Analysis
-
max time kernel
119s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04-06-2024 03:50
Static task
static1
Behavioral task
behavioral1
Sample
938ad5f0c78478f3a4ed303c1b21b97e_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
938ad5f0c78478f3a4ed303c1b21b97e_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
938ad5f0c78478f3a4ed303c1b21b97e_JaffaCakes118.html
-
Size
337KB
-
MD5
938ad5f0c78478f3a4ed303c1b21b97e
-
SHA1
8edd524b97496896dff5835f45fdd29e3bb83c34
-
SHA256
cf4e6d99780e8f10bacbb550a95b1dfc09512e25d806c83ed5b528d816429184
-
SHA512
d0673ad0f89920bd1685e4c78a1d7eee39495df20e393fa65e06756e985aa01e5d0873b77ce33e174e6250859ebb0e5c3159fcb20e4272d711a7b517a5657f7f
-
SSDEEP
6144:S+XsMYod+X3oI+YVsMYod+X3oI+YcsMYod+X3oI+YQ:j75d+X335d+X345d+X3+
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 3019946732b6da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000003d0361af82d18c40b81d90c1d6a410f20000000002000000000010660000000100002000000098a686b0775321a218ea3ddde4830251b9224295e0f0a0320ad841ef952a4268000000000e8000000002000020000000c6afdc157a0b2b95e6ab0f47150280b7b48dde1794be27ef49f8ae98046432d720000000612693e50a52e69e5c875ef147b302e946da681e08409d9934150f3116988cad400000001f2b6708d94bf2e1aaf87c4bd30f7384f47c49fcb7a9fc58a65357bde4aa3c2e18ad06e6e19ec64204d428145134e29a08bc224cd3ea54dd8620d52d346ed8ce iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{926FDE51-2225-11EF-8698-5E73522EB9B5} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423634893" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2812 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2812 iexplore.exe 2812 iexplore.exe 2816 IEXPLORE.EXE 2816 IEXPLORE.EXE 2816 IEXPLORE.EXE 2816 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2812 wrote to memory of 2816 2812 iexplore.exe 28 PID 2812 wrote to memory of 2816 2812 iexplore.exe 28 PID 2812 wrote to memory of 2816 2812 iexplore.exe 28 PID 2812 wrote to memory of 2816 2812 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\938ad5f0c78478f3a4ed303c1b21b97e_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2812 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2812 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2816
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a1f8a092e731a5d34a2073186dfad113
SHA1e5c830a8f349edfeabea22de917992f6c1618161
SHA2560571c12376b39cc9ad303a4133fc04ed95092cc477e6e75de940373ea2748065
SHA512b425d5376bc7876952a1607bea4f36652a68e85474b78f3de1fe61e731e353e76a9c6aa285e2d2b64ddd8e0495f2373b076cb8b99c24d26dfd03a00de5e24358
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5494a0898b8c12979aabe359e6d1b3dd2
SHA1ac0b6d4a65079b161996833196897d80af3686c3
SHA25603a81f69d2023bc321e33a5347b1b264f9d0c4f518e45577f285566e9da7a715
SHA512575b211ffb070aec61387924922fce8e9cf94fc69cfa95f45334524ec26b13dcf713f3c8413f04346b41fa1ef591abb2ddaa0252939dc0f5520fbd8d03b39664
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55bc8176698a7a58426f4ca938e0e342b
SHA184378b1a25d684aaf57de08037237cafc456834b
SHA25696448b8fa1c35adfcd577fd0e02ca98a18baaf1dcd7f3b7850f275aee1d50fe1
SHA51206406a89caea0bad80d30a015ff811b9029d231440d21e888db88ea3d0f19ee79bc397a0d5bf1119e92b29da106b46d4ff6c04716ed00176ca8ae9fb5ce801bb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58b9831bce566809282b4e42ccd3dfabf
SHA1ed83ef62686179a7efea629ef683284492099d8b
SHA256fdc7294ce56debbc73bcbb29f215880e8d78a83c33123690bf3903770d1cb4cb
SHA5120a1b362a2f57c818ed778f13f5d7fe50f92b6d2722e33543cae834709f07693fdf38baef5deee315e7a756d2a8e21d90b024c07a6e00357fa4bfda9f84f4bb6a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD531e1b42bf588f0ce8d918e01ae818aa7
SHA1630dab75b84e09fbfd1cec8f25115f80673e5689
SHA25692b83f57b523b5f46cad6f7ef449e0429349d110e28ee54cd1eef3e78327f217
SHA512faf0ca7abab836b5983ea9f676246b4eba67ff0836428da871bb5cad231c023b61f6d4010c07e1aa0831b81b375de77231c2de7c9185d2e252c526d7fff8edf7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58cd16fce2f590873ca57e755ba51d0b6
SHA12ba5ffdf0007d7cdf707ddf6dc4e78c32405d52d
SHA2567973320927528532ec4982f397f9450f36f1665d15857a84474b8f10537491bf
SHA5126ba51427da0509c7768b24748b60ac2802d2c9de9ca7896ea4be600622a9664e43837e10508a7cca9ebda46853c6fae2a53f8c16b92ab94f7528926ff27c628c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5113577422599a94ae25f3b5c57ceefc7
SHA1b082ccd8f1d8cea6b01d0e1ba208199907024a08
SHA256b22162f3962ec6be07aa2f8807097ade79157dfc1be5979d7e383e3e423e0048
SHA512255ca3926ed1da974394fc864d2ded2ff4b5cc342ed37039430bdfd0e32bdd701aaa7133dc4dc3662c18336f061f35e41269ca15a0044d1d9f618a5836f39217
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b4424115679e91315b3cbffea42789b9
SHA1d8a2c74d61b46b1f33cfb4713357bf5b99f41821
SHA256241c4355421e606656679d7bab79b92372db88d0e11ca572cc04309e739d4b35
SHA5123f2822ab3cb984587fb18015800eb0f9b4ea955d4378f341189708769991f0c54d80948e6725fff9a6ec1dbd9a8581629a73cb8cca844453d3fc5b5c19a4296c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56863f9aa695a48879e822e9d2bf38b30
SHA17f1a2b60b25e3232b0679ecafc3100df6b05fb4b
SHA256069e2c13f714ef8290ae329f2827c3c7d7d0b45604047e0c928674d56fea5f2b
SHA5120ece33353dca43059cf5eb0dd5bb6d949892ec096cccf68c563e7f2c5ebfdcf91d7c660685a97010a2c61df211a1a3c78388af3d0640fa4b59eb70b535f531c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5722bdaa062fb9cd232aa9cb1e988f729
SHA158497a430912c370ab086ace42927de1632812c6
SHA25608d239c58af0180b19fbbed0014f9ae5de68d2ba5b927c552f4661655c016419
SHA5120654a70965ec6e1341d86e2992e58a564cc745865a3e0807cb0367494e2720675224687472f04164b8c184f43ad7835e622e10cd25e5879ad0f0c6834128777c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5950872053017fa24f89a7a8ec06d4a9c
SHA1f53ccddc06745e8dcf233d39b6cc7ad11ad9282e
SHA256bb680ac0b647f385c99172a5e521140b51a5a7f473cb9b029cd9b06fb9b48850
SHA512f881799cf9a6bfb7b3833691493c25d98e78a9fbee204cb75d379675d4c8fb3cb700e2a087e8c5d6eb9c2abf80b7d9719fbd5161327f07f633c43a01f9154292
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5eb466868cc4d9829ab8f8debeda60300
SHA17e06908a8d926af7744ce8515f8ae67f2018c798
SHA2561404b82da679ae44559b663dad86b6e41247759bf5ed68965b4b90c82fd42d5a
SHA51200b6d99d30450f2c1d3d57f854849b639999a920b73f6039ed08d9fd8b684cee713f3a33d27ab6e6a1ca51f343a9d0d946d6cc85de408218c7b7cf1daaffa823
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f7b7ea69f42843e0603000331365f0a8
SHA122c375ce509e6be3f33dbf70cf3ad202f3b1aea0
SHA256dcfdefdcd7c5c19f3cb001603cdbe79e4bc231f27921874bbca33a09d67daf9d
SHA512fa7221b7f8d7d24e4c24759578404afbfa7cbf90d3f588353f96722990a4156dda18b5007111d35d1e2609880b7f2446e15a4dfe422e558327f9406bcb344dae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD519ef90b954c87f850510b3dbcd442d6a
SHA1d2618ebcc3f3348ff9ecec8462b338d9df31529f
SHA256905ece0293fe3ad6281f539897e8962e49cf67f2b84098f16ab66bc8c94f9612
SHA512ad0567e23e3ebde8f00b967b12bbc577863fe19e64873727f485a6f66e581de397d19de25d5a537ca009dee7acb9d5d5aa1aef0ae131313e32c6f0d41fd0c751
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ebd51ec60300d9f33940332baaf85d51
SHA1932fb8e5fd97d7f4c1d9cad3105ed727ef5ee2cc
SHA256b26cf49e17708f38e16d7139fc38bb8877820e2fce3e88e062a500991effe28e
SHA512c1c4bbd39160d9897418571f6aa84bc7b44bcce9bf5ddb2a4c2b03d4634699151e5773ebd95d752c597bc77c2b375d4a962d8516dcab18fcf4aa2a5d93afee89
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e0857918092a55c42108910b134332ef
SHA1cd664b05cf80f4df92a171d08e7c09ccd480b473
SHA256db219bf2958bfd0568475444d0ad461c9755d977a653253cbc683730427907d0
SHA512ab104a7dc5b42ee14ec55f9f73e18c4f59b9c1797d76dd1b2f95d06eb035af77b4fcba0a532b85b377630c792066f976410ac01c78b795f1e3dcdd44b9776832
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f99e1c9d65d9ac53a903992fecd4a4ec
SHA1bbb0738399fcaa513d32f0f6cdb3e546ffcbbd27
SHA256e810d3cd2a944d25aa18e8676dc84afdcdb489945e2b931df4fa0d480beccd59
SHA5125499ced4517b1c14d52217d38c00f4ad4eb50f7417c900657f6783a53a20bd8ff27ba4cf8ccb8c4cf7de209e14637cdcaaa8da1f83eeef2bf222c0d887e03aec
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b