Analysis
-
max time kernel
138s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 10:37
Static task
static1
Behavioral task
behavioral1
Sample
9178786534a5fbdde0ea8891ed47fd42_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
9178786534a5fbdde0ea8891ed47fd42_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
9178786534a5fbdde0ea8891ed47fd42_JaffaCakes118.html
-
Size
139KB
-
MD5
9178786534a5fbdde0ea8891ed47fd42
-
SHA1
f70ce00d77d3db21c7039abbfc97031d2f0dc019
-
SHA256
977db3040abebcb4e47a51e012cf9ce429a7d3394725b5b971419516fe83a175
-
SHA512
48f70a41562e7da3ee2ebe7f1f391d542cea252c745ccfe8bdd425fc4c981369f62ca0fca7df9ee028deafc09479dc5e42a84785823043d644aa261a2332cc7b
-
SSDEEP
1536:SYtoYdlbiGyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTs:SYZbiGyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a2300000000020000000000106600000001000020000000e23c7b354e73f50776eba57725db6089f83bae64a6ec00f1cdf803b8cc49a2c2000000000e80000000020000200000001a249a7b3a90418a12c323262dbf2db6997ebee5010b6572f4101865ca954d0d20000000adb7136ba4c6de81a46cb393a556fca7075f3c521c48fa1a6b0e67a90aede4ec40000000bc44df6dd4827416d476030cd9f80bd3e6d982e0258b32d9dcda92a0a9edaf27ad5df8e9459db34c0fbab96c6f6dd1fc8e1020c6b39013257d404a130608c7aa iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423572942" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{55B86BC1-2195-11EF-81DB-4E87F544447C} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0b33f6aa2b5da01 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2176 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2176 iexplore.exe 2176 iexplore.exe 2896 IEXPLORE.EXE 2896 IEXPLORE.EXE 2896 IEXPLORE.EXE 2896 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2176 wrote to memory of 2896 2176 iexplore.exe 28 PID 2176 wrote to memory of 2896 2176 iexplore.exe 28 PID 2176 wrote to memory of 2896 2176 iexplore.exe 28 PID 2176 wrote to memory of 2896 2176 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9178786534a5fbdde0ea8891ed47fd42_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2176 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2176 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2896
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58ad251e7b935e3dc3882a14463a98a92
SHA175303d05d37d82df2f42ae408e134af33013b233
SHA256ad20a07c338c314d93eaa6f3e3167a6a37142df4dd74011dec245f2e924e412d
SHA512f8d3f093339887f079265ec6c5ccbd82cc890b1ac972fc8c5922931dbfacd8d9885a9fb078d89ed433344cb468416076a78e3ad961965c53f77d109e4419a542
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD596b7ddf12f6674350ad84b64cd52e714
SHA1676fd9cddbbe7dfcf28b08414aff9e1c52f56707
SHA256ff271ca835ab4a13b16bcb8c62f0b00720f1eb5f041effec41f0001bd9114c7c
SHA51256934aeb44ca3330be145eeacacffddc9c1d70edcc1814088bcf3765c99ffb297357127e5c03756cc8bade8422a4f8e1f82c4910cc061e079055f21b713037dc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a0596ea0fdee582f9be6721edb8997a8
SHA1486d2f86ada502ac246a30cddc3c91a1ecf917c4
SHA256123d76be1f363093610d4b6971ea86261d6ac2b6628da5b2bba39489a739566f
SHA51238a1d7e905c1d0c9dd68d0205b7d1e39d679969bb0f5a8c48e08b0f810f06cca97cd8305a45c2dcc7b4501737884e9c31a06bf6282f316ba6504f777605f8fd7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bbfba0f6acf0f5faebb9825d5036d904
SHA15a0861b076815c06d36e3a07171a0cf7fb885f45
SHA256e5adf0b7d59e87c8eae81df3b9ca436092fe030af0c17a506366c5c5c90704ee
SHA5127b928889ff4e9bae5d568d84aff543861fc810d3381f7406c7df19d07b0d4c23f70be8f358c0a11b52b48a3744bc2bc9e4f7f548aa3d86462d4c6ed5e2af1384
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD540e1a19cc745af720fd321d984546822
SHA1027c514b6520446a6924fc56aa403efc615e2edf
SHA2561befaab5c2092bbf11a4909181d48641eff10a97340aaac304a9e74e90c7196f
SHA512e0dde9deb1d6d2719bb2b0efca230b1c158f5daf2a0b57d0df09ea8955e52dd8969ccfc80795ccfa4d44e043ea2a1cd435f86838ce41e042e539608c28601dad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57964ccdde98b138aa961df62d78caeee
SHA101921575eabf068e3fdee11a56429a2cfced9b62
SHA25606f66e52d007707444453bd8ef7744ae00ad30ad2241c2b4254e9e034945b8d6
SHA512478bb25d012a65b10371a1071547d467fdfc1eb9d12cdeb8faf858b36c051775278f5fb19f003a49386524725fd380bba38cf3db7e36da06be48420ad8054cd2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f501914acf06f6d4679ca3fc8c090237
SHA108cc0d8a3fa04192b26ab1d28e65454c87b1fd14
SHA2567b594d8a22435da7754620331424d69e61a4abbea12764de8707d2d69a00cb83
SHA51246acf537c4a35c0b438e45138092abdedc56cf9234f40287771b1a4c31d2fc2ad348202cc138a69be696d0629a70eec474cb4028625149def3eefd817f1c924f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58f8db73fb97c88147a0eed591a5d2bda
SHA165dd775d46324025d7e66bf428dfc9a6be7f073d
SHA256eb8955a4224666e8fd3228a8db75d663cd9374d1587ba67e6a0e2f9b677fab7d
SHA51202296a99ff05efd11f50e9085f1c48b7ac8e916508b3cecce492cc075ba90a4a6ef80208f6c1cd895f572b41cf992bac22dd34c352f637b070b6c25a0238375a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ae88e8ac3cc4ca454b533ddd08d4295a
SHA1625d6179c3ce788f56bafcaf4f13cefb93743d0a
SHA2565948c97261515ff42530df1807bb0b8512961b9a446c6301d3dae7e3e646da5f
SHA512a5e883546cf1fabf0db471be9969bba96ba234c5213260105b1ce45e50fbe7398825bfc550556b281b93962c8bbfab97a9780220879465ecef87bedff4e4f8d6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aa86a2bf8a2bec66ca84d65be1f4a2a1
SHA1a5d8253d20a5243d2a2b95d761d359dc0c15639f
SHA2564d557f644c135c547010dc41a9cf06375ecaf4133ce28c20490bbbd3435c2469
SHA51218b973a097022e2d1f12dab85b523f91d20d6f5e970451f0125d9e96dd5668f537aee5095237e030ec3fd6e84bc894f46077b2f061bd2485bfc0a460cb661f6a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a0adf7854a20311c5caa30b8b1a59fc9
SHA10239cc537b46765b91eee53d4f4260f02dc7a685
SHA256f6e2a49255d05b36de2d253d88a77e72d53b9a6ffbaafdf9771d19e99c4ff736
SHA512682596c47a91c5cbb7b3c3ad0d2f43f4566a304667bade3d453f2a274cf4a01584bf23fdc4bc92fb5a5714058bc1e4e8ddce767d1d664b67ef2db646ac9adcbe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5889dfe05c6d59a786b1682e7152def40
SHA1763933c535555c891b803108142b1b2ab8e2cea2
SHA256664356f0ee4617631e204045aea396762c699c7f6ce1e42a66019da6bda73484
SHA51257faf090238ef0187c97564b64c82750e8dc6d9fc013edba8e46bc3c868dab0310f839c9e52bdec7347d79eedc8fbce407960d361f87e22d9fb834d84fc0d26d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5680228d78b6f6aeba5814d041e298a58
SHA13662ff19a93d005e8eab257781e741e3273d8b8f
SHA25651577bbfabd04b8e58620c39f371845fd2f857932d236eb5ecee48e10231b554
SHA5126255b8d2396f789b8c8da6c2689c5c2b4a97b4dbdd1f45ad925858785c9d5b8642c5376135715385a6eaf553fdadf2901acd6376016069342e799356835daf13
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52228f744cfd205d480359fb1b382f0aa
SHA113f59cb40d3a6d3c8457b16424fcef8aa00666c3
SHA2564155eb998e97ccc80f4aad2aac28d7516c3f66664c110866435c4c2e6a164f4e
SHA512464837cee98c22e720f705ae432d8654543b399e04778ce6fc92494880ae2fefee5a4c0e46ff14ae15158f7b7e6a1c46b3d28de53d1797ac28f58c455f30848e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dad00b6c2de41ebe4bb5af390f545bb4
SHA1a02d90939c89b08ab6d3520eea6e0faa384f040b
SHA256de560de681e50a905abb59ac38c7f73ae677128d46482967908a21106a205302
SHA512631a35b008c32d2874af518906b9e9bf02cd4762ee3fa828d0b7e19abd63d499ed1d6f9be217d7d0d530ae159a4e17fea97bb01f8274f6513b399be2397720e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51fa17cbb89c938a0809aaf8228e1f0c3
SHA11edea74c6904926a7a8fb5a8e8f79869bc5e696e
SHA256cbbcfa6386ab9de4fdb7ceb469f810a38c4b1fc2a997a2c8d4218e702c046dc7
SHA512b17c1432133e17f3a0fa724d730723703846d41128e04d8b0c67e18c907bb983268017cadc7dee4e0bbd1e3cec8fd88d70172bebaa56ad7db7aa544224f9eb15
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD560a849dc4eec45df144ab60fc7c69e0b
SHA1f6e717188ce07333d3bb78fbaa92928465d584da
SHA2560540cf4ef807e4cf548c36fc2043113369d75d4ac3893f3ba6a51a003251f203
SHA5125756036fe2eb3d70e5fda199ba201b7fc0e9c28aeb5ec68bdac7c6f2445ede4d32f254729058e82af40154d9faf6eb33e661c64f167ae8bc504561d5426a1def
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b