Analysis
-
max time kernel
142s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
13/06/2024, 03:19
Static task
static1
Behavioral task
behavioral1
Sample
a3a686efa55db1537a31256ff22d8c59_JaffaCakes118.html
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a3a686efa55db1537a31256ff22d8c59_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
a3a686efa55db1537a31256ff22d8c59_JaffaCakes118.html
-
Size
139KB
-
MD5
a3a686efa55db1537a31256ff22d8c59
-
SHA1
847a5f237cc116a2c34dd1ce1d516495ae403ea5
-
SHA256
1401a159381471dc82a628b5b480c31812d62cc0cdffe6c1e47832d0c168ba6e
-
SHA512
ead1ff085f2626cc47c5e3ddba4439f2d0fa186ce8fea4443898a741dce95c2503a7ae6f2109b0885cb31c04afed040ffd1776b6b4a02dd526c631a592e395f2
-
SSDEEP
1536:S+vYvF8KilcryLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:S+qF8IryfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B8B17821-2933-11EF-9BF5-F6C75F509EE4} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424410627" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c03ba5cf40bdda01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a80760000000002000000000010660000000100002000000017069ecc3341630809fbf604fcfc3e854c1a6d1d0d956f0bfecf39a9efc9895c000000000e8000000002000020000000e90592f3bd73483b056b56e98915507c71c0b03183d0dc7a0415bce9816775c420000000ce245203e7d4c59da4e189f925a73e0d527c8df4fea66501ade011a642a01b08400000001f320af1d1606631a7c1502c73c69855a67b77f90b0e486421f42dd3886105f034a9dcc485b0c212545d9807d3a2b7f6040267993f9d7d441aa09b97af71d0bf iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1900 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1900 iexplore.exe 1900 iexplore.exe 2620 IEXPLORE.EXE 2620 IEXPLORE.EXE 2620 IEXPLORE.EXE 2620 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1900 wrote to memory of 2620 1900 iexplore.exe 28 PID 1900 wrote to memory of 2620 1900 iexplore.exe 28 PID 1900 wrote to memory of 2620 1900 iexplore.exe 28 PID 1900 wrote to memory of 2620 1900 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a3a686efa55db1537a31256ff22d8c59_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1900 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1900 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2620
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50b0deb921e61e9b9a99184b634ab25a3
SHA1d457817bd7511286a124f826736293b2da2ec963
SHA256a0816fc47873fae419e0af85ee392b2c82dd89d94363c3af1ebe8279e9535b90
SHA51277cedda1b017143d2ed828561f038110c4c627b2ca76a3638d94ceefed56a16211e21d04e3b52eb1dd93057d94dd97d35baf7d61572944549e3840f624d55a94
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a3da6164061e0a93808d463e9a8f37c8
SHA178111ef9d1075270e7c8ef4618695a2dff1ddb01
SHA2569b10c0bb2e98c1f7706dd39f25c43e0e899354f81e0e1e51c6ce0fd7119bb339
SHA512245517c99438aa514e6bdf65e97000b006fddb1706d1a5eea2159b34e8dc08a14aad0772c01ffe4c865df1a92e70282d5c56a4c3d11983903affc786a423cf33
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aab525b04b5b87c3ca989395c15ba94d
SHA1f39e094ceb4b4952130c77d2dc419319ae53079e
SHA25658c258bbea0376b521b7271cb1df78982d3298ea4f12c55857aa3bbad5dace99
SHA5123e2519d6d94ce33929aa144e56732a8a4604cd2e451188a6c280e3976be11ace11861eb6a49324b82b81c9ac7cd95cc0cdf4d0054066c6a79eb8bced68a3d90a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a19f08967ee061a6d46828cac6ba21b9
SHA14ee8f534eaa7dfb7cc95b990a20905f7201e7854
SHA2565e308912849683ade59e0efb5a11b7d9e93f295d5fc344adac56741bccad736e
SHA5121bff2dbb9a0ed0bb10102026575587a43ae94862a2378639d3cf8c9bd7b2855fe50e4a9c7a59285030d1be8f388a9e93ea3379d07c0f8f9a320347885ad07679
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bd2b95612093a09e7ace9b8263548e6e
SHA1aaa773b22e165b7ad65e7dc599e681384415e5aa
SHA256f6bee248cf4e816075d9ff1180af90948003c3c9abf8a544755d2bfaa999abf6
SHA5122c3f422a57f8dc8a49e0e04c9892f47ce17f2fd1e5ecbe779006798d0d11f5b1ac2a253e3d2bc7b621f29918717e6cd84a4df02524dcb4d28f9acdb33f96a53f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54499b3c1427546ae74f1e03c042ff642
SHA1cd36b6fb4f1cf0aa5f25cbeebfb7173976e43333
SHA2569685826847ad920283ac110d858396d2cac4baf8ff8d1965a69a6915b6d25746
SHA512dda4068d143b123833a31343223e2cb09a91524aa81bf58e7054ec7b80447ff861e55c365681b1e75ece63a7fa1799fccc2f8bc92b3c08ffae76c256d30a49ba
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54312485d633cb33f99ee67d30b083d43
SHA1f4ae021278dad6842238d31f12fb045a2a7b1743
SHA256bf036acb379cf7ac81e3f165450e552e3e2a1606f95498540a3f610aa7a72bfb
SHA5127fee179f702bd1d8ad76b48f5770bc8c2f8e347ad26a487b4fbb41a8f4a99c794afe958f4186ef90e7d50efbb749f6eada3d4ec1931469d29d2ec94767391ecb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59c391cfb23480416948d0481068ff16d
SHA171ae8c923c9647d6a6556b1036bb36b48cfcfd73
SHA256f826bb82cb26b4a678213a45c1a5f7c176f5449fe6e9b53eb4eb0403d49f2312
SHA512fbf74ac5065ee71250bae518af211b4ffc798db6a38acc277b1a8fbeed703a82f1a977212eed60b72cc34aad6928529309b206827f687cffd00fc7694eeead2e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52c87a8e29fd3d3adf4afc849aeb7dc80
SHA173cc4e86c5043a379f5e29e207972b2757574b4a
SHA25606a29bd7708c04586cd12355c755bd7cdc70272ede937d9a20e7e3779456dd86
SHA51273f59269b356a538de10df67d4f274216ccfce8ab096e13ec8a9b9021b0d0fa0f41cd434f74fc91199198d49b6841045f1ed02f1767a0059140ac3ce7bf98aac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c04b2b966f2d5e22e05eea84e1e92390
SHA173743893e247bb53847bdf08067e6a11c612226c
SHA256edfd6d86f1e3593ec84fb4e59473df62b509d684a4d7283fa0a9be19b607f7a2
SHA5124609c0f91556f1217d3510e0f5383719cbdab6563b8f021d83a725829f4b80bee1d3816e3622d9a7795cc644b9efd6a82edff14cdcf2c979233281ab7947db79
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53eeb61050066aa92588df31b55b555be
SHA15c79458bb3b494cab4506a1945280fe7856e2dad
SHA25638cbfa317b86b4458eb62d943cd84dce74f7163f4067a60f284ff152c60ec5c4
SHA5129456ca82c55d5fdb82015cc97f3e608f1aea160e85f692a16ab45c36093422fd787a2cfaf682f2aff34b6377f03db5ae1f9cdada1a0719515d1ec858c88bfc79
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57b21c0bdb1778a00fffc20c5f9d2aef0
SHA188d9f8d6c12b2e8976b819585d0370b23a9bcd1d
SHA2561cbc962f3b7bee7d17ba9519fbe03e9203a6bc156d07d2ddae2f14f35e478151
SHA5129a6697a4abe9179ce4122fc23766eef2ab6ca84e6e5391cbd844b404a97003cdec87147ccc9532c5d57d890762e89c6facc0bfc28461fe74cf82b56e14a5766f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c55813b93ac02d04b7f97606f00329a5
SHA15fa1e68de2c462506dd374aabdb7cef97b88f60a
SHA25640bec926c1b32d98247e4854b2dacefe2468414c947d3ae388e0415b4e6d25ca
SHA5127a157e6124fdcf86545c302224ffc62ad5def99ee238d0d285beb4a5cb2a6ccdfa50e5690e58dce9282275081038000a6dd10f3f0de9403d1d82522829d1662b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD568d7e8379e1d268c02cd3da98cf36892
SHA1cbfaa872542ae9319d0a4aaea5659f56d17c7d95
SHA256a7a576d4f239551f865628f5369ad1feaa7908d4066f52ef99b484f49d152350
SHA512fc9c28c1680a27d6e61ad4b6256a1871d8828d01ba02ede9f6fc1a93be520f5fde2a1ef3c0eebfba3ae97f12eacf8420929d3399dbaf1150cb25f2f2ed9bade3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD517c1c97765310c8e99cd243e0bbb2320
SHA132f04a7d2d3f4a02f2853bf052edd8fcc39317a6
SHA256c56661948ba384a6fb3c7473ad4358f9855ea1395e8524676638df15d50dfe9a
SHA512f2c75792cde19dd4f63c95ce420a03e55182b59b2a25a833d56a0afc195ce6f01398f89bda9cc8d9bf19dbac76063ed02cbd4ef5d3282e8797c96754f50a06f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5166eabe2043b61901424a545492d9a9c
SHA1394c689e7ad09e51dfaaa37d2da9653496c58636
SHA25666069d38db827f75def73f74eebdf004bbf6cfe78c3a2cbf5c124d587cefb12f
SHA512fc5638016ddf9770c6e97f0fd9eae68f18b55c3f1090e1d3ddae3e0b898eec23f4585349f6b39187ce41886177fc10183450666985a5ee82c8095586e82c61a2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53920de957bfb4207b7e0a1ed948efe43
SHA17cd251db5d96302ad51d0d8eb5f84cb2fe2f5410
SHA2569698e2082eca1bdc4af591430bc82455b2e6591ac01409babb658ffe1981a697
SHA5122225864350ac1c604a1024046e394e5aea5315b3aaf7ec9fda26a69e75f0ed6a0270dd9611bca6174a025b472c144be3112c18601044fe0ece8534a9f7b4ac07
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ae8f3b0e1949d8a7db4d0e3b9515015f
SHA10adf9963e49c8e49e7e88ab60cb6a4cb66891ecc
SHA25665b7bd47ec59d1dd6e244ed61caf60b2c25ad65832ece554e153d39173d18eb0
SHA51249be8ddf421a5d26a052e9d12926499f6276dfde52f39a79ef780d98c95f78d85846a3921310a82f062a076b70c610fd4f5b351197638bb094ade260c9f7e934
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b