Analysis
-
max time kernel
121s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
30/05/2024, 14:07
Static task
static1
Behavioral task
behavioral1
Sample
846ad77b59b612628c549bc81290536b_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
846ad77b59b612628c549bc81290536b_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
846ad77b59b612628c549bc81290536b_JaffaCakes118.html
-
Size
460KB
-
MD5
846ad77b59b612628c549bc81290536b
-
SHA1
cf38ad8fc2d2fe1f8cdb0d92bd6f4fb09dfe49c1
-
SHA256
cc60cd5295d7fef102c33862e9da571027f91281133bef3b186d2608e50e7727
-
SHA512
1e93382303b09365ae2d2def9c3810b2d993242e083711d6597ec630ded53193628b40fae87815ef5c0ca5ec358aca836279a53dc4ae036e03aed40678da4255
-
SSDEEP
6144:SEsMYod+X3oI+YBsMYod+X3oI+Y8sMYod+X3oI+YLsMYod+X3oI+YQ:v5d+X3v5d+X3A5d+X315d+X3+
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30e02ad79ab2da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423239936" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e59537da473fd648a5342e531ceb71910000000002000000000010660000000100002000000040fdd71081523d3ef749a406b375f5bafb108ff5f1ab1d58d6ca87954a4494e2000000000e8000000002000020000000fa56a34b5048e19351b42a2a821e744cc947d4fddd43e0dfcb14dd7d00941669200000004edfe225f068c69c91654a1faae136eb59585ef992bb9f5be16652415668dd55400000004a0a6cad6cba1ed920bd841630b531ff30e3f68f1a2ac0c14d3c2ac9631cf80bfebae47e1fdeb2cd08789533d82428de2b6dceb84e99ddcac429ff6080662d1f iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{FEA08F21-1E8D-11EF-B826-EA483E0BCDAF} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2968 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2968 iexplore.exe 2968 iexplore.exe 2120 IEXPLORE.EXE 2120 IEXPLORE.EXE 2120 IEXPLORE.EXE 2120 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2968 wrote to memory of 2120 2968 iexplore.exe 28 PID 2968 wrote to memory of 2120 2968 iexplore.exe 28 PID 2968 wrote to memory of 2120 2968 iexplore.exe 28 PID 2968 wrote to memory of 2120 2968 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\846ad77b59b612628c549bc81290536b_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2968 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2968 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2120
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5593c40a5429a43c57b13839cc51d971d
SHA13da5766f7badf4fa85299999291658d72743c409
SHA256efb5405ddeba043a9251d344ad1b7ebcbef5ef2014343689ef827d19810e5551
SHA51254b9001351cf8ba21c9ed14c6e6173e7cc8d706ede2c4fe2eba50dbf0fdf2d85e88ea0675bcafc757485e0e647f2e598142320c64469aa76de1b860f8a449788
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ba00432cc5046b67f9a8430abdc8a8c3
SHA151c22cb8420e723272af967e294ca5f8cbdf856b
SHA256b694b4ae6dfc18f12bff633628d50ecf21b1db45c69893de5e7cd0ad2eca6dbe
SHA51240daa7fcbd4014ee1e0ffe0204ee63ea17df452982a5a3a613a0a0d74ce5412ef23b4f94708fbd41a9f3d4c70bac9d3684c238b460fcc930f6fb5de2bd521dfd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5784ddeb82020d4afe97e4afbe391af09
SHA120e4584e5b2d0b67ec02fb66794367249e9064b6
SHA2567b91496b50181aa651045e84d73d0c5c81b169912d488d0eae3f20eb224a5446
SHA512f3b4eb71c81a174c2c0cf8e35dfdd360958c934b1cf34ec0ad7052dd9e2b378c5390b7d9706792cd5f39e7655dd474cb6d1ebb5e40e903ab074b09a87a8b6a5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5645f3e3fcf65780f4d95f48b10e7d28f
SHA166f12b9e88c3e5b95ad6cf1931526f0e18dc395c
SHA256cadc4fa6899449467601b523d045086e6e4485e87f8f4c7d3517797cc2909013
SHA5123521b227b3e846c78f528c44c29cfde321a496bdfa80cab84e1ba99ead601368476b85888707792455e95884a4245617ce9c4647d4943c5c302194f24db1ae96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD562e5c6ed2130eb556a8bf9c8023365ee
SHA1a03d79b4d3c7fb838a3fa8c978b9cd47c30a040c
SHA2568960f4f4e3ef33dc2fdf4d68cd2f1c7d94c77d0592eb6f982d3eb52be5068ff8
SHA51269bc245884bb5ec1b3fa720a366a9f68745c35afb685831cf13d92f8d137a99fb51837c9e61f2ed56dfcb9e2c99f72421aaf46a92260430375d81bc4f52d99d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD525b702649c21dd81f8fdd7d67fb12872
SHA1dc1c4d11997df226c13e88cfb835b2e266955435
SHA25673f969316dc4100941f058361ea421b2cf7003e363dd0c8152c8f3325cbc681c
SHA512f8751d94e20ab604fb7c25a6146a9962d516502f488f2fc836d8ca28b571ad0e7fcfcd034f8ed9af94b4a6db814ccfe99dda6ec6afca3df3c60be6c62753455a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b8c846720f798a0e1b1bc6938bbb4ac8
SHA1ae576274e793609523465ed197d92f4017a58b19
SHA25652a486169cd0e4ce69aa2f807981f5fea2bfd272bf62207ded2432c64ff56094
SHA5127de37fc98ebe93811fe3f3fe438fbf22a117489ddbe048e2fb5631873f2e784fcf749b3c8cfc2a4f5e0750d36f6907903cb3110f2bfe650862937e3a32c8e777
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51b3c6d46398279f326af631ce5989e1d
SHA14742d504b3020bd2fa599d214da1334e77d18d66
SHA2567bfabe0efd79ae74d79d261cde6b9b03503a033b1d5737deb23a784f20687aa6
SHA5124e40c1c8321d9beab7089b3f1f4dc71c069c606fb54ee580c7466ec12c0f754de69797d17279265cbe900344e2f4198c93b5ad3cbbaa7d804dbf18f73f4339d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b9388f2045195e12519988bc18a8fa12
SHA18e33ea99417b59f555b52b47980b67ea2a15b741
SHA256770f0fdf7f1a2ad2f4bed131b9fbfb17a09735660889dc2348027e63993b91e0
SHA512b843c4fe7791eaacccdf0c73a0e781ba839254832d0dad0d515725d91ba324c8b81dfae2d6ea14185d1e486be8707653447b9fdd55b662b9fe6ef983a6406b54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54c89efbd7021cbeefa260ca17e99b789
SHA1e0610d2ec9015fec4a8bb239ab7d7259129d04bf
SHA256303f8f95f34fe9c0bd1814912f77047c534bbc07256b58a299ec827bf742487d
SHA5128498f6cf6adbd3ec57935fb51a1b7a14a816ea415ff9adc0ab18c6d89a59ff1735d6e2b8a5a578d7a3c17d3c6437bae298eaa532d4b2493b08c5a9491ff50975
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54484dac64cb439ac46db9d73ced10185
SHA1b3718f65774daf234aca6cd3fb36cde5cf5e7064
SHA256e4ee4c48c7afe89285726dba8e48a055f4f9600e844609c30e677bbcc4202929
SHA512564643d263e44bf74536f2954cb9db0eb00442dd03576e593dcbb0ec8a8e1f5192fe4b19c0fbe06ae90e654be4aaf71c92a7d9183a8c59d3f7486f0048c93f2b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50677fd6b6d639e5622db256f97843736
SHA1fdd01bc5aca96b92059d78bd2c4cbac1ed697268
SHA2567532517f1258c01fbaf6961c596045f005f947afd07b726e5b0ded5bf4b2dbb6
SHA5126026d5295d5f42502fc71b3def6b67460eea9017a9d7983621611b22534c5c1a033fe121c401a7a5c4f74667f58a839e4f024be5a8b0d54fda60530d1989f778
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b66c37b87ec10260b864f912cd7e6f41
SHA1c6b32935a814204ee1d28438fcc0cb33ebf046a7
SHA2567861a6a5e174d39abc27857a1a810f0de9dea80069ea55dd5171cf9623797922
SHA5124b57259354ba21b8e19992dfe43cd2d451c19c59ccc262fb9f0eb0df5c61be6bb66b7288fa0b37b2e96a0c2fb4973457444841fb5563cae585d721ea2cfb2b38
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59b94ad965323b4031d01ce96402868fb
SHA14282b499bbb6e9fa676d3e5c29f7d532adcce091
SHA2568391b6c9a315abfefc680857ccc779fac9b17457f64cece8be540770f85b7445
SHA51289c7d8c8b8b045bea68f4b8def1cba8492d771da76ca963857bcd41e03d538bd52417e798bc7ede0a8f9654432ce9f29d2ed558cc04741ed9505cf6668d01ef5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53633b0b5bdab80d3708408cdf3017be8
SHA130907549f47ab8e468e4329f61ab6214a07a13e4
SHA2561d4bb7c9b35575778ad9c0c517f480947ac2265491578add23fcdcdc351568d6
SHA512e38fdf3c8da9fdd9096929f7890d7ddd0f56a21e599b2398be771edb5aa0fd65437b63473410d23bd073d1961a910e57672730575261e16728c35743e9437b85
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f0bb151dc5ff3b74583b45bc39e00b22
SHA132a65eb6eb998a4457913e8c969ccc3f13b38a4b
SHA256289faf6dec08750d9975d42faa5fc82934ff7b0cf6675e4ca2277b61efcc301b
SHA512d9b2f2967d323486a9ed7ae5381eba7c50b22c596d9a695bb977359f0f926d3a2def77d2224226feecfdcb1e879eca1fa61871b8b1a772fd0f752b571faceeb3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b234dca7eeeced53ab5e14c9eb904b30
SHA1ffd1bbc27acfa81adc62647cac02775b9f82f81d
SHA256e5eebfef6a7850c85adda96f385c1badb6d1563a2245d80be86fa8e7bbdc0905
SHA5121b9718ca3b3ab804be77c11f6305d92ec0e47c95d231bd5b69501a5ccc08d72f6ceddaa652572c3e41892821c5fc6960152f2629185f9047b1763de135694536
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c8eee8c6bac42f3b83a97166aa17ac1b
SHA1bba751cde218de226729df31b50cfaa295ba7b0b
SHA256fdd17a424cb33802063731df1a84fe87e09268a6c4364fb484295642435e4983
SHA512a76a7e0a242a4f25dcd6069214f6b75a65f14d9c31edcef401726d6a08f301df61e7cae2027022e904f2921a9c0badd3b7e8d3c9677404884d8deaab28717bd9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a958bb09ccf59b0f8fb25ef96aca57cd
SHA1b8ddf75db5a629992c627501878c00e862f892f7
SHA2560c1e4b54a0540f51c7b010a9bdbc7d2f15977a2bdff06ee093c4ebaed4782539
SHA512ee2090cecaf0a355273484254ae6c72e760fcde32d4eea88cfbd2de922db9f0d73b49b13dc62d3b6e8c45e9996b9e2534ad8ccb33b45d3f5287a1f081531df60
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b