Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/06/2024, 07:21
Static task
static1
Behavioral task
behavioral1
Sample
93fdf2b09c1afbfe25b58ca77e3a447a_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
93fdf2b09c1afbfe25b58ca77e3a447a_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
93fdf2b09c1afbfe25b58ca77e3a447a_JaffaCakes118.html
-
Size
460KB
-
MD5
93fdf2b09c1afbfe25b58ca77e3a447a
-
SHA1
24d577cf21ba4eb770cab947be798fc255b9256e
-
SHA256
e09631faa7e93584bde33ff2eaad9f72fbd398947e7713ab7743f6df53392248
-
SHA512
316a2ffa736b3e73380efad73d3a62d997de0a165bef7005fbb02dca77910e953e46fddaaa3dae2d0af81691d28e73ccc2aff6b9669c59f2df1d187e3affc796
-
SSDEEP
6144:S7sMYod+X3oI+YQsMYod+X3oI+Yh/sMYod+X3oI+YLsMYod+X3oI+YQ:Q5d+X3Y5d+X3P5d+X315d+X3+
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e59537da473fd648a5342e531ceb719100000000020000000000106600000001000020000000d18063fd2d66346b8dfd74a64b5ab2133de8d91009922aab8657fd332a1c3bc9000000000e80000000020000200000003505f78bf93e5017a8e01ea964dea8588edc5299d4142f69af0ad74e7f6d7913200000009d6c36d00b108b22f394ffd503ed0f883ba77e6edb66f7a8e3e028eab272e57f40000000dd1616164e994297b275e4d2f53a14780dc15c18c9064e4ceab2b2822ea38b2634fc969a978e5fa13ec3937af3a874dabe7fe59567c4fda83b18a9889b78645d iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423647561" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 60b491ea4fb6da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{120966F1-2243-11EF-B826-EA483E0BCDAF} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2876 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2876 iexplore.exe 2876 iexplore.exe 2964 IEXPLORE.EXE 2964 IEXPLORE.EXE 2964 IEXPLORE.EXE 2964 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2876 wrote to memory of 2964 2876 iexplore.exe 28 PID 2876 wrote to memory of 2964 2876 iexplore.exe 28 PID 2876 wrote to memory of 2964 2876 iexplore.exe 28 PID 2876 wrote to memory of 2964 2876 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\93fdf2b09c1afbfe25b58ca77e3a447a_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2876 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2964
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ab792fc7809451c930da458ab3500aa6
SHA1dd298b3564f3c536abbda430ac71432af3c3c943
SHA256a68e38060ce87c51b3787361c8912857fbfcb587cec76615d7d29c8542a12a1d
SHA51254697d9e9aeeb70d61c5465f80c8c38fea3e0b8cc2e665510470144d7981ef26a70444c51186fcceeeccd167f68bdcc29e817ce6e51d82e340b0df77471d5351
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56ea9d19064837b79f8583c066382a8ca
SHA106f00de2d576b83f523a729f44a2f948bab75afc
SHA2564f4da9af6f599323e102202c87777617f6a8c1e34071450b338f8ee489e689d4
SHA512c716a416210076dc9ee78ce377f9eab1080aaf0a4bddcbd054528eebe383314b526f871fe2f9d5a52d91def4ddf91408ba67b18831e56e42f14cca941910fd74
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b6153a364dba753b1a0842bba4f6dd31
SHA18676751b7ce7f3050c8564ec24eccbbd0828fdd3
SHA256b566f44caecae9a2d3a007bc55ffa2c07168e9440edb8ce9eb26499dbe34464e
SHA51258a8166c7ad7f10d8c483a7095361ad1568712e3baca67c9556a37c985f7e25306f930a2232b6af66d9dc1ec822938c6273b3b5fdfa1dfbd4aa1fb924449f203
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5832b1ded95cd4b235f1122092a1a1803
SHA1540da63e71acec7f428421b019590b0566b32d74
SHA256967856335e35d95a5814c5257c596c8b599fd787091371809cafb1c93b1b52f2
SHA512f482e98ad0962e7dfe9724055efc118e2e12d837343564158297f679a64e19a105df3517cf6b148fdf23ffcc49bfc0deb56298f64006c2df141ac9868d1a017b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55e11ababa2ce0279447af855c1fc56d6
SHA103c2cb2a0b006932a9c232f6977fff0021c55d16
SHA2567f31df4fb89b16b587b91d6438bcd5a9fcac9a469686b02c12f7e376416a21c8
SHA51226a71ca26d3c3e3a066309a8f086675f7795f388dbea53b787733efec313b940bda15f82a18e46dd0adf639c241439eab5fb552cecf164a51b7a641766a0490f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e880b212bede55ed7dbc0cdbb18d510b
SHA1e16590f4eeb15a5c5ef46efdc9b32bb16cf3cfa3
SHA256560c85351be21473447db12e8299bbf9eed58f6f476bbd7b4f2e1dacb52f6eb1
SHA5129a2db05a4b18f00755fa6d050eb94f1ee15fd2493fcb07a6fc827a7e2818c534b40253778bba39723fbe02461d8c9f96a6983eff0c1734e0be8d615e2862a041
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5abb73ba4a416aef65874efaebe1f05b8
SHA1a08a6d08886603d7993a7a3014094278af9772cb
SHA256196c291e3aeb78f3f6f53ea23898c31bdabc6ee1831d892048563ee256a4b9d0
SHA512cbb96f827054ce5f46a589330e5d975b7d57dc220fb6b16e55bbfdbda620d54d13ff2db9caf8f092dfd293def057b1859cfda4875419a7aaee5a2ba34e5796ed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f61968e999e7e9e742b305225a980884
SHA1a1d326abb1cbc0fec4b314ab855be045b7f294ea
SHA256428a20f3b6dd0bdfc7f288a4a1e20a63bfd0abc64302305be5a68361963254e4
SHA512bc4de60024d322033b863b6dddb04828c853468b624ae50a6a037c9428738b8b8ea41c8aa6277b42aaa6554b6c55b1c9fad671e3db39e3305359796a37b767c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50f0acd04f6fe4050f163e9e359c5999d
SHA1c1614ebfdacd159740f3158b270040bf2b3b9ae4
SHA2564ad2f29b917f66cbeb7837b89054904214793d796b9dc8cabbd628338868dc76
SHA512338463ede4435db70edabbd0d0b494cf56759757e0110025fbfa80344e97bcef2788964d3cb25e5f8684498239763e10a8b9ed4b3f8f08040b458f5038b05685
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58d3af88a1fe3fed97b34681057763628
SHA131dd6d728f68cadf170e734a973cbd9fa7614fce
SHA2568cc0e86ad37ae25e6dbfa3166f2fe32bc9dda135be7639a5c52c855358eb1db3
SHA51234e21b58b80ede45641c6c5f6d42c806af2a2256cd588be78061a50999f58198a0de266bc6b06f89c72dd09c4c3fe7c70b225be00766dcad729598095bcfe3f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58be40ab50554de010468e709c6a837fb
SHA1b578e2460e0dd6813d979c15f30fe730cf5101cd
SHA2569c4ac031b6421e6e45b2198fa496a821d9cf18ad26456992e07647ac44e15574
SHA512c6f580e9696407fb19d25c4c778b2a74f1a92ea324e881cb3ef4655dbc66487fb9121f6e412a35ec0f902946780acc53bc51cfbcc02c363bf8a24b73bd44e883
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD525bea5393973bb39e973cdb9eb672209
SHA129ed2d1ad8b18e669d19501bd189de3eac98e4d9
SHA2567b820426788cd84399aa68f5aea4f25377631dbfeb6f562e35ab3498babf9c0e
SHA5128e10fd84a15c02dc8d1006927d95867cf1afec9a2637c202470d924e98bbd55aa9d7352a7e43b1fff00fa523475e53aaf373733bc5362f1089658ee95f9f1957
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55df4995e125c28bbaf39789918c4b29f
SHA14dc40dcba300c98491638f16d600c47ebc8a61c5
SHA25674edb60ffdb723329bff06bb044c2e8e5992aa8fc11aea811906249a095932cd
SHA5122c66d79f91ae92fb604c6edd49aeb919f922d9f35ba0d28731ea505b70429cf441d4a765c9e01c3c180fc1a1564224e07cf9dfd958410271c0cea59065895b27
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51e7dc31b2c5f79972e60171543df7690
SHA1f2f2a9401372038816669e4f72c18d131d304f70
SHA2563e9404f3ea4abf047d67c9e4294678477349154641c8c4ad8e70049d3a4bd15f
SHA512e007796e8be0e4cb45fbbb90438b661de79792ac310da43afed93c9d2ad4af24f8c748c9c9731003ecb1258541057fa213ec70f9a1a5d03191d4dd875259a061
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD599849b4fae8ace7f2761685b66fd04ff
SHA1a924669e2754c94f57571620df659bc9926364f9
SHA256acf15c7263e7ff4fdadb576bdbe3f59c551320ef2039aa6dd16ff650d0251883
SHA512fb2d61840979b05f2c7f47496d3d5e5cb5fbaeb179cb9c93f631f2825bae866dd81ce0dc4bdbbcf0413dd016f84b3c3666f0dcd8e21a0cb299c1abaa1cffe1f0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD521ba78c1d1743dd0977d044e8b332cd1
SHA18c96a465b03d313ba5e4a83d514c52def307109e
SHA25635a9f43a0c346fdb316be5be9cc3fb645ff5054f70f07938e1ad05bfe1ed15c7
SHA5125fa11c52124cafabaf047f028edcee7fd4e83e26c25c37eede013d6cef25a1e87a556bc3dad910f66aed33ee122ad207bd3e40307006ab90f86e571f047755bf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fce170fd1233d9092f42a500661243cc
SHA1891e0c560ff917e38ce6b9bbdc9696b8f6b77a52
SHA2564373ea7127b5f14dac43499176936e42a2bca2e3d747163bd25516f8c048cf96
SHA512e23f9c8a20f6175d353661852a59b8e26a967d027af62ebf842f748dde262d92877ae8db9db0b2a9b861398e0f472d1a2c2901ead4c2b7a7a2477d6794d0517a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e24829857671d316b764f9d9f3790a6b
SHA19fab60b4264f931ff8bfee8c7aaa0d854e91afa2
SHA256fa7b5238e10bc3028cf322afda812e87dcad825249a7c7927790bd11e76a455f
SHA51288c2051fc88d1d424968a67a378c93a1bb46a4362d172b48f13f3287d03d30d2e99b127c4efdf2ad75879bef927ecbb565afaacdced987baf8379862fd883b1e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ee420dc731aea5d4a6947efef5511005
SHA1d46c768e170644f3a7c6887dec975cd43ed8c728
SHA256e95444e028968dc05f9d52b17e454a5abd02ddaf67378add33a942d133e3d638
SHA512584d06c8d49ff1540d77816956e0b8b649aeea302dde201b2e076956cf3634a5b4b6f8f28d218122f1eaaf5acbe1151cdd1ca7d4a6e527532d324b1d6e653c40
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b