Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
13/05/2024, 06:56
Static task
static1
Behavioral task
behavioral1
Sample
3e3fc6330b798748543f78e6bcb52b0b_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3e3fc6330b798748543f78e6bcb52b0b_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
3e3fc6330b798748543f78e6bcb52b0b_JaffaCakes118.html
-
Size
79KB
-
MD5
3e3fc6330b798748543f78e6bcb52b0b
-
SHA1
f36974afe49db67c516d7dddf8658945b525eaf7
-
SHA256
840a6a0246912b3c63644ef971184ebe7b76cf43963cf87300c48ca396f963fb
-
SHA512
f6c497269430b99f8b5ebd8db9ffee72193e776ce96e2b9ef21381c1ce0caec7e927d3e30e1bb4fd7bb1b1db18062d51afa47d230af7dffee278ea6e51447328
-
SSDEEP
768:Ji7gcMiR3sI2PDDnX0g6sO6PDD4FQG3F1QSrj97v/wncqoTyS1wCZkoTyMdtbBn0:J3z6kep7IuTzNen0tbrga94hcuNnQC
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421745282" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a7000000000020000000000106600000001000020000000997922131cc45a2ef516863ca64b8965b5ece244a125f352258461ee2baf0236000000000e80000000020000200000009080f39f1ba14f3ec0b7d274a83b2e2f09549601fbbf173b68da256cf8591cd820000000edd99961c190c84bb630ca64dd8741a7f7e7b05cd953a36a835dd069d35a050140000000b1d8f040cdf7b2939a477f81fd2f8f3ea154284d57897ad2953499c499c079f83f13c3758a949ef34ce6d7ecd6a4c776eb55341063ee13a33b0d778e48d117be iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 000b05d002a5da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{FB652321-10F5-11EF-B826-EA483E0BCDAF} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2876 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2876 iexplore.exe 2876 iexplore.exe 2124 IEXPLORE.EXE 2124 IEXPLORE.EXE 2124 IEXPLORE.EXE 2124 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2876 wrote to memory of 2124 2876 iexplore.exe 28 PID 2876 wrote to memory of 2124 2876 iexplore.exe 28 PID 2876 wrote to memory of 2124 2876 iexplore.exe 28 PID 2876 wrote to memory of 2124 2876 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3e3fc6330b798748543f78e6bcb52b0b_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2876 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2876 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2124
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5165160059418d624343651e2084275f5
SHA1b75b081dc6e414e5c6d31e6e860aa645edf60239
SHA25652174c667946d3e388e375c916952630c3ad5ebb5ba21dcd1f2a2d64f722c7db
SHA512ec46d6d2a0067f9b77ec7d47b9df5950605935593af8e8d8bbe16ab706b3a6fedac5d16f9a3e723665d3c8cf097ce8253f5d16961df505f5d8c5874999c8af45
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c35abeceb698f1bc5f8408919b91c3ed
SHA1b6942a496cd6c7eda9514321174c5745d0d98690
SHA25646936370d03c973f9fd85f5f112d89b9201a7836d0908e2543aea032ecc78fec
SHA5127a942e45a8f745fd84365ccdf648899bf88bb1224ba3eb58a61a4320e21a09190a1f9d29de9766c3300d876363a995d21e0b200d4141bdb013d7a90fa7cea669
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5abe3f83288e1c094e0eeb6033536df36
SHA1ed57238bdee007f584fa7587b0951cc9541289ac
SHA2568babdebc6ab26af85031a53c64ed22f07edc02eaec273c53cbc6c38b7afbd5e6
SHA5126673100d4f612ce8aea99f46dd01ffc55fe276804ce870cf2859e6fdc875b7a98968fbdc107f8365bfd409d6e09feaf346320095db9a56b45e990cf39a5b5f7b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a9292a5a485d00e82168ecc5988d01f1
SHA136830dcb2e6febb19126956861b3724965851785
SHA2560c24c4af5bd212cc2f75b699982cd8b08ed49e385c3dc2b965e217cec2613793
SHA512f8d495348557f48ad620e57a188afa96a3a876e152fa612f2e9c8842c17417bc8b6d1163f641d28d1561524459d7a72c768e3beea03e166f8ea8a8070bccf2cd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54a95dcc2c8642ec9bccb321edaed56e0
SHA125a5dee9df513d043e29293f952ca493015ce58d
SHA256b78001724d49675ea021a60e125f770da4fe253eda55da14ee79888896edebc1
SHA5129319cb5c93246f1de51c84b8cdfd9a19e1b65ce7d4d45d9a19945b31dbc37fde85d1f5458f9d471fe4438e27b2fa9f3a5d67376a9dd57f78529ee76933b09180
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d776cd3185a1d1bf75ce7b6d7afa71ed
SHA1e5aa2d799f129169a6c408fceace45499be67102
SHA2564a4f9992e884fa9550ec0279158c10275d584d887bf1391cc0c0a474cf4ef10c
SHA51217dab488ed58037ddab0cab5ac8273dd45a883fdf740cb4a2cfbaf3e0583d31c5f33aac2a38b88df41dc490e024f27f6299259c96ce26ceffdfbfe47d4848d3e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55cede734f79c57d3670a00f1bf6b5278
SHA14a70c3ba90cdec40a3e9ff5e7e8bc322433ee153
SHA25661c5eca00f6f0e88ed8f15f263f4cd37c27679e4d78b93a8c5f4fbaf38dd938b
SHA512675be200c5164095b8736079c6f38452f8a5c7d645129fe9b98d57c19bdeff901e33d0aabd8f4c84d1d71c7c07a4b2537bdea9b13c95daa09e495febcd316fdd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5989d0fdf73b378a3719375b15ec8b04e
SHA167ee8c48f69d9d35ad2d8ea40cfed89b923ff437
SHA256fc86ebf7f103a27817512d86f66d3f8d7d42cd03d094470457a7517f8059ffe7
SHA512859a25d06efd015e0349091b0c447f494d2cdac19b35faa0bb41891723a1e11c03de42b6c97c66c452a69a6ff066c952dfe3ba6ea421852ca4133e35a9fdffe5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5994faf928fbe7e31e43d416f49c6dd8b
SHA154f4b427d1f293b7b41ab42319e74485b5e3aaed
SHA2564a2a8230ed50caf366360d02f651d0b50ed58267760b51470082e54f6b3a229f
SHA512101f2b973861f2847922ed771ff91d6663d0708d510457b24ac3e0d76c9a52416ccc3d8c90b6a346ab01a208ee61ca9651c154626643222dd661f1e1bd88ecdf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d3af5a2bac240e083bc1826bbcc828ca
SHA13c53ecb586b21f38c28b880ac7e76444254a5faf
SHA2562fdd6961b1d37ea59466d888cef5baa9491e6cfa57400926bdafd628bd8accc4
SHA5123dbcc8a033b9c27c682d6740caba42aabece4625fb40317bf9bad78c3c1dd630d387ffab71a97a3f0e096e6cfaaf9fedc48dec19869ff774317fc398b725a58e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53d26f0e9b9fd6f98db9e120daad3ad89
SHA1d2ec66395b58f2b642aed2c2ce595cb329e20fe0
SHA2565ce909d640e035bee109fc4e9457a13de0fbf2732e8d5bd86c30d866cbc167f5
SHA5121cd0352bdb9227aabbfcc072eea902fbe532fbb20d95562e9fda9618c628b8f70e5a3c17aa2262a6186736497395746dafa80477446431dce75b0e1f3d8a85f1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58643054583869041491576ddc93759cd
SHA1ac5c13d81288ba3fb2ede108e15953699bf7e61b
SHA2564eda0f615b7865560a5165123adf5839ca8040c11a4bef97167f69702353674d
SHA512b27888720ffe44307bc44d076681c8774b992a9b575b536df27c920380ae4b0d6c148520556d4393749e3a44cf5f9c137bb31fa295319bc89e52d8c1aca2724d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5174cd5a98bbc4117424fd25f53adaa87
SHA1c40c47b205a97c9bddbd9da65805e8797c36ec6b
SHA256afdbb51824d6801abc4751c3862b6fcd11b3a3ef59ae7ae1115220900df94061
SHA51262eeb974907bfc5fede19c482f5f576bb892914738a7d97a4f57bb40ef82738df1e7367343ea1afc516196601e7f6b939b90674c84772f2cdb9ff3a11cd8f6d4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52c540d52689e9590c8e34022d6dda481
SHA1e639c2fedefa1bd39fd8345c055a484b86278b45
SHA2564f11691deb5157163215aaf949816f594deafa35517136c217425d884be71d0f
SHA512a10219ec06764b51ce731fd369600e1a54164d1316212c3d434b6bffadde0f766dec95289888611a5403b5df0f6b4be6dd5c2c8f075849f7e767a3b23d7e971f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aeeee22e636538c6d9c63eadfd1cf488
SHA1ed1b4e9460a5269b7e86b7ec1193f19cfc8b701b
SHA256c66e74350828f8d3633ec8504036cb7d85f12fb37afd69b4379d1d5996114c23
SHA512b40bbd40edec276d836816f32273fd460f4806bc6c122ce942c11cfc22371060eef08857e3fba55a7ac64d0f5ce3ffdf117451c7547334b6b240d3a10f2ae5b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50b0cfdd882f296809eab75a57cfa9c19
SHA1b2453ecf3d437e475f93ca58427a3802b4123161
SHA256bf6606a991eabf3d89bebe3b56b8b66dec7d8ac65e56f35415a1bd1e98d5a77b
SHA512b134ba1c025b13e7599a8c76083a7fa8b48e26d011f0d88782bc87acac0954f86953aaa6e52c204b7879dcb5b991e2a7b74142c597b2c5073f4b3852104d5147
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f0c05b69232b28c7aed99cd3355fae7f
SHA1b90e7cc34efa13d529935f2cd8b08be68c0b2d85
SHA2562fa714374e1c0451cf66014bc1fdf69971c2537e6d7354c0b00ac8d00619e1cb
SHA512e607a493620c719acc1629137a035f57dc475ffeff1418721e31ba49232e63383104e2aaa650d3b215240a6cdf76d24b0a0b91f0358d6b69b5f5d398d1cf78d4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54d0acfcbb896ebd203781c1553a8721a
SHA196cad1f972872250377fff4c883915dd72a6866e
SHA256b269f8047ee0b8e53c325c65c6891cc3e4dbb7b848d9543b5cf917de9d2b5948
SHA512bb26594da8831203bf6ac092c41a952994a8b40694e27792b5674521970e1d8fc8ceac7969a3531eab4595b424d80d13c245672e98b1ffca2420c001c9fe26c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD563dce0a31c8b317d9c3bbac5867b795b
SHA1fd842abd8f59d5d1ce90a40340942f028566791b
SHA256c089c86cb4099d6fd67d614fcf044dabb5e5fba0ac3762eec8912142acbc941a
SHA51289ec8df9f956d6535a15a4eb8e8a22adec83d64a82caa901ead3961a094aa4accc62a8ce372cd0f1946b448e09be37c4132b50d139fd64f88b9e39858956ae76
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a