Analysis
-
max time kernel
69s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 23:27
Static task
static1
Behavioral task
behavioral1
Sample
36d3922ba4d3e1f250aa2ac659f49c85_JaffaCakes118.html
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36d3922ba4d3e1f250aa2ac659f49c85_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
36d3922ba4d3e1f250aa2ac659f49c85_JaffaCakes118.html
-
Size
15KB
-
MD5
36d3922ba4d3e1f250aa2ac659f49c85
-
SHA1
c8cad8611756637929814f0a2bc59417ffbb6671
-
SHA256
db12bd2ba6e1e71ee04e17d03c462a0948cb7e75205b04ee783f4ad0911195dd
-
SHA512
22a023f7824dace4d10db06e8b259cd19727b908039be2df58d2df02464c552ebdc82a46c39a01d828cb351b6967b4fc53840139b7d7ccdedef2228dc99953c1
-
SSDEEP
384:ESHycxja4Oqi0j7biIVV0Z93tMYs+JgPQQJf00uZYZhIHum5NR+787nFVVlqlqiF:E+ycxja4OEXiyV0Z9Ts+JgPRd00uZqh3
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bb7c5835718279428690b074aa627b70000000000200000000001066000000010000200000005a1026096bc25f858f674139803817a4f2c74c83ae651fddbba6014cf6ccd103000000000e8000000002000020000000961125aa4cb1ec5719667518ca64c5b6c18b60218b5faad8111ad7d747a81354200000009f6811e1d2da7017f5faf1d1a3321662e67106ca1ae3631a9a82ef5276b26a4240000000482a974a9ce2a7e1b8ec6bcc28358a55e7aee4faae32f0978fe83a4774d19a7a3d71ab354f5b40a0459d84c7cd2fcbdb66e743f92a301e4c840b596c490b8210 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{049D3C61-3F14-11EF-9514-72D30ED4C808} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0e2b3d920d3da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2212144002-1172735686-1556890956-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426815938" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2212 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2212 iexplore.exe 2212 iexplore.exe 2848 IEXPLORE.EXE 2848 IEXPLORE.EXE 2848 IEXPLORE.EXE 2848 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2212 wrote to memory of 2848 2212 iexplore.exe 30 PID 2212 wrote to memory of 2848 2212 iexplore.exe 30 PID 2212 wrote to memory of 2848 2212 iexplore.exe 30 PID 2212 wrote to memory of 2848 2212 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\36d3922ba4d3e1f250aa2ac659f49c85_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2212 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2212 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2848
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58e5b6527f655da7f074e721a3dddc915
SHA10203211c267d8d5f79f0f87b7aa03e4148d45024
SHA256dab07c6e12c73df769f40173b78f6c151e23f8bd76de2c47fede73af2c7405fe
SHA5120595e3cdff1618231bad35f3176e5d351d6b8d0e64811f09bbd8450eb282acaf99daf1300f489ef304505d5abe1f028e4f5bc9e10b7642e78884e1bbad430f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD559e680aeae9b73c8f513d7a00e430d3f
SHA1a6d5b33bb963533c403fe340692a501b78f17157
SHA256e783f7cbdece5407b2d493f28522eb28c8c3485a322429b67e2d4ecab8a8549c
SHA512014ce48dad2d3c7688ac7df05b96e026a91c2640f32b9106af0f7d0c31d8d1855f13d8b02511360e27b8c3105e97c063ad292d301bd153710e418ea4b7704824
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57faf753bf7f59095b1429f5380905f6c
SHA165507f15582f17f1a5a4f5b30ba05534ac03a5db
SHA256616361dcfbcb1d42212f1f78d2f12ba0d0bc444994a9ddaded34a4624ea524ea
SHA512591fd8d3d36c1f3c221ae15072845e19f15d78d92ca5a41b069fa85fc2435aaeb7ac623251bb5490684073014a9ba8ea4dce905fc16dbfb86657ce944810c7ac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56140b4ed123f757353fd90e3bb7a7a4a
SHA1046aa39c4bac6444994c1f30ed4840f7a676841e
SHA256ebb23e12b6df456e06bf25a69a90837ce8620128188850d5b76cb113fe5bcea0
SHA51278c2f6b129edfd958d2fda5b22bddf3aa7ceb42c725cf63bf432bf90a313a5465c0aa180aa72d7fde35b22b5d85f8c0928d433d0972b373e0c05c926b053eb6e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d2b260bbeb59da70bdc8e036cb816f69
SHA1346099cf383b99ef38f3d26490ad150e36641a16
SHA256ae91a939021d3f47c604709775b8ce6b5225d3a261c3f64f25317c8ddf82a517
SHA51294cc4be1ec40bd096a45edbc756793a8fd37e3df9553dd38b3cc8d5a3cf364732c3a97e1f0c9fcc4742367689b109fdf1afad05af153e97fb52d6c07454796a8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56b40ef8973df723bc39b9775ee4cdd53
SHA164b06b9ad3659bd6a7c20af3a1770bb695a33dd3
SHA2563fb582be6a005a6e90a9b5808773b0a19ae11a1ead2c7bc6e5ec3f1fc84bb0a3
SHA51277ca5901f4aaed981fae4b88a133d632b55be3b93e9bc9bc6d35e3d9e8ec8696495af2f3e2516d001ced28b0cf494661e7645f7aab57983cc83094a17464a136
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD513259761243301190b59ab6b1123481f
SHA13c06ee78412a9a1981e77cfcb2712190790a1629
SHA2562a46c8d5e51ebf7f8958328e9323db02e732d3dfab6aa0f3b99766b3ecc4ad97
SHA5126e826b9cd2298deaae38f9ae7854f9311d7d41e93df16b881fd980a46e217f477231d22e4c427eb2c563d795cc2502405a7a4361c73fd91e7aeac6a88076bbbb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD547766acd5538817e8bf018eba55958be
SHA1a70839272ff72d2f757e1dfee909e41f99f9e37c
SHA256d2e2e5174c9f22e6ae3711791c353b3d84927ebc972e92d39197e184e224c2d1
SHA51286c656e6afbedb82de48781801c94454eea5adb57f820dbc1659effb035778e30791615df2a7bd2a46c6cf7b8edec060ee88c665adfb089eec85bd30db3ea16c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5167e195862921c4c16eb36dbb3a98e07
SHA17d83532cef54a4920ef2f7e458b2b88e1ac1994b
SHA256c3fff306a1905cc6f2e46c2e9090d57993797e5509e4b6e24c2f46c2c0d4925e
SHA512c5c5c4a460e69d71dfa8885e3a5659b395b403e9eed11231b4c3c210a37419a7f8b27d8c184f503c16362f3cd9c7ae6d89499ca04ddd8e4959150d382c078721
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cccaf710c02c2457a566445640de4ef0
SHA18eb3fe8ee0fd7aa1160d8b41a706f6bdae7c2de9
SHA2566454e8f066474c0919a622c8717aa112942abd08cd67690cc7c433f64a78f5f6
SHA51264019e59ef8430d01e1aa2761299465b6e2309fe979c905ca734e1b6578e914221f26de9aaf711939dcdbc1401b2cf9002416d55cf3052d3d699eff4d8622595
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54c8bac5c34d85cc530c40bdabc1e6d89
SHA134d08f3fb0ce3772b0c9b4dfd8a07c593310d875
SHA256dc95fd35795366f3ec141287678d86e866d36d154ce2efd636c6fc5c7119b96a
SHA5121e13b84da7dd563ebf6ad2b18a79327e0d343a4c95d848217c7b5cc1a43bec96b0b14c51df94d288a5888ddb818a95244f9e6414c5da813c900e1914b9e058a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5379d7e80646fc4fff96fe5dac0288d87
SHA1a69e102a1e8027a5a151778e3a2de250d63bfe7e
SHA2568c89f7f52635a9b36d1cf774f44c014e5c13fac1bda20cfe48c510164a738d03
SHA512a743089f5a0c76314333d1ea1241e9bd0e9303b6618d3cbd36b4f8e7d9756ce73df8e5c4d2040849aff498489bcd2b0e2b18e3c172f911051ede895b04dd1c85
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD557b54ab26cdd5e076275c6d3590e2c37
SHA1acc9ebd7f58508403e13f1031d515ee893111827
SHA25678d738ffc5a1ccbab55f1aa54c2102ebd2f61fabf248539d6cc6207f2c2bb048
SHA512fc9e71461dc7ac36aae48cce1d5b95fcb9cb81757225b7f1c1bfe89c643a4b67372fbce79f6892daa16a5a1b85a21a4efea6ed80506f3ebce0fe6b5f7fc3bfd3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53da838346c5b999a2432bc42475b7417
SHA117085f4fdb766a7528512dfe9ba651d6d3546f32
SHA256be9d986c7748b1c7c6213ffe7c88da21a6735c958dd727431066270d388ffe31
SHA512b93d7b6c817aec4df4bff348791dbe41b48251a057a1b256d67aa1893834ca6922fa44218efba15be0bfc951b714b7e2d59de7ce5573685fbf61aae2a39b9a7f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56b77e5fc1008a2ae9b02746960dc2f75
SHA1e4b1734c24c8db2681f3f45237a608aafa1b394f
SHA25697837113e00404ea00f0b03bb97000b94fe095f3509f7902b36d521b159771cc
SHA5129ddc271a7b136aad6f1abe532ce84eb8b8237aa28e2c15c23ff232e6de05f951193ab7af7ce3e569a9da5ab07a5876b57dc25fcd537c2527c5308fa1ab70fe5a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54373d414b06d2dd0625637f95c8ba929
SHA1a330d483e9234e58ce076406404b7b3c75a619a2
SHA256c0725084f2ecdafc7039a9e006ae970cb168ad893515b24f2b7c6a1cb31b0ce7
SHA512cb6b83e8038012d3d9a1d2e74e3c90d052e1ff1d2de6a53001f675caff2a14fa52cb5074b035049fe18b38a34ad8a7872739b817f104cb05f5a49ff0f952bcc9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d3e1c2f691677170cb860607a34a3f45
SHA12759f46c3204c640ec87f96368297f09db4d8625
SHA256643a2070b95bd8a00cbd2203f44be90769f07099008ee8f952695f5d11922d37
SHA5126ef424d9ec2880adad7df4299a62b0468385993662669d6dbc53f57842ef2d232906fe52fbb2daf381951190cadd15d2f196cade317f637a3c5f7c3d896d7f2c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54d632850da3a5fe8354a960964365e0b
SHA1b6d2e57502cb5f003dd1e057c154795d6efaf2c7
SHA256dc66e6617ff72ff0ee31ec5e7d4289b7ae01ab0cad7682791913c64f74c20abd
SHA5127b5a261f66bd6d9a26636dc53d96f4a14284aa3aecab2b839255672ed8780dbd83739d4ade97df59f60cc5c5055f4f5e2dab63529823ab15d829568a66459be3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55f13cb0d0c247c44c62cd0718d510148
SHA12bb4dae943cd992662be9b2fc75729f2f918feaf
SHA256eb93bae702ec443c5af56d4f0c9dc1371dd431de9284333ede427091038b303a
SHA51251ccc8ac5d570e6646d9a0ee61527f1321bba8ffa61e2b0950a74b9e933dae7c459e782334d09a0408db0c720b7da816fc7ab4fc7fae0be95327ae54614c7f41
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55f2151350f70181de33bdf5c98aa6e23
SHA1ca1923712fa185abf924fc818be604a5c780a02e
SHA25629fb63952df1d660fdbeec57aa9ee48f027dcbd99da76848e00d34f5fd9f618f
SHA512e244780caa0bd88aba85be15cf6c178423bc0a68467f760211cec3e8be5ada4753ec2bc5d771c8d9c16b228492600248cabd3af00553be53409b99028b935644
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b