Analysis
-
max time kernel
122s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 03:37
Static task
static1
Behavioral task
behavioral1
Sample
148b239b7163cfdc4ae8d32c1a909a45_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
148b239b7163cfdc4ae8d32c1a909a45_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
148b239b7163cfdc4ae8d32c1a909a45_JaffaCakes118.html
-
Size
11KB
-
MD5
148b239b7163cfdc4ae8d32c1a909a45
-
SHA1
a54ffff1b50ab7de73a8f83464aaa1432b9399df
-
SHA256
18a37c51fb1698a9b1abfcaf9d54de46e745473000e3bf5868d29bc3af4bd7af
-
SHA512
ced6e9805524ebc239fc422c2fcc5a13d4daf6046dcc91ee0ee25b5f446d8ce2a4ca6dc571251f3b43506102faf4e3316829703c6147880c2f416ea331f5fc33
-
SSDEEP
192:csz72WAYS/GC6eqJ1erQTeM1erQMeLeeSSCPHb76f:cxWAY8GCNHS
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "425621297" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000028c57a904ed20d4c845ffbaf650f29b100000000020000000000106600000001000020000000fe37c81e36e02ac68a790a67b05320e453058ae37ec0c9fa696f79f9b7873c26000000000e800000000200002000000084121d998084492ee2fae3ce6ec541ccea88ed3039e04571d876aa4bdfe3f5aa200000002a0e194a0ad29b8bdd6b34015527af63107e5775257b3a51f7e3c37661d0c5e2400000003a2cbe964b51603daace837e8cfff14628ff65c0ff33a2b4268c0d16013c4015460cebbdd465bde268cf902ffc2b648d13c7e5bdcf49694b5a3a42b02ba48c68 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{88661AF1-3436-11EF-92B8-52226696DE45} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70c0665d43c8da01 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2900 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2900 iexplore.exe 2900 iexplore.exe 2888 IEXPLORE.EXE 2888 IEXPLORE.EXE 2888 IEXPLORE.EXE 2888 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2900 wrote to memory of 2888 2900 iexplore.exe 28 PID 2900 wrote to memory of 2888 2900 iexplore.exe 28 PID 2900 wrote to memory of 2888 2900 iexplore.exe 28 PID 2900 wrote to memory of 2888 2900 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\148b239b7163cfdc4ae8d32c1a909a45_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2900 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2900 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2888
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51d50cbcfdc7038db26a426b6310f4b3c
SHA1bee38d7ff849df5927ce72c509ab6fe939e4613f
SHA2569468f97ff168aa0e0c563495eef4c5f4a86dfd6701c1f9f72faf6d4047bb7fe7
SHA512273ceeef97c2d103051867449f406a528ad7a541d8540522e7970d255be63562737db194fd6a2a39fc1151a9915a3f7a105295683648cac31784133308893940
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD555494c1d6beb7f458245428448b269cd
SHA137fe35368d863cf337c4cfdad97069eb3fb490a0
SHA2565b76834c66232212a8c167858a1c5bc87401a7fa193d04c3a26709ea22d1d0e9
SHA512e849342a2bdba2307a4aa72668bc1f4eb84beca2d16a0d1aa8b4324e4abba13e04a24aca41da0fa8ecdc4f997f06656b1ea5b2a824d161d05db63f95985472fb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a72da92ea98740b06ae2e7c2143fc0f2
SHA167dcba46bc3f5869365490babacb2dff91c1a741
SHA256a713921a076d7cd8ae8214656e60d52c97edeeed6599cad337b0b6e2716544d4
SHA512948544d36f777dff986707562d92b1f3c46784d2c075c2259648ec91a3d360e627e18c6b947a1e3cd3077049a3608e211929e6721cb759ae49ae53701effbf63
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5377f58ffe801824f01d262442b3408a1
SHA1a75c0095bc47ac5b680513708395d21249a1bf45
SHA256e2a523e167e04b0b1911b7d7fd257176ab368129a460de573cd524c688e72df0
SHA5124f94fd8d8c634f55c4802107419e86475ee337de58445e13092dbfe3a0399b24389700619421c29af5c708dd576dc6826889484b2bfe5ab6b784619f3d8c9dd6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD581786ce042955b66153989ac23644963
SHA1fb18633dee5d8e3722c4067555dd39d57efafd97
SHA2560ef9f1c557c8101b8d772ac01b8bc2691264fcacd50c91e7a97ee0d937b9da67
SHA5126d79cbb40b87fad4ff6c1df8db886d5256e392a106d0b45e5b0af411136e7c5b50831345fe308463e506b2a74ce57a2fa32c4140d320e591ba77f5f888fb0ca2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fca554eec18618ae0f45a8714115102c
SHA19f3057fec7d6334b3c91ee1db0575ab613adb099
SHA256edf09f7ba68d9d3b59017d492d62a2d2dbf54eb07e463f66ffda55e22145d4d6
SHA5128b9e5fd5366d1124c758c7476259e6e1f750774e7edcb0711e95b6448f9ce8772b697c4351dbf24fa8ae1baae47cd08945208112bee55d9cfc5c12a6e78da09c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e54c033934d3ccaa62634c687599aada
SHA113cf5529e6feae8733e9c168344abebec91b79fd
SHA2560c2b7c379c96ee2449e7d70b9f3bfee030ef5526386435c06e7078c2a5b941e8
SHA5129848cee7b5c898a2f94b3272afed7d151174d8c657fa9e1ba6f749f7f4020998302cb6890358d74acdb34948c502ceaa8cff7cd83bfd6f94c6f491839f37feaf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58bbc8cbe19c70a3f17a0cb878933adeb
SHA189919b55a3edfb5027ef34269f9d651877dbeca3
SHA2567e145d41ffad9846ea897d2530da0564030ba83e8ec3c01e19846626ec5e5a3f
SHA51250822385c7c5955ecce8846d7599138d21cb80f9244a5b534ff7178fabfff38bbb345410cd94ce3e4255057428ca8dc20ad754825c21102efec27e029f9f65ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55219285b24ebdff63a287f584186209c
SHA177579f8371b4ad96473e26b5456d27e5caf1cb21
SHA2567a9f48525dd9f51f9f7c38984b1aa48de681ba3e5a4bb015d2f03cb0fbc19289
SHA51292b3e8df04b682b7291bf485436d36e743e5b9a4e5357b1f97aee6d9c5f291e70092397b5edaa26537b159ec9c0c5a437ddcc3424bc198810b886ffdb3d35290
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57b8f6f47f0e28694c191fea00bdd8d75
SHA107acfff6a1383be3ed98f102b60f6524de4b15a3
SHA256815efb5a86ea940b15d0b6f9b3ce4ad6ddb1afa79dc8c6c40eded53e9c3ef607
SHA51252b740ec537c4668a14bf36f4ab765d011a3a9850c59ad06d6731c9fdd30cba8f980a4b6a1c4e1434a59ba98510f4d4f107453260a3d3f94869df3a485063418
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59269e12e399c3bd82ce1a141e402bc7f
SHA1add3b50e0afb90595e5e28a57772d60f9b13c9fc
SHA2560804e27d93c3a8f2858a484eaf22c95a6eec8d1f474528f77fd41b1bc5f4b680
SHA5121f605adedcc518ec78a8f9f4b377d75b998b484ab1dd987a396aff0fec4d29f4c4d7933bcfc6b9fc5de9c83a26db19f57d58297ee16fb27e98a1c5be5bcdaa66
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52334226b3efb2020c82e480158fab989
SHA1e55d30f8dd6856f135871bc2643a0528bc4fc69c
SHA256c288dccf46221972e77eaf732a11bfe4f09035780e06a9fb2549d55c0dc97ff1
SHA512e49cd6b99a768602201478b42824b7eb0cad593f5f324e88bfab655f775c6a453dc96f2f7a5e14e8929aff4567404b942c39f3757ce206f84677a296c5c7fd11
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5da50315766b67dbb3d1bec7df2746e05
SHA1cf14563770fcb3d980a488a7fc5876a471700186
SHA2568f84c0c78152d26ca4c5d3285985c2e696af2c94698a7d95eda379d7b10d19a0
SHA5122de6dd8e2eaf4d3349baba270fbe66dc2b1beb62ab18930cb5d8d995520b7a0582220ddd8c9239a4db7ebe4db13ceec984df2bd785a6d27f8065a6cab91387ac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57b690d62a8dd2f78353924ee74491b5b
SHA1300e1b3b13233a49426cdcfb3cf061c718f9bf24
SHA256527cefd58872a3c6cfc078cceb14d7d1c7762a62f842d93d3253812e981187ae
SHA512dd6df3089923e458bbaca31f7b56757754d72e286fe0e03c57a5c18f892b0ff6b6612f3916ce086c817ce6a69f9f3e48cd6af9264bd171b6ac19df8c0445d5fa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD577f374319394e0262f8c39d23ba9d1f2
SHA195b6422cfd772e0ffc843ac1931b5f055146a326
SHA256acc9def747c8f16e9f225f1248647e8538f7bca0e76bc29b608767dd76a4a3d7
SHA5121a1d1f50e398a5c3865eb6c5683b147186dba734e3007a3c8af5570f65c31af65edee85b66608a67e282cbdd24c4f45f493a48c93f0c28afb317d7092ba1da7f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59c993b20c5ea7b4e079fcbd52c7ca3be
SHA13d3d58ae04ed1b299106167dd22084d7362cf3fa
SHA256be68df2433defad9b367624b10bf586740613b65e9c8c3120c5c2c4cacceeb5c
SHA51269f93864e24c31f2f43d6bcd3c6b993a4d12ed58c40f701b59c581ee2341f4fdb47d94759f7c35727a3d47018116527616ed81f1d87727975d7ab50cc65da1c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD593dce782a6cac54e3b0575bdcfc2d448
SHA15f9846b6497e6872a4873371edf5983fdf73c759
SHA256263d76e007986359dccab038c7e47126cf2c71f75bd557d8b64cad1c5cf949ab
SHA512836604b9a597bf3187cb0a9690d4b63a03d402baa9344a3b484a98e765c61674bddf16e809b8c213770246e8ab649f7aa6e885a16012590de19bd39d870b6e8f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a6d26b513db6856014dd99e209630a73
SHA16cdb894b8188653183a38d571fe6fae060ee9950
SHA2568e8f45e09d51d6a942ee08b4c2a1a82efede49aaf868b411a975789dfa096641
SHA5121062756437e1b1b3bed741ce56c25162f27026ed9442599161fec9a64de92144e450d2c82a7effe776f4a207e2d377f10e91743f7c582d327d988db9e78f729b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD517711c2c1a36c9cfda6e7722999370bc
SHA1e304872d31d2171fc9e178c37cea2ec8e51cd458
SHA256984884acaf1ec1d09b19cd192b219530442dc8b2211be2af4f7099209e19d3a7
SHA5120c995ee559e6505761b1ce88de56f3d1dc11f6108821d813f86134814c99ca644e92b198d5059a43255954996e96da06d1848666551e420c1d7db11610801755
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b