Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 13:56
Static task
static1
Behavioral task
behavioral1
Sample
461c8a2402818bd13405e78fba5700a9_JaffaCakes118.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
461c8a2402818bd13405e78fba5700a9_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
461c8a2402818bd13405e78fba5700a9_JaffaCakes118.html
-
Size
26KB
-
MD5
461c8a2402818bd13405e78fba5700a9
-
SHA1
c56ca53c59525869123d50e2e6d0addf1215439d
-
SHA256
8a31c915223b7f972e81e49fcc1c0092dae0fcc43eef17ba99cd811866c48cbe
-
SHA512
39fc9acd6086ccf83394b9a45bc1de84b25c8800c83f218ca3645871557fb0ec2cec7fde4b04799f301cea50d0fd6ade5e91acf0b9d8f6a442d8bf8b0bd67a61
-
SSDEEP
384:X2fvAXvevTv+gv7N+lal54WnfIKZsPpejN+c1TY7MV1aVjJb:X2foXvevTv+gvk4FvmPqcVx
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f0f1adaef5d5da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427127245" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D7F5A1C1-41E8-11EF-A372-5E92D6109A20} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000082ebb0b9d6f3f0458e93e15bd38f268f00000000020000000000106600000001000020000000812a1be04d4e158409e61e21ac092b7b07e7a84775917f05fab3e84d45188740000000000e8000000002000020000000d864fce74c85069e5c027a2733669714e72f131f4c16f34c473855655d4bd038200000002bcf3e88c7f2249ffbebcb404df77f0abe186300efc16f130dcdb249a52b586c40000000787736084ad7495e26047358f22932a7ffdc03b872f0a0e4f6fbda802dc8b742de5cbf774e9f0b2461cfae2fec05c2b50cf999b9ffad62557009079baa744041 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1385883288-3042840365-2734249351-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2988 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2988 iexplore.exe 2988 iexplore.exe 2100 IEXPLORE.EXE 2100 IEXPLORE.EXE 2100 IEXPLORE.EXE 2100 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2988 wrote to memory of 2100 2988 iexplore.exe 30 PID 2988 wrote to memory of 2100 2988 iexplore.exe 30 PID 2988 wrote to memory of 2100 2988 iexplore.exe 30 PID 2988 wrote to memory of 2100 2988 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\461c8a2402818bd13405e78fba5700a9_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2988 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2988 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2100
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55224ca6fe2e7c9fa14ccf85bd69d5766
SHA15155b7917243616e1f3972ac91ece24ef9b8a28b
SHA2568b0ec01af433cba7a54d9be6d568fcbf454d25325b30c4bb77188898d574a258
SHA512946a2548345a6304a3780da45e62cc2131156b1240eed583faadd8eff378c81c5867a039c0a07f87cea9c8e061f88075c8d4bd95100604395895dbf7af600492
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51bbd4d838ae33cf815238f0591560946
SHA149427a5ac6d7aaf80e7197c6a3594b0ad1154464
SHA2562c94652fee13a0461c66e98d17dc38b4efa23cf0459adf6568b9713aedd8cf02
SHA51223e695245f52e9df0b5b639523dc339a9c13fa9a2eec12825980b5e4cd47db0b1997c6310dea917b41e769b1235f784fb1c2d972d0790c6f0bd590ef7f8a301d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51fc9aea6fd948b3f2abb577ffcd62c8e
SHA1239babd3ee31c0dc0ae96c05d25f47de9d2d1917
SHA256856ffeb876bc084565a6ed91c58caeebd9bb3d35d5489ffbc83be6b766680b15
SHA5126aa97caf1bd601027b18a575d0d90e6d1ebb4ab581c5f770b85bb418a83ce95996e16f61af567b65459ba8eba7e61c2db9dbec922ef8ddc870667376f5613f55
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dfb218edf518edca798e9c6023336176
SHA137d0a6bd40cf7c32964728ae3b42f1f98f859513
SHA2564087385ec09e14ce53cd48e93410e21d7f68de3141560c2c4fc18c7725316c36
SHA512e9251d7f747c8b8f619b1e993f6e62fc8e8934f44b776a6086e084d35279613b3357d9ea5937d9e6e7967fadfe94877079ed751df4880486e3e6586f51179e90
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57bc4148ff0130fb97ede9a6d8a66c6e4
SHA19baf8ae232c459d92c38ae0d2e51a0e212164c83
SHA25653dda0fd48980c3ed3b15badc114cb51a4b2bfc3f6ec890950fc4dd707b7969c
SHA51252d58a90f37bc746b3bdb3fd45b53d9baa688c34844c59d365b6610a82df897ff39096863ee44a671a30ccc4c8df941ef63677aead70c6225ca704e6885795ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54200811f981019c5b82c664d71e8c6b3
SHA1c7e76d8c51a095f19678e01b287b161f31ebb3e3
SHA25636a83c44ca9bffe0a715dae0912b29937d96c35d840f2fb1cdc967dd8a9d753f
SHA512c1f05a17e6c833e3c85bd7f72790b9fda203003741ba2184396a12c94a91d70636c86731b191e540516bef9847047f9b4c65982da3fab1d2045f009b0b643190
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d1d40bbcb10023ca39c0fda2ed35d38b
SHA1ff427dcea05a37431df14dcf19fa03361c8547b2
SHA2566ae0e204f9ac2dd4a367ca9a762a41fb1363290ee9e49a2dca9548a7bc408933
SHA512b1f35e3126a54288f08ce304656376969814c18dbf55303cb996a09263d1eaa214206e420ea45046dbe287b47ede9df03a73ffe4bd9eeb6b5c49692ad3403c24
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e0ff15f1030e5da712d61aa145af0c2a
SHA18cbc779460b90812b93354f6762241ca52acb912
SHA2568cef217d5bb66acf2df142aa1624629e2cd6af8951ec51980075814f1c62effe
SHA512b8d5e4d702b95322d74c34e4bbbaf7349eafc4fcfd8b245463b2b69c6dfc7eeaef948249d060946818b9644c41bff5b6fe65c85dda45a220ba6220fa0ee8de45
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51e6f9b1260580c939a79ee0b2b7b8878
SHA13355a558e9fe3e32769c121ac16797406c4369eb
SHA25603dc054c5e74478319ed40249987be42e678da4d58d907dc14954087148ba976
SHA512428c3c4059a4eb15e56b081a1d57856919a7d723f72cdca61aae80d0af490ffbec298050bce8f71afc3a2d735036e0c66cb67ec3f6d55635410dd34f047ae2ab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55e689f59b11835b90ad876fa9a587a14
SHA1c01444634caea272a97f44aca2446e9a3be72416
SHA2561e4b88131cadbb94e31a7f9772d76d07a05197e696432083e88432857d0545d7
SHA512585bb733e1af6605dc8489473a8269392e4fb791392c33d36956e1962b2376da3e07d072e056be674e53efd68cfdfd31262144a2dbe32be21a64bf17c3ff8de9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5854250451aa1a4a397216de077882ad5
SHA1f28a184a491bb222f49a52b59398dabe80cde533
SHA256bb5ed25e46bb8c8fa46fffbaaaa9106ca48687f562330440b9b08a28d2e186d5
SHA5120b3efcea3ee6b64673fc5e56367bdc8fb3ab24c954b7d6018e274d751465d2fbeedecebc640f80dc8ad5d651a76a0dbadcd52c10557e01d1f415a5760287b11a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57eb401a6857e610d79b0203d77357fc2
SHA12f7b0b3538a2c31a5815ebaf4ea0ee7bc2211d1a
SHA256db9ec4cd24e60d1f6be940ded2ed950611aa5bcb8621eaee440ed918fb0cd610
SHA51247ded758d6f4877bcfff5ae886d2e6db5be284feb1cf7e33ca63d9bae06a7fcb0ec67fc0efb32d5da5e72333f852505523f9e7259e72fffb3d3cd3c6c4e0fe11
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55f958579558df6967aa138184bba69fd
SHA1b713d729ecf85d38155b40f990889f9074f9d5a7
SHA25630b1d4d6ae0d78ca7754c195d8b26d5c53048b8b875db99dc555dcbc47fabb07
SHA512b7881a0e58b2bf4db758e247d0de518797a7b5243eab6950943e5231e3a2ab7938a5b91ac07b30eb66abb78c24e81c54f2861c90e51ce621a824f3bdce5df1cc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53372d8d64ce6205fe8c1294707fc5b43
SHA109aa898d3daa173d9ebd13d1e330fea856d2d59e
SHA2569f9f5de35b8d5dbd1e42c17dcdb1b6277a3090127a96e3c7ed1ad840de80e60f
SHA512ee1ff5fe783447cb72dc5b6b37cbefcc67c4d8a4a4244dd169f73f511071f791910c3f6e81173fca98fecf5a2435bd06bde06cd4424a206876b796305a27c043
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c4f2758ba15623ad58421b69ddca3c08
SHA1f7f76f4f14746f320f9f641ecf6559573b5d42a1
SHA256e18c46db8962ae67896d4cabf2eafbc2b8b077bfde87d7cd4f20eb725a769748
SHA512ad6eb0144af9a209ccf9c0ba9eb2c068da16bd1fd84af791f8be6cccaac7f607e5bb69928366c22b2229f260e845af52120e4ccffb23748ff384fd505dc88e8f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b9c8e40127b5ad235632b27ef7bc9d69
SHA1baa7e2049727e29d3de01ea89710559941d4ac49
SHA256bcbc55b182191f2423ef7aa89aeaea2cf66f5504d4f590a6d54be72e99c6724c
SHA51287cb49b6e11205a255e9ddba0d2c47f2d37b3678e979ea345d9ce94382504103b76235d2bb17dd6f560c943a5464914490d45e078a54cd93ad7bc27d36ae7c49
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e2b4485d1176dd46b561e2c78f2549c0
SHA10b0155c1eba87391e7c34805af9918f812c8dc16
SHA256065430530cf406197565d1f4174398f3bff54893311e93851d2e3246a99632d0
SHA512a27d66f26c7ff8e31429aad4cc1c8dbb50b917e5f345a584f04b2adc385462ff59ffda0898cdf5be08805f3252d99fa20c57e16e44b5be91f1d48b9ece2c4977
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d8b415220cc244341279e22b5902df60
SHA14f58ce771ae4d19ae69ebc9a78a100f15f0e4b10
SHA256b043b3d260908d1302f65c58a2cd9d77268c531ef4f9c6bbe5c35865551c0340
SHA512aee174e228150f5e6e42f0cd54c867dfe788da6a2ff3df3f5b591cf7bc1e75693c0903be97d5b082f5259c5386ec3aa059fc432a5ad16115f08dfbeaaefdb1c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b3cc11f773e6ad21bf2e53c4906061ee
SHA1bae222b30bfccc5d18196973a73b339b2e75f3d1
SHA2567f2e95fb5e20afc374ffe41cec9388b190d78c859b52cbec23e3bb17ce5bb104
SHA512c1b9114b68585c1c898685b525dbfe27da9256f71af17f78b7febdd62eeb3285caec38d41f402c5dd4f71aa5994f70680adb494206d116f88a210af048ab6f76
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b