Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 17:51
Static task
static1
Behavioral task
behavioral1
Sample
3b5ac33e4debbaad67e4860cb11186da_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3b5ac33e4debbaad67e4860cb11186da_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
3b5ac33e4debbaad67e4860cb11186da_JaffaCakes118.html
-
Size
23KB
-
MD5
3b5ac33e4debbaad67e4860cb11186da
-
SHA1
c3d952d049b261697043fd3799133ae35fec96c7
-
SHA256
c849e7511f649b61be397052c5e175c2c28ec98f03343d1d0e32de1c1d613c7b
-
SHA512
9991d6b981c5043c47ee3209c736079b877957abb27d36a90b99a6a896af14e4bcac3828578c0ae2c25e7b4b68349eb13ca76c98d4a7d2eb36daa6159c4193d4
-
SSDEEP
192:uWbgb5nzqnQjxn5Q/CnQieRNnpnQOkEntmYnQTbnlnQPCnQtlwMBxqnYnQ7tn4Yn:aQ/Dfns
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4FE1A7C1-1088-11EF-BB1B-4658C477BD5D} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bd2a7708e9798e4fa0b20f3efd8e936100000000020000000000106600000001000020000000cc3b2eb13af50d3ae6fa1b2ccd8aaa26238b2a7297008550372929d287e8b8e2000000000e8000000002000020000000c7f4133578e5bc151bac580543fd3aa315fe2b35b32bd6c274fa562182b3a48d200000001dc8223a6a8fd587462793ac884d44b85d9616dd76bd76894bf54fb54426db82400000005215b33dbf04eb310674e9c093b620fe02d8555e1322317d79d42415f65584e0c1b73763d0abca918390888757b36590b80dfa82e3342595c2829a511484fd0d iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 00cc9e2495a4da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421698179" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1868 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1868 iexplore.exe 1868 iexplore.exe 2052 IEXPLORE.EXE 2052 IEXPLORE.EXE 2052 IEXPLORE.EXE 2052 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1868 wrote to memory of 2052 1868 iexplore.exe 28 PID 1868 wrote to memory of 2052 1868 iexplore.exe 28 PID 1868 wrote to memory of 2052 1868 iexplore.exe 28 PID 1868 wrote to memory of 2052 1868 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3b5ac33e4debbaad67e4860cb11186da_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1868 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1868 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2052
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD559158a2e111941590fd4f38700cfa108
SHA125967975ca367c3240a7f9d8e318d02c1473f0b5
SHA2560957308040ce147d008fd40cce212de11b6683b29ce3ede286eb596da1ca3e6d
SHA5128f17d5f349be27aef2a73beedeed0af21511a7241d21c50cf42998b5799fe06d76764b645b30bff01e13f77d96b1dac33c8f0f32f07dbcf5d75a32e40ca852f0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56e4f2b89e3cc116de534a9256e2777ca
SHA15c9498266b02bef73374710ebe768a26c9cb727b
SHA256bdc90325d6ae093d359684bae6633f886fb1cfd69c43cd8c2fa9cc182cdfc0cb
SHA512a805b30e65b1d72abaa663dbd5e576ae43f92214655cdca666bc82dfc83631f018c9e29274d437b7b86ca79c3221a4705edac1668967d9b18f56b59b3ba321f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD581043361db817c889391495f2e9ed768
SHA141175f15a09af6f77d889ede429aab7d067ebb0d
SHA256a217d04fc21e2f8ab817e48fb0f0b8f5c74999b27a39453e92992677e13dfaa0
SHA51232bcec95746cc02d8f94004d90dfd7b5c6b0f9aa27eaa8602596ab5a283ecfdb16bd183df8ede1d216799af5058f1bdfc6623a7277fc215bcb5eebc5e67ceea0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5080d4328c428fd8388e81c646ef0b76c
SHA1adfb8d34b68ef8137799016960fbddaedf79f1fb
SHA256efe71680d45804dd6837fc3fff9c30dbf2b62bd3cca75309d2cfe8381c5af106
SHA512c86d061cb17b91fe26bad1b247ee809bddcd07b03792de8732262137c3e08e3323112c4027929233a99df8e2abeb1cbfef88dd4a65d2d1ed4f3adf2ac1418f2d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bf53a76036378991573ab1c0a5b20096
SHA1f4f533f8a97d16caba6a4c983d2f0b75e451aa76
SHA2568a9e240caed481cc30aaeedf495c561b77f0e0e2708e2e8bed98afced54a9de1
SHA512bd4e4d876ed7a0e508a539fe88be12161ee0c73cbe6d39209c10112ff37d553b3495209b108490257c90c401be6b5e20c39f23ab90957d45c02b9aac4e9c980f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f91c807df628ca01f66fe4ef7584e5a7
SHA1738aade9fc0cccb103d9b3a2cd486e8b7859617e
SHA2567d170bb14fc9f38ec1ca7645541d63d68ee4c62df576ebc5b6f8c7d2898464a3
SHA5120d34bbc9148e4c8ca7e249250d3590574514d0ad59bb6ddcafaa2a6976fc05785c47ef7c8b8a969246f6804a5890f3a7498f81430707175f5df979dd12e01bd2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5252375de9815a0b258453026afad379a
SHA166251aede544a9733217a32e134e800742c337e0
SHA256ccc54c8872cdc39ac03b55d718372b8e08dcfacecd16c56afd895e474d51e0d2
SHA51208f829189752c6d703e264846aa8f2f62e995aaf417358ec1cb434ffd12e429d9e8c24ddf41384c8324be7535140a2db985889e59cd31cf81af278f369ec8742
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5529093862e8bb322f9e47b2c0b05823d
SHA1d01913c7387c4fd30ee1b41ee53b41edef05e7a5
SHA256c30741a5e7d0b3b55ec5ffcb0123e278f811db3385f50e8eaaa6c52651b8dab6
SHA5128f62ba51f7a95b9577f600c296a2b02c1ebb239a777012c7ada5438d894b1c089dd6c3e314a5b8bdcfd3c458e4fda26084abe6fbb10b3e42a1b938a4f5871941
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5472acfd6799f16ac1d1a97e11a6de606
SHA1d1894ce213d97ee516b7f66887080ea2a9dbc69e
SHA25646be011ea9926d172471197065163ee3eca86a2332ae73df1093aa1acce01ac8
SHA5120a691a046e81fb07fba418151520ad35987c1b71e8509b63d872de4e376cbf9975e5f23d5ef583bf14769e3bba01b77aad1eb0b6dd585a12914337d7ad560821
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b87a0b59ab1199abe4ca8ac550fcf1ec
SHA1210e87602ca4c57b1d523dbad0cbc3a6d5c19fef
SHA25615257c938f04fb38e98e8faa5ccea8a18147273b7e093282fd077b17ed6c6ce4
SHA512e97d01b85dcaf5998248d98f17b8ccf6737c215c5fbba298a82cbe0220eff968ec26923bdac22d010b0ef499f77824436f8022966d435bca136e2b738fce0644
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ac785a5240b65b12e24aa1d293fca889
SHA16a28236f4d29c0b2783a486949b04797024a88f4
SHA256f411c66868553d68940997a455527467b155a38ec2b9e85ab8e01d0e76385e2d
SHA512d5cf839def54b254d927aea329a6d1e0f3b702612ae985307d735156285613d88a614e6c304f01051b847abff90112441557599b39ae8dcc464940f445333c82
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD538baca798b12ec70beb59fd6bb022ad4
SHA1da697de57823497371b35a4cd2bba2468e38e7e9
SHA256e91565b4c29b4ee148dbc0a826080055586ae30a35b88ad452d6ae2f3020dbe2
SHA5127cd04323751bfafab5307dc26bedd5735134074a7e306688317a0c19b0ea3ce506f9258dca2bc2e8cd7d918a43a224300818a8f4a276a339513ccd9b1f7b7624
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5511ea90e33502a965378aa5b0598150b
SHA1b7b865d715f48807b486609ee3d52fa69949181c
SHA256441452f804c3531fd082e2cf9e410cabd694205987a1c7d93093183b44dc3d96
SHA51297102cc25068e70f9221576cb27321abce7fbf451000b9e04a082ddd28ff7b479b67bd4ec9b8b25bc4149d8c8873058cae15de0de7d2b9eec6fb3dffdb190666
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5182d2204bf6b25f31d23ce5611d81f15
SHA1915f75da92a9983e76bbb466c734324f653c34e8
SHA25674c4ecdd49dc0cb77484c3f53f657fd5b8817afedeaf2144208cb845a7e67537
SHA512530060aa7eea684a52e3ce16d1e6ce5962fb4640b859d2f8946208d12aafa92ac08855295fe4952f8e10c624feda867ba5b1ef11abcff769399cb22ba721b5f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5814597c4681c5cfa28f345eb582f71d7
SHA101b06586a83b3ae4f25ebd57a3aebb00cc6f7cff
SHA256784ab03178be341222036e22e907d02a11ed1627525135ef7d7baaae1dd55d75
SHA5125bb036e6ad670832928fd87a181290f31cbb6f9c7bef9846c3df73b7d1570e2a0831adb8e6329249e16985a77ae42753ac044fa19234f729fe29c4d27b11f807
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55ee02a011da2c2a8261df28a72eec102
SHA14ac7d227f10e5cc1d19525d720835f11c557883c
SHA25644f44f80ce8f309a583223260d7eb53ed5ebc8c39de984a25d60dcb43f75a616
SHA512999741a4b6591972903daec3ee2a09a4b485744d68b7398d2f455218fe983946f50f43d00b36f8a436f8759e2221654468f7cd21370be0f597a7f86b7f8a1712
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5165d0c3c3db233c0ffd3092b430ae99a
SHA1372c23353c370caaeec831ac718c368aef9ce983
SHA2566e2b521cb978c439a20f273ef6700c78ed8ad3dc9d800e69a79cc59d67d67abe
SHA5126f6fc2131546232887c977faa6fa93d5c2c020d5c6825c4d6e8b743e6c0baa96da8fc2d633687ff3318ca28168688c59ecd8fb95b59009b020068e1c37987434
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ad7f39e2d98c6d0bbb2f771440306342
SHA1b7520fa525d55631be4935ce70e1d92d2b45a284
SHA256b1effc74b0282281955d86d0d6a26c2e483fbf225a26854fdf43b1278fd9ce76
SHA512c781cdb47df60961ad64bf7f531258437bda724d07089c4d883348a1a71c814f4f50847bc15b68205ed1e8f53b9b30e1849a54ae9859b3d7ed64008e90053353
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a