ac50c8e5660c09eb767
SHA1d716d11f2b9d74c339a5f35e7ad023dd7ae64a5b
SHA2564f002f2cd068c854f8b7c34ede9aa06abbd54746eff2812a4fe97903b3493cad
SHA51215636cb673d760399f09dd51319045703d23856fb52e78d5e4fccf25febd793de0f4da4bfc9cdd1e584b06109ebf5a0eb80ee6fe10c04bfc3c0d06215aaf32c0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c68c1938eabe50f8f546d77daf804ebd
SHA1738c032edb2e6d925e07d02c520e7dd0076c97e6
SHA256aaf676a6bd8d6c20a42bca392ddd85de8ebd8efe4d63d945f481e0d508bba919
SHA512c2aa6c31397cb0f080fed530ec3c08d436b11f802f3e2dd7536c9bc0cdc3099e65dc31f2dcf6888b6f62834e1aefb1d0d3c4343d8518f5272a1e945023b86ab9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5667719b4457a62ff5093f12ab2f49025
SHA1a37fcfcb6b5798961dc9b481c3020e5fe5820e7f
SHA2566de05323dd3fa3d6ef1b07c0d200c4ea1f084ac4487fa67fc9a5d36975bc099e
SHA51235383930c6d7a33968b82d39dd868b6eabc96dbbd4c3fa5c84a5b6fdf839dd5b322262ff16abf0516aac2b8ff2e141b885f6ae03e7e94f1a47176a9655c00a8a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54c60715cbbc87d36cfcee4a9a4186116
SHA13c9983d7bc6b007ca08727c9d81a03517120e1b2
SHA2569e818d7c88f24f3a0522b8956ca9a3591b06147a074ed37e1bfb9a68b28fd0ee
SHA5123afdeadb26caf4df7a91fef5390322acf244ad89f782d49de98a73473960853393a9fad62ad027ef3b403ae2b38cd5a734303a0bcbee8ce303f828176924ffc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50e08694b6fc4280b53e8bb0c3478ce92
SHA196fc75355f5107a87f62ea301b0f675aaff9b385
SHA2564c48e3287242a9d3cdb7fc456acc53b2bf4c2efce6573b23366c2d487fc28d9d
SHA5128e2bfd6f0eeae1f8f83c50fc71affaca2d0365403ace9ee5f150997dd337f36b00d225c77fa80fa9e0180687188a6219f6ebe747a2c27e3f925f686ae94a41a7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD500997ca30a288e882dc933800aaf0fc7
SHA1f451d2d01a6af25d2f6dfc34b9d3a0ca44cef487
SHA2565c8c11c25117d362c3e76afcbefb042646fe4b03d17fa5e833e373926c3f9262
SHA512b5407d68e778de263d39a26ecc1db441b05343c515a736614135b443d933b340083530eca949bbb073e18d573c177e4b5f708c4e045657df849d811c22c0e694
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d112401fe75954265d80964db1c2828a
SHA1c59003a7395edabd0c449149e13a0e2dd8517839
SHA25674634c3c422ad00a9939583dcaf9a3f9cfe6d2fb248609ef8c226c805c3ce2e3
SHA512abfc9a92760c3ae29808af0347107b742d6e097f178ae86070f9e936b66772469236dc72002a3a0293385d581734f15e5a950cf35dc4477e44b5399726a24724
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53c7cc557f84d31e20829f87dea4d1696
SHA1cf72efe427e485d90de8c7cf0871fa504ec891f0
SHA256a874716a08afaf3c8ebf1fc68f2918fde92da6a73e1d90f8bc566a8ac72d4e2a
SHA512b60ca2c7104d0b3f729c76c17006981e3e0536d56ab144c6aec43c0c588a75c8d99be1068308cff03833da0ddb350e8229c955a5240c25e6ef889e11f806f6a4
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a