Analysis
-
max time kernel
118s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
27/05/2024, 15:13
Static task
static1
Behavioral task
behavioral1
Sample
7987b1de788ceb960ca44419ba61748d_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7987b1de788ceb960ca44419ba61748d_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
7987b1de788ceb960ca44419ba61748d_JaffaCakes118.html
-
Size
4KB
-
MD5
7987b1de788ceb960ca44419ba61748d
-
SHA1
c7f67e4b0f72e836c8d6740c4fc791b452e07acc
-
SHA256
c10558db44cd2a8833ae5cb594e3ec88499594fb3b4a2144e4ed392994f9e34d
-
SHA512
c4b81d524a4c8644dfdb20d7f1a943ea5a468a46e17f7a125a9144996b86dffd183061164d78ea7159e8fa420b2bb94106de2802c83a75cdffca339fa4a073a0
-
SSDEEP
96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oNiZzIjh:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDw
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422984703" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 90b1fd9048b0da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BC7F3C31-1C3B-11EF-8E23-7EEA931DE775} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e6f90836a747474ab4136390aab5ae5a00000000020000000000106600000001000020000000b55b237c893072cbb9d3cef63e4f41622412e86cec16898775d225972718624a000000000e8000000002000020000000195339958344b545bbbc6a4ec54b769901fa31ec3e93df8e0e2c3998b46f6e9f200000007b8b62910451646b4b49946f7a90de41cd57033752d9f053c702ee57c6b500cd40000000d046b2d7fa67077b431f4eb9f2600bb3fe21e11e2614a097cd63e8b301eccb73923646d1bfb1a5ac63d107306bb51892da77d9cd789bc411c1a5193c61e91b1f iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2876 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2876 iexplore.exe 2876 iexplore.exe 1356 IEXPLORE.EXE 1356 IEXPLORE.EXE 1356 IEXPLORE.EXE 1356 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2876 wrote to memory of 1356 2876 iexplore.exe 28 PID 2876 wrote to memory of 1356 2876 iexplore.exe 28 PID 2876 wrote to memory of 1356 2876 iexplore.exe 28 PID 2876 wrote to memory of 1356 2876 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7987b1de788ceb960ca44419ba61748d_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2876 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1356
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD552f992fae1a038ae396e7f8aa8577bff
SHA135b60a8f38b52678fe7ff6b1a27021cb05bac083
SHA256ea2d27b9a68984efa58a58e2d0d70100a530aeb159593a7adb3b331cd61a20c7
SHA512dd12c6f42c7df4f2d031e1f2d4b00974f1479a0d7e32fb51a64d98cd9d18011263e68e7a38ff181acaeed20d9fd272ba47e9f40ce763f631830dd588c0c9b8d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5266944b8c775d0ecd2a80240cdc65763
SHA15ca57f76639ad67128205f0b20ac3c4bd01ca30c
SHA2560d6fe13afbccebf043821624d1fe6113827ab8bf5e293d513dbc49dc3d1043fa
SHA5125124fafc95ac1b9d9bf0499dbb00cba2a4f5b6dadc5a746ab0d5b20d95d4c5b24aed147764a4e7ebb53a75a4f3190c50f95c057f68cdc3cbc6c74bd702c3df41
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f04309324f2af70afacdaca4fbe17a44
SHA1347f04f602360479079c294ad5ad5c0553de65d2
SHA256a16a793f5529de18b9ca33c776c37331d79211db41c60f1bf7f7ef364e18b447
SHA5120a5c8163a0d65e7f331dcae365818486edd264958437710f7fab0fe17779437939926972c3c6150332499f34739db4f93e1f367c26a9947dbe82f083991713b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD580308767b5b73f6e90b66997fcf2ae77
SHA14c033d59f9b9a7b0972792017e602ad2872c6c9a
SHA256d097600717450389efb73b12720a4ae232ddcae7f2a42a17bfb26f15af5cfa43
SHA51273de2be9e0c0380e2a7e619f0f2fe3a958790a1bdddd628ba34b24a0fb642ebfa1b9a9c4e7a605b005c8f44b8c3a1e731436b61261bf6006af58675cb8596831
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a7ee715e907f73a63d751de8f6032218
SHA1bc23d89350a52980494b94eea7c42f20e6a8e0b7
SHA256239ee1b5b6ce19a6edade8d388ead9b915d04f6133262583db0b7a234b3bec7b
SHA5121e408a811f1f79b77d89a82e22f501f08e2a75894a8fd921e277df8f47ca4042885f1f803c38046ba4018997d644efddb6c4b2be0ecea12f8a359e305b4ef912
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD591684b60fad0b97c2b908f4389f16424
SHA12a084069cba81c3da39d64fe33244164a855d273
SHA25694a1c4295504873eaaf33f3dc4fb02673becec2c279b6461bba7974cd7e84c64
SHA512e014a851f05e181bfb5235e7cb007a75173e9433a78e54847f08764f8fe40e2181edbe27b1df8c34465b7938895479b11883c9b052f2118a67b1a48f94803b3f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD560650c3254f2e45f77e7bd4f353374bd
SHA19869cf38562dc673ef06e23f76f827f666913fa6
SHA256ef9af77f794c13dbf72e0900166d9eddeacebc5f39acf7d542bacc7d56cd5570
SHA512b9127ecb306c2a8b7073c882bd60e1be87c7e831299863d937ef4935d87295a29adc3bec8d24ef8f043dc67fb4b11cf08d34bb240d440c902fe8b2fa0818f335
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52090ed5a23c117f5d104f2c8490a76e2
SHA1793b266d61bcfb81f813af50c6a8f2df58737848
SHA2567197975bde5f5e281b34cf2e90b5086f444088aaf0411b145b175eef566726c4
SHA512532107547e1b444fce074b2279d7833babfc8287cf1e54f481e3401cdce0d69eafe30fc3383f82574675d035d3caf910f7392b3d085a671bbddd930fd9f830ac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58f507ca5d3f3198218b90b4079e8387f
SHA1aecfbc4903bbc0aea14d3329778837818fc319dc
SHA25639092c7ad31467fc3a48ec67306432c0a37e82ce208ebf67562f41bb814224e0
SHA512c73d1dd16871149fdd7300640e6569fafe8978a10678012a360944ec235c04238b0a19cca8ce4e3e57119039c0aebec6296106df76ea9936309706fdc194ce09
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD544bb6fc4c7d92951016e58e99b265321
SHA17497edf7c4dceee154998fe4d87d0f272535f801
SHA256e3d42c0c009544887e9961ef1d10d14e946deed584a21355518e0b32512851ac
SHA51245e0dd3b1fd70e464e2fde3088f85f23f16e789d30830f66c12ce406a11f1580ffb54b4156670a30f0c038138d6f5e05a77abe04650dfdefd9076e2308311138
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a3516586c73852a7a355171e9be15e4c
SHA1eabbde6bcfa7c7a123e7d6c6bd60f6474e8a7a19
SHA256a2d6c3882b7fb4bbc490f7b8c1e9a9f582db20bb72d78917e16d9c814a2dcb7c
SHA512b2eb570f6b880128f5b17eb85ba8aa9a9b974acda5417f282f8dc77d3eb42c5aa83c70e185a6192972f9303ebfbfc6731e67aaf545afb903173b7f9236e2be6c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5542372ab5898b3b1a8bf185465ac1f12
SHA1f00c76bc09b55e7e575c62ed9967da0787b42fde
SHA2568d871bc03dd49fd4ed3b5800ae0187cee172bcb3f08b18f8919c115a8d36cbe8
SHA512d5eb0aeece26f8483f5cf265039d481ee010b508fbbb91b709e4ea282db612a7057e780ce6f1eea85316de5bf8aba1cfa17a8e08c5675d5c5c2522ed3a98e326
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bec37899e32c7c6a9c7ce0191c0c5d54
SHA1e7ce3abc43189ee2e3f4defc8e1eb7d67f379593
SHA256afec57867edc9470a80ed7573ff805b02114b017dd329269452747ea3ac1d761
SHA512021decada4541fd06cfd7bfda6ccb548183223cacbe5d4ed6a52581c4b66fcf3252331963c241daa4a03cbefa07c9cb3751f43745037baada94002260746b30a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58dedcd35c92716dd66316271b4571a9a
SHA1e5579d342013766ecad6579bcefe0cb4a6b96e9d
SHA2566725132e9fb0c39b9693f764c955fbb58a7ca6ab072619bd03574f73f053e0e9
SHA512cb382cc77d03dd83ce2812d83d9b610bb7e0725fa01b48d7bb2cd5c1d5f8a89117911798030c51cfef41aeb5e66a6310337da756c56ffbb8cf6ff1c45d5fb6fd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57f994fc76e47ceb828c78353680de7de
SHA18a3ef20ec9dd42dc6926be915c1486fe6d8da084
SHA256a560965c00b07a346c6f4d994c89603a43a0bef5313143245918ced47eda1f74
SHA51267df49f8d7deb8618759e0c409164b14a9b1ec5da7385b9d8c22252d93e3bf64b805496dc667f218e5188f39fdf38283a9c69d2186758b77255a34dda22d145f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52063c455b3aed7597f52d93045c57b51
SHA19233b80f974bbf1e58575de03a7ff4fa6beb17b0
SHA256f5963cad3aba05d5b2a96afcd75d383a589eeaea376b65cf2a32a51ab79347a3
SHA51205f731c4df5874dd10699c2c5229ed5b2c392a45e01de228440d00f0802b31be5825c94366ed34db243d9e48766fe7447a727c7aaf0ed00464be87feebdbbf72
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD541cf252018557144b2b5b04e9a54d8b6
SHA13a0da5b3154f02089236baca6bc5ed33a3b59ebd
SHA256c7e515a04f724fa571bf9037ff12245c55d4c05bd7b49ad0857c21bb6a402a95
SHA512ce4e4a0dda29daa8f4282f4e323d8d4f67675a06fec629de903b98fa0f97dd2a7c5760d96e40517279006886974227ebd389b8b432d7ac925fad23e322dc8e25
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD528bee34d7b0fb0f4fbcc74126c6d9741
SHA1e779664e82ebf8db28d14f077c93fbb3462266c6
SHA2569784ae91e38efb8b10dd2d73797dd7adc7e94d52125a576ff4571901886e92e5
SHA512a78754a560ab1b33409f2ebfae23b3eb0d91139ae2fc671242e61ad060c69af57ab7b42e3208c24a63ab5492e1c70a4064ab4f2f6191c966c35c46091e404849
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD572dc9803bec9c34b69369b8bc3dd5615
SHA1dc9bca213302883b9f679bef420a52eeb4b68e7e
SHA2568b0d10439f2df09bbf0ae413d24ce3a8b92eced1c43110e58fd3c8417c3e39dd
SHA51284caae1402a32cfc7b606590ee29da64fb71d1277be3eb2b974ba7196bc8b06ac4cd35b43cdfb945f41ae7601d42f84b3f7daec3766c908e82bec311573fdd8a
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a