Analysis
-
max time kernel
118s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
27/06/2024, 03:13
Static task
static1
Behavioral task
behavioral1
Sample
14789a194baa3a2ac6f17d8108a858ad_JaffaCakes118.html
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
14789a194baa3a2ac6f17d8108a858ad_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
14789a194baa3a2ac6f17d8108a858ad_JaffaCakes118.html
-
Size
31KB
-
MD5
14789a194baa3a2ac6f17d8108a858ad
-
SHA1
7b5cf67b903d7bdd425f47563e94b7f4caccf0e2
-
SHA256
e9368bd546ab2b7f0c5df164b0d68486fc12b5b7581e726b48ee1d73aa4d6d2e
-
SHA512
206102a5d0af4204bf2148955c2504dcb29336de3251f2240f55c9a68a1604a2a737db6af926d59ce2d10fcea5f0d21f77fff7f76f540afc3fb680a57f29ce3c
-
SSDEEP
768:/n1ZpKVAqnd+qq9o7B2mwvQsTq3opF/25DtD:/n1TKVhnd+xmBtwvs3opFI
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{3C0771C1-3433-11EF-AC4C-424EC277AA72} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "425619882" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 50ed4d1240c8da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a80760000000002000000000010660000000100002000000007f7721507167727280f7daa6e49c18183951f96f99aa1e4870b926fc9c2d2ad000000000e800000000200002000000082450a98ac47c88d0526ecfdafa1f28bfd7b61c5ef84186585d9a6cca9984f6420000000a902ee47a73efbd7fa00acd30d835abd9cc7f086feab45062c9bda3b90ee19d0400000005dac73d32bc2bb8d94c08e174c32e9043630e0386de5c481199cc911957a1c14a5b98c9d989eb04c5de33cfbb8fd7d1b10a7924cba0a365d3ba0e4103634dfd9 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2852 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2852 iexplore.exe 2852 iexplore.exe 3056 IEXPLORE.EXE 3056 IEXPLORE.EXE 3056 IEXPLORE.EXE 3056 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2852 wrote to memory of 3056 2852 iexplore.exe 28 PID 2852 wrote to memory of 3056 2852 iexplore.exe 28 PID 2852 wrote to memory of 3056 2852 iexplore.exe 28 PID 2852 wrote to memory of 3056 2852 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\14789a194baa3a2ac6f17d8108a858ad_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2852 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2852 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3056
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57d9fdd3a9bb27bd3daeaae07a27530a2
SHA1f3db8c8d00edda4756a9a6c0476b4733dc283708
SHA2560c89b32af8bca3c5cfa9b4c1c9cbbd18671f0a4d387617f9f2c708f4e566aa0b
SHA5129fc30a7a87bf9816a94d68d7b0eeb0d339dfb77f7cff8928012963a11bbddee640e2760e199dfab559141e6748f825465dd9f580eea18951d3221b7c95630dad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56b222d6e21aebcd7b64263814155196a
SHA1fdda5a5715d9d0ccba076d0560c11f1b8b2e360d
SHA256126245e39ac1a7e00f2fb5e8def2ce0406c823df8a8cc21af78e2a668a309b0a
SHA512ada5c8c6714ba05db7e0b8633fe073978762360b704a3e899a2dd8df25bf288a94223db0117626c8a2f129087505d26eb396905b7476f8cf79f34182e93470b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57dc7c8a9b79de288d124796aee075811
SHA19770b9b0530aa06d72c8b253cd55e56d9782e42b
SHA25659a6e9d993651e9c62645257cff4ec813f182863475fa279b0bfcccb0fbda59a
SHA51286e748f501923a1d6cbb07e799974a8dc12d99e25c63692c9640e862edd8837f614b11e71bd78594ae9dca2efa87d69a5ed0dae0b510956055ce09d1cbd6ecb7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e9b32311338f6ea485c52c5ec1cd5f29
SHA152eb3d390bda425d9254f0536d4e28277c85274b
SHA256743050856e1e3100a0566abe4bf9e8d75aef9005c12d2b36abcfd1198bf10af7
SHA512ea7eac98725886eb744e72c0e61b6de3363a1c656cc57fc291d65a05c2c530a7a1651bd4114cf8281c0dfae53da7709a0447fa363a7931753cdfb995b734057b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50f7bc20186607355bb95ef26bb4e1af4
SHA186055946d544f05c4aeb0d9374ff8e129f2f8868
SHA256115a3291f49b9aebed77cd492bb11da0f174dc163ea2c47ca2bcfb0ab2a0b329
SHA512cca88a1b546e6c8dd270d1db45e2c943b100d58d227a65c413bb934eaf47015197a196931a8d7df348aeba42b05e7a69cd0cfeb735ddda6430e13492659c63a5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50f4626d7401846117476b405e0d1f1b8
SHA12c48c6bdf3b0b393b57d7d95bc8351e2779e3bd7
SHA256cdfe6e41b499c8d5050b01173b1e8c1d62145ec58677197040ef5a199e06bdcd
SHA51234296d29ca87e0e7f39c11116aa922e530f9c9a504e3b3c6e842692ee6a505d52a8f6b5e6093a3e90e6f10d789708215349eb46cb73f8613508fbd35574ca356
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5748c8f51fd7865060f1fa117de3f1fc3
SHA1ec05f8d8ad764a953b5059d0c5c05f40015ebfda
SHA256e0a0d306dbdd113a3e71e763b3186aef23490daed0f113714729430518dd1e9d
SHA512e4efdcee6e3f4779ef6cfc4b4866d189c3bc8dc7f52886b29f26e071acc7cfe98e561439e06607028f12a3d7b155c3f1bfc334aafa6a9950d1a11e1c203ece61
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50b78e1ef7c8a5eed4e617feb86c375d5
SHA1d85d48acece43b4503758bfa5b359d43f48efa5e
SHA256d0494b3e096e747a22a0dd2664fd97fa1373421103ee9f93cbdf1c976d98668d
SHA5129bd9fa07ab88f735b833e8cda103ba387331f9341b1b989c4cd927009c2e53701a1dc5415932557a3aba7f456e5457a896a36b96395729aee2ee1a7f04eb9c1c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59f7a740ffb4d258ea75013b7575bc589
SHA17cad33b53d63922b8f23fb247ff254e49be76a45
SHA2568f88c8a0107a21e3acaf327b4f343d39104525e624bf6c17a70e8f6a3dd6c18f
SHA51239c3d53e83eee693bc60332baffb16fb9c6031f3b5b323484a58846ef3236e30b2bf213676c42c32a3392128c0d1cd2ebff9d3a915fdab58602166186c7dd722
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a66ad6d6491a494de3a5ba20ac2a7ffe
SHA19775e82548f5f16f3d7fff1419564323c0fd3376
SHA2567c6faea22dea801aa8ddfb4c092648260f28944ad2c7f9900238d36787785bd6
SHA512c7fabc57701438a838f0b0fc68921e1dc0fd6b65841d8d96502216b2612455562a491a36c177c64abf125fbd9c3bd4709ff7a13ce2849f5b223985d2128e381b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5441e9faa0f043b103d11e489d1313d25
SHA1fe4bf1198f98cb9696f4a87ec19abcbca268d1d1
SHA2560c491696c744d0d273b88f97da25a78fb898da153bd1a34bd66ca7abee0e94a3
SHA512721ce92eb7202b94f79df8461682c654983f12d0b6f6bd518e73ccbb72df7987f24cd6fa74c106c43ebed5260d5673e05e83602f954fd07dfc7d3ef315088363
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bfb58b887bed3b6254955477d6ed801c
SHA1ba1d2c2a09f4c7c69237749e5ac328384d895fca
SHA2566735aa824e11d46e9799c76e953f17c3b3eb9637daa795600351928c55d527bc
SHA512c79f00fac303934d26e35ba7687dd2e0cc7dab1617f3d64a2b74327e83ccf335fd09bf5c9405fc370c9f735fba6d3c75a9bbff529ab428bc65ff2fd8a3fa19b3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5db8b0c669beef66953c8a9492d30449c
SHA1c1c4670f87502745780ce3c50ce6aedb1e97444e
SHA256f27771f2f50a3c999e9d984a1a774051c521f75a91d744efb68ed4530b66ef64
SHA5124a294077913def490d0beef520c39b38148b5a19bd0edda6fba06d82dc685d48de264730f893c092d778fe0415e208240d2cead78e79a5f7a26c6be7329941f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD501ae96f07aef2e193657794404292838
SHA1be272943be42238caf0e53b8069288a578bd2319
SHA2567fb6436bc98757bcc75f573e2dab88b0acbd53e29bae58f24cb280b797cfcf3d
SHA512503e2ca7f87e06fb511042ccce744dcf25bff6ce884784bd6ca59d6747fa87bf85ac1f6fcd62daaa6b10172c454ee8b6ef84d4a61b12252f25f1b4e6d2d4bd53
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52bd1db747ef676ab9c566f9f65c7f9ef
SHA15d3c69ca51c010be6bacf0fd2106c2c617f1a50f
SHA256111114584f33700f0c1a9fba2bd1b0a763ff7b0bcb132794d3f911957e098a9e
SHA512d61f1e742e388ed3ca7de3370dc8adff0a9c6b074f4315b54f2ed2c32184fc5cf1c670d71a38b7a6b45c35d0df44d1b332db344c3155ce205730a18f765c505f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e89059f095921801553d68b414c53a2f
SHA1d20f5a63e570f2987d9436b75f3ff8743a83848c
SHA2569ed8bf5998361a469b1aab154652d6201cd666351f7b8dfa447be2b717e676be
SHA51227f35ccedcf25da2aff8bf859ba943aed00df72c941a10f7cd0452a997360c33b98f1158db252034378db10f159b14546e874a4c7a5727c61497cbe20947095b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b1833aaa67116c04bc6740bd5b5156b6
SHA188a8a3e7a40d4f25b245b2871e5147846bce2b5a
SHA256775d3c7b416a0012490f485b1d014f8d6556349d9f9de7d963e989718af0beca
SHA512eeb35b9d70a2b0d1ed4054a1f7fe4c96a7a850548a181153c168f809c04cfdb67bb5af981216316c8afd59788941cd4f5468d6511f489ca0708c2c817d2cb998
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54e63fdfbcff524ed9b46a44b5bef0a13
SHA1436e90339157d949bf516fd150f3eb5616ec30a7
SHA2568fee98be0d050c457a8d7a253c622cd9d9c9a89e5787587ff737e1699994a088
SHA512f69a64d9b9df82e94037cc52944ab63c8eaef5738006268aab8493310312a7cdcb7df32c361cf836456e335f4730414e2b316b9098d7497b8c9f6304470b0ffa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD565ae5358332e1b2164397a0ad52a60e2
SHA143c52fde06678b9f30d3f50b526db9e4d29bdf42
SHA25600efe84a937c434d6ff7e731594fe6861762066e7c7f2294059f1be3f027fb0c
SHA512d746a97b3cabe9d6f49fbccf1e6ab35b9b662665b9b8061adc6c94b9be7b8c2938b21bcd5c2b44775fbb3ca5b4313e449a8d261d9edd1b2df04b46ba84e023cf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD575d1691584652712a234a9dacd7130f1
SHA13cdcd34963ad2625fe8976cd215391010b6f8d8f
SHA2568985ead62f3fcb7f746d81270c374c8e04118e763fe5a2408e3601d3a1d9273d
SHA5121f2a56170abf35007a32308904fe3d86f501c7c5e4f6f8be095b1bb42e589ca8b28c177ad82e3df4224c48c1ad47e444803dee329504503b5481f16e70c82499
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b