Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    133s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    26/04/2024, 14:23

General

  • Target

    00f716a41e01819f10c6542f1ac45942_JaffaCakes118.html

  • Size

    4KB

  • MD5

    00f716a41e01819f10c6542f1ac45942

  • SHA1

    8b9a85280cbb23594cf7c7b3ebe1a8dcd69fd6e7

  • SHA256

    4cf48b22b73168c9857b2b824e00b0ddbc1ac30f7d8cb30da18589fb47424fa1

  • SHA512

    413cb591f7056c7c64db179c648852fddffae8a05de0b12747ccb17ddc7c6384cd5cb7e401472e2a3c44fef96fb69bdb6aa98db08d296c058e809d9079a41f86

  • SSDEEP

    96:Pk7yJozTGknaEFHVKDZTBJl7sNjtXATIQFMA5e3fhrvDJUgwa71D5iJ8oN6d:Pk7yY1aEFHVKtF37sNjtXATIQFM93pDP

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\00f716a41e01819f10c6542f1ac45942_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1640
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1640 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f24ae8986829043a7862a10b1b2c16ee

    SHA1

    350488dd5736fba437cbe3cecc532952b2db5756

    SHA256

    bb8e9dbe068a4d9b9136a6c203dd56f944088c4f06280f36923a62532cabf69b

    SHA512

    2d4405c481e76ee5bb1ad22df78922651bcb9ba374ef283c7111460d3cc41f99c737ac2e4745489f568ddf6f33e6c8adff0fecb58232fb3eb5a93bea2b46653a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    cbe3fa6e4a387f153f76ff964db59951

    SHA1

    f574b2d8487b464fde1c3579ddde0eed07d74e27

    SHA256

    ea6e38c8c0dfd18011eb50254a9aa531d227eccf7be6e368b8537ed068774acf

    SHA512

    dcfa00ce39c5b7dbda232235d5c6aaa7a7eaa61d70911a61ee6ec73f2745818a09262e52e09bbc0c1c1866dc982450f58e72442b4e28456998457c3445d43ec8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d0cd4da3fa289617f3e3992ea07c8f48

    SHA1

    897f53f81746f55c18dc6446639fd423ef871c13

    SHA256

    50378af7dce2ef11fc8187eeba0349d16cec0c5436d671c7eeb6ddcc4f13d935

    SHA512

    f43724b3503a964acd7d6f512b1c699194ec3bb2f7ae094a1382358063664db6f81ce6bfaf5440c9ccdf0773f6c68b0ad08c791ab5852ce6fc92dd15d3515825

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    87a2fa9417f1dfaf8a14f964e2593043

    SHA1

    6abf0395e6909115d1002e70e842bf3d55afa999

    SHA256

    32e5158dda675b0acea0fcc9eb72d18db2dd6dfbbc696a59f27b9df5a3c414c9

    SHA512

    55a5e3f6a58bc3a0cfad1fcf6501c501d064abbfa61f3c666f20266847aef13ee20adc633f928027292549aff10b2ebb597eed96ce2265b9f4e5a99226dcb0dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    232403ceb625667146e0c34f9d83f664

    SHA1

    e580def571e338fb0cb1769dce5a11dca9ebd483

    SHA256

    64eb8c7a998fa63ace6686375e6c34a6eb6b054e6545f9fdfaff4bd247d55e41

    SHA512

    672ed4da3cc430efb1b8e1fe960bc72c4d21ec895c60d8c466e63dbea8ec0ab23d2d83ee456dd437d3d88925bd61ed78a4297f8d9160c7227fe4f53db31185cf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d974cd4a3e03f914b833621228bb1ab0

    SHA1

    eb326e3d1a691becaf318907cf85949f66f968fc

    SHA256

    84bf28169717ca265ba3fca3ef39b3e3948acc2b558e87665be08a28db8bc5fb

    SHA512

    41143a7f31886bfec73be2234a8bd272f2ed50a81cbe9167c86140e1f06929a4f8e8a01d330fbaf6788401af0af6761f6c4a474ddfe5f7d236a41ccdece589a7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    66f8d6054a565cfea13d6aab5466e1db

    SHA1

    cd2cfb05ba7dc5079373affa2dfbd9a1a599c0ad

    SHA256

    7a88eb67c731c295ec31c99bf288ed9075099307e2b7c98d52a6ea24fd0ca6ae

    SHA512

    1dc84fd43135917410550de1e6e0c667ef6718bb01c9c2f00840fc595d03aca922d418574d977cc548fef30e934d7e7ee22f56783fef021d13bfaed1a36aa13f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fe2a82fa1a8d9c167f9cea7e5290dcb0

    SHA1

    637928aaff957767cfe4b218ddb04e063db54a29

    SHA256

    4003d492d8f4128d96f1dcfb61be1ec56f54fbec8260b4e3d006a99f78c1baad

    SHA512

    6b67cddcf218c8073fe7fb269e9cf658148320f4e2a96cdca81429f285253910493cc34e223c831e925ae438683d40f59a916360eaed1d44cc37449f0b99abe2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7093adb606452c1ed6f965f973fda428

    SHA1

    6fb7dac98524791dccc639b3e8bbef0ca5f59b91

    SHA256

    cffe964f5d5be20af400dbf489ad2f5de4d20c6401ce1b4f0cd608aff6c21840

    SHA512

    e56171dff3eefae286d5a5064b394e33085ce5b68480ab3fd13dc93552d0673c0ab9c9d5eeacf41bc757e789b1ef6a884fc48f613e9d33c1dfd7392be3fac521

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    29827a4cb248e02e3a1746a021a56c77

    SHA1

    e7b2de54d901a4fd478d4153d39f2d2f79020613

    SHA256

    204513fce10517e5c4970ef6707c7461ce3d749a986aecdec953b87f5a0a73ff

    SHA512

    72fe397601a1c4ccc0865a0d370838d3bf76bc6704e0e7ac107f0f8bef8752a74ef24bdef00e2e19f20127851d3db96e818eb8ecfa9dcad926faf6b970484ebe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0815bb57831f678d50dde1fd503fc9bd

    SHA1

    75beea988f49f01a8e523acbee7f2d4dbe6a6918

    SHA256

    e930a455c5ca7f12a93d07200868668c7324925d3dc08e761ef0bcb48f2c6e44

    SHA512

    4775a82306682ef225002351e4cb40add0679a847fa1108267b4bcbee2afda43302b8f405b46607245161cd8fbb0b2d351223c3fbde1b8cb6c75472244864b6d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0b68cdb94a0add87028bc347a390cb5f

    SHA1

    ef0566e401a35fc93f8785f7b490c63bb5fa75db

    SHA256

    b37ea03e6b4e84682dba53479227250a3253f5f1653db9d1b91c209fa67fbd5e

    SHA512

    603d121737d234953715f18ca6e7672af6f4bd857fa151352984052071b7c946554a4c96054a433fe17fc38266b5c06d4890193b92c4964f934529249c4601b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f0ab941fd4677a1a61523a2ecf51cd44

    SHA1

    a0cb2d95a9a36ba077788a084f51c3ef3f04d6af

    SHA256

    3d79ce30c3c178fe2834268ce8cf541b74b8f345a205edcb3dc27d9fa6f35f24

    SHA512

    d8257350663836e0a99c035ae8cd21825095de2f8036066ab3d4addf4965b7678a1ea6dcf773da706a670747d8f9f74570e3354e7ee2b525a23a8c03d3a01b8f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    08431b4d80b355f261488a9faccf6b34

    SHA1

    9da3def24b2af8cdac26ebdc51b77bb6c3fa6d58

    SHA256

    bf0f08a5a1da1953fe1a9bc6998b6c23106844600079cfaa68d48ffbeef97aac

    SHA512

    3fd2319577088a5f3631e87d420d0b5c2ab9a98e8e8163cdd766f5188a34551311c8557237a9ce0887eac11de87a0219e57e8c45e14c3aabd0126ce55eba2802

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a79bffc7a1403f59b5a353046c61846a

    SHA1

    1dffe488d29ae3287d4956f93ee65fdd13ead3d1

    SHA256

    4703bb7d83db29da7a476dc07319a5d6cca624a5ddb7cf9583a6cdc73e1aeac4

    SHA512

    5507f99742aa65defd794bb696525d76009510d0fde4ea20915c558de6efe9c507a0ab8de35780380e797ea68752bc6f890e903601a3b58eaedd8cef8c370136

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f7dfc1644e785801f2bfd564b4d6fc13

    SHA1

    266e28f96b3ef9903b755475f4d239970eefb04e

    SHA256

    54f50ac194897672a79a99d100f0a5ddbc27d3326bf3ed0a8a54ad9d1c53d4f7

    SHA512

    249835ee146c4562e05c8cfa185505740a1a49336493ac9071bebe5e81a161208b8d8d2daf90371d47a5f57b2accc225a936e08ccb4af8cc6163118a9f05e0e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9b79ea7094505cee765e17a67af3f619

    SHA1

    b283bae875e85d67ec4c7aff777d3966a3847770

    SHA256

    df51e8461c1855f5bc7035ed299059a02f4aed6179ffdaa144c6f80de6790f62

    SHA512

    9386c1cb24b871ef0c2986a2bc055f12a2f2bcc1f96c5506a4728c863a05ee309146a2bba4be3ffc94df6105f7e1452df48c7c110edf2cd97995b7001bed7370

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5ede8d315cfba5193d312b4d131c5b2c

    SHA1

    79e2f5a0732a4fc079fa192fc09ae514a4d37eed

    SHA256

    16ac344d942b0ef86dfb2e3ed65cd8d72d22428793c2b76c280cf72a9a49839e

    SHA512

    ddcdbda42281f6be1bea151acfe70364d47ebfb267e7609e439acbf123813be278b29461e73354df8417f5cf23696dc9962d22291416650a837798db3c55236c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    773d7659f5543c8dd93fd78264a09c58

    SHA1

    c75dc0cbb8a52a0011b714aa460ab87e28f37d89

    SHA256

    fcd3bb497053d7ad4a1209b32c87ec75a305bb491b789015102d0a25cbb45db6

    SHA512

    a89050f4e732b9698d1329f642752e1cccc6ad23ba20b69da9b051dd5eb12cee0cdc187652ddc7e499da8aec07812e957463573f71dcfa00e23a0c968cf07c95

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0d09001e34a7579a509121872a9325ba

    SHA1

    7b9c9254a072e53def1a4498a047f5c79f8fc230

    SHA256

    66d3c269b2d80defbd5079f9b2f392595c84a42b3d578c454c62fbbf4ed1d71e

    SHA512

    26715a3ea173fd53e6d5c1f077d26a71f22b2e3d9b11136e206d47524a15a245e43eccff7a2e246a7645027b9819dd65e97768d81fa78a216d17e06200a70871

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a6c4be30749723b141017e5c2be55896

    SHA1

    f2d5fd125b8b2de0e6a74a32b58ee708ee7f82fc

    SHA256

    d561375098a85f32f29f5b307bd6c746378b7f43aeb329ea1ac00fba210ed5fc

    SHA512

    db6a88460d77ab58dffbbe8f4296722e278ddc2ce500eb2fb82950d40c77118ea1768be0a7b2dee9c4fa953b780e072875cd22509d12bd42be7f42db07a93610

  • C:\Users\Admin\AppData\Local\Temp\Cab21D6.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar22A8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a