Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
10/05/2024, 18:59
Static task
static1
Behavioral task
behavioral1
Sample
309079db6f1438da87fbdf1cd6a26ec9_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
309079db6f1438da87fbdf1cd6a26ec9_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
309079db6f1438da87fbdf1cd6a26ec9_JaffaCakes118.html
-
Size
16KB
-
MD5
309079db6f1438da87fbdf1cd6a26ec9
-
SHA1
2fe29328f71753db8c2bef2e83ecee4896e673c6
-
SHA256
b38171dcfc4114e44021e2b72de46dc635f42decf8430e901e85cd27e33069ef
-
SHA512
25020d9b3f60bcc454f48df1ecf46562e4a3360bb5b8adb7bcc686f9b475af42ef5c692f564f194ac909c16547f84a66bc6d74389062d437fc20aab869b69103
-
SSDEEP
384:Sf5Kni5XHuf2ef4V4TxIDloRDmTeDmdkrJW3:Sf5KnixHuu24axIDlKSWW3
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a230000000002000000000010660000000100002000000010e05c5659b41ea7dfa46f6ebde924b188464950f7ced2236e1d47dc553edd29000000000e8000000002000020000000a46909cb685b04e3dbaddc545aba3acc9718df570bab24d9f600cfd5236f80c620000000291a7315f88606091f27917089ad13f67b9bcbfaa6256fddf4febd8fd316ae0b40000000a6cdd2d6e0fbf3d6b31473704fb53ec8ff78a42410c70d828989628eded4d4a3923665cd6ca9bdfcb19c8694bbbfe13aa8a0ad2782ebc8097e079a41f22df655 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{7888F691-0EFF-11EF-8F47-7A4B76010719} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421529455" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 80ef794e0ca3da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1744 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1744 iexplore.exe 1744 iexplore.exe 2996 IEXPLORE.EXE 2996 IEXPLORE.EXE 2996 IEXPLORE.EXE 2996 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1744 wrote to memory of 2996 1744 iexplore.exe 28 PID 1744 wrote to memory of 2996 1744 iexplore.exe 28 PID 1744 wrote to memory of 2996 1744 iexplore.exe 28 PID 1744 wrote to memory of 2996 1744 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\309079db6f1438da87fbdf1cd6a26ec9_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1744 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1744 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2996
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50053912a14ebc72428eccdca7c69cc38
SHA12e058a6d9cf4898b322a28e54cb8e2259034c878
SHA25651a5b801193273d30679bea5968efeb4b3904023b513f162941c236f685439b0
SHA5127518d5026cf6373bb9ce6a9f9bd398e6625438766c17310ffc562339a88f2437ee004a15dcd155f7118c4cfcae2d937fa6fda0d32c92de53a09ad8ff6ff912a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cd0be2d93a7ee77424c871cf9b8fdf3b
SHA15b1d7fefcf10af33c4f0f7ab7eef1b3918b3b7e1
SHA256b5c3d195eff315d7b9993c05cb4433de19014b63f0bd7eadc9215a984739392a
SHA5128d05a5f774521544637dfb58345ee64a1613f996a1ec5a8a960c70e0bbeb5b90d741719cf13bcadd1f000ecd0a25b88d14efadd1d00b6e397cdadcee78d0fff1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56e71350c9e266877cfe290f79702a7f2
SHA1506d327b716096a0b34eddfaf259feed4144f956
SHA256761b862b5b554808f93ed9b6ce0b3c996774d57c65204e410bb5e55ad9fdad89
SHA512539d4f823ece30a404da00a222fa9fab46bab87ab6d60b3e8caaf561be97f3f1f0d49d279b605f8cf09ccf8e67083542cd2f3f7131f787482f17aa506ebf9e5c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aeaa2b82e75bc08c7cdeca8a2bd39014
SHA18c270bfcaeed3c96cc4f87cf5916fe8b712c553c
SHA25623cc6d15366461f443af8e4e4a76a1e397159797a25063f2bd33c0062d350b23
SHA5129909cae01407ac226ff50a72bedccc51ddca919189e6b163a742f02d39b6c2f4de459294faab50a079e6cf747f831eb57c65359363364a9f93dbfb2e5755340c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5856eb49300cce3cc778cbec9f9b1f8fe
SHA1ddd933b65ea567e4b81ab647091a9e67560c8792
SHA25666b1f9378b87df7a9c4d7b75a8018e5e46c0ab739b694b9ee3914ffc69307712
SHA512132d763a3f305ad5cc0e17e042fdda15a090879aaca54909726ea3afa41cec0cbad8e67b5e621645c7762445ec88430ddbd5f80b6f05f09ffdec99c19a9de573
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ae64f164364dcad3fa9d2276a2b87bad
SHA1f4ea2e24518014624c8877d0becc56b37a6e9cf5
SHA256221a72d4b1be32d4f49099b0d07d2f63f467be174cdd462f62a8793e80419cc9
SHA51267fbbd3df0ebec7e78678a55c1386f866e4665fedef0f24fe180ba9e7e4a35586a49a5e1b15c817d27d2e11b439fa9a29cae7a2b061990dcf3cbbc4aacb1db2c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59d87609686a5b3e185c95fd8d2d8d31e
SHA1a58c23bf2972ee3b812a5ef3dffadff88116a4fe
SHA256c31c8f1f9323e23be02adb4c71f4ea805b0c8f3098e0d06833e31f53c6c088da
SHA51204f2c60b6aa254e60a6720bd2ce28000df5785bd95a9a46d784a32536ac36d00fb551ecc96a81b8f886b1f171fe4570b4c00adb872e7e92d200d90263b0a27d9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55262cd81e0c7026e55963eab549fb938
SHA1e4f4e75e4db9d10ac30799f3b3fcc20178b6d737
SHA256ff2a2a5746952907ccd28fe5d53762459253885814efc51b802c8c6e3b87136b
SHA5127f44fec9dfbdf033be95c23832541baeb97a961f4e10cccca0b294ed9468109064e98834072c006d4b6ac4990b0da6d4e9528c5dd2ac825945403fa24cd74314
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d87eb31ecc85fe62635d1a6e38d7a4b6
SHA15cd5e276f539368813586a332b1e72a27960fde8
SHA256b3f5caa3e3b2b549c3aa2c156abba63e8d9440c8c24f0b31e957c3337de70d0e
SHA512f22d8258ab075fd0cab10358c8ab20d5ad0ab9e0916dd1aaf2dd85c9adccc8d70a051ab0903fa85d87be82545b38480dc7ba49e8e76e6a2adfa523d76c8933de
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bcacbc0e58e21f7d48a44c035c8a9dda
SHA1d1d4bd98854ac010d8a4427789c6dcfbe6098c3b
SHA256d0089ff23537ce2763c6e71b97721ece22e190578cbb0da09c61b431521d4edb
SHA512c541fbef233fe8c7e0e26206ddd1315c0770e857be8cbb902276997a551c533fb4d3e2f36e21e8595c7efed189b899f192a6babe391c4c3ac9c60b2c673e11ea
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5350129fe43a1941e412c98cb2aed8ac8
SHA1a54c7d39ba77c841140e7868f178f3ce542a20c4
SHA2563bb4223ff6472a82dcc97071604c82759a0fb0ac0e9bff1b3bd7d6e3cf63db51
SHA512a987f1ed2ae18ca573c600db94f318ba22c2f9040bf208ad14db0b051f675e6f7cff914cc5825bf968d4ff62333c572775dbb79dcb4586a8705a0d422a736591
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58bd323e2afc8d15e967646d08ddd434f
SHA1629c8d6e84d3b5c3292f4daf1086a437d33fb077
SHA2569d0126ea165eab7aede017cc7f4f837bc69bfcc8f87db047e918eea7a497034c
SHA51265b65bb8a071de43815aa129882f2d2b5402fdbbc4161477185d4e2307a6492cbdd18180bdd4864981641cc115e175254758d4d872b901535122282fadb45ddb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51437954beafe4f68000c640e9dcf4867
SHA1a06092a1a0e8eef5ec5f81b3f19b38c5e3032fc2
SHA256ef3b469c9c2c6e15794e5cde247e8e8146e5ebf18a18412b2ddda35d8b1f4f73
SHA51286acc89e3824e14b10e607a79ccd19623cfb709915cd683b71a091cc9eccf437357235541cbf11c73b69e1070cc954ad96b851f5aa2558dc5e43cd9515cfd1e0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD558347cc603731d13f429b57ec6a773ea
SHA12c01c2fd833ff0d8c1440bd818f14205a4122414
SHA256b7069e785b2c24cfaa73930aa2b44366c7ba145d9cbad7ab63800b690fb45e51
SHA5124a80e0663b0d0aa0b01c868341a59d0487c10e1f89c31424a00aa92c804dc6fe4a665889d7332b246dde8d8c45d52326d23edf8a8be420bd16337fac880561d1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD579f3fdb125467a174d5a75d0247d90de
SHA17ef056b092f89b0444245ca9b6e7c6c2339524b6
SHA2564d964363c716059ab736ab468ed49f411a4a2455a1ed54d920c83ee11dfea275
SHA512b7d5150029fc8de9e769efbb2736db112bb3ab2e90fbd48120a5b444ed26d202bd6a066a6a15d0455d4d99577abfb60b00ff856dafe02432f1ca06c8e1349f38
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a0bd18bbc2c5f95b0a9c7e8eb298321c
SHA12991d92be113608708d3d0b267cc183697f54288
SHA256b1841a38127bc825fa71c5628f274898d012559c585aa9866ce68276458e20f1
SHA5121d8e46737aa2567df5fd25407e3518c5cf9ce2e7824b865fc5c40c279cdf5adeb180a1766457f7bf9d714c9aa2b3a0cd4f38204d23613ce2228f4ec932cf71f7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bfe1f67c750e43663a997ad313052dd5
SHA1382f6f35e8497032794059c438c4d33c02ea6c91
SHA256a89c840492f6a773909372eccd0b44c052e3c3540125ebb7accdf5f1f13b12b1
SHA5123e0766423c2acbecce9945044d6ac6ed3dbaa90de1b3f61afb458dfe9530921cb34c51738bc0e27a511bbc9faf3cf5399cf07e8d486aa35b1f3471ed45292418
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a8d2da6a0c0a8d2364ef04dc7e5709b1
SHA1dafe5c62cff4c42601e680f9be50df8dbcba492b
SHA256d6a9c09e21f12a7e69cfa7619df5b12b34dd05990e9363fa13c3cc24dd2ff96b
SHA51232e227c79f46d82409160c2d017eeb6dbb43a92151d2581b3a382916350e195054a62c0f6dfca792baf48c7d4878ee72b4d9975ba6f6a5197bdd1935c1259169
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a