Analysis
-
max time kernel
117s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
08/07/2024, 08:36
Static task
static1
Behavioral task
behavioral1
Sample
2bac8e8ded290255a2d0c963d371be92_JaffaCakes118.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2bac8e8ded290255a2d0c963d371be92_JaffaCakes118.html
Resource
win10v2004-20240704-en
General
-
Target
2bac8e8ded290255a2d0c963d371be92_JaffaCakes118.html
-
Size
3KB
-
MD5
2bac8e8ded290255a2d0c963d371be92
-
SHA1
bfd9a8f57eb96b0767b46bd699154872f3d67f45
-
SHA256
a45180ee3e1a56ba07a55f993efef34f1661ad1cba22fab3cd92704af0a9aa8a
-
SHA512
4178cd0c136f4c917418b7fffa37bafad540a17a45e1a1d53484e9c83b39d7b9b044f1d6e54a6a23dea8e9f3af344be5ffabe6ab2d258a458f9d58faeeafc867
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000930ed985b08cdd4cb38e38023150682b00000000020000000000106600000001000020000000f713d4f5e06632bd75901c26fb7cd099917911837a34df4320227651648caf83000000000e8000000002000020000000197a8ab978e61ea104bf530aad9a5ca307e597ee1ed26d128deae9db8bfa8ff420000000def7317c39b7d91ee97a0baf1e89e0edb852b058947b0e21529fb8ea20ae9a854000000033d8d7b7ca02896f612dbcee623be8563f4dfda91dbb3d8d5659e3096df96b712826066c90f0f17e576560c53d0c345055952214c339d24d2b9eeb45334390cd iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 6023d6d941d1da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426610162" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{EA7C2931-3D34-11EF-8C3D-F62146527E3B} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2660163958-4080398480-1122754539-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2264 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2264 iexplore.exe 2264 iexplore.exe 2896 IEXPLORE.EXE 2896 IEXPLORE.EXE 2896 IEXPLORE.EXE 2896 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2264 wrote to memory of 2896 2264 iexplore.exe 30 PID 2264 wrote to memory of 2896 2264 iexplore.exe 30 PID 2264 wrote to memory of 2896 2264 iexplore.exe 30 PID 2264 wrote to memory of 2896 2264 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2bac8e8ded290255a2d0c963d371be92_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2264 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2264 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2896
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5beff40d493258cafdbc91de86fc6685a
SHA117972baf11d85968cc9cb052695d8e190aea9b67
SHA2565a21cc3c2765944906a84f4019561d283054848515f666e0da444953de1b4950
SHA5121eb117d6cdb5f5531c48206025c6e488ddd0fd7165908b349c7b1b2fa79c0c5c7097c19cb0cf1cd636e64d4a195266f530975b722c96288daca2c56997e6733b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53f2b1f51b3330672b7a71a0681e5b378
SHA1a00c7afff0ec6563513a89a3692bab736d95cd64
SHA256b783116f84d7c35de924561ab172d0615e7c8e8ed8674e3bd3ca941b007542f7
SHA512cfe3e5ba108cb081e694e9a0314e7d5d26812811c5255215080dfdcdd054ff553555744927fb89257b527a04e54d8e9f34276b3362a7ee35a1338bd59d781251
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD506c1322fb362e68dc0d6dd743e286e1b
SHA15792a30fdb5b74cd76ea68ac674bb5b6f22699bf
SHA256d7077ef410b1e5038c9d39558d34432afc91ad4e9181930853189703e68b187b
SHA5124e9b63522d6cb15fea8e2b98cf0918cae68b135c8aed121e8100c2aeab403787250489098cea1490d5c55a13e4aebdfad3684d4f1ce54cd84c91a15ef8fb8917
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58c939258a7e2a53da452074c3c78e803
SHA1b9641dca5ddd74922c1988acefb9575755f0ada1
SHA2569e33fa8df3bb3714231a73b2210c7f371b835993ea80277a0a3ee6ed22d6eb10
SHA5126b5f9d4534269836a78aa947b282addea57cbb665a6567d2fdfbd92dae14ec27da4a6ea3ad5804cc859027977ea76e3c68d7e7f00055f5d5ecb1b13f379b8115
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55f19e843e260a2180ff255de4133b2d2
SHA10760cc68f80ce92f0d8c2565f6f751cec125352e
SHA256dd1b001015e7bed7492752547a7316bf665d65a74b04fe62964d4dc787a190ad
SHA512b848b89ac6e1611a0dd527867892e0bcf36888e917bbb7e90190dd58f1bfda472c4a5f33737a1478bcce147b0c7102d935338b36b9f6c32be3b41dffcff97140
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50e7aa00ba600cc08e6612ba850881a9b
SHA10cba71d2ebff8e9bd93503b5075be36f9a52882d
SHA25676e26daabb00ba5b43b63e86b9420e65d87b66a8b04e52663f478cc400943bb3
SHA5127e87489df3c69ed5930e9a0c6034fccb45605e56c2352ddf147914c4e8d39613b2dbb6f8f3a9a7207a87a778ee00978e08d490bb8955d590daaae5d46fad63df
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5eebc5e3122b9da35ce391d2390015c97
SHA188d2ebe48a0325a0c5968f091911c722cd3ceee2
SHA25635260d98221c6904a7df3f67b856e30a90c9c32302353e1a7f90023bd49ecf37
SHA512e000c560139b265fdb17e4b5717df2151f21340867255143a90d06c44ea509b06a868e4b39de512f777361b738825b6337b5b2881469018a37bc609ef401f3e6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c7d246ac0efd14b2e66ff8c06365dd5c
SHA14d85bac8fc2650c43351ea87e99c09a3da3304ec
SHA2564fbbb2aa2ed3682ff57fa7fc8891ce92fbad20b17cd0d9d1d73d71715f1c2058
SHA512c2856323c1d6d7fda6a22bdc5afab250bbbb818b0c0e8ade338fb5ea46a8d3a3b8542b9897ac5bb5091d4daae8046425b2404e60885fbfb632864eca7a861608
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d880a7fab63d8733c93400b686f5bfb8
SHA1a9150b92c8e1de083d20071a28cf413efa921273
SHA2569a9badf29cecd2fd860286c9a0d2b1f5318756192ede666b5ef8814150e8b9ce
SHA5120f18830b8b39851d3a34088e67391113b8b169434208a8b8979c72d92b5bf85f47539a63901ffdd117e52b87942b2885fead87d9b83c86591e32c2981bae659a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD569f78cf57077d54d0d3a181c44dd3e56
SHA13290024ef4280d616ecd763bd8ab3a19500290b7
SHA2561207825686c580e76a25b6c45bdb96e6dff2fcc317d9c2db42b511e507fdd5a9
SHA512e02af51035edfc535d219f9b6ad9c604125e459836b10169bf96f96b50fd4a2478f37ae1b60ad54d10adb9453ad8ae87504fdcc3c9f0da80c57139128111e2c8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD537c7211ecd37bc64cd90cf1c28d652ad
SHA14f1c70db0b972f2f467cec11a8eec1b32b23ab42
SHA25643bd28a896f19143ff0cf39cf7b6c0b582a3298eb99406e616a4ecd877387be7
SHA51205c159594aef24d977336d6a5a020b4455114b4e70179342438b4d1ae084723f854e8d49b5e7efaac23e3f930163c0d2d97f645080898763822a912dc4c24a16
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f67eb450a3791f5c1a41b8b8665dc4ef
SHA153457c0f51d71da86641c88aa80630cff4731a5d
SHA25674418d4296e65229655d7fd426caec62bb18ddc85efbffea42bd9178ea5c58d5
SHA5129fb0d622cc89baf07cee58a4b306dcec60c2f0b20974551c0097d40c3e8a72766bb92107294b0d23f307da01f3a7b95250b5b630f5378d3b09ebec26e462e343
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56f38e66dfa90e00b13a8342c6d447b85
SHA133d20ad9fae61cab5f31a8f2595c0c06cd719a78
SHA256ade5fccf3381cf9742cff80d886e791970118f169b05d85af2849d47c53ee05c
SHA512a4929477b194e80f86ee027fafa9894ebfb07d3a305fdfe499ec7fb2377425ca4b0ca2cbca28090b154da7159eeeb896e8560b9731aa362214b1c327532d1172
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59d5ab3603075235b00aaf3a414bae48e
SHA1a6452fbbdb2b8a2999194fcfc5be1341fbbc10e7
SHA256a89ef73e6d830f0b8b7e2102e8da068679116ced70d5528d029f32e3590bc679
SHA5121c9d1e5f297f1d032ab75a0bf9add23afa96d350082c2eff0955aba3fb4516a5b33b4cbedfce42fe64001aa3f9ac4d95c2338ba44177f475378be5efc8f2b9f2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58359cdb75f68f958c16617da6df52413
SHA1c7f0d2530c0a4b607e5ccb7b1fe6c03e0f9c5937
SHA256908dbb7dcda554ad1336a33648fa42f7f1fb08ce3d5fe9d68b762451ceacfb66
SHA512aedec7482a439211b25826cf8846ae266e662d86c5ad699b3f6249907ec9069834f7f23689ee792b6ad0b83a7daf52aee3c6d88ec42451c0869477369e9db14c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f908c9955cd046ad795074b08184a8d3
SHA16f6940bd6b50a630bfbb574eebf60f67a76d24ff
SHA256182096a09fe9ae1f87fd00b09ffdf41a13d8ed66fdee577212cb9387d6c82203
SHA5126adf0b0c776dccb6f8c4911c54430fb0a0083ef0b0715eb18951636637047ff378426080ab7daff1ac5ddc93c8b68b536429d69f34aaece93f4bf676321d83f1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5abfcffc0bacf950f3c26f43b62a1c59e
SHA1f248368316b1a8d0090e3ccb18c949be8d4d33f2
SHA2567750d2f2aa66a8776a856f3584547560edef1ea72240a65edc87a13c6daab652
SHA5121854215071e92b33cbf6469e35241bc8bf8e4c938bedb1eb566ede6849353aa86da0b368ba08d8189fae982c4e0772283d81784190bcc50eb4f0d993ad16999d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5edb195a8032a130eac2e004c733a8c08
SHA144d43461be2b841387111a37e24f9ec51c334653
SHA2564b5f51140a8e4b137a54ddb24e7c10b36505206c0188d734815f98b1e205819b
SHA512b639b95c17781a07665e9c3033919663b71e314936da12843d978f549d55c48e0dae1c03ef3eeee7a1fd6a63f0e4459f2db7bac7e041a0153983b60f89a0cf60
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5eb1df25e537e9ed758e56ee196025338
SHA1cfbdc5a4c893e73b03a9865d1e6f3f4c144052cd
SHA256174fd8ec483eb48a2614455fe209e270e03dd454d8e3fb4a9cbb63850e6e5a16
SHA512b34e800b0dd40ffb96f8b8c120aab343b47b9ab8adc53818c5a9c0ecc23673bd04e2f1d66df3e6c3c70d1c204b7a7a00c053481ebd2edc753bfc75480cc926a8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD569a8c46f1907d18e57bacecb38e28377
SHA11d9ef8a25a7ed56fdb62489ad4bb62f5a0a02fa3
SHA256b5c986a45b322eb39b82c33964efd459d7cb339b96889bc07ab9a2f40a1fd845
SHA5120e4a2823c4ce1a7a37ccfa722cf2fe37fccff0e40f112e2dceaace5b289f894a53a1ef44662618209230ae102aa1c1604cc741af24fc4c5ccf352c0a34abd4ea
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b