Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
136s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
12/09/2024, 14:12
Static task
static1
Behavioral task
behavioral1
Sample
dc64373c20011389a4d45ded00245a9f_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc64373c20011389a4d45ded00245a9f_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
dc64373c20011389a4d45ded00245a9f_JaffaCakes118.html
-
Size
1KB
-
MD5
dc64373c20011389a4d45ded00245a9f
-
SHA1
68b9ca627243826c6642edc8fce1ca12140a7005
-
SHA256
4b828e47a5d852d8a194a3d4e3c9bbaabadd8f9c48e3c51700f98abb412fc632
-
SHA512
b659ff2bc02253178b1f8c7fe03b9165f9bbe78ae967dd43b4ab47bc85bca2698a74584a1cd88e03ce73c4ac496d17285a6f0449715b4a1e5aea73c2698e15f7
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "432312221" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{0E7B7F61-7111-11EF-AAF2-E67A421F41DB} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000b3e8f15f634dfc43bfa5c3a2648d88c400000000020000000000106600000001000020000000cd004ba13f0cd43cf9b10f825fab5073fff554e7f601d0e8cdba0da5f4c72d12000000000e8000000002000020000000906c898bfdd0c74196525faf47dce1ec939ca1d015ffdcda0ea0ada0a57318fe200000008361a89091daa5b85af5f82f5cdff77acc9d554ed0f37e1177a085be5fc913cf400000002dbb0d037fa7a4e95ffe8adbcd125bf0eba44a9ab0ecf2431518e81870cd8df7cd5207deab0695a04de38598a36141f318497266e2e4081350a4ab1559fd31e7 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c006ebe41d05db01 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2540 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2540 iexplore.exe 2540 iexplore.exe 1764 IEXPLORE.EXE 1764 IEXPLORE.EXE 1764 IEXPLORE.EXE 1764 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2540 wrote to memory of 1764 2540 iexplore.exe 30 PID 2540 wrote to memory of 1764 2540 iexplore.exe 30 PID 2540 wrote to memory of 1764 2540 iexplore.exe 30 PID 2540 wrote to memory of 1764 2540 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\dc64373c20011389a4d45ded00245a9f_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2540 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2540 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1764
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fbd310d48dbe9b6afb2e08cabe8fdc09
SHA10ec645b584effa6bf41a696277b49d64b314803c
SHA25683f24e4308a2bdc31521e4d404662fb269e13ba23abef3ea9094a07d00fd20f5
SHA512ffc7eb2b65b9c9b31704208f1fa088e1607976c37afca990c637fbd9aca7da05d908fd13f8fd1a94300deec70ae254194ebd6420f9ab5224d5d3dc83633f4744
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5823337627988a0bd97239a15bd6280c4
SHA1c6c66b0dd3fd871a081ceedb7152362cd25d0b4b
SHA2569dba141cb8e34a0f7d557d38247d94e8f2ce7e3d8b9a9b9d6962e89a6717a1f2
SHA51296d8f79f71447193c769bd202d9fcdf336fe9b583252f31d002c5a8a0156d65f12a42ba996841e2e3a8dea68c7c910c1ad481de260d35d870ab114080bc2bd49
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54968a87b49ffcff386145231fadfe686
SHA10976bebe7c239e6964ed3b3d417c7146d34e18be
SHA256b38d7618382b900646809b2a144479ee90413d55e335b5e0fcdf0f348a4b602a
SHA51295557d6bedff4485f287fed6006622176247ba364dbba8c7dd136255f69df45b0a30fd54cd06e4e79fdf360cea0d1310bcb0ff7e109011973dea9a893afdc8ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bcc76a7e4a301193a0f0d667c8cc07b7
SHA1145d233c5dc1e8607e8e45d8e086ef4dd9b49553
SHA25687dbb420f8de65aa828510866644282d55358866520f94a6f6cf2c4edfe4e000
SHA5122a3f203ad49b0d5aa25ec94b6e31bd2075c0312d04578cc55ebbea66be4a38169565e1cb4626878633e4f7c9b25197f759a70c333829aa5364b87bc29fcf9a67
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aa50c0ec1bab09111c71acf0991892e0
SHA181e6e0c367ecd796ef63aa4cb9f6b2b64f951aaf
SHA256733723cc0f4d98ecfaa71310ee202abed00c830e0844e6dcf07887d36a2cbf19
SHA5120ad18dc19483706f65e5e0a478cca81adcf049cdaef610d72a364a7a47aaf57bc15628e6f3788c6801948a857b4c71e2b9a96c2c8a96f8187739b017274e2d8c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5323f5bf09a7d3b2ad816397ce8150313
SHA1e1df3ddb9964d841eb00893e029503c416aee3f6
SHA256397c36125c3e3497a9519f9064ef05432f58c1b15cea3c60522bf547e21d2ff3
SHA512596d21caf3101e033e2a347060111cb3408dcd93abadbfa6653b640331e4aa8fd2098fb6a4dcf820d87ec94ce595388cb88379d6b11f05e885fe16c6b76456d6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b0b5fb05b1ae97e0d6685a7ea80f622b
SHA15048a67a161a958c6bdd4cc5fbdef10366847f96
SHA2562bae0a5697f7d691239a6dea3dcdd996ca91170da7cf68cf44ccbfb96d1e356b
SHA512c49df41e73b9f7c000251ebc5e87f204bc0a9eff4748c182f77d2e029eee4de1e6f53712fe9215424c71f42dd8030cc6e172117328e802accf9791b9b4301bf9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD528cfb556f3647bfc8d14f8c4e1cd5a5f
SHA12d4c5753d086c7437618ad356301f4a8297502cb
SHA256b16527a6551bdc5f09cdb88b03973ad571242fe7770468da505d00430da43bc9
SHA51285cd37c1996b2da817e0bfd6a639c8faee35e5b0d7ba37614d7f09738c2778c45384d45ea4392dca8ff3dee0915b2b9bcdf04299f32bc1c5b0ba0d0c3b06fcf1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5be8db8a9e17f5627298bd6db08aed1da
SHA1aedd17ca0ae6537082e108f6e840ff1478a78237
SHA25676b4db1661371feddb0a2cd6538ccb24c3d9f834b0800ebc8d48d29f96cc84f8
SHA5127b9c30c9ae6faab81e2b358716d5d3a7a8be5473b1d3234dbeea10eb506ab714f5b2eeef8836818904eedd56a4c8424ca22d2c3f89340b932589ea8ea182c7b9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f38843ff890b87b46e2f2c4f7bde62f5
SHA1fe5313c151e923a0521dbb22174e4160332901f6
SHA256b724a2e9ea16dab4d28f188048a85f92ec7985abd7376e194d855892aef3e127
SHA5129685cca07b815de28a36e8d35d906102c7610d6e07ce977c41c0bc67309f0416f63bc8666f8aa2de99cf683ff420a670516de34f9a70bce6223f15b729c5b08e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59b710e3ef29de30deb69e71eeff1a966
SHA17e9c21b8784ad84600275efe932fc4298b06fada
SHA256bd9bece82251b4155676d7c793d7a8ee147e8d1c24f0fc285e16a01d13b7e928
SHA512484bc8ea66eb3b72489c60f73f2734ee3216ddf9567cf91b05f56f21f47d93488c5e7b096ace756e2ff89957d8ebacb5402513661d9a120a9dad7b4f0f64c507
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b016a586eb3874dad8278cda9b9362c9
SHA1a9daf4f873c8597d63e84d01a09849152ade3438
SHA256c5f70c369b5414fb2ff1845c134cb3e8164398df2be552a5057bae62a9e4fd53
SHA51230c2edb88c1c27a81dc4fe82b602b024f9dc01a65b62bfd32846845a6b07c71961ae2fac28ba3d42dce3697ff91fd1c8da3ec4483dabec7586c53548547c1485
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5822badfe762188033c4bede57bd2eb8b
SHA18ef4d69dd9a9d81d34b2bf93390fa0554ecb419e
SHA2564d167ee6a6a75374062bad99da9438fe631e233be92560fe7982c89c0e062167
SHA51277f08b7e84185d28918d6cb13751ac475fb114267a1b3aa1e624350ee9bd476c7af89cdf98d10cc740cf0433497583aa12b1f1f754d2a1cd18aa29c5fa0fd5b4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD589b30024c188b4ff13a82b7b535d3e92
SHA12e34bf0f840f2809dc90f6aa4d6a475005aa98a6
SHA256a99a4938e7aa75d683191d4b87e5bc26fc6e96e6c4b41af5b29a1179579c8617
SHA512dbfd24a46e31e9da6ed7ce631d9702ed67f920277663346a82e92773db91089b0a03b13371639d24d4964265308dcff5f8d704a26b52eadfaa5df6438724fc8e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e8e353fbacb0a578c278dadc51f6ea28
SHA1005d5574f4f8da52b6bd4e62ed87ab26f89a43f2
SHA256063f9a951189ccb26d139028b248547d8d328740f57e2a66b081b62a899e8124
SHA5120e07acc473c9aea0c45cb3a9e01a06b01435c2e8c9741921f7c666db613397e1d9d4a6eb72e76065356e1dbb5d3221360bd0158c958dd8e420c710cde8adc53a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53b9ca7d0ddfc59962908ba3f24cf9986
SHA1d0365c4765e35fa9003aa01f7a60fb72631848a2
SHA2565b9f27f17c7bfddb231e1f2aa61bdedff917304a7e15a832374bec1421a92427
SHA512f3203a4742dfb33f817d6163ddc7b3930a43cf9cb5aa51faa4a9d2ca242bee7c0c8164e823a9f5868af8cca4e701dba570946ed82c4c0ec6ada1e2f6997c804d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e4754c387b81a48f0f1c629cc56b0e4b
SHA15b9293dd4502f69cc5cf0e904ee57ffdec0fdc3c
SHA25649d25268deeebd90f6c2c37ba175822f41512017cec4d9f8aa24d23101d4cf76
SHA51286a492a0c1f9de2738315b2183166e3102ae06b584cd2307bee1460de4b73643d58fbb554132737b177d320afb9bbe29454ce7e63b85875e710426206d2befc0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5154bf9bf90014d64827db11f87f2b24e
SHA13647391a8e703aedf594619616beea440d7d6704
SHA25626b1ef454917df164831ef3997f4c1e85285401822ddac17792e86ae2a3ffa21
SHA51246e38ea2609f5b2d80104f17b25cd260bf254c2ae9c74f7378aa079a718e3c2fadfa6c81652541ff94f8356d1e900307308be2bff85595cd4cbc683069d74444
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ed4dc2cf1661d15e0f6d7d914cfee3e1
SHA1ca4ba2b1d52ef939535d7a71e1242ce385c82373
SHA25606826003b722175def93fe222f39c9822f7a28f0d5c2614590f30fef28763b3d
SHA512a7ebbf7cca5876a273fd46488cf82b3cec57e0991c3e246a052733f04f09567644e4dfbd11ef7fdf1a0467ff7b5419a9c69469c979f1c923aebd4c849be4620a
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b