Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
144s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
12/10/2024, 23:14
Static task
static1
Behavioral task
behavioral1
Sample
3c88f8d3e9a71778092116e8e62efb1c_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3c88f8d3e9a71778092116e8e62efb1c_JaffaCakes118.html
Resource
win10v2004-20241007-en
General
-
Target
3c88f8d3e9a71778092116e8e62efb1c_JaffaCakes118.html
-
Size
139KB
-
MD5
3c88f8d3e9a71778092116e8e62efb1c
-
SHA1
00ebcb6fe5f279508a7f99fbab121f99d059a10a
-
SHA256
b40333d99a5d5cb3e786da6ed1577bb4ae4f8454e1d2cd2e318f5845c7d881d9
-
SHA512
cf31b28a38719875de9f170be13f70f5b7d6edc4e986bece529ff5de37da6204a879a4cc6a0879a81b2e5721d4b099d5784b83d25e7c210152aa99288f045edc
-
SSDEEP
1536:S2HbVM4EbVnp5ARbHMl2yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09wee:S2/jyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000a7e3310a2b0e6e498bd88e48ec67abf60000000002000000000010660000000100002000000092927dca933a4944e60db56f5f6ac73b58f23f9fea3193931b8e5e917c186d0f000000000e8000000002000020000000292ca0a4fc534fb3aace1eeb148be935cca9f9bf5dc852e54e384eb8869bda7620000000e6c872b21bb4e32a735e190bba63f484c923431f92049bff51f5e7bbed70bc0e40000000c83c95215e8e71b0d50ba7a49710806a83196ab2bc53fa239c5eadf057b90e710d18adf5b06572a50b49809136a028e268df7655f93e3c16743f29fe37d95f17 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c04396c4fc1cdb01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "434936712" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{AC63FD11-88EF-11EF-8B3A-FE6EB537C9A6} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3063565911-2056067323-3330884624-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3044 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3044 iexplore.exe 3044 iexplore.exe 1472 IEXPLORE.EXE 1472 IEXPLORE.EXE 1472 IEXPLORE.EXE 1472 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3044 wrote to memory of 1472 3044 iexplore.exe 31 PID 3044 wrote to memory of 1472 3044 iexplore.exe 31 PID 3044 wrote to memory of 1472 3044 iexplore.exe 31 PID 3044 wrote to memory of 1472 3044 iexplore.exe 31
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3c88f8d3e9a71778092116e8e62efb1c_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3044 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3044 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1472
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD560a7df5c49f929f0049281371dcd449b
SHA1ba6cf09552d1c5ce9ef0582c297f127d0228b2b9
SHA2568dc0284973857d5ddd4171fce34c06af14f5c44da82832cc56f45d4da5d8f0e9
SHA512e37a1833a4bad14107e80f612b79230288df886db52f5b0127081949cc0b7e06c5b8633521d8fd11ebfb78d047e834e4d28bd61ee977726a792c539e4ac5e80e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d428831f86c90372c2f40e5b1e1ef868
SHA1be6a51bdb1f311bae160a6bd90f4178ba874e9da
SHA25691ed9b42c9aacfca09a94bd8993b4fb590293b9f14f905baeb6f5d880e41ad2e
SHA512e210a314d847f4577d33799bb85ff390cbd7736ff38ad0d28d2b67ebbe3f07a9af0b3df3c4cd2e2398ef1c3ef0e4a20a68b556fd6982b180b228df7b0ab80053
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54e19c00ab3ab99f18564f43cf047a9eb
SHA13e7d95257a8c916d14c69ffb46ed62f3b7b11360
SHA256ad82845e663d1ab23964f3ff0c088a1376bdc62547e765fabd62578c8feeb6b1
SHA512b3bd0b80efa7320a4477d8035d0f670355ce0ef07b808c24b965d624c18554fa43df0955967480678ade18248f6672e6eae58a845855ca659274e502645e7ddd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ad8aff8467b588f17803371c0287c6ae
SHA1909ef87b663ecea59db8a538ff40c262ca6269af
SHA2561ace1a19ae0357a8aac221c024ef912ea8ad3f7921d8ec2deeabb4dc66835f2a
SHA5127ab1497ff674a8950cd651a831ceeefc02465fd4f1586d41bbd234fa4cb848e686388ddeef5e5fc1e30529df17fddba6b50ae2ad065b81dd7acb591f82f05455
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD506cdd0c1efff0643216aa81e98e36d93
SHA12b46efe3b2d6f9762727a98382f887b569dee7a1
SHA256910f2897c77a74e8cf6fc944a104783c20c76bcadc6657789e12daa97b2ab27b
SHA512706c095220437a3b1cb3d5ab496cfbc14e87df230d2bc477831aa37a0ef590f307b719b3f218465b2d0b04e6f7da01eca6e44d00e7f3942dd2d37e3e624d45fa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD566342b528fe095b3debec0ebfa233790
SHA19302d3747975e99e73928d00aa40425da817176a
SHA2566690203ae69eb9b1dd24de0bd93472ce43e7992fe6c5a6efa7ccf4542d099725
SHA512c679a254271e59a570f674f0198d8efe84e95e94972f218aee3ba638e732635e6b6f33431133e3674032c5077b2c1afe122e71ede73eb12e84b62d5ca7a334d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59199f73536b81f3ae1c44e7cb32fd572
SHA10341325115d5018865844beaee292a1ab5569cb5
SHA256bb260c8cc9dd9d73560c1e57f057bd953d8883c3f39379289c9a60d0f6f63557
SHA512c6d10a7d31c2b0b150d43a35069983ee3a7af3cf9b844a155585d6c5298ca1f5cf946ab3b61dfd9c9924b2b66dbfcec6597935275669304e15c75676657faeb3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57e1d0fc6eb8a3b8167c8295c7f221162
SHA1c9ab1c565c807173a073a8462ac421c705f862cb
SHA25670f0c0e628ce284ea04ded5c479bcd5e8c417e4cfb71d7b838a2c419e1feccdd
SHA512399c123c7efb7cda0222d79dd6fd7f6209bc012d8e2aedd1ee04eb995a337022b67e99abb5a27fced6424b038e3a20b07962652e315be7985b561be5c08c7388
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59c2192a41f00a77cfbc771ea1f6165e7
SHA13c72a06bd8f14065b099cca049f8fa1e219c7c5f
SHA256a105779f397b7678473f76d0686d32cf4e33c184195f476c40b7011c181bfa9c
SHA5120c3a9f5bb39b2b84f114da55d0163b536ff86ec1f914477b5e0a77dd5e6f1ce1f0942ce9997264d27b0eecc9b8fad75059ca95feaba4e6b98d6569faecd85de8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50857b6ec2f3d930e7d7411bcce4388f5
SHA1955843f58492112de703a3aad857ed30c6c2655e
SHA2561cee26e1ebdf8176b824192efc4fd62ccac279d59029983cd2fd044b0f789ed4
SHA512ae269a19551aa29467b88badae48b6cf7be28243297cbfee3aad02915f91cb07bc9e1a025f8a93585502c6b327bd3c90da024428ac2e93952ce829c1017fb661
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5349c70e787a48c164d74b3d43f092222
SHA162b675a75685441e839e42f8e66d99302cafa841
SHA256ee890b41318b3474bc662da61fa5cad00769f8d09ad6553202143d99942017fb
SHA512b6dae7c715039deecdc79db14a7c06736d47f397928817c2641fb9a609753d337bed5de179b7337fa6f4645593e85de4a166bad1f9acb64f5277d678e53e6468
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57e89f450b76cbd032d6f21ad9bdf599e
SHA1f5c26b51f194131e5ce2319e17825f71ddfa66c4
SHA2565c05f4a3747a81525fb3d3b24f7dbc3b7629c66ee77b32bf0632c7b379636701
SHA5125c085c9b716b1f43c9056e0348c5207c901e1c544a681b1fec308a723376dc0e6dbf9f36992f267464304655b8163fd2f12b94a24db220593a0e352c6ca41d7c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56f9e2a37cb56fc709667b8ea3e566c6e
SHA1c8835aabfb95da4b99fc5439ac8d1d6f5958ed0d
SHA25625759aeffb713e86cf43fb4072065018916a1a1b644c55901f329afdd268417b
SHA512eb41da8a4b489e38e1b763f4ed51d1284a9360bcaa2ba8809ecc95ebe6d51169b13d1f3efd700250256d4d33f43553d5c20149b345d9262540074c8df18228ef
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56fbc1b046ccef0daebade219cbc08c68
SHA1c644462d9347ab91240f747cc4dba03b91ba6c86
SHA256d00f44c8197115d555e8c1072a29da75dfe33e93e94b0e8de2dca68757061785
SHA51255ff22ded62a60cf5f16bc5e38a5b6acd62eb2630cf7cd22d6058178603ceb90ef53bef582764c7e454cdf14cf3cbcc454b13326876d65f1121b78f7b5eb4a26
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5267f0a29f9fb692cd3da77ef1b8790e1
SHA15e09f93fdb5be4bd6925eb80e3e1257b5682c7c0
SHA2568d71c74cbec6768158be241962f22791ba36b004561a86b2453ab5e61fefb803
SHA51258780f4d0d53eef4b61825841f3db446baab6eef2a61997f5e21e92061f83294f4d093635dadc72983d77981c9af3605214663d7f71ab055bcd79774394ece54
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD567dafbdf84806a03550efb39e9479e4f
SHA145daae585d11e814683b0c2fc0ea508e7a9e1571
SHA2564b21001516cf05594f4a7a0922d1bb5c109ec61ab5a847b2b6e78ac9957d9545
SHA5125f3f598809bdc84d8efe9e5bf42901d7edb5b4731fd9c3a91bfc995531f20c0a537a19a79a136c9d59f5d7ccfbca2f4e0edf8bfc1320c2d54f413712295c8647
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5df873f4b67879b7c52dfd09f82ff70aa
SHA13b2b21cf9032b19f3ddc0b79668aa66f11a8fd29
SHA25657c7735498228afe9b68eba68030ee2870bb169330cce9c5b09dac48607eeea6
SHA512b84f6dcb46cc1c73890c464ca0ddb7959c9e1f062f654f7927b0194436d96d169c402081068c6d6e0d3894d78afec208dc613187e3c154614c59d762462680bd
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b