Analysis
-
max time kernel
142s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
17/06/2024, 05:28
Static task
static1
Behavioral task
behavioral1
Sample
b6f9d3d92915ed5696e070e9c891658f_JaffaCakes118.html
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
b6f9d3d92915ed5696e070e9c891658f_JaffaCakes118.html
Resource
win10v2004-20240611-en
General
-
Target
b6f9d3d92915ed5696e070e9c891658f_JaffaCakes118.html
-
Size
139KB
-
MD5
b6f9d3d92915ed5696e070e9c891658f
-
SHA1
c726544486960431af4eeb10cb9f2e4b4f1abaac
-
SHA256
058864bae553ea08a2c3796d1f3cd18f47c9a39d201b27d0e0b89173c77ab076
-
SHA512
c37d84310ff5eee2e574c9c21f1dcf7ef96ceb02ebfd1c93ed1d7995eb05baad5b98c6b9ea53276049df932960525a9a6f56bacce9802c8d5fc90d893e11c3f5
-
SSDEEP
1536:Sttqsb71+YlCwyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJruH:StF71+GyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{71E14941-2C6A-11EF-BE23-DE271FC37611} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424763985" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a8076000000000200000000001066000000010000200000007d963694c787ee5721a7f16265ca753ce4b1183e52a5eae02f357bce908930ed000000000e8000000002000020000000ded8cc133aced4c76bfa8ae53e1fa7c9690a980a226f7229b09fd5e7ab6e3cfe20000000cc40e23667e1f544ad10e2ad3427024193e937e64b87e4f777a55930f8b6a3c64000000062b7735c8cfcb579a588457962ee07ffff8f917d12dd2453391a7edcde1be7608d69515976b169d43c51ac00aed1ab0f607a4da1ff355965d9416d16328ce80c iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 003ec58877c0da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2752 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2752 iexplore.exe 2752 iexplore.exe 2320 IEXPLORE.EXE 2320 IEXPLORE.EXE 2320 IEXPLORE.EXE 2320 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2752 wrote to memory of 2320 2752 iexplore.exe 28 PID 2752 wrote to memory of 2320 2752 iexplore.exe 28 PID 2752 wrote to memory of 2320 2752 iexplore.exe 28 PID 2752 wrote to memory of 2320 2752 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b6f9d3d92915ed5696e070e9c891658f_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2752 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2752 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2320
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cfb10c14645b28b4076a5b1a34e6ad99
SHA19cdce673c149192926f131ae093135572d9c0297
SHA2562b1bb02f443df30bd10fa9cbb36394d25fb9c92b16417da8b0ec6839d8994a89
SHA5125fd7ba427be5d1bb77db90339d2604ae4586192f404ad041ba5531cf06274c43007fa1a949c2b8a9e69b83b8a66c7cd7c327be3af52e84d00e8bb148441c0560
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53c0e4fd6bdbb944cb4fed8e8b3edf330
SHA1b2d4941033f25c6ec5f85543e2edf097bf6e08c8
SHA2565bb874783e5695de1c3611acedb0feea39c6e5e7d99dc290be0de5ca8941798e
SHA512fa54e89b8853113cafff11c0a9fa2d496c0c60f4a4db4daca61e98376b1940b0a24d3c2dbb3bd44a79d6c3d6481c2bfb2c34b275ff5cb69754ec302da6a0521e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53fec500537f5222b26f80f4cf4529031
SHA1a3d7d898c116da796edade813a60325c01988bdf
SHA256118588c07e675142fb9efa537b129bfe7311a81b25aabaff79cfd00c97d9b185
SHA5127f2de54ba7c4975b894d1d2e5e1a2169516fa5220a4efe5b1ca1a88f93a87befb7e48c0497137cab161ae276bcdc784341a748086ba8b964c2a7668b364a0891
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50817833b6a418c9dc337d7c2b15df38b
SHA1126661fb8fc108d4ba981af1133d67520cbe4dab
SHA256de927a34a5bd6d194bb6068ad52b040499594e89aeeedb70696cfcd2c9d8cc48
SHA512304109aed7bb0394e52f6610caced8ef6628e5edb9da3ecc7eb90cbd5d024ff5423c1ed9360a51121a873625818ec9ad2966e3c187be938a53f0af2d9347a102
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fec11bffc2f3fd02943186a10dd35d0d
SHA1b9232668ddda8c3c2fede829338da3fa7b87c746
SHA256b67e2c67d1dcb5513daa34f2bead0c22dac73c444ebc6f627600c208b15dfdd2
SHA5123f82fc1446a62e11ba4899e6a811df21fd2fe07002b9c23e2148f9a9742736b23a6bfc48599c0547d1d2b2e42d80ace6e44247e975636d5ad5d342bc166ee991
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD516d7a854be54bf4a131499c60dc7af33
SHA12255aa6d017b704d3dcc191e8d77e8ce163b24bf
SHA2562b28e27491921039b8a7d45fb63f9a01ec3881caf590c0c1cc28d98349921955
SHA512ac406cf70be3e37e1f17a8610a8a4d6b4ca275e3cdcefbbcc96ec666851534cb8cd6187d94002814cd8edb8c542cecef2ec74510dfe9e10e21922a2aeba2886a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54f87ea8c7beab520d10da932343b34da
SHA1e3328113af3b4bfc5329a32f6a67d942c2ef0599
SHA256e0a9286759a90e62ee66d16599d55ed72a746f15779dbacf809efaaf7d929b4f
SHA51240137eca4e862ef0a6b73e3b8dcefdb268b2b2eff73d4d935c572b23c46730ff9d34b39a579816b6e643b667b50e439b8fd7339f153c7077cf51a084b96910d1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD505cff8a631f90727c48117649b074298
SHA1abf9c32070df638b7ba009847b4adda8c3590e1b
SHA25683d23c3144339b45f3ab1754b0449542177fe6ef0872ff68667b341f6c703108
SHA512c92f582a7c3e58acdef0c69f18504fbf453859a1fa37be7ac86de2ca43ef2d2f18a8cf962918f79c5b976c9b99cd26e705176719f6be1e8fff0fe4441b964c97
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD528a6ff96a19075e465e57137f2262bb8
SHA178a795ed4b7da6b638ed6350fa262cddf463e6cf
SHA256b7cb58b6ada343147c5740abd14560acefdddb12486f40ef42275f7af4e59743
SHA512db0162f616cfa215a5e30bde1c2f796f870b76728b7e630f006ca9124208ee6251ac223ca561e51a6b9a13a9521ca41a8909e6d01e18edd6770be4ce368d5a2c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD551248a054a2ceaa1ce7f7a874f05dff2
SHA1bc1008a9700c6cb39d2776c129ebd6ba27926d29
SHA256a108bdbde9f7dfaa5ee26b17a6cf508fd0ced185c6b96affa6bdbbb30dc9235a
SHA51240f0fcab5d092823db0e42db0fca8a6c890c0045e852aa61bb89195b432f65aeef0f4c88e0cb6a0972cb3a9a5d079747eced4c151ee469ebae1abd3434554050
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d3325115a598bf87967a41e439a1d015
SHA1810cf754678149581fa4cedf90b23858ab1c2b3d
SHA2567f9e633ba6e82f044c6ae965269a980290de889fb45e0448629e6d0c893be8b1
SHA5126568f91834ca756a8267204261f88c98b9cf7db8c75ebcd0da6510fefd180f7201e4fbd68784b300f844da946c5444ba4663c3011d3ec6b65f9676d6a4c1e473
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54b93b3cc25cf07be735bb8dbf8b06c5e
SHA11ef8ab151c4916e967ea15285bcf144176cd2a7e
SHA256cb00771dae80c6a917383409e415e24aba05ab76f6443139b7de1498d44566f2
SHA5122b27265295978d7ddbf4696a9c483abd7c449bbbbbdb86f35a3511387b56bf3b038368d128e07c2f2f7e0465e094ea34930709babecfae17d8d5fa222c6364e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5737b23f488068e8cdd74540e02ee3b8b
SHA1d5ef78af3aa8f7bc9b93d631b53f6dd5c390eeb8
SHA256934d2e2c9dfbb85b8dc12a05356791bfce68e7be68ee0f23b13e81eb9cde5022
SHA512f854ac4d2ec4de4aaf3932e37ed2e0870b687fd539c8aa3121dd324379cdb4b733e4a5551455fe8f6ea355d4b003b6c4940af75f181591c7e26391e611e7c9f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51d2597f22329bfc2623ced03b0d45b34
SHA1c82ce894884b20a111be138cf084b751693eb97a
SHA256659b0a1ecfc49c0456e98cfe2172f6134157f515ecae77a646e8ca8a9abc26a7
SHA512e40873a977ecadc337a310bb70557ff9b3e67f13981d8d2bb6e49d053548d9f604c74c0a99538db5c8c2513a5b4395cc42fdb00bc1ba6fc146fc730aeea9aeed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bb652eee65051f8eece2ad1569d0560d
SHA15e4e2179466b90682784b802ff508f85829cf9a3
SHA256d621e3484ccc26fb595f135b51567e9355981ee9dba047784b9e2a8829b97d3f
SHA51280a6d2d8e04de9fe2422bc5710bd616d97484b33b72defe30f88ac5a8afa3a6306565d7c77af056f5c28870652313fef7d6fec2119b28d9be23b5817d5560893
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b6ed1bdad0797d5cc34d4e04efb9fc62
SHA107376032498f491fcbe466a11e209eba860e962d
SHA25649ba7ae4ad3a22d0bac547941cda635fd9bb3cfa5483a432413751c866d61e5f
SHA512b312fbdff425a72856c23b6f3c5719e26539ada8cc29202642f617ba46d7b29b09ba42a2867539babaecb45ac71d178c5243f5333b170c8ca9bdc29baac01560
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bf4227e4c88441c2bfbc9aba0a10115d
SHA19f86258b365049553cc4820c71c5324dab226f11
SHA256e2f279b4eb9770187d0d9ae3f92d8bbdd5ca488e874492bc412907e94970a5dd
SHA51283ca576f8ddd8919f80e3597f892e79e23be316722fac2e7d5e319cc00fe6b7f55954615bb6d282c3a6985ab276bd9b395ba6355de5fbe5d189bbf8327f72237
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50c1be1c39e60c930dfe4a7030288a1e2
SHA1bd70d3f439dcbdfb0411beba591c42c517b2a3bf
SHA256a9c5ec65bd0ef3b0adbe1f71eb5743c072fe1c20b5ce20ed937236cd087a37fb
SHA512879d67873ce95c0b9a74f934eb9a3e05a1b9f18f8586804dc9c1a08e7f8ba7c82707a9f2df0a835b12b472bf198a67173fd7694017404967ce41e2391f3bbc20
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b