Analysis
-
max time kernel
144s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
05/06/2024, 13:48
Static task
static1
Behavioral task
behavioral1
Sample
98527c642f420824b869fcd31f5d5d49_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
98527c642f420824b869fcd31f5d5d49_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
98527c642f420824b869fcd31f5d5d49_JaffaCakes118.html
-
Size
15KB
-
MD5
98527c642f420824b869fcd31f5d5d49
-
SHA1
6e3cbb5d7f8e7c7a5d2ec9eac5ef1a5fbb010de8
-
SHA256
c2dd79d0f0fd9b68f3d7d1fb77fa0692753f56f470215d7f7a6beec9b8b1a46c
-
SHA512
6e4ab890a99a14420fd42ff84f5d839bfecddf470b666922f52c7031c2f30b6762dede1c3f4c5eddbb14ccd0ea98bf2b620c1801bac8e29ef72dc11874a61876
-
SSDEEP
384:SAHlAuQUnP/TFNbiNH+/jIBONMsKMnhlvukBMUc9DVViKEPoA5pICiKEJF:SAHlAuQUnJNi1mjIoNMsKMhlv5CUc9Dz
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000025d954f0f6e023418076d5bd49a7752400000000020000000000106600000001000020000000b7f7aa3e73c2fc745a1ac582b9850cd758047420215b7598aa6d1a503d929f7a000000000e800000000200002000000016a6d76d1130379583effdeec6081a2ce0baf50edd652a7671711d040d86214c200000009a2d433af73a73ebccdf0b5eb4f638fa36b3fb474926924d635963eaad1301d540000000e1e84fe0d7238e55a7418f99c67e40b63ad97c1149741024b7249fbfbf31b01fd465e0ae5756c506947eeca017691daa4c34b5ae135c334f7a6110261692482e iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e0175b244fb7da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423757185" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4F9FF741-2342-11EF-A499-62A279F6AF31} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2000 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2000 iexplore.exe 2000 iexplore.exe 2516 IEXPLORE.EXE 2516 IEXPLORE.EXE 2516 IEXPLORE.EXE 2516 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2000 wrote to memory of 2516 2000 iexplore.exe 28 PID 2000 wrote to memory of 2516 2000 iexplore.exe 28 PID 2000 wrote to memory of 2516 2000 iexplore.exe 28 PID 2000 wrote to memory of 2516 2000 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\98527c642f420824b869fcd31f5d5d49_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2000 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2000 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2516
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a680b4ccbf5e54bea82ffe4db24c980d
SHA10f661f408a2a964b861bc4fc69d39d0587d005aa
SHA256b9c7475e37fb3cfea8a981008b0e9f0d6211c166b7130c2afe65ec8bbe390554
SHA5120a379759e6a411c88c0f1f91e9042841dd8ca3b902f0f551997cd635767dceaca3fc8b64dfd2734cb5794778cb20d6aa1e93d5514274f763709fbae7b2c31b35
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b949cebf9cc4a5df0b69e9063996a7ca
SHA123d009bd26f5bda40644f08df03192e7ed283118
SHA2562410d7b690c032354b216797a979156a909e03468c3b1946a8f8b752e43a8690
SHA512ae8097b8a26b710a713d15b1bb860657a61e413dd165b75ba219d8a7e9fca5435cfdc000eb29f7271663594a5c9b14b30091ca43a6ba9c677824c22b92bae0e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59ce16229502adc8d514f09743c5d0e16
SHA172c211bb6403613bbeac9db4aaa1217a99e62827
SHA2561b30b29c13f06ead2ab86b99625dfcdfac3be565fe92c56650be67496e59a590
SHA5128336d506150a9eddb887e584ee566befeadd59dfb5a302ed3ce19de92b51f9efec07aecdf558955de46313513f192c7356f33db964a877c4bff1710b4a2ca480
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58f18ada05b32f63c23d416897f0238b4
SHA173a97012a4908e95ebb501d09907ef114a6e52c9
SHA256fbd336767f9c46b851c29c5b54fd2faa472de442d18c0215040b52336be975fe
SHA512e003d55fe2874007064ec7cae82ad1c857eceaaebeb5e87a3f56b70d9bdd593dd4c0350f501fd4186b4eff94a88ea323fe5af3c51dd125615d43e52581cf1a2a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ddaa9122a6d417c384255368aa4bb9fb
SHA1cac0aebce30c3f9fc48e8acd91068fcf3bb3e845
SHA2567a0821f35277c17867878cbdc8d895682c5f462b24309162bcd96858147a11b4
SHA512b01b199a0b73845d798a174d25a08f814ba75012f71dbf500c0fa5d69c604cb47d34ed95bbc480dbedbb23b60b1438b439740575be517c268a9631285ac260de
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58e8b99564c563d3364423cef5188db1a
SHA1f42d7c4608e261457b96823d7de140563aa79d53
SHA25674d47f7546d499e8da63a2a42805399837681c5af19da5c269068ec4375d164e
SHA512b052df5b7f159cf07d387b3a4e8b4c1891ecc7a58444e87786f0e7573fce94e36da3058e63fc2d21bb3f065e890a81be1efeeb37127248ed835ccf62bbb7f571
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD512921eccdc76ff9943bd49cd1bd3ad2d
SHA1251d1886b8b0f443e529f7c21f720a712f12a3ca
SHA25677e0c5f009ad90dccc46b7d5b8836c1e1f20d55f15324d711fc08a5402b5da81
SHA512a1cde062bc1e850a0fe689420ea90faafde2d04c781ec4a06e612452768acc23d6815ceab9015f6aed6a25ee3f2579568cb80000d243936cf44c359095330ea1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56baad12fe47ce3bbd90ddce6c3d75138
SHA1c0e9a0a40711bc4e0e359a1c75ec8d4545543a8d
SHA2569bdeea54b39e89006f8ffc2a166015604d20b672ad467ac70bd466c150de961f
SHA512db1e9bd68afe7bf6abfa262fc1fe7a768d85e4f0c702f94eb4bf77b9384640cf87a29dd8675b37bf0bd82e505ecaea7ca0ed031acf1491743a628f595bf10319
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bc97821f16b91909ac2958d527dc082b
SHA13b187893cf3a534dae17eab164620a347280776a
SHA256cc8dff70355b0dd0cb42a39febb18c8f35639bdd5292ba566b6632c451ab09d8
SHA51278457cbb3800db433567d8be93543691cfe267b9088048bf96b7cb74d8ec84f2b75c6dcedbefc22f4d93cdbd5c0986eae6d7f5ebc9cc67d0a3ceee461b79576d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56718c38f886c6fd768809a3eaac3e15a
SHA1cb92094214b52c2309d4391bc6408034118dad79
SHA2563669ccc47db6f426176322b0909c4386728e50c5dd767a635423a9baab9bdd68
SHA5124280de2233fa1f17babff29d8ded436c3474b882ab1507853f5adc6211ec2c1e6c741a5f2477cbb18a1421ddd50341cd0fd6fa08ed6d3eae8430fbbdaf1afc50
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fe57c035a7e6a148c8a5680c5a4e3111
SHA17a81ada225758e661cff4c5e029cd90b06458b62
SHA256d95d1663576d221cdec74b439154ed33d6503843ff7df694c70d77dc6ee4c966
SHA512613dece7eb9ee8508df3d2005fcff8038118ef46b11760ed86b8576325af31c97b07beb5e575ed2f80c6bcce69fefdb07c80bd00f8fca205544d4768d788c2e2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD579b5415ab8dc09d2fe7845170e31b12d
SHA11717aadf7436737a1c15b012b367bbdd718892f6
SHA256b722dda002f8459a93ef6b49fe864b5983a5a8bd7cc490771ea7bf04f6aca492
SHA512edc3a90ca24e39134110a0c624a64a30a52342864343819303912288e22857c3d7e28ea2e55271abf0a432c79f1ec0a84d68860f129dbd8e6bfdc9b815585b6b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5be588bd14a372aefabb396491dd3030d
SHA1564ac0165955d94bfe308059e6d1464f7730bbde
SHA256c45ba16954c9016d19edc4a06db700b5c5eb0badcda0cd1cf4014970728b3ba4
SHA5128ca73f63cf165509892dd480b71f6e51b262a4e024ba266b37b6cdb90d35a31e4d4c7d3147663eedd2dead2fe0fe63303b7a2e54ca5d5b8eb7824bbbc351bfa0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c84b16a6dbb1de48b86e36ba47f72ffd
SHA1a5b7d5244713cdfddfec39bd560f7fd8da67020b
SHA256a8aff37312fb3df46164dff2a435338e5b79c83df8cee2c9539a2cbe38a46648
SHA512fde976ad5e64f6a8c8e393731c17dfe120ef4e911c758cd114038f363c9879868ac0154df4106fe955c960074d27de6f36663d3d67787911d449efeb3171a3ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5abbbc7760d726181ebc5ae7215988a55
SHA149b469280cd44155609cf17fbd1c5f6238b40493
SHA256fb74b29ac3843151b461d3943099517391fca9bbb49f161334d9dfb6a8fe77f6
SHA512e29ecae651b6d9adb20d5162a2bc024daaad17bedfdc0738cfecdcf710a35190256ea7ef136caf69694af961b665381f8ba17aae3260dbe6df5bf6a41299c082
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56ef0a43df36b201fba7e9c56caf494d2
SHA1b9c0515a243d2c4b4094ddeae1d567665eb94f36
SHA256c337252efb09e320cabc07503e285cd1ea8f1dbc9ce598fd01731f953c9d0f9e
SHA512ddef4d7efd58ffda538669dc14882f48cc740817e69d7d2ed86cc68361664026b4cfa1cba7ab231c9fe735fb4b4aaf6a2e70b2fe36dac4b35fa670f1627f0218
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD549a43ee87751e05f119961242214540f
SHA1fc4fa435a260c4476b6a95f7ba1036265e134c4e
SHA256bed67c02b538317c457b584f4b6e5a4e5badd63ad9d96ffc557f2f004e5bcaf9
SHA512f3ea8c2bc4413fdd881753eb5bf06083bf721b19a6cf88196b0ac77c767cd35813ca06c71d0e1d11c1cc3c886a818e6f1a18f12e985a1a0aa9f0fd5064a70cbc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59f2d462d6c37a20641b30d3ee567ebfa
SHA162bc041466dde006664b8afdf678d6d175876f81
SHA256942c626c75d8b76ff0f215a7ea4e47cd16b2d252889cb19a78aa1eac3b982e5f
SHA51245157229091c402ce2fe3e66fae21a9bec2e1bc24837acc48644fedfde930f73fd441d754e171d039de5414fc1af934d167501f233c3f65143ef600dfdeb84d9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52e3c6f0a9f83cdf51772ec5fe9fc1da8
SHA1e678c483e344038dca3a2f6e48c5bef0cfb9b5cc
SHA256535bb479a4884aabf39932400cf7e63e6318524ec65dcc958283ecc4bf648787
SHA5129c2f854d207b3d1ae23448729caa124b39c559f04e062f99f0445fb706fc40f9be8981aaa02e9c3534273b0850ef09249b9c6595d81800c41d5af38880736983
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b