Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
26-05-2024 16:00
Static task
static1
Behavioral task
behavioral1
Sample
7603e43f8a509a81f1631ed53c2a9dbb_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
7603e43f8a509a81f1631ed53c2a9dbb_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
7603e43f8a509a81f1631ed53c2a9dbb_JaffaCakes118.html
-
Size
118KB
-
MD5
7603e43f8a509a81f1631ed53c2a9dbb
-
SHA1
cacbdb053f10d3b3dd5f628829cc91f485b17945
-
SHA256
dda9803b67b273748290a88f254fecd23978c14bc8f75a3adc812cdd37b5c5af
-
SHA512
dac1fcbbd9fe10659236d57b00f3d6bb183baac57555ae394d0bb08d8c9fb239a8416eee71b47219a52ed259c37328bbc8ea7e7dd6b7ab5e94e1974328c8358f
-
SSDEEP
1536:S/0eK5c/yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:S/WMyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{11206841-1B79-11EF-BA8B-4EB079F7C2BA} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422901093" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a2300000000020000000000106600000001000020000000de0e1c22b3887ebecd15476e0044103a53c9f14a944bafb5404ac8d0ca4929f8000000000e8000000002000020000000f77058df4f54ff7d40e3dda5c5e53f4433f97362b8223346077c572027eb887f20000000d177bda7e683f7f6fa54ef91075b8924660d3799109ef52d3c7d0caba1763aa940000000b2b3f5ee6c453119c273103a9adb619a44bc8363f9be4428b1ba2c298ac3498ad2989ad9907e01fadfdffa9ee5a31a006965c2d1be5facfb7d05fb001656bc1a iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 10f9c7e585afda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2236 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2236 iexplore.exe 2236 iexplore.exe 2240 IEXPLORE.EXE 2240 IEXPLORE.EXE 2240 IEXPLORE.EXE 2240 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2236 wrote to memory of 2240 2236 iexplore.exe 28 PID 2236 wrote to memory of 2240 2236 iexplore.exe 28 PID 2236 wrote to memory of 2240 2236 iexplore.exe 28 PID 2236 wrote to memory of 2240 2236 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7603e43f8a509a81f1631ed53c2a9dbb_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2236 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2240
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56777bb682741a492af32c57d7032dd90
SHA19b5c285a749af9c652bc94889ee5673421c9e355
SHA2569364d79ae941c820a77999903bb073bea67a6e92f8e2e1c945c2c729f7196849
SHA51290bae0ab5055e3100de993dcfa5b9bee203b3034e0500c64220748aebffb9d6a68035e7c0ee5799b403e930156c8cf7c99824a132a604ff3179b101a1a1a6d90
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57d4bff22b3b154c77b0672152d71a805
SHA1868c47cdf5283d5ec078c6417b50842edaf843b1
SHA256e2c4440a813b2a3d3898b5dc74e6f0c98e01967933fdadf749df90a6b5c4e387
SHA5126673c0368edb1cb9b329b214249ddc37f893f001aa2fd9a9adfe6ff26debeaf58007a68cb7690a0dfc0ce9fc819804291443547bf5a3fd2b4c782d4aab1dba78
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f3ec586ac7a8411ceeb42b8f1e0555cb
SHA1e56d9e367442bddc59497d1be7f0f123fae9fb9f
SHA2562c5e7ab038d6e69295fc4ff86048f098e51810e53f717542fd4179bdc0202375
SHA512e5350862dc8268ccfa58d7e9269148f9400f8996d3bdc6f95a25624ab3f0c7826094eed34453416ecbde5f261767587644eb748b8c6592bdb10af6e3f7d81b42
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b717e1f30e1552588c1f96500093d3b6
SHA1df1349f393a2fe105ef379edb665f1baddc7b4ab
SHA256ac83fecdab18aec162c9c9a62184704389cb186e51186929f4f479a196a34f7c
SHA5126e43d1d03634ce521a3c54d77330cdce54b28e6f8ad9588eb20eba4c4b5a528e3069e72ca67079b194e11fb1d7897573b723441e71ef09805fb83cd3b53807de
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d93869b5dd332afc8fd3db49cec72dbc
SHA1d04e308e6af20906b7fda1c24f156a53f8e926f3
SHA2564315f22d9c9a4ff9b93206e89bd7fd3ce3946e6922af2fbe4c6dcf45f8fbe60e
SHA5126c20c9c3e43a099b02a7ecd9e81873987ca17ce210cdfa62f4acdb0d1309553a0a374304f55de4508f7ce03b8e29c5f3fbf843b810bc5c809e0762cd16e9d3b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD582a76b95822fa691aa69d2bbb7db96fa
SHA1823299d77c734a9e0583f9b5419a86d137263ddd
SHA256596af9a3579be9e726c136bd1c64244b329c4912000c7d07613b9d761b79c00b
SHA512155daafdf9759d670ae2adb8a6d7f1c828196d7e43b64e32b0204bbf8f66255a1c6a17a113d33bfd8d2ae6b9ae08bca8061fa5d0dac2436c3ee195d713d58b29
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a301e6528d08de5051f2f7a2b682846f
SHA1d62959e444cacf556f19a3e873ce638fc4c53f95
SHA2564663d9b5673e33bcd10a96005d8616dcf06802cf0effecdbbaf17e91b1b39518
SHA512bbd326b77ada282c4276fcaef9139cc2db262010ccab292bb49daee6d42063f48b3e1b104bbe27bbe0f2417aa2d43c57633a454c2b770a75bc67967712fe7264
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55285d178d9397a9e9fbbab5681667e2e
SHA1c08d1503616676fc6a509ace665297aaba40ddf5
SHA2564db35ec64ae133d115b13e895d6120d0df650effc2b4370bb5842275fcd04f07
SHA512036a1bf90135b7dd97ad1161f6292b0ce5d1985ac6978b890fb5d1bed3e0fadca8d581a41469a4fe6421c8aefca67ed2ba3d08e93db8f05fc65154acbad85b16
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5640a3fcadbd2d35fcdf50feffa7b9474
SHA15bed63ed2f46d84a9e17d6178a8af213b4ced796
SHA256736a63a6039767cb029a500ffc72eed05817ed4cd0cd4a4facef0f63ad9c4497
SHA512e4fd4f514232cb8304c6a73f6ce3d7c783c3b30752d315f64aac317baf19e23248782e59ca5adab12ab2d14a5ae1a39055407f788436e9adfcf9790d7b6d19bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55a916278a56358d02e4fc61509d0b3cd
SHA1a378a482951f8fc6d98a675f383241e0e524ede1
SHA256effac50d9ae02950c56cab157e823cf8f6c3708dd52c00f8b21cfc5004748f9f
SHA5120bc58b1da25353f62b700e5a384a7fb9ae7a486a10437f29899047e3ee7a8238a33619b9c0e7e9684f131a38919951cccc00ee2e9983f751730c76c3dd7bc62e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c57c52fc9c96f068197d1f0d3c052e1a
SHA171c7ccf210b0ffaa4fa4be4c92d4e6af47ae9f3e
SHA2562d03e5f03a2c98724c34501cd9b1244962100eead39ed55827cfb6c6e048b73a
SHA5122c7a6ffe850eb2eaec2ca8777084be43e87a276ff2cb59f4ce9cfff4caacca9a829e981ddec5051fc3a5de468bb7ac9677947607bddf9937c1e560c31d5de45f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51d3d10e617a56dba054acb6be5703624
SHA1372a074c97a9f2a6ab95528f14078c142ab5780d
SHA256f39dc8362348c9c4d6cb3ec67e5aa8626308911c14c651c1028dc4e435a47527
SHA512464c63ebcb3b26236dc651892896cc4b08edc003dbb612bf2161124ccf7c430ba7c96b7806c903cf665e3a8d65566d28fa152c60484ac5a63fbf5da17e0d655c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58719b25edc5751d2cd68a94e5ddeed21
SHA1ab8a77ea308b678c3e7c6a99b6cfe8f673c1c15e
SHA256317dd509c4eade4442331cc73aa822b7d1ccf010453a88bb10e01323b8116e9f
SHA5120817fe3f94a2bd9a927d6c16cc56a27b6ca6d77f075ea71019200b852d998c3b0468604c09fa18cb480e4d490f21073c2e10ea660a23dac3ef3c5d4acca90b76
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5354f0878be81da82dfb27c654121c991
SHA175686d1969716e710574892c5ef95b46f0acf45a
SHA256593aab7cef168990cae3284e9f733df04357c555c6993ede8ecd0101a685aecf
SHA512193b4133aed0733870d40160a052e8c2ca1f352ce16230779825ea58b13671c0fffc67383ef66f00d3a56090d82ff91517e191fa8156282916bacbc927d17079
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c5e5a6e9083eccf75ebdf483e757ba57
SHA1fa6848932e5eec739f5776c54775db97e5b5460b
SHA25612b7a00980b03256ac873b574a85f2e7dcf9766e72f2e7e164433775153008b6
SHA512fea6d59b279d0baf7c84f7144fdf1e1aee24e555faa14d67c668009dad6e1d4576dfca65d53145ec337fa59b120b9570e53565a53c0ed4b5736c2d7e05b8cacc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53d1aa4e46ba0a8aa89d1e57d8bdb7786
SHA1dcc1b8a299e61925ed8a2ecb9b745e61bb655463
SHA256fcdf0666d5dcb4ec74f327dfe89e2ca4e8098e94b7eb33271490f267f979ef3a
SHA512ae72007f221a099c422bf6169a40e884f4d7916cba47d9891625765ed0d80d219f67eea9312c43e3ab78bfdd4d9e0a54134a602d6d269cec12721f6f4ef3746e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD504c547353b5969373d62f95e2b7dc5dc
SHA1bde0ed50e8564c5ee2da58ffa0e0451ec5c0c882
SHA256073992fbfda95b981a913813243b227424724fe7b874d50b199500885690388d
SHA51276897146ce219a396d21924011e8be4e2bf7b48877d272a55ecd2111988fddd63e08dd1af30d6a86509e35d7a2a6d4f8689f30e7820190f2253a498ea7e37d4b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dffae8805b2d3a27fc4e5007c8863487
SHA1514a935b25a96231f519e08d0a3afa48214080ed
SHA256576cb445c41b08289e68db0e2e59c614b1a37ae13f744c8dadfc92d765ea70e1
SHA512cf4610fbf1490ccca3b44af7ef9354c946bc317438f824ffc06c3cea6ab929c5602279a2e603dcd1f51d6cbeebf6ae4b56641b50cb5f49427b294c0232d5a48c
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a