Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
20/07/2024, 02:36
Static task
static1
Behavioral task
behavioral1
Sample
5eb602bdc952001d259184cb8a5269a4_JaffaCakes118.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5eb602bdc952001d259184cb8a5269a4_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
5eb602bdc952001d259184cb8a5269a4_JaffaCakes118.html
-
Size
42KB
-
MD5
5eb602bdc952001d259184cb8a5269a4
-
SHA1
96610817cdeddd417ea668a4ba7bd13c9943bd62
-
SHA256
1c8e3fb55a1355dfc6dbbb8d093b60d5e12fe99acc74c57310f250dc4890281d
-
SHA512
e23c7bed46d109b0b8ffbc47fb8b45fcdde5fb1545e6bf50822b9d5c665c7f896c557b6c3ad18d596d60fcfb14c6249e03208d491a7459cac7c1c4333089b811
-
SSDEEP
768:Zcd9QZBC7mOdM8TpC5I9nC4a1MDb4bXCwBwowPps8Pd:gQZBCCOd/0IxC51MKXCwBwowhs8Pd
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E607F861-4640-11EF-8CC6-7ED57E6FAC85} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 00a2d1e14ddada01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000003125cc29be9a0e41b44a3d73dc8faf7100000000020000000000106600000001000020000000e4ff6f6216376593a45f073d7a259d16fcc7cf7efd5dd4ab28e6ef5ff0d97342000000000e8000000002000020000000fbfe69272866feb1c9f68505eaca8985e46aad7b10e59e1103fb6a94cb3027b920000000b9e920342afb0844c9a6ed1b7b709572e65c3beab8580ef6de4052cee1b80fa74000000051ee8b1ed626534f85e32b5b2527736db7655ecf53e3822ca0aab64067b0577c142b3d6029f05a011f85d48fa55e1487113b06861215e548e5128d66cde2d956 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427604870" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2172136094-3310281978-782691160-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2404 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2404 iexplore.exe 2404 iexplore.exe 1648 IEXPLORE.EXE 1648 IEXPLORE.EXE 1648 IEXPLORE.EXE 1648 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2404 wrote to memory of 1648 2404 iexplore.exe 30 PID 2404 wrote to memory of 1648 2404 iexplore.exe 30 PID 2404 wrote to memory of 1648 2404 iexplore.exe 30 PID 2404 wrote to memory of 1648 2404 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5eb602bdc952001d259184cb8a5269a4_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2404 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2404 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1648
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d0907f8b3e1df336fc4297d56b0b60f4
SHA130e95495cbbef93e59c9f1e70622b030b2ff4a70
SHA256e1343e69d7af786dc5f10eb7b369779146f1e9b4ef050330c26fc7fa4c94df97
SHA512b18541dcdc3b8826e9e9e2c72a036a3fc934978b136a4d0bf4e8fed637d9fb35b76f776410ec1f02a890ccd8c48e0ecd8184f6ba6ce70efefda6d071f3fb1c79
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a909281ba47a26b3456c271dd4631591
SHA1d0a613a94a158c5dec4b572afa8b43454701cc48
SHA256c6e9590de16f73af64927303bb0b301a00a90597bfb25ec887261c8e91159bed
SHA512c986142cce84f21588be8afb3a6dfbe77339af7a47b3c115e7357ca5eac5f6743147fc909da38f57c709b19df8f82dee44cb9649bc08f55b6c573f029af56225
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD530ace06d21306fe2b89bf4f61ab5f7ab
SHA19cfa9805c14d1ad5a540c8b1c4df44da4e0e8e5c
SHA25681ce5ca2549063fc16f404453a07c051168d44ae3c3ae29109d1dc0b17ebc568
SHA51288c9722ca9fe84e07bc2955dec3c3aaf8a2230effd49644513eb151d7fc8db63d33af56a5f2b29038e28bc9c8e5c08e969a6895e05291a04d42c9f6a621f8493
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD516ff6ff0a6b17688bcd52d7a64e0b42c
SHA139879f79aeeb79980bc674b75c962f60847b75b3
SHA256da6f09647792c93942e8fa545e55b45ca91e6b2c56c2cdeb00774892eec735a4
SHA5124f53f2dbd8059986f36d4d3388cf40d54bd533fd48f7e0678363ad1566254af2e0760d8095d8e2ddbcdb8c8fc7ec8ef78c93c863a69dbd317c56e076543587cc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51ac621d69e52a5b6c9335cb778109eb7
SHA11607bdebe40c1ef84edeecf678a66c98a0429c14
SHA25693dfbb87121cdad1420b145c66ec6c18ea43465bf2e7a13144d3ef1e0e8a1960
SHA512beeab2d9cf88ff908e1a062106da5cb3451fa89f7cc1bd894896abf3887b73a28564ba78bfb40612379993fdb6d11f70179e7f033a1602922db4623e04557d6f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD571751f3ebbe4e402a28b8b38fc3d8937
SHA12b6da7375f318f3b67354535921175c32e330bd1
SHA256e57ab547cbe5954ea859a8c0f6ecc1038b919006fd7bd46d1e88d86913b4ed58
SHA512a67b8b5a850d2383aa42e656685b68182f33b143a6c7f2aa50bc8528aef5fec62503466002e66e740f99982fb381927f7c65f518851f58d83684ac2c9e199397
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a349d123724af9612982668565b85cae
SHA1a082fe8153b40fe315617f861722195f64750b61
SHA25652245574801617183689498baf61d30ed122051b0825092cd854d4d5f0310aa1
SHA5125100ad69747fd440659a9358f132ee58093a051e49fc4bb2e6cd3e10a9e83158fe30428c172de01dc230ecf3ab3c983ec206dce71d7761b2d36a02cabf50a643
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56307f7a8776fb0cd212f5d7652f68793
SHA1abb0eb5d0ee8f5a63b42ec1ec927e2f7bfd68233
SHA256b4d1e2caeabea8ae7ad6fe2c0d1dd724483d14e77bf3676d400567cef0883a6f
SHA51258ad34462fe632f360ca14b52284d9e5fd875eae71e457d60a22c6b7a978e437e9cde1c0e3543bbce45fcb55feed7b68891df78fedc210c4ec62174d93ed9728
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5eb4ec8ef4c04e5ead28480b009e78ebc
SHA1d0aff041dfbd2c6bf336c6f85c2bd792cddd8b38
SHA2567ffbf20c148540d7ebf3fbd3d2863bf2fadef7e9b1b642ac08ae9d24a3eba1c2
SHA512c9b9c7fff151bed2e80595db77ef223979092d166b8bf1bc36170af9533054bf0ab865d388f3b75c5cafb739285e75ce41b1ed7d8b44d784b5885c4509b51306
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD554488ace27b9c2511ff47858e4bed76e
SHA1f4271d2e6ad82b39f3aecfa11868debc4922ba6e
SHA25696e987fec937d03390a2e2152e24b8cd60466ef37d332c57b8e59f76a625b15f
SHA512cea3e13fdd368ea9bb0ce05c52afe08b4f0db65113bade0bb3f476e8707731ba436e57cdefaa5ac05ac8c407ea64b6fe264f5049f5fbda6afb3712584e88ce29
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58053cda6542917ddf07801ad4a8cf8db
SHA1a6787aab9c321244fb1d73db82a591cb2b6cdd7c
SHA256846fdc639a588697d7a69250f925cc15ea84d1d4412a10221097bc0b83f65e3b
SHA5122f7f65f158b99b21732c8125aeb70b3e022469d093bb00053ca6e27a4b370fe054a0cf03c4875b0be14107d86ffcf1b0629424f5f173a41550b527f10decb01f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bfff1b74cd4f78d65c041aa52c9eaa1a
SHA1be5b81e5fdfa796276f177178a125b01f3861679
SHA256810d5901152f041c5eedf3fd1ed4574014cfc810ba40caef73c7c9e7c1746e14
SHA512d90921f1739fb853656b2da296f6176d24589b0720e056f4d6a86cd0072f0eb3463538b0b3102c84f1f19566cd220b2db6d510a6381da5d4e5eb26994f2307d9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5edfd891eaac83c6dc6061bf053044b02
SHA186080ef4727511b36baad6d24429b8692bdd531a
SHA25632e93fd4c74488a096bb896388c46dab2603424c510fa544e30195352cca7058
SHA512a221759c6e55cd18e9e1a472d7d521c551b9ae01398179be2b38e7c5f7a8634105ee1f61da8504b530bf41891b0b0f60ae399161867c378d54a4f37ddc166adf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ffd6a6138feef9f57acdecbb6d1ee9e6
SHA1a20c0aedc6d6a1fb01ab07e302928cc616e352f4
SHA256e5322101f1d15f842c62da16fc406cf3f0c1589431bb84ec92f818ecbe194c65
SHA512d82e5136e13f234a771747bf70c513efa3a149ba5b305cf665a40e019fe4e58d7824b7254da8b5ba684ba9fd1a8d9be5e7242ab49d81c2c26ced6a2dd24c92b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ada749a21c8c64234de78d0732e50d7c
SHA1cc2bc49d2146de8b1d30ce7dbec6aa134db197b0
SHA256b21760eb534ae4539839f5da38ad9cf79a5c8bf014348c1cf223dd26f91f2a4a
SHA512a2ccbd4aeab46b376c33631bf4ccee0c6a79798439d68328e2afe963606256131375f2922065d1f9eacd508263ddd6c6c6c7fb7539bc5649582332762a66d064
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56e6a4ac78458f2865ff3a6e4a80650d3
SHA169ebef77d203835ef28b6328dd310aec84d723b8
SHA256e0cffd1c270b278712c8d75d8131def25bd394cfd887e2bc4b94feb49850e693
SHA512881fd802e42bb49cdcafae6ecce95987eccd715e79c985da0f7dd2813acbf68bcc971b4eb52f7c6f39962e843ca4f048f7d9cc68921d97bb74a007b66b0f75f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD582753e1ef952ce409fffdbcd0e1c130f
SHA15da3f332cf7f60aba8f09a1917f24fae3e00a9eb
SHA256f5406f68e488465fc18add1b675eaa4911dd5dd04987a51138cb5a15cb81ed59
SHA51231b96a154fd5c3a8d41d6a01e5550e5983ef9bfc0fb2d1858bcc2bd69f56f1a6bd1cd4c9c7f571aa6045eec4bb537b8d8924a78a497d2684e19d2bca4a824076
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5225297aab1aa7b311f546b0f61c75a60
SHA182c2245235107725a68b10a035a5777ea72f318e
SHA25642c3f9385a66cb9bc7a5c951d8f89c43dd6961fceb7fb7aa2a1d1f76575bf68a
SHA512feca05fc506655ee419540788cdd90a171f1acf91529d47bbd2f8af17af7e578006f7afa765239a916693b1fc158ce1d3907d06889519be6c655cad1487b8308
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53f877e84fb3fc215d2f0888ebf16fc09
SHA1cc9b5f249c3b9cbae5dec8457ee313453e3cd2c5
SHA256eacbaebe8a0196807f38870c6e7b21156a03da501fc2be115b77b848ccb583d8
SHA51238a95e22b1bf8db17408040ee8376697b21978cf0a433439bcbc4a31d7629729ea2ef4c60734ffbbcb91ad3be7a9392e69ff18f1ba7a9f7e090bfb36ce77e906
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b