Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/05/2024, 12:07
Static task
static1
Behavioral task
behavioral1
Sample
461bc041906919876587183aec5010e5_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
461bc041906919876587183aec5010e5_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
461bc041906919876587183aec5010e5_JaffaCakes118.html
-
Size
157KB
-
MD5
461bc041906919876587183aec5010e5
-
SHA1
62c77f80dbb7483824c04497475e61d7697001d7
-
SHA256
5eb690f28725d6ffdf4d5a1092b1dad990e8c5e95b22782e454ab6a639013b43
-
SHA512
5116d3143353d4f1dbf7d4902480ea7a3272d48bbd7466950c683e53f1d8593cfdff496f70ce3148e42f6a1ab1a9a07753a9bf23c15404a219a784fd11e7c72f
-
SSDEEP
3072:uvEzAPKm3WlPNUgPyCzyfkMY+BES09JXAnyrZalI+YQ:8EzAPKm3WlPNUgPyCWsMYod+X3oI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f019568ec0a6da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B98BA771-12B3-11EF-9DC0-D20227E6D795} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002dcc56832ee45b40af0f973e997a3e3e00000000020000000000106600000001000020000000bacdabb4ed94fba72497356af7a07076de3cad4ed2aabc7f2f8d27cb2fe555ee000000000e8000000002000020000000ec7e03c95579235808bfd97b84d872b2d2dcefe0ace88a65626fb10821749073200000007bd2126727a24c678ac20c280e9459e29c2af5db73dd4f868b07d83531bda83740000000ad35c8062a6e59a9040731a2fcc97d01bb0107b59bcd101f7005885631641d32f045baf4649f062ad6ef0b882aaa9ac1b946a9a4691d7a38fc6804c99cec6468 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421936727" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1298544033-3225604241-2703760938-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1888 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1888 iexplore.exe 1888 iexplore.exe 2380 IEXPLORE.EXE 2380 IEXPLORE.EXE 2380 IEXPLORE.EXE 2380 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1888 wrote to memory of 2380 1888 iexplore.exe 28 PID 1888 wrote to memory of 2380 1888 iexplore.exe 28 PID 1888 wrote to memory of 2380 1888 iexplore.exe 28 PID 1888 wrote to memory of 2380 1888 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\461bc041906919876587183aec5010e5_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1888 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1888 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2380
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD536b1e363c25e0bd801e9546ef23e3189
SHA100caa683c6d89632f36de93fc69f15e18a0ebeb7
SHA256efe03ed65ef3e91c3f4be6269405fa73cf49e1a5e6b9a50816e749b9bfad5907
SHA51298c3545f0f1d6a7b0174f8ec4e9f06ecc9d6821d93f9618e94adc1e06bf473010ce07261b7fd4cc64341ca7b8ead347b0f5b945354bad96fdab00390ca758fcb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD518ea84337b243bc061931c70f3ee670f
SHA107b96f14ff17f530018cf064f2f1d06457d43e2c
SHA256ad3ac598699f18de4f1d809e188feb63fd4b102350015235b6f7af2e78e04d5b
SHA512c3616d8aaba9e063a32b4d6649e517df7dd586a94e1ffad5fdb34f13e584fac80a5bd2d2244c3951fbc9cc766e35298baa0a5af2f740a768b83d7194ed3c438a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50e5b24b4c1f55520c5a5ae86afe30c51
SHA1f2b130475a556dbbc943586e840be8969f047dab
SHA256279e53fbe43c3dbdc7f2a39cf25fcbc84d47a7021ecc2c00e875cd895366031c
SHA5122af9f1ff39b5338357b40a8c46f6d8cd805366ccc4f5b318ef46b69d7bd52b2c93317b218a97d6df9ac0b5b362b4c8040b918bc926f71772f24a049fbf37445f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56537736b759482b40f89933a35e94580
SHA1a261918cdfa8b1415e366a77637a44e88262e343
SHA256be0618abe4d50feff4aafe047dba2725f7baf5e8754aaf72a022a121b2d5a823
SHA512183ae213abd3eaac10e21c12b7eeb4d2bb116334372bd680f28d719396035e6c04d3ec874848a7692f9448b699b18da3f786a674739365099467c85918b71116
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52d772a2089aa9450cca050554f504af6
SHA1882335944064dc226548e753d698227628171841
SHA2567f5050c5d4cd827860da83e8e7f54086d870beb4bdc9248ccb0307e9f2a70650
SHA51204fbfeb527fb10f73949711c5b10a2ffa7ebe07c2774efc2ab476742c0cd97baa98b4ba986976286d96852881cbf102405e788d559b24680f18733e4877cd2f4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5328b310df4ea270477d64c4da7abf6f8
SHA195127b8af6416f33f4c8ab61bf2ff78010429c5d
SHA2566e1968442108f0f19f7bfc53bb584f1ec7191485774f824bded5ba3b2c5a17fc
SHA512d834bbbf3fc7c4908508d0135ad7df8d7384d7b8fb328696a037998f612f327d8dd5927451130d79feb2b7e038a406bfa0d0eb440e63d0cf3f0d086b885d9238
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f3ae408f721f657efabb0014c25b46f0
SHA19b80d4486e7f7c5d175814f78a70eb18a0a839b7
SHA256b18abc9655897ee34505d4a5dff89be2da2ce49633bfa22eca230d4bbf4c9d26
SHA51259b4ebda8578948c507bdc9667df72abf6686c95cdf6be2a00db86dcc97bef3d86cf28fc489517a28cd77490ce83212ffee5cf2172f9cc252b47c6a448b70292
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57d4d3ca5301b0bb447e51839da8a4e01
SHA17f88092311e5be356fb05f8595a91edfbc671483
SHA25616b02b7426b0bd8857cfc148de3f9df7f5a76c967053f04af831431f657e51f9
SHA5123a32cfb71a7687a871b1dde3eb3e3cf691c7e66f2fdcc05c35e2098bc160b1c869c6e2757de9dfa5a87ae3addaf5944c692b7a5397a7e7ca0ae795f6406c84b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD510eb72489a3d643044681a1b0e0badbc
SHA1f58c8da3ac65eaa0b7a57190842556aea604c1e4
SHA25669ea015ee1671e92dc45a585434586c56b4daf06afb761518e9f92e8003831a2
SHA5124c35a273951cf887e708675fe0625b9cca30e227941e8b5b49d47c6e9a94b6700c9502536ad0149ab21c3253e2b9e1f3afd3fc5cd4abfb2110958e280501faa8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD550cee6d870191647af2f8b1fe36c6ee1
SHA11586653d9ab9fa8cfced525ff1363f6586581537
SHA256869abd5c3c5a2742e69759056bdd9f5118e8c2505e43ac90e47d1c305b25f4ec
SHA512eb6f4efa0093f24d24d2656e7e9ffb4739528ac2921384014e5d0f274899dbd64b591686a179d766b3feddf9de85f09e934589908cf0a980b6adf57ed4532a55
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dc3b53b473b131a3ca426d904fb52518
SHA1631eac7303485a3ae76cad47cfcb7228ee9d9f99
SHA2566e1e7146bbc45ad80b5242be469af79bf979690ebea93cb3d5a426975b879258
SHA5128b6398a44f7513b76ce05b0c23dd7764ccbb50b09070d7e04854559b7141f885634a1770573b356d180ce8786a3f6755c7a65ff76566cfd7311dedaa2cf966ba
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5233ad9039de94bcd8a530571deecb529
SHA1780a45bf231d7fe54b79a9abe9fc9f3748437a1c
SHA256cfe8eb5b905a1c640a1977cbb912becb56600c1bf2e037c37b923dfafb821da5
SHA512b33803b906feacfa75ac8d322c3e7d3f80b556c8bd8d54dbbff0f19c395cd3b1260951127a399a115b85dc2ca95d80b09468d20541f09902c9da43a373733417
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5053d7a4dda2180f928e861a90196cf7c
SHA170345e754773e94f22b50ffd2507e6e4ab877e42
SHA2564e3f26afea21eae70bd5a58d1d780fbb39eed2f1ff7c9dbb7586f1894b37268b
SHA512526e863d9bba1e29819a541ac9368571783851adbef2dda75fdc4de405e1ff0cb9baf076ac7b35020ec1a490ee668449e6226a329dbb2adcd564327f6138958e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5adfcbb808d6adb7ec9f25a2221039e45
SHA1a2f49de0b788adb89903e22fc8af6d890f438e8a
SHA2569c48260e88e4ac92c04b45569aeec969460aa2434febf7471295dba16d4985d0
SHA51235fcb40fb0f0373e0e4140ecc9f04208748124ba13e90186dd2d0508d02b41681ba122fd4178e83f555e0d8407ed84962ba4fe886a0db643f7cd0f26dc4ebc85
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f579536b4e9eb619bc563920d1b57710
SHA1583d68e806bbc21fcb8973cea7000ae3a71afe7d
SHA256d13ae418d939ef8a0d494d25b754e7a0a087a3e5730fd008bb400f822f47fce2
SHA512a4a8f2d82735a2ea55d218ec0d53ec8ccb93e969bc7d893e9ab68df1958ee2dba8e699bb8b1e908abc8f7f1304053f9ca0af2c87ea12818cbc3e5203468e1bf5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD555ec54cde56d2b5144724f966503521d
SHA1b3d2d9aae59581c69f3b8f54e59279ed1ed96839
SHA256ac0f11a7aa19daeb9e38ce05b63e135b8b91ea55702af3760a45068ab445db3a
SHA5129d738706bfd6de0ffbc00252f556e353c263752e17fc378d237bdba50a7c109c42b06a754cb4d548287aded383944ca5e216e3fe3c4ed19dcda34b1982601487
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d7a39377ec475b3ec9a0e89f6dce002f
SHA1219f2af51095da514c6fd2e932228b7791cb0630
SHA25692ac9a280efaf7a231a8950f6d37e4e61bbd087bb8a8b04b79a1e75428c8ac74
SHA512ebb29159a1438190d74779f47aa614c7286b6828dac67a2acda8850f1fe6f2306cd61191914c1ac53fe84b2038954d3cdd2f7a77341e58f8e2d412856dcf25c5
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a