Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
08/05/2024, 14:04
Static task
static1
Behavioral task
behavioral1
Sample
253076172f9c26f91bf2904d9d05182f_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
253076172f9c26f91bf2904d9d05182f_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
253076172f9c26f91bf2904d9d05182f_JaffaCakes118.html
-
Size
129KB
-
MD5
253076172f9c26f91bf2904d9d05182f
-
SHA1
64607256a15c5718c90f5194ab296ce494f9b284
-
SHA256
4d49c61008c5362749307ca5c7ed9a678c1cf58ff2ac7114c833912e39b3451c
-
SHA512
b8acdeca98d9e9fc87ac09285e1748b7a0c6312918501345f9672f6ca2d32c0abc4068be28fde06808afcfe61b513b01da4358aa7dae6c2a16645986b661b08d
-
SSDEEP
1536:CGv1kyXBVy9OoEyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrk:C0KIk9OXyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc23300000000020000000000106600000001000020000000ff0fbbf70959182ab08d178e04677453977c47b5b29d9303d2964a034a19a2e7000000000e8000000002000020000000ecb1899d5ad000abbd0827c33f20dd7c301130ed2b8c220491d9e24093893446200000007ce1838771a884684d8af63a1e19a4df9bb503a339f3bd62b99701830fe48d7f400000000358fdadd4122d17aa6d43ea122a56af2d9bfb5b0147f4f85ac0dfa2b0c8619a28f6ad98cf3817bde3fc39c4f635d361699f2d25e349e5d531f58edb47e35abb iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0bd42a950a1da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D49FFF41-0D43-11EF-A296-4A24C526E2E4} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421338913" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2268 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2268 iexplore.exe 2268 iexplore.exe 1984 IEXPLORE.EXE 1984 IEXPLORE.EXE 1984 IEXPLORE.EXE 1984 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2268 wrote to memory of 1984 2268 iexplore.exe 28 PID 2268 wrote to memory of 1984 2268 iexplore.exe 28 PID 2268 wrote to memory of 1984 2268 iexplore.exe 28 PID 2268 wrote to memory of 1984 2268 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\253076172f9c26f91bf2904d9d05182f_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2268 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2268 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1984
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d2cf12ba9f0abb1d4941998c048428c0
SHA1e96ed0eea219cc05076d7940a0735dba38a95b5f
SHA2562438efc752bc33ab931303faaa75eb6ff1fd5f9ef8e0202fb433802d3fe3538f
SHA512330bdd615b43e39472139b41afa1c08af712c3b427a04dc980d9961cd58912c57a8fe729baa9ebd891bce3be836a9c171d466f138dd69cc21053e1543af64f71
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD504566210387c9aa0dd57ae303f54d24c
SHA15a9c5a8d1ff974bc7a485837201495fe88ab9818
SHA2564994e67b03e5da1de401d112b6cb0da8367a9f71a263d8d7fa94927e11592f70
SHA5129e59fd9290f08a66500223c5d2f1de11522459058f07a8e28fb1a6d1154d40d8e0f9d245b5e80920ebd10c26d464859bb70ca5e85b519d870a5b1c7ff84a32aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d6212ace14b69c0c4d3bdd554e56218d
SHA18c13235901d1678b618fdddf8972fb476e7eb5f9
SHA25682e32a936b595dd41a371d511e7736b9546caa4f7080b98448fe311b2de7d1d8
SHA512115e730ad8c903e7d453842d729c8560ac4af82a63589123cfbcf7558b9557a636213d76e653b8c9320653e21226881830fae1b445c5d4d8a95a20c464ed6552
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD554213297f928cb5a795cf1435f22cc77
SHA1fdd82fbf95dd916d359e07d762c68e4256cc5ff5
SHA256dc9a6a1d26d8a4becf636adda3c04c124f7e77c0a2d2a349f069cf3a29738da3
SHA512424fa293f595aa6afb53aeb796f1b113c76a3f877ceb5e8c39e97e8613b7f782c510c05c72071ec5a75be3f4cda946d09368bb5b8dd41c0719913c92d9e8d0ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5503fe568e8bfadf1e385aa7573ee0a4a
SHA14bf95375639099cf49d071270fcca1af37767081
SHA2569fc5ac6103ea133848746ae67b2ac27b82465946c7bb44be3993d7c6d9eca4fe
SHA512181348019569f37cbe4c3cd72deb341b9c407adcf63a15d22197291c31c355d8302aa7358b694399f4547e5654187962e13c30a672027a3a3eb9a2552a94c6d9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53a65503d1c3e482c914fc4834acc3092
SHA114cef07015028acb9eccc506b7eb8f8621d71d0c
SHA256514eca9f90a4503fc7a87ee595061c238a23fbcf7f23c70c15d21765b3013680
SHA51261fd8bdab0419341bcc9d81bf1fd6f4689e050de92f3e45ea0da1d475c7093d38320ecc9cd77176fd786cea4cbc0daf47a08fbe3049638263a3b1ea1ea82e6fa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b2a4bd4fe849ee189367d21573f6cd6d
SHA1443d2fc596fe94153e56e5f0a6d55a3335aa8c7b
SHA2569e2795004255bda1cef9f8e75c7778f2fd4b2f7698b596f4fb4fd65901e4428e
SHA5122541c0a93002517764864154b4ff85ea878cd62bdb0f74360449cac4294aa019670ac064015e64f59a50485edd4f4224124b89b209b44ebf096f688f7876352d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD534344937ccf8346d57f9c44c1a4ee7a7
SHA13679099e8a43e36bf98e54d9a1ca9e6916ab1453
SHA256be04196a5b25a3b66f2d7c928c4b747774493cfe65aee4330b7364de3f1d66a2
SHA5126ee5816e575da44f764feffd3d6988aae2c9e3e2e9be9279bc7a53be1494b0270be7aefe5469aea27fc8e01d73f92304c2d23b6d93a7a9a5d784de200b70abfa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD590e14906d5ba17c682e86c48d45e70b6
SHA145779c811a21912d84eed43be2d4d23073d08be5
SHA2561694d32beb8c4784f073143b6736ce7cfe1949c6699ff027c3ee29dcec7d6ff6
SHA512522e1c0afb8427213eff88d2751e142dbfb79fb57dae0857e151b396104433cfa7e74cf8f0c59bcbcc053fa038e85c1a8e4cd78b493b741f0539071082b2f803
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5594aeab044b3d48ca2b5c0a292d0a1fa
SHA1de12c2bad66a9d633e33248650e22471c23be263
SHA2566d5b535614b55857583ae72015fdd9461ef8ac22187993700254ffbb3e579c32
SHA512c3884daa5afc1dd84ce2ff6dbe83229d25f411126176340f99f7c4972a15fdc26c12c6192422440019bda024ea80f360fdd522f3db8c8a82a86e8d3bc6742a80
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD514ff28c3850c68ff29b52ccfb508209e
SHA13309f3601249cd4c299059959c93ae7fdac2fcb8
SHA25682ec38f666bfdb215bea830e09b901e09c334d2a56af37ed044721cbbbe5a5bc
SHA512cd480b3ed8cf5c4e2631bcaa78816d9a5fa0a46f8f62ecb74312b925f787fb7486a3620f5e9130ec6ff4bfb1d3b6dcc7ad7536fa57ec2694db0c6a0ee12dcdc1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD521d4fe51e6de8561c1d1d5e24d52aac7
SHA1696df3ed952241b2c3abe3cc5e3478af61ac44a4
SHA2562345db2aede1932c35f55c0133d3e6cee065eef052726691dbb0e8b269581262
SHA5129f66204ec090f5e81d357fcd04cb0afd0108c9f04041a56228fd16ab62f03b6a01bf35e73401d6552356007552d0dac7664087d7e225a174c2d46f0cc2529afb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52e01d47dd02150d89b3b65f05dc4a66c
SHA1f5cf282bb927ef8f52aeb2c49ed2a58a8d8009fe
SHA256e0e408bcc3146002d7c545550494fd156d35cb4d09aba0bc13a9c88936cc01d3
SHA512ba9d26e4929f6847f87e4409e8d42eead0b4f2c283ee7a6f0739abb8b97b02c92530e8d32a798cc2d080bc00c8837b3e1342347e638392abb42d58e7b53e2a2a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD598020af1a4f677c3beeb5ccce024e052
SHA1357e7922985b4227c3988a0fd02627aa7a8985e7
SHA256fffd6d436b9486ff585a8a46b232b9c5d9c2a1d116f8f640a6ba9ee631bae40a
SHA51258d8e71bf014271fcf47be3d50ec8ebe76e745846eeef8b05ae0d1ae34b11b0ecc0668bf5d98756b0a6235a697ca37012a3339b083de7a7a57bb510cede598aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50303721ff5cf5a781fde8f5615211e28
SHA1594a2e26b5a6e59d7a57cc9d8088c1d177da8a41
SHA2564888f7b2eddccb006bf230bad21eece4367efd8d12934953b9ffa079607e1079
SHA5124e8f5fca4a2059f693fc2f100dfac822c9eb1e7e69c73605b85315850dbcb77829b67016abd626cb9a8b5eee039aabb0a220e8cdf322ecc8e09c144016de5056
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c09901ff564968d33e5f2cb9e5a9d8fb
SHA1a80f4e973e9aedcd86818dd18d5865a421b19717
SHA2562201337a9ecfbd24b8fefdbfc2dace830be803fbd9fa1796ca6cd2c5a5fd6c25
SHA5124d8c37220a331ee443af868e3e5627cd461b95ffdb800146c58ccc832289f3757c46e6bba7ab030f5009128d4ba5d275ad491a6a6d13fe7d12d11aa273155ba5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bcd71e8cfc4dd00fb6cfb7b09f0cc4b9
SHA1032d7844c8d7c2caca1c9376085a23aee749b2d4
SHA256d939fec240a8455a4235d575e0bd313494960e35b7dcb16b95d375d78dbd5cf2
SHA5125c2c4b8e294ac95cc2097cbc3c6c3e74880b9301d1408b3d88c790f028032ab1b3bb9520da3fa31d4233e638fd5f10f7d7a4d9fea7920e346df2959d9a4a6e48
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a