Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
11/07/2024, 00:33
Static task
static1
Behavioral task
behavioral1
Sample
3707e1d3a0b665b4d714d2a74d53e8f0_JaffaCakes118.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3707e1d3a0b665b4d714d2a74d53e8f0_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
3707e1d3a0b665b4d714d2a74d53e8f0_JaffaCakes118.html
-
Size
11KB
-
MD5
3707e1d3a0b665b4d714d2a74d53e8f0
-
SHA1
3952f43e47790e410dcfd849efc0100e9c89bc5a
-
SHA256
92b1064562a968c3615f6815313ef4e2c39e904ed71582bb0fcd04edbfe554f2
-
SHA512
d0c4fcefa653e5ccf6d6459ed328709baedab7b5867b0b85e73e09f53673bafcf72da09b8b9e2e516ccfdbd91f050cfe38927c16b9a58a61d73c69ebf0f141f4
-
SSDEEP
192:2ValIsr0r57MmxNT8+/w1wvqVkt1SZauBuLbdU8d:salIcIQmxp/g8kaguLZ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426819854" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{242A05F1-3F1D-11EF-8EE4-CE397B957442} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000003125cc29be9a0e41b44a3d73dc8faf71000000000200000000001066000000010000200000001dcd3ec302983ed499bbb38db002ac03bc818ffecd74c30e3df7a53992046ffe000000000e8000000002000020000000e030ab65a3045fd435893b107b3639f12c26e5dbe67cb94299d18b18033dc46920000000b40cc31b67597e9e9f8ed841564f8bbec440f10b6ec2665fadc9f905f22a23504000000043cf019dc805cc4a048445805d01615e89943ae942d96fd4061473da33cb1c66a27423ca03cf74a740225b6e03813c74f2775e5e9da11f2c60d02ca4a7e32310 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 80687b262ad3da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2404 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2404 iexplore.exe 2404 iexplore.exe 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE 2396 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2404 wrote to memory of 2396 2404 iexplore.exe 30 PID 2404 wrote to memory of 2396 2404 iexplore.exe 30 PID 2404 wrote to memory of 2396 2404 iexplore.exe 30 PID 2404 wrote to memory of 2396 2404 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3707e1d3a0b665b4d714d2a74d53e8f0_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2404 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2404 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2396
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58dda41f1f960a922824f38975bacb8dc
SHA1002cdd4770fde2f2832363cfe8f9113d6f0446ef
SHA256ad92611aec2eed8c8e3c3e261c125e5dbecb037bffa9cb566a8864c689a2b9f6
SHA5122795108f734e6e992996ae496c4eb8a22f74b50241de88c23e5a62a3674dd60645f741ea1b1f7138f37686172236ed67a34974bae8582fcbda94bb845f244c02
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5abc55916ceddad07931a2ce7ee92a549
SHA1f755e6f0705a7534e9c6f9ce2f7df039ed58c5d3
SHA256e4c1919eb1b9c3cedb275b1f608921b2c418dd48d4b194fbc2b51d0fa6df921f
SHA512273ec82874ec7d0f90d3750355b9fecf6a3c1c54e4e2877a01531d610cc7401005d7dd19c7788bdeaaeca8ccc480cf299f1fde6210dda8c2f866612cc47bd77e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a81657fec919459404ba7423ffdfb872
SHA1dde32816aaa60c07858ffc43465400a98320363f
SHA2563ea8bcab643c810bbe4f9495df328509907d386411b4307573e0603ae8a18a67
SHA512e8bdf4ea9853834c9988b4a6f5d359fb358ccf5d9609990417691245a52f6bfaed5cdf8693526d3a5bf121aaaa4a93b57b140125b2fbbf3bc657b0402a820fc0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b787dec0a5223590024013103462d7bf
SHA1d0969c03120a848ff5cce6d7226e0d0082b56ac8
SHA256b93fe2b67affdb737cffe5e023b9838972d590711c0ee74d88a40ab8067950c9
SHA51265258b6447fc840bad68e21ef1b5756a1c538f7494bef27bd68a0ea2d83d43e42c5c7001fcff126fdc2c4a5516225ea943e3aa4cd6320dd6c20e4c202d98ce7d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD538324e4a7f8ae5ab89b0e711cb065b67
SHA11563763283663f4aab43097a640a9afc1a84f771
SHA2565011d690620806339a5242b90f3e4e3e213b02aec62eaeec6f3960c7596e69c1
SHA512e67b684e3bbaeff147af99ef5f9fae415aeb4275b80ccbb80b7144cd5887db2def4682e8700c609d200f4efcf860f13d1433537615dd7de13a2894dbef4972b4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5101b0126b3c1e4721971a7e5350b7733
SHA1f0461e7911c3c98d521f63ae9ecd750fe5a0568c
SHA25618a3afd72d3eacc4a235f2fd70010ad0dcd3749a4ee0ea70491834e969a2237a
SHA512cb2b6cc94c7a8b75cbb42800dff634d513ab723d25ae47b587aab919e247ab8273a6eb49b0e0e5c88c43a20ffbd33a2c09bef6b58316df22f231059e7450ca95
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5600e1c0c20787cbfebef067142f8aac3
SHA14303792f788740f34de3708476a2b813900e6517
SHA2563b85c1fc1fb7f855c2fae15c2624e966ac19cfeebc5666d49da73893f465f4e7
SHA512cc92e7ca72df76ebc994a675a0cdef34a80596822bbfb8194730f0f0b9dd8a14f8d786abb6049cdeb3c67df459f598379921337d00401ef47f73da0390caf2c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD525d3b948e6c3bbb8acb60fee7c402fc8
SHA1cf7e33feb5d7753a9e68ae66ecfc35a34bf1b8f5
SHA2564db392bd1c81a5aae479e86396ccfed92cc7acdbd83ab50d51b7b03ecfbfb04b
SHA5126745532d683e1e17d5108bba1289dca95bae94f427ee6bea52e83f060d243b7b2b45a6b51e3b4a5707d2f9da81b3e798dc8f151dc64b0d013b5957e0a12eaeee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59b8b214e9e43baa26fc83d2f55925c54
SHA16242408b503d187b1dcefca50b9d328bd2869e3e
SHA25644344d722499a37921cfe720ee571054f9eb06fa59713d427cdee406a21b76ca
SHA512d09825efecd5d0267efbd6eb997c23c98c983186433c578579ea826a40b5583e874b77a077aa8fb8c4779716f1c512f75cd3bd4ef1a9d76642d59c0c40e9dae8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c906ca18b88f441a4a9cddf8db2dc7de
SHA19a8747a63ab95a44b14e7fae77f4ccb965f0d034
SHA256ee1b2ddf652de7fc1910be5c43e20f8c6c25bd01714b26dbfe06f4189255a3ae
SHA51241786452443d40b725e21fb7c89177d3fd8d5bd0d952e52011074117333ba4bba7de1d3fc7c9d430766d70a8b454668809d18aee14b3361d22bbfe7cbf7aa536
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD590eea873acc46f054c3605db535a5a20
SHA1afc035d7703410555117291be9767a90d5c14f23
SHA2563c3ed501809da399df32dc83e30f9391caaa89e3e31e1a5000c546ba9adb2dc5
SHA512156a690fb5ebb66d45d514875b390ef4bd0ae30da1c53b0cf8eb91f790d0d9c1136627efec279cd6749147f4582f0f9c4b7024cc13a227bb52d90d967c084c60
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58d5855bc32278c9ce6637a41a429a073
SHA16eec9b93205de8ceeb14cfa29cf3b5f7b7523726
SHA256f3f0ae17272ed3649a504be717f4a951c84f1bee4e350ea32a135e3e4c670d12
SHA512896f8f6dc2a01e171b8a740fad51eafbf942811a18bc207ff43d092f1a93ca771338009671bfa5aed3ad3e91fdcc0338b2c707e539ec9443960ab67de06a72f0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b39a9326f14629a6cf07b47c9ed7af6a
SHA17e5f20809a569a7b99c0a56a62dd619794265bd1
SHA2565853e047298a042e89df941a600cbdb324b3cca6e7efb34b2958ee61d2dfa965
SHA5126dfbdc12014f45ad2a31a97fcdc8a56e20c151e93bd2752c52443a329f4b2ddd5d8ec7737f964e3e6db5522b281170e36fe7e9f3e4a3babd72f51c790ddabbd3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b579df9aac1ab7e56b8b8f258819c2c4
SHA1623da8f7efa2fd8c501b15d703d169305b7eb487
SHA256925d22d04e66507a2ced5a0f5172367ab0b5c5e98c170ba568a3eff55bcb9cc1
SHA512467eaa5590fe1e872ad4293125d7e7005c5bc2e2f90e8de49a8caa252990eb99536a5016d0b853a1034a6179035a8ee388309447666dae65c1c8924922dd9b6c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aa60d1e01c887b43b8e480023179fe68
SHA125174cfe4407d732b265a40d99079351fd0f5c93
SHA256ea0d2b1005ac46311cb8e953007c4aaa56b0c02d4cc5f98b00cf6beaf4101fd1
SHA512401059654c78c620b95846018928f401331cfa43d85dbe88cfb55726ee2a47816c12f58fa907af52dadd82ee42c030511b2fc65e23ee887741180247505e39c9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58c072e6bfa764960bb2ddf7f2e0937fc
SHA16874de7d7a686557e4df452339636b238cfd3be4
SHA25632f2630e9d66b1b35d1dd3fb4e8334e464fcb67aa35a891a4f483441292c7543
SHA5120f196160083bdb039e9bad82e2e33f922b3b6f0a3158048c717d7d3f6d657ec94ca4d4623712cef2c00c5f881b349693949aada80f889b93e022fc22d01aee37
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5da3e58d0a05b5cc430303b3a548c3804
SHA1083ff099d0dcfe5a3d25192dba7f4d29dde26a82
SHA256ab2a7fe873f02f256fbc7be1724b123273a8a6b79fbdfeb80d2a60c7e7100fc0
SHA512f4eebff1df8c16b8127077a68a036cabb0de9f44cf16c4007db2a5354847f7c185dd659b9daf99c82721be0d85d2b3a94d20b6a2757a7dff25a5b5ee1f433e8e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54e3bb0d95b4e2ed51e8ac59db20c4676
SHA16d92e5b3c6a71be3e1bd8114ba8931e0f31b8ee1
SHA25616d78aad5a94fa9bffda3afe4ccadda4cb9fb8aec2560aca8c75367215cae99a
SHA5126b56ebb2e0bbe9dcf2883e90ac0e65f370facce1ffb8eb81fc3bb2a3342f10755e672434daf81a1fadc1c1f2ad146f866a0296bdb966acb27ec3a9d1d842bb1b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD568a82068b3663d7dda64350de90e1138
SHA1d5a6cdc49dea8749942b725cb2c74bfba01a0290
SHA25630720e3aeddb3aa8aab9f02d32865d19c9b2efe74f4e3b9bc56a401edb3b963e
SHA512420afdfbaa0d9b152571be2f0c8adebcab573ff652af3f109c2fcc2a653c7408795d2e43db64801bf591310033e6cd2cac9f3ec0d97ef437b9facd1555bf31fe
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b