Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    141s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    02/05/2024, 04:16

General

  • Target

    0d78b2e911c9eefea398fb2c7b94b913_JaffaCakes118.html

  • Size

    139KB

  • MD5

    0d78b2e911c9eefea398fb2c7b94b913

  • SHA1

    7896feca7cbfe31514bb48baff259aa5dd363ed8

  • SHA256

    2fa58fed952f455aa0b5621913cf9c19b5fd5a81c39b232992707df203604809

  • SHA512

    cfa2b8b9c0cab9d091f9cd68aa159e4ac7bcabccd3604deb4f3d466afcc0e4a5a2cf724e8098f8849eab1357696a51699603060f8dca759752776d9813f55035

  • SSDEEP

    1536:SRT164YrYl8yLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBw:SR6byfkMY+BES09JXAnyrZalI+YQ

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 41 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0d78b2e911c9eefea398fb2c7b94b913_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1984
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1984 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2884

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3a9b05db5b6f4cb73c6e4b8a25236f7c

    SHA1

    ff090d3a91324455ecec7b25e3541d549c511187

    SHA256

    116b25c906df4bbf617a02d450485a7f4140e05fac550a938fa6c5a076d61a91

    SHA512

    29a6f1d97367258b9694bee63dd925dec177ebf2b4e6ea48cb189136158f321a7272910105e567a1f601126a95207f77717866fd71c3a3f266d5a47a2821b1dd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5730a68eb14ce413e284031279dcb0e7

    SHA1

    bb124ee4fc53cd49801359b3521fdb8a52ed6c02

    SHA256

    c048371d9f31e1b2da6a9d20ee03ddea7cab9e7bc0a87044830e55518c4e1c82

    SHA512

    321438db51907ba8504950f0a5b8d4659ec748d76ad0e38b1f6aeb22f7a44f897764fac73a1b36539ec6d9a3c10c1cce5b488a42f26cd48d55ff97c96aa9e7b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3272d45e50c28357e84707767657a95f

    SHA1

    310e06b37342484d6caa40ba74a217667315e280

    SHA256

    f6998265bfe7ec631519b60db3b38bee79042a707d11a1b8bb7928100aba9a1e

    SHA512

    b24d846f11ab36b04e9adea31b9cac635953feec55108694153bb33c440437dc3a4c83b0a9f2793899b4c812d8f9aa09eb256e5070114a1aea61de0fe0d9efbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    0c4b0067519bb00c9a2914ba5a133d3f

    SHA1

    86acb4526b73d6996327971201b28f5b58be3d7c

    SHA256

    30fd3b0d7e41558ee8e5ce2d5b6e3bb393291a66d6fa5c50383ad4acd22c5b04

    SHA512

    6d038ba6d1e7bc81fc0788e622c6a1e600c48aeb20b6649d3e5d510600a0c47a2216151a49e8aa44f25100260c17d5f72b42dad67fbe3d6db63dbec9c4f1bc37

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e92f4ebe97f8346ada65eb232309494b

    SHA1

    eb7f3b8c0a8c962f985bbf3f2632268b7b6d24e3

    SHA256

    51fc982457609a68024e07afc212f5d454b9663f9e3b58687e39c391bf98c69b

    SHA512

    ea87646a1a36b60d380372a6cea090bb6b6c3b7f4f2207606047d5f6f412b5c0d0930c4bb965799993feda49664962a3ae70cbb2f32d63c8f847bc5ca0c2648e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1237e755b2c71e0598659424adfde56a

    SHA1

    52cd6fa010b315e0595a84694d9b989ec9400c3c

    SHA256

    dec9642e582842d8634c4525f6f021f489762d76f20533795f15ac006c40853a

    SHA512

    ea83d70391276b0a6c0089d5fb6a2dceb8b5b1df21e97d5643132da50b74788228450ac6c7a1340c2ef5abe2cbc594dacd806461bc099e68c952ce4e4820b292

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8a80250fe35ea7bc97683d08de6f96d9

    SHA1

    c6f36fea419d98a7b52670be0f9e6e019753f3e8

    SHA256

    92bb7d77c67a9520e8a2ba5e971b74fc7f090eb85d47403478c26c19cbe6d365

    SHA512

    357f69e6667502d216f1ac4349aec8902831efd31634335307eb0c62e9735fc02bf3bc78321f88888835e0a37a4bc04ed7beb24386a93019c7dfc290bab1c9cd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bde55339a45a456ac635492924583c2a

    SHA1

    1c649d8d2f49c6c24542e07af81fb4086f38a001

    SHA256

    5edc7c366dbbbe167ac53596fb43a8cbbd71bf05d614656aadd5ead16793d81d

    SHA512

    0589d20c654c476f3572374ece8b031e138db2a5c56f67e31b6774febd3f8c77c8976ac04b1294b18a25b2057e72cb039355f8eb1b057d39aa211b5adb43820e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    17f97aa6b8b73fcb2f2805dc7900de0d

    SHA1

    35849c5f4155d21055edfcc3331c594def8c7197

    SHA256

    b42d35082a4eb052601194f952b8e40b37e4cdaed04f32367cd6d0dafd158710

    SHA512

    96e630f5f9042be6a12e2ea72b983dae81e9b89d1aef8e37c496f9ece36ad7146b29df16e28b7a365e71b73ddf0769a644ac7dc95528564aa8760c5ec7bdcead

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    83e8867968868f19516c49f283002247

    SHA1

    cc4119a5988f958d1a1a7bb91206e9ef39a8d693

    SHA256

    54be880ba1e58010f8a5a0ee7a5a0ee9c01afa412109ebf5d4676b01a7c16d33

    SHA512

    4b35c94489eb65f71b411a745e7ecfb2aceb5cdc7bb4be5eda66d698678c6daadd7a946d2c6512a16b3278d2ebe8cd7cda89480b64fb67bbad66f38a92f83e80

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5d23d569288724af10568caaf25ccac1

    SHA1

    d2843064c1b2663825ef768b2f942b8323d5ca81

    SHA256

    5e6c0b9ec2ab8df0e90f04e003316aeb191ea3fcccc5647a738fa6573abe361e

    SHA512

    e7ebeddb9dd8c6d3e3a6dbe74c0f50ed2da8704ad431e5ab23f48b9705da257a10c4960bab75695360df9fe15bddbe780be6d686bc2f8e5624ce941c36242ba8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1e613ce54de5875d818a1aa08071782e

    SHA1

    13fc43bd4f4446694ddb7d0a33086dd34f3b9fc7

    SHA256

    2bb49f5db170e0d228cb031facf10d27c7135bf855f9966bfee72775a21e9ef4

    SHA512

    1993b6405de262ea430fc06cb4d0ecf0fce459ac2be115f2943c6ada76a007b2cdd475dd65e99914ac9d10eed757db2977c18e98007e4e4f4e3a6df3a4185523

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6216412ed6ce8b5c5a461ae72e59913e

    SHA1

    9187556db4df6b34937a102e153dc56362f4b3af

    SHA256

    0aecca774054e4c2e66446e3542c00708f1fa4314ef5f56c194fca5d1586252e

    SHA512

    906085e6022271c47d208f978a741a5f0b3057b2d8f3c2476969601cd62146cf53d35a7f54f1a8b1c04d875c8dfaed2f038ee567e00fe196ed7942256552ed43

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    428374b57b0f3d424d23cfd3a8b4403d

    SHA1

    f3cd8f4146750d8629f7331dca9fc5a91f6dfc5c

    SHA256

    b885064635c5253e95545c107fab6ea3960c5816177b7b7c6a85be5a623e7f6b

    SHA512

    9cd7c3957909acf887622fcaaf484a817b5e79a80ecfcb225217573e229d89f5a7486d3a185e2a931a3d0825f9e6dc4e416ba1562f72b25a089b092ffaa71918

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c8a9d47b26d86aec7fea6f4ddc23f023

    SHA1

    b18719f123aae1782f0c4040be0a136f1a4cfa63

    SHA256

    954642d9cabdf7fd25d97ae973764bc97c5b8c78cf72b0970be5fcc20e999f27

    SHA512

    1aca954e9ace34b06b238e1ddab5abb69cad05718d4914119d3ad2edd998e7e4cab1a965f45f4eecbb2cfe2e2cc3722bec5ae519805cff705fa848fc75500003

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    70340130883aaf90ee56013ac54d8bc0

    SHA1

    497351e52d7bb9bfa04ce0b664fb859bcfc4714e

    SHA256

    0c35c3cb8f003cd6a530bebe8d88150989301a2b4e342e91a8aaf2364a2807b5

    SHA512

    11c5fae65911b842e51fa5a07a81ae3853ab8bc36323c5133fd08b507126a8a49717b035ea72d1aaa26ed4c8501a150281d5fd98826ddfa70c77345a5f0bdaf0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    48560439f402e120da80293ef1ef3667

    SHA1

    c88cb25d4cd557f740bc57394216c4c08298030b

    SHA256

    65b3169a43190d81174482ae8f9b594355b60938b2534ab4ff233c2d065a5a6e

    SHA512

    6b363d722af991de7eb3f386c46e08875a4aa73b8fda1566cc2f3f5fec672736a5f8759da6046fd123c77cf43d26201f8e35e7ccbfa7390828fd0af9aca4e0f6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3df55a2570a340ad4f995084f6f5e81a

    SHA1

    c61db43122434d6538dc0fa94e19d0bc434b6f7b

    SHA256

    56ddb1c35806d083c7af0e2ec7f5563b960562c1687ad4a3dbb9bae08f3ace12

    SHA512

    8547eea764ff744cb3255ac52a4e099ce0b4f0ca3e09708b990c8772a07ded4dc002d09e2d3430065c52db1c823d93c289fee57fd3cba47089b1bb2166cc2622

  • C:\Users\Admin\AppData\Local\Temp\Cab1CA7.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar1D79.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a