Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
20-06-2024 15:17
Static task
static1
Behavioral task
behavioral1
Sample
072fecae0e87f5df5acd451cbe487e74_JaffaCakes118.html
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
072fecae0e87f5df5acd451cbe487e74_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
072fecae0e87f5df5acd451cbe487e74_JaffaCakes118.html
-
Size
12KB
-
MD5
072fecae0e87f5df5acd451cbe487e74
-
SHA1
327bfe3e46a8f45ad7aad94698a27db46418ad0c
-
SHA256
3735d64435285f3ac309fa73e63157db4ee35d3bd0b872d414980fd661217228
-
SHA512
02b0c896eb795c87110fb2ad2176d667a255a782777ace8d319a3a2b0e04ba09f1a9a8c79c5caf7f0c53c88861334c6bbea5c7436caf431ad12f788c9f6c9f3a
-
SSDEEP
384:+3wgXEugQtN8GrAddlFGGOhLsOtZS0oQoBbK1:ngXEyg0gI
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{27AA2F81-2F18-11EF-91CF-DA79F2D4D836} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "425058493" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 50f648fc24c3da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000b2968c6cf60b74b94229c882944fb810000000002000000000010660000000100002000000027b174f10085763bcd6c7c664034a918301b3a1f8ce4e82a280029cb835229b3000000000e8000000002000020000000a3cc1946f6365ab1be2cfede3b06f9009411d19386b2c63ff3f532b3c753854020000000d5d92bdff02476ad74cf09a74bd29eb634668812b3d319cb5128b9e301e48ff140000000da00df1a46861e00e77cbb86ff01d5e2e2b1964cb9ad766ab87d6d0e77b59a46159672bbe2f81701fa062ac1de415a1ae34eca4121c21afb4d0800c438ae02b4 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2812790648-3157963462-487717889-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1656 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1656 iexplore.exe 1656 iexplore.exe 1720 IEXPLORE.EXE 1720 IEXPLORE.EXE 1720 IEXPLORE.EXE 1720 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1656 wrote to memory of 1720 1656 iexplore.exe 28 PID 1656 wrote to memory of 1720 1656 iexplore.exe 28 PID 1656 wrote to memory of 1720 1656 iexplore.exe 28 PID 1656 wrote to memory of 1720 1656 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\072fecae0e87f5df5acd451cbe487e74_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1656 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1656 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1720
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD580d2b46e046926389c91b7b6e5931f32
SHA16779987242c5ce6ddbbb6c7cac663f89f86e1721
SHA256f576671988d170c27b6e6b34126da51c3f2bc1fe3bcf83b052c180177c00494c
SHA5126c72b77a2cf21052e52a8cf9a07541854e617700bad3d0c98cab81a984125b25b48d5559b02e106a40e6a318b2e454a89bbdeae8af138442924a0b2c17b86023
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5678dbd2e6fdef03298928edb4fb9bbd6
SHA19a02db1fa5bc8843bd9d912a98180f052752f476
SHA256f27dc8bfe266ac09573225e8cbf9343fad71888c83a10ba8b71cbd5814d92359
SHA5121ccae37807d9acf07f7eee92788111b297f95d6a0c4607eedb35da9a4e6904f39eecae02d24a9a649b902e11466a3c56ddc9ddca683383bb3ce9db5dc94ffb51
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56b076b7c52cb86e35557b30d4693dc08
SHA19bd741eb1689637dbdc9786ec40f0f09f2f0c3ed
SHA2565ed9d2628deb7e2aa9ef36637631cb9f0b5db8971a247f23a96955628fe955fd
SHA51221f880a193ed06d56b773b287fad9802de376043ec466165c5d6d636fe9077ce7c8400c02ad6705bfb40c88ff30ef8faa7a1776173aa6a6c03a9401682f844e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57a4fbed2f4828573d5d22054c92c6320
SHA14e4f1f72010a2c2918e9693e8193197a47f79ca8
SHA256e6edf33cc5bd22f275fba7def45b73d9b3ef9d0f27032b52ccf903eb38a0eed2
SHA512bca39bd89b4359eed14b6aa0ebc1cd6cb1cc8c5406cbc043fdb661ec4ff18c4606523fb175e7e67b1fd17f00021cfad49d6429848ac7eff294eeb88552db9d33
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e7217c1046b8108d118e572cccb43e79
SHA1303e7d4a2121a264be965ca250f7b80b5cec9d7f
SHA256a9ea30f46a61093e89ff56998af0e1a3754a84e1635e716535c4c64d11031c6f
SHA5126bf513264c526e908f3ab1d36cb2a8c31bcefb6010cf6d9f515b83da5fc07a49ca6eb83d2e344ac2d4942481ca172b6ea4dbb28a5f0d021ea2e134e3a652ee48
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ecfe1d7b914669bbde0b5dec912274c4
SHA1bb0f8413120d002b1140f9fc0e47b9ae4ecddb27
SHA2566c21cb010785b98484cbf1a8bb2612199be26908691118158b6a399d2553604b
SHA512f364eabe82951c9f4acab6568f9deea9d9cfec7cab3f42d0c33d4e57f76429f4ac31f8f262f55806eff2d7b12e925d770aeb4b549518ac945f1ba102744de966
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD568730a02068b14d62c8ba108a6b70c68
SHA1f52c80e4120745e9e0fa0b1daade7d7baff8c107
SHA256123df39319026c7c11f68879fd9ada4e24f1e81fa475246a0d046ab7156079b5
SHA512541dd8cf031c8346a092a82aa21cc8a3651f3dafe48dd1bd928f6a3f41c3d6f51f30b44dac82e0ad84d2f52f05d2cf6137f86634c274b20afd1fab6e9305388c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54b6e7c1ba92d78ce2e66bd23c91f52eb
SHA1df7ef92af430869fc5ff82839a212a84ad3bff3e
SHA25652e616ad2e5433a65997a971733fe36c045c1f37c4df09c42953ee72242a7d16
SHA51286ed11ef487bd2118fa059ee67045281012e85010759e165ef27316954eb49eb6475e57b045ffcb067f15a1faa44bdfde3f544164111332cbd1954eb05803ee0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f4b8ffaca45d488b27041646f1dc2eac
SHA1bbf113d1e21dbccfda2a2d58550d6ae35291546b
SHA256c3e083239eeb00f1e6a77d3e32991b3ee3b28e93f5ca9e9aa6c30dcb0bbe21ac
SHA5125487867ba1523c44fd2f4bb48dd71305519df6903c1b486f30f0f904a74fceb8306c63ac8fc30ed61fdf7f821c344fa01419f46992d6e7a917d38a731e1460c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59c503547e8656fb7a0fa4a77622ba755
SHA1efa77ac995cd37c89bdbd4612c14ead526bf7b26
SHA256fecb8147f92a1e425e712c6d50cd81444de6b63179b85773690c958f58b9132b
SHA512be82d6b199a56abff19559f412d6639e07c6eb5538bb723cbeea4e775f4458e830264f83f365f5c7c5f0443513c11e6b608f84c1bc0613303791d2a0358a84c8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5891609a46b961d035176baf1287944ad
SHA125439b0fa2cf6231c0862aebb2f185f0b6276d89
SHA256c5260d76164184f14c3b520390be5a53586812bee3b7eec3fc9679cba9d32008
SHA512956c8c53982cdbba424ce1a0ba546a9d5c52371141169203e1de20705b0611fe3f545f0ba2172b64810e2565450864b773fc6fd26d045544cc84756fdb333534
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD533feb623aa4f8f7fbe954ca79ca5ad18
SHA136dd474951690d3dc97114dc459376daa724c507
SHA25645d2f1d2f92dd9d3d5d67ad711ca5d887a7896a7ba145bf08178d3907803e803
SHA512e516c0d70ec380702f2cd3577720f6dd0c936a73181005fc6f10e4cccaab5ae78ef1319da9a1b49ddff2d93ac60cce061282e273b8ebe35aa70f2b20620428f1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a23748f84a5b546b79191c2b354474c5
SHA136446031a9beadb6c6166712bef110917a7f7786
SHA256be259747254d435d1d01bd6b8e44b498b87245fa1992265a82355ab9c7dbb5ee
SHA51243f3556d8372eb6cca4a13dc951edb0654e3b2a94b9cf85cee9d9968c7ae72c64c4a213afb98dd7375369ecd16560049d8ea8c96e1dbe82967850a1979e43566
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD530c35809900a671a049bce2961abdf0f
SHA1d50b92a497784c8708400910ac25abef72262187
SHA25606bf8707cd17023919cc27c1ce5db4715764f11fb52734dd10001e9b11559351
SHA512988b560ae29abae60b73749356a1e9a0696d919dd02c57c4ddd1daa03da00e6687b4f5d3e2ecfe3336592ecf4fbef0cb5bd1c995569513847570378ad8aaa9b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55e5492d0628b7155a7733ee52667c63e
SHA1a9c7623c6d8ec8a8a0bc55f3350365a7cfbe5629
SHA2568f83a35847da6029f0e12c9f4a7cea28f872fdb553305682917615160a902f94
SHA512c102520e6334f54c0b1133979027eee94a70034bc182775424ec83ed9d8d0e074ca92989f525eeb1631362ebbb4c0b770832a10eb6bfc96c20c40ac08525bfa0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e13aebc7efc474c47bf98beae2e2f857
SHA15c619d1840dfba3fe01f99c555cf5051213e4dc5
SHA256d13d6d463a61445586932612bc0e85afc2c5796317cd20a5185c702bb476e18f
SHA51206803860cbfd55d796b0b4ea600806ce2324eddfa5a586b1f018acd733561a41799b6c0eeac67996ff180e191ac801b6fa73bc01f287322247c1902f186c58b3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5425c206dc449a557dfdaa6a11621644d
SHA19d8ce45e2d6a514f90122af19386a0de2517d3df
SHA256e717f152cc8ae153751982745ecf7d7f69595ac0d2651a1bb2da68626bb93b8b
SHA5128d9292a48a04b2c74e30da7d199cfd99c03094562e96514703c0816385e46103fd97c16e64ce9982ba7e07070daa2b22d862078565c61290b6944da62fcdbdaa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54e1461a3022f1c539086049bb82656e3
SHA102e322b2e5cc9b6c535f89cea996d0d41bac1d87
SHA25639b516fe47124b269004c923712c580d82b36fda9be00388b49b5730d872f54c
SHA512ac24179a839a4ce385f00b420c16700dec3f597c0efbeffa527f0e6fd90988886e5494db04184de225bfe8babe9e0c78081b345686eda521bf550b40b7689423
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5855b0dcaef718f8ac45d458163f3407b
SHA19e6a95ff3c8dccb0545171c5df4fc08f2ca06faa
SHA256a926eef0efdae3792405c3fc737fc9e272d1152ab5167eb78eb1f5569e6fc00e
SHA512892a2f7ffc015a965ff79a364ad4abceab3de000f4e64f502d0569a77a4bdc28783e78fb6b7a2f5db912bc0945918ff5d1709834a1f4b1f3d2336c0c1e4de5a9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51d3d3bbbe4e99759ed8acb1e0034f356
SHA1dc5ee7f96b3f21b4d1a274315237471748192296
SHA256520a8e55a82c8fc73c291979248e4889031c9b7402aca9e7f245997888485acb
SHA5120750b5cd5259cccd16f57bb0b1fa3d31c5435a803ce612dc4dc8225f507d1a6c3ce00caa7ff8a757f56251e8a29820453580e25078ed514f436e5d20f848ef95
-
Filesize
67KB
MD52d3dcf90f6c99f47e7593ea250c9e749
SHA151be82be4a272669983313565b4940d4b1385237
SHA2568714e7be9f9b6de26673d9d09bd4c9f41b1b27ae10b1d56a7ad83abd7430ebd4
SHA5129c11dd7d448ffebe2167acde37be77d42175edacf5aaf6fb31d3bdfe6bb1f63f5fdbc9a0a2125ed9d5ce0529b6b548818c8021532e1ea6b324717cc9bec0aaa5
-
Filesize
160KB
MD57186ad693b8ad9444401bd9bcd2217c2
SHA15c28ca10a650f6026b0df4737078fa4197f3bac1
SHA2569a71fa0cb44aa51412b16a0bf83a275977ba4e807d022f78364338b99b3a3eed
SHA512135be0e6370fd057762c56149526f46bf6a62fb65ef5b3b26ae01fa07b4c4e37188e203bd3812f31e260ec5cccff5924633dd55ab17e9fa106479783c2fb212b