Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
11/07/2024, 01:30
Static task
static1
Behavioral task
behavioral1
Sample
3733ff5d02ac97df975368d58fb142cb_JaffaCakes118.html
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3733ff5d02ac97df975368d58fb142cb_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
3733ff5d02ac97df975368d58fb142cb_JaffaCakes118.html
-
Size
6KB
-
MD5
3733ff5d02ac97df975368d58fb142cb
-
SHA1
6ce22ff94eee05ff6b3583bdad5fe4a0bbeaf933
-
SHA256
45a2651cecc9b044ab26f38eac102d48b6eb98da9e9ae7c64b506147e4bfb1f2
-
SHA512
634a2838245783988f8fd0f459c1aac8fcbe2d8b02913639aead2c72fba2112be85978093355317fcb606b387547a1174843296664bd00219b01a08a205dea92
-
SSDEEP
96:uzVs+ux7pHLLY1k9o84d12ef7CSTUSZcEZ7ru7f:csz7pHAYS/Rb76f
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 20b6bef731d3da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426823285" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000a3d5a058b71c4645a1a6b8b9d2c7fb470000000002000000000010660000000100002000000062cccdf1277abee657f2d26658e964f1fb0ff083a028ac5b64f0fbf6dcf49835000000000e800000000200002000000084f60af8e1553d94cd8a1f9cf8dffbe972676579555e99540c9fa6996de3203e20000000801b086889012d2efc7f9cbb26398e9143db5ab9248143fb860caf6e336000bb40000000e118e1e1cb90573288a5f3b0d6d67de27bfd2488cc5fcae42667b30b3491163fefef1d01e674042a8ba1242b56dae96c8573f14468a45612b5b2302aa10bf709 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{2128E9E1-3F25-11EF-80BD-DAEE53C76889} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2184 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2184 iexplore.exe 2184 iexplore.exe 2148 IEXPLORE.EXE 2148 IEXPLORE.EXE 2148 IEXPLORE.EXE 2148 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2184 wrote to memory of 2148 2184 iexplore.exe 30 PID 2184 wrote to memory of 2148 2184 iexplore.exe 30 PID 2184 wrote to memory of 2148 2184 iexplore.exe 30 PID 2184 wrote to memory of 2148 2184 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3733ff5d02ac97df975368d58fb142cb_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2184 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2184 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2148
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52ea04e04e1d7785eec1eda48ebd5f711
SHA1374427a49041a24d7838153568121114ab9cf5ee
SHA256a3e530ee0ecfd34b0dc6fd6616ac447e4213591b3f33fcc2c503f489ba9c4b6a
SHA5120529f3828e75046ed4290969ff5cde978593bb751d604eee53631ad4c2264cc62f851c4c8f48affa87a00e2f4a0a4d278bbe9ded08a50a9b66f70b654839697f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59b23cd5287cf9a7bd50c77fbbe78882e
SHA1fdbd8dea6ee9dd079a2c0a9c812370d2b7bacea0
SHA2561a0a29bc0b2abd44f3700f17bd280ccfcdafc5d75fe787c12d606fe2868143b4
SHA5123b234aa360076148b25a5197cdcea84764efdcabd061c6ac2ad02c7c281c2888c75bdfe8d0d6e157457d7f032f767179937db59305f24fc9222993e383c916ed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a0cc1e04927f2110309936e7645e7c28
SHA1c3cd2ea1cd451c656d900d0adbb5562836534741
SHA2565d6ed295ff3bbbea1d0b3caaeeef41405f1a3afe4cb776e60350c4be40863079
SHA5122e3c4744e6e227e01c2490f62a198cb26ce5eaad859753c4daa73ce19e1fbd396035cbbf9e597a100a4ee9e85002252978001503890987c09640ec04d3716565
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51cc315a53cb9a2979a7d9ae35ef94b60
SHA1c1195cc8466dc749eefab7ac17d25d3dd8b4a2dd
SHA256e538a9ab2a12eab443159d8aa4b6901ff98c2586770474b9e62c23d74f192eb7
SHA512b01e0c87357963ac600c721feb727056abfc33dc9dd0e90c29657488b0b3a0a44121790cacb50b616692877d5c12270dea70ea3d5f0b8568dfd8f3ae49691d13
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55c938ee6923c9a2d9b9c1d420e6df201
SHA1fd27f9d2e44b4fc47d18d1d3dd01c0b890c4adcd
SHA256aa4c45094d6ab44ea136e95fac1d299b6e54a7d72d9934d7d3584dde642596a2
SHA5126429741a644689964760891ac6ddc636e1cb94ed994685d255dade5b50bc6b894fd9c8bbb9f0c83862ddc18c5145dae7a2028efd3be738df31059087acd99ef8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD589e3fd3ad55c18d679e2a15acb2cab93
SHA1d17f71caa62e49fc6ecfd10ea91f905912a169cc
SHA256f95b46591581dcfced70755fb515bffb974c3c48a4eb5558a6d66a2fe6bad81d
SHA512a6361117e4086895639c9828b16532a4f047ec4993430437dfaa6650cd57a7109a23c11b4ed59627ded99c9080dfb81704884066aa17f97a730120f2e65505dd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51f50698e9fcc66dee37c4d6a5f15983b
SHA15b958747640b68a2794914a47bbe76f6d8d5f351
SHA25645d35b65ecc437d3034689ba1a57ba7c773b7a52b77b570d183018fa20b1e80d
SHA512f2093c6c7caa98581a5683eff3765a7fdc755dc6fa7679305618b59fd5705cc19b8785faa1c931547814a8f143d2b7d6846a366d5423e74dba4cb87f5996d360
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51de12e157f5559fc448797895e8785f8
SHA1b1ea52c8cebc4ddf692c2508ba9e17e8e9377b19
SHA256c5734c5ab06829e8a4b483c1f35aa102dbe439b0eae569abb1623e758d5ba3dd
SHA51240b37a2919a557f4f984725f3237676675a6b50a74b42a8cfedd4764c8dc6186e4657aceb9ca8b131d488379f4071175f564c6a7d29c4609bf3d3f4b72f4b05f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59411abce1facbffd6eea051adb810431
SHA1bd0ec1c4a6162f71af9092ea9da00e672d970c33
SHA256227494580869a2b65411c7997a59a04dd6e5980f5cc118182a5dd51f63e5531a
SHA512bf717ca905624a4b9cd8b2283ac43cce064c70be9bffada7c7115ea78217cf7bdf8c8c139e347f5a6db21d0b5a65c7553a8dfc11ae6d4cbb4677c61346a5a330
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51b58ddb1f8bbfdd42e5b2e57e27b4f8b
SHA1bbabf7c3adf6c97f6a902695ffe639bf6d3ad245
SHA256e0d8c195cf992fa9f9f76194f51d67a9fa5b1ee29587008426b18b476c375d0d
SHA51263fe1397142efd5a691ee10fa75c81f6b576dc9ba5f0f9a4d2ec42a5f7d8fb8af08eed9fc5addd2211dcdd00ab4866eb1312b65ed08fccfa568528b681a6bab1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5059e3f1f4dc22fff764b583722438b51
SHA135b7ad2337dcdc17de6ab18f514bcbdb8a237b8b
SHA256fd42df97c560a46533c7a8fa4a4679e2fc6701c822e428025b77f47f072026c0
SHA5120b0c8edff0a471e8010d4d2ff2cc19dd0efe8c39b2b4a0ee07fd55dfd15dbda78acfadd908652b299f62316f39fbf2667e08f9f1de5b1e3e4ea9fa7d2a972ad0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a800e9aeb4b3ea440bb8023fec4b846e
SHA15552758199e152deffbab84d66e545a1035f92de
SHA25645f67d1cd00ed8c16a258f7f401e152619d4e7c6fb736891e79bea8b0bd00f29
SHA51285f217225312bb308d2b0908bd2eea42f18ef33ff1ad8db607379eb73393255839f5bcb19bcd12251e3bb14833e0e68609ed8c1c0391c5d6a820dba467eaa175
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50ec852390d504637ddaddc225456e11b
SHA152363083ea2f0cb2e0542333de7108096b616296
SHA2561e48718678e026d01e2782ed0fe4366c2810c6770e13a4d057b4c5a7bf8d68ba
SHA512c65d811b7b47c19d06ce73c4c04631ded60268112e6575a771205fa59eab4253cc45a8977aac44a30b294c2142baf8ab842fa04b1213d4f8f4f9fdb578896ce8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e1cf2a20cf1156e57cc44d0390bf7761
SHA10feb1f94c520463188bf77e3532cd9f1348bb71a
SHA256e22026d53988ef599b95682acba15ee1a18a39ffcc053e4fb743c102be7bed73
SHA512a3daf96daa36ca5c6b0f683fc85f03e1a57eb6fb1eb93a502667764c8968df37a82f8598b2ce134897667d9f95977b6fc76b7304b7bb30f36361a483b18f5ad1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59797d3f01024acc1bed0938078e16e66
SHA1534145fa1f840ec7b129b565c596cc82572a1e2f
SHA256866f0e3b36b10a8a072c6d09080b3b26ca8f72a3507a977164fe8bda2a2a7d41
SHA5125dea335dc4bf40a4f784849e5c0011fa5b48e4bbce5eda241657184970596750a7b9091d2512db235d6ff5fe9bfc8da809af1c45c57dccf42845dc9e059112c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD595a2e0ab75247aac5003ee4ad84cac39
SHA1649fc54e2946ed6f4bf3fb0465ce0a017e20385e
SHA256241f83d18318109497c56e68663c755d7485dad5cee277e8b3da213717eaa8a8
SHA512767888d5cebf530599ab0fb6dd1c2779beb38b9513e3904cc2ea3e408fc5d7c5b2572bf22da12b61f4d9e39944ba936474b1ea4892ecb364a48a7209f0c9b6a4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58198800d8a32a069fc610a6d26522464
SHA1f92e7734663b24c00e9c0a4f5a79446d559b0c7f
SHA256de71ff56b1f150ac270098fb0fca918c48b2e970c6531ef5797b4b635db3b5c4
SHA512f7963d7cc49f366ab9981f2d4b0ab54c39b24b5569d45e309e0811b8485ac15ccb637ff47eb7a000fef8c5998c5bdb40b13ac7fd2d9ba31fb39987ef415f4273
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d47d13a3ddc7d4a1cfdde150a1441b05
SHA198a85649578c40ffacce805aa9024ba90b814b05
SHA25690bfedda67b889f8991ef0d09915d54cb51fc50c9eeee274f9c4ad28a55be040
SHA5121f245b55201d344ca0878f0e697034419e191ae43f43b4b2e1219a593f37144a038a4598a14751b3ffc87fabba84ba5219454ceb9cc53183cdff03a091ec7462
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52e575bfa3747b422dd129f38bedb733b
SHA1e0980f4276275483aa593066bd3522d76dc12b1e
SHA256057c43f372fee0cb0bc5cfa689df68853ca00b281957d8dc64e7fb397fd4d22d
SHA512a8367cc44905086bcadfd6f39a9c9f9c4b77414c33d2c7b14f3f70127e195f22c2998af35f3812059cfffd81c0a57777a90df0a6298da7806a6f5173b77cbda5
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b