Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 23:18
Static task
static1
Behavioral task
behavioral1
Sample
4385776a176f6d3916ae30924588c716_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
4385776a176f6d3916ae30924588c716_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
4385776a176f6d3916ae30924588c716_JaffaCakes118.html
-
Size
23KB
-
MD5
4385776a176f6d3916ae30924588c716
-
SHA1
01b863845be87d20e6c42ab586f118b0a71fb48a
-
SHA256
d60c5f73b656b93dad2cf2334344ebb12c603d52ab3276f72a1efe355a55096b
-
SHA512
0a57d377ad8edd085bea4630a45f27bab315fe18b507b8ba994a8d7a16c4e02b1772750e48fb954f44746417a1126ea0407a363b9df43960c330156ab04a7b33
-
SSDEEP
192:uWz8b5nwOnQjxn5Q/O2nQie6NnhnQOkEntUA9nQTbnxnQ4CnQtowMBaqnYnQ7tnh:5Q/OpKshq
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a2300000000020000000000106600000001000020000000d9e1213bbca94976a6b2cde328596a48ce347a10e2578dc644bdb9741aa111c6000000000e8000000002000020000000b9bb5dd4bb45e1a903495d8f76c3decdad6c5187a9409381a8d244c94c268b7a200000008413e4994dd2f19f1fad043116f9f3d00eedc24d060dd83bf9a38a2602cc8c4a400000003532f5a67a6bc5da139b3a5fd2aad370bbf8d86176c2967f3396dd77d4edbae63e5f8a6e7a212ae921be8c77c3c0ff23dc0f9c6475a074124bec2537c4e87091 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{545B7D51-1248-11EF-A1BA-6AD47596CE83} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421890600" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f04a0f2955a6da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2960 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2960 iexplore.exe 2960 iexplore.exe 2256 IEXPLORE.EXE 2256 IEXPLORE.EXE 2256 IEXPLORE.EXE 2256 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2960 wrote to memory of 2256 2960 iexplore.exe 28 PID 2960 wrote to memory of 2256 2960 iexplore.exe 28 PID 2960 wrote to memory of 2256 2960 iexplore.exe 28 PID 2960 wrote to memory of 2256 2960 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4385776a176f6d3916ae30924588c716_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2960 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2960 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2256
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51b45ea2f906c771d640e1a6c52cc1475
SHA1b686e4b33affdc8a3b7c46016004bd1e800813a2
SHA256843606254b4a921d09e5e955f2fa4b97112bc10015e861e665dbda0f273c8f67
SHA5120333c84d93b5f9607bb4d3198b980562e448eb7bb2a5b8299ae68b4dfd03a7c56d17e5687b2c4605eeb24da2aa669620b46b31cea28114843fe3f91f4f79e721
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56da1d6df2b5ed7421df763de1a63bf68
SHA1ae94596e37e59f766a44d37b8f2849445cb6847a
SHA2561f6c7b64c3d026f7461a1c97c98ad9c130df64c117429b9811fb5cedf14251e9
SHA512c22aaa28ff42805a12e15ac130de442608bbd49c124507776bb02199b1cf99aade477b6eac8c83dc99cdc5b6518a61d62513ca2375e3f0ea240600b5527ab702
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58cfdc954f220a6434d629382bd0409a8
SHA1f4053dfb67494b760f8d52fe13214b4718030076
SHA256b31ce4417173d617121e120977eb828b1415be140eaecbf65e3bd7772a48029e
SHA5124293a386f6b7dd34b2fba880aeb3808590d7cc3148b179e428b725565f8afb2552352eb37c471fd94414ef8e30232d1f61642981e85f18e7bfd44c36b15ec19f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59927352782f7c8afb0861f68365ce635
SHA1d6e79c490632996af9a7f39dc2be3cfeb1116fb2
SHA256a7929b426e726ba74cda844ec3e1595602531a37fa53f0c7ff0d794ce4ed6071
SHA512897116b2d5111ad6cf815d7b3d09c445d2216235a9639dcbe249c77d44219fe0aeda60efb52480a9d87cfadf83263acbbfdb74ef1c15ca15dccd6128c7b9de57
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD534985dbf952f5d9db49278643a2b9a1a
SHA13588a3bc7331f46375df3a3ae1d2d61589768fbc
SHA2567b6c03ff1c0c9605775f93024e363c9096dbc6093f9919ccf0acd156816dc910
SHA512d6160997ba04af1ced5fa9463031ed032b7627def3ad8b09f271d9dcdeccfadb0b9bd8be5596e58c15e9d00275204845dee5e49a01132d3fe33eccdbade54922
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55aa68683c9575b2b93d340cd834b558d
SHA1ad30c3688ac097778ea93a675001d08361b2c906
SHA25673c95a5680cfebb73c40c1c66184eb0832846e380f0388c44fa1abe2f64d30c8
SHA512deb5f685d3cbaccdf6806fc4d4e0c7dd129ae9b58d5865ed501bbf4dcd59e28d2a7247a4c11df4aed412c9049533a83cfd50802cc8bb2fb949fa2737a8934817
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58cb47910313552f9308121cf5115feeb
SHA10230600e2fd9c344123f60877334b0b6baa1d9f6
SHA2565086f8843a0baf6d49a0d5991dcabd5b32a0fbf0edd0d22d4dcb43a2ebff4e88
SHA512fe3ba2d17e0dd5abf80fccf175aa156f81f23591579e1734cebf7a27b1d6ccbbfff000464ca8942c326741ce9090af570063c5d6365af5296a4c356dfc1b7573
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD509da3baadae363b20bfa86c867024ea9
SHA184eab0400938940481bfe41681e8cd6fe7a20f4e
SHA2562dcec31194a9ff30765f081c39ab5434ba455a191cbffcd3164279f36a09b799
SHA512c58cb24103f56c64486328c85ffd5c99bce7c2a19eb9cc58bd9f9e472aef66185537678d6a8e6e9cbc3a84238740417b517e3b42bc8edbf126cf29fefd3a1cc7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56e164070ccb9985615ce49026b143a2d
SHA14f3db5d92e43c01a04664e88b6cf7a23bdf7142b
SHA2569a1d7e83c2e5678b008c751679605d0fc984ae1ba093e11f7a37e4c1522e3009
SHA512427361e639fd9dfb69350e6121977f099e805ad0fac957087ee9599123af7690e0cb4fbea45dc48dce5005fc64457d3eb4783e3ec1d145a8745f050d5c4d5c17
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51ee0d3f25a1fad633d0e2cd2377ebd4b
SHA13e2c3371b9c0d2aaf8302bb38fa56af2ca5991cf
SHA256def599218e7fa5daa5f1da5f89f1493ff6ddbfd3a46021a72653b6ff326086e8
SHA5127ab830bb9a20381e5c99195f51bc2b6f49c5ce7e172b6253fcdcdc7fc2bd87490a62f394c8b45379cb2302f9c2f71975780c3371e158d7c0b2bdc36f42b8dda7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d0b43575aa90474798a5767e792f496c
SHA12aa978f98a4ae33be7d5c93f1719192eb815c71f
SHA2561a7513478194c70c0065c85056902156e8808f42ee03a3d47b968890b7ceff4d
SHA5129841da856dab4c595f32c5e824c89c25925216099c3c47482af97499ecfe497bb19b7823a59d608db928de6276282f3462bb1663fe8bda99ed12ad0bc9b938b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58984d9cc52df6e1c0ee206d40d47f847
SHA17078e79b929ade37707dd794c9e0a4536dd820c7
SHA2566dff7d76cc211c9c7ba12d4e51d23f6889cde132cbe33b1d2f1e057f1947360e
SHA512ecb81e9a36837334315c44c2f99fd7c1dba35e7672f9b2a884a72ebb60b8ef18a0d4d66fe408e100d7a21cfb2e1659dbf6012fa952e89e6395771d3d92b2873a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55baa200f325a88244af37b43a5dc5510
SHA13091efbe0e17b11f6fe8ce6daa8dcfc274535e25
SHA256e8f4aaf9eff6d967d6921b145968b4eb132420d8a871c0eab5a018aa4e5a1e1d
SHA5125f6079243882720d890d42c602d758d9bb7748a2486e36fb7346d02ecb07cfabc9c0a5774c7c6848c37811e153fcc786138a86b7f11b525f950349b39dbb5a97
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a99aa97d2248bb20eef89af7342e88cb
SHA1d942b728eb882ad9de34316eb902b34e89051b7d
SHA25685a83f81e81b20ea5f6380a3e2561cd096440e1055d609b975814663c0d644e1
SHA512fd9c12a4f4727c7b65286976afe251f424a88f7d944b5cb0afdf40cee53746fd984acdbd9e214d2be8b4a3e0e6c0348265223028fc5b7d2de151005b2a9b5b95
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD526656728ec9c3973d1feb1844412be3d
SHA18c1b98aa81c42e0e6190c6d855a6ed32a2ec688e
SHA256ac1cc05319686418b5471111469e911f4a247c4dd88cc0b22998a6b840142252
SHA5128e73f0c2e8920fbcc9e9755b5b8fefc5da11909a3311ff1dce2cc3fbddedd40e42d8fcf3a63f1a03f9a891cd6a1ad9402dfae5904f1d125704f282c9e7dfa5a7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55255c90d87c0312f5fc37c8dcdd62817
SHA16d6ffd651870957f6eaab74b45212b98f319c52f
SHA256fc2903b5a9556f405382fa9985bd96b48eccd90135201e02e44428a6f5e3823e
SHA512651546d301fc326a0a23a64f28d433037272e66b7cf60a34b34afc93c0cbbb3dd8c6997260202884078faabcf3b84cc89f2c7f13a48d35e0e01f86f74149b47f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD565809b8153dc7ab5c3da5b9d5ed8a859
SHA10fa6b893d9149b76427be81e7fe71b5562d68f35
SHA256898d6145dfead65bf7f7dc927ff001eec6f79c73a82a6dc880f08a7ce85c8df2
SHA51236871a726329b106a09b0aa773d6899f0acc16200f6992ba872ff7b02da9e0f4775f1dfbc15366b1b37a9e5df0547e40c1a2d3cf72e3a87a1605a579546f49b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53bcabaa048f17365856121f06fa0f254
SHA130e93ab04e562144c59f9ce509649968e51efa35
SHA25654733629f2ddb5911f397e0f63b9e3e283b3d74cfb11f8a69b5358505cfa493a
SHA5129170fff721656339b4b3d8ef0b5321d8d7c59946d9d6d481bd87ff38e069fa9503bf00594e6758439be8937ccd1525e77ee1ac847f24b9ccc0e4d81a5f135ba6
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a