Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
15/05/2024, 20:24
Static task
static1
Behavioral task
behavioral1
Sample
47e16b531969a2650e6d2122ea96e23b_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
47e16b531969a2650e6d2122ea96e23b_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
47e16b531969a2650e6d2122ea96e23b_JaffaCakes118.html
-
Size
26KB
-
MD5
47e16b531969a2650e6d2122ea96e23b
-
SHA1
2122a5c69e0028695d08beef86462d8af13b6efa
-
SHA256
17d17b947958a3e9ccf57b76d9e43b02e9fe4abc0b8b037dd796e33cb5faca57
-
SHA512
0b24cb4f9e04776a2abc13f4a4aa36d39bc72e13e234bcd831eab3981337b247bd23d0119c82c0628df031269f671650dfbf9d8f6fa342e0fedef150b784ef06
-
SSDEEP
192:uqB7jJb5njKnQjxn5Q/6nQie5NnZnQOkEntSsnQTbnNnQRCJVevo7NtMFo+NzQ4f:nZQ/JygcrHna
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421966560" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b000000000200000000001066000000010000200000004d3fa3f77b9533cd8bc6326b5cddeb042a100d5fe43ea4eb49657b1b100d2281000000000e80000000020000200000005fb412418e9d9669d7799b6975e94f3a5e68240033ebf62a11ae5f7ad2e5af29200000000ea7b3dea2a8c735d796e92d45d0c0b36fc24978def65b911dfbe62880339157400000008cb6e7f2c052211c0729b78a90d68d6d030e25931621cf6768791071be89d94fb55c41d5310a2b00f756f1877088b37670d08c7b8ef4096a4b0afc04ee4c9596 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b065160406a7da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2F6C1D91-12F9-11EF-9B71-FAB46556C0ED} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2416 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2416 iexplore.exe 2416 iexplore.exe 2928 IEXPLORE.EXE 2928 IEXPLORE.EXE 2928 IEXPLORE.EXE 2928 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2416 wrote to memory of 2928 2416 iexplore.exe 28 PID 2416 wrote to memory of 2928 2416 iexplore.exe 28 PID 2416 wrote to memory of 2928 2416 iexplore.exe 28 PID 2416 wrote to memory of 2928 2416 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\47e16b531969a2650e6d2122ea96e23b_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2416 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2416 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2928
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c78dea93020f652063b50adcd3b863a7
SHA19df2e87f80a110ea670a5026dbb56be3163aa956
SHA256bc3656854f59e3ea7d32c374c3a518a1eb9db8273f3e3b4eb2adefb58a3e0276
SHA512fa8b34703d3cb868090ebf4abd897c3550f43c6dca85e4fa2f50d9d424489fd2401eb311fd1bcd824abd9aa5e2b91d098a488a9fc5660047541f84ba050d1b29
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD540b114bb49df9695d51754421b06900c
SHA1e4a583e979143afd91c2a52ca1c120e0ee5ff720
SHA256fa51ff6fe3b66181a9326b5ed0c28fea69179ffd6e2ff277da4384781869a066
SHA51274c9b4a68b3c87e616026fd2c860f8b00c788a2eea83848232b9f0bb30852ca078ab9fb7780fe6d9555f8a3fdc000c0ef6aa63dc22d67a0ffeebc6a7a1346866
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bc13f10f7c57b0b501925e3abb3ae28d
SHA14da7080bfb30d3cb3ad936aa3d6b242db6cbd698
SHA256b77b7d84a032c149d343aa3f9ab173cf9caa641ff7f45d0384655547539fb4c4
SHA51294abb5349fffab87907fb4bb597e5b08641563df0e4fd92e6fede62680cb4c0e991f6915c462e72aa89f980455cc6335ff9f4a49b38fb53a4876911793d6263e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52c58b70edd67c7dca68d2de8b990e771
SHA18e0f83b02317997d748b8ff43ba7f2ae4556f444
SHA256fc23e349b83b19ae4b9c4e7c5e8ef0d50f4485bc72ab2ab20f43910b2a084c08
SHA5122a1105524b89cb44b1556b4d1cce56c4af36ae2731b9cef7f6ababa3620435a4d48a853f787b955e6cda300223408f07152ccca86ab74725ef397d4fd52372e4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58767456521c5150effb79c7f51419dec
SHA1bbf2f96d56c21ca230627eaf33e4420c4100f4af
SHA256cb75e762b0029f777d3348ad0c5419c0ded56674d36fae75c95846e78085aad4
SHA512dfdf93e625faf6784798ee68eb359792ec782abf08c2ba4348c291941d571aaf13a982814f344c886ae432eca0adffa7a5af984ed77da4a4ba3f958f6eecf420
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ecf23e5769f0246d6f88e8eff9a8e858
SHA15a1df1417e24cabfd50f83ff96e928152b8afb98
SHA256da768a1a8f8782b756dc0a975c5324a078321ef1ced9d473db24ae0665db0af5
SHA5121766decec6f4cd240582d93eda7355d6a62a5ec15ebfcd7d2361861b1545772f6bb9640ab6d7f3bddec0528dc3179669d172983233fb6a75c6ca2afe1eb7d44f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5835a0f37c871df37744d61aa7af5dfcd
SHA193eedf2662c245c078f3ec31c7bcbd7ea97e2bf8
SHA256bc2b4f88e518c005838d4f79a37c6c324074b096a3712a37f155c00b5391bdce
SHA512215ad2a85c0958be95a031779b37a4c3784bd6e6de05b7d86b32fb875d46c4053a8db89219949c25d2547b9bc7721f634fc0b7aaa466afcb978865f9effbe9a5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53709080066aa86a73328aa855dbf4a8e
SHA17e67ba9f3fc8c475494a8bb0455ad8caa503d5f7
SHA256c7de5f2e7f247466c6f09f4bfd973e585647ae1c60c403d2aada7fa3d36f93a7
SHA51283294cfe757192bcc66d03ca4a55512c25881e3507cf9629d39cdeb6c10ba8fd931ca0dd52dc7a5247c00e028dfeb0c801e4ad6e2a98033cce20243df2b9c4ab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cd0b02f6a9c3c7fbf4b3c4ab79f104f7
SHA11baf055ef214e9d677e3045fb1596930b4240fc4
SHA256c39e7e7387b25508b7ae4a1d9699c25dd3f551419fba54d5124c320f2d9fdd08
SHA512577936ae50b206a6fe67ba5887f0ee85ec02b71eab61084f26d35a9f0152ca22c72b2a9465626592d2859004dcc458b8b6ef196c3308d0e9df62ce9509b02f54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57182d01a49c4ae0520bfe75732dc2452
SHA1566cb09afbc616c8216e6edbad3a4bb7aadb551b
SHA2560b006b9fb7753d843e8e4bfe5a562a747802abc164ee4959afa613b8aac248ac
SHA512f0aff44951320efb353b5b7a5fe7915ce044ab1d29a0101d57e0fc0618292dd9c10e5530400b408f1303bf936208ebbd86682cf6b5873ea66ba86c8d74952340
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54984fa6e6efebebc20ac3af176cf7678
SHA14cf1f7a15defd909ec79da99ac8b804b49d004b4
SHA2565d408f52651dca0f389dd0b4371eb8a5f9915f20208c9a532bd09bdd421a4e05
SHA5125f1ebfeef683a9f514ddb66e0736f716da428fa78ba0453025494f0f827cb6d3d4815d588b1ac23e4cb204aee4def9f2397a349834f56a7dc2167733cf9bcdc3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54690a743c44451c88df2265e08acfd52
SHA1351dfee71679f27097252a8125109a4c11ec631f
SHA25670eee2e350be030b6a2881458016ec2b695426f96e3a78354f81502f1e95234f
SHA512937b4fa99e6476c072125300fc973281f8a222657b55da5ed7c1c4f806d38431ec22c4fb9717424da44e1fafad1fb358e46f0cfe7a1b1d4447fb50f8f0465595
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57a1bafdfafaa27c73a3b56461776e917
SHA1c6ff87df81d2def8d5a816029ceb7491a8e76d52
SHA2565759b3b70110c2fcbc17968984d09a817bcea8a1ca6447a724b4cc1ae3eb4af1
SHA5123aa488ce05456907d92fa43d00f651a59343532115730493aabb3e12b56d8b8aaa772981a2270cb3c53ba29b753a240b2b8b8077148ea2c40742dafbb309425f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59f5ea6d53b7b8c9ca2a8120dda6bfe70
SHA1ea3dc99a84e3dec7be9c5d0dfe7cd68d083ffcf3
SHA2564d81045479606be06cf6580872d84867e11173a3e9fbc61f37d9e175c110000f
SHA512e25c5c459a62129f093846182871aaf6df8a1eab62e1600a3c310274f056bd89b54eb6c3131615b1b8d851bc1beaf1fb154bae7169f982613ea86f081679667f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50a906b145c246018a9fbf5bf554ed070
SHA116acc8818cc69ee386a35e0150b32c15f6a7f0ca
SHA256dde8d925656283f65be3a6ffa228b472717a4af2d24e7b4d5aaa1781591a7a16
SHA5129cfa21bc54f61ee9fb0af552f2d58e61d5f8c0532d7c0da5e41a8c888f2975d875a655f6cf1b941a6b0fa165394e76c60520b866c4a3cab35328e8cf133d7aff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c8b7c12b6778f27e6289b0259384d95b
SHA177af745c8c75f40d41477d1502a65bfa85cf5f10
SHA256830a59c90556c8a29f0df2a0f4bd7e8f73bef9c5d334c0cb0661774dcc9fbb37
SHA512dac5acffb4f557f5853d97ee11f88a509b6ad4ec702ed74c8ed48d06d4ec8156429d906e0cf248cd5093c964f864c10cb78f41a13d3240df1aa0e739a55b8779
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aa6c8b0c6e738e29daafcde5e743c828
SHA1dc89d3e1fe34e878b1e1bc94c6e94c11445c7dbd
SHA256420e353363cb34289cad01bec463d4df6f456052c33072462e0ba4b6d91e4fd1
SHA512110e94348732fa33f5b8ab0079a109866bd901d1a4859dafef9c3b15a7d05f200e912b69dfd7545e5d6d8986170e9d10336ad23e0b2341edca2fff27e6597208
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53311c8fd9fdf1023b0c6dd3c802ddb22
SHA1b3a5ae1d2b7e74b9829a7d69ad77a30fc3015a9f
SHA256d9708357a41aa8c4aa01fc83001ed7960d006e9339abfe86ce811eeeda78ff48
SHA512a341d9a125cc86f4300540e99929cd2bd372d6cf3c61a290cd29f9179b647ec39a7368bfe1a396db2827b3fea01906a6b80396a064982413fb178145da9c9681
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a