Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/04/2024, 14:43
Static task
static1
Behavioral task
behavioral1
Sample
056c7bd44a736910d6e4ca050085dce8_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
056c7bd44a736910d6e4ca050085dce8_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
056c7bd44a736910d6e4ca050085dce8_JaffaCakes118.html
-
Size
1.1MB
-
MD5
056c7bd44a736910d6e4ca050085dce8
-
SHA1
3319fa4be7f7d37dbd78a5ec2ba3536bfd743bac
-
SHA256
28dffe2f269f683d5e9e861ab9a1337496f768294ca1129d325c2267f52aceea
-
SHA512
fdcb0a1ac968fec281dc97f79c31e96f082211d445514c3b74e3b2b67d60a1eb51d179142c8cef4faaf3608d9ace88c20f69063a7f30678c9376c4e5b9a7e5a1
-
SSDEEP
24576:59LYWA4v9LYWA89LYWABL9LYWA99LYWAB:K
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420477303" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BC5C33A1-056D-11EF-9C59-EAAAC4CFEF2E} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b0000000002000000000010660000000100002000000070c4a6f3967d0bfae2b7347f656d3533006593959ef41476acc0f58662000e94000000000e8000000002000020000000d993b30d6c3903be4aa539687c62cb648ec2eb3124aea3a38b06985940ab163520000000e6d04d1451e27313c5caff0b0ebb47fe4b6d778cf0b97bd2ba7cb0604a4b2b274000000058a58b6ce22ef5b0daf382639c46722d28bab029b2d20e0ed704fe6039c32156eeaac94d582255c6a1adfb9b77b9f28f2d5732d7517b0be90ad2b3efa40101a2 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 505970917a99da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1084 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1084 iexplore.exe 1084 iexplore.exe 2280 IEXPLORE.EXE 2280 IEXPLORE.EXE 2280 IEXPLORE.EXE 2280 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1084 wrote to memory of 2280 1084 iexplore.exe 28 PID 1084 wrote to memory of 2280 1084 iexplore.exe 28 PID 1084 wrote to memory of 2280 1084 iexplore.exe 28 PID 1084 wrote to memory of 2280 1084 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\056c7bd44a736910d6e4ca050085dce8_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1084 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1084 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2280
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58616f7e5785b3d7db6996d880a1af662
SHA1ef6b0ea7d18ac202c81f742b1db92bc7d8ede456
SHA2560eea0d308e6375d2689bded4af5dc3a9256b00be7b1793cc760fb55f3be3ca25
SHA51235483cad56fb2d7e501584ad053bb474d1d9064e0ceb7368fb30b9ecd23a169a7a935a4c94d0e4ca6e248540e448aecc7be70b1cf1f2ec8a01c232bf3689c5a7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59591ab802d93952497320a4aaac7dc50
SHA1cdc85e1c488e6e796045bd7aae574100b76fe85e
SHA256351201a03a7fe8d72b747118a77452a80a40c2c49a05222ea989ce3a1301b996
SHA5122d45f35e3761302593e4933eb58455ce52b68be1439bfacc61f843720be952fd167fd2da2f38bfa7de8feae9ce0330713550fea5450d9189bb8f85e4b6f91d80
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f1e50a0549a169ca4668b89bfaa6807e
SHA10d3db8928a1d01f09923c0d92b6bb6de91f25b18
SHA2560e1da531a1b08e32faf6012abc9f83f45dbb414dc538d5fb7eae02447fc71e02
SHA5127848c81a31c3c223f777f9699998598db6f25d388dba0d6c77ec68576a4768cb3e5dee961dc4a9d3e059e019eadbe59d73e6f81134d85aac6c4e96a5d4cc6491
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ce983f2324a395aadc4335f15c59718b
SHA1ab1c142024014936b0f39084e3ec198f6e0584df
SHA256842be374300d03563fa613980162642f4a9729267861a48c8704c2dd1e1af619
SHA5127b354f068dd84a4f5e241a5c7d618a54234a0b9e5ed347b5599199c03f5cab66513ee479355c9345a64394aa24a2f83f37fa04f19cb12f95540d683e239f4189
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b0ef41637b1e4a7ce0de7eb1b1f71a52
SHA146b34ac069ed299c38f27dd3db1beca086d4faaf
SHA256366f2cae801b297e5610f793eaea32bfcc2e3cd499a4f303b2af0c5106a6bbed
SHA512b1388ebafe5a7d251557256aaff7855c96fde0c854bb7dd66e1e5d1475dc45d050d51d70f2f4f7bede7547455d6f7255ae88b644e57fbb06de52dcfa15bba4af
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD542da3b0ee6159e4984870a609fbad760
SHA150f049dc2101f918c39a9d177e1f5463edb594b7
SHA2562076fd161215a4087fa0f3c52b2e8045fb5e01b71c14c712dd26c3d6bd877391
SHA512b2fc84fc4239a8bdc80020232eb39902b3074fa71cde932b614d77394450a8e6515489792295d101f893d25a4809632dab163e27d0e2b4e6e36f095a05943d66
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5354a4408b67441564e35cd32852c3dd0
SHA1409e6d7a4ffbf77db35664988859490526365680
SHA256004dd77e087f84255859d500e2e32bfcf0e171ccf26120dedeaf8ec942319325
SHA5127df0470521a9be3cd3c7ca361e1977e91cada59726bad75ce8cd77cf6c5c652ead31cea741b8631463b6cbc1965852f04a51284e63b48c2704f806025420c3be
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD509c3788c6c290a7b1311376239519084
SHA1f8da2d9c577cda28a3e4462f4d559baae4a60187
SHA2566ea1976c21b7b2e9bd599db6c8953a2cbbb229dffedba525bc44cefb10a3bf6b
SHA5129572fcd4c16a28b8732adfe46b6f0c5b7117392852aae86199ef3ce05ba5a5773d3b74d085ecf51c3159b2d6b03d92b6ea4e689c5a854ec0b4d070513ec47242
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD554707d5e4db0379d837fcec2bb7aa58e
SHA1e461c9a46529367f933d7b6ab257ee741c85abff
SHA2568b1981512fcc9bdec10d1457cca04b2e0714f47161cfe186d2309efb53dd92cb
SHA512a58c185e92d69f96d9d88056248fd3035b019cae75804846f15db61b60c862887ae87f70c6021e0bfe772f4ddc60919c7d4e3b245b2a70d93acb97641ed73c1d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5712e54b95145b66007bf73137f0738d1
SHA105185ab8e9ab8b4a96fcd9459dcbe7aede0c9f74
SHA2568e1ea3c9dc74ba493e5763d1ef79d8ac35a6e9f137e9d74a0d4ef128e9976dc5
SHA512f5c7f51e442a295b10b5790739792a098b3d80fcffb38a1703d455465475557a504acee7a065b42ff6b588f6996ac28890ee7b850df8f5abef0d13a34d02d2f2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b342c08065958a87773503c6de410ad6
SHA107e3124e7719319cf9d817748e62e916d0a2583e
SHA256c475e1ba30d9d54ed5bfd191090a8a35cf3013239659ad16927a3c8678afccc3
SHA5124d500ec429730158219cb6dd1969918e48c61465db8f7ee88e449b82abae1b702be6a7d750cbf8781a70ad836d41b7dc913cfe6631dd652791c570d7b3d9d06a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a3581b09bdf4e625798c1c0bac5ef890
SHA122c361d7be619756ee281cc8ed61e999413f5bee
SHA2562d6f6e085a89439ff1610263db1f239996efb2f39a9f91ef75329b98b8cccc2b
SHA512e9edfb1c0c470b11933be855f1f70e89de77c6eca0bcc1a6dff517cd67a1f4faeb406a2a73aed9ccb8e4c44c1e8a03b93e0f20036300bffe4e21ce783107e1bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD565cae140005092cfb893af2a85f282ae
SHA1d609636ce6f136dd2ab71f51d9492d8bc9ca825a
SHA256f419784e58902d3703d576007853c4e9b699aa170a57580fc78dcb3277f19d85
SHA51240ff15a56272590a867b674fcece3b57a1b079901010b3f41ecfad8f1c53c088b432ed0eaa1e555bcd48e16aa6f62539b12dba25408d945b23a0542bca3c953e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ebcfa54fdfcf78329c9aca006f270673
SHA1cd231932a86025c5ccf3dda8576601bce771c80b
SHA256ef33324d83c216d28cc1fbc4f219b71de39e9dd20b61a25f4cc8af6031bdadcf
SHA5124d0f60e4ebe0e6a8f81e8df206db8c119303831cbaa03c808dd4463926d859a08b49d458770bad7a5446b2176167cb39bea69d31710ac20e33478978ad2fee4d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a128d1cdee9e52cc31865acba454dbf0
SHA13a644a66bcefdaf7d82762fcde59c5b19d334aa0
SHA256a692f69240dfa85c355974efd92fd753b499d194127ec263b7af7716adb805e6
SHA5127be3aaa89756dde1c33cb3674c534fa4116225c5f130f1c00a72af55390fa6cc06a2a68221ed98b66dfe19e28cdea6981637a48aaf49a8515d2fea2e51765301
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55e2b2fd2297243871a120eff3d6df80c
SHA15c7e3d20b022d14589ff5e6ea13cc6038d3705af
SHA256928aab5710cc810fce8309afc3875fe4738e77faf95c64fa82039e9f4b28f199
SHA512c01e80408cef813c6fcc4824db3ebffda5727788892d7fe78efe504042857b188965ea4423c407bc3ffcbb99671fffb221edf16da7a40ed3ebb1ae7b62f98d78
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f07e89714e372ed5c26b2e8475faa7d8
SHA199e45845a072eb649eb287476294e0e9701d5a6b
SHA2568850c6f748fe29e97e3e97fbb1fdf5453e05f5cc3c8c8ef9f79c80e0c90be2c6
SHA5123a5d9696af05339ccb33bcaf550b04724ae6c3a4e4c60c841f2f61c8a42b6df179456c83dd7b5943ca1ab5295f4f5f93afff2c3390c89f86bfd68c6f25cc319e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a2f4743b325c49a57a6b76d5bbab49cf
SHA1c195f021c96d9740c2605efd3f824f495b4a7a12
SHA256b4ba7f1218d75226b7ca6f6e4ce6d4d7944a9a8d84c7deb4d673ed8c697ec455
SHA512f22a65d22d006bdd67aaa62af3a405003c4016f51d894f60971bd45fff0f8f23ef5ab367fa05f9c5f1bb604238462a13dda444061a3af983ced0900d61eec72b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD581406ba636d17252eafdd5588a2b6248
SHA13c75f7c94f97f106756f3a0909b2d8fd7bbf2d44
SHA2565ce31113a877dfded1d724a0d2dc0250e21ab05db4580e9ff174d6240bd41d2c
SHA5125cf7d83a66aaa1f754ce52908080973b54c1de1c0a4d23c5a7d6e3e34a10e53e75e2596ecfc57c8a3385fe51d02ab280b0537f6d78393526cf50e47ebac644ea
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a