Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    127s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    26/04/2024, 16:57

General

  • Target

    013ac7e19bde73802b2727de33b4101e_JaffaCakes118.html

  • Size

    11KB

  • MD5

    013ac7e19bde73802b2727de33b4101e

  • SHA1

    33a1783586d3c344312bafe0fbcf6f9861893bbf

  • SHA256

    b4265988a7fcf957e9d1d30e5807039c73350c150bb19086c843abba73dd5732

  • SHA512

    15564fc2ddf23572406193a963b08e64a607dbb24ef863b8700e6374973e74c6744c15aa19b4c371ddd3386dae11a7b7d64c6727f2b78785b841beee21edce77

  • SSDEEP

    192:TU6aiIiHs9oi/XB+Y/sgnNp0Q7JOaMBM1M2nNcTN1dqiKjwHJHIaM/j5s8bvSFOo:TU6aFFl/8Y/1T7JOaMBM1M26TdqiKjwb

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\013ac7e19bde73802b2727de33b4101e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:756
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:756 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2172

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\103621DE9CD5414CC2538780B4B75751

    Filesize

    717B

    MD5

    822467b728b7a66b081c91795373789a

    SHA1

    d8f2f02e1eef62485a9feffd59ce837511749865

    SHA256

    af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9

    SHA512

    bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    f1443937af31db60b3848151038fd7de

    SHA1

    c769d28d2658aaf384a025569f9fbb66ea8f3f46

    SHA256

    30e43cef1c400f8ea05da0d3dfcfa9ed3e4c0769eee572110dfabdf968bbcc4d

    SHA512

    c9e52cbf47d0b3c830fe8147248564fe2c330c2042798760e2930d5d60513ebc265369c207c5d9f786261323376b995ca67faf1e7971a632417acdb9598b437f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ec3a39c1c6ea806a7803c91aaa38c9fb

    SHA1

    222de6a34b72c3cec39f8999e7f50f66e2836827

    SHA256

    71dd53b5e17ab31ac0234d820c246e95ee0f2eca9efb3224ff00178b6592bff4

    SHA512

    d269c16dbb0c9e699cbee8d73d24f29976127436c39396b90a801ee7d4d691d8e22cf60dc1c8c6c14ce989ec3ecb19e9618e1b7999b66c9d579b984bf97d8e02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    59bf7e6fa3117a188d0d848f48cdfe21

    SHA1

    802b9287a6f6991206ee9d81017d5d3c3b616960

    SHA256

    2434ff1cb76d4dae192f1644095293355fd9234ec0e2d763cd5d22a4cc2c0fc9

    SHA512

    53464cf6aaf8b8294c7eeb573973e452b681650fcc7786f8b2b05a8282d26a5f8eb98b8087f27342c2234c76dbe215595af30a3de6afefce9a6296824f7a96b3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a187f2a0276849afd5f853e02e91dfd3

    SHA1

    ec7bc3a246f8b6e8712bad9c6576cf915e7578ba

    SHA256

    83e5db03f20144e6560d4c319337c36817556e321beaa079c419e119226cfc46

    SHA512

    893e86f25921bdc297cff8d2b8170764e7803412028f9fe1a4bd019152c6370917b192c5aa873d3ee3603bec057efede50c41fee0e8b59af9c16fd8a75b37790

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    56c38d400a15b4d783a3f7ac478f291a

    SHA1

    d153c1e0d8a46429bf071048c25c11f9ae3aea94

    SHA256

    69125a03be2a104241ac1e35900f31f2a3f7eaebd38cd343aec4a9d435dd1e8a

    SHA512

    de460a591fc3ee43db58e252135e99bc09e84c8dc2b915f1e3ced0ea6d1a459fd65178ce7b69fd5209d69426b1546cf40f6c0b41018e1cd5f0311429864806a5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    651ec48441f74c583fc8a5ebd7a12743

    SHA1

    f3d3c5e2bf895564493fb171b0be7d2151baaa74

    SHA256

    ef2ac468973286679ea7697c316a1dfe4dd6b6db6a635208ab788506bb950b20

    SHA512

    e0275091ad0f545f3fcd76b12bf20283c4924b86eb4eb57a532c57f598223b2731aea9a115379b08b15c8c8faaa24a5a22197a2aedbf2588e5bcc801cabeac13

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f2b4976b705b3d7edc9fd26ea42b9208

    SHA1

    9c4aa8a37dc6dfd9aa3cd52f0c5b694f710af61b

    SHA256

    77b54ce19af80dd99ccb41ae71853aabe7c8bf773a9ee633ef1e02065e315edf

    SHA512

    2f30fd9138d0ffeb89e726a59c2089f16c58376027284c900385d0ddb55d2b30e74b15f47ef90ebb4abf855873be5c623da6bf6e6dd3330f30e85a59693aa9b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48d06552a86469584ce59d03f9e27dc5

    SHA1

    642ef25ef0b79b2c222f6e3239870483554300c1

    SHA256

    85922faa0c10775907d1e2e063805de778de576bfc7d82eee7667cca86bb5882

    SHA512

    e1e4380d35fa917894724a3559fc37a27faf4318b24dfb5d121207748eb9a0eeb21699fe4189703080bc61de29760476d32114032d24087a6c1d0766c17a669c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fd5e388c70dfda6fe71ab58422257340

    SHA1

    528892b090a36eb06b48264759ad9267cc3dbc8e

    SHA256

    303d33dc79add2ab80e9a3fc7b1407b290158161824086011212ddd54a8b9017

    SHA512

    53d01468a99366dedeb59284897bf6a6e28bcb8e8c96742d815ab0ac6470481b32c1387600468883980317d112ffcbb6222818f2183d4b3d30e1426f326be9b6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a8e23cee91fdc9db2350b19fb94e18aa

    SHA1

    d51883e79b0f10aec877909c53ce6b24ac98659a

    SHA256

    b9f6da5c69ad15fb67e023506f5512b77b69eca1d48947f0b2ce43bb2ea49608

    SHA512

    8883c57410caec44af61f4af199bc161557a20e47a6aa3d91b030580818192951870177d8a6249b6bc5ef8a6badd70a953c0ffbd01529fd86747362f94929898

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3e79f8d0fed346e34957a2c4b2a81dce

    SHA1

    5ffb90224ff6d08d6ceee3e55f0f68d2e8f5bd47

    SHA256

    f654be4cb472e67bcc2e74e6a2a0a64cc237283e5db85846e4fca9ffaed2b044

    SHA512

    a953bf175d5367d2b8c015ac229b664008f5f545ef5df4fb30aaa5c4b3506cd35fd863e4bdf5f3775b24a1181a2023dab8e351364ec6a9bd8a44c5d9dc9e293a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2e53fe5e9cf2d8399d2c336e73fcd244

    SHA1

    08f4ec535be958073851ded7535495f22d482494

    SHA256

    6d5068ec1118b92a1cb6e8c47d3ae312e8ea037f9bc069d87528c7d003b09056

    SHA512

    5966884b2e7abc7ae1848aac35d5cd2b6645a9a16bc40687f504c3dd05c1b07cce735932d369cd78f1fb098d92fa689c3e76e9df7e26701831ee5134d8ae272c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02b470eb291b0f12e636dd614be8b054

    SHA1

    cc18c9b5ac86b2e1c6f9f418af92e7394ceefa0a

    SHA256

    1f54a81e06cea0ad17e89325349293f9e573a7a8b36dbc7bfdd02df70a577e28

    SHA512

    eebd59447ff46de2aded5d1c86b180c870741457ee7dc94999b8e884c072a5d878feca0ad8d82e6a7f7d60c25be4d8bc19e519af0ff2d24a1b64d1890f6d0b40

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a62a090224da3f50a3f83323d7ee8ff0

    SHA1

    fe9c445699dd67ac9597b91acd983d34942d8b1a

    SHA256

    1b9843f72f017f5ed41721ecbf6099a2d5fef0543c9f0de90685fc67ba21c805

    SHA512

    984fba24d9c0c641e653501ea9070fd5788eb171739189eb3da248999d0746284c6b22ea05838a62c1b41e1fda31cceee1f6944c004fb4ef75407c3de0e32532

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1c2cc4beb17653f5678e2c995c8953d4

    SHA1

    1591b5bc4b0b987be7bab125117eb282f2185446

    SHA256

    02d2f3134f48c48373a665b6ee38a4adeae1ec43a92530a47ee1aa33f6c81983

    SHA512

    fd20e3482d3a35d412bef8a45064542317c827755443f4612f77ad6c4566427308429d5576504620bf3cb7ad8092d9cd51aba297a80320e8f9fae590d758db10

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    123f7a4bab67e3e133643650921cec53

    SHA1

    72288c1b6cbe60c47ae022818231f29208295c30

    SHA256

    75e82abf8a1ba5a0acfef0991f35afd5f7c788b6288424cd1cae0137597c0c52

    SHA512

    108bd5d43dacecbb1581aef8c8204171f11746c955122b014ff7a8d0ee8e899fc8c356d38ad596ef176faac19d743537ef3f22b3ad492c56a57a3c8e925c2b34

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b47eab5de5e4fa1444490fae73cb2c2

    SHA1

    96b4890e7bbda55f1fcc5276ba5b9511ce135a2a

    SHA256

    81c9756874d135ec749a09061d1caf76258b5f52d4ced0c06fa92974b0783205

    SHA512

    c5a6d12630a5475991756c0de59b95adc55baae746d6d297bf3161fceb8425f3f28ea2ec098f2b9648cee3a2c667d343d21d0f44457a5a88f7d1be8a9f89427c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    68458be31fc825ca0f134a6073662b60

    SHA1

    e7702a879ddee2132d07ed4d1018eb63dd725f55

    SHA256

    11ba1491a1d9fbf108ee6d92878fd9927f5b77462d36984b0874f5995d02d5bd

    SHA512

    2be77779c8242230f84090a3556cca3c5b2cd0c53cea70eeddbee469b64f439cb99d133dd6a7fffb7b58803b46ba4f0422978275c2e01e5f0c385b71ed04f83d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    99789863345d268302dd852afd2caaf0

    SHA1

    0666fc146f2051d62d55123dff2298082d7f4295

    SHA256

    ed81b317c2d4f04f166c43d0fceeca0e39adb0f12a8b7f3c9634677fc80bbedf

    SHA512

    2a422c12ddfcc2e7100984b2fb4c13f831042831ee86dd1c0935c0d3edf0fddfe84a4089e6ae826956fe213035b5c98984ec9d173f5d1beea72049acedee84fe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2811a10a32ba7e3dcff560231c32a2c2

    SHA1

    840c927d94ace041b074b25072996c8c44d14d3e

    SHA256

    a29f6148bd036fa45200d63da87e6a88b0c1824c5fb033db4888eb55517ba412

    SHA512

    93179dafd3a64ce34b5a1374215fe4f058c511205b712d3bc3c461964dd5e9acf6636bec7e973a6cf3ed34778077f5f88f95513e7f714ef4a66ddf884f65356a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    42c5aff4a21b513d66e03ccce9f57fda

    SHA1

    8a87264153851427ab8f513d1d82bffeb4ce77a7

    SHA256

    5739a376a2ae4fa67c844758a012ede6837e68c8353989f457c51ceb519f8aa3

    SHA512

    d65e7fb63dedf6a7010804e819fd0d2de2a01ce5e223cc5ab42d989fd7268b01bf3282cba136607777fec36f3443d59f52bba3f8462e3f3faec96d1eb0c547d2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e3ccbfd4e19f01474437b28adec83b8f

    SHA1

    e098acb2c1538e029dc76b32c89e31cdec1561a9

    SHA256

    dd2f74eb7fe8dcbff9966ab576b21137a3048836658ae51994c073dfd8c2ec02

    SHA512

    a5852291084c4d7c276de6b03c63782ab1a06221ddb12a8127187f50946a54965f887f38e1ad07a0b215b1cbd0856d625563077e33717090973f323e515d07f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebc59f250bdbb75a8d1e768198edfc47

    SHA1

    b33c8691f8ee206a21f05429e33e60b9275f4e37

    SHA256

    89a67254c6f7af25cc2298076958331b68d65fb49d33e5d801ee34edbbfbd84e

    SHA512

    a2407e0218f173bbd638f61775105f13306ebc5e90b3511cf88c0dbe4db00fb92215c552277cd6707b338e4f80e12ded7ea0a8546d3960a5312cb0d7e3793500

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    74ff0a9240424139fc3051c5121414cb

    SHA1

    3740531ed635dd217dba7d2b9ea38576c1418ef9

    SHA256

    8351ed20856e322b499d7ad990b156c5f19307a92ac482af98d9422294bd93e2

    SHA512

    3cebb5d387d63f89aee9808a1c56af6a33c3d43d4322c64d5f973cbeaf9edb4ffc276108ff0e5eb7a0348049ab7fae882a5ff94102c287c3d5e81af1ac9a2321

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Temp\Cab1036.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1135.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a