Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25/05/2024, 02:19
Static task
static1
Behavioral task
behavioral1
Sample
708ea9acde90357349a9b5bb2f28f9b8_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
708ea9acde90357349a9b5bb2f28f9b8_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
708ea9acde90357349a9b5bb2f28f9b8_JaffaCakes118.html
-
Size
139KB
-
MD5
708ea9acde90357349a9b5bb2f28f9b8
-
SHA1
337d6f02f23116d6fe53cff5518e004bb6eb1853
-
SHA256
ca73fbdf13052f770d522f224d2ac5ec99039590a13164dd1bc21630f5f69381
-
SHA512
2d3ebc7b57b5f4afef05512b50f55a37a0603087bb745db7658c8879862ca3204648802bbb4bc1eeea4211813d5f0904284d539162da4bc798d6556476f83e0e
-
SSDEEP
3072:Sdg0IKgvsR3G+ayfkMY+BES09JXAnyrZalI+YQ:SuGsMYod+X3oI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000018374452f2af10468e24eac3f5fae8d400000000020000000000106600000001000020000000bd78be564a33d02d2d559304b4f54ba0df5f359fa18a1b88939763b4e9a7927e000000000e8000000002000020000000991ec92419ffb49c826c89e19e57475c5220d51591f15892ee64ea21eb49bef6200000003bb6158b5ae235dd8b68b76f2fa4212968f993cbf3dd6fd266a6a4e89d127415400000002aa45cd96e1c5525c5bf8621d82a2ef2326a4995139407cc0e2b5fd945725cd5b64368820fd62e2a647bc850be957b16d6a4c876f801952791e8dbed44ab4f96 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{49853A91-1A3D-11EF-AC06-EEF45767FDFF} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422765469" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 40445f604aaeda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1908 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1908 iexplore.exe 1908 iexplore.exe 2588 IEXPLORE.EXE 2588 IEXPLORE.EXE 2588 IEXPLORE.EXE 2588 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1908 wrote to memory of 2588 1908 iexplore.exe 28 PID 1908 wrote to memory of 2588 1908 iexplore.exe 28 PID 1908 wrote to memory of 2588 1908 iexplore.exe 28 PID 1908 wrote to memory of 2588 1908 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\708ea9acde90357349a9b5bb2f28f9b8_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1908 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1908 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2588
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59951474f272b3f2d9d9c7b475b99ba20
SHA1c44aadd411bfec23566b1ca839e5855e79735037
SHA256e64dc3dfd01cd244115bedd03d5ca9bfcd64ec2e2ff62d3dd6e6c6947b3dad80
SHA5122f57ca0862347a2216cc460cbb670d4f439fec32bd8f4697ade965cc80550e2d4671db509eed31ba4bf05b157f9aad76d938627ee8b467cf520a141b921c5225
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55c3246a6e97e4b7830fdb41cd8de22bc
SHA1604257341ab6e3691e0ed5be99f1e2d21ac76a36
SHA256aeddebc1ab29e7f5beb395edcfeb266bb6606a257f3738b630b068367a192c6d
SHA5125a6172572ad118678aab62d8644ea6477dde2501a11289b9ef0407d239fbeca176ff71472c5560fb4920c2eac6fc075974fa9711a2810bc8ed46338eb2669795
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5123b9b1557a6f2ab8eb4055450f64666
SHA15fcf65b99affbb6fba9382198a43bc674b4488b3
SHA256369ed413a929e6bf512bd8543af90056e340198c2b5c4de226790333ed569a39
SHA512727c71aec6ae3f23a5598f11e0f617dbe48f02bafb83d222f45f021920eac8281f4123a36bb0c0233f05734a7d6c05292ee50f4d3219589f5ab67ccd96fe9e9d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aeb1da143f98956b7369804dc4dd88f2
SHA19173c95e4079a022aa82893b1e53a4d1b07310b8
SHA25631499aa51622ff4d26e336311966080e09e862ea21db37a020c0ec0920f1a606
SHA512f6355fe727661574de2ac5859b3a43820358f4e4b0ed4ad296edd5fa09cd8d65a4bcb3dd58d95911377f37db7e375fc488cd53a5765662b2a2023ca4f2e99fb9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e691df143838d077872a66d221ab22a9
SHA1629f6b53b952f4030d7edb89be18b60852bccb00
SHA256aeb53bed7ad54b3a1b3f6d333812af7a6f24ee9aa638a710d6dc6c757eac0e45
SHA5122596f5a08d0da6215270b45e8849301da1988528f4ac7ed4b57f2ad74c42b84d61770592f3a0550ee36d43de3a9abf3e908af16ed93d717825b501ce02f53d54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53334bfa7642ef4312d55f5f4ce3fceff
SHA1ffe4e9e6792cc713e70937d9b8f94c75d49ca8bc
SHA2564007768886341e1330fa280e649ea9702a519102e09b51602191a0e9a2fa5097
SHA5126b3e951485011f810325f07ca209968c60287e523a90d2ef3181b146653cd7f19c1f7ec2ff00502355511670347df2a2e778188a27d4d32e545cdcdcfb69b92f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c9e736a83cde478616f7c80355df040b
SHA1a1b107f72d87463eb34fd96799a8cb61c58a7556
SHA2561eeae43f200dc4b8545a315032bc7629cb7e0803f14e9011a72366de9eee8d17
SHA5120cd2d3457f42ff48a23ec68aa35ca621aa4a6ec275f57637eae7dc571a409bbf1a91c17dda77429497c8a80aeb55d8f1ee105016cd67a1b4ccb8035287327f67
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bd37bcdcdbd3778ab1c16df5f76fc66f
SHA1c557373493e9e2ebcd6b24a11034621687114ecd
SHA2562cc8a8c0e1b24c3295152b27eb267020fbbd6cc63d965589104524527555348e
SHA512797ae688fd1f40451d4387eb970b84ffac1d9796a09f546383235b7b1de8d4f53bb4ca3db76583e28dbc95ad69df21002f3ae00b3a1bddc1381f787388fcfc33
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bdb57a9781fb982c0d98b194d3a724cf
SHA147e8a81cd99019a9ab5159efbd674c7d51f5d710
SHA256365398ddad7c9498a3e1e6947986935d2b7bba95dc71e69ab0223030746d3cc0
SHA512c9ad5cbfd97a7a64fd90bd7d94922df9b4d77ba92ceecedf21e9c7ddd4b081e02487a71dfb6eee96f2a3615ec0b5c55bee8556402eca4373b9b1082bcb9e817a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5762d1e9a47df0cf35b24307072f75071
SHA1160684c8b9d64967dd5e25e36511f412da8de463
SHA2560f550b0fd54ba4c7e281344f8770470f2c47f8d172e06c30dbc963ce630a2b6b
SHA512f2d5e8144207fa4d2feb28cb1ed5d53d75e9f3272e699e3a1b310b14e4ba208d6afe02612d9f0ccbf37c13a425656410f1aee580f3c2dc58ab5013911bf6c887
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50ff6d73b928aa75efd415aea9b855fcf
SHA1b9cf21a31aa1d079ce47aab546bf358b58f24473
SHA256d74a2a67a083b42fdc8f1f7164eb4a5bca355c23ab6641400423ce4e68f4711c
SHA51264fb33a51e0a037aaa88b15ca4f211577d17d0cfa50178dcbf47bf52d20ebe444a8911af0d361ab7f5b77c0e6de5ac279ba9fdaef4d2b1d9e38a9a9bc67fe399
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5351cc9c317c7366fe604d7fcaa25de0b
SHA1204f23156bccc35ac3d132c7ff1b89e97c186524
SHA2565b4760cf05b16046ea2633eb838798d02af4e39774232a45ff5d5f9b1e74cb57
SHA512949fca5a1676aef38f7ae4accd466626f03fe77327d30054436119113ed3426532674511d6ef27b73b2b6fbdbb7648f7a88ec81916791f22a19f4f6560ca5e3d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD532da484054ac051d927d5885c7a9cc2f
SHA13e459bae825d15fe2b4886703e6dde85ff93c864
SHA2567d43563a3ab11e05c50eb60cc176f5a518983276b099df755de2a62ee325b61a
SHA51294bd9264327c2425db546ee798f3d10900f58fb930b4796e2955eff6c702b4a08316849070354fb7a3c7f3355bdec216adb448e421e2bddd0f00917834133ac7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53fbd1925126756e9ce161328cd0f60b7
SHA1414ed402a8ced26f499ba7076e2b6792e9e06243
SHA2561251655f856c76271d1a9a9d4a1ded561f5548d090902f2d126c3b758cbac614
SHA5126aaacc3c9bfc381dd592ec879fdede5aac7144480804faa0951e8525880ec97c202dddef83a15f5e2d6d84ab61aa40638c78732f5c9f9eed94230f203cf50727
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD573f1127f67c3821038828f06a9a8890c
SHA10df136a77ecc49914fc4a9b4d165dc89b83e1367
SHA256ae788de90870203c25272921af638631406f695528449e13fdd1f99e51d216e4
SHA5124c29bda40c6a9d880bc79e5154a4e205b1b3c3182b2aa3ae14af23cb29d9bfb3c4124680ffb0a9268533432d307c901ccef1dbf1850650faddded3b93746f4e2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e21bf95fef7a4f192e76f4a8af9bc59c
SHA10846c457589b1b6c813acad7d66ffa9f5852881f
SHA2561398bd44ec47717231b7edefd7dafa400afd6fbace88c5594cc711ae5ca90a14
SHA5129e1e07d28bce0b81e6fed6696a3001788474a46bd239c712db718e624c98427d2ef4be55a6d47a04e872f4d8bc7b9edaef1f44b5ce0e006c840f9a0d1c0b09af
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5785b32d9ceb81b7f8aa48c1a5c2c6ad9
SHA15350c19f01f7c3bd0e21e2ecc6adeb8d42c6bfce
SHA25602fa002770138361e32be0ddd598a1b62dd4b7f80518ce07866484d32e8016a3
SHA51296de83f194a8a9eff424d4d37c5ae58c3b6941ef93146928df1d85d104a61ef82971914b0f946df0ef544b12497c754729dbfbbd25f1a3eaffc941b9718f9ba2
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a