Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
30/04/2024, 02:32
Static task
static1
Behavioral task
behavioral1
Sample
08d42081019140cb8e1269aaa7494d34_JaffaCakes118.html
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
08d42081019140cb8e1269aaa7494d34_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
08d42081019140cb8e1269aaa7494d34_JaffaCakes118.html
-
Size
23KB
-
MD5
08d42081019140cb8e1269aaa7494d34
-
SHA1
21e8338ca3aabf52d613d0ea164ae1f5da7b663b
-
SHA256
e83d3d3fb19eb25a8aca5caf9fbcf372861bee0c8b23b85c0bce54dc28b7d90b
-
SHA512
1c0e68f9c0b7ec8eb56c9f466ca298ef86f5587330b85e5e325fc70dada4d686c0d996271afce02d70d1fa4d8ffdab98ea6b2839fb14665cb81f06ef1d67c8b3
-
SSDEEP
192:uwTub5noCnQjxn5Q/XnQieeNnmnQOkEnt5dnQTbnyWnQ9GLnLnQtAqMB+qnYnQ7l:HQ/AFGVse
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 703032fba69ada01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{268AAF41-069A-11EF-85C1-E69D59618A5A} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420606328" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d1000000000200000000001066000000010000200000008748c55a64f5dfcd99291ccbdc55829df0b69b2599c364eb4d9a3c8ae1d32e7d000000000e80000000020000200000007a972dda59483ce8a7324a1099252d29a98a0be2ed7efc2bb2dc2bd28b50ff62200000009b5d4ba33fc92fa4f283640044bea550dec0adb08977cb62c36cfb15dc5afa124000000012c986504599cba663534d55b1d295759a68d3daf1da69ebe47d15ae6d48238b53190e14ccfd835824007465620c1cdc46e617db335d504b358a636d0458aa4a iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1640 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1640 iexplore.exe 1640 iexplore.exe 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1640 wrote to memory of 2396 1640 iexplore.exe 28 PID 1640 wrote to memory of 2396 1640 iexplore.exe 28 PID 1640 wrote to memory of 2396 1640 iexplore.exe 28 PID 1640 wrote to memory of 2396 1640 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\08d42081019140cb8e1269aaa7494d34_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1640 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1640 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2396
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e70337c059a9e3cfc8668882249a30e6
SHA112daccc6876e890aa10a520dfd16b0160e2ff169
SHA256f8e1676b4b5d184376b3f3a05401e6c283002dfb81802e0a30db62d5e8f04cde
SHA512044bdfe3b380c01d577e1f029bc18b9b192320289df15f16cbd33a4c623453fb6c71a6954d22661dff5333488ca615cc5d8c16940ebc9ca24cb985498037523d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56703e176c8c490a4040f24b753c23c39
SHA16385c68e1843e34417b7ebdab0dc856db8528334
SHA256ecc2afc9a190d32df98c6bb760fe615241face9df9f6e62ec6b5ecf988cd5e80
SHA5126b8b3c19140d8699fc11f0881fc3e9e9a197f021a7d6dafdc801445371d336da9b84eea52bdd7d8b56d5bc92f8e221308545aab5d1f6cadeb1311e7b7e7875d8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a8897d1328d203094d8ec2f9436de2bd
SHA1b8ef15c8ee8086e6aed7b13d83fc4ab91e52197f
SHA256e3e03bf138456752df0810dd42d4b5247a8d88808fa5b6c8ee5df1eee9593ee8
SHA5122c8636ca7b81b40d6a5b638e3bf29e8b695b89891b6d8327d08bb391478dfad88df3e19587d190165fadcaf16110b6e66c61f7ef8b99f421fd5dc56d4d7d2dc9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c563d711639acd7df98126bfdf9a252f
SHA1d11700eb08d403783809fa489eed927169698706
SHA25637ff8118432abd85ec0bdcc987fc875e4de65a5780b3f58f0d08b4711f08ebaf
SHA512bb322748bf219266f9870791da6989a8df301042b71278bab45915e6b2aef7d27daccd4770635a923453335b51db4ae73fdbef3bb4474b44a2e6ad6113028793
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a478fa18b00f78f2b30f7934f9e1b8e7
SHA1f51e7dff71ccad5e2a1caefbe55b33a8a7daf09b
SHA256834e6844ed7f98d50a882e4b2a7b6e8a30ba25b854420aee0cae324044746148
SHA51232953d775452758608180103cb831c2b356def9b3817d3a83583dce6a0b285414c07945debc9b822c88cc6584ca9c451594a2a973470480e16d09cab4f4e8823
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD555aa680157ece13bfff3c43332308820
SHA178f8e1d70359d770eb04eeabc2909c98039311a0
SHA2563bee1d21f321e8401b1e2edfc52d313b55d495c92d18a651bec8f3d2a090472e
SHA512c466ed7499b942266adabd08c6ecf81de52361f31b917644df118925f649508667c5163ab57d5d78283f2d092cec50877fdac0bf6dd075e198f50fe53b61ce92
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53791114bd9840b8b8ddb5d4753d01ba6
SHA1d1ca83d1c725398376b64606c35c8cda7322b29a
SHA256f77009bf35ae77228035ac7c207938638b4314908dede9c4c9fb8feec5ce288f
SHA51223ced4e4d04ee89c7db87577f00f3b0a9fede4d1541b85aefbb11ac06e5fa03d267e71751683f90d1be418e571e52be44c1362d3f4096733c28629ad329561ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cd6942c9e71a00a4622f01be3612d29c
SHA11bc8bb0121de9c2ab1a287e6f8ffdc617280a2c2
SHA2564ea6566fd9bb4532217c7d66efd98bcddb16480ead9a5ffa141ede4404ef4bd8
SHA5127ad8c7a6b5bf0d867f65ce9e012d3d9368132ba402b29db049c506911f2c8204e3f583e29a3477e156df2b95e0c19ff817a0bf96879d549b3fc48108b348a7c9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cf16e85080ed5db26e8a5663d4abbe3a
SHA1cb9c277edeb4b5977cb66be69ff58fdf4b3613bf
SHA25637724617589d608bad01b58ca4ade7190ce0d6375bcb0cb96e468e019b419429
SHA512cc39a8f65ed717b918f6a1b7a70c6d43d7028fd06d1f73220c6b43c8dd9c8499d4ff0325c6957d96b1b15a9dfc03eb2b3d9b34716e5c9f93649b5446061ab59b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53119987e6d5ca054dafbb008fce1b116
SHA1aff44d8f9e38ee326d1dd7283c6d43ec738c3f54
SHA256facc9b51debf1acbde8def3535dce1e99edd2e89fdce1f8f1256476a6b96cec4
SHA512c108562177ec93deafc6c4161f88832a6b30eeb5e51195258dfc3ffc32a1114065fdff51f58a3d4357affca0e3d597e78bc44142f5ac41176e0d723e01879755
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f4800b82be6a1637593081faa20cc4d9
SHA1cbc2e48caabd86f07d473fe000f4279b45fd616e
SHA25684d94358c2ae2d3e6190ea51da876c6aae2190d8f56a66b2e9bc6ce2f234573c
SHA512043d4916e31d532e0254964f88bc5f3bdcd72d34ee03a24f10346c2cf1990611c25b61439d1d847e43b900bf69a2d008e4f9055b91d1dfe8a4d462207d26037a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58d90e9c1e0b40f1ad5fd485de917bb1b
SHA1488709d94caf610c7224d3780375d8588bf3e56d
SHA2563ce5aef69c84b0195681b4b3ecabad3f514eac6074841abb31440d257174fa97
SHA5126bb1cc5f2db79b9167786e621feef0bcfb4c2815d6e7658b0e7e02f14a95893619cb788d609bfb7a98167045c03dfe8bb67e4e1cf2d989215bfab6c7954fe570
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD549f3fa20a8ed9ca84a4acd1f25a8adf0
SHA1c6f2a7cff4165d47a9a0239c73296e222f8db47e
SHA256a7e1e71f35a336bfac497d285f539a4243caf581a9da4ed43d929da2c0a941ac
SHA5125add812781675b6e70131ab80695e38fb47d9625c81432404ad4e7e8364bdc4dc1b1490f7b45da42e40e2a899baadb815b2e22fb27b27ad2ac047a8f2e3a5528
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5017ee335ca823567aa313ccc41cb90a9
SHA10631c9945a076229e289f0bd5be316c64f4a3205
SHA256de5f225e98cf8fb3c9e9c406e4eed421e84136f64dfad12da73c6c31b88565eb
SHA5122b319dae143a39de0e1eea01352556f9f4575e65f2117e06c697058f095c132327860a0e2f581a95aa52fe8b61ebc3738d58a2b7020c5bdb25014857be64e258
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD522f25b5a50ad7c998be3faccc3e1ed6e
SHA198c8c2bf1d50622f13fa0d00250fc95e039cfd0b
SHA256185099077b1fbe6aa67c1ac4dfbed3daa0ffba2aeb37feb018e339864e65ac26
SHA512c6a1aadfcbf433f16d96a3f2c62acdd4d750724dcda212b01ca7a0cf18006746699dc6b9fe4bcbf15134d24ed77b6867170334a512030bae43c689d206c5c764
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52288ccb61bc27244190b97d89733013b
SHA1f2af43d5d0d48e55c9e2f5e600fcbde908d74e6b
SHA25624deea5127288829fb239af851fc1f4f2fb76a6daf89e7e2fbfaf059fa13fcd7
SHA51282d1e307656efee285f3fb4d9b76fe169eec677cd4811f23f4d93b1447bc03566b82a546ce2978a4cc403f9c3bd2520db68b04e5e224b75d556183eaaa05c58a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55fb6aefb2cb2140e834604b338320d6b
SHA1267b2151e0072ee6f489ceb42c0891064356132f
SHA25654e2000be24fe59375942e0162349d95e953accf161ee429210fcaf08e02bbd9
SHA512ded59f0e05965af063a1352a80103ec6b842a227c7ed10206ce810b0e67210d0447a954664e6b858af880c97eb8fe6de7426af078afdd9b4032eccf1279f53b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a3fe0a072ea15bd823b9251d7d4a1caa
SHA1cd61ed97508df0eaa593127816be9a4daeeb04bf
SHA256694d1916ff611c8c0eb838c57518adf13b98d3240a89a60802527b505bd54024
SHA512100dd4259b18dd906da461042ddd8be93bd660f0f1f4ec7b10f19af5e30bc6c91fbd39a7ea42ac269df40632aafef309b076479f1d6bd5e19e10087671bfbc5d
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a