Analysis
-
max time kernel
118s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/06/2024, 16:23
Static task
static1
Behavioral task
behavioral1
Sample
9b4ba4e3667c46dc1f409374da1039d9_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9b4ba4e3667c46dc1f409374da1039d9_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
9b4ba4e3667c46dc1f409374da1039d9_JaffaCakes118.html
-
Size
3KB
-
MD5
9b4ba4e3667c46dc1f409374da1039d9
-
SHA1
82bb5b4f188657fd030a40f5ac06aff8e639a86a
-
SHA256
a75b53eea5342226d58b99566b8291dd63b2866ceef7a808379d90686ca59a8b
-
SHA512
ac509a18cb21b19edd7889c16405478df7ab12d02889a9e85d2b128992cb2d373791b52d40954b05eb43e543f0399c38c2b1a1f9b66072dea248f4c924f2edaa
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000cc96f36e49a7b84ca5376f9d46d3ae8d0000000002000000000010660000000100002000000062255fdb98289f4cc878a730c9da701242062fa3df5a2f66bd97bf5e6913c35c000000000e8000000002000020000000a9278da92a9e48d18504b8e89c2d20af874310e4b35aea6ea923d0bbf7301cfe20000000cc4dfb4cc21e26987de13085f959a8173784da428501241e31434ae11f5a6639400000000038ac61e52b07c6b8934f17f2d331adeed8cd2efa63963049a753f4efc3351dc322955fdeaf66f179a042f0ab7d09ae54e73a0496c43b26a7f4f7cd7d32ba34 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424198476" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{C4FB50F1-2745-11EF-917A-EA263619F6CB} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 9060a49952bbda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1996 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1996 iexplore.exe 1996 iexplore.exe 1856 IEXPLORE.EXE 1856 IEXPLORE.EXE 1856 IEXPLORE.EXE 1856 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1996 wrote to memory of 1856 1996 iexplore.exe 28 PID 1996 wrote to memory of 1856 1996 iexplore.exe 28 PID 1996 wrote to memory of 1856 1996 iexplore.exe 28 PID 1996 wrote to memory of 1856 1996 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9b4ba4e3667c46dc1f409374da1039d9_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1996 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1996 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1856
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD598a72aab30df27a6e7f6510282b19684
SHA1e184deca6956366290ef8905dcfdfc51eba5b22a
SHA25662b058ba1a2d9f49bd77e8e704773abdd4f7e8f8528c22312678bdfd73dc946c
SHA512fa7514c7bccb2940d9195b2f583c94aab27f8c70a46601bb33a8138f8c2ced48aced1fa1d692be1a73a505b9875f60e5f0ac3dc9ed9df863ebedc0e4a99b740d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD501f1d4557931a4bf9609410b17ce0cdb
SHA1f7e278a8b8736cb31ecaedef8335ae799ab7b050
SHA2560d28ede702e13dc37932fd37f5d4ff2f94888e2c243f356e161843e87d4205d8
SHA51214296765044d8e4daa568087bd8d0f42e300d937bdc8e3b8d4d0e811759f8af05f31f74da8f10ef898faa4712c2bf71a3b7410ff4c3136087e33a73f2946fe59
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51644b20a59c2060a92ae4369e7e4786d
SHA1aabcdc0469a806d229b40a25d64eeca673b712df
SHA2562b4eb7b73ad5dc868e56630da4fb2843cb530757f6a5d217df460a59127de337
SHA512a5062f1738c9af598f0cf44898e4af9fcf9f58b8d996b329a820e370fed432715dd0d70e487d78564155824bd651cd74453ffe400909ea08862d3c54671a7dd9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ba3e97782802e31495f33cdf371516fe
SHA17580b6b25cd9cd4363cdbd7180e6d12435ea19f4
SHA256b8595b415bc5ff4bb4b0fa9d8d645bea7653308d3bdd5e5e39d5277bb27bb8ce
SHA5121706805ad5532726877e494cdf0e2fd112ff945827b0cdc38ecc6095b9ae624fb69b224bfbb42f0433de9fc61f4fd753408b4fdf98c84ff5d5e08b8791639b94
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a6f641c5825596adc0f2a8ed7def42b4
SHA11275df916124dbf994017a585f04e292e9c7373b
SHA256731b784e5f87d9f3c7c698a0358a9adaa5f34b5592f8a0bd7db6674aa1d29b02
SHA5124eb39c36b2d1f2737a7fcb36b036650fd476033e9244e4225bde2ed310476733bd6ff157f0846cd429a15c4008ba02dbd29af59329916e4e39b731fe133b60a6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bf8f096f5452ef637caee463b014dcad
SHA13c458c985ecca52f779007d429aa39321ebdf60c
SHA2567958e705b28888297a6e01d8fabeed8d85ecd5a87c34c878520b97d2e9607b45
SHA51257a11b0417e16f630b0664685d2bca15cc3e3f5aebe21b4aff5c53950ea34d7779cc7afef9d93f747ad707ce2d6275a1ffbbd9c796f9341d44086b91671ce5d6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD538e17f8dd931f9ce516020b421ff4b71
SHA132fe3c285b2acb565e983309b3ff3509ff197e04
SHA2566e7cca53fa2cac1b3a50447ae7283f2493fc49e209e98bf0eb5ff03f9f6ebf6f
SHA512bd6c989d6c75fcd75deb1e30fb57bbda7b51091239b043a73ed29a63f136277a5b563f77b888905c09c882d937e109d73d61f3e5b5c2bca734a204150814bbc1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f84c91e957309f63e01d98da0ff316ad
SHA174212c78c8796a1559f67197b429025956a8f46f
SHA25649ca2330fa19b9f91f226905adeb30d566e43384bb5d91dc4d718a3fd483ec10
SHA51218621da9665392a9d11d5196ab52578a673d4d04e4440caf805fd00961fb938c27cd87b9463df2d5d10da9ac25e03f917a58115ceabf3a70faa1b1de196547ba
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52123acafcca9e70a259558280b54d206
SHA14cc90b686ae7bc22f3ad0349ffc05d9721595ced
SHA256dbc41cbab876067751329823ec377d1505bcbef0326ce5ba7852f9ca7ecb93dc
SHA5123d0cb755d83942c2299ddc2f7122c0932bd10ad4d57d2bc122f1c485a1949875cd2eacfb905cf815b7908954684fa2001845bf0f9e272c94588fc4a5bab71926
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57ed533d1b014aa081e9aa025811b199d
SHA1863831a1956e0a4da7a9f9fd3ca17c487921d762
SHA256236fa2644e5f88c89c79e1cb7d2252d3a91a2ca4e9112e59f3f459eac4030d09
SHA512ba73969fdff16b3cb8bdcb5f73e6ea03239de772e3181f77f61c2594c1e2ccbc3bb04fd3fdbc2947401b842eaa7b38fdd34d4cdd8624d1dced5ce7b97ac642a4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5841bfaeb183f801d0160cfa2108b36df
SHA159e4717db2282c99c4a3c6ec8c43fc7ffeb3def8
SHA256a5d3ee6b1a6a596bcf553f44a31bdd09e853475e870872c3e6e2f28a50a058f1
SHA512a838140339e1067853109369b4a88c7700243947bf5d4a28a09479ea600c5a35ab541096ef4341423908697147d2df8d5e7b57f70c9689cad9469ef0c6e37943
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD539a3051a2031226c2361ba345c2a1022
SHA1e5a40ca831875bc55c1d8ce8190322b78be5d793
SHA256fd26b4a2bfdfd1b33f8e7fbe42a69163899d1e1beb7d3fee8f69120112b4a17e
SHA5122665e326fe604176614ef85b795a635cea8970bcaa12ec94e68e7b1bc6553979bdb6e290d6040046649840f6ca72fcbc6b2904d52e861a0d86823d872b9e68e7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD587050b5f26b19197311c035b0a9a73be
SHA1dbeeb51e725ae8a9af7b595a330fb0dff601e293
SHA25664dcaddc674879ae24d351e161d03bb40c4cfe3a4566d1deec40b74958a40911
SHA5124056baca76bf37c25b4a4f7915262e27524f8b550da12c1a454d903b349f58dc362267cdbba575e6baa893a3e5d5278f31e62e3f448aec781bde0a181aa16194
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5554f2a877123cb1729431f9ecb6330a5
SHA1823509d9999d10e591a77958b46f2975c0c05e27
SHA2561d96827a2dcdf2ce3c42e953a6424b337ee4851185e412c2df5d53257aae2f0a
SHA5129638705c7f8032ab03161bf4c869f228f3b805c54c066b793ed3886bc5ae19f4b999e01b6a45730382b64a7f07576ee791de7bfb808add33be054181645eb529
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a70063498d577b613b427be5f7291e37
SHA152082cca4e7590b5339ad4b493abe781b85dd1ce
SHA25695787e9e1b858caece74e7706377270bd1d90f4e2147ef9c59fb974cbdbec528
SHA51245cbcb78223d42bbb6dc87a46fc3da03b190fa2173ce301673c6468ed25cc4f22f7ce1db671f49be632c660fad6403560719103cee0bf0847a9397a162e53d0e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d2b10359eea6f958ee03e9834edf3db0
SHA1d2f2bd2c40e541eb34099fc59127c773dded272b
SHA256f9ef6345c0bb9ff9ca3d0121c9042f705ff3fedc199ecbd96692bcf759c29975
SHA5123fb60798bcfb253723918e5bc4dbc61eec6cda020935f96a2bba36a772f7f933e9e18ab16e86ecdc16e81575125347f48a70a971d15e69f703560f522c50e05c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50896e62681258d96ab7e29278b2f1ebc
SHA18a804d51b8ac66db6fc68137e2bf2745749f2c63
SHA256989f358d52715a7891bb18ef6c2b744307c4d5f5b1082c746ae4b043bb862ba8
SHA512a0b9860352b498af735e00c43cb8ac351831c86ea4a8bc9da02342683cde4dfba69b29b1614582b84c17463bb169b155359e7cdb037197c6302c6b255b603577
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52360c2402b48dd11eb461b3bdc5ccb36
SHA12bd310c295f075b00c049d1a46b4f2afdeea8482
SHA2565a32c00463851ce35bd588610acf240e2e1d0bb33b1b726ab3f1ba6d5a052aaa
SHA512c7a0d484280929860a2f2faf58a769e1530346df7216bb1a19a62861c467fb1e807d6a5c321dd3f93c03c001fc650eb8756f5341ebd63a8b8d6cae7acf3dbf7d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aa43c27de549b348e25f8a7af47be5dd
SHA119104716af9619f70671f4c3b7f2f36ed6ebae48
SHA2566faffe1e912bd6b44edd5bf4f278b4da60c3d6ec74464f3aa23794d3d265accf
SHA5121c2835d5fdc2945f697fbd14314362cd4c5bd9a79323eda0adc2545008bd24a0590ce0e011c475d4f6e000ec6dfaea54ac5485423d1dd698ae58a2647f0153a3
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b