Analysis
-
max time kernel
143s -
max time network
143s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 19:56
Static task
static1
Behavioral task
behavioral1
Sample
3eac6b44b6517af474bdbfe8ddcaf693_JaffaCakes118.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3eac6b44b6517af474bdbfe8ddcaf693_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
3eac6b44b6517af474bdbfe8ddcaf693_JaffaCakes118.html
-
Size
41KB
-
MD5
3eac6b44b6517af474bdbfe8ddcaf693
-
SHA1
8268308892b30ad4a0c27daef68183bbb9bdf107
-
SHA256
053ee36cd29a158e49079c986c30c7edd12facf6c38e1211682f9bbc0ca0d7b8
-
SHA512
a1bb59c833ad7360abe70a3794e715e0fdc46d0080673bd698a7c10d6fe765efdb0ccd98257181d85ecdf17aaae3db3f56570528aa97abf48826b3db679f2986
-
SSDEEP
384:S5rQbn5+VVQ21eLZQ5bSmhw4Ud1JyZP1IQvdAmE0Va6emdOEE36dgYmCcbis4rmN:S2b45J+JyZP1IQvdWSGY7SNRMn2YtJQ/
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{CD269351-4088-11EF-A850-F62146527E3B} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426976045" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000003125cc29be9a0e41b44a3d73dc8faf71000000000200000000001066000000010000200000004c4c4208ed7ce6854d37ac4a43f9dbbd4774ef57dedf2918645cdb60d58edd29000000000e8000000002000020000000e6b6f1f7a00918f8436aecafc452ad2a4bdc81e6f641d7720f5839806d34ca482000000070640c329369b6d408e9b727901de2d877f3717dbf1301b1ec8ff6b0a567f1b6400000009e608bfb3958deb02b4deb82750fe9a547cc5a7968f4998c3e546eeb44eb04ae44acb6fdcf27129aea664addf82e7a80a106009444580c5952f8d2d685ffa0cb iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 600e97bd95d4da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 948 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 948 iexplore.exe 948 iexplore.exe 1272 IEXPLORE.EXE 1272 IEXPLORE.EXE 1272 IEXPLORE.EXE 1272 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 948 wrote to memory of 1272 948 iexplore.exe 29 PID 948 wrote to memory of 1272 948 iexplore.exe 29 PID 948 wrote to memory of 1272 948 iexplore.exe 29 PID 948 wrote to memory of 1272 948 iexplore.exe 29
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3eac6b44b6517af474bdbfe8ddcaf693_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:948 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:948 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1272
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55f947ab97540b724355d953a3f66f579
SHA1eaeb0dbe714a98fe823560040426dad81514562a
SHA256350dbd17401299776fc767434c190f5c96bd9bdb88a4bf48bff9095e7a330c69
SHA5129568c32e40c1ae83730c7d14999b8de6c2344551b29e72bb29a7b64a216f6e1779ad8f4cfef55388e5332a992a165f8ace955a0631760361c95e7ec1f728d6ba
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5976b94639127a6d550619eeb7c7625d4
SHA160a15d9bafcb2c65b8d368a9ddcba6a415b48d42
SHA2564ed12d2e2759c34ad25446ff131fa5eec72a2d6027fe8271aa35f5c1799e10cd
SHA5128a265bb87598476593810aa164e45233845afcb009a5e304b0a1208abdf5359846ce31a019541e29d23d1b5ed177bc9c11bcedb40389b030e0ee073a1bd76d3f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD522f5685c71aa0f3c4868ef8faf305401
SHA1fc6012819ef3e8b854bc484e8c5017ee8d27308b
SHA2569fa9bd3f9e4d27c2742fa839a9db8c8b0701ee06690d6d959c45e9ada51c0302
SHA51287253dcc03ae9b387fc1c93a888a1a39cee31053dbf24cb90c51acad4e32e48e13d6525d56837c65ec708f9123d18ad77517f0f34fcdaf02a7fcf5ae4a4f86ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD537702ca3f8d12cca38caf1ce1930a6e7
SHA11f51979add03f61f8a8b5b4308ba11c1daf24b98
SHA2564f7b79efe0bc5c92ac1993ad672f6b20527055d4cc06e0d9b699175c9a6726fc
SHA51218afa4f7106642f9c6f2516c8d4b51299a88fb294714c1a4da8bf96d5c6c34106d3687941a83a5c6dc9a58d978255cf7c70fd388ee71b0d20395d8c7691ee6d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f7b7da00a396978e4263bd577469285d
SHA1d535ee3243e581c474239eebb77b9be57960300b
SHA25630db7d0d9934977ed3d3c52621df173907bb8888c9acb433c7cecdf3ca182a14
SHA51222e217da5fc85b7bf106f06c88e6cbb356e34e32021cb1b2656a0361f8d6cf35f6b73ba36d6f9d716a65eda2fd3d7acff6b4d77ada95e35828d87325d99d1cbb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ac1c8bbc2729a01c3ea88d53e7b27f5b
SHA11cf1a258d9cf5f9a7a19f7a75d907e1db127f11e
SHA2563f16cfefc8407c08dee9a892f5536f7e502442af15f3f0dddea280a788fbf7d2
SHA512bd2a04595dc9153faf6c6c969d6ea69553641fbf6088c97ced7aab2578d60cdd7b291723038881743b3069a2b94e4934a7af4f450afe337dbec52f612b751bb1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5687e3268e0ef81a37d6c1708bd51ea3d
SHA1d72174f5f14cb6072e46c2991907812fa7b4c663
SHA2564bea0a189f36113aba55e1552bb532f98a2da7a169cc390e64bb9fc681ca4a6c
SHA512de4de1b5cbb3343b2b3734bf3ade2c3213f9f37e9f8b620260d4bd2a2b656637f8ec2fb75a9b767ade5f02fc897bf9a46e184c85837c3d3046aa96c0f7aef03d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56b349c707c1beef9d0bb700fedb5ab6c
SHA158a7d93e0d8cbf9efa77e8f9cf562e95b8fb5948
SHA2567f62039f1fe93b68ba925580f61fdc963bf38ed518ce0db2c76916c518dc62a4
SHA512aedcea8f9bea08f2511543e4119657dd9eb6abae2be4a314d27fac39baf8e9b5d449da74d236ef3a5dbc7a3881c3351268ebdbf618c94cbbce44f252e41df3ee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56af6a3996cc9d6b59a9d734d62a2d5e2
SHA1c563e3867c87fd014156c7f00711d56e1c48f041
SHA2560320e35f6057dfd70db4f77c279708a97cdfc224be373ef0a6b529479f3b468f
SHA512b66253e0b1f4995b5046589b85c3c12945de325e6f706c3bd4bd207a9d3e95762641b416d84cd06474247a6a51b32e5fc0ff87a6caa84f415a9b1fba130d7910
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52b52ff4df9c1bdb846cd8dab4de3dc9e
SHA1a34485196ec846d5dbe1e6f2f5f5aff85c7abfe3
SHA256771ace09ec648fddefb9676adb163a4d22985bab42d31f3e0e6e8bf03634bd0e
SHA512b063f26d01a4afa8e37f43e4f43f11a0596bad511d3b1a3f70fc197390a23c7fa2fa766806c00647e339c0ca0483a92b4154e81e526714604251b209e481f2c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c26f2e37c5946e57d2d57062edbcaa16
SHA1b73fe866bf2f70ce79fd40d76fd7546eb54d5c0c
SHA2565cc4272f2002cc686ecfcc33e395271f2f0dfeb6633c6c8cb0161cbd53f234d2
SHA5124da45881f386bc302df3e0f765d8e71aef33ac1704a45a3421de7cbc94d0604adfd931d42cc0bd28f28c5b5a0b3783146be3bd0eee8477d60b1cb2b7ae5d50f0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58238b648bbd31ead52d40a53160719e8
SHA14c9f0a0e0b7391eada2921495e6d4431b90aa532
SHA256762b8ed922ea7829681f5354739a3ae2393dfad81d0588745c68e2991b5f2bea
SHA51242617277a5eba96fd45d36c0ab466d0d2101db56ea4582f3ebb2b9e2fe49db5443d2f718d610928ce884279c8b8a080ac79ffd4df9cec53fef12e22344b6bdac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD515325da6ed25791777f9083701069e31
SHA11c7ff7ae5de06295635bdec659662b086d0a4ae9
SHA256c5ca9db7a22808a50a031e61f68111bd83528eac643be01bed7bb7b7ae25533d
SHA512868bdd9f0afacd6890e552872412f8288e3512ba87298bf017b4655d8c36f61e5351410b85ea60d688404e320b1d349c24fffef5af837a2ca8498bb3b6a12ded
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fd9e7bf5f3b0d667142cd4a297b81166
SHA17d25520de3bd63d7aa2e7b2ae13c2ee1beff05b6
SHA256e7321c6fefbb48ebe213d59e88df3b4f9c79501df84df9cac2e71aed3e679f3d
SHA5124277fdab55c05577dadfba3849e6cd84abdc2f6785ce0898dd8e5fcdf7a5cc4f647814e186b2baa23a348a06c47debacb97fbf1cc8e8757598db4534d2558c67
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD561239c54dba087508f7ac5fd4683ac67
SHA1296fb28cd7acbed67d1e39a0bb708057c445b0f3
SHA256bc0765f3fd6d56d415d2a2f2ebe4dfc1524c146df6c06c7f3290c1ae7cac99ee
SHA512cfd06f00ddbbde5eb7a5e1fa6ad7e85bad2f1cb4e547ae2f15e42b5fc60b91578703b5c3b923ecf382759484da3561f6ef8c250301f8f82dff6dc92deb0c09aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b1f3b80254792c5610c0f341c36e0aad
SHA1f3b16ec03db74d9cd342f1c4800657ffd4b05631
SHA25661cf6c7c1ff7d50330e7c0a01887bdccb13e8619ae3ae55884b8e0338bfa16de
SHA512d35d1ea887be3208c0560cfaeb768c98a94701bc715015742d94825744b435cbb09494e8650ca1e180580d10a2cc508c5a88dcb41921313f1d0dbe106eb41da3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD558fddb53e890fb9b751637e4e94c3cbf
SHA14bd9763965c29b8ebd69aafa940568309329a59d
SHA25654aaf988837825e18a489e2d2abf6979238270e9957c6b3ebfa04f6277762546
SHA512d6c5bc7a397ac43c72d23d2468e28425d7b5538bf223c7495f63f5a7716fc6f104f05f113cbd91810f424bf1c1dae3608c3006431cab85e0d96da1def9a3b169
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55c5de566ccc035b83578b5088001c28f
SHA17fd68a78c02984ea3bd0c233be2dc3720f37380a
SHA25695c44c52272415a07faf05b9169f0261c5ec71a732d4b9af7d4dc804140d864e
SHA512691e4ca88fb219692a108b476ae53028e5d16be656073d9fe8b505c332b10bc25c1f53a950fea18cc71ded3779555351e8f1bd8cb866bfa78f389361c8c2612f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b317818d5e6341e928ef6b6cadcc899a
SHA15d7ff73bc8b8163c9a87978ce63902d4b37a0e4f
SHA256c6413ef70c93dcb1e83408363106c7b5dcc0b66a9e6391afb18281c41fea08dc
SHA5121586d0cf22a893b158bd391cc51667ccbe921ff7c8d8d3313879a1383028ade422d2871c1d5cd1c87139b7a28f976ea8272569e9d3c8c7323e547ace48a91b6a
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b