Analysis
-
max time kernel
137s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
27-05-2024 00:59
Static task
static1
Behavioral task
behavioral1
Sample
776527c4fa856a9c2a225f0ce7fbd50c_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
776527c4fa856a9c2a225f0ce7fbd50c_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
776527c4fa856a9c2a225f0ce7fbd50c_JaffaCakes118.html
-
Size
140KB
-
MD5
776527c4fa856a9c2a225f0ce7fbd50c
-
SHA1
a6ebe7bf852d55fae17e0a6b95f6df8056510792
-
SHA256
68b6ca7f175565ec649ad7725215495c0aab47ba67d37de42d16ae57b64d6c9e
-
SHA512
4939999d150b744b425618fb37761e0517b8280c135fd0bcd041f98996184cbcd51fa73c6daf95b74e5088bf55ab3f42fc5c564c14075c7ef855d349027a5989
-
SSDEEP
1536:SUpP6zt6K6ZlIHyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:SU1mtc8HyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b0000000002000000000010660000000100002000000087809b7ad74a103fa78414edf138a05edd1d08ba89c01d39d635e32d8233225f000000000e800000000200002000000017e0765d31a6f61eeaad213321c6f9d1925bfc6b17561c5881a9b7b3ac57547b2000000069e7983c40fd7869631589753646a81a5e146242bce3d67d26d3d9ebb126e7f540000000053b030de3d6da11d55e5fd39f0dd6f424f3e1e93bf0b0fad8d62d144fba2d692005d9b4a76a0e3a1ada78d30372415d5271af0ac8cc2f63b2cd644d3ad406ca iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422933432" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 9046e86fd1afda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{5C0506E1-1BC4-11EF-AE65-4658C477BD5D} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1952 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1952 iexplore.exe 1952 iexplore.exe 1272 IEXPLORE.EXE 1272 IEXPLORE.EXE 1272 IEXPLORE.EXE 1272 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1952 wrote to memory of 1272 1952 iexplore.exe 28 PID 1952 wrote to memory of 1272 1952 iexplore.exe 28 PID 1952 wrote to memory of 1272 1952 iexplore.exe 28 PID 1952 wrote to memory of 1272 1952 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\776527c4fa856a9c2a225f0ce7fbd50c_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1952 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1952 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1272
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fd598e705438e8723f565ec061a2429f
SHA14ff70ae950a54fdbe1da7394fb1dd880d408cf25
SHA2560f50d1b68390b66c736c84247590f57095288afc18f1032ab76ae2e4b27cb8bc
SHA512772aa5bc6023c488b229d30f4da8d9a7190e5cf6caaf4335d3ca616f922d8b517ab583b215af8dbde55164f2c44de59dec292535fa1d1af8268cfc937654ec48
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f43b99bc03ee9af26ab44d3d8facfd15
SHA1449dfc5a9c5cd377d6971b66be5e05ac79f47901
SHA256325ce08c8583923f9f1fe78a1f7bf12cbedee472d8aaf6643ba8af0fbd48781d
SHA5126efa09028ecf36a231e45bd9aaf91f385cb8ac32afa309ecc440497ebdf80155746d88d4891658852f0666d6a40e271ccf2be44dece17eef531db9551fd963d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51f1075a23e3ed9628a1a2c0c29ea1e0d
SHA104dcd20f828d7147941c21bef505bae00417bbdf
SHA256b0107129ede7fc2985649228d74742c738c0708bdd706ce4c8085070dd56fbc6
SHA51291f0705be42397e0407f2a7fab8540ef29bac3aedc195875bea0bd65860c4d83754c7d78cf23582f8cd8689ce24806cb5c19a4c80bcab637453d2f907784f514
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ea4ee483caf3b67d73fb0b53907f3445
SHA1a5d2d3d0b604907fa956ba6f2debfa8bfd201d1e
SHA2561bf1fba33c4ae05e53eb45e052d33bd3d4bde7ccf786792d47181f680b928ae0
SHA512fa8758f49fbd989444ac4481f4fdba538ee72de3755235c6ecb93bf6107f6f979c56225cc9927f4e3e212ed34fd39dffe7c52e0e5a24ce45a86404b7dc616984
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5de869e8792439d944ca65b6ed836d294
SHA1f52e99321196d93d3a4eb716bc0526bcdc817926
SHA2563c2e6d479f7e56f092d053c0336f29bc2e1c1d1c375ab8fa944522db4e484bea
SHA5129094c3a473a7688eb3b76f90d4f514cf17750ab965546861cf82721151f29e6b3073b10e29370e121dd0c7b1208985bfb4e9d0b1d145f1d3c985a1c1ef3acd69
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD541c5b99824dad50f2847cbde18e46713
SHA1d944b6b6781facb6adec3fc5a40a61ab446da00d
SHA256d2cf0e200f571ad38b9aa6383127ab86262399dcb22bb1b4adb8544aa9db1b71
SHA5126969b1462e8412ea9b3c160c80bf7ee64958d690782d13e2dfd782025dff0eb4f877367410022f83a4d7a89264c89b40e4258acf4d5735f8fb0a521207eb7268
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD511d58770f93ae2ea2ed1a3d0bd9c1c64
SHA198de4e20ddf81f70777462ef1cdf4626c8978a9f
SHA25634938da23e214a774dcbdba933ea9ee60fe19be4124a3cdde7af6447bfd37f96
SHA51254698c269572be856867885aefa7fdac44a25f9bd4403a9910e1576ea68c9059ab8f0c4e56a0cfda885887f9c8ae280e24fcf3eca6f29a5616af59401645ddf4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5828547d0d25aa55412497612bdd301f1
SHA1ea774341a5ddf658e915220f127bbdc6f4990453
SHA256206f8f67bb7801e650aedf59042910f1608019f52fcdedac8c16ea1fa1c44efc
SHA512b032f657a8cef1131d197b2c204dcba069f4b74402a9440e38881257d3d368121657551c0cf53e989caf27a8394492656434637a7b94b0648a638f3b918c6935
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a5ef1380bd5477ec05f1ea8de4ea5bac
SHA10cbdccf41a5170eb47a616666f0f6d8c5d142387
SHA25697356cc157bab42713e5f52faedf7e0ea9a487ac5fde833392cc8b6e1e868abb
SHA512f71b617d5f90aaf27a1f22120b2bd3018af11162e5849c462b37ec017692ce85d034dac0ecbfbfcb451aa6b63ba7f8cf55867f6a9858dae84ab4ce31b9693a99
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f661b511325a0240d6ddefb485a4e015
SHA1f89ee36075198a0c4b76b5ef47b6777d1d2dca6c
SHA256113b1b423a0b71c6dbab7f9d690c149378a7d2de4e882431c7677f59a5d73e31
SHA5122eee10ac0339eeac2621ae430911e7976ea70855c7db4bcc653295f71087db326602d11b7c7e3c657ef26d1116940bc4acff70891e48a3e2ab23824da632ffea
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD505cb2df7c05d9224b19609062f938108
SHA18b6ad5c37560ea938502e3ba2f271473367fa0ea
SHA256af9bf11ee7470b1e862ffed443506c591181f6bfaf1d2d25e7c9265558c4d486
SHA51214740ade043107f394232cccc3f7f797757770663bc98a92e604025db91bf81eaec83b8f755fc49752ce13277e282473da493938cd07f9e9bc200f974e54927b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5704636a0bb5359a90499227fd41835af
SHA1952dbce2994bc83d286950d45a5c6b2834ee5436
SHA256dbc8dccd16b77510ceb540011535d552fe8fc420363c1f2cbd43f2d3d1333c50
SHA512794ba438b57216f89d3157389a174f39b090b62ae53ce8afbae21f7a1f99a7f6f06d403e2ba3c3a7eb99c71c1341489b601773ef4426eaa65c3986914cd99006
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57b05ddd38cfab3cc9157527b80b2f457
SHA127cf2497c41ef7f789f8bf45ddc454f2182336b2
SHA2560e6511358d3851d9579ae2ab62cee0d88f88e304bf7d72d60bf0ef9db8033455
SHA512a71653cd55b38f49418c3de09099eedccc7d54b93eff7da416959b4d69661cd19f6b3d79d0b2f13300417539a65dbe182a00c0f0f227335bd5e63d2bccd3d2db
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD594a910f2d1c956d0c8f52f9ab473c778
SHA165b45a9a25f4913dfd0120b689e58e097d6a8a7d
SHA2564cf69669f4e1348dd78cd19935c938660846cbb7b240cde849a182a77eac6136
SHA512cc9c49be2dd1108075023e8eec9c74cf9f306c049eb463f1f9d24eb2c6ec13bc13179ff857a171584dd5d5dc6a2d29a381b94aed68d459928fd4d03757ec22db
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD567abd4ffa66787b15f59f9f16f82cd57
SHA1bc68a9e3901532a319378587b452dfc7cb59917d
SHA256f021223a4d0c3681a3b61ef9f35b2e14099775bbe1e8a874f8451020fc8afa09
SHA512717fd046de11e2f6b4e33d5968ad3161a36ba8898c0aec56dc6f0b54eb7c7ea0904faeb11a3043b30cda22128697109e94a7d290a55e7d70932ff4a082979f3c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5455f2c0aa2f74076f05e6b52664c31d8
SHA15091a9c9ae9e0670cf2b4d58b673e148389af246
SHA2568511a1960301cc6484e2454d4845f9283c5a9a9e15dfd538bd8fa44ac66d0f22
SHA512c7239e9dc657d113b0751d4c8bfc6bc44ccf3a5e5a2a295721a0c2b0da59adcbe9142c058b841bb2834a9fd8658c634478fc4c14f0cec78943bb298dda2826cc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52deb13150450334f6f4274e7cc38fcac
SHA12869d9a5bf989a851112cdc61404496fc35a7321
SHA256c8edb31fd55d57ede4b74f4104441df340b27be27bc61bb8da81abb9fc765726
SHA5125a7e3ebeec632f882fe2156e366681d5d2dcd48193de84bab4377d7245d4ea2c5df4317de367b6a6f018c263d24f485a317bbcb1e5c55fdc5fff70a46913ca0e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a37eb98fde010942f12c1501e06c4a62
SHA17de52f30e69d7127979cc9caf9688592cf852828
SHA25646558c9d9fbded3fe7937be64a7b6a277205e6309a81969100fc260ed0e990e0
SHA512c52c69c500ec8fb1fdb4f0bad8d47cd1ef4e10ac1d59d013bdef530831089a9d054c5c6571d30d4c202ca4fae947480839a909f0d83362a642578a7d138e1ce7
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a