Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26/04/2024, 11:32
Static task
static1
Behavioral task
behavioral1
Sample
00ac32fc27673901783bbc41b281c02e_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
00ac32fc27673901783bbc41b281c02e_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
00ac32fc27673901783bbc41b281c02e_JaffaCakes118.html
-
Size
3KB
-
MD5
00ac32fc27673901783bbc41b281c02e
-
SHA1
af1c15477a086ec4cd24fae9cb366beca04b39c6
-
SHA256
301a6c240fc5e3f8d1450f65d1686214759d0405afbef857d6ad6ae6c3bc9c0a
-
SHA512
e30b3a4aa23c4520c3e1734b8c5f3ee70db11eb31e7184184b903810e441fc0d96cc5285c5a6a88da247583bb4b82b9fc007cca3fcd1aad261b91a46b782bc21
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420293041" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B85C0FE1-03C0-11EF-B937-729E5AF85804} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a7000000000020000000000106600000001000020000000d3f4c124dfbb884a2710938d8bb5e347b58b67ee36bf8b8da9232139aaabaa5c000000000e80000000020000200000005e2b474744c7ad595d73574247bddefdbde3560ce87af18d69b18a32687733862000000028accfb2f949f4a9570e934c43be9ba7ec43733b833c8629120a826d08b8a67b400000003aa85ca8dae4340d4011f17565594c159b242e45791fbd5e0be8193d14e5151eaa169bf3d3e4213e604ae3ffb426091a3b41d98a49d321d5c653f7fd027e0c77 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 1032fe8ccd97da01 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1720 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1720 iexplore.exe 1720 iexplore.exe 1832 IEXPLORE.EXE 1832 IEXPLORE.EXE 1832 IEXPLORE.EXE 1832 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1720 wrote to memory of 1832 1720 iexplore.exe 28 PID 1720 wrote to memory of 1832 1720 iexplore.exe 28 PID 1720 wrote to memory of 1832 1720 iexplore.exe 28 PID 1720 wrote to memory of 1832 1720 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\00ac32fc27673901783bbc41b281c02e_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1720 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1720 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1832
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58726cc20d574ea400193f69ad8c5b0b5
SHA10e89ddccf622d3b91603665c94dfdb25013e60ee
SHA2560d050d6de3e97cf22891251af986009046b36c2fd173f253e7987a91c6ee7b00
SHA5129bc14033ee2163a0f79edcbd1eff883a805f0e658003022a4aa5f1b0db352fbbe3ecc1d67bc4fb86a627b599980452757f020d06702550f10761b88df0f2debb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5845c8d70e4007d7ab079511a2e9c5eee
SHA11cc96fa5fbb407b8d3341691c06ec9561fd1e77c
SHA2563c7e44efedf935acee7182976671b68a1c25d6eed7f66ba2408032bbe5518355
SHA51209c38e9113d8553d861710a1295bc0f408ffbe0d56803823a85148c69009ad627a049141129b0013d26cbde731dc069069dab912ac7a5c8c2d6e4c1948f054cf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59cd6d2de11ab5b0aa6fbd92cb4f13df8
SHA1a36a2256e9c39b84b3cf904de69499b2aaedb41c
SHA2561dcd189cb98af9640f496c3134f8c463d094e075289601a35a31843cda903dbe
SHA51284f57a1a321c8d74af0f7a7aaa47dca50b2e715402bee628092e7a71b74c81511b24e8bdbe442a93566f4d1cbf9047ee65133590a9fe679ca672ddec676968cb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f657148866737c6374e80ec61177abf3
SHA1b410cd690ac7a7a8f5f74a7c5ff09b3d4f6f08fa
SHA2566de7321ee5ee9ef8f4930fbc77bba378b0595b6aab46425d4d31682ee2595665
SHA512f7551d359bee7e7029b8b0e94d7ac51ef371f41931b9cd2057622151a487e6b5d642af23956c115e04a2c3b7749913858c7b6c3590adae35bcdb9ed3d5ef4129
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5739d70c5beeb8e9e4b690846608b0570
SHA1c81a48fb83d33b5ffe17d1c2797653dbd2a5a4d8
SHA256b54d3acbf0177cf83b25f6eef4159303ecc8cc5d1dee2de6281db568abc95738
SHA512aeeaa1e52a810b2f56414f7783e0af8c3a66707d467ac844d58c6ebb5827e72086bb426ed5999ede2a1fa13637fb6564b90cbd41d1832d64d4a802ce16cefce6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD519462c30e66333176ea9d982da0158c6
SHA1df511d679889454688829e23242060cf363628fd
SHA25645fdbce1b6cbdfb6c3153c1640f76e44d0f7e4a4f5af8ddcb059e9fc48ea7055
SHA512793834bb15830dddef19183e9ab577046401fcb5dc6e14db7c5ca7fe01793ac8a951c8ded51b7ca043f3ffd1e2a61ce1915c1c0b049f52b125aa0145ab9c4acf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5adcf187d7ab7f02410e71fed1eafdd7c
SHA178d29b40c799edbf87acac61dfb17d86dbe0bff2
SHA2567898ef14297ad710fddc1d9b53e1552852b0d7a34bc35fe63d82c154c8955e8d
SHA5120e474257ec5859b2578be035fc70ba080535d54898285131085abea1d920c570e1b88526a9419009d1fbd5a65b883c79c918882e4f2ce73c99448f99532e9e5a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57d4d04a8eb5b5b1a65cc76ce6458929a
SHA1e8faa9ed18d4fa6c78df0cee32cfcc754cdd6b17
SHA256da13934b579a6d61549a96d2d7cfbd6466de7eeb69930874c2b3c514f6869126
SHA5121264140a40fc1dee181335c8a9b2d8580f3868f581058137de6a87e8a4ea74bfe6f7b5868fdef297247ad5c3cc78a67669ace5ff1861af7af607d53f6d390192
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD561483364c3ee67e61009407cdefd628e
SHA1e6a30d4329b221e419c95a5a967d3df334ff89d7
SHA2566c53623033d169f48b138e67d2c014e7ca1f390648e8cf22ec4a875414d2c294
SHA512aa8297ec6bfe38d14c6cb9f7392030badec988c93c8ba45101a8af7ef4ce31dc55d03e74e5e3fcfa1af930cabfe74425278606e75c86b8cb19613398735797a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59b657e6b7e3cd0a4b45684f71af4e70b
SHA1af32c0afa08e6b34cc22da97c5b8c695db0ddaee
SHA256fd3d2f7bc867c2ff5e2eb66f0f054b45c9adc0eb7fadd8b5f1e7162f19edcad8
SHA51227437f89ae551483c0a9153ed65230983a4eb96b61126d3d2ad53f1b6c0be6860e35de726d276e6c634da026a02c02ddd53ed783ce68249e8022822eba5c2fce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD550d96491c626c161e60e9c3430be6f17
SHA1e092f0b52c2110de721173bb7d90f3b4f8b609a2
SHA2567a65521cba341358a071d4dae3ebf08a55e714b6562916e2f2f49eb5be9b1b35
SHA512bf5b1368224ab17952c9a498e039c37ed9cde3c04159cd9a63a4b03b40885b7fc498dcc882953cd516cd748a7895e7a49a507e41c58af5997f327dbace020977
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD512407997ea464ebd044965415d6a2b24
SHA19db7c135efb159127a84ae1bab24a75ce584708f
SHA2563006914a06cc5eb8645d331080a55931d431e008e834f035027a4ef368af2b76
SHA512b619a3502c5bfbc37c9bc66fc3014beda8adfc2b95061eccf7255ca8f74230fad0c5b0374873603e315686e0b52eee50175c1121f6c107f33242d10a1cae6715
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e433125754054323fd3ff107f226648f
SHA1350654740ec54632036399074fdb5955ffc5d6b8
SHA25667d88065071d894a1c77d4db850d4b24d51a623cdd0341556661d3311b2f86ac
SHA512629e6bc3a23cc2f5e7810de7000b5403da9ce18d41ca1ce1cff8dd1f91f894b707a528aca1ffc85421a9f78ec1a089fa2aa5e8493163b1bfd701bc4a85058cd2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57511132da470df26bf335c7b2a062c50
SHA14edb8a54ffb668f0a6dad1f72418aa66b651f705
SHA256a783b84eb1e7565ea5476447607e7ab7fb217ee175654aa8b8f6277387753dc0
SHA51207c7cac853e9e2e6d51e23ae76313bcde4578c7da7df48ef16739fed613ea86290bde5ad27e4222982af4346958d36d04054e209fcaf539031152b23110d0f2b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56413e154e73e1f5d60a2c5453c69a62a
SHA1d809e78ac66097c97e3b2dda359eaabb63cb1f2a
SHA256e134897ba091fcbec49840195c9ba993e9aa634d91cc23f98833f3dd420da1e1
SHA512e06e9c0977becd68dd4e53b6006522047ba73c46e6db8767bb38c95d88541c7bccc36d2b2983d8aec79fb915910e0054d1781b068e2785035b8c4728c52ddb25
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fa344ebf72f6e21d058aa953e5c31273
SHA128346dd231929500aa7023e1e4ae9dd38041dbc5
SHA2568263d713fbe5aa4744d5d91f61ef6b843bc5e32a4867a080f41a3c82fd186316
SHA5129648f9690525e710c2cd44ea4992b7e4ad83b3f1dd51d20ad5f4948ce6899009b586c8365cccff740aa35ce81847d1647612016ac11c55e00af65372f6020a7c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55d3973a3baca5f97ef62dbdb0493348e
SHA1ed5a32541deda299f86336aa2b5cf0de1ebd38cf
SHA25666f22d1f95f92cb1f590a51b7339a9cf214e0da89c24be93ddb126c2300b3fae
SHA512efe41d4a44db6b39eec37201917e9f246077e0bd68c9a65b984f7ee0c5b7fbffdd47d06310bc25a62ff7cb36c5a6fc30b2f8f9219733e2b1d66543f1481e8dbf
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a