Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
30/04/2024, 00:51
Static task
static1
Behavioral task
behavioral1
Sample
08a4fb691e1d50d561e7690c2e0c0a18_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
08a4fb691e1d50d561e7690c2e0c0a18_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
08a4fb691e1d50d561e7690c2e0c0a18_JaffaCakes118.html
-
Size
139KB
-
MD5
08a4fb691e1d50d561e7690c2e0c0a18
-
SHA1
f4e111340f436c2ec19a497c44be30d38f5f473c
-
SHA256
a37b8ed20f9cb12e256a05ef9195f942a25f55b5301f57e660a5a51457e62493
-
SHA512
f5c856027c2797dd6478dc6740c687b7d0053611f4987be01a5e7c03e1f188f4f41b4d882d69bc6fa2e26864079ca2692d37a78e30fabb699b6d36d0b09d3381
-
SSDEEP
1536:SKNirFtClt2oyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusG:SKeni2oyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420600172" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 106528e4989ada01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{CFE83851-068B-11EF-9960-CAFA5A0A62FD} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b0000000002000000000010660000000100002000000068c5120a737c90add3d3601e180eb6d58abd417a10ba78a7cb7b1403285b47cb000000000e800000000200002000000053097ac6f4a151c1055005dac4739fa4a39b8670ea726808f01c549c55a476d820000000059b3370adc2328df15d821971ff4c93c3de1dc457384405708f5656506d20ea40000000649a209fcc3ae25359460126304d774afdf7fa5c4302baf85432ba3d99f650f18bcf8b9bebf79567164e72ed0e039d62aca49f2d3946a172f09f55a523e65294 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1500 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1500 iexplore.exe 1500 iexplore.exe 2744 IEXPLORE.EXE 2744 IEXPLORE.EXE 2744 IEXPLORE.EXE 2744 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1500 wrote to memory of 2744 1500 iexplore.exe 28 PID 1500 wrote to memory of 2744 1500 iexplore.exe 28 PID 1500 wrote to memory of 2744 1500 iexplore.exe 28 PID 1500 wrote to memory of 2744 1500 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\08a4fb691e1d50d561e7690c2e0c0a18_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1500 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1500 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2744
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bb8ded254da9466673754221415f5bc5
SHA14076a3de4a5177840a18acf4d39db7a64d4053b8
SHA25624876dbfcfb08c4e2ae37cd8f6f7f2f2a93ce7a9f187b3c8df932e1cbb9fb88c
SHA512de97370eb2c506014f939e1b00edebbefb68cdb0d0ef7acd702064d80ba16997b7ee29c35558f32e5d4de814b674cb5a7ecd21d78d97ed61244331ad7dd61c63
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5636682cb00b695e95fde9c568b85dd02
SHA1bdf057b71b4429a57e872959c5e5bf3b05a6f6db
SHA256b3d93cea9d99023294d0e68ddcc1d598da9f57da158dd86773412127b7179834
SHA5125b33bdb5e0907d0125a15cf6550eebaf743b8e309368901fc19e005d2b781b8b66dd87ded42dd8539cfc655c52ae73d7cf85283f31c67b67ec61250ede739963
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b34085ebc4638f6363b87dc50e9ecd9d
SHA1e82ed006075d54cfd62e54ae1e7c8873927c728a
SHA256ad63fcc31b8e885f408fb4e7b84b32b23f9d7afcdb91bbe4f4d72a638e471936
SHA51251f045f5ac79656b48a1bb5c3657e41994cb83583d8d9f2582f0daf14a436674f17876b271fb4da5c4ef4fc4d0485a6a96b627d55519348a20a865053e7d588a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5240970f87a3d36fe968578d75e3ee094
SHA1d717da6cae2d94f9c3885d743be4dcab1ede587e
SHA256f575313baa02c71614e99c1ea885a934fcb492263a3afa690e8aae31dad2cf6f
SHA5124a122ade3caf1b9b00d383c9000ba7498704ec1af6e81c702a77ab9814abe7ad6065d66d5014feb4dc6a564b70cc43648605f8d79adb362c10801375198cb598
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD514d3cabcde5359fcdec387373b4312cf
SHA132f59f04c3005fe6ad1fa06d1ea9c1c902adb464
SHA2562612922f1edc761f870f9595f6a5c6d45a11b0b358b57ff90a6c7b34db0d3e5a
SHA5120ac32bb067f58ef78bb7c4ea68e0d1dfe469acda19e560eac15a4bdb41c778050c47887769d3d9d29ec2d2588151cf2eb508d1b5290df7cb77e3641e851fbe39
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5716d530840102253fbefe5fa57e832d6
SHA1b5a53390fff5ae0452dc5a0085e81b6eb8dc3762
SHA25625d3c8926da49a0e85780dbe6072a8037392cf3d47be64ce6e91ac85f1ad9dd8
SHA512bd23df0e2805d92c1520b03172e93d2443d66d02b541fb862cf74b618685322892db3e7feddd7259557504c9224e55251320245c5654e2b59b1fcc97a167bf9c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d532f36a6ff2dd746633ceefb81835b7
SHA19c58526cba3f6b8be8c05d0c965fc525e930e988
SHA25651348897e30e4dc6f4c351132aba2ad6737f6cf7937043d25843a6eb1bd2e7e8
SHA5122564c7f0c262c7850194ab45468f8d96915d742db7106228753da46da23ce1dfacf95ebbe8607e04b30f95d88be855f8130ae1a78fc5e0fd183288b0d8348fee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52bab386a2d8eb0f3297030fefb099567
SHA19a7fdc7c20e8b5f89a6eae20ca9b80a1aed42822
SHA256030d12ba032d517e6a59c857c62e6f69c1f83fb4ffdd5a2f5c4ed73058bd577a
SHA512da125681d50cc76a3f983f3e2752007fcd845142e0427acc48a2e9cf37ee43180e4a95923942de98767b54193ed703323b2026b9f3da0fe06b6e5520526d12b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cac279bed8e4724e6bd419f1d943fcfb
SHA1f407807652407a6a8d147827a62c9643477c7dd5
SHA25654c98a6ab3c9ede8610b51540f47e30ebf7b1f345d9ad74b359ad5ff730fc104
SHA51202e216be417cb5df8b121e3152ea29487c2aaee9abd23bb2f5c7331cb9472df4d2e2a1e3194ca0a7b1a20a25cc1bd9f56dad5cbfd3a530057ec37cd5aea86a2b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54ce17e7453bf031a9e937e1d11e4ad71
SHA1473f7f565242a1264787fb9c7f463be5ca885378
SHA2567d1c3b60d93d8bf5c493b9b634d4403343a9d7a4e0037af22616bc2730e56994
SHA5124de366429562ae179776a2e21d355815b9678615378da1aa0c4a2e62700cf84e9da628f01914b10bbab93910760865dea8198f7fed1ed77ee54b04027b40cdc2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5540007623c44230540de0842d1eab270
SHA1f96ce3b3359f3618791dac3f6aeeb57c76fdd27c
SHA25688c9557bef52b2d3f613c68d95d13d3ee4066aea0ad79937b7b0d95718d59642
SHA512325d9326d80d88373e5365853b8a058d2f95162df4d74f15fc9fda9b4c1a26fab681e5b20838398c339275174a0e64f55dc6b2eba5dcea758ec67ff9f68fa7a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD584e78302c7bcafd2fa760f99c3c6efef
SHA1091587c5d60d1b494cfe5a491b19ab508f2c45b4
SHA256f706027457babde1d8855df269ef5e16411bd4a37f29e8747629869b08092699
SHA512023ca7bbb8e4a31a526530a0cd61f38b86aea2a5ba4cb553df950a636ab5acde835e28c917d6362267d886ccab1ef158ab00f89386cc0558afd0f7a4d660bf32
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e8318d64469c574871ba77f93a3058a3
SHA1501a55af178f1230fd54309e256d32c0b7b7074d
SHA256a5ec3b6275b14465a4cb5f556ab58dc0edaea87ee243554740141253d53f6764
SHA51292789c2447e126eb2a3e88b813d1668e342c62bdb79d1afc2e5c63da129b8b1aa17fe64ebefa2e9aac6ac28a00474fa19d85b40cfba689b12bb0c2753da0f8d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5210569397e8addac704c6a0014549844
SHA1d6802709981bda1c0140a6e212e1f66b6ea13365
SHA256515738295a2482f946c2d3916368adacd157fe352194be3fb3193583a8c236d5
SHA512282b066721f4d580736fd0114a4268e3a457b8a9b921ef88d858a339c559d783ebd93afff9d1df76a40034851a773147d3fc9572b67456faff506a6e8f4d2329
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55acc7a855daac7aabf8de9ce6d2af0fe
SHA16b9c5314ea1f3fe40308843447a84cdf95cdc8c7
SHA2562af4e91824fd1db9f647b5c09a7c2e11fa8c7f2ed2fa1d73b4784db3534f583d
SHA51274095e2b435156bbb506838d110b4be990b89b91b2d4ebe9fe86470c6de96270722ab5c072947ffca586220edd479d1fe68380d30863eff6278ae4cd735a7195
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD521663f7334aa291d6fe3168534828378
SHA1d85ffa4dc99c4df19b42f43bfce4fa62a44b4d19
SHA2565b548dfbadb97dde84681c7ead4a48c098bf34a28297e32c2ccc8fbfb4b29b0b
SHA512f6dd00fec3106df7731661e17185b6aa2ba6f4c2f1a66df4374c72c78a77d276a463232e3ddc899906c51b97d51499db68f5c1e85fb9352efb5ed3dd64a90a97
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58e7ae1da9ee11a9046d98c72ca1ce8de
SHA1c59f144a9e75af07e34cd83d0648abaa56412a3e
SHA256912a4fd44bdcff0ba08475030c71b2df585816f59d13961df0da5210331b8cf2
SHA512e6b422fe057805b2eedeea58fb59d60ad3854724a34a043bca24e1a80d5973071f3b405789dfc40c60eb7f9aed6fbc39468105c3168e076ea2cb2182534aad49
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a