Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    28/04/2024, 22:08

General

  • Target

    062e5783f86a3960e5b09c08c3620c87_JaffaCakes118.html

  • Size

    130KB

  • MD5

    062e5783f86a3960e5b09c08c3620c87

  • SHA1

    66e5347855ac16d08a57d78ad98b776de0309d03

  • SHA256

    cb9237f85abb51bd6c83562214882917737f16a56e7d2b5f6cf0adb02a607df3

  • SHA512

    37495431c289fc574a203c2b9a5b77511d0fa6ff33f974b83372442f736f8ac4d6080008e011dd8833b9a3d3ddf0755a0f93e020a1aca102dcb46a0ae50c0157

  • SSDEEP

    1536:zqZydlEbbA99YZHqRHHEExx66++IIddtt77bbSSSSccllbbFFDD998811qquuHHI:zZdlEbbA99YFV

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\062e5783f86a3960e5b09c08c3620c87_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1752
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1752 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:3032

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    3f7447aad266c5deb4d4a4cd475ff3cc

    SHA1

    eeff117204d4fe6eeee55bf1a989da0281d3964d

    SHA256

    756b60c5d95d2319ea4b76b4c9fe8554a548ce47d85026187938ddaa8bf35f78

    SHA512

    e50d49f0b5c99f0b277486c7e7027998630be6aea2981c20aa2e1eb1203a0351be932d7994467c68da6c77a273c187078026974ec1d5dba23d29ab05b96fc41f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0f1e40a9b40b880ad4a1d967102de83c

    SHA1

    482678b0ebcea6758ebab70116530cfca34ab1cf

    SHA256

    29de8c3663678b4aa34d20bc7e50574b0af71aba61f3247960c0b7e07047b4e7

    SHA512

    c3bc1648d10107fc340bc95932fd91c8fcd272439e5f1fe850b292a0f18233e97267ea4b8fb62af1f17f93741f044dbbbd7f2c11bcbe97bf63762bf3307fd7b7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d17293ebf8b37df6fbc1c170525e0da2

    SHA1

    c1cbfb3f9f44909e30415adb14af6bc20f7b6931

    SHA256

    f7674c7e180cc06bad0e449a839acd2f7121b7be3d24cfc5eb29230f2b0ee8c7

    SHA512

    49bad0e3cde346b437a00b60715896fa45eefe959269455cb162d323af82c7da04fce29b0a46323a80d47e7c488987f7ea3e94365768f8ff690395d89e1552e6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7ac3c62b5c588aefd5f073c31dd953f

    SHA1

    85b691b76d88b4ad53e29693fab77e71afca3f4b

    SHA256

    0526a6cd21f7bf4c814357dadc58c95f8708b0f6236212cf8bfff3aab2d6a35c

    SHA512

    f1e3b6507b9122741606f1253caa9ab191fb524319b345340cf0a66ff57a2b8f18ff57630108b96b1384107b0999e21d17982586daa539d1b50ca47b34da1fbb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d78505432316109778e92cecabf7154b

    SHA1

    cfc7f67f4c077980ae6443050fd6b8f896525d0b

    SHA256

    4618735a806ee89e595bf9e1989f553cb6f282a880a81d006f129ccba7bcfa6f

    SHA512

    74af099c14764bafe50bbfc6563d12336c0922876de53e2ba0e1206311286989ac9c0cd4bc51b72992dcca28caa96322247bfc0fbe753b7db7f891a78be2e0ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8f842ba3db9d970bda7354a8c1edf8df

    SHA1

    fd51fd467602c19f979b6c153191c205f2a81b65

    SHA256

    0f3683007e8c249a5edea7464774b077507a560f989f272ccc2d432516152e86

    SHA512

    cf247c3d057b951350440270b31c4af551707cbbae07e12c2576c87ee87210374d6fa0c1abd963f9c018423d1262754208a65d3f5c1c597b22e0e809d706bd9f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64517dc898a7bc8e9ee74ac2b1675e5d

    SHA1

    0f237e529ca296ac7bb1736dabf05396c80efb2e

    SHA256

    bc86cdd29c5458a2949e42e188ce204752481d4ecf061e616c53e178ae1ed3af

    SHA512

    54ec3079d31570e2e4169030806cf8d368604b5b7ff7832c7510a31970a48524933e585cea4dab601d4b07d2b1f9f50720e3077245ae1a61804dec7110062385

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b8f52a034bc320b1cb948ec71a29ce5

    SHA1

    3c591fff43cbf4e1735ed2eb8f8555ed0abcd726

    SHA256

    22fb241b22abf113b5572565f374c8b9bc135683ae1e6f0ab9d12a4f96c801d1

    SHA512

    29ce596f2ad0d311ce431bfe210bd2b3b0829b6a4c35379945bd8b1d4332a74113e951b901a6b83e32e4b67a258a613ca48369a10098bc8f971f859919fff840

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6a3f1d0ddf9a4c209ddd9f21b85edf74

    SHA1

    2a6117ba7b64a045ada4564d1a1db3149222d19d

    SHA256

    e0f8bb098bd96c0fd5439549dd5f560a4158be473a5713581cc4a8ed6ce5c95d

    SHA512

    4b79bc3beecba0c417053e926f60086141e27f98b2dc50d5ab505427262e1ca5e32999d60d08f15c0569257c282c919fccf6916d5a3c69ad06b7d04f48a51a81

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    aa61ddf94b55fe05152d94d2c459254e

    SHA1

    b85fac27bd6cadaae2e97988d057bd6001488779

    SHA256

    616c0874cb7e68bcfc976684506ff9e2053de7fc5a52ce3eba603ddcc497ba85

    SHA512

    36eddb55bb75038a29a1d310b71b2f871d243ffa91c4872e68733e77f44751e2a638523b93f303e3f7ccb3153b0a000ed81c2c45e3b49fbbc137a242097d9ef4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    8d2cefe55585ed6c6c4fb150d074469d

    SHA1

    f39af54221c483a323b789b4d1c9b94810e8a2af

    SHA256

    de80f80387e836f3312ed166eb0648b5c134b65c3dca000961236fe985bb8e3b

    SHA512

    b048e7928d44bba83071cebeb1e7cbc2ca8616b82fa55cbb7ca664306c9ee428a2340f0becd95d647745189153b31ebc7f7449df003eed29496909edde1796aa

  • C:\Users\Admin\AppData\Local\Temp\Tar1950.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a