Analysis
-
max time kernel
140s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
13/06/2024, 08:18
Static task
static1
Behavioral task
behavioral1
Sample
a497948f12051894aa19a200232a9b53_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a497948f12051894aa19a200232a9b53_JaffaCakes118.html
Resource
win10v2004-20240611-en
General
-
Target
a497948f12051894aa19a200232a9b53_JaffaCakes118.html
-
Size
21KB
-
MD5
a497948f12051894aa19a200232a9b53
-
SHA1
4ecb9e2aa3246eaec5009f65558db69d23bb2929
-
SHA256
232aa9d102993227c9a65368dd5c98e2a0891df5debf6b142e35d81fcf9ff4d0
-
SHA512
a8bd9035b20e7141734ddfa4eb7b40da06102ff91f75371a858f30c6f95156375446f1cff3efa462467f8a7f53ae8a0ce633d5c04c539f3ed9bde510f408c906
-
SSDEEP
384:zihKcRAa5r9DIiXbWVBD8c03RrhGK2cmEfP4ycbp5yzVcrEDJZTO4uk:zi2a5r9DFygc03WXcmGP4yv3JZTO4n
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000b90e69b9ff3ec34c900a4df5d6c6523c0000000002000000000010660000000100002000000014841888efb8cbee52b5ad4ae0b1303b5b4da78cc0a4f71e7934b60b8307a1b4000000000e8000000002000020000000b1ebd62b49e0d906727334a277abd4513e30a774be8762aee471f4f22b201a2f20000000c9c18a756132f2c0148001e09c6215ad32a3ead490bed946f1aae2084ad8408e40000000ce2edf9ac2d8767caafcb87c942d1886fc5942af2e47009d5b7ff8f2b90f07a5c93482e955546d0b835f0adf0eb9ba430eff31107e97fd7f19fa95c90504492e iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424428581" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{863E83E1-295D-11EF-92E0-EA483E0BCDAF} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 00aeed5a6abdda01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1724 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1724 iexplore.exe 1724 iexplore.exe 2916 IEXPLORE.EXE 2916 IEXPLORE.EXE 2916 IEXPLORE.EXE 2916 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1724 wrote to memory of 2916 1724 iexplore.exe 28 PID 1724 wrote to memory of 2916 1724 iexplore.exe 28 PID 1724 wrote to memory of 2916 1724 iexplore.exe 28 PID 1724 wrote to memory of 2916 1724 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a497948f12051894aa19a200232a9b53_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1724 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1724 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2916
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f96479c71c856523f80f2dffef0ed2b3
SHA14f952d95492f0fb19a8905bf40a0d6c785b989dc
SHA2569918d1b922e28a60ba8362ff621ec3d6905de078e9135190e47d022ed121120d
SHA51272e61044d55d6f0eb540484b3be97a1cf1c4cbbb6c6edd4fe3f622e2e51a7949d02cf02c7c4b8b355100dbf563add466bdc2c8167c10d2b724cae4eb9d7c0e6b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52b34100c04532e0a40d8afc0630affe8
SHA14b449508b9abf43a788a44325c16978691720272
SHA256035a5ffbea897c3020e28d0f0b9ddf758929f87365b535386cde03ad366d01b2
SHA512e1218ea7ce94bc14b396313f1ebca20bd52c848c572857a74a911a09059874ab6ebe5809a06bcad492270ce2c2bd50a7f1dc1e032de75425036986dfb7330655
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD563b80fa72fe54f34d81c9fd4104eddff
SHA1fbd382b274cae13f3569806e84722f60c6105f41
SHA2566a8784787e7557ab0bf0db632ff2c87bbc1ec0b829e08ff35679e30cd0f347df
SHA512f74b33d603e29dc7f909553d77cf6a968f00b3a7140ee8ba4ee21f6532de738586de715445a18a3183b3d04f930a32ce914c479be17e7e089b91ff76e3103d5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD526bdd01d68edf32f25f37b291850cfc2
SHA18664e9f53033658886af5f4bac4f8dbe8dd14a17
SHA2568e00ac818025a2e37cbc95f830f9762aad3701e160d6e46f82c24538982b9c52
SHA512583251ac6e7404327fdbfe0e9a57a578c8b3a216ad21015d4352cfd18aa54ed18c527a0473348217d8451f49e304997f094f6d107063470a3c74cb7ce96a0192
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50a14eabcb6826ee822033cebad661643
SHA1c178d2656e85e9b30bb20a1343380fc2ad671862
SHA256ef32ff9435cbbf36b5040432ccce1fbc741e4480bcc50b2d6c9005f3de3227cd
SHA51238fea33911859f3ba28bb7b4b178cff96ce48cc2bf580590feeb661b0d677ce7cdbbade67761e1d138b67e111f4b795157b11873958578582cbcfda6840facac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d8d827ca9f0d37d3572455516bc26bca
SHA1ed6baf409a5c96092a7af35227e7ff7935a0c1d3
SHA256d2bf7b8480e6655eccd9dfed3c9fc12e44a661765627ab8b25b825e53c5879d3
SHA5123049b75fa160b57c140c1cb9f6854eda92c7fe4249389d22d40f23af5a6cc0ff39fdb21317dc04452d92b341fb944225a3ef70d6047f19beef53b8b690d15e14
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57685ee3a77446a7fd6de73596d58abba
SHA196023f19e2a5000784c98dac0ae612dd5061fec3
SHA2563821ef1146badf473d93b2c3895a139d0da6e0b6ae836b913b65aa69bbd648fa
SHA51299b69a6a560af1c44c660a6c5abcd4252b44129178ca2846785096e61530b2d3c01e2aa2a9d17b4820d1dce9b9c5af99b516e042400ef5a678db7c1f3748b770
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e249f12c77b70a07e8f5bc92de3bebb6
SHA1903b92479623a6b87a417b549139dffa05c06ca9
SHA256aaeb841082c99183ce70b720a2655415620e8816d74d77e2f3909647f2bfc055
SHA5123a1990142b980958dd3c5caeb4f55d74160fcd7a62a654efb4e20b9e156b78b5c9ea07b76e4e8565d372668f39ad5b27b9c05e05368448264d0be81e00d0f867
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5462cedd5102c5c96555ae822ccc225b8
SHA11c225d35cbeeb0429e33c6ba5bbf0b4c51401abe
SHA256762ef30ed8d8325953e8fd16ac17d82d30253978a50719e61c9977548d99030f
SHA512e82c53912907daf745e708a3208998615da7e073c5143e3d806691e6b824ac9815733eee9abc4274370f55661472b79c1eb192e2374a23cc5b22e4e54c17a13d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a50341a70bfb71e3f88dda8af6c887a5
SHA1e279d9b51ac958e546b754e08163d8d6af8708e6
SHA25629e45c6deded4af33970995e95206daabeaefc77fe4c608203d23201454314a5
SHA5124e567b399cd477692f53b3b3ffd6a28e037a3ab3e3f4ecc1180adf1505d29a3ed498869bc65e1215b2bc2fd7bb91ce5ce7dbd501b6546ce0611f7f7cb3115a61
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53963c8439df50a99010c324d91f2ba4c
SHA19ad6ac234186395be1ee637151464355436ec107
SHA256034d0dad3bcd959f431b3eaafc0aaa05b02ea65ec9b5b37697a9586e1c34a949
SHA51216a368a6eaafb868f4e7fab3571537140021a8e16b47c8c673e9ddbbe9833c0afe815282193769ce06a513ba25925b48c82ceae7d7c47df9a2564ec71c8a8607
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a158356811e6d597691f1f81cfca2548
SHA16503f1a4ed33291f11725a7d1f4b1fbfaaf5fb58
SHA2564eee140ef1bc6a756d0cd338e87c289b12e6338edd55b632d26770723a5762d5
SHA512695f024be5757bc3a30e42d7f32e99965a555ba09a57722a2d2bda67a3628fbabc0246a8c805c65f5da7066b7001887813ace9683c64420bf43c7166d22f4371
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d3fff85bef2ce46dc15ba6f8a865b499
SHA1aaa57b8a9b2bafbf952bba477373a4a1ab780ff1
SHA256d7076d616464aa5b59ac9b6e37c5148cb6a68766de363a445ea4d90ec97f1c68
SHA512f0b91aa53f4d0f57c9b74e1290833f5cd9e2650726bab728b1890b7439311fc3ca9659419ab880499175425b130be161000998513285286273ffb86daf296425
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55d8b589877cd91abe0dce85f3218e0e7
SHA1b401149d04c9e795693d3c21a2f7df5d121d399c
SHA256a837ab6578b96096352cb2470e63adb490abfcac2f502a5166b0b36e37fd81f9
SHA512dbc1c8f8efb745308e3e8b14eb90ccad3548871d4c3e8d9390671ab2594bc55bcbc30d391bb16042ba599111061c4287be94c280ac618e8ffbf862ed239600a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ed2b01e69b6bb242903c1d60d0480e97
SHA17480db3ed4d5c4b354421617e0069b1551b43bf7
SHA25649513058f58ca68baaf892db7e788ba6c73da23694b0f2dffdcec83c35f729b9
SHA5123117c4364033080ab12b3eb422e813b29b16ccd6b3a908bdd6488fe7845a79c5d65733f942379e217a4445057dab304ed0e41da41952471d18224be5f78f4840
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52d54830075fd101968365c552de4ffa7
SHA1c9b537ed296c650c2938005def6a29bee47a440b
SHA256f438849fbde144a2575d4be910762b7e3bdbb0e0fc56613484147c3a8b0c303b
SHA5126a0cb02fecd4fb66131ab9ac351b93ba7ab4749d8a90d6c3590bfe55d67e6728741f683bc9d8a2c6e53bf43f528c26d3ac3b4d671df6feb52cd13c126d9020eb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58e7f0d51697da1f50c666f9136e4ee0d
SHA110a2318835f3fb02db365bb1aa915763774e9b15
SHA25625890bbbabe916f80cc585660922852f8d9baab6e4ae268d9bd9346c6aca9f64
SHA5123e66d367474322fd6f0eee92a306eb9d9ed74f985a4bd62c32ac1f391a81de89f092b45265ef856a65267e0bc6c1ea7a487a62220a56bf6a6140002c49b2fc93
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55378b5416835b4cbb7bdb37594c2ef9c
SHA19a7776c27c21b94c44f8f7be23e98a03f777bb97
SHA25627ff89e8b371f82aefeb7b91682d2eaf6a1c1a1480b4717a36c08f3b5442946b
SHA512603177a990a328ce647bac6f6b711cc885d2e9bb7beddf7623dc812666fbccf409734b6466fd9ee4b4ba368ddf1430db7c9f76bd18bd17583efd602b178ece31
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ce736c406e4baa2bba073480d54a39d7
SHA1c9bd35ea65eca1317c84ee912c09caed03bb3cb0
SHA256f8ccc6b3691bc70b76272b170d3972190c54d801a1f5f4cdefa6a833005b0ce1
SHA5124f35633b81b7836203f95b48b7648bc7ef1dbd0c03e6878b4f51188f142a1d1ca7c64721bb1089685ff590b93e94658a28620486ab430f2e8f5b71dc2223c4ff
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b