Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
12/07/2024, 08:18
Static task
static1
Behavioral task
behavioral1
Sample
3ca1e1964fc793f71a500380ab6418b0_JaffaCakes118.html
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3ca1e1964fc793f71a500380ab6418b0_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
3ca1e1964fc793f71a500380ab6418b0_JaffaCakes118.html
-
Size
6KB
-
MD5
3ca1e1964fc793f71a500380ab6418b0
-
SHA1
fb388ad1e700abade53219c27b987a905ba34810
-
SHA256
c8552aacc283a6ed6a6f1f8ced1cd2d0c62ce52c3813162b85962bd34c90a768
-
SHA512
680db869bc0de2e8f8e2754acee79e033b6e78e13a66ccb70b35883cbb08e3a83b0dac97f4bfb128adf04f8c34a07a6647183e1f19e08c163528cff057d68447
-
SSDEEP
96:uzVs+ux7YVLLY1k9o84d12ef7CSTUHOcEZ7ru7f:csz7YVAYS/xb76f
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000062974e5b5f804e45b98349be16bffb7800000000020000000000106600000001000020000000dda88b34d92fc62c1f3461dbda0db28d7eb8291dc02d21d8d4f7c40206f09dd2000000000e800000000200002000000031555271f723fd378f501a4abea56ba6aea11e6fa877b4242cbb43e4daee3ba020000000e8cadcebb221034d895946a9b5893ea9d0020e8f696daa20234e5140b1fdd2624000000033b0ada36ff404c9611736d801f34c9a1af40c6a2d64d5905c2277c2b7a246dbc1bfa76ebe171dfddb22d14a6ea24cad38716c6ef4a74c1e909c9fb78609753f iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a014de3734d4da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{615F1C21-4027-11EF-AFFE-C20DC8CB8E9E} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426934202" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2988 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2988 iexplore.exe 2988 iexplore.exe 1568 IEXPLORE.EXE 1568 IEXPLORE.EXE 1568 IEXPLORE.EXE 1568 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2988 wrote to memory of 1568 2988 iexplore.exe 31 PID 2988 wrote to memory of 1568 2988 iexplore.exe 31 PID 2988 wrote to memory of 1568 2988 iexplore.exe 31 PID 2988 wrote to memory of 1568 2988 iexplore.exe 31
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3ca1e1964fc793f71a500380ab6418b0_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2988 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2988 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1568
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f1775700f2ab695cc99458cc7ad273eb
SHA14859f6acd852162ad4761dbc586d718408fd76c4
SHA256169115fdb2649a37c10fa3eebde357357eecae6664c20dff854709bc1f1a5cd6
SHA51280f0f2ee996703c86402da6393a3f13c96e5d1b861fa9c129df75e54c8b6a5cf5624fc94b1f2e8d17d35c3f5c6f886165e8b81ea96c1f29bc767e370b107d175
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56665a4ec5bb61c28d850c46888d1fb1f
SHA1dc0f99f97e30817ea461db950b8327b2289f755b
SHA256c21d5f3cce4872e3969076a7648b3c91ea8d2c57696ba0c133ef2fdc4445cdb3
SHA512038a771ea2fa50514bf902a585fe94125ae9373db2917b8c822aa011d4cc7938afccff19f06e9bb87b7b604be2b9c4cdf309df3b302b9d5a4c0165fdec0bfdd9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dc19d329682cb491a8a0e5956f16b85c
SHA1a050671d43f11a33daf440ebbb648279958aa913
SHA256f84f6e369b016bcb7debb4d790b0a0025e71908a71ff9f4a644441907ba487a0
SHA5120131c71276e0f1f89dfb2e2bf5d3c6988af58fbb10ad91f056566866316b27efb869d5ab71fbe29f9a4047815f2db7db43cd369f61f1eb42f300737a49630bc9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57ae28a5ef468f89122e647e8e44e3798
SHA1188b13727c7b3a09f36756b7219fe72c6e2aa663
SHA256b5234232565dc49d9cadb69b9f52784cbe54b62cb3193d18a65c1bf7e01aaea7
SHA5128a7f369a42c86daba3df0dc42a3417ceea49e4ff9c7d9e10d4587b845bf66f2788e255dadcfc2be9b7ef2cf467d0d61a58ad24472f6b95e499d1a92f8d70cea9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD510906e878ee6975abeb2fe8a2428db17
SHA1f6f091e1ebd1b6b201af34dc743126f3011a2f9d
SHA256e305736ba6ca9fa75de2297f01ca9cbe0923a6bb973ac92f19b3180f491b99c7
SHA5129167cf2e10851d522544b123a452cbffb2a1697d7f8ceb6784d655f9d417075a4a38c8d64dd9286f2b3d81ac6abe9c447d8476f4ca82c60064fa0cc51b1691f1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c63b3addc953891e7da6121d08554387
SHA1bbe5c29a404230916401cb2b4103593f6ca3d961
SHA256fe7379c60cc786a3339a3919420fc9fe8bf546752b342478f2677b2158ad4e81
SHA512d41e47637894d51011132375be69cbf9514000612dfa07000ce0a8d900e27caa1e98dd852e6db2e4bbeb587e78cc74e2f0711b2bdfc8e45dc68382d402dd81ca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bd1863af15996d36a35552e9b2e56314
SHA1bfe1a0c2032887b0785ecd5b0de830b993fb9924
SHA256563899efc0378c6aa68f3027257451718dc62ffe827cb29cc637fa191f1da0e2
SHA512fa302fcbd40be0b8f59627654f9bdf52510881572736f4d7f96c4f6b037a28e7fda0007ed0eb8dde7181063c05f1b212a39577290823f4361b8db47e52cc9706
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d4ba370ad1260a1e53e3ea117b011234
SHA17116217a2141e4ab840b5efa365a39f7e8d23f4b
SHA25681dbd2b86dff973c13436bd6f730eb62d3105e56a9a50d84157aee6e4bdd928e
SHA51209bde56633684b4238f323fc6870569f29e3f3b587be9d7518c4cd4f866af956f1afd1ace55601d395ab460042a740fa2288fb44babb419e29ec279fddf04647
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD584751206c871708f4b19b06dcb7c1812
SHA1bce36546f1b695a32ebe8d397dd61e1bcbe627bb
SHA256ec5e588be27d1a8002b864cdc01d95b8aa0234eda6e5e54f0f97c747990c00e8
SHA512f9009ce657b1864ee5d680979a4665e75112b95c93c5285621b57b9a6710942c4875d607025fae0d6c1c968f0b5f561e38682377d3c20628356e82cdf07d4d58
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50125b3bf5cb0996321b6f55543cd32c2
SHA1a23e91a14d6dde6a9238d641a6f200a60513ad72
SHA2566e292c82d44a00be0705c8ea75dc509a0897994b99721a4db2359ed3efc8ac6d
SHA5120575f230146461a768c59a031e6920bab1d9c06b2116b9acfc8740e3678271b9725ae31923cfcc364edf91969da120cef44a4192705222ea42d559610a8011de
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fb3eeed7a5e087779da7145e9d5652fa
SHA19e03751be07df122b83086a5eb5ad198f2218453
SHA2568d275e9f922d4ad85507fcb7e87ecb6212e18577a2ad8f4b5f61958cec724b8b
SHA512dc7ff4cc1e9da8edfb0629392151a70873cef3cf5e866b4c7a6d23844bae43882e88fac546aefd3dd8405275a8ce617b3fdae1753e741ba6ba7b107c6661c5bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5270c74cc4b9670b409ec2b4455fb0d55
SHA1638088a8ee52767e9089bd4258f9813cb60d1da1
SHA25611e83de2341efdf50d1e296041bff50eaa97cbda068e8d565a58008cab47aef0
SHA5127e31d936a4404ba81448f31eb2b7f44abad20cda3e7dce19f780b39af0a13a26f22cb12926e62583604ab7151907118afe3d00c6af806e87518713859e440ec2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD560ee3cbfa5b63d5ad70d665f867188ad
SHA1f6f0c74ba02807e472e1ffa2b737119579af6f71
SHA256da1b1802db96174f044340f744b9e5f0e5c174dbfbc86ba91a4ef8bd3977df4c
SHA5126a17ba4ac80cefbe8e9054f824000d1d259ec1b46efeb5cd3ddf97ccef345591c907e0b6fd4207afc574256e77ddb5839e246a3abcba48e0c8dc3b0f0febedfd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD571c88fdd01f04fa6dc3b30f1eda3a14e
SHA1818ee67825f9a4b3d74ad83b8d8df571432a63c3
SHA256fefcd4068be55ff11f7d25a7a7b9b461f365af610cfc0b5ec140ce42e6f84e70
SHA5121caece0e75c0b98f370e8bf950bc6946494c352a1e14ca279be30d78d28605afeaa6efce1804d99309439d0f59c6ad97934f75531470770847313ca1eea76fdc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56d5ca15df38102da531295671ba28a91
SHA1f869584a817f2302d9d07f8f604e12bdc7ed70a3
SHA2565c8e39e17b609a1f0cd24c5362ed483ad6271f3a8a03d627ac265d9d9e6569d5
SHA51281ee80f546cd847221edbb06b010230f66d14d3cb36b370e8f1ae74f68f03577295d457d744e4993da7ea365d06855bdaf5211808dfbcf556cd8c614f6ac0914
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52253730b3efbb27a6531bb985e49d7b8
SHA147e2965b15e4aa011e60cef168f24f56afb709d1
SHA256b044c66ce939ee145cbc8e0be71bc595d133ad452f29682a9f3f1b95e1713f23
SHA51235c33bba52ddd09f3c17bf274939d9b6017bd0743f8662e8e3acafaaa58ec6159fb7d3f8ea89a10689c7d6287a09671ec9a5baea02613952fd1567494678e75d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59066f90eff63bc47387a7a4d6a071fb0
SHA14ccc85b19d9ed62aed81111f0f4542b56d5d5da1
SHA256880e435b4cc1c0014a78960599e77abaa592d73ad2db6573094b0592bd3e4aab
SHA512f54582fea0f20672a196fa97db7166de84cc804d7f16304ca2f9db3f37956c693cd867a83a2fee4e92d3e9e292a6a4e8f5119b070f78249da1801c6861030a55
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD516183185a53152af80f86287ec26df94
SHA1c69b9064436993e5d129d2329291d8920cf18a0f
SHA256ce32aa3bbdceae5913d1ad5740785192724106745c5c90c05061d375ad459976
SHA512de7789d19a1b3db4dbb4599cd429bf4a412af9825b2495f0164553cc755db0f16f4a0f17b631c3efe64b1e5833389ca04d4d977936d31e504b3bc44947269dd8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51f7952cb01bb45e9f65d2cfbebc29762
SHA18b0b7263a9191e77881ef787e8f7f0bfbc359f86
SHA25648655ec9e72d37decbe7fcc553c24f159a8b1abde68c9cb9d6d45e925e86dd10
SHA512692ba287313831338164f8470c4eb2c65a4ac7fcd841c213b8e2366b80c9add94c81f82c24f5f82decdcc0ed794b60539802fd0e1a02538268c577b3d64ecf5a
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b