Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10/05/2024, 01:49
Static task
static1
Behavioral task
behavioral1
Sample
2cc1c3a9be5ef4be2a04c4c33704c0de_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2cc1c3a9be5ef4be2a04c4c33704c0de_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
2cc1c3a9be5ef4be2a04c4c33704c0de_JaffaCakes118.html
-
Size
75KB
-
MD5
2cc1c3a9be5ef4be2a04c4c33704c0de
-
SHA1
3fff9ae3539277191953f74271879dd23fa4366a
-
SHA256
8c59d7fd287873575d17436472c948905657e2c59a5cc9b0a5474fcde56c6445
-
SHA512
ec9f68fb2977df8a3e46ee118b9533b58dfd2ca872265df7274e9eba4ebb93a37a49392805c982a18273d2e8bede88ccaf844372354f1dda5d019378a8508a3a
-
SSDEEP
1536:JubYh5uV6QfR6I+v/TzNen0tbrga94hcuNnQC:JGYh5ukQfQI+v/TzNUq4hcuZX
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b000000000200000000001066000000010000200000008bdd573d75beb7a3e423c4575a2096c214bcfb00f989e14bb24f6f8eafd5b299000000000e80000000020000200000001f98faca779b0bbf1907e74b52c7cdb7efb24394adb809eafdcd30292367494620000000907a4c7d1f7f26be85390e9583741d5c14240104231107fd1b0ce3108dd84013400000008afcbb59b5a88cc1c60524c6448016405d9f70d51107db05f496dca4399ad800d663aaa227f86cb7b54931aa50f42359f5c7cd0332cc19db0db2b8c4f9cdc76f iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421467654" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 700b6a6a7ca2da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{93980151-0E6F-11EF-9511-66DD11CD6629} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2008 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2008 iexplore.exe 2008 iexplore.exe 2236 IEXPLORE.EXE 2236 IEXPLORE.EXE 2236 IEXPLORE.EXE 2236 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2008 wrote to memory of 2236 2008 iexplore.exe 28 PID 2008 wrote to memory of 2236 2008 iexplore.exe 28 PID 2008 wrote to memory of 2236 2008 iexplore.exe 28 PID 2008 wrote to memory of 2236 2008 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2cc1c3a9be5ef4be2a04c4c33704c0de_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2008 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2236
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53f13ca791c7d579a1b1c4ea4dd037a46
SHA1f566ff140a9abb0a2b0f57ccc3b1e5869d732050
SHA256aad46fe321b4aebfdcabcb3fc6c4a790b3e23b26fc23177b48c4fc8896f32a0f
SHA5129ad95a4588750f6600de76162c68c212fd5766672d83abea93928c35e2e45f839e0f89a15851d0d712fcc7fd263793250254f1b051010f495ca40dc5889897bb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b43ba980637c6d8112d18b2a8d24c9dc
SHA14e214cb410199bac2d89d332c069434d7194f553
SHA256879ce18efb087c662fa0de665f1feebdaf9e1eeddfddd20075cb3830acd45269
SHA512ad08c3db6e64e8a351495280d995fb124b0b202d0ec45d8eacab3059d9c3b114e27b96ca669de2017c64566d2bdc344fb9e9a513e2beb9d6a9215114dcf2ff44
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a15ca43ba5b3c26dc51bee86d7b3e417
SHA1f98882bdf85e4d312e7b04cd0372f587eab39c67
SHA256da3963429a0042cd17c5744cd877ad85ce8ec644875fd0b002c2260bbd522e5f
SHA5125b41d9642dbe954f5e30ee8bd9b6aa20f41eb5dc68b7477efc60b8d769aab80a1009d998e6a6a94783593e419e833b23fc63c8ffc3fc8b2bcb150e53925ae345
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e3516fbfeb9f1b1e288ad8f9cce58ba9
SHA11447d1c41858a41869d580479dbd81af00a10f6a
SHA2568c07ccb0e776b6b3aad41c1ab4f9d712e48038b09545fa4db64a3e159b965e0f
SHA51294ef7595d1465121128754430388736764847d354044beb94429024d834492c592b8f569d7e9c9ab111641edb0777156188b616c2fda8047948532be4e53217d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5402d9a1c135a84c5c0c3dd499739de96
SHA18850d14f07b64bc78f627f0c8e1128c3fe650e70
SHA2569b137bc3e5519f30219c63ce6d99a51461ee9397e9c959b52c55d90f6885e386
SHA512adbd1bdeb71dbd0b76f760513c2da0781a3a432e37db16362a39eaa31fd6f9e00c8e8dd5675fffcdaeb001dd9b8d3b74a6bb80fa8ead10938e5a2c949f63d81d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a2ba7e808800e9f60fa89ec07935bb99
SHA14b22df947e617878b28e21e70527859fe8f9b608
SHA256f9025814bcffb6a38e473d6603557ad720f1db12dcc48dfe3b5fcc76d4353498
SHA5121cf8a1fad7553f3984b5b4cf657754bd0d31e26a45deb5d8c52e18e0a1b23459854d5c7b649ad2acdc8cca9cda5767b96ae55435ccc2c2bb72a0da4ea045c8f0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5faace738a2b1701249e72fbb3ab032d2
SHA1b5efe3fc9372e89f7cc22f007d76367e6574ec74
SHA2564f21a393a13536a2ac666395761a857046ce33075bfe5f4065051d8e732807d4
SHA512d6d6a2ae257b6d200c7ea8ea06920f3ab6ae0c9097c59a5d23325e22b69f25314c85b6cffb6320f73d8544c0bcadeaa9034063e417dc694834128c6498c57740
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD541f7f0c17091f56cd71c67399d2517f0
SHA13b2674adb0784b2f9f2cbee539c167374d7acc6f
SHA256ca32364e4eced11db627c91445edfb4461f4d708f9827b5cae9e6bb39039bcb6
SHA51258272feb236875de20b6e549991207878fed874c360698ae0a3bd195a27f359cdf5a4816d48cd8dc060363ddb32770d2f0b6edf32f06f48f638f7ac2602d5675
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58b2a06061c2830e465e30bec2b40b9a0
SHA1757edc357fabfc2a1b8fea23d0a7a0f95c71455e
SHA2565e3d1aa160bcd439cc14660c6272e64711fad59601ef37bfc3fbda006f65bb4d
SHA512684ff1547539d2246ec17f0c30d6d8def0023444f234b662802e58fb18530b3200c2a8d59eccad157d30338eb588b8a671a32ad6bce6075374c6305c5bbd3139
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56adef9d3e51d0fee12324b2ec8fcb7a7
SHA13dd5fbd1f517e7857bbf5df6af043831c4c620b8
SHA256cd5261aff9ad679a969d0485d44a2de6e4ef58d8dd29bc2fe21b26f512f9e4b6
SHA512cc5e0796d3f1761c3985d14c2deb126393557c9ff7a8c986dc449905d3bf7a703158e7f5f5fd4dc80731ad87209dfd1aa2eba3e6219b4ddcbf7d66b475963b19
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD597a6a8477ebb6990288cbc3666586058
SHA18cc254d94f8574cb248192f6279131308ec55344
SHA25663ab27c94998d9e322206c95fc1b5c49b826a87bca25e902e73da216d1b54364
SHA5129fb4d588f1891d6f85c6cb65f7457caa7493c4a12c7391da8d1ecaa24e196b034d1587c4013c8c5fe01574c742bc5d57c6c2532162bb4fe4417bc373d29f5744
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD522bffb18845390555f1c47ecceec57e7
SHA1a1d230bcd966f4ebb0de98cc224dc310d728fc02
SHA256e96b044f07c8d071409b1b7347ff1e17469b3ab8ec1618ba89b5df4aa67988af
SHA51216e3f85099812403e49fdffd9b9c31745acd6cef60419550bf55a0be8e6df636a9a9460c30e90bd4b90b380ff5c346450b43e2803b74c39b2ae034f649ad9140
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5142ccd2d22b6471165d8ac88e4b6ae0c
SHA148d1caddf4f39f06b31b63b541386db89c38ddc2
SHA256e35f134fd05a262abbcc97eb62927b11bf3a4014cff910aead791646e84c4d09
SHA512fcd45413d127b89fe5ca68f0c134dc8b3e93890c1878f5328fbbdfc203005b82adc9ee42eb0fa6de9b8137334c79b969a321d766cb9c9f383aa248c656a91996
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51f427b803e68449809bdc7843321dd83
SHA1d041b37a5c521fac25218dd4fc7740833ee0f1fb
SHA2563d06d98826e126741f1e548886823d982ac54a4bc0ae3a58c596633b0ffb2052
SHA5129c433041738879ab272ccfb6cff79b6e0dfb46d9e8473f29a6b25eea3a84b58d634e80b8378d3b814fb687ede68265d38c7af6171f9986b513ec9888c87fa4f9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5080e2e4836cd8202822bb5b448641c41
SHA11ebdd2673328d4095c0e08ffd7bdef0743af465d
SHA2560df1329f861ab95824e3b165729a69143c1917991a9759da2a29f58cd3561734
SHA51284f3f025f638acc605d7d0b7e5f750a6f936d0b3f8b4aeaf427690c26d7ea34cb61eff51257f6bf74f0cc7d6eb299a6ad5d2714943fea5aa359923844ba64488
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51e249d8047d73f8c08e3b8bed54ff28a
SHA19b50f72070f512f3aea78cd22d346249c45e3eb1
SHA2563e8583bf19118e26c489c2353f3e44cbe56f3452b935b5cb819c0b9e09bacab4
SHA512e71afec2dc5963d25544f342e750562b210f89e391f5ead93147e4d2ba65bc01b127a73413dbdbabcee028d4a5443ff4703340e54099fe9834939b4ec492ea96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c90770f8444883485c50f145bd522da5
SHA1fdfce690ccf038d381e7d3b3e8e94b25e6b6a4b2
SHA2564ed33126329aea405bb8607e4ab8e62054c284cb52dcfaa272033e9c25f218cc
SHA51237251877802557d87da178d2feefab01334ca0e562d0e806c0e4ed44802150af0bda7851d801af43af25b813dd359ef3e00c01fb854bce3ffe8086f57d6ef81d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5df7cb98eae59d3724264c6b7fbc81d00
SHA11e455f91a02e4a25e2957b0e7ad38b2a5097b409
SHA2566308d6f54c70af789aed8600e7c836601050544b27f3c106f47998f49ba5a7f8
SHA5127e002adc88c378800a465b4b11863c91c894e17934a10e67c453357ff82d62dac59fe5e2c2cc80f2a613f3b16f96fe8c1b8cc2ff46108f01e191a7ba5acfdbc3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cb34b231468838e5d2fc53ec1a0bcd28
SHA1063eb3224fc7fa4f93f3ada3b073de07941e06f2
SHA256730ce95d0a85afdc11c0185967da403dd080f9cb46f54ef7f5584708540f7f01
SHA512afc8ad3c5635e2f41e848a9f3135359d16939bb4731bca07e41b06e014cec2afd82907cbce3e21eee5cfdc5e516e275fe2307c1804e55e0823924638a150fe68
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a