Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 00:29
Static task
static1
Behavioral task
behavioral1
Sample
37506efef3aaa2b19c85ee039a9be1f3_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
37506efef3aaa2b19c85ee039a9be1f3_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
37506efef3aaa2b19c85ee039a9be1f3_JaffaCakes118.html
-
Size
41KB
-
MD5
37506efef3aaa2b19c85ee039a9be1f3
-
SHA1
f627b3c2807eb668f98e6cfba69100993615b459
-
SHA256
f1f738ee5fdc51e1ff8b6ba0a5ab650ecb7eaac5831fa270fbc1759b6d990c81
-
SHA512
77cce6ce85bad8fed92c054a69351f934640254bc91e13683618e75d567eb4f83044e95ed7532447b1531b242ff3fa6a153f69fab15855e0019c7d4371ffe70f
-
SSDEEP
192:uw7Ob5nSprnQjxn5Q/dnQieoNnbnQOkEntDPnQTbnpnQmS0xYLZP5WQel7P2PQsu:LgQ/SfxV+tl3KhT7yEMxVQrDr
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a230000000002000000000010660000000100002000000014060e25fc58927bfad949cc2c503e35c115ad2b9399835987af0ee9967d3b2a000000000e80000000020000200000006bc9993a9410f233ddb65ad91650584c10b0d0075129e45695cc2b9e0b0bb58220000000fee7c290a8aebd052e04b80437c5b30ae94f3a4683847d6498224200a4d0a7df400000000d770f3d7d6b601946d7bd13eab6393254137e92b3546000e05e716f51bdd7a38d966ab82b003e8783871fe1b676f8c2277b2e9696972c5d1015176f1ae64cd9 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{BF138E21-0FF6-11EF-B8F6-D6B84878A518} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 00e0cb9303a4da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421635658" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2988 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2988 iexplore.exe 2988 iexplore.exe 2932 IEXPLORE.EXE 2932 IEXPLORE.EXE 2932 IEXPLORE.EXE 2932 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2988 wrote to memory of 2932 2988 iexplore.exe 28 PID 2988 wrote to memory of 2932 2988 iexplore.exe 28 PID 2988 wrote to memory of 2932 2988 iexplore.exe 28 PID 2988 wrote to memory of 2932 2988 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\37506efef3aaa2b19c85ee039a9be1f3_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2988 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2988 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2932
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51730766ef020776fd547458448fe8e16
SHA13b3acd51f8d42ab091c92ac6fbac8d0620c8f07a
SHA256820a5b02d0f3951aa687cab753f2d9a51620d2b9e43393d454c20d21303241c4
SHA512518aa54affef50f76a7c19a712af4e32dc429f54a55c042e7c715a23872f26e60483cc926dee8a507a2c7ceaeb42ed0cbfdbe97e8391ed72575af9aca9d527ed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD571733d34530730aae0f74c616dda5f1c
SHA14ceef46d5a10fe06eeaf155779d47473f5f03ac5
SHA256b9c3d73e20e4515c626d0f1072aa33d4610c5605f0f2f86f476b7014dd3eb5e4
SHA512868a9b793618195ae9ee866647c9b30f5676cc9de476d93a5b27dc5835d6761422e664f29a510a0d046dfe7bf5c1a760e80d5a488b1cbaab3cc0813219ad761f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD524631dcd1294525c03223675b00987ad
SHA1595c1cadbb3ca7c556ad6b74bb090ed8d98ddb17
SHA2567831d20939ad5398ad3db107c335ae725cdf348c55d6b33adb13dd8531270450
SHA51259c77e0ea0573a01a5ac9b0d83be2372eb17bd9ae672a453d67d637d5d32723842f6b0751b6981af5d4ed48a231a5c3c11ce0e9e0efbc10851a5e647b6cb54a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD558bc838df15f6c26e163a1cccec41502
SHA1be414687ede8bf7eb1c95076a9b15df61b28b872
SHA2560bb226ce05c0c916929ddb611105e4bbe205d5def3b66229eb83d42994fd4ece
SHA51286917d9847d4b736bf2d9e17e673743662c367772089c79afffc9ee4e0647421cf70f57d97b94559c673768077db71818cc5052fbfb1223e97ed53f591bcc6da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fddcb79156df93955c36d7be224a3b52
SHA1e92fbec26e4d3b79c1c8ab7027f0c730819b4109
SHA2562f410c28e612b808aac577f7fee900e1b5dd315f78e4b25acf3c3a63baee3472
SHA512327a2272f44668ec3c6a21f52a32117bf7f9ecc77dc9bc09f1f16a7ba41780956642cbe8b6367691da4100557621fb0d97daae11da4ee60c5672cd4b7e71ece2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b815bb2a67d4e62c8dd1fb735fa68d25
SHA184414c48b48d01e419389f039199c6daf2ceb6d4
SHA256447f1f0f51e67458cb077098e93f12c457a8edeb5806c8566c4be817e141f8ef
SHA5128cbbf6a52fb116be13a58196b0fafbee9b60b3e9ae648a0569fa6a62e93cd2d0c08307e90b2775d7ca213b8ea1bfefca5e08eabb7713cce68eb24662d209f076
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55ccbeb2e5f4382068a2b60310769784b
SHA14b90faf678972ce83f73f6db417fb94f4ead5e06
SHA2566311b26b2f6a6cf1e325733188e7a4fc7938d6730dc7c8783890ee7d05429191
SHA512cb16493d22e02e422da2f0846b5d64e7a34547384908a189e63dc82939b9625313803ac312c7804082890c5c6881d69fd565ba810f7f95d4fa508990301c6474
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD540900598e76dfe3891018582eb115b4d
SHA1e25b0d6c6979dcda7b5a1a46dd7866d407c43951
SHA2569c6ef274302a9b4e78a9c1a54962cf2589f529f6707836d855294ae172c3193e
SHA512a56a98244eef7c08fd4deb7c48ce25b28939db1985219cb19cb86758536aff73b1ee5f31e13f6088859e3614829f8797080c0815cd91b7ea4494fa9697aac107
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5071c71b258fd6ece2b8125669d9922fc
SHA1d1db4cadccfebce183657a227a6a8a31de9cf868
SHA256796c5a6c846529ee0e784cb12ec22bb2d85ed517dcac6e6c720c45f95e060efe
SHA512fb764d89f519f1641edb93166224c5342a34fa45fa82ff3faaa0193b7a256b1c33c4c3f2fb2cc2367e35910d029766c13a3f45ec6bb9ebac6d246f7a3b48cc6b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bfbad48caaa5190b703fde560b55316d
SHA161476d607815537498d512c152a440e09086382c
SHA256427297cb61274d427055d94333a5f70e3d8be7d423fc2993aa315448eb87c1aa
SHA512769c2cf3d5e950dd0861b097b965313151605cfc5e0293b405b6e843d86b29dff1b4967a0dde4b93526931a17f0e4ead20789c66ee3c63abc1fd44ec695bb81b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d75058f7aa85fac148ca0d052fe06cbc
SHA152d7510df05cdff09c2e87627f2464ba74ed170b
SHA2561c15d98bf186141bbe0ecfcd98769ba395d2ae9af18ec9a957547df2ecfc86b5
SHA512cbeb521cb3c27c402bb3b66e9edf206b43042ccfc473a1fbc583d789252032eb5b9dc5a5df0ca92b586a4844d1136dc7d2308c9f340b0000a88fc89c86570677
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD560ae55d96be5294367c551259458e421
SHA16ffb8fad4d421edf6b2ad94c859d3a402cf254d5
SHA2562a695202e63160e87946fd3d0e7b87c0063bed68a084b42e73bbbc7c613f4b00
SHA5120621eea76e394ffe08cd60bc2ced9310015f003ec66e7c258b98126f7a6a3ce2fc250029dac02c6573551bd2747d94ae09233e306cd571966c8b0d2d0be995c9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55e7fc36e20e5bc625c03acbad8ea6feb
SHA106e3c2f1ea09a7b783514a954c2ea104ac50f378
SHA2564a42c63a0a7768952aa8d348186b6540c2ad998e11d51af27deebc35c14a8f4c
SHA512d7e6098a138d2434fa9c0e8d35933a27f730e020c40bff0291cfea8bda7ea15eb56a61c6dd07c57eb2345fb92daa9c025893f9a945f9de1c5e2729af972cd5cc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5309e794d30c9307f88465451d674104b
SHA1e803926a58c7399c7d72ddc76badd2f8f15d724e
SHA2564dbc5ffc4346916f225f242f6d45cba49ef2f3b0dadf31e12c70b3ae9aa9c222
SHA512882380a6dd66637bde2c84222e99b2397233c06a2c95deeca6987df5fe3d610efee3721fb995a822966a9591a37d54b7c61f89a6ad9c7ec6ca6297bd77b7dd15
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD509097b143dfb821835db31a5fe7978f4
SHA1f5158396ca9be502bc6631044a4dcc0be93bc2b4
SHA2563a606643a3bbb9923cd1fe1f5b59ed3e379008d6a13a21d449f30f0fab77ce4b
SHA512f5a79a3b8cbc36ec3df429c4ab1dd253a926f29c934382a5a2f864b53caabdece932d8d6072408b06d34f311158d8fc0bed414ced566cc87dd86820b496ffc12
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD517576d9813678858c59b8287d3f63892
SHA12a404aad5c6b024195fd374d54c2476b17416833
SHA2563f5462f725f6627ec9fac41c193b503916bf43132c682b2c27ab42b6dd4163b9
SHA5122a65c126ee886f0733c1e8c0c0653db3921e65d89ce912c7d733669a5afd49733e3ae682645be0f502afe42e8e6e4eb0aa46ecf8d650d5e4efd5dde14d3dcd4e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ee97584bb7cecd1c58de6e9f001d099b
SHA137685ad820a0da636779c1523305a3e26ec62ab5
SHA2561c3eaa1affad3f4836afd6b176c4982a09e21ff018b94e1c198f22eb00fe9d66
SHA5128079339d2f83075fcf67aa7a467e60a9d79d99bd789a249e304830d294ae25fd88121debd1fe13594bf433f8073a34f7afaa54f6d1cb3567db8cad885f4ae210
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51b3f4adacddecbed688141304eee5ee4
SHA101eb6632e5a37e5099dbe83b3026eb7b9081e5fb
SHA25662bbac6c8753b647daa58531be5ac2b0572b6b27858ce1696f29c1a56a233f4a
SHA51292c0bd817ae8201c85621efa2e26f85317c4532f0bb96e6f900ab535dd0ac2b6957bbb1012816d1726ec9298f3b1285121db9f93566f44dedc7c369fd36315c2
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a