Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
31/05/2024, 13:36
Static task
static1
Behavioral task
behavioral1
Sample
872d4f60a1b2d51205b13f3f8f900635_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
872d4f60a1b2d51205b13f3f8f900635_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
872d4f60a1b2d51205b13f3f8f900635_JaffaCakes118.html
-
Size
688KB
-
MD5
872d4f60a1b2d51205b13f3f8f900635
-
SHA1
14e2330b644419444f75aee3fd62cbf011f197c2
-
SHA256
9d1ef21a6acc8eb5749bfd63214f0483aa8e405051974400762161aff99d75f5
-
SHA512
cf530a32abac4f372c801ffb3c6a4fdfbbb5ac958c34e4a6f913d23cc67b3da016963f3d983ba2ea1a1be0fc6b5cc70b287a3ce9ab8731377dee2105480222c4
-
SSDEEP
6144:S4sMYod+X3oI+YBltNosMYod+X3oI+YBltN0sMYod+X3oI+YBltN9sMYod+X3oIp:75d+X33A5d+X33I5d+X33X5d+X33p
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007faecd0d4fd3054db773fd54df5e8a3a00000000020000000000106600000001000020000000512a021f1493cf101ac7a7629263c3d8c2ab6571a96e8dff3dccbd6b0352ea2f000000000e80000000020000200000003a2b1fc12779c6497119c9747ae27916bccc6ff03585c4f31ff2f6df5ccd25032000000018dc01c7b1b8a3c090908453a09360b3d4e468274b1ed64d6309ea258090821f40000000c048baae3652900d6a608a7ea85d87c5511337e64b9951d14a0dfa5d880e34019e24cf552656b46816067ababa0334aca104c8e9b7b10796d1d14aa0223bad28 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d00a45cd5fb3da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B8F92DE1-1F52-11EF-AAE3-46DB0C2B2B48} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423324430" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2721934792-624042501-2768869379-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2076 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2076 iexplore.exe 2076 iexplore.exe 1756 IEXPLORE.EXE 1756 IEXPLORE.EXE 1756 IEXPLORE.EXE 1756 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2076 wrote to memory of 1756 2076 iexplore.exe 28 PID 2076 wrote to memory of 1756 2076 iexplore.exe 28 PID 2076 wrote to memory of 1756 2076 iexplore.exe 28 PID 2076 wrote to memory of 1756 2076 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\872d4f60a1b2d51205b13f3f8f900635_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2076 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2076 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1756
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55a9a05264562f770f374acca2f929e9c
SHA1b33e5381e7d2c42c84de50fb8b016cf9f5c58445
SHA256eb5a2df47ee0c70489ea5ddec85967c51ca04a2f2a2fc5cb7fccd2471ab5d70d
SHA512b305ed6f3ad90f2e60b028332ba0943355d067327549c77259e8d7c8ba8b97876b0f37c63b78c0d2f704b0dd99e525edbf4cbe6927e865910663ce44b56264c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c61bb262d322637a1237d12df4fb10b4
SHA12bd3538d09f123c85411a72ab4c3f30dab1104f4
SHA256cb5b69ba17b6f1a54748702ab924a58553bd31ae58c73528744a678c22c95d77
SHA5126b672358a697501ec8117305e96984ffdd0b61ca207a12c820896d011365b2b64d5533cac2f494aaeb13d644aa5b1e342645768dd9a616f3c9fa067c8c0b2273
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59774498f86f0139522b42241a21712c6
SHA12bcdf1bcc43f1ff7b51b1dda815b82053971e540
SHA256bbe4e16a07ae8a0ef81915765819bb1971e9c308b38f8465bba7a5c35aa9410c
SHA5129d10df16bd3ebcabe6deb23bdd4145d69b57dbff247deec0a4c822ad150c4173ec206f5cb91302fd6c1b8a2380542d88a7de8e07262007cbfe2b2194dc85fdaa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5500f731151047b5de57537831044aec4
SHA10a3fc349406c9e4d39c6eaa58a95a231ffbba995
SHA25656d246109b7aeb8f71630bc6967940c2feb7e938d079b64a555513a104a91f0c
SHA5126094a4b8f1fa8a9887b308adc6f6db74ce8acdba09e1d9df0f77a3871e5c33c58a0e0c9bc675125039a6888678a6074a21d5e6c5bd5c54a105a855d415d83caf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5332c1ad72add51ecf2366bde31042bd3
SHA1aaf14163177e9d3884040f6857e3916bbcd39703
SHA256aa0e92e390e7bbc1f3c6c46fafa26824e0d852eb966bcf949e102ad7bdcdb779
SHA5121713a432787e96d35d9b0f9136fde332913e2c6748788b68f856ad100b0bf84e12b46ee833856736279630308732b8be6ab3d82ced289d257b29c54960aaef78
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ff128fd39f6c38b086c862214a42c03d
SHA1bafa1f7d567553f349d1c8d3f5c5118a539d8476
SHA25610c867d10c83f7dc58afd0ef4be3eac2ec765ce2acc5180a2b160fe3c57333ff
SHA512807c518cf54bd8b45c6d3472117ed7e7b8cc6cd09488f6556fc949e8db02908b072ab9a7839b0f12022e63e7806abbf5d041fb93452e4516bf5aa1cb1f8b034c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56b5076f4f0cdc1f3581f4f18a694853d
SHA16a8db33f1f71bc458657ab84fbf53d234bee0669
SHA25640b627876d18e9efce8af16ad9bbafa6983e195c270da911f6a078fed6e3b145
SHA51284b63d59471574fbeccc791f9ecc7fcaf8d56545d44d5bd11dd220ffbc60013936c464105e8fbf921ed821949eeae2a540f728e0ac8e97878e09cb0d7b75c6d2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD580c9bdc1a13889523c5dd3e9339b4d75
SHA1588e18772cfca55410b2a319328eefcca98fa4a5
SHA256b13e0c572e118279200e4627a9344fa57c04517c9eb818e2876e9186260bdaf8
SHA51227ed321f967152a110efc03bb4a4cfcbac82ecbe8db7ebb3d39e5d1d755df1b0a262ea1bc675742d2a895bc81cc2c70d34ab0d0e9e1b919c341590bfdb0793c0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5298f1950b71a1b532fa503975eda3782
SHA1ba5dc4414b19bffd28d8569fad790972c273a98a
SHA256d59fae99821e995f075c3039e63c0dec8b23827bbb08cf49b8c4be50a2a8477d
SHA5120da0d4cec33857ffea9eb66c5b0ca044a082f72bd0bca707cee6edef4e75ddc0adb36aef9df1f30020db2e05c8ce9ffb0b0529da5ec6fc55881577acc2b59cff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cab412751fe00c849c7d2f2c7b587616
SHA1593bc5e6c6a00f0ec3791c63dde94d11b28da3a1
SHA256c3e4baed78782d82304ba37d57544355b4d4c47f2ef89dc96a51306b9691812e
SHA51257ca56a6d4308f151ab6e7f2c3dc273a6eb3117d71fffe954482baf7ed3f9760bfab0fea05d7879c1822fc2fa4309ee4e27757de34143c82fc5b2a890639c8b4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f3105bd2022777c5909779dac12e97f1
SHA1316549bf72c44e62335c5d92b361a644b0cad7cf
SHA25636bb01668c233d43be270f12f60d69e78dbf5a1d2f1b2a2520226469363c0cc5
SHA5123a41bd567d4aa2e6a0af94d537ec296a14b3b56ab87b1d938bfc8e700c3bee687f0c1fcd13c9c8cf921cfff27beaeb0a1e1213d881940c49523dd37b13c4885c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD501720f6499041080e70834c0c9c89b30
SHA1139132c849c5f477b59d4b08f5d28f3071e56417
SHA256703908c401decdf846bb548d662f7780741d6d84b307089593a08b11d67582ba
SHA5127775257ba34bdff9a2f999650e40799090ebebebff2e121144c0a9d4347fedfe010c032b1166b9f31bae7c1958c0900e1593606058f9db8ba7686dfabe8df303
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cbb028eb22538072715419ffc5b94881
SHA1c76c01a7c21ddd851cabe405e6de2656e301c6d0
SHA25670de158ffcbcccdb86d0c8234b061751fba37a9c0dca16467e840b5b4f0461cc
SHA5128f2a356fb6346eac57475b4846c84fbb42761795d39d3a94b27f1f0392444073b688b09cbc4c32d3db0bfcc70884efbdb8fc281969bb2fc7571409fa897bffd0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD507c43d45f776d5db8c7af416667df382
SHA1555c63d0456f160977c81eae320ee9b401c168e3
SHA2564dfc90749ac5cc7529bf4c7402df5e8b4d2e95f83c50883da538353c618dbdfd
SHA512196d7b9584b29200b049b5d470169586898e9e4592632862e2397efa91735e9fa36155e48508bf0b19253325a4ade604df2ed27b923b6eac0118a251ad7cea72
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ca26236f4f2c303ef3d8169206b9173e
SHA1dfaec2b9fe5fdbe4af8d79658a9a05d559c3a395
SHA256771a9ef34b4750d9bc20d116e4984cc110af0b61bd3324ef9f0c1d24a86610f4
SHA512acf85e9f5e70ca480fc080521b2942cc0ba963af1eb14d74542c71e84649b3d37fd50f6cecdb332418fafb67583768d11158a5da6311c871d6af9d82c7ff1db1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD568feabf2da39d1878c2d661358f83f91
SHA1f55281d14aa5f072640d201a2dbf53a2e760443f
SHA256fabcae82a1df039f51bbb45d65b1efd9b73925c616a6b21221823c09f1f98055
SHA512ca923190ca73286db907cfe7135012fde31a8846bdb11d723be4f66cd1864087266e8a4721586ad5d1ed312a5d4801595ba43239b9caf55d92ee48cd31305112
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD555d51b955c0dc808bf8ad8d845d3998e
SHA175f10432b6f2a0d738009e4d2c907eb42cb3a511
SHA256d2feb07759129dd9e182f3d2b5ba906e3196fba04fea4320ed3764b9c8582d04
SHA5129ff1dbf9582e06ad65c7ee44885c3f5edcbf6f7faa8d2427afa1ab33fddf41fdc044a79e34f7754681c0dbe35a2c8fb093cc6bd5843a89e422a2ee9f524f12c1
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b