Analysis
-
max time kernel
134s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
27/05/2024, 19:07
Static task
static1
Behavioral task
behavioral1
Sample
7a32d6a8c4950641d56fec8aea708250_JaffaCakes118.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7a32d6a8c4950641d56fec8aea708250_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
7a32d6a8c4950641d56fec8aea708250_JaffaCakes118.html
-
Size
3KB
-
MD5
7a32d6a8c4950641d56fec8aea708250
-
SHA1
e394601dd2b7914481011df44bd4758f5d24cbc5
-
SHA256
40b9bca9c816a1342cd6b0035a09f3b33677686b56c3f22c587a305ec4fbe3cd
-
SHA512
7629264e702313bcb41c03db136cf8af2b4374eec218f8dc8e87b4f8b0aca60fb7a521926684e5a0f6e966b15f95f9052e34ed69d5e877bbf27e5c068835cf30
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{6BD32F51-1C5C-11EF-B411-768C8F534424} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422998742" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000082c51b95f5e76041a15c58469be850c000000000020000000000106600000001000020000000ce049f111154377f0ef985801c636094f66f6821ed90235d867ff29817a8adfd000000000e8000000002000020000000c3ba03ea270c37527f9f8dc45b83598f037fdd50a328e8970d873a29a2350cc120000000e22df419350f2b11ed5f972639212334fc15820c2f466741ad5b479cbc882a0d400000007231273b1ddb8e5f42608ef65caec4366d6bf52f49c266982d32c6a82679ceee28a9d87359b0b67b541b3a2bf13799a451db4561db2542e1f3be85610fcafea1 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 007d8d4069b0da01 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2240 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2240 iexplore.exe 2240 iexplore.exe 2640 IEXPLORE.EXE 2640 IEXPLORE.EXE 2640 IEXPLORE.EXE 2640 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2240 wrote to memory of 2640 2240 iexplore.exe 28 PID 2240 wrote to memory of 2640 2240 iexplore.exe 28 PID 2240 wrote to memory of 2640 2240 iexplore.exe 28 PID 2240 wrote to memory of 2640 2240 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7a32d6a8c4950641d56fec8aea708250_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2240 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2640
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d5242caa0ee4a9438b7cb49cca9ae3a1
SHA12c287af46a8b93da4e8436c10b5797884a8ccc0b
SHA2569569ce065943bfe57b0cf32d03754b49e20c29d5269c328643933b165c011ddf
SHA512236fff6e9e7c95bc7f88ced7a3f155199a287f1f15d8844d0fbbfa7ca9b188a9d9cdf95275e8a1c6b45f4451eb86fe6d594bab8aa131ec5dd21c1b8218517eec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f66a16bdea93898e491c57d040030a1b
SHA1616435e02fca2ca51850a2e2bbd8c05f6b51eb2e
SHA256e797c90f7211eba22d29b1d26ec5bcfced3660b695d805bbb210bbc4329afb75
SHA512b707d91ec8ccde7d8e5dae40b2d882c7136e92d751ae742db77b97be8a907b47eb2abbcafb845cdf4d3388967acf4401bba78f56f22bf70005d36db5960188b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52e053ad20843c5e4458845729672d75c
SHA17f0e522282d6c6f3b86e68ef96f645544cac5e2b
SHA25613c6a3a81e22e92760b342bb65505378a709ed55a22423c82d5166b072849521
SHA5125e8a0b36c00e08e332617d3ba2c756f17cbae13bfb7d2205513f41c24a99132a71470274aae088c82635d73a75868baf13d55e8291dfc04f1ce55dcbcc5c4e62
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f05a29279f3007f0208ac47b315ff0b8
SHA1fb0cb5f9af24c5a065ee6b1d7ae9e1c1bed26895
SHA256a49e0fe062685c1be11a4e5ee24e2f927d05dace5acb0029d92308e740150954
SHA512ce7ffdfa91af024a75dbee0c0aaf58363dcc838c38f47aad112e08bdec595852b926e85819b4fbbee5916bb2fa0b47072cfa850ae5ec430a43ab20539b43c653
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e0e9b04a2acce4f64b81934d50df8d43
SHA175b0a3a68f920d2cfa4d335aa7ef4c74342c21fe
SHA256780c8e5a577e10b8a074b7f417166545a2a4a526d1c0f1676050301ccaf093c5
SHA5124206cd888478163ffcbb23fee5e763b5280baf8a1a42d86ae7e7d979d2f4626a9f1c532d13852bdb34d1c4748ac6e9417403714bc32ef04be68f1e89dfcc910c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD512203f6bfb1d40cf753459ab7e3cb59c
SHA15610adcd1e0d03ad7794447acda65915ce5b7042
SHA2560d05f0f14f77fdb6d633fa4a606c38311265f4f43924148280c3207ec1261e10
SHA512266d089c160a0f19e2e07c2bf8d1964a599098cd343dbcca7126607857fe20e1e6418e0166c27fe8a988f6d36649c5bf1d370af932ea1231b76af95c4dccc002
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD557ce5ef445d29e72e722a28533b9da16
SHA1a4d89cd98ce7be2abd45be75650837f55e3489e2
SHA256ca2ac43b41f0e886bc3eb5dbe74d476000845d719b288d9ab63a3057abc82541
SHA512da4f699d438cc3d55d05d761c989b5dccdebd78718660789b0418e11781048119fec7d48e5de4a2f70ee667d1a09a85adcd5f18cd505e62cbd57bc49cc1a03df
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5858f5153120b1f0872c9bcc868e6cd69
SHA12930254e36e93bf224064cc9ffe67061bfbd01ef
SHA2563a3cf1f53c14b77320aa65b352b3ac43792795b82a9da746a666d6ce92fa8e9a
SHA512acbbade4dfef8ae63a093fba7d077e3e5ceec0dd10eb1abdd7d5bf4a7fd4201d676a414ce030cd09a2b1ec397b1caa4d0f2e9c9852378ff9fec8de828a4e5a3b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5790cfdacd7fe4fbe492eff174579014b
SHA1c56f61c631de4e6de339bf7bf2507519510f293a
SHA25641e3d3268ca7775084b8f95606a2bf49768e04bb7be3fa032e11331d5f7259b3
SHA512c3b808d4918785eb9bf5757e2b625971a450a378fbf05c733de56e30e3d81a793b1bbceddfc04286eb398e0412f2b9230d0698327bbdc83e0b8c0d952538865f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD559a4d004a60e9dabb7d8df239678030f
SHA15bf037b83ba801eff5a5605b2f9d777d919d4d9d
SHA2569f0e02aa58095067092d995a690a0214e99a75edcb36a69c87e54d061b3311c0
SHA512a2ed5e0d4516be2e353f36bae57f643cbb57b5ae6ed0c6f667ad0e6fad978a0ddbb7a2f0112deb8154809b2dd28ebc28c37445c18daccc93fa960eb8dc6f694a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53eb284b757214065a6be9bd88e6db8d2
SHA15dbba51d8ad43faf21df48c2428b8e43865e9889
SHA256721d7f979a9d5a5e8ebd0228dae4883daab5d23d2520dd1f71800d424da3fc5b
SHA512d6a65aaee4fe3b796bcf3bd3fa669ae20d6ecb0ed4d2e98086a6eab2f82270ccc249d8e2ac07d06af884c3bc5cecff9f63d395db318017cb90daf8f0c87da96e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ecd26885484766ba40868466f2c444a5
SHA1548dfe6fe66eb121b4aec726df6f3ba8dbff9d7f
SHA2565dc21bd7d2f66618c55490de56495c258d3f5332a33870e0344cd5ab62b93db5
SHA512ee012c3d343c410d119ad704a0cd9f32678e67b27df82fdfac03de97839b3f36e9684adccef321631db935926cc8393fdc625d8d099f4b60016f0618f23f6747
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e80ca0600e8f2385cf1a48ad41b111de
SHA1274aa6eef10376d2ddafe7dd2f105ca16e4bc761
SHA2564c1e5c31cbf23158d67b67a75cb72e4549e03b79aa8aa1e5823758f2e329e528
SHA512d240919770b6fbe019e0a513173729cf4cc7b4efaa79eabf110027f773fb340d32e0039a887900f65b0c70afdfeb138ff8bff7ae6b1a09a7a05934ca0949d872
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58ba62e96d405051660ae12defa8c9f9d
SHA1842b9651c5f239fe563a019f5bb1dca8201a0ee3
SHA2568c7331584c6567b266194f760d7abfdc9ba3c3204fad7204e45a1eda4dee1148
SHA512792ac879c41a728d4594d47e903aaaed21bdf44b70cd81411edbf56b73516fdc7475d65728b37d847d56c2463081692e1a9bf27c071b5434118b7af66cd1943e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a15064dee7ba1b5974a0cbe2175213fd
SHA1bcbcc33f6188bf0fe6e1f169aa2d18108d25dc01
SHA2567854a9acfe2b1ecf591a0d02b02e574b6cbe2afabbff56c525fa2f26e9a222ba
SHA51217921e20daab201bf995139d68e77af1e7b16b6c055bba1bdc54faf82a9447e2fc1c2771be84b60eb315431068ed0aceb73d6bf7737ecde8fdb9125f794b2604
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5860ae78e9cc1465c0862b60db74e1917
SHA16fe4682f454c50651ddb53e5875fc9dd82157fa7
SHA2568f953e6b6751ccf8072ee2421a1f54f00a5551bf82412371bff80496774adfa7
SHA512129cb5404e8bfe31ff35435c71ab79c69a6072ba199118149f8ce8597d01cc57982aaf4772c47e225ae3b5029ccaa5dea3cdb0d64b9c76b6f04f34f360c16ad3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b7acf94debd3b78dba40fcff2c682f02
SHA1edfb7c8fd84ecdefb15adfd1a973d3583a19e1d1
SHA256d44950de9aa4cc1a4f34cb30cb2139e51ab2ab788d26f3a6b3da82c078db6bb5
SHA5126eca0148665c8bfd557a27ce2005ff39749bcf59598304ae5ea40135d5f49b41591631c5855f940d16dd03cccb18b003078bbb0c422e99561f9fcfb9c5ab9bfa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD538cb119a241ad97c3bdcd07840d64cfc
SHA10fc6204266f79737321f34647c010f40fcead095
SHA2562993e3a989515beda0262c349e3dd2a9975664acaf3f6ac565cc115f3df94950
SHA512ee91703dc3d539cfb3c2db0123e9fbd02f901068887967b17b49d7c233352c7f0c352d5d9727eb9715883392932aaca7facf86b3f3ecc2ecde0022e4626d6c01
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51c427f171915eb20de89e394e3edb660
SHA10375e07fa54c650862d43a0cf354d27018ce774a
SHA2563b459dff6f0a80d68308e578d642623d83cb32ab6d16ed0f1cb66864766fa0f0
SHA5120d6d94ca9e0a49eb61344f7f774a59f608f6c3db73ce5142f138c056da99a5f081c56c015c6519bc50e8907b0f882c49f52745bff9429c8d64abf9f62686d418
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a