Analysis
-
max time kernel
135s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
25/06/2024, 01:19
Static task
static1
Behavioral task
behavioral1
Sample
0bc01473cca1b8fba75b405903aeb9ff_JaffaCakes118.html
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0bc01473cca1b8fba75b405903aeb9ff_JaffaCakes118.html
Resource
win10v2004-20240611-en
General
-
Target
0bc01473cca1b8fba75b405903aeb9ff_JaffaCakes118.html
-
Size
7KB
-
MD5
0bc01473cca1b8fba75b405903aeb9ff
-
SHA1
bae61468e28e89c7c6a29681db77db24af66e7eb
-
SHA256
2d1c402dae326f9ae7d29be3739ec470ccab763ce2fe3ca56456e56c8d250a60
-
SHA512
58d744a9932f472bde60be22e69510c257a089dee1bdb52eae9cc1b76c1f6d74bd0bca34487e135e12c07a7ae166ae557a25c018da749dd095ef8d245d6458f5
-
SSDEEP
96:uzVs+ux7pkLLY1k9o84d12ef7CSTUTzMcEZ7ru7f:csz7pkAYS/Jb76f
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a807600000000020000000000106600000001000020000000fffe9279734389638fe5e76330499707e89efeb4e6a168af070759c7d4fa7c95000000000e8000000002000020000000c2969fc0e30b77073c5e6b83a6ff9a8f65558bb841a29e5e80ed11faf216e4472000000031a73864981588121997e5fa43d85bd0e4d25b51bd5450fd96ae48e03b13353e400000001394c1b046335f2a34e7d3f364b48aad1ff808b4e83c9ffc5aa1c028395c939ba07ea1378cb3884a2ca189afaa4f54abd7d34e54a0dcdf22ace412c51319c9a2 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "425440216" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 20dba3c09dc6da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{EAF1E701-3290-11EF-A8D3-D2DB9F9EC2A6} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1732 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1732 iexplore.exe 1732 iexplore.exe 2832 IEXPLORE.EXE 2832 IEXPLORE.EXE 2832 IEXPLORE.EXE 2832 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1732 wrote to memory of 2832 1732 iexplore.exe 28 PID 1732 wrote to memory of 2832 1732 iexplore.exe 28 PID 1732 wrote to memory of 2832 1732 iexplore.exe 28 PID 1732 wrote to memory of 2832 1732 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0bc01473cca1b8fba75b405903aeb9ff_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1732 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1732 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2832
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56fd8c6db77e80555be65c9362c33e766
SHA16d725c01879b7152fa30af2a829ff626c0f7f257
SHA2561a4009bc815a0a806f65cb8cf680b5c74a6ebb67ab4d813acfaac04a22edae7d
SHA512640f33649e3664a8c8093c2abfebfdbd06f36e55dfa847df9a6f0756586cf083685260f3c43edaf321eec84d1950e45ed95af90207e017fbd2c583ba37ba2190
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c48ee2ee99500044dd1b5c7640a211e3
SHA1708d40d5fdfbff1557ea81aa5e08942cda002957
SHA2568a0f7c957ef5bd311aa9ea17ed43934980d9cb973336e8bec5d0570e63412477
SHA512e578df81b137a6c4fe45207b114aa4eefd717a04246634cc40a8dbfc9de7e9de1f1f42b80db84e66339bf58bd7bf4b6223833714b8e637dc66047c3ba003dd20
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5af26a6e703e7027192efd13315a21127
SHA1eb783fb99aaeaf023cfbc96836b0c3a8e0442dd6
SHA25608b0bebc4122337f9d0ea44ebedabf94a63bd9773592ebf7be25cefd9ff62c55
SHA5127b2b490119a427c080f182b9b40e919053d39d46cfaa4497e35c243d465749add7030a9303f46e62860b0c675ce0610249d11d487acead542e5980dbf9583f8b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5017cecae8c07a23ffe01f3278c434a1e
SHA11f29c25b5eeb42ce1b9f082c856ffae35c5d7aea
SHA2560d8be5034a87439e1b705f9003b1fa6efa21b78f3e9364349087281e163a4731
SHA512d021780f6d20d390cfd068dd61eceb52a88dfeef18c1979ca556e95ac5b0a924701c1c0e0ec549c212fa4b45b7c03d267a2cecc292dcab90d0ed40be677a1da5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59e5ce5b07c6e10f821c6ae95c90644e1
SHA12f30e3d804a50bb2a93a8ec352d4e7d28bb230ca
SHA2560631d40bcf20fb3f0604f5b838670f9bbb3df025166340bbc3d2044429b2176b
SHA51273c16ffcde10ff4111e1dec00b53f0e8439510218abefdd25c6145cccb601687c9fe28b4a8b245214cbd6e0120983874e63b242e334594e75cd785f4054d4528
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f15f7903dcb3e66bd9084aac1a2573ed
SHA1deeffa54a27e479f4ae6eb07b4ab6e32c34e0909
SHA256888a9ed6155ccf440b5088b73702c0779c086b9b2b8bf77c071824f717044245
SHA512156f8e9acd0fcadc6900b3a8fde2324271a6e804bfb6eeb8eb87a72f0788cd96138530d74c1df5af534bc85c1f93b94b191bce7038b2b8c3698e72a6006906bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD586f916506742b5a733c41250e03a8d0e
SHA16e79a3f3044bf65bfd5b5bad066acc126f501d6e
SHA256531d8eda62d55f57c81cc170e39516b2612f027832ea6d39944d35262840c413
SHA5121dd30fe501b910e11ed8ff5007ed529d169cd45455a039772a4c733a386f2f6cdfab94d24a5f5882be8df044ef3891be2f394c18594fff86c506c946923f23d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56471c403dab37f72ccbb00bdf3a84bc4
SHA1e95e1f9a984d74e1c866e9332e2724c67ed3c124
SHA256808baf25a27f9326c340d08c3988ce715e39161ccb73d2758c6e53ff771c1766
SHA512645abebf308ee7d6ffb81a454b168affb7161d3eb0f3b7a1d4fa3ec7a30969b9a19101f2c915887942028f424043010ef5dc9bad32ce81f61d119e7585278f8f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57ad6ee4412d2c9e2f734807b05a610a6
SHA1bf1492032aaa666f3c8587739916e4462e74b944
SHA256546f9628010c8bf607fd5cecf1193752207b275b32d444417cb3a9539412ce11
SHA512f1aae81d168d56e65fcf7c0ef8a8dbf52f17b0fe2ee14645556242838555d1c7136de8a969e15094443737febb1eacf1af8b6706393c4f5b4af7bdda3a27e5fb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52a50c9404be760e715c4f16f4cfbc333
SHA11d8c4478c9c25ca353790969adf97c18ed2c9d05
SHA256752e0c29110bbcf6968cf78e317452dd6e672c64f62231bf406ded8735698561
SHA51273f5eaba9729f560cac3119a8ffbbb8e50cf9627f505c43789a5529a9e30c861397f288278d46b36a2fa424e677d4b151d1f04130a6c6812d0d9900c2909750e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5df1cd1187669521edb8ea708e3b36b8d
SHA1180d8adbbd6e58e515c5eb877c0e2ad999d77d46
SHA256b1c3a1f2969fab0d4a8aa19ed90f62689ffbc4b420ba4fe96942cbd173cc1449
SHA51290ceaca1d75207bcba1d160cf1bee54b76539e7318bde43814c9d97243ea4617c360f009f4cc00733d756c9b5d3c49912d5a92e052f5614e8c7d94483b475879
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD527853055de888b29a565c1c37e7322cf
SHA169b86ebe8c99856649a00c9f5c12e3aa67a9f953
SHA256a1a46430b5f0f7f3e371e6572c061ff29536a00de2445e2e3f517b02968f3233
SHA512914be3779860e67dfcf0490a9f51f70eac84e5d8c688db8a004fd04156909d4b04a9714cd685960f40bd4f596c4962117c3f4bc20611796cbf223e809efa7452
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5272eb707bd333b215a0bc12aa7f8e459
SHA1acd738a3403c76f4366466bc94ea9fd04ff5a15e
SHA25613c76b9072bc5d9153b10316cb96043477ff504a507372a46073c7f68e48bee6
SHA5124ce5667e3c8d44319e201bc762494ea6d00f05353de4f4f25fe20347e5899636b258d6f9e57aabac51a9338a9123b85cd8932486ff82a0dd0bbbddad7c1d69b4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f8eb12ec06e1b2558712a56632c7b07c
SHA19373700672d6ea4c8a855d3096645ccfaa5bf2c7
SHA25630507d1ed807d083a7367ee633131e9b2612208cd585c7d85dd750654dde8ae1
SHA5124ed09b053098a1be32eadd3befcb20e93185429f0d493c7c937f3b2da4b53314c6c4f282424562b90f76da3304dc108e176beaaa9f536ccc7e7b121cb407afcb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5719edd6391c5c6d6ba362a2b07523e5c
SHA137f7dcf8aa619888c3b4961cf478075c41860a84
SHA2563633d663f4f7e44e813a3915067d6d0a38eb2b63f657cfdab3cc4f8c80575fb7
SHA51210043e166cc6bbadd88cf28d272c3f98de9ceb0db69b2b1082731683d66a0311f0481ceb20dc8b4ec52962ffc592ed17f1a369db78977df86e84c13cb00bb894
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5083981b74345cdef36cad3c56ead0c86
SHA10ec57ca9060fb819719c0d435e5a76bbec9cb9f6
SHA2562fb532d5bb585ebc90248038a3869062d40a64e5bec68944e4d1e0e6e3754473
SHA5124e35a0c8e2ad293e4bd385ee6968ce158c1f5d655fd213fcca68c604d2fcfcf019414843e1b209425b9e059a2f039d162c04b1613ecfe1e80036591603140716
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e6d0aa43a7b711956ab9055262891184
SHA1bfb5948c1ec65ce0ef705ef0b18f564620e2df95
SHA256906dc1be86c64531f558073e7d38ae743d6df738e9ef670e3ff5a2ed478c77a1
SHA512d233c3bf0e0677b7c74ebec212bdc6b16d97924b84322d263bf5a253611230f18ad6442df79b6a3d66c6132c7db66f2a193e3b02c1f5504ae7247772a9e56b0c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b67d8b4cf784318455149bbf3e16fc5c
SHA147e7af06f931a0e920d7e93e4111b86463456052
SHA2561042a676bab46783199d5868435e491dfd376b19bb5dcf83556866cd4280fd20
SHA5122233da6d9bcb01d4c001aacb289247db194419a34686e5450bb4f60f71d77e67e9b9f5045d4d0e752423d40086ce844114cea014662fffc17109a2efb920b120
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56516b1d67036ffdd47b436034a35a3e3
SHA19cdc3ff32391bd0a881346b0874f0f6aeebafbc5
SHA25639df9811437edf899440507222d586cbb33d896d519c771f1988678e5b0b21a3
SHA512b000bd54d319a980dd18bd06d22a137df61702cbe105c8c1ab40a11915bbe97148af75c19ef54621a4cedff30f74062591a2cf3ceb9383999f9a8a7aaa47ba5a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5af066de492d2394b40600b2fdc18a687
SHA1d8f692c62c038ccc89e2cc69d726786cf1d1348b
SHA25677b5e3f58984aa0889c64c495048c0bdc666b2cc94394b192ce6ebc976b3e3fa
SHA512403c343f747149eaae5152b9eba7d8183a49fd87ec43c2e65ea1ef0a7295b7c03b312ac047b5b064b9646551729b445e22145bdb31e6495d9b64ccc629384c61
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b