Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
118s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 03:54
Static task
static1
Behavioral task
behavioral1
Sample
894a844d5d1c5341e6095873f4b7cab0_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
894a844d5d1c5341e6095873f4b7cab0_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
894a844d5d1c5341e6095873f4b7cab0_JaffaCakes118.html
-
Size
830B
-
MD5
894a844d5d1c5341e6095873f4b7cab0
-
SHA1
1c0d0c11ca84a993449449004edb0efbf54e04ce
-
SHA256
22733e86fbb3bf780aeb395e186d766a5b8fb8139560f668d7760ddfee604c8b
-
SHA512
dfc01908c87e6bd7ae723dea7dbc75e9a0278d6a8048bd370362e766df12a666566374f942f15ffd9be12e7afb541d195c6c85cbe1f1f862df098064a2222617
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423375932" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A23C4B51-1FCA-11EF-AFF6-E61A8C993A67} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d6d6295676989b41b6e4e6cdd77c300f000000000200000000001066000000010000200000008e2796bcbbf33c7855608bb3b450e77a10fff87c9b248b354a6766136c33ae48000000000e80000000020000200000007962fa03fad783b2a96ecde983ae3267f790ad698abaa9c49638c109aa66621020000000bbfb10a4d251af22439921fc3efc51b5654503dfca6b21cdaeb2722f186313674000000066ec1476070ccb36102a9f1e701dd26339e4af10beffcbf5d88797e9eeb34a6b22cf19f736836002d7abf41590951ed3967ef008cf00b21e86e008c287c3fb9d iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 10290d66d7b3da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2980 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2980 iexplore.exe 2980 iexplore.exe 2136 IEXPLORE.EXE 2136 IEXPLORE.EXE 2136 IEXPLORE.EXE 2136 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2980 wrote to memory of 2136 2980 iexplore.exe 28 PID 2980 wrote to memory of 2136 2980 iexplore.exe 28 PID 2980 wrote to memory of 2136 2980 iexplore.exe 28 PID 2980 wrote to memory of 2136 2980 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\894a844d5d1c5341e6095873f4b7cab0_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2980 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2980 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2136
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD520fcd1da2eca1d9d788656bfa062a320
SHA188ac4d1f8e9e8839fdd14d9a32269e989af48af5
SHA2569081e158b7d6245d069ba6328308ffa71f3f7fa056c867ae038bb2886b0740d7
SHA512d52b38e945f40e5afcae14ff83bd97041f5d8461ee69a876124b0172ab56374db01fc0c494ca54dafff1cd44446db25fcf0ccb154a5e2e999495e7f708923775
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5db7b28f54eb90e2ea404915430fedb35
SHA1daf257e79e4dd3f2861b6461d0c1565c4b59351a
SHA256fd78b85d9f862425d4608898c1de9d565664ff25f9d2de8871ee9e57fe8195b5
SHA512abbef6c426494701ac29f76a0a42593225cce4de8e8f3ac93484d16a205fc7350553dfcd47f63f13744129f544759dd1b46de0eb19eb31876b48508693364884
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d60e712853a596371043a15ccc725d21
SHA11cc600486654e3321c1b506ae67da1a9627d4076
SHA25688e9fabcbef62668974ff3d0a8ce21aa003506215e67c56f1a8d30468bb612c8
SHA5120edfa44ffcdee9ccc9488fda2f6c8d8ce7306577a271055198fe29e4533ef4a89601c712be603039e9664368b9d30d76f51cc93fab329d2584c461840b74943e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5031dbcd3ef600d6822ac3799dcc0428c
SHA126f2f516d882a5196c9815801ffbd2f51e756424
SHA2567a5f8a1526abd5c350ad861657ca16bd3b0de65dd37e708fc4fcd77b00f558cb
SHA512404fa6fe07edb66a43291d34d58b4f3e41546d7a23a95be070497cb53c9528fdb9128f55ed886a61fa3620dcf259a192cad979915e3abac0dc529c7b4dd310b4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52b32971c5434e2e97a0625ece652e4ad
SHA1e6bdded87d944520694faa569e6fd171f6c3c538
SHA2566f905e570b0168a585cd63ab84cb8aaa8840a2aa6c382d0f8002ecae0b574fce
SHA512ad3b3e43c231c4b9bec6876bc32fa04c9ee7068bbbd5c36eced4ddf466b00d3ad3dd754aa5ca7bd2bb0b2ede233d196c5b6df125dea98d98d4f6a4cb575635e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52b55399efb2a1a52aa07968f4f68982b
SHA11c0e718611f8e0099f477de1c8469e7831ad206f
SHA25663a7751c332c2af9dcef6f0038356e2e1b1dfa988158ffc53283a6c82fc78a8c
SHA512b07afc5c6d77cd10b93c8a54f21a6a13957270602e7df7589a4e053264cb9540990b8fe82ba266c41ea491a1e5be045df117522b3ba15f787b9076f52adee774
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d7d91ed5e7db9b24e8263f9c37fa36b2
SHA1591111e8b444d1c90aa68acf12c5e3b3a9692cf9
SHA256b2ba3869e092446348a10d7c95f1ae9da22ce976d70aa7599894b75ba026f7d4
SHA5129e245755d5f8f94c99cdfac35f76644b850087a9e0a629d62b7263a9794d14830ca2846deb9bb3e917e69ac7db81f12c3c248660ed073e4bbcf6f7c19b84498b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cdbd88222d9e08152d5984dc8f5839b2
SHA118eeb5fd59dd1e6946f87212c6163beaa57ee5b6
SHA2567fa296615d9a7dae4e576628e913a6ba757347cb19439e4a75b693f8683b9e23
SHA51282a13b31b22390f5336e767346e79e5c811c2a0c9da867466f9cb0a38986f59612109a5805160d40782c306049e43d39d4426f0a677fe3537af5b56e1413deee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56aa76a494521bc559df17088a90d536f
SHA1004381796c5476c717ce8fde86bb4e647f1a8683
SHA25624a0c2c012dde6240041f6c75de6e0fcea75fff5c17d8a0c28c918285c32d8b6
SHA51212c56bb1683bef08fe12051dbc818b1ef57cc27e0a07ff2f965236e637500c0cf814a174aec92e70b386e85ba25f9f22fdca1f625e39b2db41acd9b44dd3c851
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b974fe6e0f6a14a8c90e15693f80527b
SHA1b53b705d040818249994db1412d00b307c6d88c7
SHA25619e9659822e9e8e41127c6926e3d4c8822b9437be83e7ac201544d66a2f10b50
SHA5121e76df49b37cf8220db6c090622529ee10b26bf863be91c3d222ca905a29949519e234728f55f0134bd70d0c2fb8d6678a104b7701f8551ed8763288bce76873
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ecdb4fa830a0ee417a5285515cfed799
SHA1461387efdde20adca2148d31cc43e64f5fa3850c
SHA2569e2e77e936eb4fcf2351cbad46081aa04db303b8c048faa70900f855ae9648b3
SHA51255475bc5f00fcdf7915ca13f94b95fd9e40bbd01e673f1f00ba69be2c092d83e4512c8e244e83d3e946065a46b7ca27ced0f9b81c73c74216aab4f0d4c074041
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d06e51df8e5f423b57f0b5264bded169
SHA198bf34eb9f3c393fe86a8512800f011ca77f20d0
SHA25607eb4995f1bfb3b953255668f3f5cc00f9abc28143a19f122f0f9d1d6e38b606
SHA512f670ffe4a7020c6778f53a58bf1e727e3e8ca820aa71ed44f1c0ed8dd9245fc04b902849952e5d66e2e079587f375813e9568c640b2f9d25d083a6e0f0466b4e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5430e0544dc6ca75d547d92d47753733f
SHA1112051dfc74f9a7b740e985d323eb0bb4a5d689d
SHA256dff062b9f9c00907ebf1141da48ab781313cb669bf598cd28366b841c7a373e5
SHA51240de3161aebbea4d2204c01deca606e52db2ab47f1c65e2f5ce268cfad16b1f17525b43369d25fb2f7648d4b0a8a05702094e376f14514e8f43ebbb8c076c9ab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dbf9536b778489cb9c4119e1985827fe
SHA1d0c7b6f1d667068b0102d8b0cea84da57b918f59
SHA2567a95ef3d917d9c6eed4e95b84e8b94c8bac3947dd1ef6ac33091eee23256a2a1
SHA512b559550a86df7171e2affbecd0e3a204e66617dede4403a994cd691e8c3ffb05d3be62ecd531d7a8ad6f7dbd844ad8a9a690da2d127cce7373395a293670ec19
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55558a4bcfb2a65d2ec888129f1fb9352
SHA19c46bb4d8d9aa145fdf70cbe28993717f228f28f
SHA2569ededf988b037f6206e57fee3682692bcc6b7bb022f408b2e4a602faa9e45740
SHA5121c24716d844373c86434d3ef2967f4f5081f4d63afe535ac9650256fd2baf6f3cceea76d5da17f43bec7c0fd5f5b01886f7dd1e7923b81f169601bf577ace0ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f4c06b3f743ac1663bdcf140c578ca24
SHA1cf0ed58320ecd05915bfb74ac3b79ed307e23bf7
SHA256f1c6a28a3e18cddd361136aef68395b1e92323cd0720b3603a5524012987d999
SHA512052e6ccdfd35eaeccf6f684bbcddbbe7413d700047b2ca41998887d8fe3e2436eda0dbddac59cba353a0ce98fa2ad78fd4a8d1f4417aa9a53ddd44eb96feae78
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e4a4811ddf652907bb30970a22f443bb
SHA114f2a7d7143821de64e31c36890bf62720e0cfb1
SHA256f7ecbd188729fbb925743bdae7acab6907345475e9d6a8c795e90d2893489faa
SHA5123535f607f134a214e63eadcf43350d132abb539fbde3620325f1a601755344288d4950aa21e98442ab40100250a880bf0bc349074f0f17fd687b6e292a8a9b0b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c61098022d332509a8543873a7ef3e6a
SHA110dff6f7831f4a9efdd89ac6b06be0fc59e9c67f
SHA256928629c08895cb77b0f9addc61484a38803cf9377a6772343c620da480133964
SHA512071b11c686b58fbe8abf91edc8a960a197a60a5d198eff56a2160ee1fff237689b3081dc1dce0856c180e6ae275d1a810f0d3af94bb70785ced6588b5c7a04e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5acabcb4bbf4399561a65040a107c36cb
SHA1e4e997b83c935030dd1536f38d28862c5bcc9b80
SHA256b223c8b54638cfc90860863601c716bcccebd753097550d4d8cc1820b4e08dce
SHA5124f27c016c8024118fd9a4622608672877133fdb12c8f291797f3a9225a41df7b9111b64fc6b8b36c19a64efe298e86605dc77f8367fe3a635f8f724afd3545b0
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b