Analysis
-
max time kernel
141s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
15/07/2024, 08:27
Static task
static1
Behavioral task
behavioral1
Sample
48fd904792362671fa5e628f486d8c70_JaffaCakes118.html
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
48fd904792362671fa5e628f486d8c70_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
48fd904792362671fa5e628f486d8c70_JaffaCakes118.html
-
Size
97KB
-
MD5
48fd904792362671fa5e628f486d8c70
-
SHA1
154536528b7c90b7cea03a870347e11b55bd8374
-
SHA256
3703c7bf51a2e6a6019f3000f89c96fd920e1893846c0beb210ed6610a8c9e01
-
SHA512
004a1c98fa07025ee27c3b00b0cfa7153fdd2d10019aee77d83fb05eaf6911178cd8afb1d7113e9cb1ba0f536e425a5f90f552dbd7c835c140ac2de305cf79ba
-
SSDEEP
1536:pbMjw2fMk1D3O9Pj2fccA4HABZFLYMafcZPGuUyp:svYDLou
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427193903" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000062974e5b5f804e45b98349be16bffb78000000000200000000001066000000010000200000009da3f96dcd2ab89a4c1f7e13fbd7a6e82559b9f0a5f835440bcbedbe6e5c6a6f000000000e8000000002000020000000021a82099375868f2ee3ab17b5ef2c89459d4606c811b3db4767a78115eed919200000001a5f7dc6ffc70394ddaa666589fcf92817915620d5b95fe49d96376156493fb140000000ff3502c5faf446b8e0609272304b124ec51d2722a6ee93e45a9affe9c71e55dd76ae08a0f77bacab11ef448af6360942ce22ca04438c26f2206d1ef4f4a02cdc iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 408260f890d6da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{0AA60F11-4284-11EF-B93A-424588269AE0} = "0" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2072 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2072 iexplore.exe 2072 iexplore.exe 2748 IEXPLORE.EXE 2748 IEXPLORE.EXE 2748 IEXPLORE.EXE 2748 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2072 wrote to memory of 2748 2072 iexplore.exe 30 PID 2072 wrote to memory of 2748 2072 iexplore.exe 30 PID 2072 wrote to memory of 2748 2072 iexplore.exe 30 PID 2072 wrote to memory of 2748 2072 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\48fd904792362671fa5e628f486d8c70_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2072 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2072 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2748
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e2128f15f12faaccaaf200a13fa2ade9
SHA1ee905de6ccad3eb31c701874b44afe63ee3cce5f
SHA25660d191874b395e86c2b849e9563b3b943faa64b190a5ae3dc71a83479bc87f34
SHA512f3a14205c7c1596c4f42111d8a86c72c245f2e31d10a561afc4b905f934531c3dbafff8b8130d0c8d7483a91b7d1db0e69f4e59e0a230bc9526cdc308d95840a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d99877db68d8a8b545578b894fccf92d
SHA14ad98308936a9411328feae946357f1f1a11c2f1
SHA25625d7099d2523bc13140f1905acb25f4add37e2966813e1cebe206b7ce03d2845
SHA512444416dafbf86b18e584463ae212637e75fb60d58cf1be44f0f846e0534f65cdde45d7efbb6a6ea417cb36b0f07854e64c0e264fcad762119ca4ee820f18c498
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bdf141fbce544ca1a13ffe65226f0e14
SHA14171c0ca18e25d7bd2884dbf82391db9f7644088
SHA256a4c72124e66b28c394aa660c504e8c91cb61df6aa9ee00157cef2988c297529c
SHA512e067f22a984e0dcbb10d7e137e12ad4f050f21bf2a1981bf2a117f1a908e66396514043c5c3d20b45e61d500128013c1683f7f75bba032772ddffeb70af5ff39
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5902c3b1ba74305f82537244871bbe038
SHA1860964a55ba1e499e31b0d3fc46b06af521efafd
SHA2568ad75b505ca672bd4b5c85bd0097399168849edb7feb4c1d2723f0ee032d7581
SHA512a65364943f9886dcc6d871195c573a940d98cc312f4573c0e0884a9a8c99e1e8b91b3a1b3422eb3846dd04f79d917aedc0cf5fc799f34aef847265528fabf0b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53d0cbec0e81cf2b87c6f83c23db91fcd
SHA140d68df09f3c6bb87a434f7ec266f74cfb9ace31
SHA256e654ef61986d2c48ad47f63f39c6be07845d7d6c384658351dda53d1ed8abc38
SHA512588f4700a856b028c65a7dd90986a38dabded623f5d6cab4f8b95d55fbf9e0325dc5742506ed7da8f65053f2832a14c59362cec49d9d22085858fbeafbf492f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5107cf374e3a4eb7954e814a249d6dd67
SHA133fb09b1975e7c6ef6c9098d83c770251aff373e
SHA256ead5b1023d7ab172d33fac0b67da9db9e453ed4d6ddd3952e8b014d189c20701
SHA5122f4e71eb99f6b6298acc22e3810700d6fddf0b4b37f689a9a2d6314ff586591d5e1078457f056bb67f184808a46dbc69f5e78ba66f479a165fe833d18adbfdac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57fd49d28ecc4b8738f1569808c71db03
SHA1250e6ef183b2399d34db671984fb11c51e401ff7
SHA25658c7dc0d0a8bd0182bae246654ed29931c3731e9702217e3fe4da3fd3ccf35fa
SHA512c81f9fdc60bd6c0e206641b6741398f6547402b45768b419c330a2dc2e344ca2dd35bb3bcf697e2d1868d18faadaa91bf56f3b3aab9599f4f21d140ab8c4f425
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ad34c9f108223b5bdcd70bc6619c7295
SHA14d9d42f4efffcfc6fe1191028983b1ea062ed186
SHA256b7d727526da71696a8de729430bc83fead7c5efcca50cfcd8c1715b123110e3e
SHA512d465f52a775d82031d359aa394dacf7e61cf70fccdcc376e8f698a9e3248b0002911f10c9222d402d44aafa482dd7dfa6e16486ba5dffa47a77cc39b93e6a791
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5060468db7a4670b64d2326dfad85e1c6
SHA1b0a298ac29fcb316ed0d32d7670246a42438f062
SHA256634ac1dfba62efe422d629e9a5c84f39b4d1c428409a21b94b503e921549e038
SHA5127e11397a0b2b88edf96b662b5a7b02c6fccd74f1b5a29d99cd0840d5a06c8d75a0907f36e73250e87288e581018f138e97c7c0ff921cd2dd2eeedfd7d6dfba34
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b9150d07dff85f595cd7b49c129bd0ac
SHA17e65cd67cd80c5285ee33eff9d3b177db652237f
SHA256d961310d8d3981e6fb951bc93369ba468cb818543bdc6eda0a26a658cc5014bf
SHA512403041d58e73f948713b2e65d65aa79aac867aeb77820639e971a5a7ca764c26398454f735f7834a3f2f1dd62cc48acf5e4b35e584bdc40d9326b1edba5e56e8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54fb6215100b7b4714ab8c71ebea85050
SHA1702a5556da638d3c04c5af647db774ecf72ba862
SHA2565ad6b0487a7a9bf01328caad9db2c914fe04892d84cc061d8eeb2a4874af8e96
SHA512c5110b593025e891fcbe545d006a018ff95b930e0db4de355e98f1995c38e95681d491f548dc8f68a43aefe0937d86a46cfd3ec4cc1b61b79634416eb1c373d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5533e7a8f01ca44fee44da4fc04ed90c4
SHA174bfef050dd5817b73271d637a06e65394795890
SHA25699aea81797f93194c466623144d1cd0388c73e68ee356152d40b0725972c10d8
SHA512a61793485c9a404282e769a814efbf44e7968b68f3144a528aaaecdb425b59cde390f5c8e8d7690c4f04f6c72be0a627f3ccdee8676c4fa3d40a0cadc6545b5c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50e4769c6b4ce2ecace33b834decafced
SHA1b794661a04dd4e6a0c4b7658a24a9392b2d9e2ea
SHA256f63be37d18e3cd1acb13ade0fe46aeb559b4245ecd71e642719e0e68b815adf4
SHA51254d0efd611688880927972f41f898e18bf76e9021569cdab436b52592d74421fecdd444aea62b0e917c600459db6a604bf0c4c54e78d4d750b39e66164828cbc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57c4effcb3f90cc6269994b049bc53f35
SHA1917a1d60060fe8ea8e7004b658069e33eff467d1
SHA256b827adee30c55c9a999334476bc1a9ebf61f66c24565e3b92c71e8652f65c33c
SHA512849afd1697723a92ae6081611ab0f7bd9c73ef4d55518b9a676b23abf11446102e7c71806ac59ff879d54a87a6810fc5aa5fa871bfde61c780412eb467d3fb54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD567b087cf836cacd4565b595b7259217d
SHA1bef472047c371d9a72bd7e6f1086315901566c9c
SHA256f8dd1e39c080fc3c9be431941ff5572dd9a0535db23f13d3ec20a0494a21f380
SHA512aae235ab49791d2012865fd8180e9164e222ab46db07f323e1e9d8a58d2770b8a2444e69105122aec7562d2c7269f26cfbb2237ff28e3e0eedaad4387366efdb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57fb6a5587d71ee8db99561d18e756756
SHA1455286121f4edc926e3dffd6bdc671af75f28d6b
SHA256331cbe2b57483e8a15f318c5fca1ad5215c7560f5b91ec0c8c2eea35559a10a3
SHA51266696d904999904bf1922d0eb3509da7933dc79d76475cfbe3f5545eaa58e96b355ad3ca3cc7f9f2406eca6b39802aab6d0abc047b28f642bd994c8472bc08e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54cfbb1c81c176b7c6f48c7797f089e10
SHA18a62a2df1b07cf4f4801816acad419766cadcf0d
SHA2560656ade88bcba549a176b0357cc8f6fe39ef37ee62b095d08962225151e1aa22
SHA5123c22e9d19e7b3268ec418fb2bd6b55b30e8b70c4766be28195cb6dd1bcfef4b43897000834eb42065620d395281296e69ec693c9046fa98c04dab713e7a8f72d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53cca8deb24d91e8c96c263442efe99d9
SHA1bc32b2df822e279610d719f831267e256dd57361
SHA256be02f7607770d54a5015bd85138dbd234e13739ce631c4601a8f2463835c8296
SHA512008d50705b8d8e64f817a0c5b7ce09220cb929b87dd6c526c7ee4ea88bf10799cef78f14729764d0e52381156851ac20dd9d7191ddad42a09a127b5fdc06c452
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cf87a5705ac539dfb67da2138698e0ce
SHA11a92ddd68b36c82f83e78618768364359a29087a
SHA256370303631daf6f229de7adaef8e5c75069740bb4fd30f8a93761996fbe85da25
SHA512294156659874ad1c1ec404810faed14554d24d998bf42ac6baf035501123400c470e07871d418049e093127f6bd5b00ff027ceabb7c02271aa829735c94a5160
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52678e82d32dee6397305b71e8a26a93a
SHA13b896c2b7b972f4c7f12fc3520f8141867913029
SHA256032d510f05ddb194459b052c3a5a818672724fe8d654682fcc072064829108ee
SHA5126ae3e60fcea67d3e8a353af24b6ec064bd4a55a0232229dfb083437ebfe5fff4b771fdc568272fcb06a15ed27a5a3ca94a2f2be005c812b0924152572590c99a
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b