Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
14/05/2024, 23:20
Static task
static1
Behavioral task
behavioral1
Sample
4386be5dc6443a379c3f0c472c6852f6_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4386be5dc6443a379c3f0c472c6852f6_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
4386be5dc6443a379c3f0c472c6852f6_JaffaCakes118.html
-
Size
27KB
-
MD5
4386be5dc6443a379c3f0c472c6852f6
-
SHA1
a50962db82024997bb40752f81c926c51967f200
-
SHA256
7b8b952b3e4eacbf043ee6f7114a03190da0a4e2933ee52c975aca5f90c0ad1c
-
SHA512
fbb3ebe4f89b8a040ab61d3287dac3e712fc54402b3541b443aadab3d4dacd35293aed756aba84a2b6deda5d5bdce90e3c33ee5d9fa325a9412feabacb497b8c
-
SSDEEP
384:lomZF8lTWFwGscrKP/Ih10Q/kr2lXlngt+VHxGsyl1ayFLFl8KctIZijhpSANydj:vYdG2
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{8E8E33A1-1248-11EF-A6D5-5A791E92BC44} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000e2767e31712ab6522d5563666f35fa0d06c2aa26c7c38f0092e0a4afc6a9ecdd000000000e80000000020000200000005b9fa68ad9b4626ba96e8fd0a31fa379b2f07513341eb7634b3b3cc84adc482b20000000bd5e3a7954c4100020b873e4fb5ff2d57d10dd53422dd11e2595f89398d1480340000000d8fb2778a60caad3f20ad740e90bc9aaa7ffeb121867fd22c9a50a67baf7b2dcb18331ed06c8546fcc39a5f167fbe025944f99a8f80cc14648b08c49d83d5b50 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 3069336555a6da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421890699" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2300 IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2236 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2236 iexplore.exe 2236 iexplore.exe 2300 IEXPLORE.EXE 2300 IEXPLORE.EXE 2300 IEXPLORE.EXE 2300 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2236 wrote to memory of 2300 2236 iexplore.exe 28 PID 2236 wrote to memory of 2300 2236 iexplore.exe 28 PID 2236 wrote to memory of 2300 2236 iexplore.exe 28 PID 2236 wrote to memory of 2300 2236 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4386be5dc6443a379c3f0c472c6852f6_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2236 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2300
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD580ddddca3796a2f927689092665d98b2
SHA1bfb8bb322263bc180fa001abe92859782272467b
SHA2564d27e2a8c621ea2f21c2fe18de66319e9e1b0dcfd2078a6948a45e3f4488749d
SHA51265c784c409c41156e5f478c658631a19fe9b1211fdd70470381a66e41380a33304b6a482444417c956b6cd68d8a267cf08478409397ba7d68dee3efc4e70003b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD550a53d6871d55e21f6e59f9c76569567
SHA162817c88877a28fc6e564564088282164a67d1a9
SHA2560e40b056c60bb9e0f98609a5d4a6aa1b4a1e38cb9d7d599405eba3efd49979bf
SHA51288ee129438d4e6724bc9a9e245702814165f877e07d716171ad62b4f735b0d53ce09c275c36ce50ee03672e6ebb52ce267f8bf118033712147e6f964139c40ca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD505ce5344de3f61a3b8961ad9e8ed2220
SHA1da6f00ad62ebbfbc17793ba8303bb5ca3aaf77e9
SHA256524141d8f18434c1f547f084145090a217710bad7bdccd146ddaba1732cf7481
SHA512165691192229cb9f02c83f16238a95bf06e69c081fef057cdfd5e3eadfdb79c2caed833a3fd8cc826e7ef414a7cd9ecab73e158b03dfe42985c9c47be7b5292a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5647bc7066be85ecd7a8b766cae04b08e
SHA171392559b6c857193dff65323a83e1e97fba6ed8
SHA25660bee6f933e3438c6d9e8843b878afcc9be64501e67db70a31cd0f2cd4ba632b
SHA5122f1209f09dc0f2cfbb940b06332e82567dbf98f88a1642f4251d2a10da63f477e67da08e3cb842f2ec64877ff832705998a8d55338137afcec59bc7322ef9ae6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD516dc00e29e1a612736a20f1f74f66415
SHA1ecddd1921c92b87dfe9b741da902e7f3cd0e14b7
SHA256f6f8ff409d0f18c0769e895bbbe99ec80190f832f0b6752c086b162e40cec4ea
SHA512bd588db2d0a493ff4e05fd0592930d39e354fa225f6f1f34ceaa8f2c07a8385ce832fe01dace7989a8549a60bd870a18dafd654b633671fb4cfdfbc3c656f29d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50c1c59643fe418f6858426ed358a49d0
SHA1a1bc807b8c63db38c2d6d53078f9b6611b04aa0b
SHA256ad3fe45676cb1383726761db4bf7941c41526db24dd12d5626f8619e240f4693
SHA5125b1fe69449106ecf37d64c752750dec180d6d3b1616457633c00f1bd42cfbf7481840a6a11477b796c37fb56fa720432af98e5914947cbff03926a66e7344d69
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5425d095f0162b8900017304727dc9248
SHA10cd0fb84cf7fc05c5b10d5fafeabcd038a97a052
SHA25628ffb4d5a4bccb7e898267dbacf86c55277ad1bd64ac5d31b587c30205bf45cd
SHA512276079662564fc066d88f6ba06b40b657c39156435ae302925a20151b1ca3c270110b11ad8d5c6ff326bca3ad23191e5babe87c11c045578a70254ed0e880571
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD575e179f46a29fe3fd45679b2d924be37
SHA1f50048feee11b6e8393508b909d70d74aaa653e9
SHA25641008d51b23c6388c5e372d1982ac73323beca6f8a8b6044a891417e3433aa8d
SHA512ea778b8bc96109b22c9e204c3d9a2ffe6f1696f3e05e8831001493962ea75fd92270e133e73b25498eac33a3b2cadfc0c2f37610f2cf824ebacfc807b4692dd9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e07a343e9fbdee90e27a0a9d71747be8
SHA1912812d02abc5e070fbc8417db3f31971f2fef48
SHA2568ff90385826a808047855d44b5b54d9fceedeb3abc71b684310fd3f1d8c15956
SHA51259e7121c4864a9a4ae507a5c4d9694e0af255ec107f399df5c005c51f81e9f59ce72eead3af4cd948d4bc27482040918eef6c47f58b284250b49105ba193c906
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD524b42ab8bfd672b014bc058e884002f3
SHA10dd902b5ec2cc1afbaa181b108fe6e95869878ef
SHA2566edbdf31f5f96ad503d38c9b3dfc7c3a1d99ad8a81947114639d3e34df9c18da
SHA512b79b4d920cf437e16293552c73ff4b36e9a0b0a9172e9134113ea7b3d975f69b5d942c1c56b3ff95bf5c50e5729bc3abef19586dbbd1b39bfe55d8ec40178c90
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a72d62d271dacb9540d6e2e7f704ba50
SHA1fbed40414235f842fe19ce873fc212c79ff772d7
SHA25623559b97a9e524bbb4809129ad0f633382304c9d62ae6bfe084ddf1dfb0a43df
SHA5126654ab5a07a5f2afb8e4412936249856d985e8c1733ac0c053e69122173fb843337afbd6710eb72027413361b89b4b718895cb01998358bfb7909b368638c48a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5406ae7d1338279fecdb4f440fa5f76f7
SHA19afa8a6e241477a457e8560cacda32199a042629
SHA25697c415c984a21cb47368023ec69f8c8ea54080caec55b17bb88424fda29e452c
SHA5123c78aec8613e3ee7e901df18368b97aba0c765f8f2477789b07a5af7d435fbf3d55c367bad1b51aa9d7d2185bad3e7b83ae4b2835fefe6beb12bd8e627ed584e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53cf1117508f6f1fb0309fea5ddb2f66f
SHA1d52fe5a333782a581ad3650c20d8fa896c86e618
SHA256ba786909da59b6c34c76b85256ac8ef0217fcfd1a0af10c713048f488d0fd8b7
SHA512dfac474c82073176ca42ca773139e3b04f57ec521b4361d8aa04b4ff30f739eea1295c166a7a05444991130b2d855eddb0cf5b53e521d4c8228bf3e4e4158734
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c85f7fa15a082bcf1b2f1d021fa644a8
SHA1a064d9dd34fc3bfece3272ed6c949a70d11aa6a3
SHA2568e4262815f54fdf38fe140409ecece2aac4d752937be419bd16d4f9f70cfda16
SHA512ff021cd9568911a3e0bc5e1f2b5f66423008001a3d7997aa9f09a5792b0a441369a67df2b98f5a30d9e90c9054bfacbf2cc09ee990b25d0bd238532192e054f8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5361c9804f83c528792effa88fb2a0ee8
SHA19cdf58bcacbb9adee4d67216329df40114da4f70
SHA2562c71f3a404d1b2a3fccbdead74000a733486e0f4a91feeadc2cacebe3813a6e6
SHA512572a461813de639670ee9f3a08aedfeb93aa27e34a2413daa96e69f4e0d0d18040780600da195c5905f51b6523bad9a2eba64209d53dbf55b776ef9bfc8304b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55605dea6833473e2a60a0303441aa387
SHA1e413c2503d9c8cb12a79ef204ec65d89fb0a1331
SHA2568ad784f0c819d6a93a799c23591a93ab5e8f2f7e2f183f778552c13107a7f96e
SHA512597eb2be4e02a8bb79bda5aac6afb0f709784eb36581c728f30627c536b26246dbdf0809712f94dd0b0b549e89546e013f41bfd9e7bfd12b8cf0f50a7ee4011f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fae78661cee5527873d520dd58ad0c53
SHA16befefec9aac4a63b946f610ff0de3e5b66d8f76
SHA2569b4318910d47c4f7b35358549716372ead17d189839352ec969210ba384741b6
SHA512d8f456a31e49ed91aa8b9c7a1509a29abde160147c736c87500063b118c7329ae8ab1b51bacee0fe8b5ebdaa5a091359ff271be1c2bf61b9ed3fabb569cc1ff0
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a