Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 23:56
Static task
static1
Behavioral task
behavioral1
Sample
3f625a49bf6befc0d3d6fd6612f2036c_JaffaCakes118.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3f625a49bf6befc0d3d6fd6612f2036c_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
3f625a49bf6befc0d3d6fd6612f2036c_JaffaCakes118.html
-
Size
4KB
-
MD5
3f625a49bf6befc0d3d6fd6612f2036c
-
SHA1
d52b17fe65998c1c1447f6e16fdf11be2e7c7a72
-
SHA256
3fe424ac854c26e9a5988ec247b0937d15270d5996c3caf9519c267bd4e979db
-
SHA512
685d915466ea009ea060c0d80be6d0edd335c7ba1efb776d0913bf21ef91c46a78def6d99c6240a97157d4eadf9637e0f170b210ea363abc3266a46459969b65
-
SSDEEP
96:3u8U9rFp3ZxUix7BSc7uobtMDZzQFpM3EUbKj1I3GQi:taPUiRBpUpUPUE+GQi
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 80e85330b7d4da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{66AEE291-40AA-11EF-8031-C644C3EA32BD} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426990476" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000003125cc29be9a0e41b44a3d73dc8faf71000000000200000000001066000000010000200000002332ae8d9bc12edd4164625930dd671704cc322dff790c3d99f0851655975e7c000000000e8000000002000020000000d6ea68d0a96b6bbf9c4abad88833181852dbd558c8e0b9796a5549697d06373620000000eb695f9b8616b7dc52d1b2fb1aa6e26fb164238ad7929e5a73373934ec5ca9d340000000ff1022765b399efc2dfccd7359d79951e53cd0e925ec26d5bddb4da239ff63e7d22ed224c6c1b64c0824a21313d1082bd3317841dbebf0e5aadf719ddbdacd48 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1732 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1732 iexplore.exe 1732 iexplore.exe 2352 IEXPLORE.EXE 2352 IEXPLORE.EXE 2352 IEXPLORE.EXE 2352 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1732 wrote to memory of 2352 1732 iexplore.exe 29 PID 1732 wrote to memory of 2352 1732 iexplore.exe 29 PID 1732 wrote to memory of 2352 1732 iexplore.exe 29 PID 1732 wrote to memory of 2352 1732 iexplore.exe 29
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3f625a49bf6befc0d3d6fd6612f2036c_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1732 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1732 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2352
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD546dadc84434ad03f75b3c74cdf582901
SHA1705f5e6eb7dc166d5d24390dc2790b5ed88b55d2
SHA25663db638d6d8f2bac8ea6e8e3bf2b5b3be67ad438a9aa9d5a7231b6e37d5a6712
SHA51213d0ce7cf24a63699f2a11dc6201caf51de0387db10266faec07c33a5826bee2ebc22fdbb5def1c9fa567c7e4f0f1198550d35f9a4a838c9c2d65b107e3233c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51108e03c57184cb7f99ed49bcdd238f9
SHA1889dc8e6e28840a87fa34ad980a19be9965bec92
SHA25655f59d58aa562d307bec4347310a1cc1ea9ee6cd9850144a8c0bc04ce37bc875
SHA512e9f4ab44d55be9c886349623e525b5c1c096bc0451ac19400c5952214b082495bdde0a12f8986ae8e143acc2a8d91a4874a442e8aa843d02615543d9f048a7bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c7059f5080276bb9fa18a9454b4b8ed8
SHA1e9ef5b25d3394269939e17df38d693f9a6219ee4
SHA2562fa5d4db0f25584f4a25bf1e0eab9321e96218da34364e42e45eb11330029193
SHA512742a2ee48371894aff0d1a3ac7c9efd47162e15b6b4f394fd0bc6070487904ad703b723f5576f1c02ec3bced41e0a651c7d64ded369ca7887ee9f3c7bf5292c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD594975b4bf995a1ad7b674a293799ccb1
SHA197595799009842f8108cad1577a37208953a2409
SHA25613b9a4017946b55d4f06b478c5f9a9e15b0de56a8b8ab98023d06b6ccdddfc75
SHA512c909b185fad3ddd6323b9050610ec91f8ef078269a2bab6add77993782548480570f4cd0b4477f67ea639878f25773adbaf7d782391a860c894d4d8e353fbd5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD528af9042054c1fcdd74c277239fad79b
SHA192deb994d030fdda68fc535053e81041f848974e
SHA256bbdc2508d1b192655f78fa6aea7a4d18add2e8cddc27faf19f8f2adcb6d49aa6
SHA5123ae4fe3371c13b16708c95ad5b3ed328c10a53f7c92602e6af92b7b08df2bc030193234f7ec96aaa8a5973c07f5810cf279f304a2962bad1a9f45661b275d26c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD533afafc9060c168d83edfc9fd4b974e0
SHA170a34405f14f12eae84a77f6f8d2a9aa0a108bc1
SHA256a71eff2809f850a0d0df5bb0414fc271a899d56a442ab5a73610caaf65ec403f
SHA5123ef824fa40c648be86d1882be8aef0b3c11298a62ad6919d9412eb9ef472b7e01f44f4f53f7411d71d958dfdc625892ac4731e28bcefca5f7370acd13baf852c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5962a618cad58b20cf16f978dceb11cb9
SHA13bda99c4f120c404eaa9fff55293f6e53a4613f8
SHA256b6268154564d12871621e256ff80449483b4581eeb9d9ce81900c5e0bbec07ec
SHA51269ca8d61f6ce20f3758fc46331d878547fbeef34c96c693e8a57589c8e7030402e2d371d71950ae644c8e5af0fa97c0e96bbb723f3e3fa977ef66dabc25a631f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bd2bc7b941e8fd51cfd8b0dff58e482d
SHA1de2f68676cc3d4b6d9fedb55d906d0929feb344d
SHA256ef6ca5605430235e583dc8f7225eb4cb0aac59cc2046b070d434223c5293e2b8
SHA5125e03b32d08617f6b1ed0dbedefcc1cb38adf142d97ff65474d6b5e27d2717a20cd0f165ffcb14757a6007567e3c7add51f90b10c218d21b9e86f30c5412c4697
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c4ee5627349db10a149e8fb94ca40613
SHA17c11bbf82009340ab02f202061f1433e9d958c48
SHA2561437e56ba37b80106562753005e3d17ef7bc1a36638a98e7886459179b46ce7e
SHA512049712a3a0aa26413061d7871f635af0213853c8d2aaa6e98438cf7525bc2c08be3cb26b23103c68863c45fb64d7c58582c52d6abee690f956ae0d64d8f37d13
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57abb706a6591ad2d3afb8c8f3711aacb
SHA17ba5ff6573b87d27af233d5ca7374a7e27a360c0
SHA256c71aeda7fa52b204ea7889f1abdc41d7cbd80c461cff33d49a883339cb092c30
SHA5127e46c6166361351fd70542cc0a517a440e5a1172c5390d719d4f49b4a5d1d93e1315fd1c571e67f80a0dd5a5875a56506cf299f9325f6c0d5a99726cc426d7fa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52fa29fe587b05f48233a557dcaacbe35
SHA18c6deaf471488c19c1e6e032d1c54b51a2e30a08
SHA2568dee419f22834d8b8dc34a35e3f24ab815fa100f72ed79e89225870b39556697
SHA5124aa9338c1255aaa733d4e7e216c8d6961bfd7b2367d4f2141180bd69be17dfe862376efe7a394464ed8f5ee92bd326de7d466b7bb2b6b54cde102efc1710fab3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53a20e3a1e33a7f28dd09d630807b8949
SHA18b48126e42e727a9cd3cbec1ad1c022542c8aef6
SHA256e50223c9906398746c8fc34be49cfa644caa8287611fb4d749527412c674da7e
SHA5122d591d5d23cbde063f5d3ea1ddb738615edf6222118e36b5dcee9bbfc8c64c759d06d00911f1522812d40ab2874491124332efddf1999156c513f017fe64b8ed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55e18b80b4082836ee09360bd9a85ed8d
SHA164a2460f55f57cb3af539c16d469a01e73a57547
SHA256394a5febe3109047e99372d86197ecb47c6cd79085fcbf12ffc2a9b9cebb79f0
SHA512309c13e3f08d6d6c716ad9639deb6118ba0623f4e0ed642355331cf3ee16185bccd3e6b9c3f9c9eaf8f6829c4c2a3c613448117b391234cb036fa9ab7de38935
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5091eda69d8502a853a8b8a737c3e53dc
SHA1e05414ea4256d10a08d3453ffacc1512801f01cb
SHA2566655d3537cbe07ec9a02535133aca2eb4b69184f5c11f59814d77d70ebc84763
SHA512f34a75aea4d7e69037aa70ab0aa3a70eb784c7a4e2217954c69aafd7437d932e49dcc26002bb9b7d8592064c35776dac46332cdb62aeaaaa803446fdb03d7a84
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e3966862118fd9f5aa54a88399c4b6a7
SHA18de0070417ceabd0fe4e2f4c200a2be7615bb1b9
SHA256a5d92d313267b4f26f26d9adf9d28c99385f590a1c5ad51d75a12ede30435387
SHA512000df7622763d0b96852a874bb03ffdb57e0cb00c121d1fd1030cde7c773610b973e8be0a3dab6939ac78d8a2e2d753452ab44279f2376ae38106c41dd94fb1b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dd4101d3edb878516c728177d6746d32
SHA1fc087e56ab577901b79b4e6fd87748df3482a299
SHA2564147633f97bf39dd873ce1bff34813360da8f48dc04bea1a8f2f5a42a8690ee3
SHA512797e02844e594d547277d82f9ed9f613e2d9f1efe0ed5f9ac92ed59f0328aab640599a4dc7f41362d36596e2d9a71ea679d59b72a185f24a5039b5e97455e56b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD530f912a053fb77e18d9a25781253e0f5
SHA1e7d3ce9688269542ee151c7c4e4cdbba732c2b47
SHA25654829ca4f2d50512af3f5c21d9a8ff9c01d98084d7836765295bb86bb9f25fd1
SHA5126e1ca9707259fd1cbace8686da0fb79a82d2647c517dc202672e0ad98e696d66523d30f41ffc131365e0561f23b4fe9f1e191dd6bdc6a3913abbac1de67622b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c39a616d11df9dd9827fdd01581465b7
SHA101079b76dbab1bd5215718f84c2cadd693ceb2bc
SHA2563484bc1c401baee44be88452d46936b50dfefa2873a34cb0a27a840249d84f98
SHA5124409bcc74f161e265d0b609a2d7cfd00fbf2fe346cdd4ff4857327cd82c5f9ac154911d22983e65d1ed77835b2903ec50058fc17bcaf6e2bbfc1ac554ed6bb36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58e061716bf0f62660a2f2fbe67bfb2ba
SHA1b03b017b41ccead9a840127d40bb2fb85ea2f895
SHA2567191e97e2e3b0e45da6341582ed86f36c963fb9658a37586e576da76f6baa48c
SHA512e4c8008b171e22eea9d4c9f72f26c7a5a535d53bd60cf214049e0b79ee4a6690245f10fbe0968f7086a9afc53f2fb5963e7335677d4d1652e813f9dc3cd7b1a9
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b