Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
02/05/2024, 11:31
Static task
static1
Behavioral task
behavioral1
Sample
0e5fe5273271c5f93f09bdfd6155609d_JaffaCakes118.html
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0e5fe5273271c5f93f09bdfd6155609d_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
0e5fe5273271c5f93f09bdfd6155609d_JaffaCakes118.html
-
Size
460KB
-
MD5
0e5fe5273271c5f93f09bdfd6155609d
-
SHA1
39efd40e17779bb0787dc469f27cdfad45257ecd
-
SHA256
20fc304b4f1881ebec697b86df61f4f5e35f5d9eeacb3cebb22355317449dc2d
-
SHA512
1329fef470378932de28bcce0dbef764c28f58eb3018d112d93e11a2352b36e1a67795921a9d9b1b847be09bde43843d43355872d6f1538935358aadbc755f41
-
SSDEEP
6144:SaTNsMYod+X3oI+YNTbsMYod+X3oI+YNsMYod+X3oI+YLsMYod+X3oI+YQ:hZ5d+X33v5d+X3v5d+X315d+X3+
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f04ee65a849cda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420811352" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d10000000002000000000010660000000100002000000048fc6b2a4d72cb67db8c4166cc471efb136390693c502fb82b895dd0fbf2f6e9000000000e8000000002000020000000966a56599314c782d0a88eb3b659c7128caa66569053eb92aaa2cc5a9478787520000000c30bdf5f903736ca4ac52b26623c3e29bd823a332ba87d73322021861cfe9cd84000000035831db14f956069c973a9a7d4882c9cedfa66630768f745caf376df4d8d5430bda6b2db4f65fa99723db25dce7d3d7a35e32e51aa0a1932f58c57729bb12361 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{82599C81-0877-11EF-B944-E2C1BAF7F8C9} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1960 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1960 iexplore.exe 1960 iexplore.exe 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1960 wrote to memory of 2396 1960 iexplore.exe 28 PID 1960 wrote to memory of 2396 1960 iexplore.exe 28 PID 1960 wrote to memory of 2396 1960 iexplore.exe 28 PID 1960 wrote to memory of 2396 1960 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0e5fe5273271c5f93f09bdfd6155609d_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1960 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1960 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2396
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58781a2f210c6548c8666f2c9efe0b828
SHA18b850e4937784a8cf8c03955dc65f76a34a56b5a
SHA256aa1af05a6104464c7faef4372e91a628ed53acc92458ce896caa604dcbe1b547
SHA51293f7e886be40f65c2110e3d9dcf0298c40e4f024d87c71d4fa2e5883a6f0c45a2ef672c1561c58dfc9e373917a5fa6b944b41d9791a6524368439adfe61cbc4a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD508b9a8714999cfadbd18b6ef79da67f4
SHA121e47e90cc0d1bdb1ece0dfd44ee4af4a9982143
SHA2563024201189b7d5298a7e7dd1b1de79205e2a74663fed773065bec4e1c0510710
SHA5125c595182b245d197db33b7ec3e006eee620e0c3c78453ea467c2103e3f162d0e7a2387da6649094c3712f0a0d066806ea4e0d0dba373e5aebffadc0a3d4da980
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD598271a4390913fd670d83fc41d20189e
SHA138899ee24fe9a72a965be34eb5ec57648c23d4ce
SHA256ef9a1d1491849bf2ae7a410f43806dea599cf3896c01ad2b05a96824c6959395
SHA512bcf029dcae58e0673415ffffd82a84ad87824d8fa3655986f503419ab199ab3078e533bc12aa9c1b44db4ee6e6f1b59f77ab7322e3a67115d2042ac9eb5404be
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5425d5b09f948f8ca16e7eed6e7d87733
SHA165111bdda3a4fa1c7a3797682d7a05ab45370c43
SHA25635401c4aafbd3da1f16305ef0aee2dd383f53dc372674b2c48b53ae0189f8cf5
SHA512c99b23543c52a127d08bd34d6e13b46cc1f939bfeab817c08db0c0bea6be5bb00cb9cfa4ba6942860ae67be6bea764944c2681a07357224e1922e134253b310a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c1d466a33c95fe06351771a51becaf70
SHA19cc2a43afa38ab70326caec64afee161025cbd84
SHA2567d9b5bfd4cd21b5f51f54dfc2930991d7f1557d23f12a4803d03e7c960dfa248
SHA512e7bbe7643f1229a3a784cebac906e026ecaf61b9ab46f00b0536f73867ba3f449859038fc5013ee6a9e04f9c6ed74d07d0b7cba707bc1df04a3ef18e959c5861
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57f1d16468afba8d25720149161246cb2
SHA1ea8081c2b9390158b7d374dda400db47301f12f6
SHA256bd9d6b7517fdad57577e50f031423476175dd3a925da85f88abae38c9c923ad6
SHA512749a5c40caa326f7ffc3dd005994e59f6e02f8856a783e34fd3b20947cb7909a9f020862659134d92176ac20c04e2d4dd77509ef400ba8975d6799051c56beb7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD505338db73bdd59d01f0d6a166418569b
SHA15fc52359c1a6f85320a79ba5271ab4c172f0d98b
SHA25676dfe27a94cac484cc95c46f193c90ef791007d9f80721ef85b4cf336185ec23
SHA512bfa98d3d37a16a3f21335295ede772a99aa404d9a7cf8bc1dea1f4ef2d976530d8a414460cbbfa56cbe143a97a6f54b16cc81437b00aca324c882f09a363ddf2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57e0655e389b449124d996a8755a47ed8
SHA15a2e6e9123a960991f3ba92d53d9f2c0613fd823
SHA2566bf8a1281954456ee851380d683a0ca2b7e34b1a5f535b7e06db0bc7a684efd8
SHA5129dc008d0979cdafdc8a86d66312ef5dc4c2e928026b77e5577e0d2d892a4a8b529571f0a92fd0481d63c8b916dbb53016ffcc3b69758ca2315b9a8dac8e0120b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51d15cb5144f1b87c3014a0a21d0eb95e
SHA1b0006dd621882aa0c49db52b1eee0a247d21f51e
SHA25607da13c6ecf45ca301c4cb9368a3e43de59cf647171a4ff1c47feaa7e83a3576
SHA51253ab29664ec198a13fdeb1aa50b01e50ae99638e7d90426935ebd5b8c0d7285281a33cdb91f21df6f8ab7c976b71d2527338af4e3a7bf58791d962afcd152d52
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56c61c6e35c506f2dbc863e40824e3ba6
SHA1a0e2db1aa8fc3609828c589c0a921016eee35cf2
SHA256eb449e1c7ef8711e70d28c3319ce90eafaf892fa8445c24e5578c32efe8c5897
SHA512bc62ca15a5c131d2fe8a682ba5544a645d9f4f60037fd18ff325f95ad3f7d97a295746b688cb80596cd405f284956c45e77c15afdb8b9aa26c51024dbd59a7ed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD515efbb21c1d7fdd29c0ed8371f500eb8
SHA12663fa8dde210a9e5c9cb8cec0a06b79275d4b20
SHA2562464a1b3c0442281f5634e469df6f29420a3ab80a73ed593a4f47fa14bacf3ab
SHA512f016c21b1891c1d0ce8710bcdd0b05877da7eede2b0b71f7f5f64674f80375a63ce05182ad97340bbdffc7517ee776466fe00e756eade79479566210792a54a8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a0f5627178210cdc604066c5a2accc2e
SHA19213bbebad7f50a22e00bb469d1b1c7f4a32f587
SHA256ea22832de0874ac538b3cec5f2c92ea3245404c3b73cfd6b5abced9471e30bfa
SHA512a6d525df2834fdd708dbd22e3bf991c1dabe23d80474cc95e12255b9f973ff019c97614c377ecfb241cf81b4e0a8e08f435eb7bae23bad51c86478f85599a48b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cc7c14c1a8dbab86ee93dd895d0332f4
SHA1a1c67f80bb8baf510e45baf225c8c6947370c802
SHA25623e496c3d705d65073b2b66faf4fb59ff85b6298cf17b7429e9d96fad0cbd2a5
SHA51215b9687daf2c023da2a39b44c3f7a55c38b2ed2db98a17d2b985c22aa46900afdf275b53d6f2a4a377e0f225e42f22ef9857433efe5d9fc3c5c59429c83522c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5591562a14209afa28f457132345a79f8
SHA1dda6b155cbb2df45c314398379f9b8e9a44ab006
SHA25602311f1f4a133fedd9a3395a61538e17977adca82fea85ed5543bf7bca7a98ea
SHA512f5c25dc232d1453839a6e2c88d1a94dcbf67bf16a7587bb64f81a8a327f0ecdf01c6d8137a84b0542e58bcf56de52c38bde8e9c72956d29fc2e45a35449dc2a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5151144b05e41fb1a5ebcef07987890e5
SHA10ae714d7f3960a80b7a157bcef9f05100b52323d
SHA2565197c8f780060ec4010208bf367b80e8b9757797747623e31f83108bb31bb474
SHA512b2d4f6e2e3420bcdd77d84ba0f41db5b33100df3848ffa24942632fc8dfaf51b54d9d23685ea9eac277949a5cc27e30e64ebf1ae389e666fe0a446390a681153
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d3d968ccc708c4f1fb0061c5e6e81148
SHA166d0b6adf7f8eee7fe5931f4a18d3ac1147b40f1
SHA256d264ae617d94659429217cf053940b373348da114dfcc87fe4d46a836e7a4d3c
SHA5124c2186199b757d5b42417e3823c8ab287a2caf736a1dedb3565d577dbdd03b01637066bf1614485b0df5677a6e0957949195598dccb004d35a1e0ea0e2324ceb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ed722f56b9e0919347228470688a1fe4
SHA12f7288ab6d661efec9fb5843f30ed9976ea179cb
SHA256c3ad8c5ab0a722f9d100d668cf53a8c88959860b4665d88116ed5cbea8675572
SHA512ec95a53a3fc0378f9f8fd83a3719d7abfbb8ae54583bbe6c8ae80bc9888666972563597c36579e212b952a39065280c2de29c700ffb3b11130d69c3b1b19512c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54959ed54ee26c0a4ea9dc9dfae28e7a0
SHA1158d17053b274c4aa9859649c69601a505ec464c
SHA256b7bdaf0c7ad15666061324fabd252333ca71691ceb58959b2008d152b4862e71
SHA5123f28de1e93c360a9713e353efcc2082480a2c4e8e6a6147b69cf0755d26b6fe72c31e277557700cb5b2ec3b7179924d42a339a268f5faf9464980f9fe4b28737
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55b65ca2b69f6e5ccb14ea9b1ffcd357e
SHA1f8423626638059eee3a5a5f0b3e6a165c795c594
SHA256379af030b83b53109a77b32fc4539aaf86e3344a1bb6736cb07029817c0b29ff
SHA5123f96202114c250a055afeafe6e81705e2bda16a0eb366ebf4319bcd181fa1a3fa0a234b94da084a0d0c8235049f832e235b0b0dff72c3e9f09c8c6539fd03214
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a