Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
13/07/2024, 10:13
Static task
static1
Behavioral task
behavioral1
Sample
4140da7dfa8dbf0beb3feee4d5577f4a_JaffaCakes118.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4140da7dfa8dbf0beb3feee4d5577f4a_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
4140da7dfa8dbf0beb3feee4d5577f4a_JaffaCakes118.html
-
Size
53KB
-
MD5
4140da7dfa8dbf0beb3feee4d5577f4a
-
SHA1
afa769897a26799b070bddc499c22f63ab8ce093
-
SHA256
c05e956c7052377ab9f0ded4150eaf8a7586eb0e98e0d22478e068357df953e1
-
SHA512
b09296bc4761dfc6814170363cc34690ad6b82529b2feb9e6023cb345c5e9610fbef64fb5ea9b995c27fa9ad2bc4ce42f0beb55502af41b2bb77423c5d66fad6
-
SSDEEP
1536:CkgUiIakTqGivi+PyUvrunlYw63Nj+q5VyvR0w2AzTICbbco5/t9M/dNwIUTDmDL:CkgUiIakTqGivi+PyUvrunlYw63Nj+qz
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A00E8BC1-4100-11EF-9403-6ED7993C8D5B} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427027509" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000082ebb0b9d6f3f0458e93e15bd38f268f00000000020000000000106600000001000020000000990cd1aaf681b16cb9a01d941944b59a6f2183536014d810f88abc5a1ce44287000000000e800000000200002000000023d5a517d5866d5c962f9f4e82a0ff8c905663884d50de852191fdc9173b658f20000000d126f3ce7cfa62eaa9ac6354212955bca0b8480f970ed95819b939814d8b52174000000058d318fb7b25a01006d257fc38f2ff403f52504528a444c403923a0d1ca68edbcfe83a21dd3ca288fb512c091df5fbc959bbc9060c86967fa6a390d1f3b0c2b7 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 80e667770dd5da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2412 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2412 iexplore.exe 2412 iexplore.exe 264 IEXPLORE.EXE 264 IEXPLORE.EXE 264 IEXPLORE.EXE 264 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2412 wrote to memory of 264 2412 iexplore.exe 30 PID 2412 wrote to memory of 264 2412 iexplore.exe 30 PID 2412 wrote to memory of 264 2412 iexplore.exe 30 PID 2412 wrote to memory of 264 2412 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4140da7dfa8dbf0beb3feee4d5577f4a_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2412 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2412 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:264
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5edebb385800f2d87b22f9c48a2c42cd4
SHA138c35d5169cf5c035e326053ed29ac061a111be8
SHA2563560dacbd95b0222cda0d722157af2242344e47f7665e602956d66ee65d925fc
SHA51260f781dd8bcd4ae1b88b3c69fb966b9f46f7b10d7d6a1f36bf41a692ef9e839b8186bda8a9937ff42f300c75b07be0d42761484dd250b759972da8a9c9d6d938
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52ef346d46d76b115a908083c01527e0d
SHA1e218e73bd948c11894984e572580bf42c47f47f1
SHA256c68f5efa163d23ced3ac768d8135dac8f6b8729b207ff66920e16a3d377e92d6
SHA512e23d05af7895725ad56f2bb7cdffa8851dbc484c789c46411609c66c36d6e5cde75217df19032aa01ca2d9eefe817010abf68ff33b997af538172a77b7c5062c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55efa04be2b18a62fbc14a25a8a156bb4
SHA147aa8ab7b50013d7a17fbd7a5d69128db3ca515b
SHA2562d0c4da5637e471df0d0e116319c58a730fc564a60d32d808638b32aa4195145
SHA512e222582a98a8c186e115efb91ed8a25c099233972f779b663eec54b16642a07be8a85bf9f8acda79eb820961c220a4fb63213831061490070eed7f45faa665dd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51af14445db4a55c372f24d1c6e0383a6
SHA1e40754112d9babde90ae13b328ea9ea131ad0035
SHA256f704d9f4a58d1cb8a614c33c1693ed02bc67592e6b4c4c7c334b2c7542ce1fea
SHA512e7cd6b1f75dd98a50a45d915af3d5e7c97c9c0ad15642f29b65bba9e37d4c823230c3f094f63c11d39b69dae77d0b4223c547d2c7d5cbc05160e3d9feac8f9b3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51493f81c0f14eb61a0d1333de04c52d6
SHA1117c39824efeb29998b9514e7ebb31c6243f9389
SHA2567d2b24464783445a72c414b59dc6923c65a8c49ee97342e35c8d92298a2008ce
SHA512243ef1a2bed7cfc70ed22d721cc01a0b822eb3e43bc9469cf8d142ce7b9beed5848470142ada2236a1dd1bd0e068edd7cec8f6c640702aba3510f46d6be4f1a6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5696c9bf5d15678ec16bd114fe5b55def
SHA1812995f4f43fc206e231f5811901feca969c7b73
SHA256f2c9bc8ec1c6fd4c8f488bade778e68f53604b4463be8d9d166eddb730d263cf
SHA51235f17d778a9d3ee7a829541fd91804a9e3c875339f5847e93934c9207a6505da99a853c05568890b4d3fafc2860893e44a6ebc03e60c1424a74ef6c3d3850cac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52431b9f6d030fc9850a4ec81773a0403
SHA115ab3be03271b3fc3e7da2857e426e8b6284177f
SHA256ed4820643e53d2bec1662eb30ff40204af688720c8d20ee62e956d1f72eaae23
SHA5124ea599b13abb3fef5c44682fac3b55e7b733cb0794797939be8219539cf9edb20607c9a191a4b0d26024412e7af43e0336fd55f385568402d9e8860a4c90d9bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ae218db0b3776117202a76f779d82abb
SHA1afbe81f4d376e824d4ed0dce760b09f95cd43e7c
SHA256fe32ac26af26e5d7267f01778b8b947f908d1f5e616f563a07f35e3182a28146
SHA512b8de244df054ec6addda3de21745c93aea28733ff70becb098ce034b15aebfaad782ae2923630234948dca478a179bdb27c94e398be58d728026058252c38eab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53de8337836a000a029943ca552617283
SHA1245a69fc27babd8ef86d08d1e7136ab4e72f1f42
SHA256fa2ba85544baa4ab3486b3231adac268df751a70ae3618dff330250a7a70cf8b
SHA512cb11550e5095c6b8528ac31edee380a519bb103aa6addb4e78b1e7b6b40d238a11f74c4ab530ac275ce005b331841b408f62d660e20d2e179928f882a97fb3b3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f80b4f6cacd7ce91b59a0820a1fb28b3
SHA189f23c4e554f369f5f3a8b26c0ff149e1ae612ff
SHA25625636f6fa99349170beb76d7c987a6d8007a58913bbdb4d63ccbf9a6426f0bcd
SHA5127457c72e5611f233ed31fcd92388f77eaf8931755c622a43d15812c38eb3d1cf36680446fdf1adcc1e36551f8178ba858f2f1f7bc41b9ef192a3830a195cf96d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5499c1c3e51e0831b6ecd619a65a3875f
SHA1b502f96b22ca282cb7211aa7b66427d431cefbe2
SHA256ccc0a2652ad23c71a7ed57b0ab5b1f739b011d402d886acd816ff850eae7a44c
SHA51287e2abc3d9be02b80493dbcd4dff1ae359de0175376e6cc5d608b1096660d62f6b7f3cdf0383cbcb1d429222aefec4e5e916e7952eac15b55dbe8e2b33dfc852
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD506903856578ba91bce1c34b7c7e0218f
SHA1ce5e07a6e251a79e52ebf3e19857f0c82ac80cd5
SHA2561e28a72b9097862fbeda9d92c2c7d39ca855fb191fc7ad3066baa6c4d07e067c
SHA5128197658d53d9a68181e9fdf285bc00dab1cd5a17c2c0c4c3c5d50cb4a240bc8127d37686920055cd641b221ccd8a89acf9cb3cd642deb9c8c984525cacc6b7b5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51097268bf0b7de1cc39751ab0ca01cf9
SHA1083ba61b1fcc6a1bac06eadae74ec8aab3d8703f
SHA2566c48aadc8236ff4b0e2c6fe4b472367bfd8c496e09e96949127628547e677665
SHA5122812c4f194f29a20f9a920e02e79a49fc36b464ef732b231e9a8f098e0fbc8591a7264552a8c3633dd4d5df9302eb914cc678dfb54660174accb24b3bf5aadab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53924d5d4f131d6b05394031658201aa2
SHA1044a507045ccc775b5bf8b833e41be54f240837e
SHA256a5448b3366bf5a510fa86a28dd0151b8273c5266df37900d040339f574a11073
SHA51243164fe6171ec953121fc196cbb9cf3a9ced4fad5b7dc646fa837a95d458fa5be935b76657e291636f70d4452cb4c4893498e5f40878292e4f1d7c9c0bf3d2ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58965e59e0cf6d8d79aa9bb3621d1c47c
SHA18d071cfff9fe11724f0159d96d80862d94a59fa6
SHA25628a16c35b32e3add11f417be1f8fac1f95d600b2cb1359526958589efa3c2fa6
SHA512b2fb02bf1ada0c1d55a8435949c4a1aa6c94d8b7682eb25a99c547b4f246ef71314fa9ba7d96ddeffab8947ec4ae1818a3778ea20f60533c709b3cb7c778d3ac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f0e4cd6d70ab5e6d3e85e0dc93da0a79
SHA17ce9d6bfbb993a4e3957a76146074b371e6cbc75
SHA256f4c3302ca1371ff64738de69a6d4c2eca9cfec711a950910e02d000cbaaff7af
SHA51220abad060207130538096f8afc8710b2c42aa4a7476ec0939b711ba5458db5f95d1f09e2f7dbc4d5cd5e85e794bccb3f6d52c32c835cd487d5525da4c35d7757
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55549ea153a73b3e5e5f1d23a927789f0
SHA1be8f3ed81a8f05b5c34932945c20f3c134a4f9d2
SHA2562bb2be1eed91e6ca7a3bb3005f55930fae301dafabb7b2b9532e9115a2d0d8cc
SHA5127cda0ee9904c926386ab49cace1b10e44b500b5d33747d9239d92fe9cd61702023a3aa22daa9d67c8261d57a9ba344df91328abf40ba7bb65cb299c03a4e1937
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD542ed26c6da87bb16ce503337b096c8d2
SHA1dfa3312f7beb696c8ba41e8031ff3ed982fc6f4f
SHA25695b7337152588b0ea5f10fab623babf3d0a2e4875e8683eaab058fccec375151
SHA51223c204f97fe31a2ba9a438726cf4f05877f5bace8d3870db30073f1cad40d8e48e0740d6e6f1e4d06ca8fc5fb0361715241a3698f91186c4effcfcdae9f2c20f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M7GT0RRO\glossar-js[1].htm
Filesize706B
MD567f3a5933c17b3ab044826d3927d0ba9
SHA15957076d09bacaa6db8ddc832b4fd87ed8f05f8a
SHA25697e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64
SHA51203ba224055ffdbf32b7eea30c764dc18d66cc6d8707dc5fafab74e155b0bb3d4d691c5788b033a68f05299547297125122778fa7e3252f93e7343d918936643e
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b