Analysis
-
max time kernel
132s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
14/06/2024, 20:54
Static task
static1
Behavioral task
behavioral1
Sample
ab6a0cdb9a965604a449cc2027710145_JaffaCakes118.html
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
ab6a0cdb9a965604a449cc2027710145_JaffaCakes118.html
Resource
win10v2004-20240611-en
General
-
Target
ab6a0cdb9a965604a449cc2027710145_JaffaCakes118.html
-
Size
177KB
-
MD5
ab6a0cdb9a965604a449cc2027710145
-
SHA1
074b690563ac88bdd949a24ec3f0a32390295130
-
SHA256
9fd82d49e785d13fb0419f268758172ba2d329102049c0d62f56b9dab28c7328
-
SHA512
c7c1dfb98551fd17c6ab7cdff495b1d8204f6d2a49cd2556e1a3781d84d0c12b9c4246bb2430dd506f32fa9da89d0acd0f7af6f9da0f1631c7133dbf58ef3bbe
-
SSDEEP
3072:SO7KyfkMY+BES09JXAnyrZalI+Y5N86QwUdedbFilfO5YFiM:SO7vsMYod+X3oI+Yn86/U9jFiM
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424560340" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c05739219dbeda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4CBEC291-2A90-11EF-B1C8-E6415F422194} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000006fb3d087c4ee9c4bb22550fd83a0390500000000020000000000106600000001000020000000f7461cb891127bb0bec0c4fc08db1a32686bc3d51288b5931820539a4b632d2b000000000e80000000020000200000007d929bfc7430db08e1e1fe9970f663d822e5f005075b2e61cad4867b0a4685a3200000008520a1e2e845b3093f3542408e27063cbebe9de0c9331f3f09ee0b0e373ca9aa4000000097a0fb39327d64db30a1bd4cc7336e0a87374219b82e6c19bfdeec250efa4a8ae932f86956227dfa7a24b8c1d4714a5793be32e19852616c7e0e4cf9992e4a57 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1340930862-1405011213-2821322012-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2924 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2924 iexplore.exe 2924 iexplore.exe 2312 IEXPLORE.EXE 2312 IEXPLORE.EXE 2312 IEXPLORE.EXE 2312 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2924 wrote to memory of 2312 2924 iexplore.exe 28 PID 2924 wrote to memory of 2312 2924 iexplore.exe 28 PID 2924 wrote to memory of 2312 2924 iexplore.exe 28 PID 2924 wrote to memory of 2312 2924 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ab6a0cdb9a965604a449cc2027710145_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2924 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2312
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD508a368a7e1bd68a066cd6a6c36359b83
SHA1305baae949bc4058be0601082f491d26c7b66023
SHA2567390ef017c8c94dea5828dfc8aa25407164ffecb12e95432173775ee77d7ed35
SHA512fa4c8294f3da7e21efb5d987cd34b3793143fa8223939e80be0571cee19e5b7b465a1868fd00884b9913868e28195fdfe712e1a92eacfe131e2e3da8be9ec5d8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52c4e4bab41ee1378c38dc1f81fb72438
SHA1bea4357bd071cef8fded26c3a2547bd1b7f6b5b9
SHA256003c88154d0f784bb21f8c69b2a53b7bfc4a852521ef429561b53a6f5c1262a0
SHA5122d093b2ad5414578522f2dba34ee278799ea5fde7d0d0b597260965cad227d65bbbdebae85b33cb6368ff334900888a2eda646da09ecfd53605ad65650cf998a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dc71e93c07c4dbd0a203519f2597dbe7
SHA1176c66452f2cd86dded0bdec8540b1106cc331d8
SHA25608ad28362583e02be071aebe8fa88ef318a64119ed8a1aacc32aa4216f0612e5
SHA512aa61c8db65aa047445a924ebe31f5129e0d297eb424533aeb1439bf32216865ffdec6004078b4e9d039df31bc9de33f3d17f5b8bb85f5cd7810d61f3545c7cfc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e5cb569cc69d842892f7420f942be73b
SHA1287333f77168cd3397e5cf36f5745029f97920bc
SHA256438fc7edf6b068f95f904a6cc703963c856b44aff804b22a8e2f7a3c04b3d3a2
SHA5126e7c091d9857d3d060db53b31ecb568c0bfc2e8b8a82fbdef81c97f33a468b9aa1975a86612d35dca2421363f8067b72c25f035425e8498190caa2759f622ecf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5198c7986e84aff9f8a01a00d9f0a450d
SHA19e2e70b3d6dfef17827f0b1fe31c479cb9572386
SHA256a2bc5267591ce6db9bb08de30d4b596630e1bca23e8d6a9590b8dc2516b0c81a
SHA512c4be99afc5c0da4ebfdd1545eaaf682b7b72d9a1297160e40af8d2a68d27bc8dbb8eb9ba6bf81ddd16099f8a7739f34005577a60fb0546aee219873aa6db4ee5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5becbef36042476a82cf6298b24b96030
SHA12dcd49edbbc9c216c4e9bc9b159f3b9664995b60
SHA256e3692f7d9367c234ca27059f91ad0575e283db5d8a114213f9b1bcd59c36551c
SHA5128956caeea9aa53564ef179445955d9bef3f408731d7a3ebf21718ff0329f6093af0bc5a8ba683a1aaa79785778c7ee0d2888f8d69b7276b4164021f81660b384
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53e71b012e9c806841c0b09e95844f434
SHA1bc1572a022b681f24a536426f72d4089f65c8109
SHA256508f9f3244a7bb72241387bcdbfaacdc2a0d769280b7517a52e641a9f2b7d25a
SHA512d421b0c44bc45c630a81bc6efbe3ab029436f2c8ec814372c73cb11fbba389efa5316a1bc651f742fd59eddbb24bd081fa7420995b4ef46b419a57598325b4eb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD531dad8c817a7fe11b000f4e8a405654c
SHA108e375108e33b3c01d34b7dd2a7576ce89827e04
SHA256fdfcab03fb3dcde019e15e246eb547ccb0caef3bf1be30c2c639ab3f7d10e504
SHA512b6f8c4134eef4bc2911484ab1e516de4de14b2b6446d0ebccea51c12a8b866f6eafb961f4e2a619bca5456e0cb81306341f357e5d8fe1170e7063318c5b73956
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5930469c0652a914682dac47812b77034
SHA1a83828764688f8ef992929a9e5a57b78894abc74
SHA2565e5219b2c45895b380711b631cb2b37fd4e678fad52e0e97a3b4bd8c20777bf6
SHA512d55ae173c734e992ec26ee78e8552d6b9ced3439ad3f0021c5a01e63b9fc84fa4693337eed04c96f2c015838677d8ea05bf1c63bf476a9501c475f06d6290186
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dd9d665a0cc6c9eca442b4da661ac5ec
SHA19fea2f117115a607f059d3731f3ec1ec2050a422
SHA256048cc9b936e547d47ab52f89a59ff020009944022014cc82ca64654f9f22e3c8
SHA5121953ae18b79f57acd9f1ed8eb856472659bc53474b245ded19b3fed59e797372a17ab9f865040831632c8c7353bf16123fdc949f1f2b2b803ddbaa183f46b030
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51cb887e25eb51378924961729c935b63
SHA1574a620f9589ef72eb63fd50ef5415f1576f4ace
SHA256a388e5798b3e6b3476ce5a79ccb8f7f9bb06343a83a9f32fb347985124187445
SHA512cc01521073094f5e255f7104ce0418476c593941ccc0bf32ef2489ffd3da842f3047d219d71fcf2ff3a7d4d9748e3029a0f8ae2729bf2350a6b1995e41501a7e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD545201ecdbf3c909c2a4a4654cf9ef892
SHA1ed0e90049c764885f6215c277115ca23ee54ab92
SHA2569de2e1e069987645e1d03db19b2d23c60aa92b3a21a916b7441c0b5f5c610fb5
SHA512f838fd597686efdc7ed162be3bd3fd8c4b0411b8c98938b5dbf919f7edbdd4ab6d521ece21ba71368f6a31f586334ded847fb8e346ef7a2069116a03c91a1eef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53352130af68b365173e168064263c2c6
SHA101d6640d14829e833655bf33763607b34efbfba3
SHA2560ae7d0c3826bc60e4e8a08b3bb7e8e7fbbb2cbc4a1111a7fe3476e392ee703ee
SHA51291ddc6f9da666e05c851a4e82a5f5476b80642b74df124febbdc74a6d629f6ba052cdca11a5303cd7211255f45984b3accfcd5bc226ec9117402c878ebf96e89
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD533fc63c45264fc952298a2f3a902d97c
SHA1c5a8c98dd2c47ac48c24ffb512dc4662704a9f8c
SHA2562d8a47d5dddcefd7952d1798fbc98f425b64ea4e7433303bae10e747598c4642
SHA512c455ddc2982923416c290a393580ed30a34a6cad14a1035b2f6c198be30445a3df385135a941b4f42fbb36bc4ee9437c3c613d1218d8d015fe1a5d6bcfe975d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD512d555bbe68613bbe7ced633ff578912
SHA1de4324ad4eb35fcb2bfad9cff269a4d9cb2bc472
SHA256d2a9848cbdb2b76ba135dc90d2726165803608d9e10068ce73e9e212d80bc3fb
SHA5122ba29a24b2d039e9656b49f9507461f6e2b13704c7ea2761538f7341588e24a7f2bf67a249f3a392bff6bd0df2cdff6b0b4ec4cd72a49098d46bce8c0d027b92
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD559beaebe6092b904ecc2f3d89c1c887e
SHA1023aff26bb5dce779fb23652882df87170817b9e
SHA256653193742ecc34ddaed557bda197c6c88325e69d1efd611524581f33b82f7cc3
SHA5124236683a4879d1844554327904fa3ffb7f7d800560d8426020636a5ecad3a99b3c1a30111cc84d3fb087cc83564985f2fc6e8f2749f7baec846523e8af07df11
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD537d6ab3f122d5b00c450fde0a06ae41f
SHA1e65db8cc0447c27a5df78ed505d0675350fae236
SHA25699fcd5a845d61ada40482212d6cd27d540d06cbc10c45a5d23d31cb47ce6d57e
SHA512cecaf7ddec4a4e039b282f063f34164737fb02698eb6ecada93ebaa87c0bdd636a3036054eb93b69fa6fd4f9bba9ba90238ff7739e57746bd94e1eb394933afb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e623be57bdf52710ca068aa571e543ec
SHA1923e36a40426a526b756486f4ff6f2b8507ee16a
SHA256158eb7315eb891bdd3cf9b53fca06a95b53d4bc966e5534fb4058a2b73860b39
SHA512dbd679538776c7346e64d81dc5bda47c8366d262deb9cfc0b6c52ad629880e1ef4052422cb781819e7c6577f26796bb6a416dbdef0276e29819633ccf3074636
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b