Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/04/2024, 16:29
Static task
static1
Behavioral task
behavioral1
Sample
f17deb78efac53847cb56b0250a6356f_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f17deb78efac53847cb56b0250a6356f_JaffaCakes118.html
Resource
win10v2004-20240226-en
General
-
Target
f17deb78efac53847cb56b0250a6356f_JaffaCakes118.html
-
Size
115KB
-
MD5
f17deb78efac53847cb56b0250a6356f
-
SHA1
728cfccc77ffb5524d45ad2ef9e267bfc2d98716
-
SHA256
a8115975d4199eeaaddb2a42237aa4342fd70af97ef4d9d3437028759af92e80
-
SHA512
530ac903a9af35d09207aef78f1aada80816d6612d38457ce8ddc2b34783589b589801406af07f89c72f32c835278e37c54765b3d72f282a2da7f59aff7aeda9
-
SSDEEP
1536:S9AxN/+yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9w:S94B+yfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009d182698a4727943a65bc6c9ecfd0fc5000000000200000000001066000000010000200000009e66de0bd87eeb9ba1393067d2d02937c06b21acfbc1a31be433d93ae2bb2b96000000000e800000000200002000000024183a899404542b0e0c57eed4335e9d7d0c9af704669c5df6076e7caafaa4f020000000f6a9d9f38dc34803a97e9cf7e3645a784add6c467909edc6495ce2ee4fb4395640000000494af329d8fade0d777c40911a16ce7ac9b60b573f0eae631ff6f47cfde69e317799b5dffd9df6681ac2c7a97bbfd3f45ad785b0aea29f4041143a17ef772cba iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "419360463" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{64589451-FB45-11EE-8466-6E6327E9C5D7} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0b8d739528fda01 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2384 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2384 iexplore.exe 2384 iexplore.exe 1060 IEXPLORE.EXE 1060 IEXPLORE.EXE 1060 IEXPLORE.EXE 1060 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2384 wrote to memory of 1060 2384 iexplore.exe 28 PID 2384 wrote to memory of 1060 2384 iexplore.exe 28 PID 2384 wrote to memory of 1060 2384 iexplore.exe 28 PID 2384 wrote to memory of 1060 2384 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f17deb78efac53847cb56b0250a6356f_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2384 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2384 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1060
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d220fdf21a81095a8f91a03ecfc4a886
SHA10dc24b2eb27ba1a6dd3e35be06dd80453d224ee2
SHA256b37ee3d773e5ad982b3750e998234db09d49b69348a6ac5d52cc4162210c827b
SHA5124cdb55cffaf9cdd931e5a2a79be268fd257d0d9a08a6f4270a9c1cb437aa113f627f57b4be872f9f86b80de8a6616f915688e5a8666693343bc7bc086f7041d6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50fc86518d38b9fe7d2c8582552b5ec77
SHA15b23742bf11555e8c0e542db5baa79a2c2b908b2
SHA256f5ebec3536dd2260cf696b656523354926109b3bb5c57f96ce2577bb6e4858c6
SHA5120024d6fefa8db02a6beed52d0a88e9acaf8135185f8d64205fc109b56d438f01f9e38c45187a6b373e92993f5cadc78c41add17407937b1c071b2fa5d77fbc75
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53e70995b23e1706d46e8b2fc43964113
SHA1b43423445c6e693bc956c8828d604b77d1c0bee3
SHA256bc646c8c2b6dabe6e84c18220daa0a73d0b222e82f380834c6285167777c8c97
SHA512b7c4fa3078bf527c75ac016f492dd7005b07b84f6c5b7f1a13d58eb4bae3379d8ef33f2fe20f7d82ebba81fec66613a2ee1a56992b92a29b75e402a9c78934ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c1e5c18514f5980ece3f613862777efa
SHA150d861f45591df5be2aacfd9328b4901df372525
SHA2567f6000d67e540d6a34ecd5684fd3f0a5c8c03d47bffab83ff866da32c8a7939b
SHA512129738a14e372548a111194112de7448fb41a6073849a3a32373611df88bbfc82241de37642fbed8a30e778c4f6c75925ec7de0a1dc29bb70a18ea747a82dd49
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD502c2adc865fcd792ae5a2a4308e9c7f5
SHA1b1e76afde5113582064472fc7633e20645cb1209
SHA2563dc7f5dc31fe36750ad8c0b3519354b3dde066ad4b7a2b8d6155fb9e9dfa1612
SHA512f72f128591b9847ea6440b1ae758b73dc19368e114afe26eaae76c0ff66a8bf5e9e6ec33c6f930e15b091a29426b6d5501820a3e572b329798354cdfec0c045a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f4eeb90e4774ae330a4b3d53dc77799e
SHA14ac830f2d6aaae89d959e71b70b6210e746f2365
SHA256a551fe392e9b7ca1e465d0ec4fae337b0b0ebfaf549df72f70fbef26295a7cb5
SHA512319c1684584b37743c13637a1f9078d89d208a34a3df6c2a8e65b35349b5d34e52ebc0f0d61eac5fddd9c47263bbfed55bf731eb31081ddafc582edcd3a2f01b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59066c452a6b66dc2d50ad08b7215d27e
SHA11cc91c78642125e70bf8dc5de3c723ff8b45ba48
SHA256850788827d9c0fa3352093f29bb2d2f80547986f356a5502b8ac14854b39c525
SHA512268be76c622bc09a4c20bc8ab8f158aaedcc8e413f16534d92559c928ae2bd8f49c84b4dcaa9564033696f59822d9d9bfc3cc1ac7e50b449195b29201c155e35
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58ba99cc0ed62d48baa7e7dc9686b0c1c
SHA1215bb227dbfb38c33e2a1341f89eef15f2de71c0
SHA25629129245bef5b45ad6aa86b6696db0466c3a89b4475b6de01aac60eccac19ea4
SHA5122ecb86b76ae57fd9f130fc7cc672b7941952b55349b75d8a01aa2aefd56df44c0ebcb2daf994c44a793584d234f95ab557922763c23803bdd64641c383299404
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51a181059c0596a4316678326fd0577e0
SHA111a418fd719c6f3eee7404625f1d0f0c9ea41cf2
SHA256b4541ce09b947d01f1e569c46e21c94124fd36384354c73098469c40553ec8b8
SHA512d717a9a7ed2e9d0f0e7b268b66c36a00d42762ca31eaa00947103cfb086c4e99c55dac98971810880858b789e338c0e12839e432ad5547601d39ef06dc0cc040
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dc952ac4a60e9751d8796dcfa5589600
SHA11fab5a2e17c5a49a08b0a3e799948febdfe36ead
SHA256bb3479923d6ab280dc9060bebc50a933ac03c8e5b9e6f5d95d3be5bbac53ae18
SHA51242dc50fd4b0216892004ba719fbbc084c034b93624685d1df314547ace6861f5644938c4b04174a550911494fe9671eb987f6018b1c5dd9426d3fbd9fe645466
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58d4eda42909de8e3ef46bb2656226163
SHA166faeb50a8880b57a32a54420ff79949d599303f
SHA256fa78beaa701c10367723e7976e5e3a5e9ea29070e38459da664698bcb5a88c22
SHA512d49594ef1fd115d9aa89672913baeda1ec46b87c8d14cd1ea1dccf95280253930b31eade7044fbe1cc3255075406fe66c3494e70aabc1ad0016e17cf0f9c3f71
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD557e52cf7d2e6124873837b32ad78ae6b
SHA18e4a7353ccc6956d061afcec96ed1c304654cd45
SHA2568bbac9c7237a3e4a3ff6fe9f831c9e1999b192bec412c17eb2dbfe6bc5ee8bb0
SHA51206615815b2f75ae652360575fc5fcb708be609d250da7665aaf7176a98490c3b9a78a8081696904c618c92dcd7dff4d5619142db07b521e12c513dd90a753ef4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ba2142793724dda51963d4dd64554127
SHA1eed25373ac91901d123dea6036a02284fe0a99a6
SHA256d603834e92a2456a6b13c688a300cd2ff9d293abdfb5a25822df91c74dbdc258
SHA5125d0d06d174f6ad5ce8333f6e212059f775dd2e1c9f0aa27d475e799be915be3dbfeb039a707e9d0f1ea09dcf610c3808a2ea66b92eef1d6eab674c212685d11e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD585bc6200793730c3c6ec4a68997a477f
SHA1cfe3c8ff8428bf18ad97afbb01ef94e174891853
SHA256d36de7ff8b902661a4b47d0f97a66de790785090fb61a61d753a49f514d9e976
SHA5124c33beceb2aadb8f2971e5ed878f54973a2d095b366f45592ff964e0b5f3077b9907fa934eba33d24de7faef75f103518b18c264ccf02da8d02dad7c8630bf5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53969be8e830566e7dc89ea6ff4df6bb6
SHA1f32fdff489250237e276e6580f234ee4696db2da
SHA256eed5ff81d8a070fdbd99dd3bca3269b827af06fc660cae04616d1915f3496444
SHA512acf07f60aaca1ab48a8cedd3707d5f9e7b7a1da85e08dd4f336382ff9f5b4ee5d39eacf604b85a9ef027a11acba00b0e77728017ed2801facfdb6c6d6573ff5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD569d2df28e68571c781b9bef45746cfc4
SHA1b89bf1916e6ee6910c7831361f3641ae7f60e546
SHA256a39166fc4694863c2305f644392734201a7c142f2846d9e0da9a9e4086ba2faf
SHA512266e785b82d0100d595459b46913415ea87f1ebdd34237a1756b12ee93b504f32a118e9625e21f3a8e0c1f205a86730c7d7c33d1455856b705e1a0f31a9642d4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56517361cd4bf49745516991504511222
SHA1ddeecf1d56df941264bbf2ddc3c03989aa19d1d8
SHA25675b457c124845edec36c857afbb93c4043a0adde07cf84d01b4235c44b58154b
SHA512a9f0eb95d383d741ec1ab9c5b3518318c6425cad81d160d7fc848aef16baef9cabb95ecc86fca864a3c15854d5104e9bb3e53166d9fb45e27b953ab6f2aa9e10
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a