Analysis
-
max time kernel
117s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
10/07/2024, 15:43
Static task
static1
Behavioral task
behavioral1
Sample
355d251f73363f2d4f57bf6b7aca69b9_JaffaCakes118.html
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
355d251f73363f2d4f57bf6b7aca69b9_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
355d251f73363f2d4f57bf6b7aca69b9_JaffaCakes118.html
-
Size
11KB
-
MD5
355d251f73363f2d4f57bf6b7aca69b9
-
SHA1
b216828136837e06921c7594cbb6ec702d620b6b
-
SHA256
14b556a1935b88f7db5df89e68fa01b49f06483669ceb615774829968e906a54
-
SHA512
253d573a7f6aa3922a8ca330b7bf9dccdf10662e7d6340152373c952ecb8bc0ba503f52af1065f4d775ff80d358857f7840a37accbfef724786b83b0e1f2369f
-
SSDEEP
192:2ValIsr0r57M4YxadT8IY/w1wvqLkt1Psw8uBuLbdU8d:salIcIQ4YxalY/gqPsw8guLZ
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e337bacba951544a9a832c52e69bfb0000000000020000000000106600000001000020000000f51335187a69b6a8815c724adc77dc367d0fbde027558398e121fbd83094b0e3000000000e8000000002000020000000ff488fcac8de095db724d774146d32a4c0dcd98ccf012290da7bd669247925e320000000221de10db947d20d51e56f3336b6572985a65f4154897a84cff02f4fb96e70ab4000000079747ed85de7c2110d1309a31d4c023ecab277b17fe0430f8b49afb303870a916af059438e5411f69c561f2238f9a99ffd58c541117684bf70e86b4ac4f2b459 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{382AD741-3ED3-11EF-AAD0-E29800E22076} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 4078fd19e0d2da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426788105" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2276 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2276 iexplore.exe 2276 iexplore.exe 2684 IEXPLORE.EXE 2684 IEXPLORE.EXE 2684 IEXPLORE.EXE 2684 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2276 wrote to memory of 2684 2276 iexplore.exe 30 PID 2276 wrote to memory of 2684 2276 iexplore.exe 30 PID 2276 wrote to memory of 2684 2276 iexplore.exe 30 PID 2276 wrote to memory of 2684 2276 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\355d251f73363f2d4f57bf6b7aca69b9_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2276 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2276 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2684
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a24a7f1572d3aa6553178de893c1363e
SHA11653a30f33c048d425b5aee231aec1b653722d9c
SHA256d5668e9b9d2a8d43a03f7291e1c71040237ed161fe502a85f67f4996ecf11420
SHA512bcc14fe7648e74a7dca5737e953c5cba43e7f1713c8a6a1a7e290c23e20309d404d5e0f5e7906867fe3f75ef0558899e2d1a83e29c783c7a8dd6b4abf263dfa8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51a2fdca30d0ec5d86ee3cae07c5b9007
SHA1adcc94afa2a8eeb4d471bcf8dc7fb27158fe6c52
SHA25634e2d97ff2c99e3fe36d200456d89b84c41126e72b28b0367247238764b715e7
SHA512e508405d73efbf6384543110fcf314f725794ca5b347f7f4ddfbc56d3b9f71bc4b222269bf306cb1c448f83f0b3c58479885a50091f980be4563251e5a5f4e97
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD550de1fdd5fa6ec2ee611e07800b6b6e7
SHA1ca2320e98a3a7db34abf9d14e4510e2dd886445c
SHA256e468df4936bcf3c8252bbd981f1f2c8e291ce8cf0366e40fc8b12ffd4c790c2b
SHA51201f87c5f15772344a46a6fe65387f5fbf09f882a345a9660ae319b6944981d3dd4903c844f67d025662d7846655288e1d6e2122b3f5f32678c314831e1ed038e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5682797a2df1a0317d5996cf58bacfca6
SHA1040ce279e192a5f31deda935f048b9b8d5148ac6
SHA256ba82ae00c082132534540574dcc989e50cdf8faa09321e204e05b62971578d5b
SHA512aec453d862f7189e38d5f56640f2a781b17422ee6f3e96ef0e76d9d779a087402249788a69a9162ffa26acf10d4d22c6b36684539faa76c7af98a45f20db2cfe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54cd24d20d586279ccf174065ea3f2b72
SHA13e65033aed67ebdb9f576b6ae59782e10eee2749
SHA2566c9368b0b58960e5a2c05040884b802e2cb38247bfd481483e122a66661511c9
SHA5123e896597f8282cd7796d02e5ad90a215277a7359f7a92794619e3473e2a0dd2c21997a3a3e2163e0c6a08c1f2e0ec1875521909354e33e127655acb656e9ebc3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e9529b7cadc5c10893148bc392817311
SHA10156150982f4f85f9a1949e666307c415850d58e
SHA25690620cb926821ebf6eda2f342f13802c9a234687d48cf9ab06a310016a82a664
SHA5120dc9af0b4eab47771a5d7f15689a6e6213d8c215c9c54f04d536f11a45014089142134fa7f59409fc365203b037680a3aee8a0fdf4e8b3f15eff40fa2a514857
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55bf56ae3333538d68a279fdf704259f7
SHA1e5fb1c4345487e4889d20c91d7cf1ab27d58692d
SHA256e854d66a0c8eefcdc0688a8a52135962488c6efe8dc40517775ae9c3a89464e8
SHA5126e2d8f8b46e137012a59685be775c522f33e93ba08194d9ae7c57dac74db611b40c11afb18c29c04ffdf4902252f1b0dce0d5ddad00466476a44e29e62ead778
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56bd39e726906359ce22ffdac2136bc62
SHA1026c4863887cfeef9e4a02133dcea88fe1c2272a
SHA256120cf1be9c9ad91dbc132d74a3971c4ff42c35bd07501118e494f92989a35db3
SHA51216c83e735fb519fcc72f4a2cfa93e1e6d31cd6fa5f8d029916f9a1a48cd470e0da587e1e3ab3d5891cbf73ccf34c3c3369ea5e8c41d713874768522cf7c435ff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c142cc144b269378f8758358bb872f35
SHA1e5d41b4f5a436a0120294e45bc2c39cd7b3ef1d5
SHA256f8c14edc9054a92b8ad18e7ec45f4e7688cfc5f064d3211a51143851e33e0bb3
SHA5125c5108aa83c2dfc78848cea692c2da4515900d29d69e0325044f0735953057370185de5b9ce80abc3d3aeca2c6afabaefc1d28ce73769d4e7afe2021295161cb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5492833434c7df698fed565eb4c6cab9a
SHA1467f88af8857ac43e3f3b9ce61b43b1435d3ed09
SHA2565d22129fd56086ba3aba7271f219752794695cd92e5aec55087469c225b48cfa
SHA51228fa0e58718d1344d52d32828476d7314ca079d20da13305c6823c4349acad3cab9d8e0c9a6b0a72e91554818865a040b9accde4db7360732d32f3a992c4c135
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d17e0da168fbe7a712801eddb2adad38
SHA18efc30cca11effebce037449865c408127cab992
SHA256c56c9ffd9e29fb204c9c5acd7a3582b9f456c3c3803f012633888122837ee832
SHA5122afea44d8534f94cde5e7ac00e070c4c557c2c688d9f04c8751a80bcb6747346059db1e803cee746c0013d2f96878890812d693ae9b10df9bf395eada2e85b06
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fab1e8cef1d70305be84f263abe7ebd3
SHA164b1887f0c07032eb2d37c8aaff3317071db3f4a
SHA256974d76bce4fff03b481323fabd019f20b3d77c058c1e2bb451c2583aef291300
SHA512502735f2792dfd8639b7c6ff1d32e6a501339bd8d8b416b945aadb442e5207b3748d9e51489e654505ffb379fdc037b9793caf3033d85881019a5c8e7e7948b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5af3cdab2aa67c52ee9a44cbf3def56ac
SHA19cee4bfec33c193c25d2c7e7b803d1145f378d49
SHA2564651dd28c188b4ec4dc75869c718abdf07013b852ff5d19c68b895b845ed8d5d
SHA5129f14fbfd216c985ac513433e6106a4ad8e0a47e2e710898c16c2ce257893a0d0962b9d8065cf0ed71ed92e8f52ee0099f06d67b6cd46c0b77aebcde5bf7cd1bb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cffb14b3604785bf3b55bd1cc2dcba67
SHA1c74c919de10cd51e763e064aa4fb3062076fd4fa
SHA2569f836d062dcb245b96d26d3cd7beb5652efce6726f50c3ac509a352da344adb5
SHA51211b7c9b160f02e7f73fde91a2398d4290a97cdf6f49daab9a2fb326bec0d1a2b12cec795d038d4be41266d581618582fe52faf10224eb2556fa43745f0600b77
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD553f2caf02b8230f6b2723874f50595e3
SHA19e437f59910b02046da3ca8a0153ceb4d84207b3
SHA2564a1a2c67f8094433da9093978e0ebb70973c6f81c3410b3ffcd29e55fb2db1c8
SHA512c4f2590f83baf409d594cd65004681be8f83c9abc0c5a3ee753e757002ec2296ded8f0c5d251b475c24119e5f207b530fdea8026acecb7c4a1bbca0ed24585a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ec8eaededd3cf5426fcce8efe13c22eb
SHA1176473af37629f04f3294f896369da0b42c7ddbd
SHA256fa6026614400cc72507a53fcd83bea859911ad5ccff8ea6d04534d295f3d18a6
SHA512bbe197942c1d5140aaa459c32c668e40cf7733403680a166505ee4dbe3ad376052b9b8ef48aea1bf8a1f49744cc400a810e950703ea92b5800c10d3a6cde3b63
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD554763bb360aa13f89bd0ad9af5c9f0d2
SHA1f873566b33300242012449e0aef789cc8babea30
SHA2569190ff974af2085fedf22dfd4c5c05ca0a3a2478a5b5f5c8c9a3a2d7a6daf67b
SHA512323099cbfdf1ed82c5eeb4cddf7b8a03212ed58eb57090a83eff00b565ec9c56fc51d71a5170972dfe938da55097d5a0ab054595a46e67653becd33f9db88644
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f78d301c6de39b24c1b6b7d70d1f6472
SHA19b9016fddf4f82090b7e7408528f408ca9bb4b1b
SHA256c7194f4e25d9ec79cf61e77f1a1877fdf6863c8e6539bf4670def8a82d68eb24
SHA512bdf5a0caf88e8f898d663bbf6e3e16a0473e80b529d99d7357d3d66a67e9f5b36f518286ab9d91e01a6831ca2a3f9f742707f68acbedb5a02d0f0ad377a4ba9a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d4849b2a31263a33f34814957ea769df
SHA138d9ca17bd33844a9b974ec665f60880e6201b79
SHA2562ea9c347e1159948cebf76ec8abe70db126d6a8a23ecc87c9a5a3b3a43a996ca
SHA512ebbf97c1a61c70bc969c8ecdaab26f2f352ad7e774a4b2e3b3a867cd9ddd2ddd38e303baaf3f87bd50450e81cb42281e540c0e769cfda600ddf5a751c6c45b8c
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b