Analysis
-
max time kernel
140s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 08:25
Static task
static1
Behavioral task
behavioral1
Sample
7c4fc3361adec376beb79ffdd14b0bbe_JaffaCakes118.html
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
7c4fc3361adec376beb79ffdd14b0bbe_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
7c4fc3361adec376beb79ffdd14b0bbe_JaffaCakes118.html
-
Size
139KB
-
MD5
7c4fc3361adec376beb79ffdd14b0bbe
-
SHA1
92c14c7b549ec516d9e0bcda974c64e678e0bc3c
-
SHA256
756a2ee37481537210662d29857ccfd848549b2a5236f35c9801f66b6124328e
-
SHA512
78c0c69892e89ef0e3fed8523eed6aee1aac28e33b9f83a3652157f718c529bd50a239bbf979763ea9294d9445d77eec7c0b99272b80bbb52bfe6898d614e16a
-
SSDEEP
1536:Spdlal1SHyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOZ:SpHHyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423046603" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 809500f2d8b0da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{DBC92CA1-1CCB-11EF-B837-5AD7C7D11D06} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d1000000000200000000001066000000010000200000005c0c0efeb1d52a6e6e04f66b5d7c83745811d7c22763d96a7ca6c985b18e396c000000000e800000000200002000000053953d710b73e031df56b6716e6d1ab940702630413b4bb0f34cc3d0c597a41020000000402de63aa2e203d29a0fd2ee469d6ebca8012f7cdd36394a779cc084ed6f536740000000f48b641fe0620fade3b7a729bfdaa9203611915c1a9025994ec1addbc77e18ab041e450556cef486b78fb4a8713e2e4d858fe38c64b46e1ba9dfbdefa7c10397 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2444 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2444 iexplore.exe 2444 iexplore.exe 2872 IEXPLORE.EXE 2872 IEXPLORE.EXE 2872 IEXPLORE.EXE 2872 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2444 wrote to memory of 2872 2444 iexplore.exe 28 PID 2444 wrote to memory of 2872 2444 iexplore.exe 28 PID 2444 wrote to memory of 2872 2444 iexplore.exe 28 PID 2444 wrote to memory of 2872 2444 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7c4fc3361adec376beb79ffdd14b0bbe_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2444 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2444 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2872
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58141487b14166543a80ab742121891f9
SHA1e177ea191a8ad4747c534a4d86c9a83821b44673
SHA256f759e3762314c5504269e2f72d0e414ab58e902d4732904ed19a8fbe3e55020c
SHA5129ab33742a4aaedc34e29f0be39e6212ceccb603c98cd9a8ebf30d4e2e1f1be7fd5ad455c967d8fab5bcd827ca70fa742fa501f485dfd39a6a402532cf2c79269
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b02ceb378759edb14fd3b554cbf7df01
SHA12b3004fdf13f7c45bd3ba40544823d3c7e25d3c4
SHA25633b1ac28d68a4861c2c5e222f709ce203eaa1124519c9eb404f1570b1f92133f
SHA512405ff35a7f9af043810952eefa0152de92ca0cdc9cca76fbc5d4cdba240602d3ef588343c7b488571ba81b203c0ad714e12288a3e1f9f52f811a7b4b41adf83f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dcb38ec736adf081e68d5bff9923b080
SHA13458fd1e290f01eee043f20de9128f7c81a8f651
SHA2565f460dc64e6ba51b3a9247c0630141c2eeb8d7dccf1dcfa31b48513e1081f716
SHA512036327419bf61500c9547e43d19c2a55a7110485476c0d8f99fff42673fce628074fb27c31460e3ef7d6ac82fe23538281b2452571a34819d21ca7b31b11eaf8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bb9498b304bb47d9305f7427db70d5ac
SHA1a3a701eaf3679b6b0a18c27ccc433115e3efdea1
SHA2565e319e22ab35ef34b61c05598e951774c558c62405ad695b24963901c66e3df6
SHA512f5c9f82b3e4501395de2c32a26c1b9707f80ffb99d8e9cb0c9f1f8053bb37af3c9a785b3a0d82f3aeb4aa1302b10fc16c5b8a5225449f7b98310975979874ea5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59697fca60ccdc7a53e970ce96f1c9fe1
SHA12e5a0218daaa5fcfc179539eea10fe04142cc763
SHA256e796b13fc9ca6047d9d34261634b32858b4056a84f3c24d523c7a8699e5b1b85
SHA512d992f0bc1a266478c0b5a3a6b3ddd987177f7d9b078f32fa170d038771334fdd203ffa50db45893c1a123458876e65ea83ad7f11c1f3c063de8da2019d970b00
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5df490688cc134a8cc4757822cb14b9b2
SHA11253029be598cb857785918a4a9f95a9727eba52
SHA256b81480da340e73b6e2d780b1a26e08bc587a163d4d6e2ad0b939072a281a6d3b
SHA5121ae59291a49944f4ec5e633730c69c4869281833c3a8c96d8bf3a486f39afcb067933b645a656bb73439215b3c342caafeb4e4c96bafcface37ffa43b42b9f5d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58fa14b404f2b710814519b373bd4a7c9
SHA12a30038a755e1acfb37c9afc7830e2db027307c2
SHA2568f245fd883e68f3d3976f17248bde992c1189369db7897d69858981456ebc959
SHA512fe9c461631714513fb5fe578cd7a122cace374613206048a2ece6c2c4e8c2ba9710e64fdd115ec527cd68af8237335772e7eb7545cfa1e68f5ebf345a0e55bad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57d35b28470841ba6e9cee30c1054a9c0
SHA1c9aa5f3d8107011427fd0937e8e20c4166943d18
SHA256ececa1f5f5778e7c9b4165ba45ec98e420ad82dcfb58ef8cddc59ada7c571c69
SHA5124628a58ae3af65e1a1fb72594d4709f5c3c8899abdefb681d8a4a03cb3a071f83afdea536d632f9d8046441d8b12d0ce227ee9179a9743f2663610e26093ce12
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ecd173d45e22ff574b7e1634c3ccb4f2
SHA1885b8dde79dd2604357829e07a4d2f6296779c65
SHA256e4a69464c0d373bcd7cc90309b72f9970644d4427533761ed6a472515d25b889
SHA512e5a74f23b90aeeac34447e67d7de3feff9bd6cf59bf2a41770f772be31e1913167b081f2287ef4c8d3f3397ba0f73edc60618047943dbc1be6559eef27ebb4da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58dffd745ba8f1ddcaaca6de783e895a8
SHA1ae06fdfd7438e0d91fbdf46db00d3ce1e25c3abb
SHA25674af1e4788d78b4fb8a87316ac3e382bc0bbaf6401eece19381e2d5b5f257c32
SHA512bf2aad8d0ed69ff7000883669e42f2b543427b048dda11c29089d5677c4c42e55641ff4f405aa951510bc4403a688b33a57c86bb6f4d00fc16ef9778f52f569d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD537eb9f0e03bd3a31986fd97c9d7485e9
SHA1a7ea077b086fb3e97383bd35d9c4ceb1963aba16
SHA256791bf83fa73b08552f30a6c7a83a6b4a6947603aa9d3e275cb26a8df4a074d90
SHA5127245d6a6c443a9e49273d8f005c70b75c493169b8f774c6ab4fd39021e3fc159d51ff2293b6c047cc3df6b156a992b83ee332f85f60146ac5eb0fac16784a886
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b71e0517afe1bdcb658ee3309173feb0
SHA12808e686bf81dd2d048a186d1ff7f8ad29d849ca
SHA25637d955fdcb349153538a4ca980e5b2b2fbbff54e9207316a5a2ef854c410c08b
SHA512a9f0c3720dcdaaa3abe93eccd6e2f43ef0dcd4934fcd153bee1a005b39ebb4ff1335211b285aaf0bc366ccddebf286dd4af710ff9b076798b9f9bbdfdbf2789d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5832563986608a0855b1dd0580cd5144d
SHA16b47e8d29edb3ff3b8e930e322a1d5e1db9eaf60
SHA2564a1c70f22340efe7712537cb6422960728f17a0252d70b767b2c8297f38022fb
SHA512ab7d8468a5ac65354090141ed22cc2e61eabf49c184d78fcdf44ef19491ff06b646ac9c5aac598fbfb9319341f42645ed0e780f8e72d2d2e3af5ef2c1b032d8a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f10ea82a65b47dd6ac1852e43ecf4594
SHA11e19b0125b874d2efd327ec21b74f80e9aa7e806
SHA25616b391c31e101ad4dfaf18d2b838f94b3db5e23880d2794015238925ab1792b5
SHA512e4a31c9f6ae5391ca6eb937aac0936e71a6c8fcc8405b0bcaed610713d76eb99a1b7d349d0d1ae027c0e340ac812ab0b28c71197b91b1fc38d74449523222d32
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52ad9b3dedbe9364c5bad0623ae99b8f2
SHA1eec8a372bae4ba30f032bab7410a3bb401cd297e
SHA25669ca207876529f30b4e75c77180478de010878a33700628054f97137fb771d35
SHA51255610540882f5adf087e904ba5f5542e00fea4b9ef7541dc8d19a55280ef31f1630d4fef92f8145024322d356ea4b1390129dad163eb2d64429c8f8e63cdcc8a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e4a4a528310465ed96b61bdab718ec8b
SHA1dc35ebec77068406f0f81309637497f3a0ed689d
SHA256e2591af67f7c18907ff53c1e384cdb66d3670ccd55f7b9b23bdb29a06a2cd3c8
SHA512fd486d5e2cc0e5bb6d53689080070bbe2d960b17b4ed5208aae5cd52a88c66baba2bae2f10878bc62751fedd1e2d660ad98eaf9153abf5e168eb921c8539bded
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51d370479abdf5627878b42fa70da3eec
SHA1c6962d0e42591b4eb9d8f9bb2dc383386f1ba513
SHA256851ccbcd7e62cfa0880abc9fadbd7e13d8994c80f3a87b296a9aecc43a2ee3e0
SHA5121059acf709b7b1e260ef5624998d0601835471340956788a4fa64364f8de57905dcb3f8429b0b36e22491cb8af7b81a9d6a9d375657596ebfdfe46a27054e670
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d1dda47c81332bf4a3534d7e90c38d14
SHA1d52d3026c7b48da6ccde6797ec2a99f5a38cc7a4
SHA256dc635158370d3327f38a008e8dc21985952cf5bba9a730638b01d9e5055da2af
SHA5125283f385433f28a558f88ee3b0bc6a6ac7dbcee1d13f738f8314b2a3d654ecd07c60186be51cbe8f16b042f140005f9d0dbb1b17fe3c0fd0d68b8f7ca68eb9c9
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a