Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
11/05/2024, 06:25
Static task
static1
Behavioral task
behavioral1
Sample
33318cdd08d9074674616d4a61d27844_JaffaCakes118.html
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
33318cdd08d9074674616d4a61d27844_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
33318cdd08d9074674616d4a61d27844_JaffaCakes118.html
-
Size
3KB
-
MD5
33318cdd08d9074674616d4a61d27844
-
SHA1
2405681369f3e24d2a2b80031ae45173dee42860
-
SHA256
934b325eee531d97122e6880846d4bd7f24fda10207de6b1381d5bb7e0f59a5c
-
SHA512
ed006f7cb96b03e2a4588d5dba395f3f7cda21d6bf67720f734dc658a1ca278e4fe57a33f20ef94a9e1c85ed88406b91c4c4749f6c2312c13c0bf162ca2ef6d9
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 80e429216ca3da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4C95D3E1-0F5F-11EF-9486-4AD8236FB259} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d1000000000200000000001066000000010000200000006aace7a3f8b1cefbece65fdeaa30720997807f36a503f530014b912be88f6f98000000000e8000000002000020000000a6649b8e99bac76e86d988591a75c137a4be69e3048472402c50f36f125b40a120000000652796df966d5eed66fd89d080bafdceab56a3092d82e7ae9b8de49d9dc8472940000000fea8f0d21f7323e35391e56f19c91b37594278adfbc6c9d036ecef3d8213a163b6b1b9d36b32b0779a86f32f6738e6ad1963f535b1d28459c85f0235ae5a6ba0 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421570612" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1028 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1028 iexplore.exe 1028 iexplore.exe 1732 IEXPLORE.EXE 1732 IEXPLORE.EXE 1732 IEXPLORE.EXE 1732 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1028 wrote to memory of 1732 1028 iexplore.exe 28 PID 1028 wrote to memory of 1732 1028 iexplore.exe 28 PID 1028 wrote to memory of 1732 1028 iexplore.exe 28 PID 1028 wrote to memory of 1732 1028 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\33318cdd08d9074674616d4a61d27844_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1028 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1028 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1732
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD524f01c3ea13ea323b08fa83ed22458e8
SHA112fde33c0b68c6b6c74ab9cd79996fbf6a6a8156
SHA2560693adce2d49046df57d896004fe12e18aff336d93231df204ba68e19ff9f74e
SHA512bd82652d34509f1f10c2d724b3148ea9c4e24fcb6c7bc6dadcd4f1d0586c8a7f34756c47c7634a613017d2c82b1941e2442a80778afd4a922a24d56db805fb57
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b99b9f57332a37123c5763c9219b44fc
SHA1096c9b9b0a2860af10b3b68d6b86977da2be0ea5
SHA256d557c1185b6c0188d44943255001e5c3b2ada0b2248a84683350bff80a7283fe
SHA512e998b7e3735074d3be441dcaf996f8043652ec65b959424ce67b79a2502974b9f47f3cf8ec7bb038a227e351b4b04a5c5f4ea56335bb9cd6595a06570e5343c0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ff06d57046ba52af6fb59cc8f655049f
SHA193ef51690508fdf46cd688533ad4a9863d8d8c45
SHA256cbe4a74a8dae8ffae232e6f8977a4f7637b4b264624f83f19480940d48a3a82b
SHA5121240c2452ef48615eba60812363a6d7a9f7da2355e0273bfd805fb59ab10c7e1e41b1dfec9c9fd6d7eb5741a18e1e339fa35e21e508fcadf16f776d39ce55ec5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD594ba6c4af492f672462fec0df7f6b49a
SHA11c64e2142e39109cf8c1ae305860b517107cf778
SHA2560bb534b09ac6430d59f8f391334971e8966c2a0e0a1b1bc9395b9ea2844c4f12
SHA512b95c64aecc5bf38014d458479d77b4f0272d419bb742e418d61da0b05a7062d4a60350a513be42f0189b462b56a04b2d1a5289c756a97505ae1af15a524ef21f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5be47ae3f2e61bff7fb53e97404f670dd
SHA1c03885979fe6f81e7b3e00f612689bf8b8297d21
SHA256d62afc4b05e3415339c59c3eb94e9dfa37dc1b638e3e65fb35b70364db824a52
SHA5121b1324f9e58c9a3c9d47a2b59ce87498a648c3ae85206aa6a4b804bc6e164df5f1c4094ae890ff5af2fc086021c97c3aa21bd0214b744936c174f6495c238785
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56a2af176bbb33887cfb386dbe2f34fe3
SHA188f61bdeb05148c12a35e16509f0b8d13c862601
SHA256c37d148767374883fb536b05f95c0eab13a143e74d12d1bbe799d0879b433483
SHA51207d4ae7ded1d84f3c99461c3eba8b982048ac974babfb0415ff5d64ba544468ab5545412918aefccc3223cc51dc41f8d59d7c3dcd64640e992b4a8204d8f519d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5289869741ad25be93055c442f0198e80
SHA1e56dffa54df494e75403115e606961953cfb1e7f
SHA256d25f2f8946c4b97b1f33910e3b3e502bb89782787304d745a724fffb06a8112f
SHA512baa4574246891a4e3693729eef5148849a83b5f350b422b6faa323c5bfc751d8200a6415763921cff284b45a8e285fab45b6b872781eaa99ee9af99eac6f30b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57e00abd6cb67516a34ccc0376ba10a20
SHA1a7e5281e55c2eeefd31c86f6bdf797f7f729922a
SHA256449356b962c88547582d96bdc019a3ceeadcdbee39ae1b0d2d983497d4c2c640
SHA512f7792a4bdafc092899dac8b83ce0f553e87e8122daa84db4c446365ee44102ca5c0b01e487bc8d601dd4ca033846eb77c3d7a3f972b1733373bd7c1a410fd540
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52afa90e787e651c54cd63d1be791927d
SHA18d3200ede4b894e451d75f4037042c315d832a58
SHA25605831226b8ea00440cf9a7e1331955f060c6cdaa71ea004538dc2b1cc7e6acf0
SHA512ff1cc4cdc3940660105d3c9b746a631395fcc149cdb0d13f1cb9c20f2f7beea77bd40883cb9197b6efb8538c1a189df3a3e23b506e7cbe0ea7b608b32b5f615b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54498590bf904b5be88899a5b1715e413
SHA1ea9bd416a53ff2bc225c18e4e2a1440e15f7a1a8
SHA25666d4fcb49f570881929241834e194b45206ed233ee236fe5cfbc5f95cfd23ca0
SHA51225b977ec01e261a33143232cbaa2f04ad067eefe84a1c3b3b7b135ac5c8ffbaf6853c301e62204f9182136a780b25a049dd8539d03039524c71d68aeb5117a9d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e9a5a4d8c690a174be509de752c12628
SHA1d2ca7fe15c0bc300f4f63c75a51359e28e7327db
SHA25663bb0c163d5e49d83ae4758c4c5e0ae8723a53652cb661189214702b4d461964
SHA5125f03398e23004d63fa91b4ecc2aed10171d54a975d8b6f098f792209ce7fbb230b9d027ebf3afc59ccac3c7fca65342325458c51aa84beec22688029935b04e7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58eb619da2f70a51a4d3ecfb969980d9e
SHA1f7c044445c38c2ba821830fe4d85cfaf0ec7156d
SHA256dfb89ca53b4b8e7c84ec87dd32854af42751da85d14bd1b2a14a8f1fba695320
SHA51288cf521a249663533ca3dbd48a53491fec6a6d17e2269fd1a67f4a34a6d91c75534ade0cad549e3beb407489568f4276d97686e1d3a56231d89642b31cc39577
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD555ab4a6869e28978d21782d42ee0949e
SHA182e44c905fd7dc1ae7698671d868c073c3bc5958
SHA256fe217c596aa256ea394d09f496115181433c23e48a315c6d5ad4dbc954afab58
SHA5121ae1df9678c9c986c504e806c7db7c924f9ff195ea639ec0cba6642982eb50eba11479fb92aa7b22111b7cfd0757453108fc5e0c33bc01a88c1759da1dd8d146
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c0e41bf4b8a69c9fa9fd14ff20466149
SHA1e85f58f67c08cafad885ba3a55c4c58f521d9d7e
SHA256c42c4ae8f21a2d38c080c464b3aeb87c8b83f6e6b462fc6e6135076049e68329
SHA512e43c35f4d4408045f64b9f317ac8b72b4dbed633093fc7739461fd4b02183c5b15365141e737b1209b68930188a3bacc5df4c4d7219f7a1c610c0b1d59f546b9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD591b2109ca49a854d434f76d6addbfa76
SHA12705353aa216d93bb9aea26de8c5abdd561d20d3
SHA256f120750523b73ad3838d08f75b94e962fa5e42f889713891243e7d1cb62e2ad5
SHA512e1a6cc850ae9268ebbf4b4d0d42b2c01466664b554f79da959d55503addd9af9388107d9ae0533e49c7df411261860af397327b0ab11196e74c5c9d32fe6ffed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ee23260ab7acc6fea61bc05d3d7eaf41
SHA19d775991fdcc4537830c0a7e54e802825fe99167
SHA2568f5aaa0b8243424d2026ca967eddf709460c7652fcc2132df7b25919406487fc
SHA512d80d8251899f57652908b70b2990165119ca5db4b1e5cb8f79aad895758b4610728d5bbeff9d770a6643fa64b74486ff4b56e05079589563c6d2b8e077a56dda
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52becacb8b5717337ac1a879f5da3fc29
SHA1539f224cba79792da97258c1cfd853846ea2f80b
SHA25648c87b81c38c59f603e395ca74f7ad2673f61c88636322e4ed5f860e82ba3784
SHA5120b3e14059932d73b05988b2f9ebc8449ffbf3dd6e532c2522ae189bef73cfb6d23daab6049f19d98d564140af7cb24c4ae8ee23f3b54fbcf6ef098467cbc6b8e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f160370753ca82ed8b4563bc5d0435b4
SHA146bfe9ec9858ff58b48b2e6d94aae5fe79b1bb79
SHA25681dcfc32b2b5540464fe24bf91ca88ded222c482ecf79780737a06f2a9bdadc6
SHA5125382c4b2244f38328f588d2864b6ba588f77baa31becf6ee7679caff87ee0ab72525c0c368fdc3518cb99ff6e03a1146daf5a93030903917107c42fd8b548ba7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5099bb8e11e9cd39cbeafd585a5dbac93
SHA10b1ccb35d5618c08d65fa4753c2275bb5bf8404e
SHA256cce7542b84eb5caf463b791556ef1f317a5dc60a05782d241bffdb5f1116267a
SHA51221a6371ad11da41163c074a8504fbdc282cf446768c7b0772e5b14d786dbba439a5ae21e473e747d2ce43da4951aa065b1285c0325bf4db0964678ef445de646
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f88d72846afa9e6a052253a7fb00602c
SHA1e28d55c6f022db9347a93678602f4feaf8447428
SHA256b88450d6067ff42a330752614f087f77a591582f88997b78aad5abf710df40dc
SHA5129ad912d951ef460b1fd38332133de9bbd9f3b1d0bd79c9b5fe414bf8f20e10745fd5af2ce989828d4417ad42dbb0509174da76ddc501666942b3eb16f7af76cb
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a