Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
142s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/05/2024, 12:59
Static task
static1
Behavioral task
behavioral1
Sample
80d0e87109829d9d211ed39fe21af082_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
80d0e87109829d9d211ed39fe21af082_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
80d0e87109829d9d211ed39fe21af082_JaffaCakes118.html
-
Size
139KB
-
MD5
80d0e87109829d9d211ed39fe21af082
-
SHA1
3493767e320387a1ad7df2bfa8f69a04fbbd308e
-
SHA256
b73d7ce8a4c705959393e65c61439ca51173c9f3ee2e088809ead4d9c35b3bc2
-
SHA512
5a84a1dc57052b07ef27fae3d682d4b7ff24ea381eaa7f72b4cc556a185bc2eecfe60f1af02684d1368f3b3d250300cc2a09bccb663e9229064399b346e3d3c5
-
SSDEEP
3072:SWat8jX4/yfkMY+BES09JXAnyrZalI+YQ:SW28nsMYod+X3oI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 40d2d75ac8b1da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e2e00db199735f43a219cd0612d4f5c9000000000200000000001066000000010000200000000419ff80670a78552f8a4512c6ac97e33af142cda98c632300988c2009b67ab8000000000e8000000002000020000000e4a9a0f59e7060f32b04134c71b0d354e91e88f6fcf1333adcfb6244cef98577200000001b70e1825b6ae1ea5c9a74e7bc8c85b574929bf5059160e4e4b965525533d5284000000001007f5e6f74a25f7eabd219f7f6fc05bc7ffe23a7deb2f85924b3203c43d90e8c35e5d16463495d10b3c337a7b1e61a5fff72cd172f561fdff947b03e83c18e iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{44120C11-1DBB-11EF-8706-CEEE273A2359} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423149431" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1152 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1152 iexplore.exe 1152 iexplore.exe 1448 IEXPLORE.EXE 1448 IEXPLORE.EXE 1448 IEXPLORE.EXE 1448 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1152 wrote to memory of 1448 1152 iexplore.exe 28 PID 1152 wrote to memory of 1448 1152 iexplore.exe 28 PID 1152 wrote to memory of 1448 1152 iexplore.exe 28 PID 1152 wrote to memory of 1448 1152 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\80d0e87109829d9d211ed39fe21af082_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1152 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1152 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1448
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e2a726100a8a5ec90f0ac70a2ee89be7
SHA1572fd64fbfe987654b643d058f1f057453c339de
SHA256221607000e53b500b92f53079a75900c5aef3544ef856925e3f24ab2a6abce88
SHA5122290a517f7d44fefdeb672ce50a69e2f165e92cb194977fa3160355f6ff2d8bcd65c8ac15c1bad902c63443b5a1eaabf8dd08faa26071af1ca4146f246f993f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ede8c43939cc4018ec827d418b15398a
SHA1b5d7d43eccead0d9c5f82d261c5a9536ac487732
SHA256269c4fe3e32a70449d531ce1927888b642378b7fbadb2348cf29e848b2ff8e29
SHA512fb692ffd8709bd9be4cbfee1ce4685001fd2e3698c48ab5f0422c2aae178f6687ac2a7326d43d384e0d86522e3cbb8cf9d5ae364b289eaa65fba7a591cf961f8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5441337c828a3003f287ff9f0695484c5
SHA144d59523d27b26005f13808616dafc517f88cee7
SHA256bd248456a50a8981377da1fefdebd950d7082cedf8a046e1cc51a26dcf195037
SHA5121163510f48249f50cc7804999b79003a6da00828d0b6da50dc9d5b871f8268d00433f7653b43f0bfc748559c1a340974f22bcf06c6d4b76ac5a6aff827e8d51d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56b5036eba3036bbd34a5d90ba23e66bd
SHA1df9bc5db4b051bec3d84fdaae4e1bbb2b81d2dba
SHA2566d55d1e202ecf47931aa49eae1816ff8a4fe64cb7691e569fb3ae45b4cf04e54
SHA5128ee3d79f1c0fe3b8fc727032fac400dfa96796afd044e242dcd94d2caa4f1bda5b4ebaa25498756215d639485736cea018dc31a4313b44133d6bb53d1edf07eb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD542dca3cdb13bf1b24f104da769d6a666
SHA163f585a0f3a8a0dd624089c6503b5e0c6310685d
SHA25654e8745da1f05c9b7e6519d1ee4f5db1a9d7e101f1132ba572901975c36a1c01
SHA51253749271e45b122c3d0824fa8a7d60abf6d0ff949bc1cd98ed1856269a3a67837ff7521b23d341f416301b5aaf004012f9bf9b5d44c3355e308689211d2812a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57d9015fd8e25826d58a77e7116ad0dda
SHA11fe12f787dc9480b33b2acb9cc277ebe6adec649
SHA2567be82249dc7b7794cacc5c9cf141ba1f36dddf07a99037a58f76b541a46edb6a
SHA5125000be3749acbfd1e6e8c8a802b3d06d173f2c56e4416f6ac30950817f1b30a777703dd251cef33a0b636a7268db38fc8ba6dc4fe505de263a18469bc14d16f9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c7b0525d0a2e37e47dde6143819f0bf2
SHA161fe85cb6f97472044e123a25c3f0181ff8b2594
SHA2565422dccc20b3f75a8a4c8b511dbda64f1cc48826f1fcecb5f0c570279e06f278
SHA51219824de51527ecc845a9e54a6e2feeac4648c604b6c5cc2024924cc2119dbbe9db139dc163755d4fd0662f8d80371718e84d19adefc8dc296b7c17899c99ce8d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e8a62389deac654d786374847214701c
SHA112fcb66f34d9ab44ea3aaadd9b6d4e525ea9cbf4
SHA256198cc931b9f923f8375381e77ab6d386cca75956b568122308b0a0d33e2a6a56
SHA5123c1d98b411d07744d24cd689ba745dd941d82c0661d6f70c4e940c7d6b990b1226e642f046c58af1f2aebcc8fbe4be7b6bbf28ad2a0abc38023a0ba1963ecf54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f862d7bdc98c1b8f2dbf92a1b2d8b397
SHA1cff1e79bf953bb641d2d06e534c3d826e899cff9
SHA256420f28c9530759de76ab0bf3ffa21e3fa82f0171cf51fada38bcd16dfc2d91a7
SHA5127fec15a86907e833041645af28cb5a699a7de1c8646b4f78dc7c9156f75d9cc6255f244bda2f4ffe68a4b85b9db1e4aa2721fe143a7b39b4952cc4ddfd05c6e4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ff9465ee8fb64fb7fe45d6df43c7bcdf
SHA10e5a9a9a6f91bc3f6f5a624c0fc3237cb6f6d3d7
SHA256ed14f8cc9d1b336d1f1f2ce156df170e509a5396bb79ded1bb981f0a9a135603
SHA51228520a2647c059a397cfa8cf4ed1b9c82ac0540dbe94502ed48fd64d149daad9116f4b00e71b9c79e0a3ec522db6e8c388ec8c4af58169074377770e90efdcad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c87aeb3724d37c869f29e63e66218376
SHA1d7bb18855f56bd678b41246c256add959b39565c
SHA256e4cb9d6d3f3b076c30069643fd109b2fc183d3364a901ea28ea0841f871168c9
SHA512dd0726b91c655f7ae2c77f8ea4ff7fe55e3663673ef6033915dbf3c1810d1e42a3cee6c41266c46766c0839e0a906d95e5df78e6c46bb205647f9cedd2e73fa3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52f4e4337cf9aa07ddfedf6eb1ebe9329
SHA1e2ea9d89015a1be05d9df2d5fba27c687363f5c6
SHA2562811b219b049378759d1791917517f1d6aa2275b9183152478644f6589735085
SHA512808babb434e02ec11c5fe02a9918b35f0c007455ce1ce61a0ee487de5636e499b7dd68fdf28a6a1479bcf16d7f85242f533fa5e353a6f728acec09cf955a04c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57d7fac17dcc43f3d51c7015cdd339387
SHA14e80170365f6aeaf5c6aa634c8b1c344042f5b98
SHA256c19b2b78bf1d49b30634ec5db7721f9fdbe095a58d847ff1aacfd55f798ce1f3
SHA512d8cdd0066c0536a9fab1d5b1f21145e853b4e90aa20fc497a24e0eafc8c44efcebfbc3aa514413a38335fcb8cac9514e15823cf432485560385688d97246f713
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d2fa7fafab697caeec4e24ba0604e19d
SHA1b8c3d3a97a6a55f2dfec3918f813c424f013d411
SHA256117d26297fed7d4095866975dfadb5607dff9ddd0f01c8c39390aa98ace2cb44
SHA512c976b407d472772b20b224bfdcaacd3de97158c8b3d06c0c14429d152232cde6c902a5cda31b180af980e2e788bdc74c8f5aa6eae9cc4ad4d59e686a77dc9c6b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55ca584de874f711818bae9a48e8b7050
SHA1156de61342bc22b4bb351ef9d7c80ff8fbe9e325
SHA2565857b837991f12aad76cd92a52cbbad533382dbe128f497f30c3d82708eb76f9
SHA512b6f3f17bd1b2459ce83d840f454f48ba648eca2d3655737a6724542bcf902d4a4b6bbab9b7cff1fa7fdce74caef37458b9dcf09a4f28d524fc54d3a26eeb844c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51ffb56c7670cd45496897ef508e91a23
SHA1cac4f356ca6c6326e3b837329e20d8041ee4891a
SHA2568e024c47878cdd3a9ef21378c8d58f517b54567b3a5ee88caafb52583b9aa9a0
SHA512f8d438c9fb1a14e73854800c7aa21a0a00bc762cca2ad19eb63d02457bd5a21f12ee9b297e2406b0d7deb33409c18f0381837a50251734c2c577d2a3491f08fc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c2566ff41abf7275071ad31d8234d75d
SHA1ddef89320ed8872d4ea78c12cd9c13fad02fca2d
SHA25634c3d52cd128a9f04335d9a807458e24c26bbb7301a2addbc07ce23c8771dee1
SHA5122f3e4afcdb16e386013b70fb1bbf47831c8b698b796cd04f033a5ac5189364c193398ed8fece9b0740ae9e10fffb5243f84a66673c5b19cfb1a9291b2e205f15
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b