Analysis
-
max time kernel
141s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/06/2024, 18:10
Static task
static1
Behavioral task
behavioral1
Sample
95cc22e5cc5f788c807f4e092a4e5340_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
95cc22e5cc5f788c807f4e092a4e5340_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
95cc22e5cc5f788c807f4e092a4e5340_JaffaCakes118.html
-
Size
122KB
-
MD5
95cc22e5cc5f788c807f4e092a4e5340
-
SHA1
fde18ff36f65685a695d5f6a2d0ddd3fda823506
-
SHA256
ad592b86a589e80ba7fe953fc5daf6419172bdcea8cabcd28e013c9bed2048e6
-
SHA512
cd2d35a66fecd1498666fa10298aa6646de4a51e68fb24260895b9d7a5c3a05c2d9d48d1a2335ac91da6975ab7a53b699e59dce33e5e2370b3be877bfe271cec
-
SSDEEP
1536:SsNsoyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGL:S9oyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 20d70ed0aab6da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000f10ced7113c5f440a08b40fe16f5af7300000000020000000000106600000001000020000000ad245c40434406730dc4332f4efb608bf130255c187f51ef92d0a9165bc4a180000000000e80000000020000200000003f579b42f6cdd3a1de922977ddfaf0c2024be10c5f5e14d51b7fe621f2bb215420000000c4ce5301b36453334885cb52bfa00d5a83b6b67e5df3c72c5d11220bb2fcfcef40000000fbdf92967b4a1e24d9aae32a66cf847e098e71e6ebf3adeec9a3c0308e50058ca04d22ba1b1b945c670d481f43107af244aa39e3d2b36011d964056ae9698f83 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B9C21951-229D-11EF-995F-5A791E92BC44} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423686497" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2288 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2288 iexplore.exe 2288 iexplore.exe 1376 IEXPLORE.EXE 1376 IEXPLORE.EXE 1376 IEXPLORE.EXE 1376 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2288 wrote to memory of 1376 2288 iexplore.exe 28 PID 2288 wrote to memory of 1376 2288 iexplore.exe 28 PID 2288 wrote to memory of 1376 2288 iexplore.exe 28 PID 2288 wrote to memory of 1376 2288 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\95cc22e5cc5f788c807f4e092a4e5340_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2288 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1376
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD563d424755d7549613d060f7239c015c3
SHA1175f681e184c5e55c08eef4837e4a950addd5a06
SHA256e882ff96400d383b926bf76b4d8c635ca74892867560e6900c649925d9efb985
SHA512f98d0fcfbef12aa697d8915fe5fa5698ff10a0fb68b9cc32e03be46a7b375fe6f2aae5982126982c7c095a9a647f417ba4b24f3646fc98919dd4b4211ea82bdf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD564cd32834fbd5e2d65ba7e382c7e410e
SHA1ac959a442a4598571c51f24aca88d03413264369
SHA256ed87336ef3bd90703ae5ad2af783d11b71ee33de2848cbdf79d7db4ead804861
SHA512787f50f72eb0e8686542cc6cd7355b480ec03e65251b2270f3411d43bf7e087673cfb52651f51467a53b45f6bfd602dc1bddfa8a11ef875faa5a0893f4d33434
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a7e5edaf839bc1970bd52d6b1e05be70
SHA129cd6fa080b413b99e243ed23b12735064357622
SHA256c1763289224be5da11a9fcf3b4a1783303e55b657d3fee99c6b44ce9a24c6b5e
SHA512e45cc07ebbf419a7a02d2ea1e0f70c74f09ee99fb793176337ee9787442b4a6d750aa13b18e2ade3ef5f35b6f9bbfdb0cc280b93b2cbe61ae7ec1c51223ea3b3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f7cae630944515c86b86e58181e79719
SHA141c12e5ed021f17fad681df6b425a41923dffb3f
SHA256f5a277d37721b46cdf2d3a26d9bad5d215bd7b49628a9cb52de600686dac37c2
SHA5126978e0c7d73c0a6f65d0c250eadf868d034aada146232efeb55121ef1e08b607f263db4a217319a37278231569f56f32c5c106b89c8a3028033aaa9a3c5cac20
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53997956405ed56d68aef0d835221b8ca
SHA1193ce4b8fddb038f10bad478fa91c452672bd53f
SHA256c85859eb2936a7c3eb5252a77447f136833f6008de3f065eea23f645683c1454
SHA5128964b493f12de0b17ba0dad4bfe3902fecddb19e72bf842e19d4be5070685a3b8efa32837bb4ab5a2bc38ca442e686d8b560d17b86dd8f31abde4ee34c6d4b74
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fb31381aeaf94176e276acdc2ede8f79
SHA1ed8efc33e21024119f3ffe89b524a4a2d1830d54
SHA256727832dc49b167449bfbd5a9be36298f0f4d42631dee59073201ad8601c7a87a
SHA51220966e2554bbdf63d29cda5040555b555be9f62a73486ba72ffaa351d917b1a6096405f8a916d6fd540965497bbef172d4c384a5042db76229bdc42222046983
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56c28492cec6539e00ecf9f4cbae19dfe
SHA1b4e6dd6af59d22e85b19e5b27a5e8b9deb6048b8
SHA256dd6a3f3f800d638cb80cd729a419c2fd12ab321003972780c09c1b3258d053ca
SHA5129e059267d7ecaa5684288cb3650338136c6a2fab9164a6a7275b1c999a72bcdb93ccd5f8490ab365caf949cd9efdfb72f46c3aaf75cda02d0955c0750c663af8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD512f549d0194521564eb222cfac3f2220
SHA1b909be72aec85f31ab91fc1dad2f6b78a87c215b
SHA2566163708117573d5b45428f722372aa609833530679f3f565d0d8e243bc624590
SHA512c6f45fab3268e101b05c72e73d4cb17ee5580b194300b1710b496ce07676d6262ac01672395d82fb7e0ca295cd32c4c518f85d663861246603bf1f72e5632fbc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ea1ac610f51aa63d7483f40cf904c5fa
SHA1a71f9445252dbe94ae23a313ff93e6ea880031e3
SHA25644511691aa4ef0cef9b88a028bc5b30c112e569b5eb4d09ed4a6dae4e9d3fa1e
SHA512239c740ec0545f91419286f48fd80bd751cec75b7508b92e7e247b5d49efe3328918265b09c855d9d6b28ce8f58fb1dc6996fe11dfad95ecd9f184081ad35e2e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50281b04c2e38e72242327bccba1a0dff
SHA1c204c660135fbc9d52025937d9cc7480ee8ce437
SHA256fb745f14eb51ec07c622088c724b60b9b418b67499325edb1c662c5d88cb690c
SHA512f2a3fd2c9b6f7434ebd2f90cd2f0e0a1150928fba4fb982e334c3fab1d38de6194e072cee59ffc4eb1b48bd81add3427ed2ab2a39ada11970f24b1ab1fff7e62
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fcdc1b0a40d644fe0cef9d647290fc24
SHA125546ca53481ae0d07154d5e13fc8f0599b6b9b5
SHA256e876a7c91bcce846774a59dcc7ac613249119fde9592d1a0fcef58c2cf322bcc
SHA512a0931e15ebfc3725e383ee870c34a3c06970dd6f4cd43fb54fb8a9fc56c1f01792d5dd0eac232a946d72e5a220838ad70ae62bda2a34d0516de1da601ded4a2f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55fabec11138c4752fff1cf937580416e
SHA144d1129d37691490a73fb543369a27b0d6bf6259
SHA256d9f68d03ee9a4cc577374ea9c8ae6cc54c2eaa865ed1eefadca0d2a79853673a
SHA5124dee7718783a2d52a57809e9871a00be037f90717f782c6ab981614870194c43443643f32f1e5cd1ccbb460d45810eb8ba201bc95357fa2d80f23ed8117ff447
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fab84ed94a3b35a8559e9c6e343baa8b
SHA13f52ccd0c539f51750799799d9daad7abb27f4f7
SHA256c4cec94db2509b1ed8182ead55d8d25c8f7bbd32067b8db434f2dcc4741fc8ec
SHA51211c9f7d4155267a41d47d886c1b42316bfd7fff6565ee300b4bb42baa34286d64ae4aa36e02b91a6e197c71f285c8ddea7b94e78e363d45c70d1ab7d73c6c240
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59dd15a3f77048342cfbc0af2dda0cee8
SHA19b7400d70e41d802897235a826d9d0917ad8cea0
SHA256d126a9861486c32c8249cde79de32dea9110340ceff5aa8cc92130afe19bcdb0
SHA5127477c8efdbffe14831d53bd13bffde6d6a10e1d58ecb3e66938cd01291d60d1da8791900bd065455229d8a824497caa026b1677114232eac8fcb46a3627f857c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57a42f58ecddfba785513a20211dec488
SHA1d33859cf23a4f78019d6296d771ae85435db18e1
SHA2563bfab72970a0595ae304983acf3f7a83d4691931407c4c7512bc3c32283cae28
SHA512e9c124028d343fc211ddf9686913ae128e49ed1507826e05b5345a09f04923ee9d48dbe3bc6b67a30ef50ffd612ecc393e82f8bc577a75f6e92e7af81210245f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53aee6fd3318bcb417ca78e3cff252db9
SHA16c528765378cf6ba796bebb9e9cce6b47be058b0
SHA2561417f3bed6065b7897b30f1ba242d5db89b4075d28aff379711498ccc25cc17c
SHA512f2004261fbcddd75ffa1a3d5adb784823d5266fb111862c71865eb23872181e3b3dc5d28121ff77c6cf41a7980a16887bb85f96c6e18333e23f89024bfead1c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5831879c3ccb9928aaf378b7d0a93e83e
SHA16806a26bf2a278770501059c25020ea5047fd551
SHA25627beea48ee6cd494dab925cfe3284ebdb89bbdbfcb1b871b02199a54e396c0e9
SHA51233dba68b1f5c9a40f5a7eb3b14457eddba5d182c1a01afd59418286d529241fe5b915c82df06e0e2069b6307c44b6454730b182efb947aec16d0ebdf5a9a67d6
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b