Analysis
-
max time kernel
134s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
13/07/2024, 15:03
Static task
static1
Behavioral task
behavioral1
Sample
422ee4db6fc1fa4718f67b3515bfb4eb_JaffaCakes118.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
422ee4db6fc1fa4718f67b3515bfb4eb_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
422ee4db6fc1fa4718f67b3515bfb4eb_JaffaCakes118.html
-
Size
9KB
-
MD5
422ee4db6fc1fa4718f67b3515bfb4eb
-
SHA1
bbde4562bd24c1c8d1d1af1efc71414eddfa43e1
-
SHA256
585162061386d16e75dbc88645cf73f8003b2e7269c550525570bff7328d9dcb
-
SHA512
8a7f406b918b7c613f4b18c6f2bb1c9e1f15bec67627cad955ead84469c7d2f808ead0808f997a7c063fa96f632380132e8b44900d38a0c497afc881dd445b94
-
SSDEEP
96:uzVs+ux7cVLLY1k9o84d12ef7CSTUcGT/k3qp2lVHcEZ7ru7f:csz7cVAYS/pA2PHb76f
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000082ebb0b9d6f3f0458e93e15bd38f268f000000000200000000001066000000010000200000007a84f98c7de9bbb3fdf8c2fe9579b81641ba7b28aad01a96c73c710bb4ae29dd000000000e80000000020000200000007b836cfc6150642f8dfdb378bb10def670dad74cff328b0263604716adae1ab3200000009809d6c502a85959be1d0e2d68fa7522aa5c7ab8eb13722b916faf68bc7e6ed9400000007b0534aafc791a535a0793f7a3c4405e528c7c2c81f795ca2b3b8c1fc1d46c14449a2b636b4182462c693220faab0b93b3b9855892a61b99c3525bd7f8957625 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 903503eb35d5da01 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427044884" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{1465B891-4129-11EF-99AF-7ED57E6FAC85} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2168 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2168 iexplore.exe 2168 iexplore.exe 2208 IEXPLORE.EXE 2208 IEXPLORE.EXE 2208 IEXPLORE.EXE 2208 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2168 wrote to memory of 2208 2168 iexplore.exe 30 PID 2168 wrote to memory of 2208 2168 iexplore.exe 30 PID 2168 wrote to memory of 2208 2168 iexplore.exe 30 PID 2168 wrote to memory of 2208 2168 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\422ee4db6fc1fa4718f67b3515bfb4eb_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2168 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2208
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ed37ae64359748063905e279a96ada66
SHA18c38e226f2799d77ba669795efcbdbd8afa5e5be
SHA25627f5887a783bfbc21db9f780195f57c306cce48e1e9bfb1d6249aa7ef4ac198c
SHA512e7141cfd45aa1dec7d06aba38417731294f8f9564ff9460b9bc6095622994032d0a665c9cfdbd67470b35bada0945cfc2bea98bba3d207a2fa6752372bf5643e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5acecafadf30abdc6f5acf389514d0fb2
SHA12cff3995213e8e5416f1ae08c7ca6c064d980129
SHA25616c89d8d8dd0d2407c33c912b3c01d689dadc537e08625e377b0c1d18389b59d
SHA5121792bd37e8e5f8d5deabb077415898bb55082c1ce8605e47447fc3ba930003a706260fe282b6ef0580432966be626ae6e492a06a61a692e112863e2737f9bb99
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD556f4094ade1289a19ff1b1ca4f84fdd1
SHA179eddf8d22fe182a6bcdeecae1a13c013aadc53d
SHA25656929297dbef1f7d0deaa3e8a5a6f9a674d16128e4c03ede724d602c045b1c7d
SHA512532e808ab600ce3815c1f03e6aa4a5c281595a25f232d16a29d6b8c65eecbb0d94c26e0802b4e223fcf31e31331335b2a8b529cda589713bcfa8360e215ed61c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD547a24efad707e41a3886139956f044cf
SHA1a66c4ee6e54acdb65e34a28df41fbe1e42a42a87
SHA25659e89db1d09d94c0ff79703cfefa8fde194b8cf203411a8e16786c28efa2caf5
SHA51205625caf1e174eea84bf975a3fd42604faca7f177dd9b6e050dbfbaf1a1bdb129a813f87c75e7787c861ad44dccd2455347c276bbf8b8b8c8d7bad66f8517fd9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD555a35d8680846698efeee2df243e7afd
SHA11eb1684356d95ea0413c08bd05f5aa9d2f5611ce
SHA2563ce16b954eeda43716179742c3e063d178af9d7a34fd58857889bde9b9a8d502
SHA512618a55f6fd2f9293c8ba6e5bb3749912cd0bcd4aa0a04cb4450bf045f78867552bb4c83399f4439b7d7d493450a7211f95ccb494eb20c4547fc8b99b14ad79dc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56cb169c2cc9a1f398447b8ea4255cf16
SHA191bb7d096148101b2ae3756e6e62f89e8f6786cf
SHA2561aabe6e053788d626df23b7b1bc10dcdd89123955b0765200777ff941489756f
SHA5121a187fb7170131703b67b42b2188fbd33707fe625ac17fa2927eded4ce61a374667031d18cefe4103f62e0907cd2ef817b4f3e4da53eb79ad42311517040e2b7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52578acbd4e73bd65184d7d5d642bcb8c
SHA138b9340cf1eddc7fb164031f63b2caf6c83f5234
SHA2566c4749d6013faf3e8dfa2eac49b995f7d23f33af676a19eb29aec74daec2aa69
SHA5122f63278992d9190b82ddb7d68a1cb2084b330259c22a5a405007b0d6e669f3d765fb3878cedfe102bd320fb70e4cec3a467e62fe94043616657f42c9407a6d80
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50bb5b225fec43c271ad26d727c42a4c7
SHA144c3cbfc19a76b2a1d74caa5d0be9397ba4aee0b
SHA25668ad00faf6b62a90517322f84a2cec33b3028fbe5c3564c38a28821a918341cc
SHA512bb44216eb6dfb90028c954b25a966d5b78ac5ff6dd3d573189b88c3324d3ddb29f91ab9ba3aef2ea17074a024e6337c57e80abec5f500a970fc33f0ff7552ade
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD559740f0d002874d415b820ceb987de12
SHA147d4ba5f80a2424884754df758281f2ed982b2c7
SHA256d0549451ae8c03cce08090ebaa59b3190a4f728a62c8170e16296e1f8bbc203b
SHA5123359188aacfde61ff47a4b24050616cf83d6e2e5d949a031ef52d2951c9defe87f343e106a8db400f2a4ad0d9b94486ac5ada6731e33e5df7b726247bc6ef7fd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c9332d98dd88d1df59bdeeca9bc6a58b
SHA10de9344a7b94f42a476bb02233ecb8846631ca14
SHA25656b3724ddba7336c8ad3ba0add0f23b791af07da111e2c8868aed2e43ce9237b
SHA512c2af1f09c0749c6f699d099d1b90c4a17713754d82e2ed7294f9d40779d8cb9be0ab28b1c1e74613d367d5bbafe41a8c958eff04f1bbf2d0e449576403185f6c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b850233f6b71817d78c06821bf511cd3
SHA17d6ab5d10f16caea07c78f393b4c725c5873bd50
SHA25609eab8ae796d0270ae1c871b42a2b50f2f41c995b75c99641c56a1077bfaaeee
SHA51208b9f1d5daeeb50336e336424cea001e1d0d29540608089a87d6a1f0932a2c633c288d0a007c8b101983553e99d8c84307fefe7d44bc04dfb77f49a4032e0370
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54748e2ad0c205e81634aab963c24cc5a
SHA1c2cce934a67d061ee161d8b1d3a0aa6e912db567
SHA256e79c6d272e2a700b176cc7970c7fc5c0021620955c06899013f1b2696eea5f29
SHA512e199fb7389a4ba7f6b741e20913d89c386d9dc757af4983e9a7bfc0be36b77db3297ba26a2d5b7f5ea174dac767771f582d024f050ccc7c8961034220189b068
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b133736ed9723adbd941ae8d893e1dba
SHA12e302ea464bf25d656ce475685c54cc3437a96af
SHA2567d2021d8094e13d07e2e8d8fa66957c72a6bb7ca6cb6e0340d787e7ad24d69c6
SHA512c96b5437411aae6a65625c88d147f2f3a9eef8f9d9ceafee560bfced0179b0357167a731956af4a234ab6f3aca477a7fd15886c48ad9f114a809b7e8e190f76d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f2dd10559f8fcc3abd4c8665e4eac713
SHA1f2d3989985903fc730c9ac09cb3004b60904a462
SHA256feb55dc4b2ef749bef827da9690a9a37fa4585ae7a00e7e65c572239e1d68e14
SHA5125c6a2a5b36f885b4c18de8b81011d77dcd33fb43ebc48d4a4ab188f4450e1be1072f3fee856dad5c85ded34d54f273e305ed42b2fec92f7ef34e0bd38db7a93e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51bc9d2b8c88b2c06647474f97c406d20
SHA1820f6ae5389c77fcc93d65622462349f58458d7f
SHA25614f01b3e549ac679789310779465039e3d6e81ff676dda4d7deb3aa5dfd9c7e7
SHA5127afd319e6b1f513d51b7198ae23581713ea8f4db4044d25c539ea5a32e46257bcf1b39e26513e32236f90b83980cd5d115ed2ead2761820c0fbafb8474b29812
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53b4157238eb2e4bf5244f70342479137
SHA1dc072f390b012f4c38393350250bec3e1748f220
SHA256f2930a8de673716c23c5c9850ae5d27b2e4d28762acf78ae017350c3f7c16b34
SHA512b896bbf8336c98917fa496c93688811e56ba6a6e0d3ba1171061cfc8f535047ea3ee7ba69191bf3ea6438cacfb3f4bb77adb0d27b0108f2b401ab0917a7278ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59becdf9999378c703a2ea5787190ce8e
SHA1a3ebaabb18e808f7cf511ce3d8b7037c94925338
SHA256ed08313ff4d8268cf42428f0ff807648d2a9ff4ab98d0378592ddc65d0616714
SHA5124be8568bdea7443db22238394ff45c668ec2bc3bb8dae3ab97391b0bd3bce3c602e7b173b88960cadcb9bea50a5ad73dd48634423f3ab03cda47830f9f20ae33
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ab038f75f1144c567b9154f7ee573eb9
SHA1952308abcbff1abb8ecb9589cbfdd73fa52aa5f5
SHA25692365a88c059dce52a2a5c28218a2d614f2dca9ea6b298519e17c8101f1bed28
SHA512a1cd8920bcc9fa2708aeb9bf5e67b529ddb3adfd303cc6e090ba12c35bb98f2ca5da467d52c10a99f5d7d3d38fbbf85506059dc3d03e534edc37b2a61cf4c74c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54e4ad6f5271de21f6f3a6fcd0dac80ac
SHA1a9e34f746431d939ee06a84342d4f5fcbc3638cd
SHA25648898eedc19556d76c03297e7f671d9acd060819f24df445dc1b503529d84ee3
SHA51281d744e048e18335385e4cea10541c6813d9fd151380324a19d933ab43e3c5c2a2ecc4942d3d9641fa69840c13001d39956c45de16542fe740076d772896d11c
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b