Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
31/05/2024, 08:50
Static task
static1
Behavioral task
behavioral1
Sample
866e5bd79dcf971469a70ec6f9c73a96_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
866e5bd79dcf971469a70ec6f9c73a96_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
866e5bd79dcf971469a70ec6f9c73a96_JaffaCakes118.html
-
Size
110KB
-
MD5
866e5bd79dcf971469a70ec6f9c73a96
-
SHA1
2043cccd33e690f0e9e5c9bacc5a5650b7ea4b6e
-
SHA256
2a8693bb625b901923e7eb7ba6c948bd6a6fc1558d30786c7dcc1c7921cbf249
-
SHA512
d6962e7f54439405af28e866ec09b59e06cf6caabfffa5e8a28d1ade1ed9fbddda26e632f88c69d5c9245375c19d8a0887863d9115174bdd3d6b2627cd7c9aa1
-
SSDEEP
3072:L2eDsReAPxbDm0V033y5i63y52vx523rAt825Qh8Rs:qxxbDm0Vw3y5f3y5+M
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{DF9C7151-1F2A-11EF-AFF6-E61A8C993A67} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423307318" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2292 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2292 iexplore.exe 2292 iexplore.exe 2540 IEXPLORE.EXE 2540 IEXPLORE.EXE 2540 IEXPLORE.EXE 2540 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2292 wrote to memory of 2540 2292 iexplore.exe 28 PID 2292 wrote to memory of 2540 2292 iexplore.exe 28 PID 2292 wrote to memory of 2540 2292 iexplore.exe 28 PID 2292 wrote to memory of 2540 2292 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\866e5bd79dcf971469a70ec6f9c73a96_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2292 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2292 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2540
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD555540a230bdab55187a841cfe1aa1545
SHA1363e4734f757bdeb89868efe94907774a327695e
SHA256d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416
Filesize230B
MD5f26598ea4df7a7fe9f5269a7438ecaa5
SHA106eb371f6240f042c364fbacff144bb6ef0f0a0b
SHA2562e4d97c78e27e0ba40a5aef7fd9867646f5b89e6b7d87ffec3c32b63dcf607f8
SHA5128f8e3568796c983d90764d0f84d2877b7f78c3130b15d19c8d2e5746b7730ad40c4b4537a9b0b9c99e780c777c38e2560f44bcce38faae0a44b0dd626d5d8cd2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD5faf0470bff1fc0853c0e790135ea3c87
SHA161bdaa2a4bc2f25f1736374534ef021074c2970d
SHA25643c7d5b166e476d16288f39210755dde3266368c5f24d4a643aedc826b04d663
SHA512c46ab30439594b13460977c3bc7c5c7a42913bb7a5b96ab276a72be00ab45b6ce7f03614dea4eb7d7dc64fc013cc5130350ac55b947956e5ad8a44afb010690c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b17096a3a3c412ebe95e0704c855f4b4
SHA113bcc9838165320f2ea9ba24dc4ff09abc94ea86
SHA256af76701b58add571697831b022b18cc65765131a0172bdef301cb537abdc931e
SHA51278f75073b23caffa3e99d943477029772d9222da29afdb616a79f96d39038de1a85d287b556a6fe01122455e9fbc95f6a127689ec6be707111b23eae409502cf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD585bccd702ce093aac3ab35a62b5f48e8
SHA19ff823a5f66bc7f5ed1cb3d510075d29fcae6ca6
SHA256e7847bc568eef1af3f0320af51ec103d0a14e4daeb19e4ca2bb9a84f97ecc4cc
SHA51263c31f29dcea214e32f0a6a59a4cc8cdac14faa9f64b05f25e07e0046e8c73da8b6509961198327a10b9c692573ab5f6aec0e2e20efa1681f9abc4611320f787
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD536996cf16c80a437910d9d39621d7c76
SHA1f6794d0532545f829b8d59f1e87757b73ee2309a
SHA256c35210cc8c999f4b93065c1df9e9dee15d18430435000d0962d322c7c4b4a09c
SHA51240b594ba402d00c967510f147e7ba438691fd89f111ff249ac97c0e3de406e69d371461b878d21a5fc0da5bad47d725c2d9aaf92be990387b00270f695eb4f68
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD578f8c3c755a722709400407556fcf4e0
SHA12772d91ae516392b60e4dd3bf8ae2503a0f10cca
SHA25678719a9fe7bfa0bb6d8c6c1de477539cf6fb04c70eb7c0f5a1ef21c9a34ccf8b
SHA51241a164bdcc9c4d2b0368bfc9794c0c442b691d7b8e656278274d84473595da6f2034b1856969f869f14fe1198854d213e71c440635d716a1aa3f6cb66c0f37ef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5454327cad46f51335e9a0a527d0175ce
SHA11925dbc870e911db5b3241a8e8655fea519c14a7
SHA256083921bb3d20e471bbc41877d20b4ff6310420adbaaa063af47b98d9a00be4a7
SHA5122ab9d39912c0df4ac901e8c8703b818e1f6035f7b50856039f6382c063f09db84fbbf91b4b1f2cc4cf0ddc624c5db28f02f7a49b09772755c203aa9b925d8e39
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c1b545f0d4db2dd7fb1a25527355c11b
SHA1996a4cbb701b9cd9686457a1f4590d27d3aeb5e2
SHA25671833b9886572a68ec07e6fe7727b0f392442d3187edf7284422a8bb27bf5151
SHA51214c8976b694df3f5222c1a45d956f3a008917cdda1a8888511ccde3a3f7e9f60f63fbaf1d965f9bb7a2e5700e651f849734a6ec2b3f7756b1acf5da891c5690a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e759b6af1bb2c38c4966511dd661e550
SHA123b107aede5b0d614235eb66c857f1083e0a2fd1
SHA2561bb5d41f75c77aad02e2fa0d7511800a4d537b05cabf6a86476868d1ef6c2875
SHA512b510326863d617123a14c4c18003340109906864316dd128cdc573e9427e12761d4019cf213fcaddbc5552cdbad9925fdc47a8a72d4365ceed89be458d4cb11a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD542d8de08df4662db3544fef11d000fc5
SHA19a30ef1641173e14fe8281e9965468a1ffd6701b
SHA256d896c80f8d92839caf0845890f3e5c3206fb74035206e3b585662bcfe6a8d5ae
SHA51227b8299ed6345a90c66b5f5da4e34ab3f76411d922d30df6ef1d921d0e53e936abf6b0c806bf051be48fb0a6afc18eb55680be2eae9ac0cd4be069f2fedb42eb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5932145b7b3c3b5a30d929ed9840dbb9a
SHA14625941561a33b5cd38c506b1eb362e0592cc369
SHA256ce4fc1ae152bf2bf7b53fa791401d1247432a57f2ce64bcdda96048c472cb4e3
SHA512abf62e66c5c0c010f4bd47d0c8edc37a7a5db08be4263fb273cfdb91ffdad22829f67e1a2192857011e91afee476bdb426add2585dbf881ee5acc1294a821663
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5707542cd47c3cfa755f45a159e711a29
SHA1ed866f55bb5e877e6e7988fee676de62a7f49e20
SHA25625b3ced3ffed904cfea671957d7b7cefb1f1382da1f67bc950d969b588c635f6
SHA512b113dfd89ccc8c9d63d876b5d302d86d0dd0280a9b1e635452da11bf3be876c3648ca63fe204f6515865b49d4345780d388f56047a8aefbd0149fd5b5408c977
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56c039643ef4f81713f443f14c7553e28
SHA1b716a9dc83a99a68fc99626497ae8702c92889a3
SHA256229d61d124291d63f8738cdaa41a10bcee23053db7e77aef2002e25225fb2dde
SHA5128945ef416fc8d684b760bf50cd39f14caba787e42344231f61fc238870ebcaeccb9713d2dbb9d36b3f3f4350a0e1af926a23708dcacff9976f301557c4ae9148
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD570aecf291f42eee774118fb477307fa5
SHA1b60339b1bc2732244b38c37e9f37e0a4213756b2
SHA256b0b1ac8226199e745b1a312b4ef572e615bbb454f45a44a4d60f4d64bb88a9ba
SHA51223d8b684ba83de0d5ad9c55900d2bb6afb0264b7ff2e43af08bbce0cd5675abbad6de0c5699a23a6d046676e6616713d93521435c64dcc496694cced621579de
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57f9402976ac051abc4b423b6c964a964
SHA1122d85490fe2e556069a4b86c7804984664018ac
SHA256214a2744510d905dea194e6d1d1ddab4bae2d23f849ace037ebebbd12697e23d
SHA51280d295f471b6435fc118a450fbcbe24e75d5da9bd7a935262b01cf3602d9cbe34054c2274e4f38e578c8347bcc02ae2d84f4b16b10713d22a270af92b0b9ae7a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ba7319f3ed949688c863384a8b8dad97
SHA199d7a55e968b046c5d6afd9143e5ff21a45d0d6f
SHA256db79962710f627b34c3caf5de4763abf2c639472112755346be77362a0efb8cd
SHA512e7b1826a4d4ac7ad55ec63532877172d24db073a2f594c02420932e8e5879886ed80f25794886cb1a75426ad858db604fabe38ea51c22325852355e9389bb01b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a7e973c88d2294fe2302927937d3c5c3
SHA16315bece6487914ccccc9ec7590c97889a2d0f35
SHA256cf35bc842038a3e920895a5edf63144b0a55bf55eb3b6a07a30e91cb3a2bd0c0
SHA512da800a1ce8cb065f2ecf6ef5a220df298a37db4e0c165fc44b29a974f4736ef91197439cd7e877e0104784837671f31de4d5515eea507ae0abe6b786e3d4fb63
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59d294ee3151134a7b48d865f60ab4510
SHA1338b19a69aac2d9216b5955b087512a1c59a563e
SHA25687c5100dccc0f2ee9c2e0d717a786ca775d102020172437f7de713067afd71cb
SHA512f14debd9d262f87f003636dfc9f0c763f7aad257e64c24b540a5fcdaa7ed4ad1518e8ca47733168ba8eb41ef951eb1173167bd6964d9e0bc9458e4d17ea322b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD518f2447f00df787cdb4baf2756b6717f
SHA14699e60293cb2041a8c7625eb86e3cb09a562ffe
SHA256ab08976fe230bba57d2604671ceae8f8b61ff146dbb72f77fb6d14a46542f26f
SHA512cbd20679508a85c7de8e8d2422edc0035df1d6b2e3564c0d4e9f150abbb75e7de40af6fd536f2221dfa7ba8a2039fffcda71a518bec97775eaefcb49030d3535
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bb7ba4fb35029babd8dbd7165c5e9e70
SHA131439e80625a524e781f2c1161fa876eab08b28a
SHA256d84ea88b675cf60a19d87527e358c4be5de80cbe24a3248beea6a856dc43d641
SHA51258ed732173035ff8f485c87377d9ba9495f9aca95079b4daa7183f7fb5d638f39a35ffcb807d67b98ce9490b89b2dbb362621589083fe4eff42c6a239f119edd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5020d6a0d5750e959dfd6d2c6471dcca4
SHA1d0051a721a61c15d7ef754077ef4e5ce44a632df
SHA2563acab2ac0b851ab77b1061672f7cf556efa2e2e1edbd177ad6050127520a0f5b
SHA51263d7ce8ef898b1f13a3e9d283863d7f81497f3cf7a1042d1e8bd512e3b6c56969136b3746235cf76ee0f0063ef90a6da82e419bc3e033768ffe435c182207a40
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD5c59c1e7efda24e9afb616362c0559c6d
SHA184d96fb7ff12ab065f249112c50bb94b8da51097
SHA256e4f0e6537d5a8d206a60714b7aca5160e52c2a25ed839c22ae28edadb5126039
SHA5123e73969176516157af1a75bfb14d0440581ce87858633bf10b124ddee9c54353be08e86f77cc64991b76020c65ddfdc2278684e58bb4036f2ca7cf2152dbd3e0
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b