Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/05/2024, 12:45
Static task
static1
Behavioral task
behavioral1
Sample
80c6f9fbd30414ac58fba5812b73202f_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
80c6f9fbd30414ac58fba5812b73202f_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
80c6f9fbd30414ac58fba5812b73202f_JaffaCakes118.html
-
Size
839B
-
MD5
80c6f9fbd30414ac58fba5812b73202f
-
SHA1
efe6627a61ba584f3fca4d22d0068f3b871d21de
-
SHA256
66e8e681f82864226392b75bc484c9255231d90d738aba12f447e253f92e2b1b
-
SHA512
9f84212d87b57d6a24d29cb5c5a8e87df4d3cc546968b88e1e31f09d692a59a3faa64029d354680f28918fb143bd3be73c6d894f666c687eb733fb9eaff6ba33
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{5E00B291-1DB9-11EF-A01B-4AADDC6219DF} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000dffb12e452fce54fb53e8c9fb036a99200000000020000000000106600000001000020000000fe5cfac2bfa05fde2895ddf15673a06f473efe9b72a4a791a8b7d222c1b52028000000000e80000000020000200000003b36266429a37efc2de341efde9b91af132100bed96fcbd08144ae7b8a42aa4520000000cdbc6bef15c69c63782529495b882c70164a2d1c12b02ad69555eeba8af7b3f1400000008d73ef2583d8bb3e8db42ec06f771d35e4ad32ace72e51db7378c0b4618aa125e58df90e7ad359e925bcc078bb26e5c85559cf8ebfe4c9532c4da3cc9bc63af5 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423148613" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 40388832c6b1da01 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2264 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2264 iexplore.exe 2264 iexplore.exe 2984 IEXPLORE.EXE 2984 IEXPLORE.EXE 2984 IEXPLORE.EXE 2984 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2264 wrote to memory of 2984 2264 iexplore.exe 28 PID 2264 wrote to memory of 2984 2264 iexplore.exe 28 PID 2264 wrote to memory of 2984 2264 iexplore.exe 28 PID 2264 wrote to memory of 2984 2264 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\80c6f9fbd30414ac58fba5812b73202f_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2264 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2264 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2984
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD559742f6808e0acbfc15276c2d03e3fc8
SHA10c89c96ffe762a5681bba1eda0c8b62e894a500a
SHA25643254da2d6130f767b6d859a8bebb2e5b01244b1042c5926a720d724da390903
SHA51200a1ffe677fc12f7a2c9d8f9c1b86204ff38575612b8e2e976958d133c2e84d7e1c964238a708524085592bb6917b5a3c04a1c50aae096809dee553ae441728e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57aa6f05ca2ce6d406904c1d07ccb1c08
SHA181dd8c08cce4fb8b13af3701743f59f1088232e1
SHA256565f206eb5abbf9744646458ee90265be61d957fedba290234bd10d0e596d34f
SHA51238130d9095d63783a9bb3e306eae0bbd5766c92d8d00acdb99f5467bb0da6922b669186334e3a6b4fa7f525c58c5a560f5f277d5e5ad8a6c338eeb51ebce7f9f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a2e793a9ceba667bebf24e45d3d55828
SHA16e7b3259956e838b0349427bb0c40de76cd4e669
SHA256834e52df1fe1bb2eef11bbe3e846969bc09910372d52ed21dc979324d51e0960
SHA5120df9eb9e62d401ce2a9265da9436a8893eb8d61efa823527852e6f39acedebd88bdc32fdd17cb83221f74bda3054296d93211c87609154ab6fec152f8b273554
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aef665b11b3cd63ef164faa78b0531a7
SHA15027214d69b1b3811cbb056d74494f054b2ce990
SHA25688e04131203047606599f9db966f6414d3588a13e5f6b747ea6ea1c0336a8e2a
SHA512d3d824686f47c1f39cd00049e9e68e1a696de5301a1d8b646a1837a5c7b8584b0af7d6767f1614f2cfba7f07db235ef8bd974a2fd5f08a226ab2ca6e2b05097a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f4754b21f2d2be6f53541b770d3a834d
SHA17ffcf773a4304bb555b227dac72cf27db527f037
SHA256e3e31b66a2e71b78347a3c7cc791a6afca108a62467d4ce8ee8a2454bbf6efe9
SHA5120a3b812f38299b72a53b85f84091b34fc84c3e8efbbc651c559fe984f5ab8576459ee109e3535d46c1a20a1ffad31ba3d98a97576b218cd9af6401ccf52a1edd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f90456585c3306d03023b4b220212e66
SHA12b52c6cc5d3cbe0772faa6f19bf9e19542f7fdcc
SHA2567484795da6bfe0e6eda41331b1e74b28454dbc46f984b8fa50466901c11ac2bf
SHA5124c5019a42fea471fdff818b46a2e39b089de0b649eff757c54f3751e1f9edd092648e01bb91fdfed3f8af05f1c7d40c821fe91dd12469b09baa9842ad65ad757
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55313d823cc3eab2c70994e31efbc8d0c
SHA10f10451732230325fbd5cd8d090fb80b2d2653e6
SHA256a8c7d7b2cb7f09b6536d5ec10f7bd4dc53af8639c89d43e0841be06bd10ec8fb
SHA51210dfec52db5f567ab71e80757ee9ff29c6f0553e317f5ddf3ecaea803d9eb06d3551ed03c072fb3a8b504c51856112d91cc61d82ba874b05a6bb64b7aa0116bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58c10385b8c471b0a0c1a474ca0bbf4b5
SHA17a9c675acd86c43889912a8d38637282f1c9660d
SHA25615e2e5e847c3dff15f1017b5764b2123842fafebe6a974c2851b6214bc1b3de6
SHA512c84fde7bd7e26405896a1fb9cf86d975873e252bb55b750f3f5590bb269fb0b71eda1ad2b3dd48f7e6a3fe5991ea1694bc28e740bdb99da4fa7ba4d2000bc258
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c10645c94c7a5be750ecc8f7e14b3370
SHA19fecf26a0daf8404cc5c844aee4c9d4102caf2f3
SHA256cf197b9cb7e4f824d86dd8697493016cf26e6e81222c42e228b8d3ff2b605ae3
SHA51269bbe0791325c49c18c3b7e62a963cd7e8a4f13c2ab5855daa782400f7d4367b6ae93c1a0481ea39fc89dea407f6a28ce35ee03d88c6e8d6662d70699779d6ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD596db534d2e1645e18743229ad6d75c26
SHA1e3e71e61f379e400c5769b7601b992fbe719fe13
SHA256c50e293551541bd890aa98e56ad2555df67c4d50240539c613a2c4e077931314
SHA512bf611276ef1319b6d3e34dbf76d80cfafea66db0163db7fc0b9ed9fa25172307254ba8d4374afdfffbe408c85f08e3cf50cd90eae154a7384a9539990b7f5f74
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50468ab61a90b6b9b50821b042a95ae5d
SHA1a142a50faed537c6cab560d2dfc2bac1c4f7bba9
SHA25642eeabe45497feb0a3c6c5f92df84533d3ab9dae24b531347a1658c892c7e9fb
SHA5129d759b08aeb4508b6098ad7297858006bbb5614ed06790b425dd70c1fd9d1b1ae64d193b1f70d6db18317bba937775832e89c9802ce6291cfa978a9f134f6748
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5574c4c7dcbf93b577398f0efb432e307
SHA11046c5fd475c45e21adf3fde488d9069b40f3ef1
SHA256b600e28e5cb1792c83ae85eba620bb00973c48b10c184a52bfc9e465d36d6101
SHA512c75abee506b178d2d55b21dc278d5877c7b9495bd31810414a562c663708ff894d4b29acd7a79db6a6313add043b3dab0f0fc8d555d4bcae8293ae56202a7ab4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ff258cb0741eeeebfb2c8e6c9b3ae253
SHA1c5fb1522167c3ea89f7b93ff1218492d636aa876
SHA256aa9d5787b47a28493cf061337a6f13c1001c471d0ce7feee8aec801653f3ce43
SHA5125ce6eb15e40166c417fc578884a5d0803fbcfc800bb2772264918ec62fc5fb6677662bc028356d60a25fe3d33e07afa420d60b255999cb27d66d3d4acc308637
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b1b2117f72f5c1767e172326a631f5f4
SHA1b893bfb857e5106ca266155e480c2dfe436a0566
SHA2564ca520a485d11eb429ff1c91ba9d5ae70de7957a2678c7dee3438c50a57cc9ce
SHA5129ec8a3637e5c5a92b8996831ba339206f0b88854a5070a2b48ec1f90e03df5943faf417ae43be9fb9c5922489e3667536e18594d79ec170578e4130bfea03157
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e2e5dbe951be039a81c15ebb00f07014
SHA1774b0ebc7a7a6abc86bded4b318347dc2771bf3d
SHA256867f1f45f5a6af620a47f07f25f49a7a4821d6b3c14c58b5d3d9f5b1373e0d6e
SHA512c74e301a5b5d45092a2b0a3179551d81c81a3724080e5af565805a7e0910f74b6fba8aa4aaad2404204080a1998e13523136266699cfcecd28111fd25a3c3b60
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53d2a19218af3440e068c603ac6d74df3
SHA1c4289a5cce872ba07669debbcea330c0abf051c7
SHA256496fa95103f578eeb479aa5b884686b224394ea3f4e3efc528b06da633cc6a14
SHA5121fba9159e34937b76dafd9d92be8a6bfc488ae66050dfebed1169650916e9183ce5deacdd7c7b146062c0ef17d94d4bd87064fd6b8a105bd9d112d37487981f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56c771297b5808ab3fa3e9090affff543
SHA1f42bc17d9836a36a8d36cce1d859bdbf1980cdf9
SHA25669adf75b0304e31162670787dd1fb452f0f47dc1b5bf625589e93e8b2e286880
SHA5125d627573b38a51ad6accfd89fb9ea8b57baca56cfcd1bef0c7ab0d4f96fd4029a15385f983763ecfbf9a22706b11b55ca9ea97c202fc956b09051011b83d5afd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55dd4ce763cf7547c812112ea41ea3d5d
SHA1ba0523a429f0be2b5baca908e7dab3eda0d2a111
SHA256004498ef0df32079e14dcebf6cfd2f47ab69770f8c972801246d839300942bf2
SHA5124e9c175f9fe243c2b23510fd6b6c8febd8ec3b5dd5844478eb95c55793be3e35ac962071a6f28cc64044562773cdd3800378ecae5139662569edf3b6a01df218
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5834007534b8515accaca3a0445fc584c
SHA14364175d49e4efd3cd762b569cb903cb5804a89b
SHA256f23b331bd25b85400caed2a794d70f8c34877a77618bac96e145edaa7bc5774e
SHA51293583f69c59e25312466928139d6f303350d31d6dca75910f17cc507178acb3f55109bacd18c5dc1341324729b3be960bbbaf44cb477d87826dda3070369d6f4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59d0655e8184d7831fbc9665b3e0d3486
SHA11c22615839fe8568920ef57495e513be21f440a8
SHA256d739ef2f710260b01bd585dde07a64c6724d05dac2dd5b93542f5a46bde93231
SHA5120af59acdc1ee7b1aecfe8da52f8fdd0f6256dd2a17b5c0c25815e848db0b10339c9126401b42d4718ff7af652ec35cc951df22e764126d52c110309b6b1a33a9
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b