Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
117s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
12/06/2024, 09:53
Static task
static1
Behavioral task
behavioral1
Sample
a03b611ca3f8622b4c02e5d3527a37fc_JaffaCakes118.html
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a03b611ca3f8622b4c02e5d3527a37fc_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
a03b611ca3f8622b4c02e5d3527a37fc_JaffaCakes118.html
-
Size
2KB
-
MD5
a03b611ca3f8622b4c02e5d3527a37fc
-
SHA1
85c52061ee6319aa658d16b07251cb6c2eb4fcaf
-
SHA256
8f7a0e303670cacc1499c7e99bf88eae09d651ce86276a73a3680a5eac37809a
-
SHA512
0d85fa91825eb02985f13a58c6e456f3e5951f873a42b79c832e934bb8f66fdfb8e5d3d45e1ad897b7086a009148e372f378ee74dd073dd64e3a3a2061cbad34
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0b54d6aaebcda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a807600000000020000000000106600000001000020000000ac88ed46bb57ae2dbf1b7acd051c6ebb721f44130d9d4f695d36683a80543205000000000e800000000200002000000019f2f4b508466f1008cbc569577808a9acdb9d4127234d67a0f357331de870d6200000009d233ed502a7cae85ea324eb7a9d23422c701cb6a2dc79dd897de6773d7fa18340000000c42f1a9189f9383296caec95ece2e2a5379393e99504a5c3c886e92a01612e119fabfe2f179409d24e5a89a50584567b7f46d6b3deca1d4720efc09df6c5bc27 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{949BD121-28A1-11EF-A8D3-D2DB9F9EC2A6} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424347862" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2784 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2784 iexplore.exe 2784 iexplore.exe 2404 IEXPLORE.EXE 2404 IEXPLORE.EXE 2404 IEXPLORE.EXE 2404 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2784 wrote to memory of 2404 2784 iexplore.exe 28 PID 2784 wrote to memory of 2404 2784 iexplore.exe 28 PID 2784 wrote to memory of 2404 2784 iexplore.exe 28 PID 2784 wrote to memory of 2404 2784 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a03b611ca3f8622b4c02e5d3527a37fc_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2784 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2784 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2404
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55a132e09652840eadc85e3e51b03ed93
SHA1029b810b6294254f73529fca7ef49959cadf27e3
SHA2569fb71d7f1fb523737668dfdb6238ccc06f5ca8f9b449d077dec19630150a4eca
SHA51291c4b4da61a771dacedd5486ec059983df91597a4e774c1e76d59dd4f9f2c42025291bddb9b3a8ad446ca06d32753021440a5ba444bef81c7d5c44745769af7e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d6e7f2c2e2154562886c224ca95ca9f6
SHA1f4aef3a9ef9be75b8f08ed4a690322d16023406d
SHA2568aa57dc04b6dbccfcbb4da7d2100393368cc9ae92b602349d4cb7ef2af85e20f
SHA512fcb819427bcac1e17505076d4284dcfc97354482db5932c7b06a9f84c5ddc3008e050d5ef4d490169978bc0df5377d1607356b04a106fb1eea4fdd26e32de7f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD555977df51b5c76fe2e56da410605e63b
SHA10cf8d86d20e8a2c72c8bf77727cb646b430ef49c
SHA2561bb623ea29bf6be40d668193b72689b3596c426b53c54a7f3cff0cdfb598c6e6
SHA51284be147dd8aea4d819c9b0aa44f28521da0807e8e21d5c3ee7afa3557376e527a5422373689947e66e435c42f0607dfce29bc04d36a0abad98741d81cd5a22c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57efa7b42eb1a46d2d69005ccc0b01f4d
SHA18b810e47debbab715be2c55fc36fe8c78377310f
SHA256ca58722460f174418982dfc1b886ee3e38429581b9fbca886a91535dfd115437
SHA512380ad3a8cd3a3d99e588d41a5fb3a411382e6708dfdffaa8d5e193613e9db342cc72eed8dd85a5524a7091c13ee86f46b53908f23e63baa651ccbfc9bc3d1aeb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD556edf82b7f749aa74ebf85c201547604
SHA1d8d393202bafd6a8b84ba77091c0572c37726520
SHA2565bf68b8c405af23bca308f1c047ad1d4dfec57c6d459d3d01cad4898158a2e7a
SHA5127e534ef663bfd0744111c0c8b779e84449ac21ea50f2716cb528eaa18435ef33552e9179d368e0f5ba0b027d8d217f81a61ddfb841c7ca87af7e7436e34c4711
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54974997be21e4ad36ec3b38a9d01218c
SHA1dca221b7736736e3827aa3f8eb43134dcdb89a01
SHA25603958c3a74d5fe512471b604c08699893c4cc24a432d4200bc1c23238dd2127f
SHA512f3cd7161445b9709e2984a59730420983659c9be23941da246e9277935c2323989189c9c7ee71a66604137f116963f00a186783caf2e254aad450bae19de1976
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD521e23b6612cbf896a1f6a4f26415cfe7
SHA1cb5c9b79492624e7a667f1cee665b18e9eef13f7
SHA256d3b3a40447c39630792e48680e9c1ce1e34ce6d47c85fb7086899ac6007ba0c2
SHA51262ec88420f42cd3bfcb8b19676b0cbc296b6236e1dfc57361e90d06c736d3b33aa19f06b61bcb843a22ef2f7ee2aa7338f1c09de38c8b34013d67453143040e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cc84e90b2745305379a9f5e8f5228c99
SHA1012381e1ef7cd51cfcb6debc5cf8e7e7aba6dc19
SHA256dbf138c184e32eb7a65472f562f095d3a01439755bd59639b604e28a491dfb08
SHA512e75056aec4943da68ccd607054de72a36e5482fa240422195c2060cd756f4164410b0eb806b437fa48510f4a1edc4c3725db642f86e0077920f0228b5b4465cd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD528c3c8f7833acf21cb7162d3086b5e3f
SHA133aa2e07703d94a1d48c840f251a45768c8e8012
SHA2560c6d0893a18aedfa9665e6830406635f76024fecae562b7e607c2d0fd1c82bdc
SHA5126f701e0c3ddbb003d7cb2c9c4e7ca4575cf0dcc7012d92b6926bcbd4e7e33341cb49d61a8d8b0648553df1b78e0ec14205c17d5afc5690622d89ab55afccb2bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e7373ac8871f6e8d2fbb887f98421151
SHA1da045d70ea3c8492194e9356090290b261a2f889
SHA2562319f4031feaf0bbd5d306f77622c15676973b4a0e61133f967e86527dd92e9c
SHA5123125b3ef3b31829a66b34426cea3cc3565dd185b0a0e822385ec04384d2cd06e4d8daaba6783eea7f72a1bf8518d8a2ffafa917b8c1bdc5be6b873cd6471e458
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e394328c541eeee23c503bcd189e01a2
SHA1fdb7b6d10a9fcb76c05f21b9c56ef67845d687e4
SHA256f1915aff0ffa9b2b1e68ed6b5045f9e1f75c022be8c52d15755f6fbc7c5653fb
SHA51248b8adc1a2d326234d2930c49560b5c54dbf740d10e221667089f37ae71c9abc362a6a839cf7ffa3bd41180127a865d842b6211efd0064fadf1781bd15c0564f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD555e6c1657e44b90f117a1bee233679f5
SHA1d76a2f5ddce0d91019219f0ce7374d559e4b0d55
SHA256fac606190b88926f923de874fea0e5a34fe1bafbe7ef65417c8899cdc3f0b67a
SHA5125e9e91570b3c8b7c319c200c82455fe09fa97dc46459e93d5098c232545ab7c2ccfb69bbe0c6c8719d9e0aa3e9f193396f1d8a90ce7968b6f44372c9ec561cce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD503c5af406853cf7602bd7fc7d9abfa3f
SHA1b8ca8d972bbb3479d72cf665ccd4dc87a76e7096
SHA2568580a4e872287a9dce6284d0a3a150abe84568b0aed5d6947f2fa7de0dea442d
SHA512e5fc3bad993b8903c5e7f7e7be7c5199cc92db40d8302362ab9772c525cb4b064f4efe8f8047f310ea149614f7223fd89cb574d2133c17ad8b7a61e9296c79fc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e01051786e9fab026e0c5c3ae979d54d
SHA138e53c4ea4de1822de92adf468ff6de715b1c582
SHA25633af8fde293f273adff053069bb4472c17bdb6839f268b0fe8833ba3dd13ec32
SHA51223daa20236e884e547e925993c113cfbc5522c3afb8c56e48fefddb6dc3d637724cd980250a37b1291d0314f288eeb2dfaead32678eee330a2184bd8333ccde0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56ebfc560ef5fce31db0447e18800dce3
SHA13902a3ca19ab4a9af67cc8b1a14e68e7d7828364
SHA2569a7096abac6bd4a015cc92eced5a812eff177801e6d79939b7bc46a054c21319
SHA512db5b7e96a826410554a0063fda63f400b25dec9a8b6b074a328cd01164fc0d0b460436c9fbac4185126d46b6c379f4d72266ffac14faa833e1b49e2f1725184e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD565a17f7c8d6ebbaddf4391a1fa9547d3
SHA13e0f0f7414d70870efe61299f565a167d063370e
SHA2566101ada655f153603d6b33cf9bb4e613e6d9dd780af00ed1768c1553f0ca680c
SHA51291efdc0ebc6a6f8632c3e0dc6da0fffd49d8c53c22149892eac37b188b7ddf9a4aa85ae77077ebbd54be30b44d08dc70e90f8dad922d68f172bbc82709515052
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5643ee66b9594b1a6c39391f10fc881c6
SHA127628d0444e1f5679ea624c2b047a611939b794c
SHA2561ff642c00e2dde479c42ee62f304a14c4d0c43882244e1c36efbea592c84f8c3
SHA512201c31415853da9336269aa277bdac5711c44334658bd4c38c701d6aa0b882a20e980e209bd8504e13fc4bc48f3bafe4d0a2eaaeefba21a54f58e6656223b02a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD505a288366a77cfaf8f9a312dd811713b
SHA140223859eec86238cc520a8fb3e430b2d1a1cf9c
SHA25690cd2db3dfff7483254dce95d3731b8bed05571b4b672bad0daaf9c767d580d3
SHA512e13387f69bd32d0da46716c27f7a1f67efb22bf1ae13bf3ad4ec782724aa5f49385536e216ba6cdda7b57b1c4c628a710a7a92d7e170d33a4dcacb778ea34e73
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57c65d7289db90341fe1b0ee7450be12c
SHA1447352c76bf91eea01ec998568531d63c4dfdea5
SHA25664223672ce3e7df0c4f6ab177f3df6c35b3486e81283d3b867f238529414cc83
SHA512e1322247eb6d3d59a4cb45701a9f777e6360037645b882a9378259413ad29461e9c1b1cdf6c5120ee4e38c2a22c465cc564684453dd6bc11a4d06ac333a35804
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54c897e8ef4a3647b780c3db7e4381d6b
SHA1a1762c453a72f678c7b825bdb475e5a0956ba4f3
SHA25653dc5ea35643bf78d9ac53cd6f911817474c967744d1b440c31823611271ad09
SHA512b1b00e4a765bc1f8d20b139a04d4bab1043910c5e62e6865bc140fa0d91a780d476a6f98b58a4bb87e322957d9a542b57a260b73e41a4733aaa9a2356d8c4327
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b