Analysis
-
max time kernel
136s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/05/2024, 08:24
Static task
static1
Behavioral task
behavioral1
Sample
8017f111213a005ddd9c4a463567b3bc_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8017f111213a005ddd9c4a463567b3bc_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
8017f111213a005ddd9c4a463567b3bc_JaffaCakes118.html
-
Size
3KB
-
MD5
8017f111213a005ddd9c4a463567b3bc
-
SHA1
ce41f0b6de91963ca643861e16b34c8468c3939b
-
SHA256
3e03e2690cb69d61e66c495c84a1602969f1b88493da04cb33e5be2be34f4510
-
SHA512
77f0f75d01b7829cc5f0b07a0520f2c9c3967a14f550d6301272ff1b86251bcb46d0b206e1615959192b0cec96935db919e05b66f8a4867120ad18b8f4ce7218
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423132953" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 90d02bbca1b1da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000008066f809cd8a0741b65a1b55a7add19900000000020000000000106600000001000020000000f9c790b1df51b25cd1d9aa2f815f75eaefbaa37e4019212cf330e645c6d81d2f000000000e8000000002000020000000bba299f41c2a5006d65f496c0bf72d6d627c34bfa1e7070b3ea6cbaca0cf6ba620000000b205fe0e613f8ede2321fd5d06cbf20c1f586577bb2c9e230916010debe79eee400000009b86177fb64ce6296ca2bff5008466c59f3202468ad8312342f14b0f52ee8dae0e16f7723fc560cafd823f7abcf529cd2a0724a3d0a324912bc2a67e32893c3b iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E6F68E51-1D94-11EF-8C27-FA5112F1BCBF} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1760 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1760 iexplore.exe 1760 iexplore.exe 1296 IEXPLORE.EXE 1296 IEXPLORE.EXE 1296 IEXPLORE.EXE 1296 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1760 wrote to memory of 1296 1760 iexplore.exe 28 PID 1760 wrote to memory of 1296 1760 iexplore.exe 28 PID 1760 wrote to memory of 1296 1760 iexplore.exe 28 PID 1760 wrote to memory of 1296 1760 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8017f111213a005ddd9c4a463567b3bc_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1760 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1760 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1296
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f2e45844180841ecbd42815aa6d5114c
SHA1282103f5b0f1bb4eefd91f6b03f8cd97e97fd31f
SHA256b443f7d858f9b3a6ca1f62f5ceca89cfb0d2f9cf072c7c1ac2bbd7a40b49560a
SHA51233abb4ed0bcfd1471553cf2f72ff4bf51a9efbb0cde1a0876405ef8b2e0ed75ed81fe1a464d42ac031e06d18181e68e73c1be8c0961932b6d75f1aab2bf8baa1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fc1fa4557e9ac6d3326e0ccf05fffa71
SHA1a4a0ac8419e90498440fe5cae65f48a31db45abe
SHA25621d3feb5eb5bccbcdc2632450c7b5482ac72d3e0c74cb87cf8fae9b92ffbfd1b
SHA51231fd2df7b1cb2b09983b6dd428e69177c2df844ab8cc9469a34bd16d1e10465949b9e539a56d2b6b5197a734255a9973c2f8fbe019047057a80d2645c6aa771e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c606293710608e5d053e10417eca506a
SHA15e86cea6318f46d5071c52523cbeb1197cd736fd
SHA256e9d917bb09248423a651b7503aedc28214c6426a8b4d88ef001e3d57670b3606
SHA51240747795186808b9edb8ea3efd13a4c81220fcefccf7f08384b4fbd3cbedd949de1fb825a172d69dd1e18bad4dec141177ffb8a51426d5b8eadfcedde5df4ffd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a307cc2a4c82cb52542c88b1d1daa66e
SHA1e121e590ea1a428e0c14aede07ddc7881a3d11b4
SHA256e591c0bbd03dc53fcffa70caf4dab5be467e2858dcef79092732bcc02a2de879
SHA5124cd27e66d41cb84fd36f5d643465c951021b99cd5fcd79e162d104734f85ddb0274ccccd355c41661a8aa1b65490a8b6104f8cc56b7757be2ced0f8e6bf3db89
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a8607f35cc6c0121527f4e4e46be58be
SHA148218a3c963efba4b47b42a4e053730204ae4672
SHA256af232ec9fe06030e927be27f90986d4ef259650212a8a02ca881f9b6091fa09c
SHA5120df54bc03a30ab03c851781350054fe726228cc8fd89b70c7e2c08db9e53f78c498af76c571e9910ab51893d7bd118422a1e8c9483e92394caa81d5ea85edd1d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD524e927a2652ccfac9e67c8f33ceaf2b7
SHA104b1f9727e7b9b0c6207035600a4f21f71e7567a
SHA256e355310955784fdef4fb680214495920595d407a5cf40a744a4b6ceeddcb297d
SHA512e929bb01e65b2236b3c8641a7c7cb55eb34351edcc9a152472f96ff6c209cc58e3d6a90fd3ee7af85a5aa7f3202b3070f9996d0ebffd80c0010b4a37b0092de1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51e7fbf50aaf62c7335f855bebe119ce8
SHA178cdc318a790dcee3aee21e1fa0922620589c557
SHA25603fb5231517386afecabe35b9734208155ab91b80ef5c95d517e79a9c2ee078f
SHA512f1517085888f69fe5400556d37b847f719f2ee1f8706d2665e2c0cec457c5b8d974fb373b72ae998963e7cf7effcff59ab75d0058510f8a78d973c20cae6fca2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5294b0ccfed9d528f0aff6bf18e244669
SHA1b03362c523d4604f1249f6e034b121f8851e77a2
SHA256042d0c25b8ebb8cd5ef35873b4eb30dab93fe9e1e91e5d7d5b7eabde80787459
SHA512a61b09d90d85674250ff24c9f516398ef6b2c1394f0ee7e2eda263ca4e466d1c7ba1b2a2563f2453e476733e93a096511cd1d44b60c9344e7d954f289567252e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57d32c68260f9cb3083b74b6216ef6d80
SHA11369c508fe741188bdc452e3b9d08b8d43830ae1
SHA256b205afa251b26826ae349bcb2b08df03a3268a2f9ad6d9a5280f2001d7c8a5db
SHA512504ec42d862cc984813b08f4ba3044ba3813df224fe0022b1750065be1d36f67c028d19e1994f10df5e0566deedccb23fbdce259559a88981743680f66dba42d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cbd4ab8aba2e19b9088b8fee8f8d703b
SHA13eb2ef736bd062aa541c64d629dc490ba1d0058e
SHA256a0a4aef20db26d72a4e6321a7f1c6a6333e02786f28e9b99d2f17dcf57347570
SHA51239eec62b31fe7058fb68adbd5b8e4773a9dc8520db2bf4f87cacbea4429f8661afcd1a622f39bc7bfa39eccf1820d755274dc4faf6b1377685b8de2da5559954
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53d780d93a2ddf1a65e5ebd613413e381
SHA15efd221ed5fa44e819384794f12b17d91985c795
SHA256cb1da7fed257817f5fd0a66249947c95ba720f38e6ba91e17f0c7b830ee68e5b
SHA5128dc926d1a3ab1f4d78d229f8d6bbe5c41ef1848dbb41ea3fab6ebfaa0da361133c22b7543c79d37472baca7cad5ec6964079c4a6be5a662149506ba306c25d87
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f810e6b8a66c8c0dc3af5b9819982f0d
SHA16c51e1dd3d52d494e404233205a6e9dfb67207b9
SHA25638075582e0fac39cb2403457d5345892ad5ffcfc6cd9d5358ccf3527dfb577f1
SHA512b01a0d29f6682427dd7ab44084111b8b2c7ff5d5939c7fd877406ca3bafc6903d392c6642bab5bb7e41111bf12837c24ed88db93ba1fe70fa4fd6c5935f75ada
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a65448fbfa1e8d7a08c9851c00a3ac5d
SHA109ffa4abf45e021f9b31fc537da2561499c7f5ec
SHA256597de0cce621365208f11dcd6abe9bd5f0a49cc4a90ff09b1d610892d868f413
SHA512e675b804eaa8d7c3faf2972feeff0177409918289fccc266c38a399d2020c85fc6b51a6d368477d9407f20a87646bbce17205a5f279134f23af33be356f9028a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c0b16358cb9b8971471fa7f6dcb69025
SHA1b59058bb920c5768d5cde36415514755887f9e90
SHA2561d5a4b9757b3841f2d8603b692263313271fd52cc976c770bfde8752d128e0db
SHA512da228ef487e03a342f0074a027778584d67fd77a2b4c9504299a5bf996051b520ecd09d57f781d94a0e782a37758c0ced6f6682e639bc28e18e5f3e5203f02f2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD585afd5f3bec889f4eeff8bff4bdd66a5
SHA131f8bc3bcdca66a3bec9815e32f40823e4628a02
SHA2562ef1aa57aa9cd8934c09466a43a5cc901c1e8f06a6a107cff70e4cc95b5434f8
SHA512fa1fd808f7f7d29a9f4ebf0e631e3fd4ed75bb53309b1873499dedcfb6f56e1c178e64a93fd9a9a2b75d0ceca295272af37c9e6da5758736b24dc8346ea8d826
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55d541e886967398ce6ba86b1631fa2d3
SHA184f7550f0d91c67cd61f63a06fbb34406d7e3e13
SHA256d459505d7898ae24c5b3f1ae2a7c10e4938093c26af6f5eb6917ac9dd68dda9f
SHA512352910e5d88126d7662e5efc984308c219470dc9a56c244427e2b7f62bf013e5272dc8aeaa969db869342a16bb922be67a22d8bafad8be2175d9ea78ed7d53f8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f9782effdf52be3aa401e6be6a17b35e
SHA12c548ca23be7986df84cc1cf7612e2bcf3015396
SHA25622ba2491d5eda15b34225da6ac8fa46527a21aa9eb3c84db57c4eaaf2a72c220
SHA5126e22cd39c23c7f30e11cc497eabb8813861b454ca3488ff40f2378a399bd5d44d5e26dae7aa8f1a973f36d209801e35bbf1f736c899c56a20da3bcca5bf6fd4a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59f09349a3d0baa40b2b136622e4d233d
SHA1a7c0faa6abaf9cc2560ba33bc92f9e8f8e10cd11
SHA2566970a40b2e2828113fa17c998f712fc2d12de70d3eb88ba2e2a663c76e2c4777
SHA5125a05382808d5a5fc24c5643f2bbe223898b3eab54890d110ba12c4fe29bff3d55936778a721c6b07c4adaf23b995c71a80a25fd4208664cf8469d985c4ace232
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f58ba35061f67ccd0181fb7a127278e0
SHA110f3335e677b48daf4609ef04d595839ad7515c6
SHA2566615ad0d8896c607ed1325b5ccdc86e597c96bc7ac2f7904bc786150370abc08
SHA512e1b0169600fd1cae7e3e09d259d97894ee3175176f15e52cf80c327be0c2d9e19c6cbf6af236bf9d09b43e626d24b73ac014bf1e884c226213067f5f67ed25f4
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b