Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    29/03/2024, 12:49

General

  • Target

    226e7de6efa565ee081298996994d094_JaffaCakes118.html

  • Size

    28KB

  • MD5

    226e7de6efa565ee081298996994d094

  • SHA1

    c83076bcb7a7d8460e17f2dfb57ccead95920f67

  • SHA256

    a07d7c54b6db60913231057e1574906c88b823c6ee5971a9aca914b61e34d013

  • SHA512

    6405a44972d08e374a5d33b6ce19b2cca704996175a7105859d7ff517f557b89d984641e06729e005d8c6b8c126d565ebae9dd3aed31f10cba66bb29cc04e33c

  • SSDEEP

    384:ilfo4p46XDDpn7jFo4HrTEQ/TKRCPCS46t7tXEHaN2InlOCPCWX9JlxdqiHYOSf2:9U89Ua4yK

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\226e7de6efa565ee081298996994d094_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2008
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:1712

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b6cceb5e99775786b69febee4e3b5393

    SHA1

    258966bd5bf21fa5469a33b7ea83978717d920fd

    SHA256

    28407ee0cf0ea6d065e2c704ef0d3d80c28b72087db00fdcf312f262b6895b92

    SHA512

    ac27b00d168d0a8d250a0c07464da07e0f3cabe6e232a1c35ee58e61d1bb07566c0a3abd853ae93efa60dd8a4c3553605fbd4eb7080ea6520368c19b6985fed6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b51ac013d7de56f5874604659678cbeb

    SHA1

    8899a9bc0b09892decae6e30908711a8f9291bcd

    SHA256

    744bc76ce0c2d65ddc49f735ce9ca4229045c6dc1b287d2a0cd338ece9dcffca

    SHA512

    b9994bc81d4a6f661c7972eadc7dc58e9531fbb86b43658a7164ccedc56b01c528413b05c5102f5a41b46afd48cda2cacbb3f4f82dba58446f7a06814922f4f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    4f9a7a66a2ee3b32771e5830207360be

    SHA1

    534d0554b0aa209572c5be03c3fcca10b7381742

    SHA256

    75dd7cf969d97c83ef26f41497fd17f64bbfb32496c27e588b9b4b4c34885e95

    SHA512

    7e815ead3317b8aa2460db91f65c23d20fb8e4897bd4d7c303fa9a02e1695cf481fe50350815b3e3ce5af4718f1005f3001752ecd2347548838ea7e2903b0fe7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    8b3fdafa23ce31a2e653575e80b7b081

    SHA1

    f417c472918f0be3ae9bc5449699adac6e7272ca

    SHA256

    cec39bcf125aae351689371deef7281250ee70cdf1f0dc44db06c1eea93d1f9e

    SHA512

    90fce9e66e59704d877c7765abe186bf1d71cf450deafe5e83a40e02dc0ffe10245a0aa4138a241d0b0ba25bb8d62ab6e81005741ee75accc9f6161004d79757

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    7f71d6572dd548b19734d657e265cb88

    SHA1

    0d49c694b7837b5798c91fefd6c3acc57546f462

    SHA256

    5d53906d96f0ed444cf66ff7716a690df07bc0f787d5137b888710e21f4fbe2e

    SHA512

    6012da5eb829bc821faf71c1cc1376df84f41124f19b5b8409a9a77b3d3d2f1796f43c96ae969db7bdcf53e2ebce3dfb14a851a770a2ef9a0f54ef37f6bba0a6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e2ef4e35956f09cd666d0ce294e5c118

    SHA1

    4cc9d37b61ab3f7eab8170cab02baa3cb3eb0589

    SHA256

    4299a36fa88f2c751224314a909e7dea293f3192b72e7783479a5338daeda88d

    SHA512

    754d20417e840202eb30d9a08fe4ebcc988688da0af396d7a83574b5738e3b7851911fb4d7afdaefb6458600c294ae1fd7fcd45c6fddd58eaaa9a43d5f0cc012

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b69fa81a2a6d2741176ec0fa78b2a83f

    SHA1

    5d85d64c5cadc41984052259450fb96ce83b4b3d

    SHA256

    f063b3344b46d392af5e901a740ebaf475fba5d065f25f3d063c5105744080a5

    SHA512

    ceb4ddbe43d0dd02e7c816088ee1f96c8f5d3a48d6c02b121061b196eca4801567936e92523f6bbf3c9a34d0e9597c8e1379197b53246b2ad7547bfe5c70fae0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    a18bcfa6205ef650612f214bcea5dce8

    SHA1

    232d757a0b9e3a1f1625aa0459c983f141a6bc15

    SHA256

    0a6074f61c2c6a206e8452f89ac27680ca70f7032ed55166fa6fc8a78734312d

    SHA512

    d271e3eca7ab59f3c07aef3febe6911fc82304f5ddc50349542a8d4ecd3278427a2837081d639e6136d1b4bd8ef1c8625ea24ee07830d16a188d5bece5689545

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0750b7824f9cf1cb511b56995ae5d9ab

    SHA1

    7b4de3deda7fef960d9a21a65d42f6456e92331d

    SHA256

    6678f986cd68ebe7727274c322d6cd4859178dd303687d0c62d6d962c1a5d9d5

    SHA512

    726e59ae831b96c30c0638a808af8f999fdda66d87c62c4ab09a48dff6d6ae6e8760bf62b50e345a27664ff0637775eb6845f982e89c2b44c91a90432d6962f0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3f84e4109a886e51fc2ab8d13f31e921

    SHA1

    e3de365445a0c28af37605afeba3c01e3b392606

    SHA256

    063f4417605618a5e2c38a12634b6d3be7a17d5582348806a594c7edc223e71b

    SHA512

    cc6638e3c3e31ce3116532e6d437e4e7d2437f4e12e08c141d06da6f80aee731f9dbf3ec0f2f27289638407ac4bc61a0bd3fd691e7573066f3f238dde8ab5129

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    b059032ec0450ae57b4284691371c79c

    SHA1

    0f88c69a957cae4758d17e4c2b7f480ca1fc654d

    SHA256

    8cd8e384f014cd191c77e2adc3b41f2625aeccfe93a5bb34cac6c53b6a13d6d0

    SHA512

    849af77f5b8db33ae8594b67bc2baacc611cfbbb67e4568a08111fe4f798b427045b0720341d6fb21fb21366bc77b2a3ee231804cb92c740c45385c89ec022d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1a9db33597e54a0424240344b5dc89d3

    SHA1

    46bfad9f2556d07593af1d020e672cec9fe2ef4d

    SHA256

    951b228f17b757827402ad28f8a6147cae638e5a49a611dae1bf3b5e3a964829

    SHA512

    80feb00ce2a0e24dea0b1766685a1552cef6f906c256224c38645b6e0454b5f44530fa099fc878e1c7c0f868fc2f6623a8288f86e27a9a115fd5076278fd2ad7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ae0736408e44ebb6e8ec138732074c81

    SHA1

    0958310aa909e54f29eb2f7a9ad76fec706b6a75

    SHA256

    53be74f84c1c2cfed1ea2885f366a8257e8360133bf3d6d96092d01309d778d7

    SHA512

    474ce3e6c335651dc8714b83692af864fa041aac9e695656e8e717c76fe351af7670339065f164873ee10110e72937ac730e4691a633b0001737908757ce015a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0aa99d86ca6fe4bca7e396b3040534fa

    SHA1

    1ec13aecf1f1d475cce0eaba2e95c32114f1ee62

    SHA256

    5a203cac0eb23957d28adfb3884f9808c89cdc88ed5496bad19e2e35e257ea8f

    SHA512

    d3598400881b88370916224836fcf73e247d88f3fcb9f2d830b69a7bc5c440b79b1f2491febd217832c4ea56fcb2859e5c79354cf0842779aec401dd81c807af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    0f8120a298a9a831620e60d3239d86fa

    SHA1

    c4ac05e22e20a339f97f692a15875d0c1e11f710

    SHA256

    bb2b2f82f6a7f85c636d2c13194115f2a1de2af2971a4ce3ff9cd0b0a63cf7d3

    SHA512

    b57b411a5bddf565f209fb4867075055e06186e115ac486cc0c0b9d280fc122db5b2986b482272f0848a9a987df4c8e53d5b9391ccda531360694919157c4eea

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    87f1422521886bdd65dfb868b79aa857

    SHA1

    6126674467deb59de0b2cc09ca0e76a4fde337a8

    SHA256

    94e52731adff850bb2b9f12afd6cce0325e3da18b8af10b96049cb4efa4dc7e2

    SHA512

    b676ff3df728d3029decb3ee5e555676fe80e5ffe170eac469b239c62d86fa3e8a83cc0034eeccd9ac098a846c30eec16df0806795f0f5f25bd96699a8a88db5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c7ee92b70af243e87aba59f7efa8e074

    SHA1

    9f7d1b1a847315f07cc10a7c18a1f8edb4b4f3e5

    SHA256

    41eb037e0ae6fd3bd07e3c8c047fe4880189f9b04b99f4401822eb609908cd06

    SHA512

    24e2872ed3e04300cc3381b462e894804fb7418f6d8f020e8e0a7118619bbf807ab0612957d0b8c2538cfd3db9408f88875c0407032261c98ab8f5cf9a57528e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    dd8c787ce4e050b331f0561c27806f9d

    SHA1

    382cdcf440ec7ecd17a667cdb58874b9a0ef63c4

    SHA256

    12c053f2982711a60ea6833c8fcfd248f92993e40a92e58d543fcbde96ed2438

    SHA512

    626db7df327b0cd98fcf72e93ad7e2419f2ecebd299ee4f6b0d6279de5abd9ea3ee21cb1dadc7a053dc0cc4bc26727136712d521ddc01cbaa6bf02da9295fef8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    e78136c62623b464df3173d04a89cf62

    SHA1

    8ddf6892ff2479b2384958ec49ad0969efbecf69

    SHA256

    f0b685c52194229dfd7a146e29542b47f60132a274e70e0db454ef9559e03899

    SHA512

    b726b89f80db516c32b4617fa1f2ac37ebe369a34590ca5ec22d0a8aad14f61630bd20aac4ebcbf5400933000634d8438944bbe6df27dedf27d367413d0ba67f

  • C:\Users\Admin\AppData\Local\Temp\Cab25AD.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar268E.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a