Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
15/07/2024, 20:42
Static task
static1
Behavioral task
behavioral1
Sample
4b5210650d81a4d2caa7c388c3f5700a_JaffaCakes118.html
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4b5210650d81a4d2caa7c388c3f5700a_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
4b5210650d81a4d2caa7c388c3f5700a_JaffaCakes118.html
-
Size
55KB
-
MD5
4b5210650d81a4d2caa7c388c3f5700a
-
SHA1
0645b208f44ad580a5410a7f3f1325702bb1b898
-
SHA256
620334b4fa16c7ccd2887f6be07b80659cf5a9925be73b8c8879362f6f5f7245
-
SHA512
a3d9dbea78b5ae5827a36ef2b92cc963158d59520c6c8ea2c4a1c55915291d60818bd7daa063c93356a93f7bc42aaeb1d81e2b94b60767379960a35d50c56f9b
-
SSDEEP
768:SCvkrpFxShREQBwQCYG4gL4Z0QIbu4GZgYD68CgeHiTjp:SCIpFxShunQCagEKQIbu4GZd9EHi3p
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D2949CB1-42EA-11EF-85B7-D6CBE06212A9} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000a3d5a058b71c4645a1a6b8b9d2c7fb47000000000200000000001066000000010000200000009b9809e0a06d942ad4ca47466c00445f220c606ad8197710c65dd2c5530b5035000000000e8000000002000020000000f3a1d851bf6b07777b8a113b4a99b65c91a4de5737f327a90acacaa2ba25e5ff20000000b31e36413c328d2c18b6eb13750d105fc55e00b655b5ea04b03242ef657f88c7400000003e9729d30ffaf5f26ee9a11da50db0a09edf27865707e4aad4d2afeab27835d66933b23f5ec74c4a1f0d3ca35f92e73f29a888dc1e67191d21824161fa1673e2 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427238047" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = f020b6e7f7d6da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1128 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1128 iexplore.exe 1128 iexplore.exe 1156 IEXPLORE.EXE 1156 IEXPLORE.EXE 1156 IEXPLORE.EXE 1156 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1128 wrote to memory of 1156 1128 iexplore.exe 30 PID 1128 wrote to memory of 1156 1128 iexplore.exe 30 PID 1128 wrote to memory of 1156 1128 iexplore.exe 30 PID 1128 wrote to memory of 1156 1128 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4b5210650d81a4d2caa7c388c3f5700a_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1128 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1128 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1156
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c969e7d041250783d311cc8097439250
SHA12b64eceb12b7b5571e4f685c959d3ecc6ccfa1bc
SHA256d634fd0c95411e12a143c2b0f988a408c1fb4e58a282d2e2db0818f77cc6d109
SHA512964dd6f792e46959ea0af2375ff198fd4932e455dda821fba35cb38094b24793545f6d58f637ba07106c3c8a6643b9bc606ead861b13d29894435a4e2a7cc8cd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ef140897fdc46828f96e5227f10827ff
SHA1da72e2354741d80df75acdebe5124a9310f917ea
SHA25689e744ab85c8f82ea468269a5a1dc2f569e677b9b429092ea3c0c983684e3b64
SHA5127a176f81070bd9df007baf66b71c3105416777a8cfab3f93ad782ce5767f2bb20da7359421adca5a6cb26f05823faeebf801d2eb5083cdf284b7411b6370fc51
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD536ab3ceb173097de88d60b1a78024d9a
SHA19254907288c5715e2050613e33b76781847ec9f4
SHA25606739aef9cb809a0cdc1c628286b6c648d9afe10f021abaa780f725c03aac915
SHA5128e7a168f205aedee1cb9e301397ac9f1c64f4504a27c0e06f9786f42d22cf7888a1e3ab2d230d8305426f0b36e240e4dfe9bd1e8b741f6da86f5d74f98d506c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD514c9609252651d1903fd10df46baf609
SHA1a275ebef3ef74b72e470c8b6a9d8a47d40889781
SHA256e50ae02d5840e3886498fcaa4448e0af6e548f1cfd0847cfe871c84c1f2c4972
SHA5129ab7ac54fa57e8dd02236d69c0d9e3c6f57510d8562930f8e0a37f5527b7bab0dfcbfaaa13d9706a71e54080130e21372620193d6722501653e3ea84e3919b43
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD533956a53063e91eeaf8f67c36c37d183
SHA1bc88f3cf9019f943e1babebd5eb8d5434a32ff12
SHA256c324bf757ffa0589b17967103e232ed53e80f91b448b8c89dfd1f0cf5593306e
SHA512b4b83c120ba6d3b20c50c483ce0ec3c1f1fe855d3b6cd139ee9a9b45cd259caa782b7e551d04e0ba3ae35e29afbc461453d37e542bf6d24a17282a841c4c4f58
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD543a031befd90615becf472989b75914c
SHA1620453f2cc1593dab7764ebc56b1b1772663465a
SHA256283651705f1fd75a4eb1615b7ef68ff7945cf87792e93520d762816f2b717f61
SHA512c0acb3fabacb556316fea9ea9ca5248250e2d5cd92edca2305d15a7e79e6fe11737555021938d4d94f30b3a1835a0ac46ca0f0066bf323d95dc4bdfc63ebec92
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f7728588013f2eca1b8e01d946dd53ba
SHA1d3df653e7c80521baa2dbd13bcd9645ba4fd1682
SHA256e2301487e267861e2d79439d0e20a53f962f45b8a2c5b291d65494251a2d789f
SHA512846a66e1e870d3e24acfc45950487b09514015da202fc89117873437c7606a96216f5b1aaed5a64e8f23e99fd26fe11cfb0f062333adebd41425f814d2f41238
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d7932155fe44c885ecb89a8905ca1b94
SHA16b5ef247b6c32ffc321f7971e5b37fe4b82e9ce6
SHA256f9b0ebe6ed14b932a5375bbe2abfc3c152189bbe463bd183e683a93b24922ddc
SHA512d640e94b15fe3ca502982f22b772605329dd5182eca4122f69992496f177bc29e0d506d854f05198fae4b536bcaad97ec9d5a2c7792c8beb2b955fbc2f11c25d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58c6080b94884f91d0df92ef072c063ba
SHA1f9cfe2abcdf66712b502b4b11a692f689917207a
SHA256edc67c597d64e309dda84d5c358a2dba37df76d87adee8e4b94e349123faf1e9
SHA512b7a72fc4058195acd636d9eff2510ae19d2614f86c4692e82da0eff2497a95170c174eff193c7c3ceef38ddb48c4f7b45e03ff204e93507505fb3c920f5737f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5633de431cae543f1601cd3d88403bb7c
SHA10c5fb8dd8646355abba9ded66f657ce6bfe63d45
SHA25625ba15d0c58e693acf2a83dd0c0c1cda890e0ee41fa41808d0c2e79807a24559
SHA512b72e15338acfbfe806aae284c9dc64c5f0fed39ab9cd1ae4b73a28767fbf6ca76a559f0ce03fe3a76e81fc5829459cc2c854afd5deb59b4598224c1573a5e66d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5844ad03a6af907c0979d0540097edd25
SHA1f2099f7df6534a0e8c4ba93c1a7686430bb4e07b
SHA256f90c581d97e098ce77722b8080804739c6c69a754b943eae19871a4931f37a94
SHA512d6778b049e0e7f033c08facdf9822629d416fe28a776c52c5c87835c340844d002b32caea62347567b37a5fc54ad7900f4a129d69ab70c49ce03578d6c9871b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5419d82a449d27a8ba4d0d679ad82f4cd
SHA1c75215cb86cb42b807d7b24052f3c108d3a9764d
SHA256a7925a5b1116d40295cc31f21a4c8623ff58badb26072d83c65d539163c2e5b9
SHA51240eafb4d8499a5160244862425319849ecdc199ea6a2965327f9249fe1f06b06c6f628c875f2c493d5f5867531b66443b7661cbace3f94ecf7afcb9cb940c437
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58fb2fa6569949e9677116cd2d24d1e57
SHA1c3baec8fc887b0343809a93536a26adbe33d38a7
SHA25634d36cc0119566f14f485c92a2ba2055ed17e9d443fd88976d28d1312cde0bb8
SHA512e1d82b5d230463852ca0d4d57c7f13f3347e2a4a5034574832720d7a15c57af0c267a6cf45f7ee81656185463198a8ddd032c9e1b8fd7d68c84e5e960d89bcb4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53104f498520ec9c816458dcd1d75bcbe
SHA1f1c00eee1ff4d48dac94c1a26508d6088b9a4783
SHA256c185038ebbbc2147c5eb15c359c805cb11f80d2fe08f482dda465e847d6d14b4
SHA512865e51fee6a9bb93e0623076ffead55c900f3f7ca098bd40f65c3192ed4ed0c819ed1e94cb61fae1e73d12bfc1942abb6c766ecd43061e81eee27d8e5716848a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d8a741c70fdf9d439171d2b87d037213
SHA1def8e553d34029f5fb40d32f7723661c8723da31
SHA2566443e9fed0897cbc62216b72d0cec571f27eaa97c00832d8369833db83382489
SHA512d4601075f28b66270883cce33b23c0ae3f6481a4e0748e701bddb110488994fa3d506663d6c1e151183a222ec109fef41dac86a860531c546cbdf66d4da122f8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e03015c24749f0fde485da0bdbdfd879
SHA15018580ce10a3850096869eca2dc6161ad9e4f7d
SHA256412a5fb97bb832ccc34b4603af6375af9514b9fe1d0ea4b1f0e740ce8eb993fa
SHA512300cf9782625b6786298cc75449699fe39793680b678d83dd3c6eb507f0aa60884e6da91fd150d84e427bb68c6bfe060f1bb47dcfe701a8f0216a5447efa6ff1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fd93150738a3d57d29b68526c6094a05
SHA18f2c297c2e71ccfc06c6a430da601a68299e5443
SHA256ba53dd4a3c682949cebe9ef1ad7693dc7edb405c8ab44f975c9c4744c4f90d3e
SHA512b0d31589b0f93e62da7e1a6bcad73bae1bbe89ddbd99e2394e5c029eee73fce0f937cdcd7c2fbf474fce1ea2ef4b0e25b1c1f97c49851057e22af39d56cac330
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dcee6c3b9caa3e9e788f2bbc858a6ccc
SHA175019083eb23908e0526519d251a65265b184b62
SHA256445e344b821e348e13f985fa82e814c5c95b4f28efe34dea6b94d7e18edd7b79
SHA5127b90c450a6d251bc80b6135b7292129c77234f6522884073422eac7eb9d56c77815193a281c231e5f1e55947659fa9e8bc9f5cf527c71745b48cc22d74a781df
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5afe1101c7e59ce6df9398a9d6b0a8248
SHA1bd671813cd175fc00ee6705ca82b48f7a1db1e09
SHA256c1945e6e26f8a8c7e208d1c246e28b8d36a651c4b7ce765b1e7dfee522c3fdc1
SHA512ab1dfd1a18b80a47b9ce175eb484ab830c493b3130b9864449644864f2a7884267f2e5d404cb1f3ded6c4b7c14ad85d9b85422e87aab9459b5150a181c0b79e8
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b