Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
17/05/2024, 14:42
Static task
static1
Behavioral task
behavioral1
Sample
500a3c93a2c38072f6965944265392cb_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
500a3c93a2c38072f6965944265392cb_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
500a3c93a2c38072f6965944265392cb_JaffaCakes118.html
-
Size
139KB
-
MD5
500a3c93a2c38072f6965944265392cb
-
SHA1
9e67204ff590596526abdc5e3b74ccfcbe72d733
-
SHA256
10aca8f0209688ece1c2b83cdd8e7a95ddd07e68a5c189cde16f8a7742cfa7b0
-
SHA512
4cb2209425268961221d48023a58fffe106c5a8c8fe1211726152a7a101aa9b0ac70b8212eccec1ea63233bd4078231d5aad3944cbb30dd7f540f07d1ad90d93
-
SSDEEP
3072:Sj5nSwsB9Yr9MSY6fyfkMY+BES09JXAnyrZalI+YQ:SjJSwsB9YfYsMYod+X3oI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 203b53cd68a8da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000ceac87bed41c13cd8fe5f9ea9f1be0aadc1e20cea22f9db4ed6b3c303a8a160a000000000e8000000002000020000000708ad431cb6d13c6b972ef7036b76108d5815f09686572bc9f4e86a21ca5a6ee200000005369a1d4dca70519f393c36e7bd838bca660d3a77d276a27d7442c82e97c63db400000008707e9897b1c620eaf557e2fe280d4fcecf623000bf946c8060325c2529ac3071daddd23fd1b02365b3a63f779763a24f5e93102a7cc799f41582bb3e554d68f iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B65F7F51-145B-11EF-AC06-EEF45767FDFF} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422118831" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2244 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2244 iexplore.exe 2244 iexplore.exe 2872 IEXPLORE.EXE 2872 IEXPLORE.EXE 2872 IEXPLORE.EXE 2872 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2244 wrote to memory of 2872 2244 iexplore.exe 28 PID 2244 wrote to memory of 2872 2244 iexplore.exe 28 PID 2244 wrote to memory of 2872 2244 iexplore.exe 28 PID 2244 wrote to memory of 2872 2244 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\500a3c93a2c38072f6965944265392cb_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2244 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2244 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2872
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD549207e26be9141ff281997331d6d71fc
SHA1c722e4a109ffb741cc55d3e45721659414d465b7
SHA256644034b14d0d57676b19cd52f8d08d6c45804a67f7951e9a3a610e3bd2725c75
SHA512fe5f5aa6c81e6531f1a4a423df6ec1fb8a5666239761afe0591a00462f8a1a7bce19ee1a661efb545be6820007e97f81850742fe3c63a11d15431240d0631af1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fa6c11d5b79abfebccc41b64c1f22271
SHA12568a3c82321f2eb1c4563299a47c27da4801a70
SHA25644645dd743f7dd99324aa7ede136b0361885c2d8a926632a7c0ea520bdc107cc
SHA512372e05f7da58644c3b6795e28b752f30bf0749a461b04fca5d2b3576ec375a9d6239f30e2abaa5f7f8e53ca24324332f0e3cd8b4dde417d47be63341b35b6c18
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b47738db7e20abc6d1fc74b56ad33a70
SHA165355687d7305d59bba3a1463d543be4510fa06a
SHA256eb334a431643fb39de91e2bf6dcec0243dd7cf31558a6f2df1ae880078a66a4c
SHA51217ee34df59360da60beb228ec60bf32ff4569964f907880e93a630f02a059636b96eee172237d189924ff23fd05d5bf927ee49b85452f3b2e25a70cd277543e8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b6b84936089a9dbadc133330f9eccc70
SHA1f94d65dbef620d8c8abb308c4288eb55b319e811
SHA256e2c9311da885392d50fa488fb3af0e8692b316d99e6fb87f16ac878f363d46da
SHA51289fc7da7dddd16758c7bf9dbe54baccd09df4828ba37d1000d6ac03e042d8c66bd03cc6435ff354f468e7628e2e4583222450e501b98102acaf9ccc7a3e2e09c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55d6005ba1f7ce49454cc7be0f8e09514
SHA1a335bd96a8b5262a196e12404a67b698a047dc6c
SHA256c2a28f98a9033366dccb6e24a955fddd4dc4222e71bcad496ebbf6fb5bd654b2
SHA512c34fd59fbeb9dd701daecac3f25486c05789548c00c3b2b43921e44ea3008486e48b1ad95cf9d17fa0fd52b39a71f63104262844a844f8d46ba9b8f73c7334f0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f107f4c05ad3f695f2833cb2f1bd23df
SHA1141b9f7840b971e67d156bd9a8fb56fe511a3c8b
SHA25684e387eeb86a4f1231aa68c87a043f457e05f9b7328c0487ed65e206acaa8b9f
SHA512c72afec85d14a0ad4f5fea7b00956c974e4e75172f71baf91a915b3457d3f07ca28561a573535318a42de0aa743e0b274dcb0a54133e44b23c76621f7715f14d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD536bd1ba4c478352db4d58ab3a3068bdd
SHA14fcc5bf44ae02de96e39409577ee690e0bd0f860
SHA256fe99ef20d446b244ae543e86d3cf129ba558d7407cec261c85dc438d0cdec774
SHA512c515dacf56fc5138ad6f98cba08d8155c64514993c085f9c656f34c50fdcfb5f8cb0be88c9efcf2334893bdf2be46c99a48bcecf0f0ffad88b2b832f5b444088
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51066b53a47702bc433950cc3a3cd56ec
SHA1e3a019769f3834edf9cfac523af9e73636443008
SHA2561c8584292f2c170c5a38b4f6561f2a69e8edccc884a388f49b057d61238c14bf
SHA512a8171eaececbdebfda7183631b116e6de4333dde3bc0994452d5590991e2ca6ab4d34cde1d6bfd3126c5f640b999d4005d95521f50a63afb17b033c4379b7d49
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD545cac03f93e134dca49f57d6978b9a37
SHA1ac07fad454b025b02eb2d21dc23d509f181241a9
SHA256de31c363f1788786963499c6c9a3f2e0799a479ac2ddc3d804e3ed9f1aafa698
SHA512fe5f0545c995137bd2f96d57aa1707eb07280362bdd587e301588a3691e58bf81f7fc080c2dbf27c3ada161d9827f8368ccd3c4857238415a6210220d3432831
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55ecbcde821dd3ada573cd204f98498c2
SHA12d622f5a72202c7a8f42d693e035a88e85ce3a10
SHA256f9e7dcad9e1ba161e35c7a8119fe1094a14ebbf879ee86864fcf7a6f90c6bb51
SHA5123162da113cc138ec6cd3500ec4a6e157b7b6f9e39cef522599f7ddfbfeaa62405b1a3e5d819f81a0a860c3d05ce4096f4e394dcdb86d6a178fcc20e3a42f7f6e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bc2d2ef059f08fdabd63f220d080aa92
SHA14311509b7cf3d3e159af59e0f2142bb7917cd59e
SHA2563a69fbafb122c8b4920c9cb6038db2f47595429699c6d5659a566e0e6163f4c6
SHA512fa6c0696815a7d6d3081e99f26619cbb1c39321b07e0ec2dbe4acc604716ac73bba201cc7110cba5e6f96b1c69fcf45ea7b13201a50681d28614e9a374669760
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ea8c18464dc01b71691148ce0b59dc1e
SHA1ac56a1dc65fdb43ec3b063a4f7259cf683f8d590
SHA2564c741e9f0e06da24318cfde29a9c4086d6bc0cd1486de7c81e871c630914785e
SHA512f7ad54b352bfc0574aee9df59d8146674f1abf2c46d156ca0150da7c8f0f55942fef576d7e893447fd8fae3b5bc5365bed5b538f5b225755418e5c61471e89af
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ac0b3b1e6bc1a6cae9081be0cfb863d6
SHA109aec20e44926330c08f23c3938347a649ffefd6
SHA2565db3cbc489e1390e9d8dcc55fcd134e4d9ba1fbc134765c3a864ae9e7a0a8eb2
SHA512969ba557c68f14468e5575445f45b0fc9652afb095891fc9bf267701ebfe76deac45b48b730c5a3faf266ab9c9d693bc857f8e118346d49112033e7eb9c0d756
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54ff9c0b0b35c5837baf2726e7457594f
SHA1793c657c8ba0fc5f0c92757e4b8171c457b1626d
SHA2564c07e2349a66867cba169bee1cb259b19508c3bd4dd323775b042ea8ad212038
SHA512ffc46567ae1b00419f4a9207a078f2395c883fcc2366d1f79ccdd624a1e750f8e2d50b2f51c0ea541eafd485e332bd0245b19956ac5ff1df428e4b091275ef29
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56d7034c9938b4762a8d996d6f0311328
SHA11badf9afdef7ae34074bd2eb1d185fd18140a237
SHA2569ae32e0d1b0f5d6117121b88dffa00daab21d181fe5f47225ea747d77078226b
SHA512c34cf3626107415402968e516360f90268c58e93612f3abae16bdbc800ec357a727e6ef87cb3074b8857f45433ea7d76dd6b16f1bc3520bd2691f3dd91c7f958
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53054adb82284cd69fc5ca066bf93b6ca
SHA1a1efc7864cadce2027445267c503111375f9c6d9
SHA256dbd620c978614c6c19d960cd3e5e7e983d1a0b4d72027e8d4004316fea730daa
SHA512e8f26f11959003f0b2420a34980b8d260fa8c40f57ec905d61994c963804affb6832c49121bcb5eb8c1ef8cd646439d615b7f14f62faba973880d2724a35d16d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c84ba6c6676b6292c5211b7818c55a8d
SHA17aa9bad5b8f6498d4af202298953bd8fb2f522c2
SHA256c38fe278e2a576f33772be636002446003145f39cb63b9a3c5286f71cbef0441
SHA512be2b1a2242293fc53b3e5b666252ac1482d4201c385acbb8fcc998a5e595195a7b794725659469a81bf794dc27861fa355bb5e57462634e615aab7035673f0c0
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a