Analysis
-
max time kernel
134s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
07/07/2024, 22:31
Static task
static1
Behavioral task
behavioral1
Sample
29ffca7fd90099a0e77efe841bd3a623_JaffaCakes118.html
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
29ffca7fd90099a0e77efe841bd3a623_JaffaCakes118.html
Resource
win10v2004-20240704-en
General
-
Target
29ffca7fd90099a0e77efe841bd3a623_JaffaCakes118.html
-
Size
9KB
-
MD5
29ffca7fd90099a0e77efe841bd3a623
-
SHA1
b640bf328fca58a53a79e66a55215bd0adb031fa
-
SHA256
c6b024ff9118d740ec588b78c34f5dd65e8be74519cee23d0b6af45b3200f266
-
SHA512
f6b25a9000e284e8c184d01649a0b25deb303d940fcb3bbdff93827c2c62ce2e46fd495e4c3f8d4d878d2c9cb0cd3aa3e629f982a909bd49c03886ce87f9d1d9
-
SSDEEP
96:uzVs+ux79gLLY1k9o84d12ef7CSTUnGT/kmJpxKMhNtANtarYeQ9MolVHcEZ7rur:csz79gAYS/6SxXhNWNiFoPHb76f
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000d854e951ecdca4792ad3aea80f035510000000002000000000010660000000100002000000061682375c1c45444c6f206c2782553424eba5f8569a55022847a1ef65859cdbf000000000e80000000020000200000004a8c54d9edcb8c658147d08235117c33668f7d05202b95dbf85b9b412127e76a20000000789267ddf1aa1e1bde922c2c021fdfb35f5d202688a79e8ddd4fb2ee024a721640000000c7fddef7110b271b6ee597d76c79d007a11c904ebf6d5970c352f1d295db5fcba90ee63ce5702435df1c726bd60fb3a2d823ea4d7a62863fe88f10512418d79f iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0061fbbbdd0da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E466CDE1-3CB0-11EF-B798-7A3ECDA2562B} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426553459" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2936 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2936 iexplore.exe 2936 iexplore.exe 2284 IEXPLORE.EXE 2284 IEXPLORE.EXE 2284 IEXPLORE.EXE 2284 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2936 wrote to memory of 2284 2936 iexplore.exe 30 PID 2936 wrote to memory of 2284 2936 iexplore.exe 30 PID 2936 wrote to memory of 2284 2936 iexplore.exe 30 PID 2936 wrote to memory of 2284 2936 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\29ffca7fd90099a0e77efe841bd3a623_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2936 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2936 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2284
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55628f1b22e2582dd5157247303dc985d
SHA1009a085339727cf9d2153bbc5b577dd705e773fe
SHA2562e8fea94f25a6704751f7d2c9e300b2973e0bcce3f6d03cc8c17e654264b4df0
SHA5120953e648238123a0f47f193f768452083ee496becc6492c0bf97e5b6b7826e8620ab2a75d8345d5f44d497ca56c97ccb78d32f184a0cf2ad33d40c4458605f10
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54271e317659642d910713a9d19623053
SHA13334a8d954d9bc7cb1218f6aa30ca66a4a26f71b
SHA256156079a653095d4d42ef5ae3256e94c78b81c1b4af2eec040d17152067a0f04d
SHA5125b9a9210e8003b3d667314bb8e29b7985e56aea724c93fb5b65fd9a1645f586ff2abf7a4131852690b049d4dcc0ff228527a5bb70d22d3dcfd146a8228533cce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5443a8a507ef019f1e34b47c8b25525cd
SHA10aa9816558bae169e686fbdec21247d7c2ec27da
SHA2564a150b4397e87e9d48e2964d34687875620c012ffe19a3323aa9d689e926bd47
SHA5122a7f10012973ae48542cf7fbf4b6128186daea31ae2f5e115873e63123c41e2ec53ec61a034ef87719d029a642dfac9c42acb2f14aec0ab955e4011f93951ad1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57766ef09cd91ead18299f85e1e7e10b2
SHA1afca6f6978b347c22ef88f22670bddb988681f15
SHA256dc6c6a63badcd9ce9fc2e7e684e1c16f5d26c4363e67e4e2c2360483fcd97175
SHA512ff007b361015d4619241ab07187adef7375846639ea46ce877d945c178f2e2ae88ce2058c84ad550d51c06538dc6bd1989dff20f2711c6ccd41b1e1effc3082c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bbc7d936f8f4f1bd102d4d6ba0dd65f7
SHA123300338ea9845a2879ce60f12c44694c9304100
SHA256e422cc5e918be1af5e39f2515191f9eb3d7c3d0c446f7637b21f4d5dad696e37
SHA5129b9c0eba322e144112ac2e7200e4651f58bb4a8aec988d9ce33ef3f5d61954a93dac8f437b74ccc3f451a6ff666a9c4bd409fe2be1b8ea29fddc8e12b01416bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD504b826cd8416327a27af1b70b65abd24
SHA1d45353692db4dddd5269744a44b77a7db62cd626
SHA2563bdfddfa731e525cc2f897e037bc6e07bd0e15a998dba40d951b6f911be4a42d
SHA512d75123d8d66f6ad1d67de8510d924e0d44be0627c30b6b27e48775ea6d1ac221e5cf2af2cd4adf066c0fde69a85c53c5573a1882174ead8678846931f8e5d8e0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD554ff24b22389b8e1f16a0d76f343bff5
SHA124998d64ee927a0a2292a90a3679d41eb53de390
SHA2561770e83658f09043c20e38bc2466be8b2417d3dc680f63a0ef3bcb516df5a628
SHA512396529ea97e30ea01dbfd85dda7b1bae737c4877d0a621c62c0b55ae023a5278a741bd0047044e76c386d1fca5158bc76b0437cc50800f193868df8e9fa99aaf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bed42d8c1360072da4bdf4eadfb701b2
SHA181e3f458193becd1d05f929986493e43099fadb3
SHA25670c8615f4859fe59056462d91b2e6e78fe47ea6b4e047742ad402699a875b8a7
SHA512a22cf7f3f2d3aa12e5f73ba4927bfc4eff76467691aff7cd87d816807e4a8662f64edcd573f021e7a3fffa41a648dfa2f36f0b69c719297c02f41ecfeed2f7fd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d3929aa06084acde1682f88072174032
SHA1d803a0502bcbd9361f7cdc23648ffb731ed4d545
SHA256297f7dc87586a343f8d634ecef5de289f91631c50e3837c3d3f1661cdeb56fdc
SHA512275fab2fb08e444975933a66d608d86afa5d1e581be7ea6c8936b202d2eb52f1a656949d2f5c6f9df35e29afbe6ab0462c9aefe4e51e9cf400585343a011322d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b5b2ef1799ab40d9d1e71d225ff58c28
SHA1c5a9e6487519dc9d5783a73b89855399d947bb01
SHA2564daf0d8ee5375018afdfea93e60289a8019d465fe9ee49ee94171160e0e75eb1
SHA5120498e93067be5012521e5ebefcf993198e4bc186249b14d305e6e40804afec97e546b2269a19c1deea8bcb23b55b28f1bfa08e6428e5d987e60a8aa72acaeb1f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cb63be272ce993cd1413a20c94160b71
SHA1e0cec785670f02186cd8fdf78ea6698b4873eac9
SHA2560cd4b27ba99193d8ef7486ac9941337cb6be3394d7ef13fd1e7c7b3637636d2a
SHA512ed4b409b842dc5e42f19300a09617830c3737dd22ed3bcc1fecb0898d6152f7195e2cd238e4024019bf5ce35a548d9f8e29f103ae701a203382bbf0db00be0e5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50aa9a01bf0ee966cf9c9e344a98c0087
SHA1389055e65aca59bfc48dd3712e9bd7b3273d28ab
SHA25693cc2e01635aa080f613d1f42b50bca62cdb2dcd1787cbddc4b54b0f701db307
SHA512905c50245956c294a96a6ae20946bcf9c7f147c0e6dd811bcb711202e6cbc92668dac89ed30b04336d8040d95fed2d8976575cee76306dc1ff401a00a340f408
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54575226f9732167b0cc637307e14a2ce
SHA15612c1b673c1caec7ce92909c21c8bf46f6d2d1f
SHA256e7527b4556a3f47a6eda664b9316c0824656cc63dbb74a16af1831a7e5d4080a
SHA512b4386c27ac3e6a2a0561b4eb4b18358292b3a9fa45a3056e5637b58141e9f4d4f53beb32c33982d09126368f4c8512bc44d53153462fb88250af63aa76c7b57e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d0fdbda0359b82c33e35db21d54ae95f
SHA1dbb6afc0db253d139a99e6eb13829af5a629a61e
SHA256eb267dbe0564a812ceed29b7bea645cebd1c387fcf6355e52b45fd6d9ae2b9a2
SHA512aff2b7e85f337663797caf171c0e010790929c89808a5918bf157cb5ee88b233ec53133a75051b859952fdf4cb957bdcd836146a265f35efb776a6621e3d4829
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59a1b27d1fea7daa282efd0e2d121507b
SHA1a4cc199002fdaf8b2e3667c911ac32c37b453d69
SHA256fd4de22adb45e55b743fef6bbbf2a8a627f62fc746a85304046046f842bc7d0e
SHA5127292761752e10ca13a0ef3dd85adae1a2d7e66614ee06b49469fbb06c47e0771ec49a724cdf7ad2551ab5bf50fc853bfa0c1c19d124f48f8832adba853ddd412
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c242af627e78c02f795168c8ef0f521b
SHA1fcb6480439a8a4893f26d7f708a3f0ba255d7f8e
SHA256e28197de2fb7acc76fea39b1ef5812b99b66672d19a59e53568d393240786dff
SHA512ec88f41e01074f224d9e717f8ed26d05539887d68994ca4021adec91c78b7cfcc8f4cf2df9afc723da353c548c48c2ecd01d09a3651db866ba435590e5984e5a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50b2841c294b4752a1360d02f0b1b00c1
SHA17f885ab879257ce6bee6ffd2013453f873ffa972
SHA256bf113a75c978495a46a60d0b99730768a877cd2ace348a54015830a4c669437b
SHA512455140761d28c41cf5a031f0facc2cad63f7a48fb2ea381a125775e35007a39d20e43af7a468f3a54ee358fe82165722c54d72724acfbe156142901035481bc0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55796092fbef00613577eb9a7b1fee85d
SHA1d3bb4df834c418d09415e32990b621d7c12a6d7e
SHA2568b34a0d3d9905b692ac8ead09cdb81bc50626cd3bfe30649dccb4cd3e436cf22
SHA5120e4d8633cf10a64ee5daaac9ba4c679387e19c84eda5026d41c2f484ccac9d90bd73c07cf75c55ad20f8821f882bc27aff51f78eac9ebff61f66d57d08682cdd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dc37d5deebe5b99b560ee68875c590a6
SHA1a54c702a80828d88a0b9783be0e7c7ddd4129762
SHA25655d9323fe9f21e52ed3fd945cd6274e5e780d347d58e162bcf656a4769174106
SHA5128418c6123bdefb9503280e31759e1740898a46f44778fbb449759bf14687c6e5a81788bddda2609b5f0c0332ffda38853e1939de309ab3d2d791be3302a69866
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b