Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/04/2024, 11:31

General

  • Target

    00ab9c4704004c6a0fda7c60d70610ca_JaffaCakes118.html

  • Size

    74KB

  • MD5

    00ab9c4704004c6a0fda7c60d70610ca

  • SHA1

    07f45e1a50a022783244f20cfeff1b09fa32d526

  • SHA256

    3cb0c8fa60f835a16a2412e7f40c4ff571af6290954fe61f91cd9ae0c1e1c437

  • SHA512

    92989a08206095de0379344914bb4c9a90d36e00d88870c548fa754b1e240354f7ac1e16e84a4e066f6324a76432859772788a68326673b562f9ed84003f99ec

  • SSDEEP

    768:Ji7gcMiR3sI2PDDnX0g6sq6z/4run4rS476pioTyS1wCZkoTyMdtbBnfBgN8/lb8:J3wJWprTzNen0tbrga94hcuNnQC

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\00ab9c4704004c6a0fda7c60d70610ca_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2924
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2508

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fce2ba5fa0cd15c68177ae6a1d6ea8c3

    SHA1

    bcd0f43ce52ca36d185d772f5e22fb498adc5dc3

    SHA256

    2946bf51f170e7c0e6253838ef6c5ecd8c6a89cfb9c18790fef63ada2b64d850

    SHA512

    0572eb2aff42bcacc001362faa18c5180ffd3c5cc280a6e8ce6888d627b57c14220e31a62d92bd2d59abd5c635c6c7bb4a65d0c0578d34459995160d87b2dcb5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48f756aefbefd890a1da136cb0093597

    SHA1

    323c6bda68c46681e6eaadb9e476cf8b256e6c13

    SHA256

    a13d430281b4f67f4ff42a0bf115e9d609b000666dad7935f8bce8f3c0c364ca

    SHA512

    54f84da8eed9f2456ee8c54ca351387f7bd3b1823496834b69c9c4bdfe4b3a5907206e6b36508f2d18db064466b78f07b3f1d770c2874e167cd54a7a887c6855

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a93cf9f0a0f10aefc05e0a3670f76cfd

    SHA1

    806b57d9ff2d50eac3673eaa7d51756d451d36f5

    SHA256

    5e7c712f5345730cb79f5dde423176d7f00f469b2f0bae2ddc796b3463393a97

    SHA512

    cae8d62fd2ee8d89222c9a1ee5c939b47c7c59e2ffa040243ebf4750370b9550e7849115340c8e740caf56404e3774083955ceee74b631a68a4b10eb4a436d2b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a56c7b87963408c9dbbad0f8275023ad

    SHA1

    3618f8c56f46f63f373032fa19aae91f9d2e1e17

    SHA256

    5d89fbe17aa9ccccf078fcd614882367e47d697802a972503a1b6960a13cd5e1

    SHA512

    dabc809b6923f1672c587c48c0711f549392321651d2861518a17289d0261d32ffe0d251d109f9873bad070501699bc404d2cc6d80a6327688db3c0898067f41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6e035f35a2636b11e09db857fa4d06e6

    SHA1

    a3ee64b0564f8ae8038b77536f2639887286bd01

    SHA256

    c570f2cd604033264345f1bdb2abbf3c0b875bc424e46745783a224350521c1e

    SHA512

    f7663b9a2fdcacbd447a28669a4c7b059ead1941b14a2637c751f13440d3eca735bf8555010d81f1b9771b0d78f10c4a231317c28f667657f8a39d6972f0282b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    210dd331a1e2e053d32a5e80ccc29629

    SHA1

    28a087c86da2f2336fd87466e233092627b6ac9a

    SHA256

    4d361a424f047c3c307916a74172424065e3dd20599d187de0a6458cec5e4725

    SHA512

    483328a57078d0e5f6986b37fe9b85dd25af11fa8b3c7c1e830575832ce0077815618765dd57bcfdd050743de94f38ba67707aeb6a5c9f1544247acbd8ec80ac

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2fa3c87382940b97f376051be0cf2815

    SHA1

    0e79939f60045eb5a90e311d9ad5cf554e8fd34f

    SHA256

    1711957298aa6b14c76c7be6f51d87e88836b4ebb7d915bd6f6ea2d02920ec9f

    SHA512

    219756daec4f0ba59cfd7d59bf2c6c994706f868cf68f5367e50315232e2c7f8e4ec9b0c507183a6c765d9b9dcb8cf1c65502d63375851a4115aa4223bca1eaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f1b7cd0e345729bbc526b39cfdc9d0f3

    SHA1

    fd9275e0ac03769a4af3eb1253281776fdf09ca8

    SHA256

    3a5183dd1a4d00ef77d2ad1a592e76ce5b42a7ceff41c753e304e46ee59d6bf2

    SHA512

    b0f7393139ce4a9c6cdaa5bc6ca66640d9ab5c0237c4333a28bc67c6ac2dff0db3b57dcd0ac20e2042bb60d932cb65f27a3ebfad415f68fb893c9bcc23507233

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e28ee39eddd83be1136d816bf89d7a1

    SHA1

    98c1d64fe4806ee2f4ce6d05bd656933a277e146

    SHA256

    31373dc5cabafac2c5564d6e59844900c4ac90575ca481cfad80fcdcae5b4580

    SHA512

    ac0e6abe42b719ee2149c4fc16c9851891ad584686fcb0ddab85a5471037a98301a1fbbd8a1fb85d6c5d72c01e103d2f1111e8f7e766606b440d2288e75a8d84

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    15340a8724e15eddaec6e1a9deb18fda

    SHA1

    d329078ed1364d1b093ef8e55ae3f4bfad2b7c78

    SHA256

    e6381d354daa9ccfb8a7f52d7c4d15b26497a5996ea12e4eb0f0ca787eeb2c4d

    SHA512

    e997be08f53209b19eb6b0284132f4ad574a6a7021450a4c696f90443c837eb7f0b0ad16bea7c359477c5d25c0f639be1edf8badfbe76857f40d68bf2e9e7223

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    76e60b3fc5d6828d1cfa4810d604e706

    SHA1

    ffbdf4a846822be5805daf2c10f4c83f2e2fc40d

    SHA256

    b520adfe1cc26f94888e83f295a4455f6beae3919c3362ee91a2a677c7bc5058

    SHA512

    69b68995d497f062c718cc98baebddee90f42ce262ca342c231b0dd767280e92675120c0a07583ed26a929f3f9fdf9348a826cc76878517900321a6fbc26f5ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b3564e4bcdc21c58f343881e0f73aef7

    SHA1

    a09b39d31317dc012d252e1979edb8a3baad81a0

    SHA256

    03e897709ad4bf60f08d07131dbd9e4ab0cf4920eb843e65fb0eefffcdfb7602

    SHA512

    02a336862a600e68578797e05d6780e64a0373e6eefd115f0c6d2671d483acceb039d39693b96aa9d260ce296f93ec5f8473d37a84c55f4a63615fa9b8219aa5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4d01ee4d10d0564b5cf60ab69cc433fb

    SHA1

    b485d7d4ff184c61d6a9724c88d163511e5be71c

    SHA256

    f04d606324a16f02dc04d304b4b6933061dcafbbb5ac1fc9dc69b1fda0e6afc0

    SHA512

    82472af1d6bc81bb7fe352b244c08b44ab521f5d01924b2b5c63a81c95726946709cab87f1d784ea029dccffe2fa7b6416d2c41a583341dd0860a734d6b0f8bc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d52c0d76d6301b8ae90461dd1c5a428c

    SHA1

    c243be55f6c0b25ac36aebbfc9822d97f67ba104

    SHA256

    1fa7784e60f743280e2a7c2ba99de42b1e0cabaac03cc01828ee8c28e5edf977

    SHA512

    0a277187ef278105f6a046ebfd00cb5531187ed6265a234628114da4cbf547d8d283247898e9c7f9fc8e0d5c7a0f3aefa7881cfd7d049a985d3a2d5e24227bf9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9e970a8d80235118236270ef92970351

    SHA1

    5d2e5404fe199f733939c9eb2cda82384a10e18d

    SHA256

    b087fcdcaa6fa3f355f0c9763cad7b9407abce00127b6497fc7ceba2843afb54

    SHA512

    e13fd122f08ae0d7a68366336629a4d68a5fe3104c1aea2700ccf308de3023b0afc55fdbd678c9d91e50c7d6078af7e5fe5a840f6ea929819d280328738ae2b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3b606c6de8d7d4c7a9623aff2b2f97b9

    SHA1

    0240937bcf2dfcd8055fcbc0af453db9a67345b3

    SHA256

    b0e2b5092f7c0ac2ba006e0db01fa08be9812eebf61728601900d367fabbfbac

    SHA512

    b75499822ded0aa4f309e71f4faf21877084e1da9d8247b9e46331d50659bdf135c5425688e48cdcbf9a86c98dc6d0b70f779a08dc3d7eac72f126cfab878b4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fc598c89293542bfcfc4464d3d6e1f6

    SHA1

    97ea4fec49c2952a39533198c45a95765c7e3d8a

    SHA256

    17659e173c39739fcaf1a4a03f292928ecb28a1e30c89c9b21dba02835c70db9

    SHA512

    02df7e0e5a86157e5eae02db63bd47452b54fa5bcfad89b788edde29217462a88100ade948fe1e1d39c2c5f722600d6fddd9521f95631cc9fe81aeb8858d5485

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0607ca95001388711adaa60a89095ffa

    SHA1

    524310c30df09442753eb8d429b976cad99f224e

    SHA256

    42234bdec2e006bd86c5667dc94c1142378efd6d9aef62527c5d54407a8f06d5

    SHA512

    bb248e12c6b83c13614dd78558f5c52e3867ab67c545a69f3ab88d71217b70d08c509f0f7d7143c005eb5a7902e46e4bb8e5ff67cb176bb90e731c32ecc041ae

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    014853eee0e349cc28ec8b608b22b7ae

    SHA1

    0c17df6d4362da8aa67411811ff9dd5477414e90

    SHA256

    a25ed437fb03248ef1cb1bd066d8b91f676abfb034a09ef7905be1ea29e7caf1

    SHA512

    e7d34de33cc785ae46ed32d079ab5e1f2795c6359d8e05babe257a09870dd96ef1361b3333cce74fb0a2b70a9c197b3a390c0eed97ddfa4d5c9cdc0c5b410f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8d2144a4b1af59b90cf3429a10f5be81

    SHA1

    9141c76bf60da39f39c56da4dd48048c10d098a9

    SHA256

    31fddb6df78cd3da0cf2d22328069312c84edc3a1409203dcdbcd9eabc333030

    SHA512

    39b96ed583b3d02ed80d7182d0a58210e781fad28ff3e0646e663b13552b7cf62068661bc2a06b1fda12f02934f3b1592cf6eb2f0a813c1850e661a61274718f

  • C:\Users\Admin\AppData\Local\Temp\Cab28C6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar29AA.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a