Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
07/05/2024, 16:55
Static task
static1
Behavioral task
behavioral1
Sample
211c897dec99a734c30af0f3564199be_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
211c897dec99a734c30af0f3564199be_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
211c897dec99a734c30af0f3564199be_JaffaCakes118.html
-
Size
4KB
-
MD5
211c897dec99a734c30af0f3564199be
-
SHA1
608b1e3c2f9ec80c53b405bd576d81391c09e409
-
SHA256
512903bd9f1cfb4b844c6e01c53820394f164393a13d0098a37ac4c2e762ce67
-
SHA512
ed14cf16845a365e613feefc0db8cd16776f61f1a7894a4422522c5061d6abbf65b366c405a8de5ffaa67063acc8c2e2abf51feefacea0f4eb9ac853df7197d9
-
SSDEEP
96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8ohPed:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDd
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421262791" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc23300000000020000000000106600000001000020000000f2473771b0227e894f9b85c64d25cf509b63eeaba1091162aba7e7a00bc10d53000000000e8000000002000020000000b163c857fa5dcfb016e0e373f974c494f21f901ec2861c6cfc514ed5e45c7fa820000000390996afe702469c02ad775eb52fcae80add0fec59e99daf3f689c5ab2bbf45e40000000e506c464dae8156bcd8d3ec0315034b7e7102273ff096242db9946c8b5a156b34cee59ca00080d449e7e60fcbb9e4fcd31a74a23fc14733728bb678b6dcd2611 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{985C8F01-0C92-11EF-A3F8-62949D229D16} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d092dc6c9fa0da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1992 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1992 iexplore.exe 1992 iexplore.exe 2556 IEXPLORE.EXE 2556 IEXPLORE.EXE 2556 IEXPLORE.EXE 2556 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1992 wrote to memory of 2556 1992 iexplore.exe 28 PID 1992 wrote to memory of 2556 1992 iexplore.exe 28 PID 1992 wrote to memory of 2556 1992 iexplore.exe 28 PID 1992 wrote to memory of 2556 1992 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\211c897dec99a734c30af0f3564199be_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1992 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1992 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2556
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD521bf56a111d1cbf538edfc69260063fc
SHA1c7801b5e1e4ea60bf10da35387ceeeb7a679e334
SHA25683efe4973e98b4cd5fe3fd321a6768d6bca9c5840ead6c129c6871989207c45d
SHA512f1778845959fcc101dea2ee44ddef5b1c3adb0983deacc2e5c27e4fecd78b4295d926f91efe12df0bb0e9ded72ce747147bb3751940038251c56552a96605738
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53424c5c171ae1e6836f30e4ba648d6fc
SHA112742da12aa9d219b40643cb0bdc78848d0f83da
SHA256ecfc7622b1c6eee8188d7751f50d3f3661aaef6738e24a2353ebc793185d0a98
SHA5124ff732faab8ffe721f7b4c23c305ada9bedd1163d4dd179a0485d33606d22bf68d23e6f8760db2edf5b92bb20ae5c7c12402749aeec23077d2be3eb0e56a1eba
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cc2128f7a483a6b2a21a4da9b482dca9
SHA102c8d40788ae04768acedb8f2c7dc7d9275af9da
SHA256fa7589f31a60fddf98640df8d78c31f625fe45f4272f1ec2624c04b964c955ca
SHA512621fc36be711b8350b2a8828b398f86bde28c463db8a6052afa9a451300b208384b0094d56dbf4cb6b109d720abfbcc73f9bad0bccd73188f60ae420c9f55a26
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53344ff2559e8c082af82a913240ca6d6
SHA15cc4ac5853c26402c9dd1b6078a0b34d443c8522
SHA2569ac80f4744702dab08e7031696dc3d083ccf9f676bfaa5442f995a7d662b43c8
SHA51295de81354d039de9c021e431e0ce2f8d3a0ded9b41a45b15c9df9722e3c62eb64ddeb9fbd03aeb005a23a66acf7f1891814c5dd488eedd37c1043f424eff760d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fd751782341424de0399d5080aaacd6c
SHA191fd83ca83f3b212fbfa211ced4af8d84a6fb765
SHA2566db768e8c1499f1dbef03fa10877089a67c670648dd08a4fbf12ba66bf616f47
SHA51210aae862b0be4f4b7c1f4d0e8b0b4b32cece0563f3d3360045ddc32470d79512a0d1abf80ebab7e084064ccd4f45a3ca24d957cd528bab3c8d0e1912dc783806
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD526bfe39b130a85b832b010aa4d267686
SHA1deccf439074ba9cb854a261f79f6b8f0637083b9
SHA256cdebeda240244d52450f4ddf4654faae173c447d7d5d9070c25079a9341a3954
SHA5121016863af50896cd163580cb213d0788bd83687ee09ce939b51af5465af9f6c0f878d4e797ebb2f193f177f2568b42bb6e0c92af3daa0d76e1be2d5aa2d858ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59a8f952afce54d30e710bad802f4841a
SHA1d391841b210152b39dbf0e16319eb7960210a225
SHA256a073564420c0f14523711ca9936032ea6a0df619190d9d1c8104cd42c9839b7b
SHA5123047c104c0b7a0ddeab51b0d800711c38f26e7710de58a4935d665b3918dd205c7c2b730ecff29155f9a28847384e05a80f21d5b6c56d9fc57ee083f9394fc21
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ad2c6e240b0965c502c1f8da1862b33c
SHA1471afc899f3789153919a48be4f3661b7fa376b3
SHA2563c37b2173ed631de4046b40d8ff6c8b9bc9b5df48362ca2dc694bbeda22ae47d
SHA5121934b060e62b88a6fe909c728e1af3702a2196662dbcb12f47570976473caef7b5ff6505f10c8961632b53bd49fff5c34de942d85a0ba90bce5f054ac3035350
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51ad645a54135918c2e867afd127c7449
SHA12b06256bc8e3077a0c95e61631400017f79c84b8
SHA256639fb3913041fbc870ace7f2080ae30c0a32ba0ff5d8be3c2da0c2470fce6f46
SHA51279450824d882a5b00bf2470800c1092e4a82289d7a6bf400f56bfadbe65b3f66d234126fa8d7fade4559b32b8852440ed4cc4e3265a4c81172e45b5d778935d0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58486faa2ca48ea681744f435449acc65
SHA17b2f40e9b443846cc8919c5626cd99f8873b6c84
SHA256ab855e795c394da689da407a31b658f7c95760d7c46af5821fa25804f8b396d6
SHA512718d8c55a435ad7358d4a3fb5630fe7ed17931ab418559f026ae98821473fb00bd7c09aec8b6e76a0aa8785c969009f9ee38a2fd746b64c171eaf04ff5a345fe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58616e2a18e3d2f322a6e2f8fade428cd
SHA1359b32ebaece91546647630426b830ee7c21251c
SHA2565027be393d2f07919878a8e4ddbe0729c568cdfd9bf05fd1c974ca62ce808eb6
SHA5128722002660b5387239b08598b1558a7c05394ab693e12dbc3dac8d800de38b229853fef3f19d586885c571c9e6de2c551e710d3bbe559f14d32ec65c082e21bb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5badc4d455de105ff7de71c1103b370d9
SHA18cabf849a4cd36eb24bc9cad39b98dc4caca9ad8
SHA2565634e0dacd3868896d912affe76ad2bbf074a65f456997adb573f3ab419f6fb0
SHA512766927226713ad547e7bfa05ba1925cf7d6f6c94ffc8419d6774adf611b3082ba0064182df8745c8cc18734e8f151b2f34b33ff2833e5289b537331e0d476b05
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51dfc66d184a32878fa310f7ef780b0a6
SHA1e99e01304332e3ca98fa9633912c1f8c504eb6a9
SHA2568004a8f453642b7cbea2367a94b087c095f4c1615ea38efa3ced942940726faa
SHA5120356817c3330f31dcc7e55d846bcf9adb0e96cd4388beb1b85dbb468acbe682688dadb4ebb9d33ce18d16d4fc16f484177b60f86c4849dbb0216ec9e3913e4ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dedd3040dc4f24149ca476388f9203f0
SHA1aa9c632578389efe789f73791b46fcfaabdeead2
SHA256ce1bccbe29ecbbef644fa3387fed478fd8580203ba94895f8b7f5ba193a70efc
SHA512130215a5595b87a35f5583294f996ad8e79712f12a8ea35327d9284dd8bad1daeea851d6fa1a9bd4f1e4a05ab83bfd1f21850f11af42b2994a6f2fb8fce077c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59a6314d2bf67a9b32a07a96646fa691f
SHA1207380ca5511e2b32f50376a8856eee5c63d3367
SHA256b22d37441c90e148ed0944f472bcd495938405f0e9364512530019d289d91cca
SHA5123a5cf7eff3067461f4e9f60f49b61510d267274ba53ad3025e232da473386e4a3ad26759f8786354539f40eb69dc27144e910dbc3d14e97943772c630832c5e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c5992ee090a1a77851ed768d350fa0df
SHA11f40d318de9ce8fcb3a6288d122cfcf14fe67bdf
SHA2568332e941d599ad631ae752f2c2a009cae893ece8fc650d9f49cd4576f227dff9
SHA512d06ca33c142ada14bc58317e7ef4f098706c589985edcda9d6edd3ce56dd8d555aa3c6e99db060c414ad2f7110c79b4eada3e7e4c937935df59931b2e8ed26fb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51ffa677268f8b63fe77e08fdc1443c49
SHA1f337e8f62806924b41187f88bf5a9f3e8b48368c
SHA2566c4b1fdd18f4634519fdf9a4322826a5f481858504c16e805fbf518ac61c7eb2
SHA512533451b26970591cf04e031f649e9f2293d2db17a948e0d82bedf131bc26f8b20c77c9de3d56b11e407c0c86e3398e2a218ee3c29bde37eb128311ec4da08b55
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e5d641049ebcdd7210fc447b668a7fa1
SHA1e3fda94736a953ca12e58ee3d66f50d9aabc75be
SHA2564f464697c5646c31369d16a6c1a2a380e066ea5e26b7b0b6c9e7aa7901d74b00
SHA51244107616a648919dab0afd8de5b343cb2e97f7cee02cb82f07afeedc5e7af78455ec12f7b6424012b8422a84db5fe863caf0d4b5c71ccb0818c159fcd0eba33b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53afce02e12929bd8ddc3c6cdb0590554
SHA14fe43d35f8eeeea48c027bf4b86b37d2b2e7f504
SHA2562055ca4b135c9a72b82649682b56863aa67d27902e1dfeb440a1eea7a1c6220f
SHA512224896b90213f4cbe209faed63a73019e2c53ba88fdf70b2e00949e59c94aa9480840f16c2b249b46f19eae07804786f36c184ea1ddbf4cbe61b916c671b17e4
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a