Analysis
-
max time kernel
133s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/05/2024, 04:36
Static task
static1
Behavioral task
behavioral1
Sample
77eb2e355b38b2e9ee234cd087086fe3_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
77eb2e355b38b2e9ee234cd087086fe3_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
77eb2e355b38b2e9ee234cd087086fe3_JaffaCakes118.html
-
Size
1KB
-
MD5
77eb2e355b38b2e9ee234cd087086fe3
-
SHA1
0ba96830a70e4ec6fb123166b600986e472d31b0
-
SHA256
60cbb79f63b33128bffa2881f6d95e3911ddcd69ff48cbc9f4d9d6e23d924924
-
SHA512
799a12128e406c13415bf10e32549243424828b83e5aad5813949b6084b31552560894f20680553bd10f5ce0bb45b4815ad726ffd665a4efd123fd183b4536d2
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422946471" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 10394a8cefafda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000763434efcac350458ad8276710019d80000000000200000000001066000000010000200000009315b13d862eb5ef8e5f0d890a40a6f2ede1feb161e1b4736afb3d404014d982000000000e80000000020000200000005d39a7ec36c53e1a09bcc05125bfce1f1f3b1a34f9653ce840d0d28a60c53911200000001f3fe4fb812b6c6c53bbfecf0b51aee1e08dbe4cd01ea5233536f3ce26f8428540000000164e99a2b79c3b5bb2d4df7230cffe156c08fa32e86a8d54aabd7f200dbad1835831d3084208e67e8316396d39a034549da98e63393bad4aff0e5d478a5e06c5 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B7E53751-1BE2-11EF-B804-569FD5A164C1} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2136 IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2972 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2972 iexplore.exe 2972 iexplore.exe 2136 IEXPLORE.EXE 2136 IEXPLORE.EXE 2136 IEXPLORE.EXE 2136 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2972 wrote to memory of 2136 2972 iexplore.exe 28 PID 2972 wrote to memory of 2136 2972 iexplore.exe 28 PID 2972 wrote to memory of 2136 2972 iexplore.exe 28 PID 2972 wrote to memory of 2136 2972 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\77eb2e355b38b2e9ee234cd087086fe3_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2972 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2972 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2136
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5edd9a0b82efcc53035119bf6aeb42c70
SHA1a8a4f8980d5118ae6831cc43b601d9d398e233d2
SHA2564c7f80787bdf9e356e4017ed1f6f0ed3b79d3412d26f1a7c92ff5ce9d37b50a2
SHA512a79ec978a53e267401fd949c2c962a2a18c8affd25cbdccc321d1a5438390378156217b9af466b4cdb926fe7328a2e11f92dd76016a3f0aabe7f4ef61f3464b9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a1dc6ca7dedd4fbaa35fa6c84c018e7f
SHA1fb9a6b8b7784058d3f8de973042668aa0947b459
SHA256d8f8b5330b4365917fc1d96969dbde5d946257503709a46cd7ebd174e5832064
SHA51275c82d96e3a845b1c4c1564e58b9d280e9f9a840e99630b7e79df3d001b74c0c027b25eb7176a8d8bcfbd8c048433af81664fe43e2db8ee170b296e47397da78
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5102a67b3c7685dc57a7526cc610db47b
SHA10af155c097be2201bb6c883119b538e458126f09
SHA25651977e4b9b4c81f24238676706c588aaec107ccaa85a75c07614dcab77d59d2c
SHA512ccde1b9a9636d82d012d844f7c6b7352ed5a7e26ae6cd9291b0182c986c1bf4201afe1422a58e566234d8044072d00df4d442f255372323413537c2f527a0fcc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a9a8f453404170285655c7cf2531e606
SHA153a93daaca4f741c828b45ba93e449140abb88c7
SHA256922de2cc6b3d70a67a6c59f90c3b14bac8f9eeed3115feb77c61efb966d86811
SHA512651f04a15438731e3b30abc4672d11441e8e0300fad41e358b428b3797b92ccdab56ed588791639a85776967cf2395ae1d337f7ed9433f6da02662731a98de20
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD588ad2f4d5e07d5f3867bee6889e2efc5
SHA1551ec09c0188a79fb746a3bb98916a484148708d
SHA256db9a246c01618daed381172b377267620014978ee2fa1db33c5437a5d34bcb93
SHA5124386a25e9a80658e95741e8224a5b005245b28ec7089c6ab96a76b0196ef7f9559f4419af6e17f07f61898e96b0131ae72d6e9ba56a30084f0050a312d75dd80
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD553b6c72b9b1fb86039fd2473e093a816
SHA19067b83fa163dcd35e5f3d94ece645a88bc41210
SHA25646f2127a5ba2e48d9cf7f0a88eee4576ac6c3900e85ddd5d1f466c891d1eea39
SHA512ad4c223da6b09694d5ffeb6f5ff2b6bd99ca306627dc426b6a92c5f3156c3adac53399de9d54394b2026a7ed9fd2d1501501bb05ff56a405b15890a6b424e326
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD553598698015e38871357e58e5c392955
SHA17e757669841b1a604e917e0196c11668288c75a7
SHA2566c813938a2ee956d5c9e6f99dbdb440e2a0e4de9797c02bece68f4b7df26cfe2
SHA512a1195ef26d1f7918628ca4fe579e8c114d45d972a9ac6c954a23a2eb40d62b5a2c959bd3ca20bb414a7d3eb1857fa6f74af266fe10516a985f5a2a8e55d92b73
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dd7a393dc1c05f3a371d34f3c30b812b
SHA17e3c678d3a27187e3b8108195e29a828494d5adb
SHA256b43d356fe196dc5cc78a6e2297adeb23bb68313b721868f526de264734da60ec
SHA5126c30bd868be4ab38b0e7d563f8dbb76c374b0abb7b3f5c1f17d247ae2d8169ab98b9355aee12b5de88a6e312a9a540cda59a4577eb0057701bf25c7744f4774b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD544513ebb8fb6b42f85e2a82480c0517d
SHA189ce599e8ae1401a7d72c6f4ba3b7e30b4933423
SHA25663fab5ace2a8b50d383eb803cb9e71ac0de9954d84a0b51a1d8da7cc7f306ad9
SHA512f8333a2817bbb0588687490c74be8a4cd2d87b6bbc17377ef43ffed47e68ea0dd433ca975528cddb2c4361a6679e6726f5cca1b0582620c0be58cf9c6e733dcc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54f5be3976afcb6c1890cc2cd0cd92218
SHA17dced21d5045fb2a6d63af75ce187dfb859a14c6
SHA2561da577146c494e64765cea2cfb26205fcab17daedaf0e69021be3484f4d839bc
SHA5128c558b01f4a1722842c7a96225dd9d7554ad4b352659aa9b95daae5c57d315832ec8a2b957bacee4e7b737b3c61827fef2a4295334f948713ce34d537b909615
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58b085a55d5062ae24fdc02201e482de7
SHA167b25bcbacffc690d64dc84f0afd5a09e2292f96
SHA256a5067c2129b78fd13e339edf3c280bbaf3e07f6742aca0ea8d8e0fc0c38e586f
SHA512e53d64f03bbca2fe21c950c2da40fa19d1d6a139d4c0f990fd60eda3ab67a0985695dffb319cae9624245cdb1d362ed7a3f00a14f629d8a282aad9e1b7492a4f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5770ce1a1d67ae60e09946c2735245bf9
SHA145479c4d0a92a3157eb3b78c5fe4074bc8867c49
SHA2569ce3e4d9ecc3d1f56f57c00708bcb8c619aa0f771b1e7783221b603f12583085
SHA512db1dcb8ab699592af6e8de3112f8512b1d0639f404736f6bfe8dd47ec36e195e541f046ff5701e17226ba45eb6106b39c133341483dfdc17d9897c5a09a2d15b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dcddfff1a354564a5a01ff7dd78022a7
SHA12cbe4832f106dd303d5abdcf0ebe1504114bedfa
SHA25679d7026bd761ef471379f8625e9ea2f2b6b59cfc55d3ecee57b6c053ed5515b0
SHA512e7541d9c43fc0859d72e103196c0771e4efe660b9d88f516147af9460b8258de15b607a5194ccf556015e8392a0adbccf3ed139a4b70a8f7fc1bab2214f5a5d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD531220276f6b2a6a958814b9771687ab2
SHA19d6dd70799284f59918d941b3255699f05676b83
SHA256cad593302c572eff519a1af27487dc628cc2096d84abc2545272db3019e2a7b0
SHA5126f9a9218ac17b6ed77fd2afef94029c2d6f270ab2e2aa9629679282643ef3e338ef273bc7b1edaef2a3c86827de378c360490fa09ee4770b37b3758a9ce54834
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ddaa4b5df4a5db261939590e8ea18327
SHA1cb82d5a40eb87e46cdb9c54839594fb23c4433ca
SHA25640bef29df3cb9ac472c22a4885ac21bc7a17f70cb4e9abdf21a75593e0700a7c
SHA51252eb7ce96b70222f78db6a9621c4688c72e80a0297f1f78649890527de2f09e61aef061889c22fa3845e704fe04430a6d28aa92daa8ebde647b076742cc7beac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59c44fce91d55923b61ebf88ed88926de
SHA1c864b49798390c2355856c14a40b00c89c9d2cef
SHA256281b5d3348f88822da5e75303102919de9de34b4e94242302cc3fdedfefad9be
SHA512c757dcf1cb280d7f478adfd7f10be96099a8b1fbc511647ace3a163faa90453d9fa7f7c67f32dd8cd5c8d874864850c952c13619f1165a98e95476228a76b38c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57eb965d7092deeced374a177bb6e1058
SHA116a0a2028c261134f22372e4dc92a72f3039c5eb
SHA25638757541576ba36357113fec9d8e6297ebea52cf65830156eec6503580ac976a
SHA512e1caea08b107b8b1e696c1f8151564915ce89514d2150913f38b06c7ba15619d7fe7d39192361026d5d00e83b1ce2f1412d6fdde094531f0c6f99640fefcb234
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ea9b36bbeca8c9bdcb9792bb9ba55496
SHA10fe06c9fa58a2a5119bbe4b37b376eccda4b0d84
SHA25616098e7139f6baadf138b40e7bb840dd26b9131ab56fc8ea16905ba87829ebc7
SHA51289e389911a61391d288bdbb867e25feba4811ab6c1716741dcbc942ecc6564129560851ad35d9db15cc190802c40239214cc1d0b76592b9b4af2c2c89ec7f094
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD583e19414813fb4d17b87cb3a259b2d97
SHA1ebee0222fee240e193f85105fa57758350900b37
SHA2567c784d3f408f2bc2ba200221b2c80d494ae5740f15f40d65011950faad241e62
SHA512f47c32498f2e3fb05426152bb8d0f21de1ab419574f39c7890ee53137c4201d7a33af9caaa02ace7d9f5642a95db3a804d55728afea9d1e8d97a1ae3921e6daa
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a