Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
130s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
15/05/2024, 20:26
Static task
static1
Behavioral task
behavioral1
Sample
47e2ee5fb19c4eebdebaf30ce195daef_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
47e2ee5fb19c4eebdebaf30ce195daef_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
47e2ee5fb19c4eebdebaf30ce195daef_JaffaCakes118.html
-
Size
848B
-
MD5
47e2ee5fb19c4eebdebaf30ce195daef
-
SHA1
0dc200df574a96f2ba048689408449bb2b49790b
-
SHA256
82e1a5fb51a4d2639a2e300685db950530e3edec7d899c13c83c264778fcecc6
-
SHA512
3e7c77735ef52ad13bc4978684a161706dbb2bf44e4f7bc8e4baa1220c3831a49743044bc4e84fb881aa38d6079a65eda3eb13b1fdfde017398632e6c43fb5bf
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421966644" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{6212CA51-12F9-11EF-AAE3-46DB0C2B2B48} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0278b2506a7da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000abb8596cc50c0546bfda6658dcffc2330000000002000000000010660000000100002000000003e53d88846502e2082002bd5c35a8ce6273d9cb52921ea8a74bfa5fe25133db000000000e8000000002000020000000b59e0d816cd3f209cee87be72647a81730c23884d7f7c92304ccec26111dd5f5200000009ee9a201091b4a951cc06f919f5649c9d3a5723403d92e5ab2475da9584d2dd1400000008c04e515fcf12364c49c2b82097226d2cd3265fd8efafe5ee7706489b296b4200e09a7036ab4bd563e36c40436f682073b2922aeaf71d31a9401a8feb2014ebb iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2852 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2852 iexplore.exe 2852 iexplore.exe 2172 IEXPLORE.EXE 2172 IEXPLORE.EXE 2172 IEXPLORE.EXE 2172 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2852 wrote to memory of 2172 2852 iexplore.exe 28 PID 2852 wrote to memory of 2172 2852 iexplore.exe 28 PID 2852 wrote to memory of 2172 2852 iexplore.exe 28 PID 2852 wrote to memory of 2172 2852 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\47e2ee5fb19c4eebdebaf30ce195daef_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2852 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2852 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2172
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51591b051c3f7cc411acd19492f7f2584
SHA13bf376b13f7c8de65d239a410636dafba3006b13
SHA256cb82153287e86ff35a40d0d7f9d0c3c78ad2dc56c70353570caebe1e0e428623
SHA5128a74e42ae9de4fe2db9dfeead9ba8a0743ac725c5a4beb158c284ead3bf4a70428bf1b278a3d355528028c411a7b6c480c9524e9351a2e6926aa1b4d45b1a5a2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59f9fcbacb83a7de32538159900fcc367
SHA19ca2b529e189c8293f351684d74be2faae7ef6b2
SHA256d1b44d82337bd12095797666a95d17d0848b4a85e5431f15cb02188bcfbf7e10
SHA512747d83f300b24cbf8cbfc0d3b71e717f1c5da6d92e5d058aa7b9c940d9de2c1d13d84592b28d646071f70bab8f87120e5e012009260cc46045ad0fe281d8962f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57438712dff81ff575bbd91339789b7b7
SHA1eab447cbd481ffe3863f4fe117af5cc2bdaa9d63
SHA2561713f0e3c08f98bdf7785683dec05e79991624cedd6ed6546dd904b19a51054e
SHA5124272a8426c5c847dfd857b82f91a7973d6577ebfb6d696b3613222ef3c7d51d8160218b45c7b2bf741f0b3f0b65ded2fed08c7d912c7d2592234e08b0fa3c5bf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54d6ec2129a76b8f6a28736f4ab831214
SHA1863fe931ac9ba551b6b6db0ee739a60ba6734778
SHA256bcd49f33dfebdfa200478bd66186b82363bd8e94bee5db09319303886946f88b
SHA512f1c519540b8ec88972429836ca0b32dba8cff05f86f4d767116306df718c01f7bee5fb10c278bb70641b8697a8166b340b1c378cc5de59c94c8767cd08be8202
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD548cb570c0fdfb479b5a4aebb2e01642f
SHA1ef4e80321e44d177bc11b7e89b64ca81b40c660d
SHA2563741b48a4d7194f9d2cd78eda8b7c8215e948b4d6d3ba2e3b7a8615f07177dc8
SHA512fa20b09f54c4b4ad98963dc3e78ca2ff8f18c9c94aca7de27b066907d840fb9b5597a15c22ce45296aae66620b5f22146ba93f68a14531be553c10730c844c05
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cfa56d9179fd419b5bf92d5981869201
SHA1131907afd133014c5fab0116f0fa89cb83504f15
SHA256f40469c22535f376d5d9e599276b756506f2a47cde5ada153daf26f64b33fd48
SHA512c9fe4435dedb1d7b7c748738ce03451ea5ad6a52f5acc4c0b275bfa86e217452005db9cb578393040073ff968fce22090c26f38d970f41bbbdde8d7d23ec0838
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a9cd48f752bf28c7f9b358751bf2b058
SHA153182d71de3c682b5612c9a5c09b84a1eeacec51
SHA25635d3442375d986f53967c9eb36ef3961a69f958c8f1eb8673cf0de7102792269
SHA5120a8498ab68ff53e0f44ea854a0f6d287019987c944cb62157dc7618b98aa26420c43b44032a8d0419495121559e09551e0f8c316fe7208c7cfed451e75e49d54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cdddc822094900794081d6933c6f7504
SHA17052fd09b0e4abf1a4f02d00e0d475f99dd57321
SHA25691e2c2d6ba9e4818443f4f1a6b479e4fa53b2d1b5c79ee3b95122f3152db8726
SHA5126ac626acb455b72b04fd46f1b899352c663a3afe52ff99ddcfd06bfeeca6d50d591169d77e6514f3055c2f05f716b10dabef6d47b1fa139e1aed177496440a5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f43568acc5cf71d3fa4f1e991db9adbf
SHA1544bf68ed82eb58dee97c8fd5960e8366391bc8b
SHA25621192ca65d9d21f0c6a3e575765926c9ff666d29271b48422b5ff9ec1a6126af
SHA51251e9247774915395e930850114d1ff8b12fd1a34894bd9aa436857ac0aaf9ae46beeab99753996faf4f3a3af2fec2358c735da69ad1719a500862dbdb8c903f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c3f0a0b01813119a9f8b139a577455b7
SHA1d344997ea5d2ebab4746d31eb07446c9c73526f3
SHA25656f3135e50b1d2290c6a561d3f24fae5f4f467da9290fd2a530e3779e75da053
SHA5129db0ff1c32f69b04f554be6b7ea1804ecfbd48a9bdbf31dc68d162f9a72b1cb7955c20d7032aa792df59aa411a14e80f05e5096a1148498cfea17ebf30333121
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57d8b8e650aac2d15a674654d19d1d312
SHA187decf3bd4bee34b6a4ebd702e779cfec93ed0f0
SHA256d7e233ca4dfeb67feae8e1e2bfff3bd1fbd896ba77d1ce68958d8e3f6761f5ad
SHA5124a10e2b4b744f374e5c3b145f5ba532e0512f2cebcafc8df83106f9e0d183f5c612d00cccdf4a323be142b5164096e94762341b87a47090f2b62b1f4139f8752
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b471dff367a9b18b5c941efaa8e7ddde
SHA1d12a3359b7ca1105c3dad7fd23f94b4a547da445
SHA256ce5d1be6ebc1fd14625ad65aee4f790708c600a8388a7cee3d7a978ebfe5449f
SHA51241c5a09f7ee68cb9125c002d78c69d9264cab0947b764760066ca5d10b253b77fa409e640ecf15f686b0ad09251e8dcf0fc8935e47b4c817d28f92cff6f23c0b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51c6bc643db7e680b42d8f4c949845d10
SHA19203fb78f5183a1166325f0cc8e367db657b6511
SHA256c73cc12315306e50d0b3cff8aee098ee5e76b9f2abc390df416a1b607a159d27
SHA512e0472d46f83ebebe5b6b3d02fcf70a57d1c2f7caac887f7d065f479e5ad3e98cc58b2cdf5ae0cd4ddcdfbd31ddaba7307ddd6b526db68dc285ee812a780af8d8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58cdd764db06969b227190ba997259329
SHA12f60c449d2f8360c68b83334566c0fec8268bd13
SHA256e407f177d63474286047444604d749d2f58c32d14d494c15b563aead23eb9868
SHA5128a67ae9764f0fa58150cf955be62fd4b0c4138d93c42a4b3adc9247aab4029a6361345cda2fde72afb1707ad0e2415c60559236d1e0e7e185559a7fb42af397d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bd8030ecdb4b49343c1f1e231a808694
SHA157a479a740a000ce043ac3fdab16fe000ac07fbb
SHA2566e9abe0a80c342fef867e670d55b79d2c5791f8464ed681bafc494484c9e720a
SHA5127bd9aa034bac47959d5900afebff7d7cf3fed50bc1097b3a88a32665da4e9aa8e656e90df42e2b6b708f56330676b22ea27c5c392e38fdebae2e8c659fb53726
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5202b498fd66d2089a894a7305845d09b
SHA14e3cac0518d3b0e5befec7910359ecda17f3366a
SHA25650d480350fee07baa19a7b2271f77f50a980997ffca3b315c5d83bcce15da61b
SHA5123cf5152329715a2ffcd46ba1ce71cb45e70b01a91755ef4fc9821ea08a0bc88790aa2823631336cd8a98e9bc40cdd32b06126a3f0586afa92ee028ee5dc45cbe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57083ab3114cd5200102f5a74862c7aa0
SHA1ce86324442e9e859d5d6b0f242522066d82ce8f7
SHA256c3eefa83eb3ab4692f40a7c4b5d9892674ec4a6a7ffea77c2dbc68d46ba95e0b
SHA512d993ec4ddc0f800b0dc2b7b6ad74cbeb049c7d27c658f12b3cdf271a35c0f2294058250109d026ab5bfb3c8a78b50906111fdd95f73220a19d4de02c42475b95
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52914b22fd9e5136f8cce1a347376c9f6
SHA181a346e01bbcf06fb3633521dbb2bc70c5d87b29
SHA25622db2d65571b487fa2a7fa7fa7b033ee24a74be6ef9ebd5277fa1db80a403646
SHA5129652df4c371da53603760fa3cd0c1e3841544ea3dd6e1204d10a48dd5baa8957c6ae12775013cc6effdbb796987685e8d6968e5f54bf2d8b31f59b8739e5e4e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD540d2ed27652c3f2d00983bd7b40bedbf
SHA125d84a1f498b4fbe29064b2825eab4c5c662d8e4
SHA2569269a03fd3e90657443762fe70e132a694c5264ababdffd57fab4408dc251c8a
SHA512d72c018417e11c927ef9cdcc26e375ff8d0756ae0ebd77ab5b88472f9970623c280f9cd74dad20f5ccc08469573e09c8d3a967820920d015dca429720af83ac3
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a