Analysis
-
max time kernel
119s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 12:31
Static task
static1
Behavioral task
behavioral1
Sample
91cb0547f9b54b65cfbe03d7c97bdddc_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
91cb0547f9b54b65cfbe03d7c97bdddc_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
91cb0547f9b54b65cfbe03d7c97bdddc_JaffaCakes118.html
-
Size
3KB
-
MD5
91cb0547f9b54b65cfbe03d7c97bdddc
-
SHA1
41ee115a6d0469b1c540eba4f5c0df05678ab353
-
SHA256
9a914907e58cf2952016d9bdc2aa26ca32e8b0b15d27f6a6af29fb2a1325a713
-
SHA512
28675c10de85c3fe508c1a30fc83e11c8a67aca83a2d030e43613c6ec637bef5fd12150fe7c86be76426a372922e67c9fc3826113909189f9792b3fc73e7b467
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f0f5fe0db2b5da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423579767" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000001102f1ade5d27a48a06155d97e05ce1d000000000200000000001066000000010000200000006aaed27ac28a5b216e7d2d4f5585ad62993248def1f48e866bf4405cfec25cc1000000000e80000000020000200000006f26e8343a2822186b10ee085637bab2efb650867f16dc869f2c0e77d3120cf62000000007ea52d44d6340e797d9f043d019411b0e404ba6d50068bc3b84833077a8de3e400000003da47dc9a225f749db8d44875ed124aaf6918a8b92eddae97d22175f824e97c81a8ebc761f5a59694b9984f89a0935e17deb90277fe1111a4296788a048ba331 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{38A45931-21A5-11EF-8698-5E73522EB9B5} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1056 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1056 iexplore.exe 1056 iexplore.exe 2684 IEXPLORE.EXE 2684 IEXPLORE.EXE 2684 IEXPLORE.EXE 2684 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1056 wrote to memory of 2684 1056 iexplore.exe 28 PID 1056 wrote to memory of 2684 1056 iexplore.exe 28 PID 1056 wrote to memory of 2684 1056 iexplore.exe 28 PID 1056 wrote to memory of 2684 1056 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\91cb0547f9b54b65cfbe03d7c97bdddc_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1056 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1056 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2684
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5ade99dffdb0c862b0e8824c4288171f9
SHA1626fdeff7e7e2e30f95dc4cc1fd3ebe0ac50970d
SHA256d310273597320e41000c8ac59d8ac23e561f450f4a4dce5bdf692aff5d5f4ebb
SHA51271d268b98b20b45fb767b5f99c62b930ecc2df930c685c0c25298378c592a7d1bc7c1b550c21a50da1dc93da762c80337a628e07143ece24ca57f9eb076e5285
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD58cd64d089a73dc84b08c89837399c6a1
SHA1499975f891e5a8e5fbd4e825f9c16cf0ce36e8b6
SHA2565720528268b79eee783661776e6b1a066d53d8adf9fba6770f98485a3433122f
SHA51259c6b695f50406abbcc8e483cdc5c7b62421298cefa69ccd7638cb5bc7250cd34181aa4c8391000171453f26d9133f93e28bbcfcf0704510ee29e305e5b893a7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD574a19054686e93fbce582d2ea04797f9
SHA110134d2e9ed010d65e52739a7b79855569d2b538
SHA256c0905371c6b2f2300d3acae8e3c38cbdfb8b3845c0594f6d12283e611d190d3a
SHA5126ce0d19f06118de13e08a49c9094b5baa8690a3b93085e73cb072a09bc5eaa906e6a3615d1dd8bf94ce5700451c18bca4e1cfc9451df8d8408867cfdbf51569e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5241887a6eef05f94084915f24b9913b4
SHA19e5382b4de4273b834f4565d6c03dc21aa158152
SHA25688d0791632e3688547fc00ec4cdecc16b8264fdb4c9829476319f506fbb31c39
SHA5120ebdf1f8e0fc12de5595308c723d268dffeb2923408f30e1f8f46ec182722950bb861b7036b41d1643033fe10ab9a85b21bd226b2db750fe63433ddf186df36d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD548edd9767b69114e29a41b068d7fadc5
SHA116b72170eaa5291aa0d5d74c8585c916c98682b1
SHA2562044ec920c73bc9d79b24665a68a0e37050a18d62533a31d52c7acc799603d1d
SHA51240494fe6bb5b6e776d75990d8044a5015c844ecb1bac07d909046a6857a9cb2f71ab1fde1cc53dc92efb41aa80b15df9a6261b8ce65ff07dd63358fcaa5e07f4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD57c833f90ad2412162a340c168dbe2bb5
SHA106b1e1e5cea08a9bda185055c5cc8da39f86998b
SHA256a8e01f51270ea4e0d3d2253a22dafbd8af25c1365c34b0ce11703298b5c208c9
SHA512462fa344f2e7d8e62645e6d447a7924f1b7fdf76c7cb48bfa5bf98c1c6ff068e242afe528e05594526a3afe7d6eac3c7ccf4f8d85b0f7742ad12b438cee35eb7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5abadf9ce171be91175c1e50905575dfa
SHA1172e455dfae33771ecf2dc684a4e6bc8e37c4420
SHA256147cf7613cd904cd2b174b15b21e698b582ca84618d278229e0a3fcd260b32b4
SHA51280a8ce9f524dd1db02d46ce9116a11800c7ae86ef3a1c5faecee7aa5ee8bfca1b12da5af81a0d25dfcb879a42a3d331cc050f77334527eb0a791dedf4fe3917e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD51d62c705092bee85bfa57674a919333f
SHA182d39aaac876555e3b9d36260608db30aa1c6c8a
SHA256806a549f89ecc846670e8dd0e0b9389ae2fe680fc3deee647ab9f28cbfee8dc6
SHA51250831bb0d672546006b2426abe0a165cd06980c6788b6818f36f78a19fa1c9afd9b9aa640f786be746fa8191af9c74227349d844f6886e016f88c72aa7644e38
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5b1cf4fcbd80346dfe382ad7fe53bf42f
SHA14f6567cc59661b801d3ee7c4990bbf85ff433f0d
SHA2563d2192d595efcc3a5c076311110720d5276534bf699d912f35c77b4cd8771d1b
SHA512ed6dfcb6a505b65a49195bdf76278bd39c1e19157446ca89205f5368cd9b483367c4a47141ba5f7d04c60cdbaa35d2476f2bbe35649ae81b7f7984629fe9a8a9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5c2bed9f0150c7e70a19a00dc3d7c61ad
SHA1265fdbc8d56d1b2cb1e9da82087ea7473794b5c6
SHA25601b73344b4451313603b8e5945e6fb647aab01e8943af0f32f8722425399b195
SHA512aa2a7b848909f70c6687c440dc5b73e241134f895865a7ae2a241bab9a13a8fa0cab1bf3722e8d8e8b9752269d4358a8bc66a98d3a64d0d2b2756b9e20639455
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD57324401260da09665fed7adcc3fa5960
SHA193d9f5a3cdbe3105157625ea1d39ae46fa58eff7
SHA25683d3f1d8ef9a7990f2a58e90efe74f8bcfe62584104d2e5b25d21f90f1d34eef
SHA512d6653eeec63377a403514de606cccea0791a1cef9b597b9227fcaa340868ea346d5113a3c968fb9051e2b9bd6558426a7ca09a8e1391c65f0834a5c59c3d4d71
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5b7361cc291320712b69aa37e8389d271
SHA1826a31977f23725c1e63f3c96821056bdf40d4c9
SHA2567d76bb532dd59217a42f1c2d6d6bcd2eed4ac8d21159ea58ca6c18ef7696fbfb
SHA51218b80db33dc7468aa8d5190a081e6f154a7a2828d4562e269f9ebd074a2a1b630f0b7c9ec439d87c6f4b4ad20ff5c6a391a38c3c8dfd164c5a44455b43ae83b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5250296ffd6fc4b43303c59b899082406
SHA1852cc9e36aaddde7bba7f32720138233983534ec
SHA256958764889194bfff1ec2c615ccd07642768b9de685d521264a43378dc9b0b892
SHA512fb85e7dcf9878ca9c6f3dc9e485a3280bd40d794076f60c663b7ed0abc27015be7e68a21a9234127416b15fc9625415fb8b56bf959762a873070ae144608014f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD500d18d451e8ffa86e90ed70644a1f40d
SHA173e7cbcfe2fa3a9ad0590a55b1404388e6c10558
SHA2563db22d2ec830ba59947faedb7bd4fa3a2c862a5c7504dc834eb56b2deaa85684
SHA5122a7017e39d8d38a6a7a8ada26114e42fb20b928b5f6cdae2c0b64c87ea632c17a2f5fea804d2d46ecb05ed6c63ca9a0114954b077c8744d12f9ea13e5da03f04
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD55d5736c64de5d8f98296d3282bb20cc6
SHA10008153091871ce3c275eaf7f2e130f2310cf9a6
SHA256dba9da68495917bc4d24eb87396b88c644ed5cf8886de023c5cf8ded50a0eff4
SHA51218078f2d751444fb98e21c7052e1ca171791f85829813625fa4f0fd490614b7614646a4bfd384b64cfe20576818cd832ff6231569269ae4b5661025141e3c8b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5e7b1e43db66a9c3d22e438b57ec9bc5c
SHA1f2952cfbf94f134b0e435d54723498e85a387a5b
SHA25609be1c8edfe303e9024cc1121ecfe493096c2cb6e54a02334b4ceacb002e9b6e
SHA51265592f4e5c77370b46abeb32b6e075edd36467e3d6125fbfa69e85e0bd75fdcc635717de039f7bbd75def382b1574abe026c147593e0c538a41cb4ade6619827
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5e56aa99ae47b3e783a8d7923c6912383
SHA161b643e6d11f095115f255960c40b4ccda6949fc
SHA2567b2ce00b3e89c40ad8e9727b84ef71635d3d7119450290470b3471abbb07e83b
SHA51226124fbfe473d5027d58ac12509bd90fd41eba172f0f215d3a64712d5b05cdf9589e8c1d03ccd760d34ce6f9eaf213c90385aa3adf96051ddc99dda2b98af638
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD5a015462ccf745e3c2e7ad9432a46f09c
SHA1cc44bb559b706fca506e7a121c0466302fb82736
SHA256f7d854bc68e2d505ef6e5a263a71d8d188cfaeb1c62c8af999898a4d9743fcc9
SHA5129c12aa8420b97ec52bdac1394c2c8463ceeb83af586afcf5f806c1dabf17043e5354267a3e5d32a6ca9fd3612af29b024e03f46e5c992d8e239c85a305485e72
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize304B
MD50b22753f3cfa8a472f42bc9d3cf55460
SHA1d06412ab3a804d09139765d74a1ca68b4bbbeb37
SHA2564364b876f13818111ab3af5aa7fd63d1906cb6a9afe656a6df2ff44449ae76aa
SHA5121a96689e1af14816edae7d21d63cb7d04fbc9e0791126152b3edf5eb2adaf511e2654f5c06ea1a5c3c53460dc4c21383fecf3a60da9b4a45d06ffafdb0dc087f
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b