Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
17/05/2024, 07:15
Static task
static1
Behavioral task
behavioral1
Sample
4eee501b9109179459c4bdc692267011_JaffaCakes118.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
4eee501b9109179459c4bdc692267011_JaffaCakes118.html
Resource
win10v2004-20240226-en
General
-
Target
4eee501b9109179459c4bdc692267011_JaffaCakes118.html
-
Size
18KB
-
MD5
4eee501b9109179459c4bdc692267011
-
SHA1
acf68bf22987b1f29051838bb30b1d6bcccf2637
-
SHA256
710529cfa5c408fd4fd4a9d8637eb0b03ed17a9c48716e2ed77e993ba82ca0f9
-
SHA512
14d3cf422507349a0f36aa6de17b6b359e6d1adeae51336b6e8ed0dbaccfa013292d64756cb13ebc3e6014bc192f84a5b3cc81d941948cf7920a9acdfa192a10
-
SSDEEP
192:SIM3t0I5fo9cKivXQWxZxdkVSoAI846zUnjBh+w82qDB8:SIMd0I5nvHDsv+zxDB8
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{43046F91-141D-11EF-A4A3-CE86F81DDAFE} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422092006" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b00a553c2aa8da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000051860bf61707fd439cf78a21cb4d8bb1000000000200000000001066000000010000200000008c6005a260f1c9d44a5553da898dd41d6e11914005ebef1e3101a2dd81a04c10000000000e800000000200002000000050d2e19f2a5642c37f09f29f45c1e8bc5d9eaaa9729004de5e647846ea6e9d1d20000000f9a124a40d5cade2b95c7f7e7d345acdb9841417940736ebdc20a3d940f0c2374000000013c66f2b766c9b71920d798a58a832b7b01eb9f8f008abd5800ba57c79b781f71d37424910f2efc7a67933fef2d5322f0aaa06b65af6a8c9068ab2d07cd84056 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1656 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1656 iexplore.exe 1656 iexplore.exe 2688 IEXPLORE.EXE 2688 IEXPLORE.EXE 2688 IEXPLORE.EXE 2688 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1656 wrote to memory of 2688 1656 iexplore.exe 28 PID 1656 wrote to memory of 2688 1656 iexplore.exe 28 PID 1656 wrote to memory of 2688 1656 iexplore.exe 28 PID 1656 wrote to memory of 2688 1656 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4eee501b9109179459c4bdc692267011_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1656 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1656 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2688
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5702c708b3240968ec3755842f07e18bc
SHA1b70bf79339dd3521e8eccd9ae8e36e4ac38f1597
SHA256a20e6fc8f578bd9658994e3cf67686e1818b44ffc5885b2846c9b5f86ddbd891
SHA5127f5d5d50250a93d1df0d8449c39f22f7125b8fc039295733a6fdd5c3c7f555a5bb61b11c454c8fcd80e10eac77f21a3fc1ce0d886e5e71bc08e4b8b1647388eb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD509e0642cad89211023041aa12b94512d
SHA1d119729a6d076cf19de03be87813f4461082b50c
SHA256c8d35eceafae4780be8f52be1b7ac0adc2420b1d5538bd5275cb3ce26a00ccfd
SHA5121a98a74af5bd162c1693349467a1a598536427609ffcfe57bb56ea61586967cbbeb2c84838e9932539b057fd3d17d55f6036e1872df1ebfb02b5234b79200a58
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51d6f2725d137ae28b337331a524599e5
SHA1ebef47384eaba6b43570d05ac37a0c472ae5ecd4
SHA256eb7fd021c672bac4d6606455d96932d790656ddb220fd1ebca4995164eedc714
SHA512c82a31534fe59613c4e92c67c39e00f5cf95fdc8d34cc856192fcd88239af759734bb15d0b748734ac7706cc8cf7b8fe225436ab5c32ed3e4752451d2395e959
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD513aa877d43630f4f04c45c5faed9023d
SHA1ff5d214a997e4107ad3697bc79501ed17f1ddc5a
SHA256816b60309f715ba7af631e26617a8d4c6176da90deb4147dbdec99b02aa3febc
SHA512b59a16872336a1a38ab4c4f815941f07e59843d6040965bcf2f6dc6e8fefec9234f268956937ec5466e0589f9a246e0c874ece37962d6a4688f6de8e155aa028
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dee7347f9a1255cb790b27004b219e32
SHA118614641b0cdea60c216bde964d3cc1f9a472223
SHA256fa68790981329d316951c857da1508c573a896c87080e4e429ca788a857ae5f9
SHA512478470f4de3702fcdc8134d29609bf08c4cd316a5d11e5cb0332aeb3100c4c0cc8dfd6a21c2e560aeb58c226e35fad176f910f212d62e6120768905d3e9b315d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ab4c31165826358f7342cb4aeb8c4bb6
SHA1654a2ceb835da326996e5342c006c468dd18da56
SHA2566b29007ba4c54c754567b6de63e3e613e7d97ce20f7ff4b764dd57674df1e7b6
SHA51258366d4b84619e92515a239263c34fdf104b64a94a6ee7f2cdcf1513a550aa44f3f1c30bdeac9c677706b07fd1e93d9834973e7afbc16a63572b9fa05ea204dc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fe00f4643254620e58c99fa750a07067
SHA1e32687daec7aa7d9f834fabfc55a7a250a65fc10
SHA256bc960c9136d9221eafbe6f66d3decb74cb9864d64aa3f344d112cfd3c9bd8edd
SHA512814f7b358216f7fa7ae83bf985505c0cc713fba86097b38f83717d48fe0642d43b10718d58ca2708aa286402ec6f10367d638646641ec101e12d6924c489396d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD577481cf14fea248d1a351b0e544fbea1
SHA13027c70953f5077194a02b585098c77bbb0f1cc8
SHA256cf00fef7471eacdb2e53190fac9abecd7e02c270a0e16132a70c1ad24e828a9a
SHA512740feae1d6d09abaf96d2b3740a3066d04ff122dbb9ee85be8a3a430ea9460b993e88f5ed40fd74377b2905ba4d7caf95db068a7a8a242a822fd4644d232e287
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dfacdda02dc3b8e6c92e4a533604f5b5
SHA1cfde1864da2c9269d933ea4e0f17ef73851ade67
SHA25615401f7543f7b532f50b3a3864a87312f049f019f3d26ece5e429329fede2d3f
SHA5129f0cf9cf9edc755972e9fe99e8a1a3bf4689e49d64fbf9777586ecaaede01d760303ab0c816eb891fd20a21fb5627d712a26b322a9ee91f87995f5b06285bd96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58d27310aee97884c54f953c97f710b35
SHA113696a3e4ab415a3907f4d16db6e153059868e7e
SHA2567809ee8d9c5555290a4370b0f9df008f46522c22e84f01ec608beea1780cfd30
SHA512d34b7593d58ca0cc35b97541a78452bfa2a5440b98d5e8cbb5928378b0b13bcf6af2b108c26304d1ca5fc45361c8ced5392a32a00075405589e0ef5b003e0a90
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52042ca01980f45374106edd9a86e315e
SHA17db63270aebf5c54a0e023865b61b3ecd11acb11
SHA256f92bb82d8eec12f464a80164a8c105955e98db9bae4a2e9f795e961e5a53192e
SHA512f2a0553e78aafb22d25ae60c9be9c0d510c7916f3fbb2797c4572ea1fb6e4b1e0105ab650abe06f3a6809d5040d8374ca0a7ba5d3e84cf0538d7d07728bd326a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f0fe7290310f6c3b4ec23d645d0e6e24
SHA1c2081906afe62e78a19c11230a359416b77182f2
SHA25635a4659120dba2d081bcd9188fdb6f13c8638964bff427a0ce54fdcf2a989018
SHA5122f8de57b1d0ab2ec4b62fe55bf6a5874983e767255e88532acdc1aa4d136a2a5c674ec59fc62fa80b191f83c5ce0c62fe027f937fc59fe2ddcd762cd908ca9eb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e1cbb41ff27264134c3a43684a60b12d
SHA18b0d17a22a07a339cbaf5a5020890d0aa8291cc0
SHA256381b650cf2669e24ac6c30881e0cda4600db28945578a0f23843277f8811b433
SHA5123c05fdda18b7ff0cfc6bb66adacac812b694ca9a6607a8343319c48295cdfe81676c395d08b212002348908fb1f2f7b41e87f310605f2dc02fdbdd98a4fbe2a6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54bd05f31d3a4197fde1a5b9285affd5f
SHA1bfb2c5bf6ccc7deeef56ee0d8ed604e18422c7de
SHA2565cd4dddf695e5ef4d02a6c10567b495eff891034b64fb65f3d27b3ffad9d7a08
SHA5126ea6bc04d0785cdcd0dc0b3a557efc5d29dd8a52dc2de26967da912139c3a6093a5222d5dc8f7f789c203af9fe60570baa9df19c9b3c0b7f635b4bb6e8844130
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55ae36bd8577e8eb5478a7a9672ef4138
SHA12606611ad574efe07dfcd332383f32b8271d1060
SHA256dce4d9e3701721187dc906e51fef67c71792aece284389bdf77c2da8cd420b47
SHA51242efa5c1528b6f646ffad9c219c0faeff3baa55302a00f160861d61067a570e1ec75bf9b3f3ca0da6ce3ecb4ded51484acb85637ce414c8a91c1144a1a7ce917
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD564bdcb0b2632746b36b7e7cc84929761
SHA190a102aa158ba40740374e8479a6cee67d04de84
SHA2566e3bcc3433850794a81bb8bb3376e604b64202808b2f4979aa1f5dd3e9c05fc1
SHA5128d10933c6c790b76d9280cd3dca7828b4b49ba41249d870269459a617989b21b886df2ef2869acd0bf29bf83781ca447dd23f676838f008f56f3c2b72d510d84
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD554f0c695416f07aa6920914668f36f9a
SHA105c93aea5d40a049ed8a43a70683620047ac5a9f
SHA25672ce6e17100a5027ad50e0125cc5cc3c8a6355df98c58d6de54b59ad7f01d92a
SHA512cc26a6d41da9efe4fdfa248b0ca4b4b1aa6814d68b43c87aa254db6743d4b12beda18d1a2ffe73d60ac451a9e44800086fca36b7e70b1815180623016b1981b4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53a34ad53548a92705bb7a42e8e527c6a
SHA1da3850fe9105503b6cfabc932cdc405adb0eb214
SHA2566d229152c51e0799e26704b9e1942584aa9783c9ac5fca06f9108909e5cd0cf6
SHA512ec8d4db586cdb5047cf7b31d8dc2c671b9e345e2a72604ad71a5abf08d7e206f23111799a04bcf4666490442ad921a3a31fa3cded4402521977c1eb5f12134a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD523a768175adef1116586fd68c5cbadf7
SHA1480d3e84efec02f9736fb57d3338403480448453
SHA2569b2d8033c55982eeca69ccb5e9337ed9444b6009110315a973761f402bac8a4a
SHA512e0748166fdff3b82ffd3f1de97db0003c6b2a7e71ed5950b89e4b9738949e099402ce72cb8867bb84015762d81e36134acff26d44a11f20b947126220d79d44a
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a