Analysis
-
max time kernel
117s -
max time network
135s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/06/2024, 16:53
Static task
static1
Behavioral task
behavioral1
Sample
92830dfa9dc37bd49dee2570bc909115_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
92830dfa9dc37bd49dee2570bc909115_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
92830dfa9dc37bd49dee2570bc909115_JaffaCakes118.html
-
Size
2KB
-
MD5
92830dfa9dc37bd49dee2570bc909115
-
SHA1
787f8157716f773b97a8b6688c45d4738f1733bc
-
SHA256
53e370dd546e6f68a2461645951dc93ce39ca42e7f57a174b54f2c8f24a3b0e4
-
SHA512
61c872653bab87cb010971973e63c470906d17f6372d0eb2e46c1c2565266e03d3fa5b0bf33695c22849d7e2af5743b1431ca2633818f1b51efdb9d1b9caa5f0
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000077e52fb410cefb4c879a3ce4f502ef21000000000200000000001066000000010000200000005ef2caf51fb474cb34493e64c04d3e74d0b26e22d2a0573da3cef9ccb230253b000000000e80000000020000200000000c83fb4851f81148b785ae08af5992998164b8d909a7122120562c0719d462f920000000a8036a06f141ea5d1b971d34effa0f8f29fcd5431c1a888d523b5cc656c820b34000000055118413762811561e07aa4c60e743d656d98c4a6af659e215821e984af44b927fcf659c4e653eddcd7bda82ed02ea2823969fb17d0a1dcd781da82ec5aec94b iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423595467" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{C6502151-21C9-11EF-BF06-56D57A935C49} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d079369ed6b5da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2076 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2076 iexplore.exe 2076 iexplore.exe 1164 IEXPLORE.EXE 1164 IEXPLORE.EXE 1164 IEXPLORE.EXE 1164 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2076 wrote to memory of 1164 2076 iexplore.exe 28 PID 2076 wrote to memory of 1164 2076 iexplore.exe 28 PID 2076 wrote to memory of 1164 2076 iexplore.exe 28 PID 2076 wrote to memory of 1164 2076 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\92830dfa9dc37bd49dee2570bc909115_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2076 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2076 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1164
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5be7337d6576d5d83f517073b1720ead4
SHA1f0f234c7f9b3ba3e0fc839d37d3b87134509c3eb
SHA256e79502f0d0c2e9671d640711965d0e833968ba1e146b77b3e0f65a6d9d95b147
SHA5129c92c5543f0033f96f94b69ace1088bc1972b83e47b0e1f6dc2893e5ee4c95356b93b3838fd46c1cef2b3c63fe6dd64ba62efb0171b286d6a3b9139ceaa6b8e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b2a00bec403ce2b654569ad3dcc0c6b7
SHA10daf436cf06cd3b4448a4e60af868c9e2084fcff
SHA256879b0c5ac257c9c517a5850d5929327628e4ac3cfa3dfba4c7d7a6bb88c09e16
SHA5125e22c9f42360497c98da662654f291731197b5c2ea2828ffb62f087674bb5861db3fdc230e3fb5e9bc5f5f74f72cab4983c64a79e3959fc6ccf96aba6205735d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c9dd1d08c3011b825c92228a02a192b3
SHA187a70e3e359afde2c8fa86fda12e7397aebf6547
SHA256ebf14f7a10b94fd4ce64bed5c162f4ee0f3edcf6ac3c31b12a9df93902eeb6b9
SHA512fdccf1b830c2c7cf518d607193c865d4082549b4990334fcced3c57bfc62321aaedf17141c0b2de4376c29b3fbc529f3e49884570f3de0e75cb754ed0874a81c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f079db151a88b4929c6f9c6216015d64
SHA1c12b8b06ec15a3a8f6f14ea025c9431ad0a2b604
SHA2561697f6e9947faaf60016d3cf78ff17bf75225102c86bdb32d65cc4b2eb2c5bb6
SHA5120ef544a384a3152981e35f3a1b73f37193be0506ea5fb2597ead6f8a6f80d422f51fd54c7c2ecc286ea3cd5e3c6decc21bf01781f2732c8573070bda4d5eb0d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53c6238e2022ee8aab999987d5f784c52
SHA1e5d82886d6d83531b9c20d1db1c86a84f85a7477
SHA25669d2fca5ee518a5e515d829dce075c1d48c91ae498274e5fe9421b3d3e010c92
SHA5125f09fa7d9ccfdd81351d11522f1dc562685f1fe84ed9152247216c5e14f8c0418a6abb30f06be26412bbe2a37f17e68a6847eef4fcd4f4832b1b47b4c7da04f9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD548c5f17031c1c24755108927c38f4982
SHA11ac37449033a878359348cb75ee21edefa4b3820
SHA256e429a2eb9d3cae75dca980462f7877f69307f0d99af4c8af5abaa38f3f23c3c7
SHA512fbcea86d7596790b90fed16228c954e98d2cb1eb08695f662b2a703a98d9bf38d03d7ecbdff657bd417848e1ade43be39a3d5e648ddaaeb8ade2eafc560a5d18
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD595611beb07a076f174c8881564463792
SHA1d4831cdbca80973c52412510a386ec785a003551
SHA256cc7a53d2a4e9a3b8d75b965461de2646a879631784e6a2f84807282b6caa8ab0
SHA512feea5e168393961605bb7db95e2a557dea63977d0351b7f0c9ce2730c5e45454fc5506caf1077fc80c0370898e93056b3b45619d4b1d26bad0b41196aa78871a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57b62bdff24328efe005b6b0fedf76eb5
SHA11e641c5abb66b1744357cffbe44469db3ac3e81c
SHA256be8df1ba7f526172822402a615676cfcb37b5b7bbcb56dfdb395041c305020c0
SHA512400c68e340c72e46acd6f01e7ad206da7c5d75e384ac388accced68fb567d884b9b5735d8866daad79f5684a53e1ebdee51c8a9a6a28aaeff0bc734535814aaa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52c85f19c3e73e61cd83968476abf5984
SHA18e33fdcbfb0c783d065ed7bc2b2bb874fe21bd22
SHA256082de25d7b95f2c47f9c9dc521c0bfda9468ae506303d941bed1f87031ba87d3
SHA5121ee89f5b4155d09f91346348fe3c51b720d624b682fd748666b86740cf78705f9a421e512a2b6a724c16a9b5c3b1961f01a7f09a20837562c001972479eae684
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD584f4ed57f552e5741aed561fe1889f9e
SHA14271af5ff0fc106db9b49d6c2f39896b0793b31f
SHA256b7f1bd59a17540c0df46af1f688913ea2dccae04948e7a6a28fb52de1936fa21
SHA512d9684d628f3357382bc3418406106a2dcd2375cdac57752203d856197916d8b50c3a55d40f729324296d0042af84ce2afc146afb1cbfa4816d018f94ec0cfa94
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f136129187b3ce4b5ba76973be1e4674
SHA1361916b557f25b5e637fedfc29a08a252732e713
SHA2565583fc18d3cd7a7329ca897c80149616f9a8d8097d6b248e0a8a99bdbb147d74
SHA51275f3c5507c856614c4dc2960afcbca0022dc08b3dd3b9ebb2ad25c661e638cc54474086f916b1a776b216102340214446ac6661f065c62567b900e51c91c1109
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b42570d483732f2bba26e29672c5bf9c
SHA14745ce9a932162171952386db5560ea7840afece
SHA2566534cebae65d6bdca8b5b419235107575471a424d0ef5c851dad5114f9213cf9
SHA512ee86035f0d4fd461560a9672380d1b17f46f3ec9eaf0cc33bca1b26f3f55e0c8acdc93bea39d0df11005d350443b741dc805230312f72ada1c8a5792632c3af5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD509fb7cd0991281cde9e13002ea879712
SHA1932191ab909220e862f60c2e4145643ef70a7975
SHA256fcbef298afc5fa9a49caa2852210e2adfc6f422ca3e5ae6c963b47176823260e
SHA512c76ba4b90059ca2dc1327a21596ba68bd4658c0e903f51e32b6ee01135c87c85be28d91cbdbe92db7e4f916df67cdc62d38e9bb9a53387e5972b9551e8f1e8db
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5031057ed8eaae6e437663f62dc47454f
SHA1778b302b89655553b4bf52bff470feeb15d923c2
SHA2564b7d08c25eeb12772bed5a494cafa7f36044067ecda01e13a7dac8f7bf11e04c
SHA5125d501e1f188324fda9c0383e8430a55090c9eb73943c3cfb3419790db787dee8ce3b9e8eb1fcb33f99dc54c8972440f35909e85be26c3f07d30b80c802a14ba1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a7a1d584e3b759797389f330b37dbd16
SHA1b5aa6e202ea02c4e88ddac729fd2526f84f1076d
SHA256d911c4d65f38e68897a5f226d20d433144d7079ea11bc82d901d73417339b7d3
SHA5121006be25340e00ca7ff9f04391906ae144658f2b12700e8ed4b169d082486bbe2fa9299fa4c81780ad835d6bb4d45fdbd91eee37747eb1ee3b00f5835cbf5994
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD597dfe30f24253b98808136fec596a012
SHA12988cf6bbc589eb3eebde237fb5cd05e8dd1f48f
SHA256b9bc5fe1a44fc5fa6e0c74c920560d2173711e8cf4996a181802b311b5c1a3a5
SHA51228602e2414f5868d47dfea8eef27759d8a8c112de32c2908b12f18939bca592df8109ade1526e702a633b641ffd513ae943ee037e7d36abefaac4ac3701112ac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56e530710f432b2e564421960b7344bd1
SHA12e7b609478449b23dd58e21d565a116491cfcdc5
SHA256683e824ec65eced5452110397aad5e1112a031904ec1a8accc23db07435ccc81
SHA5129b34ba23935589157c3135c7cc7628ef283de0475a84c0d2a54cc8b4a180c6aec3d361cff13c3692b47bb1e3b9132aa5d2c34ef4ab364606bac06df5014bc373
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58d5142fa756fdc86820555030254f49b
SHA102edf7ebc9d15debabac2f1b4d84cf48b31defb2
SHA256b9a05515a59cbf75fff5f808f1d1da22879f3f7fec497951a5bd135ccfaa935b
SHA512d25f8430afed666aead05e8efbb2b0dc70b0962f381aa102bc2fc2da7c8722ef0f4ef9ee75b68d05c644c953d6587a271c48d91283a5bbe9b667e0319cfd3c5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fd80636ec6737eaa8c0ae63d01153128
SHA1d18c00aa08a0bbbe0496238c155369bd04ac4342
SHA25643d9ca8989aaf55cb1cc165920d79c8afa1e498e34c8f8491ae2a3d6592d291c
SHA512b69acdd1fe7cf02cd34dad53c29f9794e320a3be171d3d48f776a1f9b3ec4bf897c19be22c59ef2e554c163001468af6ad1f123664ce0eac949c22f48d193a87
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56fd2e66fc8a2fb662c93a24b6c54d5b6
SHA12280730f5c4c3647156700e03d086554b73c90a1
SHA256c497d34ff447f830ddb838edddb8a0914890345d7b20a15e7b418522be3bdc5b
SHA5129e2aec5eb140b7ef046b54a5261a31ae8fa3749890ea80cd772fb51119d1f13bdf477a765ee3ace691f660903769ade04248d8f8aadf9329e18dad22ccac92ec
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b