Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
143s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/06/2024, 04:41
Static task
static1
Behavioral task
behavioral1
Sample
973628952abe681ced04c08253124b85_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
973628952abe681ced04c08253124b85_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
973628952abe681ced04c08253124b85_JaffaCakes118.html
-
Size
21KB
-
MD5
973628952abe681ced04c08253124b85
-
SHA1
d010f968ce23b9aa705c9169feb23bfbcbfee8f9
-
SHA256
6072977fbd53ec1fbe5b7ed7fd9b400bac7c1b77783cec6c41398b2c410755b9
-
SHA512
cd867bc686e6cf3b6470e79ec4ba06294ff7188942baa4ec5792b4143083573722cb212d5fde090cdedcc1cfbfbdf0b24613481db8e3fb75e94fcd6684159077
-
SSDEEP
192:Hqvl596UD3vW5wYsEE49/Teo2UQB7m09Vea9/TbSdNVMjP0kuyW:Kd591uKEE4t52RiatbRP0kuyW
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 50014dcb02b7da01 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423724391" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000894f9c12c187d74989503c78f769333300000000020000000000106600000001000020000000582e1a98aa500ac95ca4f5657563f73057a0dc4e001e7a26200fcd0f6db63f1f000000000e80000000020000200000004e702e24e6567203bbd1664360596b60cf8946c1897c1a69e2bf1cff8c449f6820000000207bc9fcb690afaa438837062876e45771e8cf679c052f678c9c8d5b4cc9f879400000008a355ac1866485c012c316eed2a27ffe7fdec5e4b8cd3f33bc5b464de344d847965786fe113e938cd3dc727c44662463285653872099c6f15bbc196238f4219d iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{F3A9D421-22F5-11EF-A6D5-5A791E92BC44} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2236 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2236 iexplore.exe 2236 iexplore.exe 2300 IEXPLORE.EXE 2300 IEXPLORE.EXE 2300 IEXPLORE.EXE 2300 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2236 wrote to memory of 2300 2236 iexplore.exe 28 PID 2236 wrote to memory of 2300 2236 iexplore.exe 28 PID 2236 wrote to memory of 2300 2236 iexplore.exe 28 PID 2236 wrote to memory of 2300 2236 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\973628952abe681ced04c08253124b85_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2236 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2236 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2300
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD576285df4d6e6349ea18e672e35bbde4d
SHA187632b416a1cd31fdaaddd46942d1c5ed62c79ec
SHA256f1c4f098ab9b1ba0f1cc42195a91018a07dcae2698d9aeece3c29d926a13bd72
SHA5121045acdb5c5f9009559082d4d7459c054d92ba7711bacdc3efd55a645e86d973a6801dd225d3e0f7ce5dedf6c9edaf19b455e885858cb310ac5481c41c4c9cd3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5764fd7ca4a72ca0598ec155cb6ccb479
SHA1611fc23d8c125b4b438575cf5d10f2bf7d02acb1
SHA25659d920f51dc109b84dd515bdc8c976c77cafad51bc06da231fcd5b6d2ba1d613
SHA5120830b0a4c5a47c50b9a44fe80380b1d070b9fc545c6b4118cefeeebc69e2586adaece01efcccef1ddbfc7489a51e7b840d9824a5fbee1625fc3d12aeaa735d9f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ee9ed71c251a441f3fc2a73fa2537a88
SHA10e9735beacc86164cedb69dd0ba066578e23d161
SHA25635a31e26024281893e5f28b5f577d588acb19bb04cf08d7c4ea6c67e7aff400a
SHA51296af2126201d50407e131d619f33d7a3d96b5e4a4a09694c32d2a37e195a091fec05eb05adb76cf5f2457f6992b65d40460288fd56696d7222a17d70356e1b41
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b4fb4a6204bb2e53213477bb3ebdf463
SHA16c0112f8bbd379cc34f282237ad6844789774498
SHA2561597c5793b95d194a724d0698831b016ea4bd7f8cf4090c80129872b57efd089
SHA512f96651566164df828a676daa6946923e44215e19e6a1b8072b8decb91bb1ca768e40338bab04a02a986e460e2bbe61fe4642b69761f3808ece63920b55098957
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c23ee37d7495e8a5cdd1101bcc6f12d0
SHA116185db56c4d9e10a41b7665ca7b05e8a0b56f0d
SHA2560517af169eab781e85b6e00b3cb2172786f85d040d18187aa3d10eacbdbf2a21
SHA512892cb7eb1192c89cff1902fc9dae5ea06b1601ba0e75df157e440ada3ab9976384244fe178e80268ba01e698ccac4defc7b29cd547e63e5364db8a7536fc6264
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5197d7a7baa49b723d44451e64bccbb3a
SHA1fbf7c55a333f8cba0ef2273d52abae779e8638a4
SHA25632f49d1b1e5299fadc187e3c91966f90d212bbcbbdf7cde6d84d347043abae3c
SHA512ffe6a11a6aabeebf63873dee48a45a0e6b27f233765d9fa29aaf6e7b9ea737f1606273397d9af03a5b33387e41828a2b582f0b871294a9ec861366fe9632d5b5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD523742fd288d3f7aa0561908bc8cd60d6
SHA1b4def8d8cdeb12b8b920d3f156ad2d885f99f06c
SHA25603dc0594c93ccc48623213d3cad4f6741727ecba53c7dc453c3486965cef5ab3
SHA512af3c45894256525cf897a30999679c59df2d786c667b203be9a931a9429a430546c817d9ca055d54f9833c97fe2ab57b74d41c213da05e3ac11f6d4b46d2caae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52e91bf740b969f63d7c5db904255d45d
SHA1f2cbd6698d8d1ce67f624c38f2f28143d7fb29c0
SHA2567254f90b0f68e1bb5081eecbc342c3932e88efb4c553b324e3d7ef70631f0102
SHA5123771ab914fcd566f2a816bec83f4e7e185904098adc9a2a05abe553e58a3cae7e66fc302083481fb9d9016f4d0bab4cdf1243317927da0bd9bf0cf7445f5ff63
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD531b7df4855aa516fa37f292fe2c05e80
SHA1379b45ba54d7659179747c810149a8c2cf5a2bb7
SHA256cdced69024efcaa40a74097250bb5a3627deceee1e4eba826251609ca6783f2d
SHA51268fe48c394de4f82a9e5102d535e1d24a24f114d1d248152348b3c205bb4b8429a7cd9025e69bf5618535aa62b9cfb9b3f552a9fca7eabf568dcd2d468d820c8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5794c42fb6206586782888d3f4ef03d1b
SHA14ac6ebde2d5a0e3d920631e21655144898d74eaf
SHA256cb325804cbd3ce41e74bb9183f3d5ce61fb4a22f077b0ec2cb5cd32efcd40ae9
SHA512d12590d479147d55eb94903242a767a21ec15e3efe24bdb10c692dd5c40d6fd8d9782d3d4a8d8f5025ac97709f657e4adda3d22e7b00524fcd16f2cc30a71df9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f7bd69448f842c955347e1c5da7eea6f
SHA1bf451b77dcfb7e4b23d3644d00efb4a978aa2805
SHA256df6952849d3a62b96c8080148e7aec48588cec1c9c0bfb0500cb7c875a6c7d4f
SHA51237b21f11bd8469263e2c9b773b558213d07ce1fae0c80b3004ea5abc910848d5c8592b7bbdd3a7beff3e1fc9df856ce3b6ddbd68ffe5e06590e48a32bd7ae951
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5147223b1de84deced7c437f69fa2f15a
SHA18c054e0e90309f13bec9f7be68774b7075cd9aa1
SHA25694c7fb3b4abdaa6be7ff0db78085b7b5bd1c156b3fe36def53cd1dfbc6892bc3
SHA5127148ba34a30ffa582777cbed405633ee83f4045d8160e09781d4d01e8d12dc0d1cbd42de5629696e9a4d7fd7afa5349db342383c273bda6722752f238e834a5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD596d4180571c183f5131f43524b3dc172
SHA1034c3440875444e7c494bb13c08ca9b6b390e8d3
SHA256a68af85a8c3c08c93b957b1a0a1790af35c37a9d3922492c11dcfaedab96ffe9
SHA5126296cf3d83c9f8195c8e2e555621e9a58749550ac91f151fd72d833210428bf28e5adcd5601a0f8a24806a177376ba8b970d0300f92b43e2044c77d9242be10c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD562a602bc53231f4e80bbea24d6d2b65d
SHA18fa305c2a4c0d6bb680f790c72b6ed85d88abdc9
SHA256357ca751b4a9d72777099c0b16543f2baa8a63bb51bbac08541c55aa42de1525
SHA5123f0f54136513d0813d0aca7bb3b3275f9a9d66b85fb2c8453fe60093cf0e6b543f44857b0963631c2b3e563bea4259849d6363bddfdd479841cb96c5f9bc94b4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5689bbe0e182d3206f580877e272c8ee5
SHA1d41e8db503531fd0e022021356be5e494c2e8a9b
SHA256d2631f531d61d90a229c902a92d5af44662fa04046275fbdd34132134b3daf9e
SHA512841806deb0c6f679fe34d37eeb38aac8d191424c2eef27453d3c3d37b34054328c07bed4ec4ab8a74809de3850b3b5cea7fd4e3bdf5015d9db0ff8442d436296
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54f4223bb9856b9b40ea8d982336b0f7d
SHA1d5711fad732a9ec202e9da4beab98808d44107a6
SHA256f36b666095485aab4ec6534d6ab865069b1f15cbb7880fc3e533e7fb058e1d6f
SHA512e6b4b2c3c43c179e95496d26f7b4ce0cebe5197aa5f0416ab8bb26c88fe9f888518f14634e0c08abf15ccc3d519b31101fcd6b2d9a9bd433557365002585a68e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52d511f9671323e1fa08d5a0a8600d506
SHA190ec328acbcf573e12d4e6fa0337bbe4af7c3799
SHA25619133f6505c771d15a5b45446f135fd289a810ad27989179efbc08c63c9691d8
SHA51278a950094e3557de90fdaf3f03f3b3cd48ec8e54257b6d05b29bc712a67ec17686db75dd42e584edbad5dea5d8521371ebcfd62338c96043578b90e906bdcef3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d20edf16500db4ab2d89e2449b95e2b0
SHA1bf00fb3af7f43898028efc966a2883db0258dc05
SHA25614b6a205152ba76ddb11f5dc6375ae3698c6548c9afd3af24476804f0e00aa88
SHA5121e82d07a1fbc05c3ce19d70dd44d38cb65c312ba9dad4ceec8e0cccdf64a31d0fca2a9bb6b3b24bb6c251038f561e6af6162e1ce2ae0d972f53f6b8194a0f9d6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5571515900b45af5f5b23576fe96d8aa3
SHA174dbce5ab1c3e6cfc1853332ac1af6882d73ebbe
SHA2569836ce10d542192c036e14bca73c440c0176e3a62c13929416f148940f323876
SHA512ac840af3e26ba4ccb836285c09f9ae30c10290c8c9651712f74bc80282578a5b980f00f6a86ae346cb284860e479cc14af9eb24be0cab844bbd7670b57a3649f
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b