Analysis
-
max time kernel
117s -
max time network
135s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/05/2024, 18:14
Static task
static1
Behavioral task
behavioral1
Sample
7de80c3d6701e0897161d111fc933e66_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7de80c3d6701e0897161d111fc933e66_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
7de80c3d6701e0897161d111fc933e66_JaffaCakes118.html
-
Size
121KB
-
MD5
7de80c3d6701e0897161d111fc933e66
-
SHA1
04c83b8f061cb26bb952b4da55dfca29ab2885de
-
SHA256
6c9f6d7ecf874a1a322405855b273725ea236b2af57b607595fcaf85e5a84b0d
-
SHA512
ecc04fb5ea2a1a7a458fd5ecdcdeb02064a0715b4aeb7084c09f4a640d60efd1a6d3292b565d402de2b8cf5c74ae9b172016ddd5e60a6e56a4c0269c6064c4ba
-
SSDEEP
1536:S1jSyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCW:ScyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{15A63061-1D1E-11EF-9F3E-D2EFD46A7D0E} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 802c2deb2ab1da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423081921" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000003f8c5461d727244a80301776cb898b2b00000000020000000000106600000001000020000000f9d1662ce064b8b6b3a124ad4d524847882a2d7198adbce6e434763c205fe04c000000000e800000000200002000000024fc8cd344596abcc0e62cd4a187b96114ca262ff835d0071efe00564b4730402000000092d28648281a36197923f1308a8a24237d0980be53885efaa1b496820f7544074000000014273fbfb3193621c3c44146390d81cb5aa4c619b08dcaa88b54be35e6457c722ea9e14ca6ec878e8d3c3efafe684296f6ca9658ba6a88a96e3869c28cc222f5 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2200 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2200 iexplore.exe 2200 iexplore.exe 2944 IEXPLORE.EXE 2944 IEXPLORE.EXE 2944 IEXPLORE.EXE 2944 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2200 wrote to memory of 2944 2200 iexplore.exe 28 PID 2200 wrote to memory of 2944 2200 iexplore.exe 28 PID 2200 wrote to memory of 2944 2200 iexplore.exe 28 PID 2200 wrote to memory of 2944 2200 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7de80c3d6701e0897161d111fc933e66_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2200 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2200 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2944
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD521b7555b02174f75830f6870e06d6852
SHA1b86b4d3ec52b23cc3a101b880b09ab4aa4ba778f
SHA2563996e15d95ee7886079c9901ed1cb98f839dd33337918a07f45b9801a6103c90
SHA512c96c584dfe627fdbd1295ac9ac74f7364d9f379d3abf3d2b301a7621efc7ba719734d99e9fc2eddf83a5b12aa8de2812e096decb5318031d7a47066626709d09
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD566103a9deeab321e9a4eb7e052e9b8fd
SHA1ec460876c9e525b1d64ba25816647ae86ab67d4f
SHA256aa8b4029237105d2245521754fbbe8cd56adccfffc61b8635df533dab6e1d4f0
SHA5120a883bca7399ee2a5ee47432faccc871aa5c71f495c23bd3d501b8ec0978e10ca346442ad8d45261367d0ffbeff3ece305b112f4e3bf6d7c1377efe9b25d415a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e75d183d89ff8b2381e4f70b9d650c4b
SHA1e0ecc1adbdfb0cc6d5ebafbf167e649f03e7bd5d
SHA256b7d4d149481bf9fb31fd2f9fb12a3cd3281a86077a371a03d68d9c50172fa9af
SHA51289743071bc544498990c7b8b8eb144ad9d8285338899af1061b2be44d0f1b14192645a70638fa691f831b4a408bc3f09783de22740eda99282e17adc86b859fd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD525c230c791c075adb01f09660cab4986
SHA126064a0f14222ff09edd2669f62fce6ecc9fe753
SHA256d79e398156acb94301d27e247ad0699047a69b7c65103b71d9910efd3c1297ec
SHA51251d38a159fd6d049436ea3f71f371057530bc147446df2bce51c4654262fdd06d443f95a28ebaf3b34ef3fdc26aae7cef9bd05877ace0200c19bdeff1a693aef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5310811bb93da218cdd97d7f538c7446f
SHA1e0bc58f577bb46eac46fa69e5f7549f3f19a465f
SHA256e0e6c5d954f6b761599af5f25bb3221b17368a6d6914785f9505eeab8fcb6a54
SHA512e4801a0343e1e16cd88a494c26c54fb678ce094d76168a222462a26d0d8df7b60f7cfd8007bff264cf9c2cfa5190cf04d9d4b0503df68e5e1e4aae1c7d2771f9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f281bbd54fcd47884246332d83c5bfb2
SHA1a46d9654c9db79cfe51ead13a0a73458cdf0056e
SHA25644ba86128d294b4419834b671ffc5aafd9d853294a4854f7eddc2d19d6128d7e
SHA5122382676dd9ae05b3bdea94954b25a9cd08760cd6c5f4d746b1a81ab6c4c72af9b72ee131911dae1442d4db4fca24a47876a3753bc1f00de4d5e664b72e681387
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5503b2b1b5e68211d5e7e0e6d30bf057d
SHA1f6bf7fe8bbb4724adefcc11c14c5453388a75e02
SHA2561bf62a5634f93b79647d8654e4b9f90e8c10ce441bb81e2a0eeac3c6e65f0f5f
SHA512c3f5a66cb8e3cd9c41ec2967643b2af5e65503ad293acd61a6f3bf6a0e737e4d003cb329f032a244336a553c55142711a9bd4b8d711ed5c2691b2e5529a8806b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5993b38c008754bd1a4439b90a13b69cb
SHA121e97feb24aecbc7d3c04dcd7147d1c97ce3be7e
SHA2566d995f8bf0232ab63182c5eb27e5028f1198ae2783d7e8ca12e043a34589700c
SHA51240700dbd74f28a6554f9deee168c631b8f725c0fd89ee143419f973ce73a422ddc0e6bb6a67dc9dca6e450fc34d7a4f5cb14e0a7f414de51b75eef521149d0c7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bbb805e4cf106b727c81d3a1f357d75e
SHA17514b44fa048ff3bf6092c052c98bcd5245879ef
SHA256348e49740ec47f23892c4aba96fe79d098fa276fa3dd34279882d41438246933
SHA51260ac23a41bf70f46b87fca5db99822150e744246c8a7446a2657e4ecbc92ddc21d82582f9091e0910a9d7db86e29a55f360b2e97c091f96c479916cd9aeb7f6c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5650e393e3e7c22615416d5ae96115c4f
SHA1a5716da2ff25e37ff9ec661d3e41ae46de9e3177
SHA256d5996bb15a51ad40adcce499ead3a41491d7880f1ad160f909ebc2b26ea6106a
SHA512178f024f67337adf0387c1d0ef8b2a7392c429f2b5015fface9bf1b1099950e5dbb910d5b8af9773ebb256368b67ecf00bde83e45408181c32285ff7de7e8cdb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5958dc4e023890aa396de450c92721d6c
SHA193ff372197aa962b1a7432cc6a65e44ff56d6eb4
SHA25657d0b2d2b61a02302e59be912e46d3ddf1129003912539036b5913f68e482b7b
SHA51215e133545958428326065aef1e50761ca6e618d2d1605d39199b553caf447182a73b09e810b93be9c22ceb5490032ee85040912988522272fa12c31f0127800a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c81d4e6ba05f61c0ebf014dac000063f
SHA18bfaac5dd575bf9963bf361ee3c5a60bc0bb819c
SHA2568da43f04159bd5f0413a1b4635c879773402dc37f6031fd4218083a6710b78e7
SHA512a72c34357350eff4d21e4af919f2b61aad5c4957f5a3bc17cb1a355ead0cd35fdfb8551c58c2173b749c479f6db1de32ed09774e769a598b2e2a3d0277ced96a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d540377c6d4b4b8e20ebed407fbe22ec
SHA1e11715f8462c07cc5241e29dad2cab0635c1d3ea
SHA2560ca6290d2175469d904acae0eeac3ab93c5a8e8ae2ec0507a9f3efa0bc883378
SHA512b89016044796d606382a28716ada73316829ff0cec1342ff6172d60aec173cd72cbd6cdb9e38f5e2e496a8c753d54baba1387469479b398e6c7baad78d516a9c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e6b9f2dffcef57aa07cc6cfc22491272
SHA1908083fe57841ba96de6fa44ca4b17fce61a1f70
SHA256ba4a4c09d775e0b035c81ed83784f5fae2c10191090319885d2030d26f34cf71
SHA5129141eb55162f8f47a579f11f5910b4ba485aaa4498e822550809b376708771f3d68cd82f4e4a31faed0feae15b92366ec3e82a3771d9bcc0a59b94680f60fb60
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50a3b22d32dc253077ce8b80067c1bfa0
SHA1af61c85fdc79e8376b77624514c76c9e437d0ce6
SHA256e54132f799783ff22ebbc4a3da05801cf271d53e120d3a5312153b37a6ef7d9a
SHA512aa87fe08dab87a9886971c89706d69c64452091abeded01c8ab99130b0cf9f9f69ad79736207de99165903a32f1356d0e2a8d630e9cd08e1cf0183651d330d63
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52e638d165c39934240f78136e2903730
SHA1475b863aa9e8dc6e2a62fff9df847207ad309807
SHA256717fffdfb1f0aa2f50721924141b3f42dfea29f1fcd988b60c56a1ec6bf72c72
SHA51283c4415268c989030c8f47da81a2d2cf9e65e03147ba680f0e1ed8376ba269bdf4f9fa1b700e67c8309f40e78614c865a9961917c1ad2434de567dfc63e01b23
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dd3db252d11b8bade94a8f54df392d8d
SHA19bbf405a7ebd7dc1fdfb2ed2ac885d51a65b3cbb
SHA256efbfb133d920f7d2d104a7816f44350556db1518868540e106af0a574fb156fd
SHA512373362fbb3bea38a96ed54f5935ad449f7062697b89cdfb12479d6029d46e1f19ab7a9751e4ef9deef0dc3c97f3acac89376039c1b8919691dc61ab72ae20447
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f9c31e6736ab3806aca37bce1b649b87
SHA1f5377083360a1181d802f0ef87177a13dee664dd
SHA256ffdf900c3536ada902082715ac789de66cf10646a65a9096c3f42ae3d9353140
SHA512c72f80d8c333b85e8a6a1e9fbca0585efb39200bd16ca2a5c6a4698316a4eee160c140d8cdc79079bccc32e14fee2b26fda65ee83abef1930cf893db9f384110
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51596b3cf558cfebda5b19eaec5a0bc1c
SHA18bf266e8de867c3d7d9b7bbdb8ac9d8677c53511
SHA2563c8c9b2b0c58018dbe73a045b8f32cd9cdac371a53f494a043d74e1b366b14a2
SHA5123988046a65b500357b114fa37f117db15077f5c599281a4636e0f46e3bae62b4e7a6511cf4806358a6e61b6a81dfd2f6a1d5e4931cb054fb600102884f093432
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a